mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 19:01:54 +00:00
Prageeth Panicker
e844ba9022
Mount queue/vd as its own volume with backup: false. The scanner removes its folders at start, so the mount sits on queue/vd and not on queue/vd/feed.
258 lines
9.2 KiB
YAML
258 lines
9.2 KiB
YAML
---
|
|
manager_api_configuration:
|
|
type: volume
|
|
name: wazuh_manager_api_configuration
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/api/configuration
|
|
manager_etc:
|
|
type: volume
|
|
name: wazuh_manager_etc
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/etc
|
|
manager_logs:
|
|
type: volume
|
|
name: wazuh_manager_logs
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/logs
|
|
manager_queue:
|
|
type: volume
|
|
name: wazuh_manager_queue
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/queue
|
|
manager_vd:
|
|
type: volume
|
|
name: wazuh_manager_vd
|
|
backup: false
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/queue/vd
|
|
manager_var_multigroups:
|
|
type: volume
|
|
name: wazuh_manager_var_multigroups
|
|
backup: false
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/var/multigroups
|
|
manager_integrations:
|
|
type: volume
|
|
name: wazuh_manager_integrations
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/integrations
|
|
manager_active_response:
|
|
type: volume
|
|
name: wazuh_manager_active_response
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/active-response/bin
|
|
manager_agentless:
|
|
type: volume
|
|
name: wazuh_manager_agentless
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/agentless
|
|
manager_wodles:
|
|
type: volume
|
|
name: wazuh_manager_wodles
|
|
mounts:
|
|
- service: manager
|
|
target: /var/ossec/wodles
|
|
manager_filebeat_etc:
|
|
type: volume
|
|
name: wazuh_manager_filebeat_etc
|
|
mounts:
|
|
- service: manager
|
|
target: /etc/filebeat
|
|
manager_filebeat_var:
|
|
type: volume
|
|
name: wazuh_manager_filebeat_var
|
|
mounts:
|
|
- service: manager
|
|
target: /var/lib/filebeat
|
|
indexer_data:
|
|
type: volume
|
|
name: wazuh_indexer_data
|
|
mounts:
|
|
- service: indexer
|
|
target: /var/lib/wazuh-indexer
|
|
dashboard_config:
|
|
type: volume
|
|
name: wazuh_dashboard_config
|
|
mounts:
|
|
- service: dashboard
|
|
target: /usr/share/wazuh-dashboard/data/wazuh/config
|
|
dashboard_custom:
|
|
type: volume
|
|
name: wazuh_dashboard_custom
|
|
mounts:
|
|
- service: dashboard
|
|
target: /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom
|
|
|
|
certs_generator_config:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: certs_generator
|
|
target: /config/certs.yml
|
|
certs_generator_entrypoint:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs-entrypoint.sh' ] | path_join }}"
|
|
mode: "0555"
|
|
mounts:
|
|
- service: certs_generator
|
|
target: &entrypoint_target /infinito-entrypoint.sh
|
|
indexer_entrypoint:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'indexer-entrypoint.sh' ] | path_join }}"
|
|
mode: "0555"
|
|
mounts:
|
|
- service: indexer
|
|
target: *entrypoint_target
|
|
wazuh_manager_conf:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'wazuh_manager.conf' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: manager
|
|
target: /wazuh-config-mount/etc/ossec.conf
|
|
wazuh_indexer_yml:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'wazuh.indexer.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/opensearch.yml
|
|
internal_users_yml:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'internal_users.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml
|
|
config_yml:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'config.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/opensearch-security/config.yml
|
|
indexer_roles_yml:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'roles.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/opensearch-security/roles.yml
|
|
roles_mapping_yml:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'roles_mapping.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/opensearch-security/roles_mapping.yml
|
|
opensearch_dashboards_yml:
|
|
type: secret
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'opensearch_dashboards.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: dashboard
|
|
target: /usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
|
|
dashboard_wazuh_yml:
|
|
type: config
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'wazuh.yml' ] | path_join }}"
|
|
mode: "0444"
|
|
mounts:
|
|
- service: dashboard
|
|
target: /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
|
|
|
|
wazuh_certs_dir:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs' ] | path_join }}"
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: certs_generator
|
|
target: /certificates/
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
root_ca_manager_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'root-ca-manager.pem' ] | path_join }}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: manager
|
|
target: /etc/ssl/root-ca.pem
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
manager_filebeat_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.manager.name') ~ '.pem' ] | path_join
|
|
}}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: manager
|
|
target: /etc/ssl/filebeat.pem
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
manager_filebeat_key_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.manager.name') ~ '-key.pem' ] |
|
|
path_join }}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: manager
|
|
target: /etc/ssl/filebeat.key
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
root_ca_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'root-ca.pem' ] | path_join }}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/certs/root-ca.pem
|
|
- service: dashboard
|
|
target: /usr/share/wazuh-dashboard/certs/root-ca.pem
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
indexer_key_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.indexer.name') ~ '-key.pem' ] |
|
|
path_join }}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
indexer_cert_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.indexer.name') ~ '.pem' ] | path_join
|
|
}}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
admin_cert_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'admin.pem' ] | path_join }}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/certs/admin.pem
|
|
# nocheck: meta-volume-file-bind-should-be-config Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
|
|
admin_key_pem:
|
|
type: bind
|
|
source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'admin-key.pem' ] | path_join }}"
|
|
read_only: true
|
|
swarm_safe: false
|
|
mounts:
|
|
- service: indexer
|
|
target: /usr/share/wazuh-indexer/config/certs/admin-key.pem
|