SIEMbitwardendnscrypthome assistantjellyfinjitsimulti-factor authenticationnextcloudonlyofficepiholeraspberry pirocket.chatsyncthingtorwazuhwireguard
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
93 lines
2.3 KiB
93 lines
2.3 KiB
5 years ago
|
#!/bin/bash
|
||
|
|
|
||
|
|
# Wazuh
|
||
|
|
WAZUH_PROD_FILE="$1"
|
||
|
|
echo "ELASTIC_USERNAME=mistborn" > $WAZUH_PROD_FILE
|
||
|
|
echo "ELASTIC_PASSWORD=$MISTBORN_DEFAULT_PASSWORD" >> $WAZUH_PROD_FILE
|
||
|
|
|
||
|
|
echo "ELASTICSEARCH_USERNAME=mistborn" >> $WAZUH_PROD_FILE
|
||
|
|
echo "ELASTICSEARCH_PASSWORD=$MISTBORN_DEFAULT_PASSWORD" >> $WAZUH_PROD_FILE
|
||
|
|
|
||
|
|
# kibana odfe
|
||
|
|
# kibana-odfe/config/wazuh_app_config.sh
|
||
|
|
# https://wazuh
|
||
|
|
echo "WAZUH_API_URL=https://10.2.3.1" >> $WAZUH_PROD_FILE
|
||
|
|
echo "API_PORT=55000" >> $WAZUH_PROD_FILE
|
||
|
|
echo "API_USERNAME=wazuh-wui" >> $WAZUH_PROD_FILE
|
||
|
|
|
||
|
|
#API_PASSWORD=$(python3 -c "import secrets; import string; print(f''.join([secrets.choice(string.ascii_letters+string.digits) for x in range(32)]))")
|
||
|
|
|
||
|
|
API_PASSWORD_PYTHON=$(cat << EOF
|
||
|
|
|
||
|
|
import secrets
|
||
|
|
import random
|
||
|
|
import string
|
||
|
|
|
||
|
5 years ago
|
random_pass = ([secrets.choice("@$!*?-"),
|
||
|
5 years ago
|
secrets.choice(string.digits),
|
||
|
|
secrets.choice(string.ascii_lowercase),
|
||
|
|
secrets.choice(string.ascii_uppercase),
|
||
|
|
]
|
||
|
|
+ [secrets.choice(string.ascii_lowercase
|
||
|
|
+ string.ascii_uppercase
|
||
|
5 years ago
|
+ "@$!*?-"
|
||
|
5 years ago
|
+ string.digits) for i in range(12)])
|
||
|
|
|
||
|
|
random.shuffle(random_pass)
|
||
|
|
random_pass = ''.join(random_pass)
|
||
|
|
print(random_pass)
|
||
|
|
|
||
|
|
EOF
|
||
|
|
)
|
||
|
|
|
||
|
|
API_PASSWORD=$(python3 -c "${API_PASSWORD_PYTHON}")
|
||
|
|
|
||
|
|
echo "API_PASSWORD=${API_PASSWORD}" >> $WAZUH_PROD_FILE
|
||
|
|
|
||
|
|
# kibana-odfe/config/entrypoint.sh:
|
||
|
|
# https://elasticsearch:9200
|
||
|
|
echo "ELASTICSEARCH_URL=https://10.2.3.1:9200" >> $WAZUH_PROD_FILE
|
||
|
|
|
||
|
5 years ago
|
|
||
|
|
cat >> ${WAZUH_PROD_FILE}<< EOF
|
||
|
|
|
||
|
|
PATTERN="wazuh-alerts-*"
|
||
|
|
|
||
|
|
CHECKS_PATTERN=true
|
||
|
|
CHECKS_TEMPLATE=true
|
||
|
|
CHECKS_API=true
|
||
|
|
CHECKS_SETUP=true
|
||
|
|
|
||
|
|
EXTENSIONS_PCI=true
|
||
|
|
EXTENSIONS_GDPR=true
|
||
|
|
EXTENSIONS_HIPAA=true
|
||
|
|
EXTENSIONS_NIST=true
|
||
|
|
EXTENSIONS_TSC=true
|
||
|
|
EXTENSIONS_AUDIT=true
|
||
|
|
EXTENSIONS_OSCAP=false
|
||
|
|
EXTENSIONS_CISCAT=false
|
||
|
|
EXTENSIONS_AWS=false
|
||
|
|
EXTENSIONS_GCP=false
|
||
|
|
EXTENSIONS_VIRUSTOTAL=true
|
||
|
|
EXTENSIONS_OSQUERY=true
|
||
|
|
EXTENSIONS_DOCKER=true
|
||
|
|
|
||
|
|
APP_TIMEOUT=20000
|
||
|
|
|
||
|
|
API_SELECTOR=true
|
||
|
|
IP_SELECTOR=true
|
||
|
|
IP_IGNORE="[]"
|
||
|
|
|
||
|
|
WAZUH_MONITORING_ENABLED=true
|
||
|
|
WAZUH_MONITORING_FREQUENCY=900
|
||
|
|
WAZUH_MONITORING_SHARDS=2
|
||
|
|
WAZUH_MONITORING_REPLICAS=0
|
||
|
|
|
||
|
|
ADMIN_PRIVILEGES=true
|
||
|
|
|
||
|
|
EOF
|
||
|
|
|
||
|
5 years ago
|
echo "MISTBORN_DEFAULT_PASSWORD=$MISTBORN_DEFAULT_PASSWORD" >> $WAZUH_PROD_FILE
|
||
|
|
|
||
|
|
chmod 600 $WAZUH_PROD_FILE
|