MISP
/
misp-docker
mirror of https://github.com/MISP/misp-docker
2
0
Fork 0
Code Issues Releases Wiki Activity
303 Commits
2 Branches
0 Tags
3.3 MiB
Commit Graph

147 Commits (7b69ffe951ef2e09f1948cdbe08f9e4541c59b2f)

Author SHA1 Message Date
E. Balsa dccadb0337 Change config file permissions 2021-04-14 14:58:22 +02:00
Eduardo Balsa 7f6fcdde85 Added support for brotli 2021-04-14 14:20:49 +02:00
Eduardo Balsa 3a3f0637e4 Added support for brotli 2021-04-14 14:13:37 +02:00
Eduardo Balsa a3074400e0 Added support for brotli 2021-04-14 14:11:16 +02:00
Eduardo Balsa fd30185aa9 Added support for rdkafka 2021-04-14 14:06:54 +02:00
Eduardo Balsa d3ef1564d2 Added support for rdkafka 2021-04-14 14:04:17 +02:00
Eduardo Balsa 87a324b0cd Added support for rdkafka 2021-04-14 14:02:31 +02:00
Eduardo Balsa 42a936b3d4
Spacing OCD 2021-04-08 08:40:57 +02:00
Eduardo Balsa a0c35d7720
Making codacy happy take 2 2021-04-08 08:34:57 +02:00
Eduardo Balsa 2acb7d4a97
Making codacy happy 2021-04-08 08:26:44 +02:00
Eduardo Balsa 0c84e0b71b
Configuring nginx for cert authentication 
If the user enables cert authentication on the docker-compose file we must do the following changes to allow CertAuth to work
- Pass on SSL_CLIENT_I_DN and SSL_CLIENT_S_DN to PHP
- Enable ssl_client_certificate using  /etc/nginx/certs/ca.pem
- Enable the CertAuth ( https://github.com/MISP/MISP/tree/2.4/app/Plugin/CertAuth ) plugin on the bootstrap.php file
 2021-04-07 16:42:20 +02:00
Garrit Schroeder c21dabd62c move php composer dependency into composer-build stage 2021-03-15 18:11:40 +01:00
Garrit Schroeder 9977d9281f install openid connect dependencies 2021-03-15 16:49:11 +01:00
Garrit Schroeder c6545a7299 forward url parameters to php 2021-03-15 16:47:08 +01:00
Jason Kendall 1684553045 Better way to remove extra pip wheel packages. Fixes #101 2021-03-10 13:01:52 -05:00
Jason Kendall 88c6be64e7 Add php-intl and php-bcmath for #93 2021-02-16 19:00:52 -05:00
Jason Kendall 6da2a69d40 Actual pre-grab/build all python modules, work around cryptography version issues 2021-02-16 17:37:51 -05:00
Sentinel Bot d00c31ef33
Replace redis 127.0.0.1 in cake config 2020-12-29 22:40:32 +00:00
qh4t ce26836c90 Add php-zip 2020-09-10 19:35:10 -05:00
James Droste 6b4ae09b08
Allow customization of the MISP Modules server 
Similar to redis, we should allow the ability to customize this value, as it gets overwritten on startup
 2020-08-25 17:04:06 -07:00
Anders Einar Hilden efcb8a7da9 entrypoint_nginx.sh: Make it "safe" to run with INIT=true multiple times 2020-07-27 15:38:25 +00:00
Jason Kendall 270e20806d Move SSL certs /etc/nginx/certs - fixes #53 2020-05-28 20:23:33 -04:00
Jason Kendall 6fb8b182a9 Prevent globbing and word splitting 2020-05-28 19:51:41 -04:00
Jason Kendall 3773870ae3 Ensure upstream files are synced to virtual mount - closes 52 2020-05-28 19:49:27 -04:00
Jason Kendall 29949f8f5f Default to modern nginx security - resolves #50 2020-05-28 19:38:33 -04:00
Jason Kendall 9d2e722140 Default to modern nginx security - resolves #50 2020-05-28 19:33:54 -04:00
Jason Kendall 5083315a00 Revert "Ensure CA certs are updated" 
This reverts commit 5b67d6c8a4.
 2020-05-18 09:22:41 -04:00
Jason Kendall 5b67d6c8a4 Ensure CA certs are updated 2020-05-15 12:39:53 -04:00
Jason Kendall b77ce6c623 Set DB name from VAR closes #45, cleanup docker-compose env 2020-03-21 12:10:13 -04:00
Jason Kendall 7e997fb3fd Don't recreate symlinks - closes #42 2020-03-21 11:48:43 -04:00
Jason Kendall a676d0b65f Match nginx max upload to php 2020-03-20 10:14:53 -04:00
Jason Kendall 5efd4dd8f6 Add FPM timeout to nginx 2020-03-17 18:32:01 -04:00
Jason Kendall 6a7f555def Disable IPv6 option 2020-03-12 09:40:27 -04:00
Jason Kendall dcd893e069 Sync Servers now set be ENV SYNCSERVERS - Closes #40 2020-03-11 14:00:10 -04:00
Jason Kendall 49f65a9b54 Always use Bash, make fifo if it doesn't exist, closes #39 2020-03-06 11:09:11 -05:00
Jason Kendall 003d4cd1d7 Add custom entrypoint closes #15 2020-03-06 11:00:35 -05:00
Jason Kendall 0170dc6427 Simplify workers entrypoint 2020-03-05 11:22:23 -05:00
Jason Kendall b2f76743af Fix some order of operations 2020-02-27 18:14:59 -05:00
Jason Kendall 4c7efe4977 Use distributed configs for defaults 2020-02-27 18:10:39 -05:00
Jason Kendall c57f2669ec ENV to disable port 80 redirect - fixes #34 2020-02-27 15:28:21 -05:00
Jason Kendall 690094e6ed Seperate misp configs per port 2020-02-25 09:24:17 -05:00
Jason Kendall 89caffc58e Fix #31 auto-generating SSL certs 2020-02-24 21:09:08 -05:00
Jason Kendall e9614b253b Add procps for ps and kill 2020-02-24 20:14:47 -05:00
Jason Kendall 72881df281
Merge pull request #29 from seanthegeek/patch-1 
Remove dhparams.pem and chain.pem check
 2020-02-24 19:35:39 -05:00
Sean Whalen 8d928399e1
Update entrypoint_nginx.sh 2020-02-24 19:25:58 -05:00
Jason Kendall e7ab8db479 .gitignore broken, didn't actually add this file 2020-02-24 13:36:42 -05:00
Jason Kendall 3902256c9c Move php config to a fpm entrypoint 2020-02-24 13:31:37 -05:00
Sean Whalen 19a634763d
Remove dhparams.pem and chain.pem check 
These files are not needed with the new nginx config
 2020-02-24 13:17:07 -05:00
Sean Whalen a8b43368b9
Write nginx errors to /dev/stderr 2020-02-24 13:05:07 -05:00
Sean Whalen 8198a6eded
Revert log file linking 2020-02-24 13:02:24 -05:00
Sean Whalen e1af198d4c
Forward nginx request and error logs to docker 2020-02-23 22:10:58 -05:00
Sean Whalen 07cbd8b84f
Improve security and privacy in nginx config 
- Use modern protocols (TLSv1.3 and HTTTP2)
- Enable browser XSS prevention
- Disable `Referrer` headers (prevent information leaks)
- Prohibit search engine crawling
- Disable access logs
 2020-02-23 14:59:26 -05:00
Jason Kendall 8a37160fc3 Move full MISP branch to MISP_TAG arg 2020-02-21 10:30:15 -05:00
Jason Kendall 674dd65739 Remove more apache stuff 2020-02-21 10:15:05 -05:00
Jason Kendall 0a3a46ad63 Work arround MISP/issues/5608 2020-02-21 10:14:43 -05:00
Jason Kendall 9dd2fb11d8 Pull latest images before build 2020-02-21 10:05:42 -05:00
Jason Kendall d1a95be518 add missing nginx misp config file 2020-02-19 20:37:14 -05:00
Jason Kendall b5f20b951d First stab at nginx 2020-02-19 20:21:49 -05:00
Jason Kendall d1ee246e25 Add more sane defaults 2020-02-19 10:57:02 -05:00
Jason Kendall b8a8c6454e prevent globbing on the variable 2020-02-19 09:38:41 -05:00
Jason Kendall e8ae81b65c Set Redis FQDN in misp 2020-02-19 09:30:43 -05:00
Jason Kendall 1c80986c66 Add ssdeep extension ini files 2020-02-19 09:26:42 -05:00
Jason Kendall 451a26dfb1 Fix post_hook tagging 2020-02-12 11:06:21 -05:00
Jason Kendall 5a28107595 Some code style fixes 2020-02-12 09:37:23 -05:00
Jason Kendall 978e1d2828 Add post_push docker hook, fixes #8 2020-02-12 09:03:47 -05:00
Jason Kendall 8dcfb9744d Define which python3 to use, fixes #10 2020-02-12 08:55:16 -05:00
Jason Kendall eeeec0264a Use globs fixes #11 2020-02-12 08:51:41 -05:00
Jason Kendall 693fae2892 Specify composer version, fixes #12 2020-02-12 08:47:01 -05:00
Jason Kendall ea258885d3 Redirect http virtual host to https - closes #9 2020-02-03 19:25:39 -05:00
Jason Kendall 5dd9367736 Use cake to set baseurl 2020-01-30 11:29:49 -05:00
Jason Kendall 9932519113 Remove env call, and copy to server build hook 2020-01-30 10:45:07 -05:00
Jason Kendall 10c2f2ad6b DockerHub build hooks 2020-01-30 10:06:12 -05:00
Jason Kendall 425b712e94 DockerHub build hooks 2020-01-30 10:05:56 -05:00
Jason Kendall 07e5ef035d Move Build Args into .env 2020-01-30 09:34:17 -05:00
Jason Kendall 33e3155774 Set baseurl to localhost so compose works out of the box 2020-01-29 15:15:17 -05:00
Jason Kendall e5937ecdb8 Make SSL certs in INIT mode if any part doesn't exist 2020-01-29 14:47:26 -05:00
Jason Kendall f693805087 Bump MISP 2.4.120 2020-01-28 12:54:36 -05:00
Jason Kendall 5d816fb223 MISP 2.4.119 2020-01-28 11:38:12 -05:00
Jason Kendall e1eb6be73f Comments and remove layers we don't need 2019-12-11 09:47:04 -05:00
Jason Kendall bb482ddebf Move versions and make them 'global' 2019-12-11 09:31:09 -05:00
Jason Kendall a36ebe8f7d Move composer build to it's own builder 2019-12-11 09:12:41 -05:00
Jason Kendall 061654e3e1 simplify python builder 2019-12-11 09:09:57 -05:00
Jason Kendall 90994c86d0 organize and cleanup 2019-11-28 17:46:30 -05:00
Jason Kendall 3f1117eee4 Don't keep wheels we don't need 2019-11-28 12:28:02 -05:00
Jason Kendall 7a7f936391 Minor cleanup of dockerfile 2019-11-28 12:11:48 -05:00
Jason Kendall 18a7e8919a Re-order apt install for clairity 2019-11-28 11:48:44 -05:00
Jason Kendall 52f6810177 Pre-build PHP modules 2019-11-28 11:33:12 -05:00
Jason Kendall c5da23be90 pre-build python modules, and only pull submodules we need 2019-11-28 10:46:43 -05:00
Jason Kendall b6bce62152 More Dockerfile Cleanup 2019-11-28 09:33:55 -05:00
Jason Kendall 495e1f5c5d Remove commands that already exist in composer.json 2019-11-28 09:19:51 -05:00
Jason Kendall 3037facb26 Show output of cron jobs to docker console 2019-11-27 09:09:20 -05:00
Jason Kendall ad37482cc4 Remove DCSO fake cron, and use real cron 2019-11-26 16:18:52 -05:00
Jason Kendall 61b0c6b781 Add GPG to the image 2019-11-26 12:06:19 -05:00
Jason Kendall fde16d5a34 Reduce size of image more 2019-11-26 09:24:37 -05:00
Jason Kendall 52d9e23037 Minimize image size 2019-11-25 19:23:59 -05:00
Jason Kendall 068061a30a Reduce some size 2019-11-25 19:14:49 -05:00
Jason Kendall d715bff081 Initial 2019-11-25 16:58:18 -05:00