Removing Wazuh service and used configs.
Auto-Unseal for Vault / Unseal Vault (push) Failing after 12m53s

This commit is contained in:
2025-07-03 15:25:07 -04:00
parent 55d5441a9a
commit 94515db6f4
17 changed files with 1 additions and 1795 deletions
+1 -169
View File
@@ -5904,146 +5904,6 @@ services:
source: /var/run/docker.sock
target: /var/run/docker.sock
type: bind
# wazuh-certs-generator:
# container_name: wazuh-certs-generator
# environment:
# HTTP_PROXY: wazuh.trez.wtf
# image: wazuh/wazuh-certs-generator:0.0.2
# hostname: wazuh-certs-generator
# volumes:
# - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/:/certificates/
# - ${DOCKER_VOLUME_CONFIG}/wazuh/certs.yml:/config/certs.yml
# wazuh-agent:
# container_name: wazuh.agent
# environment:
# JOIN_MANAGER_PROTOCOL: https
# JOIN_MANAGER_MASTER_HOST: wazuh.manager
# JOIN_MANAGER_WORKER_HOST: wazuh.manager
# JOIN_MANAGER_USER: wazuh-wui
# JOIN_MANAGER_PASSWORD: ${WAZUH_API_PASSWORD}
# JOIN_MANAGER_API_PORT: 55000
# JOIN_MANAGER_PORT: 1514
# VIRUS_TOTAL_KEY: ${VIRUS_TOTAL_API_KEY}
# DOCKER_HOST: tcp://dockerproxy:2375
# hostname: wazuh.agent
# image: kennyopennix/wazuh-agent:4.11.1
# networks:
# default: null
# restart: unless-stopped
wazuh-dashboard:
container_name: wazuh-dashboard
depends_on:
wazuh-indexer:
condition: service_started
required: true
wazuh-manager:
condition: service_started
required: true
restart: true
environment:
INDEXER_USERNAME: admin
INDEXER_PASSWORD: ${WAZUH_INDEXER_PASSWORD}
WAZUH_API_URL: https://wazuh-manager
DASHBOARD_USERNAME: kibanaserver
DASHBOARD_PASSWORD: ${WAZUH_KIBANA_PASSWORD}
API_USERNAME: wazuh-wui
API_PASSWORD: ${WAZUH_API_PASSWORD}
hostname: wazuh-dashboard
image: wazuh/wazuh-dashboard:4.12.0
labels:
swag: enable
swag_proto: https
swag_port: 5601
swag_url: wsec.${MY_TLD}
swag.uptime-kuma.enabled: true
swag.uptime-kuma.monitor.url: https://wazuh.${MY_TLD}
homepage.group: Privacy/Security
homepage.name: Wazuh
homepage.href: https://wazuh.${MY_TLD}
homepage.icon: wazuh.svg
homepage.description: OSS Security Platform for XDR/SIEM
links:
- wazuh-indexer:wazuh-indexer
- wazuh-manager:wazuh-manager
ports:
- 5601:5601/tcp
restart: always
volumes:
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.dashboard.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.dashboard-key.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard-key.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-dashboard/certs/root-ca.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/dashboard/opensearch_dashboards.yml:/usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
- ${DOCKER_VOLUME_CONFIG}/wazuh/dashboard/wazuh.yml:/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
- wazuh-dashboard-config:/usr/share/wazuh-dashboard/data/wazuh/config
- wazuh-dashboard-custom:/usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
wazuh-indexer:
container_name: wazuh-indexer
environment:
OPENSEARCH_JAVA_OPTS: -Xms512m -Xmx512m
hostname: wazuh-indexer
image: wazuh/wazuh-indexer:4.12.0
ports:
- 19186:9200/tcp
restart: always
ulimits:
memlock:
hard: -1
soft: -1
nofile:
hard: 65536
soft: 65536
volumes:
- wazuh-indexer-data:/var/lib/wazuh-indexer
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.key
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
wazuh-manager:
container_name: wazuh-manager
environment:
INDEXER_URL: https://wazuh-indexer:9200
INDEXER_USERNAME: admin
INDEXER_PASSWORD: ${WAZUH_INDEXER_PASSWORD}
FILEBEAT_SSL_VERIFICATION_MODE: full
SSL_CERTIFICATE_AUTHORITIES: /etc/ssl/root-ca.pem
SSL_CERTIFICATE: /etc/ssl/filebeat.pem
SSL_KEY: /etc/ssl/filebeat.key
API_USERNAME: wazuh-wui
API_PASSWORD: ${WAZUH_API_PASSWORD}
hostname: wazuh-manager
image: wazuh/wazuh-manager:4.12.0
ports:
- 1514:1514/tcp
- 1515:1515/tcp
- 514:514/udp
- 55000:55000/tcp
restart: always
ulimits:
memlock:
hard: -1
soft: -1
nofile:
hard: 655360
soft: 655360
volumes:
- wazuh_api_configuration:/var/ossec/api/configuration
- wazuh_etc:/var/ossec/etc
- wazuh_logs:/var/ossec/logs
- wazuh_queue:/var/ossec/queue
- wazuh_var_multigroups:/var/ossec/var/multigroups
- wazuh_integrations:/var/ossec/integrations
- wazuh_active_response:/var/ossec/active-response/bin
- wazuh_agentless:/var/ossec/agentless
- wazuh_wodles:/var/ossec/wodles
- wazuh_filebeat_etc:/etc/filebeat
- wazuh_filebeat_var:/var/lib/filebeat
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/root-ca.pem:/etc/ssl/root-ca.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.manager.pem:/etc/ssl/filebeat.pem
- ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.manager-key.pem:/etc/ssl/filebeat.key
- ${DOCKER_VOLUME_CONFIG}/wazuh/manager/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf
web-check:
container_name: web-check
image: lissy93/web-check
@@ -6454,32 +6314,4 @@ volumes:
wallos-db:
name: wallos-db
wallos-logos:
name: wallos-logos
wazuh-dashboard-config:
name: wazuh-dashboard-config
wazuh-dashboard-custom:
name: wazuh-dashboard-custom
wazuh-indexer-data:
name: wazuh-indexer-data
wazuh_active_response:
name: wazuh_active_response
wazuh_filebeat_etc:
name: wazuh_filebeat_etc
wazuh_filebeat_var:
name: wazuh_filebeat_var
wazuh_agentless:
name: wazuh_agentless
wazuh_api_configuration:
name: wazuh_api_configuration
wazuh_etc:
name: wazuh_etc
wazuh_integrations:
name: wazuh_integrations
wazuh_logs:
name: wazuh_logs
wazuh_queue:
name: wazuh_queue
wazuh_var_multigroups:
name: wazuh_var_multigroups
wazuh_wodles:
name: wazuh_wodles
name: wallos-logos