CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-18 23:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Common Module - Add SSL to Kibana

Browse Source
This commit is contained in:
Mike Reeves
2018-10-11 12:25:41 -04:00
parent 995aeebf58
commit 4272b439fd
3 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
salt/common/nginx/nginx.conf.so-master
View File

@@ -84,7 +84,7 @@ http {
#include /etc/nginx/default.d/*.conf; #include /etc/nginx/default.d/*.conf;
location / { location / {
try_files $uri $uri.html index.html; try_files $uri $uri.html /index.html;
} }
location /app/kibana { location /app/kibana {
@@ -93,7 +93,7 @@ http {
proxy_set_header Connection 'upgrade'; proxy_set_header Connection 'upgrade';
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade; proxy_cache_bypass $http_upgrade;
proxy_pass http://{{ masterip }}:5601/; proxy_pass http://{{ masterip }}:5601/app/kibana;
} }
error_page 404 /404.html; error_page 404 /404.html;

3
salt/kibana/etc/kibana.yml
View File

@@ -9,3 +9,6 @@ elasticsearch.url: http://172.17.0.9:9200
#xpack.monitoring.ui.container.elasticsearch.enabled: true #xpack.monitoring.ui.container.elasticsearch.enabled: true
elasticsearch.requestTimeout: 90000 elasticsearch.requestTimeout: 90000
logging.dest: /var/log/kibana/kibana.log logging.dest: /var/log/kibana/kibana.log
ssl:
key: /etc/pki/server.key
cert: /etc/pki/serer.crt

2
salt/kibana/init.sls
View File

@@ -72,5 +72,7 @@ so-kibana:
- /opt/so/log/kibana:/var/log/kibana:rw - /opt/so/log/kibana:/var/log/kibana:rw
- /opt/so/conf/kibana/custdashboards:/usr/share/kibana/custdashboards:ro - /opt/so/conf/kibana/custdashboards:/usr/share/kibana/custdashboards:ro
- /sys/fs/cgroup:/sys/fs/cgroup:ro - /sys/fs/cgroup:/sys/fs/cgroup:ro
- /etc/pki/masterssl.crt:/etc/pki/server.crt:ro
- /etc/pki/masterssl.key:/etc/pki/server.key:ro
- port_bindings: - port_bindings:
- 0.0.0.0:5601:5601 - 0.0.0.0:5601:5601