Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create default config files for Wazuh #26

Closed
2 tasks done
Tracked by #1
AlexRuiz7 opened this issue Feb 17, 2023 · 3 comments · Fixed by #40 or #53
Closed
2 tasks done
Tracked by #1

Create default config files for Wazuh #26

AlexRuiz7 opened this issue Feb 17, 2023 · 3 comments · Fixed by #40 or #53
Assignees
Labels
level/task Task issue type/enhancement New feature or request

Comments

@AlexRuiz7
Copy link
Member

AlexRuiz7 commented Feb 17, 2023

Description

We need to create the default configuration files for Wazuh. More precisely, the opensearch_dashboards.yml file.

Also, some of the base changes were applied directly to the source code, and later had to be reverted due to tests not passing. These changes will be applied using the corresponding configuration options.

Changes

@AlexRuiz7
Copy link
Member Author

AlexRuiz7 commented Apr 14, 2023

opensearch_dashboards.yml

This file is included in the production archives as is. This means that whatever is in this file at the moment of building the app is included in the resulting packages.

Here's the content that should contain this file after installing the app.
Note that the security plugin is installed by default, hence the opensearch_security options.

server.host: 0.0.0.0
server.port: 443
opensearch.hosts: https://localhost:9200
opensearch.ssl.verificationMode: certificate
#opensearch.username:
#opensearch.password:
opensearch.requestHeadersAllowlist: ["securitytenant","Authorization"]
opensearch_security.multitenancy.enabled: false
opensearch_security.readonly_mode.roles: ["kibana_read_only"]
server.ssl.enabled: true
server.ssl.key: "/etc/wazuh-dashboard/certs/dashboard-key.pem"
server.ssl.certificate: "/etc/wazuh-dashboard/certs/dashboard.pem"
opensearch.ssl.certificateAuthorities: ["/etc/wazuh-dashboard/certs/root-ca.pem"]
uiSettings.overrides.defaultRoute: /app/wazuh

opensearchDashboards.branding:
  useExpandedHeader: false

This content must only be added after the security and Wazuh plugins have been included, otherwise the app won't work properly. See the Assemblestage here.

@AlexRuiz7
Copy link
Member Author

We are deciding where to store the default configuration file.

@yenienserrano
Copy link
Member

Re-opened in #53

See #1 (comment) for details.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
level/task Task issue type/enhancement New feature or request
Projects
No open projects
Status: Done
3 participants