securityonion

mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2026-04-10 06:41:55 +02:00

Files

Mike Reeves 868cd11874 Add so-postgres Salt states and integration wiring

Phase 1 of the PostgreSQL central data platform:
- Salt states: init, enabled, disabled, config, ssl, auth, sostatus
- TLS via SO CA-signed certs with postgresql.conf template
- Two-tier auth: postgres superuser + so_postgres application user
- Firewall restricts port 5432 to manager-only (HA-ready)
- Wired into top.sls, pillar/top.sls, allowed_states, firewall
  containers map, docker defaults, CA signing policies, and setup
  scripts for all manager-type roles

2026-04-08 10:58:52 -04:00

the great ssl refactor

2025-12-11 17:30:06 -05:00

data

upgrade influxdb

2023-02-08 13:23:45 -05:00

elasticsearch

create and use redis:nodes and elasticsearch:nodes pillars

2024-06-20 16:42:11 -04:00

firewall

remove old firewall ports pillar file https://github.com/Security-Onion-Solutions/securityonion/issues/1586

2020-12-14 10:24:49 -05:00