map server tweaking

docker/elk/docker-compose.yml

@@ -64,8 +64,6 @@ services:
     restart: always
     stop_signal: SIGKILL
     tty: true
-    #    networks:
-    #     - map_local
     ports:
       - "127.0.0.1:6379:6379"
     image: "dtagdevsec/redis:2203"
@@ -82,11 +80,9 @@ services:
      - /opt/tpot/etc/compose/elk_environment
     stop_signal: SIGKILL
     tty: true
-    #    networks:
-    #     - map_local
     ports:
      - "127.0.0.1:64299:64299"
-    image: "dtagdevsec/map_web:2203"
+    image: "dtagdevsec/map_server:2203"
     depends_on:
      - map_redis
 
@@ -100,8 +96,6 @@ services:
      - /opt/tpot/etc/compose/elk_environment
     stop_signal: SIGKILL
     tty: true
-    #    networks:
+    image: "dtagdevsec/map_server:2203"
-    #     - map_local
-    image: "dtagdevsec/map_web:2203"
     depends_on:
      - map_redis

docker/elk/map/Dockerfile

@@ -1,5 +1,8 @@
 FROM alpine:3.15
 #
+# Include dist
+#ADD dist/ /root/dist/
+#
 # Install packages
 RUN apk -U add \
              build-base \

docker/elk/map/docker-compose.yml

@@ -11,8 +11,6 @@ services:
     restart: always
     stop_signal: SIGKILL
     tty: true
-    #    networks:
-    #     - map_local
     ports:
       - "127.0.0.1:6379:6379"
     image: "dtagdevsec/redis:2203"
@@ -29,11 +27,9 @@ services:
      - /opt/tpot/etc/compose/elk_environment
     stop_signal: SIGKILL
     tty: true
-    #    networks:
-    #     - map_local
     ports:
      - "127.0.0.1:64299:64299"
-    image: "dtagdevsec/map_web:2203"
+    image: "dtagdevsec/map_server:2203"
     depends_on:
      - map_redis
 
@@ -47,8 +43,6 @@ services:
      - /opt/tpot/etc/compose/elk_environment
     stop_signal: SIGKILL
     tty: true
-    #    networks:
+    image: "dtagdevsec/map_server:2203"
-    #     - map_local
-    image: "dtagdevsec/map_web:2203"
     depends_on:
      - map_redis

docker/nginx/dist/conf/tpotweb.conf

@@ -65,7 +65,7 @@ server {
 
     ### This will enforce HTTP browsing into HTTPS and avoid ssl stripping attack
     add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
-
+#    add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
 
     ##################################
     ### Restrict access and basic auth
@@ -125,12 +125,21 @@ server {
     }
 
     ### Map
-    location /map/ {
+#    location /map/ {
-        proxy_pass http://127.0.0.1:64299/;
+#        proxy_pass http://127.0.0.1:64299/;
-        proxy_set_header Upgrade $http_upgrade;
+#        rewrite /map/(.*)$ /$1 break;
-        proxy_set_header Connection "Upgrade";
+#	proxy_http_version 1.1;
-        proxy_set_header Host $host;
+#        proxy_set_header Upgrade $http_upgrade;
-    }
+#        proxy_set_header Connection "Upgrade";
+#	proxy_set_header Host $host;
+#    }
+#    location /websocket {
+#        proxy_pass http://127.0.0.1:64299;
+#        proxy_http_version 1.1;
+#        proxy_set_header Upgrade $http_upgrade;
+#        proxy_set_header Connection "Upgrade";
+#        proxy_set_header Host $host;
+#    }
 
     ### spiderfoot
     location /spiderfoot {

etc/compose/standard.yml

@@ -511,6 +511,51 @@ services:
     volumes:
      - /data:/data
 
+## Map Redis Service
+  map_redis:
+    container_name: map_redis
+    restart: always
+    stop_signal: SIGKILL
+    tty: true
+    ports:
+      - "127.0.0.1:6379:6379"
+    image: "dtagdevsec/redis:2203"
+    read_only: true
+
+## Map Web Service
+  map_web:
+    container_name: map_web
+    restart: always
+    environment:
+     - MAP_COMMAND=AttackMapServer.py
+    env_file:
+     - /opt/tpot/etc/compose/elk_environment
+    stop_signal: SIGKILL
+    tty: true
+    ports:
+     - "127.0.0.1:64299:64299"
+    image: "dtagdevsec/map_server:2203"
+    depends_on:
+     - map_redis
+
+## Map Data Service
+  map_data:
+    container_name: map_data
+    restart: always
+    depends_on:
+      elasticsearch:
+        condition: service_healthy
+    environment:
+     - MAP_COMMAND=DataServr_v2.py
+    env_file:
+     - /opt/tpot/etc/compose/elk_environment
+    stop_signal: SIGKILL
+    tty: true
+    image: "dtagdevsec/map_server:2203"
+    depends_on:
+     - map_redise
+#### /ELK
+
 # Ewsposter service
   ewsposter:
     container_name: ewsposter