diff --git a/salt/idstools/etc/rulecat.conf b/salt/idstools/etc/rulecat.conf index a7e28afd3..90de18277 100644 --- a/salt/idstools/etc/rulecat.conf +++ b/salt/idstools/etc/rulecat.conf @@ -6,7 +6,7 @@ {%- if ISAIRGAP is sameas true -%} --merged=/opt/so/rules/nids/all.rules --local=/opt/so/rules/nids/local.rules ---url=http://{{ MANAGERIP }}/repo/rules/emerging-all.rules +--url=http://{{ MANAGERIP }}:7788/rules/emerging-all.rules --disable=/opt/so/idstools/etc/disable.conf --enable=/opt/so/idstools/etc/enable.conf --modify=/opt/so/idstools/etc/modify.conf diff --git a/salt/nginx/etc/nginx.conf.so-eval b/salt/nginx/etc/nginx.conf.so-eval index 1e1c83675..cfc37a626 100644 --- a/salt/nginx/etc/nginx.conf.so-eval +++ b/salt/nginx/etc/nginx.conf.so-eval @@ -67,6 +67,23 @@ http { server_name _; return 301 https://$host$request_uri; } + {%- if ISAIRGAP is sameas true %} + server { + listen 7788; + server_name _; + root /opt/socore/html/repo; + location /rules/ { + allow all; + sendfile on; + sendfile_max_chunk 1m; + autoindex on; + autoindex_exact_size off; + autoindex_format html; + autoindex_localtime on; + } + } + {%- endif %} + {% if FLEET_MANAGER %} server { diff --git a/salt/nginx/etc/nginx.conf.so-manager b/salt/nginx/etc/nginx.conf.so-manager index 7118c196a..86122602c 100644 --- a/salt/nginx/etc/nginx.conf.so-manager +++ b/salt/nginx/etc/nginx.conf.so-manager @@ -71,7 +71,7 @@ http { server { listen 7788; server_name _; - root /opt/socore/html/repo + root /opt/socore/html/repo; location /rules/ { allow all; sendfile on; diff --git a/salt/nginx/etc/nginx.conf.so-managersearch b/salt/nginx/etc/nginx.conf.so-managersearch index 012a91ba3..f3dd219b7 100644 --- a/salt/nginx/etc/nginx.conf.so-managersearch +++ b/salt/nginx/etc/nginx.conf.so-managersearch @@ -67,6 +67,23 @@ http { server_name _; return 301 https://$host$request_uri; } + {%- if ISAIRGAP is sameas true %} + server { + listen 7788; + server_name _; + root /opt/socore/html/repo; + location /rules/ { + allow all; + sendfile on; + sendfile_max_chunk 1m; + autoindex on; + autoindex_exact_size off; + autoindex_format html; + autoindex_localtime on; + } + } + {%- endif %} + {% if FLEET_MANAGER %} server { diff --git a/salt/nginx/etc/nginx.conf.so-standalone b/salt/nginx/etc/nginx.conf.so-standalone index 19a029813..35e1488ac 100644 --- a/salt/nginx/etc/nginx.conf.so-standalone +++ b/salt/nginx/etc/nginx.conf.so-standalone @@ -66,6 +66,23 @@ http { server_name _; return 301 https://$host$request_uri; } + {%- if ISAIRGAP is sameas true %} + server { + listen 7788; + server_name _; + root /opt/socore/html/repo; + location /rules/ { + allow all; + sendfile on; + sendfile_max_chunk 1m; + autoindex on; + autoindex_exact_size off; + autoindex_format html; + autoindex_localtime on; + } + } + {%- endif %} + {% if FLEET_MANAGER %} server { diff --git a/salt/nginx/init.sls b/salt/nginx/init.sls index 2cb7984db..acb19d711 100644 --- a/salt/nginx/init.sls +++ b/salt/nginx/init.sls @@ -83,6 +83,9 @@ so-nginx: - port_bindings: - 80:80 - 443:443 + {% if ISAIRGAP is sameas true %} + - 7788:7788 + {% enfid %} {%- if FLEETMANAGER or FLEETNODE %} - 8090:8090 {%- endif %}