Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
307 changes: 154 additions & 153 deletions docker-compose.yml
Original file line number Diff line number Diff line change
Expand Up @@ -59,7 +59,7 @@ services:
volumes:
- s3data:/data
ports:
- "9000:9000"
- "9001:9000"
environment:
MINIO_ROOT_USER: ${MINIO_ROOT_USER}
MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}
Expand Down Expand Up @@ -121,7 +121,7 @@ services:
###########################

opencti:
image: opencti/platform:6.9.8
image: opencti:1.1
environment:
- NODE_OPTIONS=--max-old-space-size=8096
- APP__PORT=8080
Expand All @@ -148,6 +148,7 @@ services:
- SMTP__PORT=25
- PROVIDERS__LOCAL__STRATEGY=LocalStrategy
- APP__HEALTH_ACCESS_KEY=${OPENCTI_HEALTHCHECK_ACCESS_KEY}
- APP__BACK_END_URL=${BACK_END_URL}
ports:
- "${OPENCTI_PORT}:8080"
depends_on:
Expand All @@ -165,167 +166,167 @@ services:
interval: 10s
timeout: 5s
retries: 20
worker:
image: opencti/worker:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
depends_on:
opencti:
condition: service_healthy
deploy:
mode: replicated
replicas: 3
restart: always
# worker:
# image: opencti/worker:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# depends_on:
# opencti:
# condition: service_healthy
# deploy:
# mode: replicated
# replicas: 3
# restart: always

###########################
# OPENCTI CONNECTORS #
###########################

connector-export-file-stix:
image: opencti/connector-export-file-stix:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_STIX_ID} # Valid UUIDv4
- CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
- CONNECTOR_NAME=ExportFileStix2
- CONNECTOR_SCOPE=application/json
restart: always
depends_on:
opencti:
condition: service_healthy
connector-export-file-csv:
image: opencti/connector-export-file-csv:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_CSV_ID} # Valid UUIDv4
- CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
- CONNECTOR_NAME=ExportFileCsv
- CONNECTOR_SCOPE=text/csv
restart: always
depends_on:
opencti:
condition: service_healthy
connector-export-file-txt:
image: opencti/connector-export-file-txt:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_TXT_ID} # Valid UUIDv4
- CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
- CONNECTOR_NAME=ExportFileTxt
- CONNECTOR_SCOPE=text/plain
restart: always
depends_on:
opencti:
condition: service_healthy
connector-import-file-stix:
image: opencti/connector-import-file-stix:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_IMPORT_FILE_STIX_ID} # Valid UUIDv4
- CONNECTOR_TYPE=INTERNAL_IMPORT_FILE
- CONNECTOR_NAME=ImportFileStix
- CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
- CONNECTOR_SCOPE=application/json,text/xml
- CONNECTOR_AUTO=true # Enable/disable auto-import of file
restart: always
depends_on:
opencti:
condition: service_healthy
connector-import-document:
image: opencti/connector-import-document:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_IMPORT_DOCUMENT_ID} # Valid UUIDv4
- CONNECTOR_TYPE=INTERNAL_IMPORT_FILE
- CONNECTOR_NAME=ImportDocument
- CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
- CONNECTOR_SCOPE=application/pdf,text/plain,text/html
- CONNECTOR_AUTO=true # Enable/disable auto-import of file
- CONNECTOR_ONLY_CONTEXTUAL=false # Only extract data related to an entity (a report, a threat actor, etc.)
- IMPORT_DOCUMENT_CREATE_INDICATOR=true
restart: always
depends_on:
opencti:
condition: service_healthy
connector-import-file-yara:
image: opencti/connector-import-file-yara:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_IMPORT_FILE_YARA_ID} # Valid UUIDv4
- CONNECTOR_NAME=ImportFileYARA
- CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
- CONNECTOR_SCOPE=text/yara+plain
- CONNECTOR_AUTO=false # Enable/disable auto-import of file
- YARA_IMPORT_FILE_SPLIT_RULES=true
restart: always
depends_on:
opencti:
condition: service_healthy
connector-analysis:
image: opencti/connector-import-document:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_ANALYSIS_ID} # Valid UUIDv4
- CONNECTOR_TYPE=INTERNAL_ANALYSIS
- CONNECTOR_NAME=ImportDocumentAnalysis
- CONNECTOR_VALIDATE_BEFORE_IMPORT=false # Validate any bundle before import
- CONNECTOR_SCOPE=application/pdf,text/plain,text/html
- CONNECTOR_AUTO=true # Enable/disable auto-import of file
- CONNECTOR_ONLY_CONTEXTUAL=false # Only extract data related to an entity (a report, a threat actor, etc.)
restart: always
depends_on:
opencti:
condition: service_healthy
connector-import-external-reference:
image: opencti/connector-import-external-reference:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_IMPORT_EXTERNAL_REFERENCE_ID}
- CONNECTOR_NAME=ImportExternalReference
restart: always
depends_on:
opencti:
condition: service_healthy
# connector-export-file-stix:
# image: opencti/connector-export-file-stix:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_STIX_ID} # Valid UUIDv4
# - CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
# - CONNECTOR_NAME=ExportFileStix2
# - CONNECTOR_SCOPE=application/json
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-export-file-csv:
# image: opencti/connector-export-file-csv:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_CSV_ID} # Valid UUIDv4
# - CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
# - CONNECTOR_NAME=ExportFileCsv
# - CONNECTOR_SCOPE=text/csv
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-export-file-txt:
# image: opencti/connector-export-file-txt:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_TXT_ID} # Valid UUIDv4
# - CONNECTOR_TYPE=INTERNAL_EXPORT_FILE
# - CONNECTOR_NAME=ExportFileTxt
# - CONNECTOR_SCOPE=text/plain
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-import-file-stix:
# image: opencti/connector-import-file-stix:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_IMPORT_FILE_STIX_ID} # Valid UUIDv4
# - CONNECTOR_TYPE=INTERNAL_IMPORT_FILE
# - CONNECTOR_NAME=ImportFileStix
# - CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
# - CONNECTOR_SCOPE=application/json,text/xml
# - CONNECTOR_AUTO=true # Enable/disable auto-import of file
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-import-document:
# image: opencti/connector-import-document:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_IMPORT_DOCUMENT_ID} # Valid UUIDv4
# - CONNECTOR_TYPE=INTERNAL_IMPORT_FILE
# - CONNECTOR_NAME=ImportDocument
# - CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
# - CONNECTOR_SCOPE=application/pdf,text/plain,text/html
# - CONNECTOR_AUTO=true # Enable/disable auto-import of file
# - CONNECTOR_ONLY_CONTEXTUAL=false # Only extract data related to an entity (a report, a threat actor, etc.)
# - IMPORT_DOCUMENT_CREATE_INDICATOR=true
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-import-file-yara:
# image: opencti/connector-import-file-yara:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_IMPORT_FILE_YARA_ID} # Valid UUIDv4
# - CONNECTOR_NAME=ImportFileYARA
# - CONNECTOR_VALIDATE_BEFORE_IMPORT=true # Validate any bundle before import
# - CONNECTOR_SCOPE=text/yara+plain
# - CONNECTOR_AUTO=false # Enable/disable auto-import of file
# - YARA_IMPORT_FILE_SPLIT_RULES=true
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-analysis:
# image: opencti/connector-import-document:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_ANALYSIS_ID} # Valid UUIDv4
# - CONNECTOR_TYPE=INTERNAL_ANALYSIS
# - CONNECTOR_NAME=ImportDocumentAnalysis
# - CONNECTOR_VALIDATE_BEFORE_IMPORT=false # Validate any bundle before import
# - CONNECTOR_SCOPE=application/pdf,text/plain,text/html
# - CONNECTOR_AUTO=true # Enable/disable auto-import of file
# - CONNECTOR_ONLY_CONTEXTUAL=false # Only extract data related to an entity (a report, a threat actor, etc.)
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-import-external-reference:
# image: opencti/connector-import-external-reference:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_IMPORT_EXTERNAL_REFERENCE_ID}
# - CONNECTOR_NAME=ImportExternalReference
# restart: always
# depends_on:
# opencti:
# condition: service_healthy

###########################
# OPENCTI DEFAULT DATA #
###########################

connector-opencti:
image: opencti/connector-opencti:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_OPENCTI_ID}
- "CONNECTOR_NAME=OpenCTI Datasets"
- CONNECTOR_SCOPE=marking-definition,identity,location
- CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT=true
- CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL=100
restart: always
depends_on:
opencti:
condition: service_healthy
connector-mitre:
image: opencti/connector-mitre:6.9.8
environment:
- OPENCTI_URL=http://opencti:8080
- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
- CONNECTOR_ID=${CONNECTOR_MITRE_ID}
- CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT=true
- CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL=75
restart: always
depends_on:
opencti:
condition: service_healthy
# connector-opencti:
# image: opencti/connector-opencti:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_OPENCTI_ID}
# - "CONNECTOR_NAME=OpenCTI Datasets"
# - CONNECTOR_SCOPE=marking-definition,identity,location
# - CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT=true
# - CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL=100
# restart: always
# depends_on:
# opencti:
# condition: service_healthy
# connector-mitre:
# image: opencti/connector-mitre:6.9.8
# environment:
# - OPENCTI_URL=http://opencti:8080
# - OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}
# - CONNECTOR_ID=${CONNECTOR_MITRE_ID}
# - CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT=true
# - CONNECTOR_AUTO_CREATE_SERVICE_ACCOUNT_CONFIDENCE_LEVEL=75
# restart: always
# depends_on:
# opencti:
# condition: service_healthy

volumes:
esdata:
Expand Down
Loading