From 3a32b007666906b641edb9ea0e8ed35ba8b5e74e Mon Sep 17 00:00:00 2001 From: Xor290 Date: Mon, 4 May 2026 22:08:36 +0200 Subject: [PATCH] chore: fix --- .gitignore | 1 + monitoring/docker-compose.yml | 25 ++++++++++--------- monitoring/dozzle/users.yml | 6 +++++ .../config/wazuh_indexer/wazuh.indexer.yml | 16 +++++++----- monitoring/wazuh/generate-certs.sh | 20 ++++----------- 5 files changed, 35 insertions(+), 33 deletions(-) create mode 100644 monitoring/dozzle/users.yml diff --git a/.gitignore b/.gitignore index 65fffc95..909a4d76 100644 --- a/.gitignore +++ b/.gitignore @@ -8,3 +8,4 @@ frontend-prep2/ scripts/data.txt scripts/data2.txt scripts/data3.txt +frontend-admin/node_modules/ diff --git a/monitoring/docker-compose.yml b/monitoring/docker-compose.yml index 4b5a5032..8639c5b5 100644 --- a/monitoring/docker-compose.yml +++ b/monitoring/docker-compose.yml @@ -6,10 +6,10 @@ services: restart: unless-stopped volumes: - /var/run/docker.sock:/var/run/docker.sock:ro + - ./dozzle/users.yml:/data/users.yml:ro environment: - DOZZLE_BASE: / - DOZZLE_USERNAME: ${DOZZLE_USERNAME} - DOZZLE_PASSWORD: ${DOZZLE_PASSWORD} + DOZZLE_AUTH_PROVIDER: simple + DOZZLE_AUTH_TTL: 48h DOZZLE_REMOTE_AGENT: "5.181.0.112:7007|demo-uber|VPS,185.234.9.102:7007|mln-uber|VPS" networks: - monitoring_net @@ -34,7 +34,7 @@ services: # ─── Wazuh Manager ──────────────────────────────────────── wazuh.manager: - image: wazuh/wazuh-manager:4.9.2 + image: wazuh/wazuh-manager:4.14.4 hostname: wazuh.manager container_name: wazuh_manager restart: unless-stopped @@ -79,7 +79,7 @@ services: # ─── Wazuh Indexer (OpenSearch) ─────────────────────────── wazuh.indexer: - image: wazuh/wazuh-indexer:4.9.2 + image: wazuh/wazuh-indexer:4.14.4 hostname: wazuh.indexer container_name: wazuh_indexer restart: unless-stopped @@ -95,18 +95,19 @@ services: - INDEXER_PASSWORD=${WAZUH_INDEXER_PASSWORD} volumes: - wazuh_indexer_data:/var/lib/wazuh-indexer - - ./wazuh/certs/root-ca.pem:/usr/share/wazuh-indexer/certs/root-ca.pem - - ./wazuh/certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.key - - ./wazuh/certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/certs/wazuh.indexer.pem - - ./wazuh/certs/admin.pem:/usr/share/wazuh-indexer/certs/admin.pem - - ./wazuh/certs/admin-key.pem:/usr/share/wazuh-indexer/certs/admin-key.pem - - ./wazuh/config/wazuh_indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/opensearch.yml + - ./wazuh/certs/root-ca.pem:/usr/share/wazuh-indexer/config/certs/root-ca.pem + - ./wazuh/certs/wazuh.indexer-key.pem:/usr/share/wazuh-indexer/config/certs/wazuh.indexer.key + - ./wazuh/certs/wazuh.indexer.pem:/usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem + - ./wazuh/certs/admin.pem:/usr/share/wazuh-indexer/config/certs/admin.pem + - ./wazuh/certs/admin-key.pem:/usr/share/wazuh-indexer/config/certs/admin-key.pem + - ./wazuh/config/wazuh_indexer/wazuh.indexer.yml:/usr/share/wazuh-indexer/config/opensearch.yml + - ./wazuh/config/wazuh_indexer/internal_users.yml:/usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml networks: - monitoring_net # ─── Wazuh Dashboard ────────────────────────────────────── wazuh.dashboard: - image: wazuh/wazuh-dashboard:4.9.2 + image: wazuh/wazuh-dashboard:4.14.4 hostname: wazuh.dashboard container_name: wazuh_dashboard restart: unless-stopped diff --git a/monitoring/dozzle/users.yml b/monitoring/dozzle/users.yml new file mode 100644 index 00000000..e27627b4 --- /dev/null +++ b/monitoring/dozzle/users.yml @@ -0,0 +1,6 @@ +users: + admin: + name: Admin + email: admin@uber-stup.club + password: $2a$11$/JnHCr3JYFZxuoY5COpjM.2MMJUYyKsFmgu/5qphIrbDLVz1qTCOC + roles: download diff --git a/monitoring/wazuh/config/wazuh_indexer/wazuh.indexer.yml b/monitoring/wazuh/config/wazuh_indexer/wazuh.indexer.yml index c5bd84f9..51fb84e8 100644 --- a/monitoring/wazuh/config/wazuh_indexer/wazuh.indexer.yml +++ b/monitoring/wazuh/config/wazuh_indexer/wazuh.indexer.yml @@ -7,12 +7,12 @@ cluster.name: "wazuh-cluster" path.data: /var/lib/wazuh-indexer path.logs: /var/log/wazuh-indexer -plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem -plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key -plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem -plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem -plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key -plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem +plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem +plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key +plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/config/certs/root-ca.pem +plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem +plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key +plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/config/certs/root-ca.pem plugins.security.ssl.http.enabled: true plugins.security.ssl.transport.enforce_hostname_verification: false plugins.security.ssl.transport.resolve_hostname: false @@ -42,3 +42,7 @@ plugins.security.system_indices.indices: - ".opensearch-observability" - ".opendistro-asynchronous-search-response*" - ".replication-metadata-store" + +discovery.type: single-node +plugins.security.allow_default_init_securityindex: true +cluster.routing.allocation.disk.threshold_enabled: false diff --git a/monitoring/wazuh/generate-certs.sh b/monitoring/wazuh/generate-certs.sh index 4268bdcc..4fcebfff 100755 --- a/monitoring/wazuh/generate-certs.sh +++ b/monitoring/wazuh/generate-certs.sh @@ -8,27 +8,17 @@ mkdir -p "$CERTS_DIR" cd /tmp echo "[*] Téléchargement de l'outil de génération de certificats Wazuh..." -curl -sO https://packages.wazuh.com/4.9/wazuh-certs-tool.sh +curl -sO https://packages.wazuh.com/4.14/wazuh-certs-tool.sh cp "$SCRIPT_DIR/config/certs.yml" config.yml echo "[*] Génération des certificats..." bash wazuh-certs-tool.sh -A -echo "[*] Extraction des certificats..." -tar -xf wazuh-install-files.tar - -cp wazuh-install-files/wazuh.indexer.pem "$CERTS_DIR/" -cp wazuh-install-files/wazuh.indexer-key.pem "$CERTS_DIR/" -cp wazuh-install-files/wazuh.manager.pem "$CERTS_DIR/" -cp wazuh-install-files/wazuh.manager-key.pem "$CERTS_DIR/" -cp wazuh-install-files/wazuh.dashboard.pem "$CERTS_DIR/" -cp wazuh-install-files/wazuh.dashboard-key.pem "$CERTS_DIR/" -cp wazuh-install-files/root-ca.pem "$CERTS_DIR/" -cp wazuh-install-files/root-ca.pem "$CERTS_DIR/root-ca-manager.pem" -cp wazuh-install-files/admin.pem "$CERTS_DIR/" -cp wazuh-install-files/admin-key.pem "$CERTS_DIR/" +echo "[*] Copie des certificats..." +cp /tmp/wazuh-certificates/*.pem "$CERTS_DIR/" +cp /tmp/wazuh-certificates/root-ca.pem "$CERTS_DIR/root-ca-manager.pem" chmod 640 "$CERTS_DIR"/*.pem -rm -rf /tmp/wazuh-install-files /tmp/wazuh-install-files.tar /tmp/wazuh-certs-tool.sh /tmp/config.yml +rm -rf /tmp/wazuh-certificates /tmp/wazuh-install-files /tmp/wazuh-install-files.tar /tmp/wazuh-certs-tool.sh /tmp/config.yml echo "[OK] Certificats générés dans $CERTS_DIR"