re-cipes.apps.wazuh — re-cipes 0.3.12

Wazuh server on docker using: https://documentation.wazuh.com/4.0/docker/wazuh-container.html#production-deployment

authd clj

Setting up auth password for agents

certs clj

Set up self signed certs

elastic-creds clj

Setup Elasticsearch password, the following method is used to generate the hash:

$ docker exec -it <container-id> chmod +x /usr/share/elasticsearch/plugins/opendistro_security/tools/hash.sh $ docker exec -it <container-id> /usr/share/elasticsearch/plugins/opendistro_security/tools/hash.sh -p <password>

Once the password hass been chaged delete the existing volumes:

$ docker-compose down -v

See also https://aws.amazon.com/blogs/opensource/change-passwords-open-distro-for-elasticsearch/

get-source clj

Grabing Wazuh docker source

local-volumes clj

Setup Elasticsearch password, the following method is used to generate the hash:

$ docker exec -it <container-id> chmod +x /usr/share/elasticsearch/plugins/opendistro_security/tools/hash.sh $ docker exec -it <container-id> /usr/share/elasticsearch/plugins/opendistro_security/tools/hash.sh -p <password>

Once the password hass been chaged delete the existing volumes:

$ docker-compose down -v

See also https://aws.amazon.com/blogs/opensource/change-passwords-open-distro-for-elasticsearch/

max-map clj

Increasing max-map count

wazuh-creds clj

Setting up API/Elasticsearch creds