telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

tweaking, prepare for elk microservice

Browse Source
This commit is contained in:
Marco Ochse
2017-05-03 20:55:18 +00:00
parent 8c475544b3
commit b36c63962d
8 changed files with 245 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files

89
installer/etc/tpot/compose/all.yml
View File

@ -1,12 +1,26 @@
# T-Pot (Everything)
# For docker-compose version ...
# For docker-compose ...
version: '2'
networks:
conpot_local:
cowrie_local:
dionaea_local:
elasticpot_local:
emobility_local:
ewsposter_local:
glastopf_local:
spiderfoot_local:
ui-for-docker_local:
services:
# Conpot service
conpot:
container_name: conpot
restart: always
networks:
- conpot_local
ports:
- "1025:1025"
- "50100:50100"
@ -19,6 +33,8 @@ services:
cowrie:
container_name: cowrie
restart: always
networks:
- cowrie_local
ports:
- "22:2222"
- "23:2223"
@ -30,6 +46,8 @@ services:
dionaea:
container_name: dionaea
restart: always
networks:
- dionaea_local
cap_add:
- NET_BIND_SERVICE
ports:
@ -57,36 +75,77 @@ services:
elasticpot:
container_name: elasticpot
restart: always
networks:
- elasticpot_local
ports:
- "9200:9200"
image: "dtagdevsec/elasticpot:1706"
volumes:
- /data/elasticpot:/data/elasticpot
# ELK service
elk:
container_name: elk
# ELK services
## Elasticsearch service
elasticsearch:
container_name: elasticsearch
restart: always
env_file:
- /etc/tpot/elk/environment
environment:
- bootstrap.memory_lock=true
# - "ES_JAVA_OPTS=-Xms1g -Xmx1g"
cap_add:
- IPC_LOCK
ulimits:
memlock: -1
nofile: 65536
memlock:
soft: -1
hard: -1
nofile:
soft: 65536
hard: 65536
# mem_limit: 2g
ports:
- "127.0.0.1:64298:9200"
image: "dtagdevsec/elasticsearch:1706"
volumes:
- /data:/data
## Kibana service
kibana:
container_name: kibana
restart: always
depends_on:
- elasticsearch
ports:
- "127.0.0.1:64296:5601"
- "127.0.0.1:64302:9100"
- "127.0.0.1:64298:9200"
image: "dtagdevsec/elk:1706"
image: "dtagdevsec/kibana:1706"
## Logstash service
logstash:
container_name: logstash
restart: always
depends_on:
- elasticsearch
env_file:
- /etc/tpot/elk/environment
image: "dtagdevsec/logstash:1706"
volumes:
- /data:/data
- /var/log:/data/host/log
## Elasticsearch-head service
head:
container_name: head
restart: always
depends_on:
- elasticsearch
ports:
- "127.0.0.1:64302:9100"
image: "dtagdevsec/head:1706"
# Emobility service
emobility:
container_name: emobility
restart: always
networks:
- emobility_local
cap_add:
- NET_ADMIN
ports:
@ -100,6 +159,8 @@ services:
ewsposter:
container_name: ewsposter
restart: always
networks:
- ewsposter_local
image: "dtagdevsec/ewsposter:1706"
volumes:
- /data:/data
@ -109,6 +170,8 @@ services:
glastopf:
container_name: glastopf
restart: always
networks:
- glastopf_local
ports:
- "80:80"
image: "dtagdevsec/glastopf:1706"
@ -147,6 +210,8 @@ services:
spiderfoot:
container_name: spiderfoot
restart: always
networks:
- spiderfoot_local
ports:
- "127.0.0.1:64303:8080"
image: "dtagdevsec/spiderfoot:1706"
@ -156,6 +221,8 @@ services:
container_name: ui-for-docker
command: -H unix:///var/run/docker.sock --no-auth
restart: always
networks:
- ui-for-docker_local
ports:
- "127.0.0.1:64299:9000"
image: "dtagdevsec/ui-for-docker:1706"

22
installer/etc/tpot/compose/hp.yml
View File

@ -1,12 +1,22 @@
# T-Pot (Standard)
# For docker-compose version ...
# T-Pot (Honeypots)
# For docker-compose ...
version: '2'
networks:
cowrie_local:
dionaea_local:
elasticpot_local:
ewsposter_local:
glastopf_local:
services:
# Cowrie service
cowrie:
container_name: cowrie
restart: always
networks:
- cowrie_local
ports:
- "22:2222"
- "23:2223"
@ -18,6 +28,8 @@ services:
dionaea:
container_name: dionaea
restart: always
networks:
- dionaea_local
cap_add:
- NET_BIND_SERVICE
ports:
@ -45,6 +57,8 @@ services:
elasticpot:
container_name: elasticpot
restart: always
networks:
- elasticpot_local
ports:
- "9200:9200"
image: "dtagdevsec/elasticpot:1706"
@ -55,6 +69,8 @@ services:
ewsposter:
container_name: ewsposter
restart: always
networks:
- ewsposter_local
image: "dtagdevsec/ewsposter:1706"
volumes:
- /data:/data
@ -64,6 +80,8 @@ services:
glastopf:
container_name: glastopf
restart: always
networks:
- glastopf_local
ports:
- "80:80"
image: "dtagdevsec/glastopf:1706"

79
installer/etc/tpot/compose/industrial.yml
View File

@ -1,12 +1,22 @@
# T-Pot (Everything)
# For docker-compose version ...
# T-Pot (Industrial)
# For docker-compose ...
version: '2'
networks:
conpot_local:
emobility_local:
ewsposter_local:
spiderfoot_local:
ui-for-docker_local:
services:
# Conpot service
conpot:
container_name: conpot
restart: always
networks:
- conpot_local
ports:
- "1025:1025"
- "50100:50100"
@ -15,30 +25,69 @@ services:
- /data/conpot:/data/conpot
- /data/ews:/data/ews
# ELK service
elk:
container_name: elk
# ELK services
## Elasticsearch service
elasticsearch:
container_name: elasticsearch
restart: always
env_file:
- /etc/tpot/elk/environment
environment:
- bootstrap.memory_lock=true
# - "ES_JAVA_OPTS=-Xms1g -Xmx1g"
cap_add:
- IPC_LOCK
ulimits:
memlock: -1
nofile: 65536
memlock:
soft: -1
hard: -1
nofile:
soft: 65536
hard: 65536
# mem_limit: 2g
ports:
- "127.0.0.1:64298:9200"
image: "dtagdevsec/elasticsearch:1706"
volumes:
- /data:/data
## Kibana service
kibana:
container_name: kibana
restart: always
depends_on:
- elasticsearch
ports:
- "127.0.0.1:64296:5601"
- "127.0.0.1:64302:9100"
- "127.0.0.1:64298:9200"
image: "dtagdevsec/elk:1706"
image: "dtagdevsec/kibana:1706"
## Logstash service
logstash:
container_name: logstash
restart: always
depends_on:
- elasticsearch
env_file:
- /etc/tpot/elk/environment
image: "dtagdevsec/logstash:1706"
volumes:
- /data:/data
- /var/log:/data/host/log
## Elasticsearch-head service
head:
container_name: head
restart: always
depends_on:
- elasticsearch
ports:
- "127.0.0.1:64302:9100"
image: "dtagdevsec/head:1706"
# Emobility service
emobility:
container_name: emobility
restart: always
networks:
- emobility_local
cap_add:
- NET_ADMIN
ports:
@ -52,6 +101,8 @@ services:
ewsposter:
container_name: ewsposter
restart: always
networks:
- ewsposter_local
image: "dtagdevsec/ewsposter:1706"
volumes:
- /data:/data
@ -76,6 +127,8 @@ services:
spiderfoot:
container_name: spiderfoot
restart: always
networks:
- spiderfoot_local
ports:
- "127.0.0.1:64303:8080"
image: "dtagdevsec/spiderfoot:1706"
@ -85,6 +138,8 @@ services:
container_name: ui-for-docker
command: -H unix:///var/run/docker.sock --no-auth
restart: always
networks:
- ui-for-docker_local
ports:
- "127.0.0.1:64299:9000"
image: "dtagdevsec/ui-for-docker:1706"

83
installer/etc/tpot/compose/tpot.yml
View File

@ -1,12 +1,24 @@
# T-Pot (Standard)
# For docker-compose version ...
# For docker-compose ...
version: '2'
networks:
cowrie_local:
dionaea_local:
elasticpot_local:
ewsposter_local:
glastopf_local:
spiderfoot_local:
ui-for-docker_local:
services:
# Cowrie service
cowrie:
container_name: cowrie
restart: always
networks:
- cowrie_local
ports:
- "22:2222"
- "23:2223"
@ -18,6 +30,8 @@ services:
dionaea:
container_name: dionaea
restart: always
networks:
- dionaea_local
cap_add:
- NET_BIND_SERVICE
ports:
@ -45,36 +59,77 @@ services:
elasticpot:
container_name: elasticpot
restart: always
networks:
- elasticpot_local
ports:
- "9200:9200"
image: "dtagdevsec/elasticpot:1706"
volumes:
- /data/elasticpot:/data/elasticpot
# ELK service
elk:
container_name: elk
# ELK services
## Elasticsearch service
elasticsearch:
container_name: elasticsearch
restart: always
env_file:
- /etc/tpot/elk/environment
environment:
- bootstrap.memory_lock=true
# - "ES_JAVA_OPTS=-Xms1g -Xmx1g"
cap_add:
- IPC_LOCK
ulimits:
memlock: -1
nofile: 65536
memlock:
soft: -1
hard: -1
nofile:
soft: 65536
hard: 65536
# mem_limit: 2g
ports:
- "127.0.0.1:64298:9200"
image: "dtagdevsec/elasticsearch:1706"
volumes:
- /data:/data
## Kibana service
kibana:
container_name: kibana
restart: always
depends_on:
- elasticsearch
ports:
- "127.0.0.1:64296:5601"
- "127.0.0.1:64302:9100"
- "127.0.0.1:64298:9200"
image: "dtagdevsec/elk:1706"
image: "dtagdevsec/kibana:1706"
## Logstash service
logstash:
container_name: logstash
restart: always
depends_on:
- elasticsearch
env_file:
- /etc/tpot/elk/environment
image: "dtagdevsec/logstash:1706"
volumes:
- /data:/data
- /var/log:/data/host/log
## Elasticsearch-head service
head:
container_name: head
restart: always
depends_on:
- elasticsearch
ports:
- "127.0.0.1:64302:9100"
image: "dtagdevsec/head:1706"
# Ewsposter service
ewsposter:
container_name: ewsposter
restart: always
networks:
- ewsposter_local
image: "dtagdevsec/ewsposter:1706"
volumes:
- /data:/data
@ -84,6 +139,8 @@ services:
glastopf:
container_name: glastopf
restart: always
networks:
- glastopf_local
ports:
- "80:80"
image: "dtagdevsec/glastopf:1706"
@ -122,6 +179,8 @@ services:
spiderfoot:
container_name: spiderfoot
restart: always
networks:
- spiderfoot_local
ports:
- "127.0.0.1:64303:8080"
image: "dtagdevsec/spiderfoot:1706"
@ -131,6 +190,8 @@ services:
container_name: ui-for-docker
command: -H unix:///var/run/docker.sock --no-auth
restart: always
networks:
- ui-for-docker_local
ports:
- "127.0.0.1:64299:9000"
image: "dtagdevsec/ui-for-docker:1706"