mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2026-04-11 23:32:02 +02:00
c1b1452bd9
SOC connects to postgres via the host network, not the Docker bridge network, so it needs the manager's IP address rather than the container hostname.
45 lines
2.4 KiB
Django/Jinja
45 lines
2.4 KiB
Django/Jinja
{# Copyright Security Onion Solutions LLC and/or licensed to Security Onion Solutions LLC under one
|
|
or more contributor license agreements. Licensed under the Elastic License 2.0 as shown at
|
|
https://securityonion.net/license; you may not use this file except in compliance with the
|
|
Elastic License 2.0. #}
|
|
|
|
{% import_yaml 'soc/defaults.yaml' as SOCDEFAULTS %}
|
|
{% from 'vars/globals.map.jinja' import GLOBALS %}
|
|
{% from 'docker/docker.map.jinja' import DOCKERMERGED -%}
|
|
{% set INFLUXDB_TOKEN = salt['pillar.get']('influxdb:token') %}
|
|
{% import_text 'influxdb/metrics_link.txt' as METRICS_LINK %}
|
|
|
|
{% for module, application_url in GLOBALS.application_urls.items() %}
|
|
{% do SOCDEFAULTS.soc.config.server.modules[module].update({'hostUrl': application_url}) %}
|
|
{% endfor %}
|
|
|
|
{# add all grid heavy nodes to soc.server.modules.elastic.remoteHostUrls #}
|
|
{% for node_type, minions in salt['pillar.get']('elasticsearch:nodes', {}).items() %}
|
|
{% if node_type in ['heavynode'] %}
|
|
{% for m in minions.keys() %}
|
|
{% do SOCDEFAULTS.soc.config.server.modules.elastic.remoteHostUrls.append('https://' ~ m ~ ':9200') %}
|
|
{% endfor %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
{% do SOCDEFAULTS.soc.config.server.modules.elastic.update({'username': GLOBALS.elasticsearch.auth.users.so_elastic_user.user, 'password': GLOBALS.elasticsearch.auth.users.so_elastic_user.pass}) %}
|
|
|
|
{% if GLOBALS.postgres is defined and GLOBALS.postgres.auth is defined %}
|
|
{% do SOCDEFAULTS.soc.config.server.modules.postgres.update({'hostUrl': GLOBALS.manager_ip, 'username': GLOBALS.postgres.auth.users.so_postgres_user.user, 'password': GLOBALS.postgres.auth.users.so_postgres_user.pass}) %}
|
|
{% endif %}
|
|
|
|
{% do SOCDEFAULTS.soc.config.server.modules.influxdb.update({'hostUrl': 'https://' ~ GLOBALS.influxdb_host ~ ':8086'}) %}
|
|
{% do SOCDEFAULTS.soc.config.server.modules.influxdb.update({'token': INFLUXDB_TOKEN}) %}
|
|
{% for tool in SOCDEFAULTS.soc.config.server.client.tools %}
|
|
{% if tool.name == "toolInfluxDb" and METRICS_LINK | length > 0 %}
|
|
{% do tool.update({'link': METRICS_LINK}) %}
|
|
{% endif %}
|
|
{% endfor %}
|
|
|
|
{% do SOCDEFAULTS.soc.config.server.modules.statickeyauth.update({'anonymousCidr': DOCKERMERGED.range, 'apiKey': pillar.sensoroni.config.sensoronikey}) %}
|
|
|
|
{% do SOCDEFAULTS.soc.config.server.client.case.update({'analyzerNodeId': GLOBALS.hostname}) %}
|
|
{% do SOCDEFAULTS.soc.config.server.client.update({'exportNodeId': GLOBALS.hostname}) %}
|
|
|
|
{% set SOCDEFAULTS = SOCDEFAULTS.soc %}
|