tweaking, hardening

docker/ews/Dockerfile

@@ -30,6 +30,7 @@ RUN apk -U upgrade && \
 # Setup user and groups
     addgroup -g 2000 ews && \
     adduser -S -H -u 2000 -D -g 2000 ews && \
+    chown -R ews:ews /opt/ewsposter && \
 
 # Supply configs
     mv /root/dist/ews.cfg /opt/ewsposter/ && \
@@ -45,4 +46,5 @@ RUN apk -U upgrade && \
     rm -rf /var/cache/apk/*
 
 # Run ewsposter
+USER ews:ews
 CMD sleep 10 && /usr/bin/python /opt/ewsposter/ews.py -l 60

docker/ews/docker-compose.yml

@@ -0,0 +1,23 @@
+# T-Pot (Standard)
+# For docker-compose ...
+version: '2.2'
+
+networks:
+  ewsposter_local:
+
+services:
+
+# Ewsposter service
+  ewsposter:
+    build: .
+    container_name: ewsposter
+    restart: always
+    networks:
+     - ewsposter_local
+    env_file:
+     - /opt/tpot/etc/compose/elk_environment
+    image: "dtagdevsec/ewsposter:1804"
+    volumes:
+     - /data:/data
+     - /data/ews/conf/ews.ip:/opt/ewsposter/ews.ip
+