Skip to content

Latest commit

 

History

History

thehive35-cortex3-es7-nginx-https

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
vol
vol
 
 
.env
.env
 
 
README.md
README.md
 
 
docker-compose.yml
docker-compose.yml
 
 

README.md

thehive35-cortex3-es7-nginx-https

This is a docker-compose configuration to run a TheHive 3.5.0-1 + Cortex 3.1.0-1 instance with an Elasticsearch 7.8.1 database backend. Nginx 1.19.5 is used as reverse proxy in which you supply your own ssl certificates.

Elasticsearch storage has not been configured as persistent in this docker-compose file.

.env File

Populate the .env with the following entries.

variable entry
CORTEX_KEY API KEY OF CORTEX USER - POPULATED POST SETUP
JOB_DIRECTORY DIRECTORY TO STORE JOB FILES

NOTE: You need to configure Cortex to generate the required API KEY. Once you have created the API KEY you need to rerun docker-compose up -d thehive.

Usage

docker-compose up -d

Volume Configuration

  • Local files stored in ./vol/nginx are mapped to the container under /etc/nginx/conf.d.
  • Local files stored in ./vol/ssl are mapped to the container under /etc/ssl.

TODO

The following items require your attention:

  • Update thehive.conf and cortex.conf files as appropriate
    • Update server_name for your fqdn
    • Review/modify the configuration for your requirements
  • Add your certificates to ./vol/ssl
  • Update ./vol/nginx/certs.conf with the certificate file names
  • Update .env with the CORTEX_KEY after Cortex has been setup and configured
  • Add persistent storage for Elasticsearch