mirror of
https://github.com/telekom-security/tpotce.git
synced 2025-05-05 14:48:53 +00:00
141 lines
3 KiB
YAML
141 lines
3 KiB
YAML
# T-Pot (Hive)
|
|
# Do not erase ports sections, these are used by /opt/tpot/bin/rules.sh to setup iptables ACCEPT rules for NFQ (honeytrap / glutton)
|
|
version: '2.3'
|
|
|
|
networks:
|
|
spiderfoot_local:
|
|
|
|
services:
|
|
|
|
##################
|
|
#### Tools
|
|
##################
|
|
|
|
#### ELK
|
|
## Elasticsearch service
|
|
elasticsearch:
|
|
container_name: elasticsearch
|
|
restart: always
|
|
environment:
|
|
- bootstrap.memory_lock=true
|
|
- ES_JAVA_OPTS=-Xms2048m -Xmx2048m
|
|
- ES_TMPDIR=/tmp
|
|
cap_add:
|
|
- IPC_LOCK
|
|
ulimits:
|
|
memlock:
|
|
soft: -1
|
|
hard: -1
|
|
nofile:
|
|
soft: 65536
|
|
hard: 65536
|
|
# mem_limit: 4g
|
|
ports:
|
|
- "127.0.0.1:64298:9200"
|
|
image: "dtagdevsec/elasticsearch:alpha"
|
|
volumes:
|
|
- /data:/data
|
|
|
|
## Kibana service
|
|
kibana:
|
|
container_name: kibana
|
|
restart: always
|
|
depends_on:
|
|
elasticsearch:
|
|
condition: service_healthy
|
|
# mem_limit: 1g
|
|
ports:
|
|
- "127.0.0.1:64296:5601"
|
|
image: "dtagdevsec/kibana:alpha"
|
|
|
|
## Logstash service
|
|
logstash:
|
|
container_name: logstash
|
|
restart: always
|
|
environment:
|
|
- LS_JAVA_OPTS=-Xms2048m -Xmx2048m
|
|
depends_on:
|
|
elasticsearch:
|
|
condition: service_healthy
|
|
env_file:
|
|
- /opt/tpot/etc/compose/elk_environment
|
|
ports:
|
|
- "127.0.0.1:64305:64305"
|
|
# mem_limit: 2g
|
|
image: "dtagdevsec/logstash:alpha"
|
|
volumes:
|
|
- /data:/data
|
|
|
|
## Map Redis Service
|
|
map_redis:
|
|
container_name: map_redis
|
|
restart: always
|
|
stop_signal: SIGKILL
|
|
tty: true
|
|
image: "dtagdevsec/redis:alpha"
|
|
read_only: true
|
|
|
|
## Map Web Service
|
|
map_web:
|
|
container_name: map_web
|
|
restart: always
|
|
environment:
|
|
- MAP_COMMAND=AttackMapServer.py
|
|
env_file:
|
|
- /opt/tpot/etc/compose/elk_environment
|
|
stop_signal: SIGKILL
|
|
tty: true
|
|
ports:
|
|
- "127.0.0.1:64299:64299"
|
|
image: "dtagdevsec/map:alpha"
|
|
|
|
## Map Data Service
|
|
map_data:
|
|
container_name: map_data
|
|
restart: always
|
|
depends_on:
|
|
elasticsearch:
|
|
condition: service_healthy
|
|
environment:
|
|
- MAP_COMMAND=DataServer_v2.py
|
|
env_file:
|
|
- /opt/tpot/etc/compose/elk_environment
|
|
stop_signal: SIGKILL
|
|
tty: true
|
|
image: "dtagdevsec/map:alpha"
|
|
#### /ELK
|
|
|
|
# Nginx service
|
|
nginx:
|
|
container_name: nginx
|
|
restart: always
|
|
tmpfs:
|
|
- /var/tmp/nginx/client_body
|
|
- /var/tmp/nginx/proxy
|
|
- /var/tmp/nginx/fastcgi
|
|
- /var/tmp/nginx/uwsgi
|
|
- /var/tmp/nginx/scgi
|
|
- /run
|
|
- /var/lib/nginx/tmp:uid=100,gid=82
|
|
network_mode: "host"
|
|
ports:
|
|
- "64297:64297"
|
|
- "127.0.0.1:64304:64304"
|
|
image: "dtagdevsec/nginx:alpha"
|
|
read_only: true
|
|
volumes:
|
|
- /data/nginx/cert/:/etc/nginx/cert/:ro
|
|
- /data/nginx/conf/nginxpasswd:/etc/nginx/nginxpasswd:ro
|
|
- /data/nginx/log/:/var/log/nginx/
|
|
|
|
# Spiderfoot service
|
|
spiderfoot:
|
|
container_name: spiderfoot
|
|
restart: always
|
|
networks:
|
|
- spiderfoot_local
|
|
ports:
|
|
- "127.0.0.1:64303:8080"
|
|
image: "dtagdevsec/spiderfoot:alpha"
|
|
volumes:
|
|
- /data/spiderfoot:/home/spiderfoot/.spiderfoot
|