Skip to content

Conversation

@undebutant
Copy link
Collaborator

Changes summary:

  • Set xpack.security.enabled env variable to true in ElasticSearch container
  • Provide elastic password using ELASTIC_PASSWORD env variable and Docker Compose .env
  • Create a index.conf.template file for both TheHive and Cortex, filled with ElasticSearch password using the init.sh script
  • Update ElasticSearch container health check to use basic auth

@undebutant undebutant force-pushed the enable-elasticsearch-authentication branch from 3bb23af to e37fdf7 Compare March 20, 2025 14:14
@jeromeleonard
Copy link
Collaborator

What about updating the following part in the conf files:

include "/etc/thehive/index.conf"
include "/etc/thehive/secret.conf"

# DATABASE CONFIGURATION
db.janusgraph.storage {
  backend = cql
  hostname = ["cassandra"]
  cql {
    cluster-name = thp
    keyspace = thehive
  }
}

with:

# SECRET CONFIGURATION
include "/etc/thehive/secret.conf"

# DATABASE CONFIGURATION
db.janusgraph.storage {
  backend = cql
  hostname = ["cassandra"]
  cql {
    cluster-name = thp
    keyspace = thehive
  }
}

# INDEX DATABASE CONFIGURATION
include "/etc/thehive/index.conf"

?

@undebutant
Copy link
Collaborator Author

I've updated the application.conf files following your suggestion @jeromeleonard :)

@undebutant undebutant force-pushed the enable-elasticsearch-authentication branch from 39a5e72 to a0f79f3 Compare April 16, 2025 12:41
@jeromeleonard jeromeleonard merged commit a35a828 into main Apr 25, 2025
@undebutant undebutant deleted the enable-elasticsearch-authentication branch May 16, 2025 11:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants