mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
@@ -389,6 +389,17 @@ enable_standard_analyst_3000_{{ip}}:
|
||||
- position: 1
|
||||
- save: True
|
||||
|
||||
enable_standard_analyst_7000_{{ip}}:
|
||||
iptables.insert:
|
||||
- table: filter
|
||||
- chain: DOCKER-USER
|
||||
- jump: ACCEPT
|
||||
- proto: tcp
|
||||
- source: {{ ip }}
|
||||
- dport: 7000
|
||||
- position: 1
|
||||
- save: True
|
||||
|
||||
enable_standard_analyst_9000_{{ip}}:
|
||||
iptables.insert:
|
||||
- table: filter
|
||||
|
||||
12
salt/soctopus/files/SOCtopus.conf
Normal file
12
salt/soctopus/files/SOCtopus.conf
Normal file
@@ -0,0 +1,12 @@
|
||||
{%- set ip = salt['pillar.get']('static:masterip', '') %}
|
||||
|
||||
[es]
|
||||
es_url = http://{{ ip }}:9200
|
||||
|
||||
[hive]
|
||||
hive_url = http://{{ ip }}:9000
|
||||
hive_key = YOURHIVEAPIKEYHERE -- TO LATER BE REPLACED BY JINJA
|
||||
|
||||
[log]
|
||||
logfile = /tmp/soctopus.log
|
||||
|
||||
24
salt/soctopus/init.sls
Normal file
24
salt/soctopus/init.sls
Normal file
@@ -0,0 +1,24 @@
|
||||
soctopusdir:
|
||||
file.directory:
|
||||
- name: /opt/so/conf/soctopus
|
||||
- user: 939
|
||||
- group: 939
|
||||
- makedirs: True
|
||||
|
||||
soctopussync:
|
||||
file.recurse:
|
||||
- name: /opt/so/conf/soctopus
|
||||
- source: salt://soctopus/files
|
||||
- user: 939
|
||||
- group: 939
|
||||
- template: jinja
|
||||
|
||||
so-soctopus:
|
||||
docker_container.running:
|
||||
- image: wlambert/soctopus
|
||||
- hostname: soctopus
|
||||
- binds:
|
||||
- /opt/so/conf/soctopus/SOCtopus.conf:/SOCtopus/SOCtopus.conf:ro
|
||||
- port_bindings:
|
||||
- 0.0.0.0:7000:7000
|
||||
|
||||
Reference in New Issue
Block a user