CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-07 17:52:46 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix connectivity

Browse Source
This commit is contained in:
Mike Reeves
2018-10-31 16:53:23 -04:00
parent 8f9450625a
commit 0268f98f8e
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/elasticsearch/files/elasticsearch.yml
View File

@@ -1,4 +1,4 @@
{% if grains['role'] == 'so-master' %} {% if grains['role'] == 'so-SENSOR' or grains['role'] == 'so-eval' %}
{%- set esclustername = salt['pillar.get']('master:esclustername', '') %} {%- set esclustername = salt['pillar.get']('master:esclustername', '') %}
cluster.name: "{{ esclustername }}" cluster.name: "{{ esclustername }}"
network.host: 0.0.0.0 network.host: 0.0.0.0
@@ -19,6 +19,6 @@ discovery.zen.minimum_master_nodes: 1
path.logs: /var/log/elasticsearch path.logs: /var/log/elasticsearch
action.destructive_requires_name: true action.destructive_requires_name: true
transport.bind_host: 0.0.0.0 transport.bind_host: 0.0.0.0
transport.publish_host: {{ nodeip }} transport.publish_host: {{ nodeip }}
transport.publish_port: 9300 transport.publish_port: 9300
{%- endif %} {%- endif %}

2
salt/firewall/init.sls
View File

@@ -87,7 +87,7 @@ enable_docker_user_established:
- ctstate: 'RELATED,ESTABLISHED' - ctstate: 'RELATED,ESTABLISHED'
# Rules if you are a Master # Rules if you are a Master
{% if grains['role'] == 'so-master' %} {% if grains['role'] == 'so-SENSOR' or grains['role'] == 'so-eval' %}
#This should be more granular #This should be more granular
iptables_allow_master_docker: iptables_allow_master_docker:
iptables.insert: iptables.insert:

2
so-setup-network.sh
View File

@@ -1338,9 +1338,9 @@ if (whiptail_you_sure); then
configure_minion eval configure_minion eval
set_node_type set_node_type
node_pillar node_pillar
set_initial_firewall_policy
salt_firstcheckin salt_firstcheckin
accept_salt_key_local accept_salt_key_local
set_initial_firewall_policy
salt_checkin_message salt_checkin_message
salt_checkin salt_checkin
checkin_at_boot checkin_at_boot