“Just because we’re monitoring, doesn’t mean we’re not having fun." – Michael Scott if he worked in cybersecurity
Welcome to Wazzup Wazuh, a delightfully simple setup for the Wazuh security platform using Docker. This repository was forged in the fires of Mount Doom, navigated the Death Star exhaust port, and once beat Dwight Schrute at a beet-growing contest. Brought to you by Ricardo Prins, it's licensed under the MIT License and open for contributions.
"You have my sword. And my bow. And my Wazuh." ⚔️
Wazuh is an open-source security platform that brings together host-based security monitoring and threat detection. It’s like the Fellowship of the Ring, but for cybersecurity. Whether you’re battling Balrogs or Sith Lords, Wazuh has your back.
For more about Wazuh, visit the Wazuh website.
"Help me, Obi-Wan Kenobi. You're my only hope." 👾
This setup is designed to run on a Docker environment. Docker is like the Millennium Falcon of software: It may not look like much, but she’s got it where it counts.
Here's how you can get your Docker environment up and running faster than Han Solo's Kessel Run:
"I'm not superstitious, but I am a little stitious."
- Visit the Docker Desktop for Windows download page.
- Click "Get Docker".
- Run the installer.
- Enjoy your newfound power.
"May the Docker be with you."
- Head to the Docker Desktop for Mac download page.
- Click "Download Docker Desktop for Mac".
- Run the installer.
- Show the world that Macs aren’t just for graphic design.
NOTE: This repo magic doesn't work on Macs with ARM chips.
"One Docker to rule them all."
- Check the Docker Engine overview for your specific Linux distribution instructions.
- Install Docker Engine using the appropriate commands.
- Bask in the glory of your Linux prowess.
"I'm ready to face any challenge that might be foolish enough to face me." 💪
Now that you're equipped with Docker, it's time to deploy the Wazuh platform. You can do this by cloning this repository and using Docker Compose. Here's a guide that even Kevin Malone could follow:
# Clone the repository
git clone https://github.com/ricardoprins/wazzup-wazuh.git
# Go to the directory
cd wazzup-wazuh
# Generate SSL certs
docker-compose -f generate-indexer-certs.yml run --rm generator
# Evoke the final magic script
docker-compose up -d"You miss 100% of the shots you don't take." - Wayne Gretzky - Michael Scott - Docker 🏀
Now, there's only one thing separating you from your Wazuh dashboard.
Open your browser, navigate to https://localhost, and input the user/password combination
(the default values are admin:SecretPassword - these can be changed in the wazuh_indexer\internal_users.yml file)
I hope you find this helpful! Welcome to the magical world of Docker and Wazuh!
"The Force will be with you. Always." ✨
For any issues, feel free to raise an issue on GitHub, or send a raven, lightsaber, or paper airplane. I'm always open for collaboration and contributions. After all, "many hands make light work." That's Elvish, right?
For more of my work and thoughts, check out my blog at ricardoprins.dev.
"If you don’t like it, Stanley, you can go to the back of the bus." Or just fork the repo. That works too.