tweaking

docker/ciscoasa/docker-compose.yml

@@ -9,6 +9,8 @@ services:
     restart: always
     tmpfs:
      - /tmp/ciscoasa:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     network_mode: "host"
     ports:
      - "5000:5000/udp"

docker/citrixhoneypot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: citrixhoneypot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - citrixhoneypot_local
     ports:

docker/conpot/docker-compose.yml

@@ -23,6 +23,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25    
     networks:
      - conpot_local_default
     ports:
@@ -52,6 +54,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_IEC104
     ports:
@@ -74,6 +78,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_guardian_ast
     ports:
@@ -95,6 +101,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_ipmi
     ports:
@@ -116,6 +124,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_kamstrup_382
     ports:

docker/cowrie/docker-compose.yml

@@ -13,6 +13,8 @@ services:
     tmpfs:
      - /tmp/cowrie:uid=2000,gid=2000
      - /tmp/cowrie/data:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - cowrie_local
     ports:

docker/ddospot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: ddospot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - ddospot_local
     ports:

docker/dicompot/docker-compose.yml

@@ -13,6 +13,8 @@ services:
     build: .
     container_name: dicompot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - dicompot_local
     ports:

docker/dionaea/docker-compose.yml

@@ -12,6 +12,8 @@ services:
     stdin_open: true
     tty: true
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - dionaea_local
     ports:

docker/docker-compose.yml

@@ -102,16 +102,16 @@ services:
     build: medpot/.
     image: "dtagdevsec/medpot:2203"
 
-# Rdpy service
-  rdpy:
-    build: rdpy/.
-    image: "dtagdevsec/rdpy:2203"
-
 # Redishoneypot service
-  rdpy:
+  redishoneypot:
     build: redishoneypot/.
     image: "dtagdevsec/redishoneypot:2203"
 
+# Sentrypeer service
+  sentrypeer:
+    build: sentrypeer/.
+    image: "dtagdevsec/sentrypeer:2203"
+
 #### Snare / Tanner
 ## Tanner Redis Service
   tanner_redis:
@@ -188,3 +188,8 @@ services:
   spiderfoot:
     build: spiderfoot/.
     image: "dtagdevsec/spiderfoot:2203"
+
+# Map Web Service
+  map_web:
+    build: elk/map/.
+    image: "dtagdevsec/map_server:2203"

docker/elasticpot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: elasticpot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - elasticpot_local
     ports:

docker/endlessh/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: endlessh
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - endlessh_local
     ports:

docker/ews/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: ewsposter
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     networks:
      - ewsposter_local
     environment:

docker/fatt/docker-compose.yml

@@ -7,6 +7,8 @@ services:
     build: .
     container_name: fatt
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     cap_add:
      - NET_ADMIN

docker/glutton/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     tmpfs:
      - /var/lib/glutton:uid=2000,gid=2000
      - /run:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     cap_add:
      - NET_ADMIN

docker/hellpot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: hellpot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - hellpot_local
     ports:

docker/heralding/docker-compose.yml

@@ -12,6 +12,8 @@ services:
     restart: always
     tmpfs:
      - /tmp/heralding:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - heralding_local
     ports:

docker/honeypots/docker-compose.yml

@@ -14,6 +14,8 @@ services:
     restart: always
     tmpfs:
      - /tmp:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.75
     networks:
      - honeypots_local
     ports:

docker/honeytrap/docker-compose.yml

@@ -9,6 +9,8 @@ services:
     restart: always
     tmpfs:
      - /tmp/honeytrap:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     cap_add:
      - NET_ADMIN

docker/ipphoney/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: ipphoney
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - ipphoney_local
     ports:

docker/log4pot/docker-compose.yml

@@ -12,6 +12,8 @@ services:
     restart: always
     tmpfs:
      - /tmp:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - log4pot_local
     ports:

docker/mailoney/docker-compose.yml

@@ -16,6 +16,8 @@ services:
      - HPFEEDS_SECRET=pass
      - HPFEEDS_PORT=20000
      - HPFEEDS_CHANNELPREFIX=prefix
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - mailoney_local
     ports:

docker/medpot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: medpot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - medpot_local
     ports:

docker/nginx/docker-compose.yml

@@ -15,6 +15,8 @@ services:
      - /var/tmp/nginx/scgi
      - /run
      - /var/lib/nginx/tmp:uid=100,gid=82
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     ports:
      - "64297:64297"

docker/p0f/docker-compose.yml

@@ -7,6 +7,8 @@ services:
     build: .
     container_name: p0f
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     image: "dtagdevsec/p0f:2203"
     read_only: true

docker/redishoneypot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: redishoneypot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - redishoneypot_local
     ports:

docker/sentrypeer/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: sentrypeer
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - sentrypeer_local
     ports:

docker/spiderfoot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: spiderfoot
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     networks:
      - spiderfoot_local
     ports:

docker/tanner/docker-compose.yml

@@ -12,6 +12,8 @@ services:
     restart: always
     stop_signal: SIGKILL
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/redis:2203"
@@ -26,6 +28,8 @@ services:
     tmpfs:
      - /tmp:uid=2000,gid=2000
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/phpox:2203"
@@ -40,6 +44,8 @@ services:
     tmpfs:
      - /tmp/tanner:uid=2000,gid=2000
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/tanner:2203"
@@ -80,6 +86,8 @@ services:
     tmpfs:
      - /tmp/tanner:uid=2000,gid=2000
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/tanner:2203"
@@ -100,6 +108,8 @@ services:
     restart: always
     stop_signal: SIGKILL
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     ports:

docker/wordpot/docker-compose.yml

@@ -10,6 +10,8 @@ services:
     build: .
     container_name: wordpot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - wordpot_local
     ports:

etc/compose/standard.yml

@@ -32,6 +32,8 @@ services:
   adbhoney:
     container_name: adbhoney
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - adbhoney_local
     ports:
@@ -48,6 +50,8 @@ services:
     restart: always
     tmpfs:
      - /tmp/ciscoasa:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     network_mode: "host"
     ports:
      - "5000:5000/udp"
@@ -61,6 +65,8 @@ services:
   citrixhoneypot:
     container_name: citrixhoneypot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - citrixhoneypot_local
     ports:
@@ -82,6 +88,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_IEC104
     ports:
@@ -104,6 +112,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_guardian_ast
     ports:
@@ -125,6 +135,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_ipmi
     ports:
@@ -146,6 +158,8 @@ services:
      - CONPOT_TMP=/tmp/conpot
     tmpfs:
      - /tmp/conpot:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - conpot_local_kamstrup_382
     ports:
@@ -163,6 +177,8 @@ services:
     tmpfs:
      - /tmp/cowrie:uid=2000,gid=2000
      - /tmp/cowrie/data:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - cowrie_local
     ports:
@@ -180,6 +196,8 @@ services:
   ddospot:
     container_name: ddospot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - ddospot_local
     ports:
@@ -202,6 +220,8 @@ services:
   dicompot:
     container_name: dicompot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - dicompot_local
     ports:
@@ -218,6 +238,8 @@ services:
     stdin_open: true
     tty: true
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - dionaea_local
     ports:
@@ -253,6 +275,8 @@ services:
   elasticpot:
     container_name: elasticpot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - elasticpot_local
     ports:
@@ -268,6 +292,8 @@ services:
     restart: always
     tmpfs:
      - /tmp/heralding:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - heralding_local
     ports:
@@ -298,6 +324,8 @@ services:
     restart: always
     tmpfs:
      - /tmp/honeytrap:uid=2000,gid=2000
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     cap_add:
      - NET_ADMIN
@@ -318,6 +346,8 @@ services:
      - HPFEEDS_SECRET=pass
      - HPFEEDS_PORT=20000
      - HPFEEDS_CHANNELPREFIX=prefix
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - mailoney_local
     ports:
@@ -331,6 +361,8 @@ services:
   medpot:
     container_name: medpot
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - medpot_local
     ports:
@@ -344,6 +376,8 @@ services:
   sentrypeer:
     container_name: sentrypeer
     restart: always
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - sentrypeer_local
     ports:
@@ -359,6 +393,8 @@ services:
     container_name: tanner_redis
     restart: always
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/redis:2203"
@@ -369,6 +405,8 @@ services:
     container_name: tanner_phpox
     restart: always
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/phpox:2203"
@@ -381,6 +419,8 @@ services:
     tmpfs:
      - /tmp/tanner:uid=2000,gid=2000
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/tanner:2203"
@@ -415,6 +455,8 @@ services:
     tmpfs:
      - /tmp/tanner:uid=2000,gid=2000
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     image: "dtagdevsec/tanner:2203"
@@ -433,6 +475,8 @@ services:
     container_name: snare
     restart: always
     tty: true
+    cpu_count: 1
+    cpus: 0.25
     networks:
      - tanner_local
     ports:
@@ -450,6 +494,8 @@ services:
   fatt:
     container_name: fatt
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     cap_add:
      - NET_ADMIN
@@ -463,6 +509,8 @@ services:
   p0f:
     container_name: p0f
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     image: "dtagdevsec/p0f:2203"
     read_only: true
@@ -588,6 +636,8 @@ services:
   ewsposter:
     container_name: ewsposter
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     networks:
      - ewsposter_local
     environment:
@@ -618,6 +668,8 @@ services:
      - /var/tmp/nginx/scgi
      - /run
      - /var/lib/nginx/tmp:uid=100,gid=82
+    cpu_count: 1
+    cpus: 0.75
     network_mode: "host"
     ports:
      - "64297:64297"
@@ -633,6 +685,8 @@ services:
   spiderfoot:
     container_name: spiderfoot
     restart: always
+    cpu_count: 1
+    cpus: 0.75
     networks:
      - spiderfoot_local
     ports: