chore: add monitoring stack

2026-05-02 18:59:22 +02:00
parent e93ad8c9f0
commit 31878d6ffc
8 changed files with 380 additions and 0 deletions
@@ -0,0 +1,10 @@
+nodes:
+  indexer:
+    - name: wazuh.indexer
+      ip: "wazuh.indexer"
+  server:
+    - name: wazuh.manager
+      ip: "wazuh.manager"
+  dashboard:
+    - name: wazuh.dashboard
+      ip: "wazuh.dashboard"
@@ -0,0 +1,12 @@
+server.host: 0.0.0.0
+server.port: 5601
+opensearch.hosts: https://wazuh.indexer:9200
+opensearch.ssl.verificationMode: certificate
+opensearch.ssl.certificateAuthorities: ["/usr/share/wazuh-dashboard/certs/root-ca.pem"]
+opensearch.requestHeadersWhitelist: ["securitytenant","Authorization"]
+opensearch_security.multitenancy.enabled: false
+opensearch_security.readonly_mode.roles: ["kibana_read_only"]
+server.ssl.enabled: true
+server.ssl.key: "/usr/share/wazuh-dashboard/certs/wazuh-dashboard-key.pem"
+server.ssl.certificate: "/usr/share/wazuh-dashboard/certs/wazuh-dashboard.pem"
+uiSettings.overrides.defaultRoute: /app/wz-home
@@ -0,0 +1,44 @@
+network.host: "0.0.0.0"
+node.name: "wazuh.indexer"
+cluster.initial_master_nodes:
+  - "wazuh.indexer"
+cluster.name: "wazuh-cluster"
+
+path.data: /var/lib/wazuh-indexer
+path.logs: /var/log/wazuh-indexer
+
+plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
+plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
+plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
+plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
+plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
+plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
+plugins.security.ssl.http.enabled: true
+plugins.security.ssl.transport.enforce_hostname_verification: false
+plugins.security.ssl.transport.resolve_hostname: false
+
+plugins.security.authcz.admin_dn:
+  - "CN=admin,OU=Wazuh,O=Wazuh,L=California,C=US"
+plugins.security.nodes_dn:
+  - "CN=wazuh.indexer,OU=Wazuh,O=Wazuh,L=California,C=US"
+
+plugins.security.check_snapshot_restore_write_privileges: true
+plugins.security.enable_snapshot_restore_privilege: true
+plugins.security.restapi.roles_enabled:
+  - "all_access"
+  - "security_rest_api_access"
+
+plugins.security.system_indices.enabled: true
+plugins.security.system_indices.indices:
+  - ".opendistro-alerting-config"
+  - ".opendistro-alerting-alert*"
+  - ".opendistro-anomaly-results*"
+  - ".opendistro-anomaly-detector*"
+  - ".opendistro-anomaly-checkpoints"
+  - ".opendistro-anomaly-detection-state"
+  - ".opendistro-reports-*"
+  - ".opendistro-notifications-*"
+  - ".opendistro-notebooks"
+  - ".opensearch-observability"
+  - ".opendistro-asynchronous-search-response*"
+  - ".replication-metadata-store"
@@ -0,0 +1,34 @@
+#!/bin/bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+CERTS_DIR="$SCRIPT_DIR/certs"
+
+mkdir -p "$CERTS_DIR"
+cd /tmp
+
+echo "[*] Téléchargement de l'outil de génération de certificats Wazuh..."
+curl -sO https://packages.wazuh.com/4.9/wazuh-certs-tool.sh
+cp "$SCRIPT_DIR/config/certs.yml" config.yml
+
+echo "[*] Génération des certificats..."
+bash wazuh-certs-tool.sh -A
+
+echo "[*] Extraction des certificats..."
+tar -xf wazuh-install-files.tar
+
+cp wazuh-install-files/wazuh.indexer.pem         "$CERTS_DIR/"
+cp wazuh-install-files/wazuh.indexer-key.pem     "$CERTS_DIR/"
+cp wazuh-install-files/wazuh.manager.pem         "$CERTS_DIR/"
+cp wazuh-install-files/wazuh.manager-key.pem     "$CERTS_DIR/"
+cp wazuh-install-files/wazuh.dashboard.pem       "$CERTS_DIR/"
+cp wazuh-install-files/wazuh.dashboard-key.pem   "$CERTS_DIR/"
+cp wazuh-install-files/root-ca.pem               "$CERTS_DIR/"
+cp wazuh-install-files/root-ca.pem               "$CERTS_DIR/root-ca-manager.pem"
+cp wazuh-install-files/admin.pem                 "$CERTS_DIR/"
+cp wazuh-install-files/admin-key.pem             "$CERTS_DIR/"
+
+chmod 640 "$CERTS_DIR"/*.pem
+rm -rf /tmp/wazuh-install-files /tmp/wazuh-install-files.tar /tmp/wazuh-certs-tool.sh /tmp/config.yml
+
+echo "[OK] Certificats générés dans $CERTS_DIR"