This repository contains sample Terraform and cloud-init code to easily launch and update TheHive and Cortex instances.
The cloud distributions were built with operations and automation in mind. We wanted DevSecOps-friendly products that would fit in most organisations, no matter how simple or complex their infrastructure.
The images are updated whenever a new TheHive or Cortex version is released. No need to bother updating your instances anymore, just launch a new one with a fresh image as if it were a container!
- Dedicated data volumes: All persistent data is stored on dedicated volumes, not in the root filesystem.
- Easy-resizing: Resizing independent data volumes is a lot easier as no action is required within the instance at the operating system level.
- Ubuntu-based: Our images are based on the official Ubuntu 20.04 LTS distributions from Canonical.
- Hardened OS: The underlying Ubuntu OS is hardened to comply with CSL1 - that's Common Sense Level 1. Ok that's not a real thing (yet) but the OS really was carefully configured to be as secured as possible by default while remaining usable in most contexts. Note that there are no iptables surprises inside the image to avoid conflicting behaviour with security groups of firewalls.
- Application only: The images include either the TheHive or Cortex application only. They are not meant to be public-facing on their own and should be deployed within your VPC and exposed with the public facing system of your choice (load balancer, reverse proxy). More information on the recommended reference architecture is provided in each cloud distribution user guide.