Wazuh redeployment (v4.12.0).

2025-07-02 10:03:44 -04:00
parent c4cbad724d
commit b5f668687e
5 changed files with 495 additions and 4 deletions
@@ -1231,12 +1231,12 @@ services:
      swag.uptime-kuma.monitor.interval: 300
      ### EXAMPLE CF TUNNEL LABELS ###
      # Enable DockFlare management for this container
-      # - "cloudflare.tunnel.enable=true" 
+      # - "cloudflare.tunnel.enable=true"
      # The public hostname to expose
      # - "cloudflare.tunnel.hostname=my-service.example.com"
      # The internal service address (protocol://container_name_or_ip:port)
      # Service type (http, https, tcp, ssh, rdp, http_status) is inferred from the prefix.
-      # - "cloudflare.tunnel.service=http://my-service:80" 
+      # - "cloudflare.tunnel.service=http://my-service:80"
      # Optional: Specify a URL path. Only requests to hostname/path will match.
      # - "cloudflare.tunnel.path=/app"
      # Optional: Specify a different Cloudflare Zone for this hostname
@@ -4827,7 +4827,7 @@ services:
      # REDIS_PASSWORD: # [Optional] Support for secured redis
      # [Optional] Will enable asynchronous tasks (all disabled by default)
      # Important: Do NOT wrap the cron expression in quotes
-      ENABLE_RESCAN_ON_FILESYSTEM_CHANGE: true # Runs a quick scan on the library when a file is added or removed 
+      ENABLE_RESCAN_ON_FILESYSTEM_CHANGE: true # Runs a quick scan on the library when a file is added or removed
      RESCAN_ON_FILESYSTEM_CHANGE_DELAY: 5 # Delay in seconds before running the quick scan (default: 5)
      ENABLE_SCHEDULED_RESCAN: true # Runs a quick scan on the library at a given time
      SCHEDULED_RESCAN_CRON: 0 3 * * * # Cron expression for the scheduled scan (default: 0 3 * * * At 3:00 AM every day)
@@ -5904,6 +5904,146 @@ services:
        source: /var/run/docker.sock
        target: /var/run/docker.sock
        type: bind
+  # wazuh-certs-generator:
+  #   container_name: wazuh-certs-generator
+  #   environment:
+  #     HTTP_PROXY: wazuh.trez.wtf
+  #   image: wazuh/wazuh-certs-generator:0.0.2
+  #   hostname: wazuh-certs-generator
+  #   volumes:
+  #     - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/:/certificates/
+  #     - ${DOCKER_VOLUME_CONFIG}/wazuh/certs.yml:/config/certs.yml
+  # wazuh-agent:
+  #   container_name: wazuh.agent
+  #   environment:
+  #     JOIN_MANAGER_PROTOCOL: https
+  #     JOIN_MANAGER_MASTER_HOST: wazuh.manager
+  #     JOIN_MANAGER_WORKER_HOST: wazuh.manager
+  #     JOIN_MANAGER_USER: wazuh-wui
+  #     JOIN_MANAGER_PASSWORD: ${WAZUH_API_PASSWORD}
+  #     JOIN_MANAGER_API_PORT: 55000
+  #     JOIN_MANAGER_PORT: 1514
+  #     VIRUS_TOTAL_KEY: ${VIRUS_TOTAL_API_KEY}
+  #     DOCKER_HOST: tcp://dockerproxy:2375
+  #   hostname: wazuh.agent
+  #   image: kennyopennix/wazuh-agent:4.11.1
+  #   networks:
+  #     default: null
+  #   restart: unless-stopped
+  wazuh-dashboard:
+    container_name: wazuh-dashboard
+    depends_on:
+      wazuh-indexer:
+        condition: service_started
+        required: true
+      wazuh-manager:
+        condition: service_started
+        required: true
+        restart: true
+    environment:
+      INDEXER_USERNAME: admin
+      INDEXER_PASSWORD: ${WAZUH_INDEXER_PASSWORD}
+      WAZUH_API_URL: https://wazuh.manager
+      DASHBOARD_USERNAME: kibanaserver
+      DASHBOARD_PASSWORD: ${WAZUH_KIBANA_PASSWORD}
+      API_USERNAME: wazuh-wui
+      API_PASSWORD: ${WAZUH_API_PASSWORD}
+    hostname: wazuh-dashboard
+    image: wazuh/wazuh-dashboard:4.12.0
+    labels:
+      swag: enable
+      swag_proto: https
+      swag_port: 5601
+      swag_url: wsec.${MY_TLD}
+      swag.uptime-kuma.enabled: true
+      swag.uptime-kuma.monitor.url: https://wazuh.${MY_TLD}
+      homepage.group: Privacy/Security
+      homepage.name: Wazuh
+      homepage.href: https://wazuh.${MY_TLD}
+      homepage.icon: wazuh.svg
+      homepage.description: OSS Security Platform for XDR/SIEM
+    links:
+      - wazuh-indexer:wazuh-indexer
+      - wazuh-manager:wazuh-manager
+    ports:
+      - 5601:5601/tcp
+    restart: always
+    volumes:
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.dashboard.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.dashboard-key.pem:/usr/share/wazuh-dashboard/certs/wazuh-dashboard-key.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-dashboard/certs/root-ca.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/dashboard/opensearch_dashboards.yml:/usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/dashboard/wazuh.yml:/usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
+      - wazuh-dashboard-config:/usr/share/wazuh-dashboard/data/wazuh/config
+      - wazuh-dashboard-custom:/usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
+  wazuh-indexer:
+    container_name: wazuh-indexer
+    environment:
+      OPENSEARCH_JAVA_OPTS: -Xms512m -Xmx512m
+    hostname: wazuh-indexer
+    image: wazuh/wazuh-indexer:4.12.0
+    ports:
+      - 19186:9200/tcp
+    restart: always
+    ulimits:
+      memlock:
+        hard: -1
+        soft: -1
+      nofile:
+        hard: 65536
+        soft: 65536
+    volumes:
+      - wazuh-indexer-data:/var/lib/wazuh-indexer
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.key
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer/internal_users.yml:/usr/share/wazuh-indexer/opensearch-security/internal_users.yml
+  wazuh-manager:
+    container_name: wazuh-manager
+    environment:
+      INDEXER_URL: https://wazuh.indexer:9200
+      INDEXER_USERNAME: admin
+      INDEXER_PASSWORD: ${WAZUH_INDEXER_PASSWORD}
+      FILEBEAT_SSL_VERIFICATION_MODE: full
+      SSL_CERTIFICATE_AUTHORITIES: /etc/ssl/root-ca.pem
+      SSL_CERTIFICATE: /etc/ssl/filebeat.pem
+      SSL_KEY: /etc/ssl/filebeat.key
+      API_USERNAME: wazuh-wui
+      API_PASSWORD: ${WAZUH_API_PASSWORD}
+    hostname: wazuh-manager
+    image: wazuh/wazuh-manager:4.12.0
+    ports:
+      - 1514:1514/tcp
+      - 1515:1515/tcp
+      - 514:514/udp
+      - 55000:55000/tcp
+    restart: always
+    ulimits:
+      memlock:
+        hard: -1
+        soft: -1
+      nofile:
+        hard: 655360
+        soft: 655360
+    volumes:
+      - wazuh_api_configuration:/var/ossec/api/configuration
+      - wazuh_etc:/var/ossec/etc
+      - wazuh_logs:/var/ossec/logs
+      - wazuh_queue:/var/ossec/queue
+      - wazuh_var_multigroups:/var/ossec/var/multigroups
+      - wazuh_integrations:/var/ossec/integrations
+      - wazuh_active_response:/var/ossec/active-response/bin
+      - wazuh_agentless:/var/ossec/agentless
+      - wazuh_wodles:/var/ossec/wodles
+      - wazuh_filebeat_etc:/etc/filebeat
+      - wazuh_filebeat_var:/var/lib/filebeat
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/root-ca.pem:/etc/ssl/root-ca.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.manager.pem:/etc/ssl/filebeat.pem
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/indexer_ssl_certs/wazuh.manager-key.pem:/etc/ssl/filebeat.key
+      - ${DOCKER_VOLUME_CONFIG}/wazuh/manager/wazuh_manager.conf:/wazuh-config-mount/etc/ossec.conf
  web-check:
    container_name: web-check
    image: lissy93/web-check
@@ -6314,4 +6454,32 @@ volumes:
  wallos-db:
    name: wallos-db
  wallos-logos:
-    name: wallos-logos
+    name: wallos-logos
+  wazuh-dashboard-config:
+    name: wazuh-dashboard-config
+  wazuh-dashboard-custom:
+    name: wazuh-dashboard-custom
+  wazuh-indexer-data:
+    name: wazuh-indexer-data
+  wazuh_active_response:
+    name: wazuh_active_response
+  wazuh_filebeat_etc:
+    name: wazuh_filebeat_etc
+  wazuh_filebeat_var:
+    name: wazuh_filebeat_var
+  wazuh_agentless:
+    name: wazuh_agentless
+  wazuh_api_configuration:
+    name: wazuh_api_configuration
+  wazuh_etc:
+    name: wazuh_etc
+  wazuh_integrations:
+    name: wazuh_integrations
+  wazuh_logs:
+    name: wazuh_logs
+  wazuh_queue:
+    name: wazuh_queue
+  wazuh_var_multigroups:
+    name: wazuh_var_multigroups
+  wazuh_wodles:
+    name: wazuh_wodles