incl. XFF for qhoneypots, some tweaking

docker/elk/docker-compose.yml

@@ -85,7 +85,7 @@ services:
     #    networks:
     #     - map_local
     ports:
-     - "9999:13337"
+     - "127.0.0.1:64299:64299"
     image: "dtagdevsec/map_web:2203"
     depends_on:
      - map_redis

docker/elk/map/docker-compose.yml

@@ -32,7 +32,7 @@ services:
     #    networks:
     #     - map_local
     ports:
-     - "9999:13337"
+     - "127.0.0.1:64299:64299"
     image: "dtagdevsec/map_web:2203"
     depends_on:
      - map_redis

docker/honeypots/Dockerfile

@@ -30,7 +30,7 @@ RUN apk -U add \
     cd /opt/ && \
     git clone https://github.com/qeeqbox/honeypots && \
     cd honeypots && \
-    git checkout b88cbbd5aa1d2724c6f7de5d723f0d0e753912bb && \
+    git checkout bee3147cf81837ba7639f1e27fe34d717ecccf29 && \
     pip3 install --upgrade pip && \
     pip3 install --ignore-installed hiredis packaging && \
     pip3 install . && \

docker/honeypots/dist/config.json

@@ -44,7 +44,8 @@
          "password":"admin",
          "log_file_name":"http.log",
          "max_bytes":0,
-         "backup_count":10
+         "backup_count":10,
+	 "options":"fix_get_client_ip"
       },
       "https":{
          "port":443,

docker/nginx/dist/conf/tpotweb.conf

@@ -124,6 +124,14 @@ server {
         rewrite /es/(.*)$ /$1 break;
     }
 
+    ### Map
+    location /map/ {
+        proxy_pass http://127.0.0.1:64299/;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "Upgrade";
+        proxy_set_header Host $host;
+    }
+
     ### spiderfoot
     location /spiderfoot {
         proxy_pass http://127.0.0.1:64303;