mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-06 17:22:49 +01:00
142 lines
2.9 KiB
Plaintext
142 lines
2.9 KiB
Plaintext
{% if grains['role'] == 'so-node' or grains['role'] == 'so-eval' %}
|
|
# Curator
|
|
# Create the group
|
|
curatorgroup:
|
|
group.present:
|
|
- name: curator
|
|
- gid: 934
|
|
|
|
# Add user
|
|
curator:
|
|
user.present:
|
|
- uid: 934
|
|
- gid: 934
|
|
- home: /opt/so/conf/curator
|
|
- createhome: False
|
|
|
|
# Create the log directory
|
|
curactiondir:
|
|
file.directory:
|
|
- name: /opt/so/conf/curator/action
|
|
- user: 934
|
|
- group: 939
|
|
- makedirs: True
|
|
|
|
curlogdir:
|
|
file.directory:
|
|
- name: /opt/so/log/curator
|
|
- user: 934
|
|
- group: 939
|
|
|
|
curcloseconf:
|
|
file.managed:
|
|
- name: /opt/so/conf/curator/action/close.yml
|
|
- source: salt://curator/files/action/close.yml
|
|
- user: 934
|
|
- group: 939
|
|
- template: jinja
|
|
|
|
curdelconf:
|
|
file.managed:
|
|
- name: /opt/so/conf/curator/action/delete.yml
|
|
- source: salt://curator/files/action/delete.yml
|
|
- user: 934
|
|
- group: 939
|
|
- template: jinja
|
|
|
|
curconf:
|
|
file.managed:
|
|
- name: /opt/so/conf/curator/curator.yml
|
|
- source: salt://curator/files/curator.yml
|
|
- user: 934
|
|
- group: 939
|
|
- template: jinja
|
|
|
|
curcloseddel:
|
|
file.managed:
|
|
- name: /usr/sbin/so-curator-closed-delete
|
|
- source: salt://curator/files/bin/so-curator-closed-delete
|
|
- user: 934
|
|
- group: 939
|
|
- mode: 755
|
|
|
|
curcloseddeldel:
|
|
file.managed:
|
|
- name: /usr/sbin/so-curator-closed-delete-delete
|
|
- source: salt://curator/files/bin/so-curator-closed-delete-delete
|
|
- user: 934
|
|
- group: 939
|
|
- mode: 755
|
|
- template: jinja
|
|
|
|
curclose:
|
|
file.managed:
|
|
- name: /usr/sbin/so-curator-close
|
|
- source: salt://curator/files/bin/so-curator-close
|
|
- user: 934
|
|
- group: 939
|
|
- mode: 755
|
|
|
|
curdel:
|
|
file.managed:
|
|
- name: /usr/sbin/so-curator-delete
|
|
- source: salt://curator/files/bin/so-curator-delete
|
|
- user: 934
|
|
- group: 939
|
|
- mode: 755
|
|
|
|
/usr/sbin/so-curator-closed-delete:
|
|
cron.present:
|
|
- user: root
|
|
- minute: '*'
|
|
- hour: '*'
|
|
- daymonth: '*'
|
|
- month: '*'
|
|
- dayweek: '*'
|
|
|
|
/usr/sbin/so-curator-close:
|
|
cron.present:
|
|
- user: root
|
|
- minute: '*'
|
|
- hour: '*'
|
|
- daymonth: '*'
|
|
- month: '*'
|
|
- dayweek: '*'
|
|
|
|
/usr/sbin/so-curator-delete:
|
|
cron.present:
|
|
- user: root
|
|
- minute: '*'
|
|
- hour: '*'
|
|
- daymonth: '*'
|
|
- month: '*'
|
|
- dayweek: '*'
|
|
|
|
so-curatorimage:
|
|
cmd.run:
|
|
- name: docker pull --disable-content-trust=false docker.io/soshybridhunter/so-curator:HH1.1.0
|
|
|
|
so-curator:
|
|
docker_container.running:
|
|
- require:
|
|
- so-curatorimage
|
|
- image: docker.io/soshybridhunter/so-curator:HH1.1.0
|
|
- hostname: curator
|
|
- name: so-curator
|
|
- user: curator
|
|
- interactive: True
|
|
- tty: True
|
|
- binds:
|
|
- /opt/so/conf/curator/curator.yml:/etc/curator/config/curator.yml:ro
|
|
- /opt/so/conf/curator/action/:/etc/curator/action:ro
|
|
- /opt/so/log/curator:/var/log/curator:rw
|
|
# Begin Curator Cron Jobs
|
|
|
|
# Close
|
|
# Delete
|
|
# Hot Warm
|
|
# Segment Merge
|
|
|
|
# End Curator Cron Jobs
|
|
{% endif %}
|