CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-15 21:52:47 +01:00
Code Issues Packages Projects Releases Wiki Activity

Things like this are why I hate Java

Browse Source
This commit is contained in:
Mike Reeves
2020-08-10 22:10:03 -04:00
parent d00231af06
commit 6007a6c4d8
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
salt/elasticsearch/files/elasticsearch.yml
View File

@@ -27,12 +27,12 @@ cluster.routing.allocation.disk.watermark.flood_stage: 98%
xpack.security.enabled: true
xpack.security.http.ssl.enabled: true
xpack.security.transport.ssl.enabled: true
xpack.security.http.ssl.key: /etc/elasticsearch/elasticsearch.key
xpack.security.http.ssl.certificate: /etc/elasticsearch/elasticsearch.crt
xpack.security.http.ssl.certificate_authorities: /etc/elasticsearch/ca.crt
xpack.security.transport.ssl.key: /etc/elasticsearch/elasticsearch.key
xpack.security.transport.ssl.certificate: /etc/elasticsearch/elasticsearch.crt
xpack.security.transport.ssl.certificate_authorities: /etc/elasticsearch/ca.crt
xpack.security.http.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
xpack.security.http.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
xpack.security.http.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
xpack.security.transport.ssl.key: /usr/share/elasticsearch/config/elasticsearch.key
xpack.security.transport.ssl.certificate: /usr/share/elasticsearch/config/elasticsearch.crt
xpack.security.transport.ssl.certificate_authorities: /usr/share/elasticsearch/config/ca.crt
{%- endif %}
node.attr.box_type: {{ NODE_ROUTE_TYPE }}
node.name: {{ ESCLUSTERNAME }}

6
salt/elasticsearch/init.sls
View File

@@ -193,9 +193,9 @@ so-elasticsearch:
- /opt/so/log/elasticsearch:/var/log/elasticsearch:rw
- /opt/so/conf/ca/cacerts:/etc/pki/ca-trust/extracted/java/cacerts:ro
{%- if FEATURES is sameas true %}
- /etc/pki/ca.crt:/etc/elasticsearch/ca.crt:ro
- /etc/pki/elasticsearch.key:/etc/elasticsearch/elasticsearch.key:ro
- /etc/pki/elasticsearch.crt:/etc/elasticsearch/elasticsearch.crt:ro
- /etc/pki/ca.crt:/usr/share/elasticsearch/config/ca.crt:ro
- /etc/pki/elasticsearch.key:/usr/share/elasticsearch/config/elasticsearch.key:ro
- /etc/pki/elasticsearch.crt:/usr/share/elasticsearch/config/elasticsearch.crt:ro
{%- endif %}
- watch:
- file: cacertz