1. # Wazuh App Copyright (C) 2021 Wazuh Inc. (License GPLv2)
    2. version: '3.7'
    3. services:
    4. wazuh:
    5. image: wazuh/wazuh-odfe:4.1.5
    6. hostname: wazuh-manager
    7. restart: always
    8. ports:
    9. - "1514:1514"
    10. - "1515:1515"
    11. - "514:514/udp"
    12. - "55000:55000"
    13. environment:
    14. - ELASTICSEARCH_URL=https://elasticsearch:9200
    15. - ELASTIC_USERNAME=admin
    16. - ELASTIC_PASSWORD=admin
    17. - FILEBEAT_SSL_VERIFICATION_MODE=none
    18. volumes:
    19. - ossec_api_configuration:/var/ossec/api/configuration
    20. - ossec_etc:/var/ossec/etc
    21. #- ossec_logs:/var/ossec/logs
    22. - ossec_queue:/var/ossec/queue
    23. - ossec_var_multigroups:/var/ossec/var/multigroups
    24. - ossec_integrations:/var/ossec/integrations
    25. - ossec_active_response:/var/ossec/active-response/bin
    26. - ossec_agentless:/var/ossec/agentless
    27. - ossec_wodles:/var/ossec/wodles
    28. - filebeat_etc:/etc/filebeat
    29. - "$PWD/wazuh-manager_conf/filebeat_var:/var/lib/filebeat"
    30. - "$PWD/wazuh-manager_conf/ossec/etc/ossec.conf:/var/ossec/etc/ossec.conf"
    31. #- "$PWD/wazuh-manager_conf/ossec/queue:/var/ossec/queue"
    32. - "$PWD/wazuh-manager_conf/ossec/logs:/var/ossec/logs"
    33. elasticsearch:
    34. image: amazon/opendistro-for-elasticsearch:1.12.0
    35. hostname: elasticsearch
    36. restart: always
    37. ports:
    38. - "9200:9200"
    39. volumes:
    40. - "$PWD/wazuh-manager_elasticsearch/data:/usr/share/elasticsearch/data"
    41. - "$PWD/wazuh-manager_elasticsearch/config:/usr/share/elasticsearch/config"
    42. environment:
    43. - discovery.type=single-node
    44. - cluster.name=wazuh-cluster
    45. - network.host=0.0.0.0
    46. - "ES_JAVA_OPTS=-Xms8g -Xmx8g"
    47. - bootstrap.memory_lock=true
    48. ulimits:
    49. memlock:
    50. soft: -1
    51. hard: -1
    52. nofile:
    53. soft: 65536
    54. hard: 65536
    55. kibana:
    56. image: wazuh/wazuh-kibana-odfe:4.1.5
    57. hostname: kibana
    58. restart: always
    59. ports:
    60. - 5602:5601
    61. environment:
    62. - ELASTICSEARCH_USERNAME=admin
    63. - ELASTICSEARCH_PASSWORD=admin
    64. - SERVER_SSL_ENABLED=true
    65. - SERVER_SSL_CERTIFICATE=/usr/share/kibana/config/opendistroforelasticsearch.example.org.cert
    66. - SERVER_SSL_KEY=/usr/share/kibana/config/opendistroforelasticsearch.example.org.key
    67. depends_on:
    68. - elasticsearch
    69. links:
    70. - elasticsearch:elasticsearch
    71. - wazuh:wazuh
    72. volumes:
    73. ossec_api_configuration:
    74. ossec_etc:
    75. ossec_logs:
    76. ossec_queue:
    77. ossec_var_multigroups:
    78. ossec_integrations:
    79. ossec_active_response:
    80. ossec_agentless:
    81. ossec_wodles:
    82. filebeat_etc:
    83. filebeat_var: