MISP
/
misp-docker
mirror of https://github.com/MISP/misp-docker
2
0
Fork 0
Code Issues Releases Wiki Activity

Update README.md

Steven 2021-03-09 23:07:16 +01:00
parent 507b2fe628
commit 9d2760312e
1 changed files with 9 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
README.md
View File

@ -7,24 +7,20 @@ The files in this repository are used to create a Docker container running a [MI
I rewrote the Docker file to split the components in multiple containers (which is more in the philosophy of Docker). Therefore there is no longer a Dockerfile in the root directory.
The MISP container needs at least a MySQL container to store the data. By default it listen to port 80. I highly recommend to serve it behind a NGinx or Apache reverse proxy.
The MISP container needs at least a MySQL container to store the data. By default it listen to port 443 and port 80, which is redirected to 443.
The build is based on Ubuntu and will install all the required components. The following configuration steps are performed automatically:
The build is based on Ubuntu and will install all the required components, using the INSTALL script provided in the MISP repository.
Using the Install script has the advantage that we can rely on a tested installation routine which is maintained and kept up to date. The amount of custom work to be done in the Dockerfile and run.sh files is limited to the necessary to make MISP container compliant.
The following configuration steps are performed automatically:
* Reconfiguration of the base URL in `config.php`
* Generation of a new salt in `config.php`
* Generation of a self-signed certificate
* Optimization of the PHP environment (php.ini) to match the MISP recommended values
* Creation of the MySQL database
* Generation of the admin PGP key
## Config
* add your "*.crt" and "*.key" files to the ./proxy/ssl folder
If not implementing SSL (not recommended) then simply comment out the appropriate lines in the "./proxy/default.conf" file.
* Update "server_name" in default.conf file (will implement ENVIRONMENT VARIABLE in the future)
# Optional NGINX config
Included is an optional Docker Compose file 'docker-compose-nginx.yml' to spin up a reverse proxy to sit in front of MISP.
* Installation of misp modules
# Building your image
@ -41,27 +37,12 @@ $ vi .env
```
$ docker-compose build
or
$ docker-compose -f docker-compose-nginx.yml build
$ docker-compose -f docker-compose.yml build
```
## Run containers
```
$ docker-compose up
or
$ docker-compose -f docker-compose-nginx.yml up
$ docker-compose -f docker-compose.yml up
```
# Optional NGINX config - SSL certificates
You can create the certificates manually if they are not automatically created.
```
openssl req -new -nodes -x509 -subj "/C=BE/ST=Brussels/L=Brussels/O=CTI/CN=localhost" -days 3650 -newkey rsa:4096 -keyout proxy/ssl/misp.key -out proxy/ssl/misp.crt
```
Then rebuild the proxy container and restart al the containers.
```
docker-compose -f docker-compose-nginx.yml build --no-cache proxy
docker-compose -f docker-compose-nginx.yml up
```