Alex-Devera/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 04:52:11 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

rebuild compose files

Browse source
This commit is contained in:
t3chn0m4g3 2020-06-16 12:55:45 +00:00
parent 27a5db9edf
commit d1dd805f80
5 changed files with 129 additions and 54 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
etc/compose/collector.yml
View file

@ -64,6 +64,19 @@ services:
#### NSM #### NSM
################## ##################
# Fatt service
fatt:
container_name: fatt
restart: always
network_mode: "host"
cap_add:
- NET_ADMIN
- SYS_NICE
- NET_RAW
image: "dtagdevsec/fatt:2006"
volumes:
- /data/fatt/log:/opt/fatt/log
# P0f service # P0f service
p0f: p0f:
container_name: p0f container_name: p0f
@ -113,7 +126,7 @@ services:
restart: always restart: always
environment: environment:
- bootstrap.memory_lock=true - bootstrap.memory_lock=true
- ES_JAVA_OPTS=-Xms1024m -Xmx1024m - ES_JAVA_OPTS=-Xms2048m -Xmx2048m
- ES_TMPDIR=/tmp - ES_TMPDIR=/tmp
cap_add: cap_add:
- IPC_LOCK - IPC_LOCK
@ -193,22 +206,34 @@ services:
nginx: nginx:
container_name: nginx container_name: nginx
restart: always restart: always
environment:
### If set to YES all changes within Heimdall will remain for the next start
### Make sure to uncomment the corresponding volume statements below, or the setting will prevent a successful start of T-Pot.
- HEIMDALL_PERSIST=NO
tmpfs: tmpfs:
- /var/tmp/nginx/client_body - /var/tmp/nginx/client_body
- /var/tmp/nginx/proxy - /var/tmp/nginx/proxy
- /var/tmp/nginx/fastcgi - /var/tmp/nginx/fastcgi
- /var/tmp/nginx/uwsgi - /var/tmp/nginx/uwsgi
- /var/tmp/nginx/scgi - /var/tmp/nginx/scgi
- /run - /run
- /var/log/php7/
- /var/lib/nginx/tmp:uid=100,gid=82
- /var/lib/nginx/html/storage/logs:uid=100,gid=82
- /var/lib/nginx/html/storage/framework/views:uid=100,gid=82
network_mode: "host" network_mode: "host"
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304"
image: "dtagdevsec/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
- /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro - /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro
- /data/nginx/log/:/var/log/nginx/ - /data/nginx/log/:/var/log/nginx/
### Enable the following volumes if you set HEIMDALL_PERSIST=YES
# - /data/nginx/heimdall/database:/var/lib/nginx/html/database
# - /data/nginx/heimdall/storage:/var/lib/nginx/html/storage
# Spiderfoot service # Spiderfoot service
spiderfoot: spiderfoot:

29
etc/compose/industrial.yml
View file

@ -240,6 +240,19 @@ services:
#### NSM #### NSM
################## ##################
# Fatt service
fatt:
container_name: fatt
restart: always
network_mode: "host"
cap_add:
- NET_ADMIN
- SYS_NICE
- NET_RAW
image: "dtagdevsec/fatt:2006"
volumes:
- /data/fatt/log:/opt/fatt/log
# P0f service # P0f service
p0f: p0f:
container_name: p0f container_name: p0f
@ -289,7 +302,7 @@ services:
restart: always restart: always
environment: environment:
- bootstrap.memory_lock=true - bootstrap.memory_lock=true
- ES_JAVA_OPTS=-Xms1024m -Xmx1024m - ES_JAVA_OPTS=-Xms2048m -Xmx2048m
- ES_TMPDIR=/tmp - ES_TMPDIR=/tmp
cap_add: cap_add:
- IPC_LOCK - IPC_LOCK
@ -369,22 +382,34 @@ services:
nginx: nginx:
container_name: nginx container_name: nginx
restart: always restart: always
environment:
### If set to YES all changes within Heimdall will remain for the next start
### Make sure to uncomment the corresponding volume statements below, or the setting will prevent a successful start of T-Pot.
- HEIMDALL_PERSIST=NO
tmpfs: tmpfs:
- /var/tmp/nginx/client_body - /var/tmp/nginx/client_body
- /var/tmp/nginx/proxy - /var/tmp/nginx/proxy
- /var/tmp/nginx/fastcgi - /var/tmp/nginx/fastcgi
- /var/tmp/nginx/uwsgi - /var/tmp/nginx/uwsgi
- /var/tmp/nginx/scgi - /var/tmp/nginx/scgi
- /run - /run
- /var/log/php7/
- /var/lib/nginx/tmp:uid=100,gid=82
- /var/lib/nginx/html/storage/logs:uid=100,gid=82
- /var/lib/nginx/html/storage/framework/views:uid=100,gid=82
network_mode: "host" network_mode: "host"
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304"
image: "dtagdevsec/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
- /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro - /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro
- /data/nginx/log/:/var/log/nginx/ - /data/nginx/log/:/var/log/nginx/
### Enable the following volumes if you set HEIMDALL_PERSIST=YES
# - /data/nginx/heimdall/database:/var/lib/nginx/html/database
# - /data/nginx/heimdall/storage:/var/lib/nginx/html/storage
# Spiderfoot service # Spiderfoot service
spiderfoot: spiderfoot:

32
etc/compose/nextgen.yml
View file

@ -366,21 +366,21 @@ services:
- tanner_redis - tanner_redis
## Tanner WEB Service ## Tanner WEB Service
# tanner_web: # tanner_web:
# container_name: tanner_web # container_name: tanner_web
# restart: always # restart: always
# tmpfs: # tmpfs:
# - /tmp/tanner:uid=2000,gid=2000 # - /tmp/tanner:uid=2000,gid=2000
# tty: true # tty: true
# networks: # networks:
# - tanner_local # - tanner_local
# image: "dtagdevsec/tanner:2006" # image: "dtagdevsec/tanner:2006"
# command: tannerweb # command: tannerweb
# read_only: true # read_only: true
# volumes: # volumes:
# - /data/tanner/log:/var/log/tanner # - /data/tanner/log:/var/log/tanner
# depends_on: # depends_on:
# - tanner_redis # - tanner_redis
## Tanner Service ## Tanner Service
tanner: tanner:
@ -399,7 +399,7 @@ services:
- /data/tanner/files:/opt/tanner/files - /data/tanner/files:/opt/tanner/files
depends_on: depends_on:
- tanner_api - tanner_api
# - tanner_web # - tanner_web
- tanner_phpox - tanner_phpox
## Snare Service ## Snare Service

32
etc/compose/sensor.yml
View file

@ -345,21 +345,21 @@ services:
- tanner_redis - tanner_redis
## Tanner WEB Service ## Tanner WEB Service
tanner_web: # tanner_web:
container_name: tanner_web # container_name: tanner_web
restart: always # restart: always
tmpfs: # tmpfs:
- /tmp/tanner:uid=2000,gid=2000 # - /tmp/tanner:uid=2000,gid=2000
tty: true # tty: true
networks: # networks:
- tanner_local # - tanner_local
image: "dtagdevsec/tanner:2006" # image: "dtagdevsec/tanner:2006"
command: tannerweb # command: tannerweb
read_only: true # read_only: true
volumes: # volumes:
- /data/tanner/log:/var/log/tanner # - /data/tanner/log:/var/log/tanner
depends_on: # depends_on:
- tanner_redis # - tanner_redis
## Tanner Service ## Tanner Service
tanner: tanner:
@ -378,7 +378,7 @@ services:
- /data/tanner/files:/opt/tanner/files - /data/tanner/files:/opt/tanner/files
depends_on: depends_on:
- tanner_api - tanner_api
- tanner_web # - tanner_web
- tanner_phpox - tanner_phpox
## Snare Service ## Snare Service

61
etc/compose/standard.yml
View file

@ -346,21 +346,21 @@ services:
- tanner_redis - tanner_redis
## Tanner WEB Service ## Tanner WEB Service
tanner_web: # tanner_web:
container_name: tanner_web # container_name: tanner_web
restart: always # restart: always
tmpfs: # tmpfs:
- /tmp/tanner:uid=2000,gid=2000 # - /tmp/tanner:uid=2000,gid=2000
tty: true # tty: true
networks: # networks:
- tanner_local # - tanner_local
image: "dtagdevsec/tanner:2006" # image: "dtagdevsec/tanner:2006"
command: tannerweb # command: tannerweb
read_only: true # read_only: true
volumes: # volumes:
- /data/tanner/log:/var/log/tanner # - /data/tanner/log:/var/log/tanner
depends_on: # depends_on:
- tanner_redis # - tanner_redis
## Tanner Service ## Tanner Service
tanner: tanner:
@ -379,7 +379,7 @@ services:
- /data/tanner/files:/opt/tanner/files - /data/tanner/files:/opt/tanner/files
depends_on: depends_on:
- tanner_api - tanner_api
- tanner_web # - tanner_web
- tanner_phpox - tanner_phpox
## Snare Service ## Snare Service
@ -400,6 +400,19 @@ services:
#### NSM #### NSM
################## ##################
# Fatt service
fatt:
container_name: fatt
restart: always
network_mode: "host"
cap_add:
- NET_ADMIN
- SYS_NICE
- NET_RAW
image: "dtagdevsec/fatt:2006"
volumes:
- /data/fatt/log:/opt/fatt/log
# P0f service # P0f service
p0f: p0f:
container_name: p0f container_name: p0f
@ -449,7 +462,7 @@ services:
restart: always restart: always
environment: environment:
- bootstrap.memory_lock=true - bootstrap.memory_lock=true
- ES_JAVA_OPTS=-Xms1024m -Xmx1024m - ES_JAVA_OPTS=-Xms2048m -Xmx2048m
- ES_TMPDIR=/tmp - ES_TMPDIR=/tmp
cap_add: cap_add:
- IPC_LOCK - IPC_LOCK
@ -529,22 +542,34 @@ services:
nginx: nginx:
container_name: nginx container_name: nginx
restart: always restart: always
environment:
### If set to YES all changes within Heimdall will remain for the next start
### Make sure to uncomment the corresponding volume statements below, or the setting will prevent a successful start of T-Pot.
- HEIMDALL_PERSIST=NO
tmpfs: tmpfs:
- /var/tmp/nginx/client_body - /var/tmp/nginx/client_body
- /var/tmp/nginx/proxy - /var/tmp/nginx/proxy
- /var/tmp/nginx/fastcgi - /var/tmp/nginx/fastcgi
- /var/tmp/nginx/uwsgi - /var/tmp/nginx/uwsgi
- /var/tmp/nginx/scgi - /var/tmp/nginx/scgi
- /run - /run
- /var/log/php7/
- /var/lib/nginx/tmp:uid=100,gid=82
- /var/lib/nginx/html/storage/logs:uid=100,gid=82
- /var/lib/nginx/html/storage/framework/views:uid=100,gid=82
network_mode: "host" network_mode: "host"
ports: ports:
- "64297:64297" - "64297:64297"
- "127.0.0.1:64304:64304"
image: "dtagdevsec/nginx:2006" image: "dtagdevsec/nginx:2006"
read_only: true read_only: true
volumes: volumes:
- /data/nginx/cert/:/etc/nginx/cert/:ro - /data/nginx/cert/:/etc/nginx/cert/:ro
- /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro - /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro
- /data/nginx/log/:/var/log/nginx/ - /data/nginx/log/:/var/log/nginx/
### Enable the following volumes if you set HEIMDALL_PERSIST=YES
# - /data/nginx/heimdall/database:/var/lib/nginx/html/database
# - /data/nginx/heimdall/storage:/var/lib/nginx/html/storage
# Spiderfoot service # Spiderfoot service
spiderfoot: spiderfoot: