Skip to content
Snippets Groups Projects
Commit 263e6b0d authored by root's avatar root
Browse files

configure authentication in haproxy for UI and fix some tags

parent c325f588
No related branches found
No related tags found
No related merge requests found
......@@ -15,10 +15,10 @@
- stats
- nifi
- nifiports
- odfe
- opensearches
- keycloak
- thehive
- cortex
- misp
- user-mgmt-ui
- kibana
- opensearch-dashboards
......@@ -16,6 +16,10 @@ defaults
timeout client 20s
timeout server 20s
userlist mycredentials
user {{soctools_users[0].username}} insecure-password {{lookup('password', '{{playbook_dir}}/secrets/passwords/{{soctools_users[0].username}}')}}
user {{soctools_users[0].email}} insecure-password {{lookup('password', '{{playbook_dir}}/secrets/passwords/{{soctools_users[0].username}}')}}
listen stats
bind 0.0.0.0:8888 ssl crt /etc/ssl/haproxy alpn h2,http/1.1
stats enable
......@@ -134,6 +138,7 @@ listen user-mgmt-ui
option httplog
server soctools_server {{ soctools_network_gw }}:8050
tcp-request connection reject if !{ src -f /usr/local/etc/haproxy/user-mgmt-ui_whitelist.lst }
http-request auth unless { http_auth(mycredentials) }
{% for port in range(5000, 5020) %}
......
......@@ -6,17 +6,17 @@
- include: start.yml
tags:
- start
- start-odfees
- start-opensearches
- init
- include: stop.yml
tags:
- stop
- stop-odfees
- stop-opensearches
- include: update-config.yml
tags:
- update-config
- update-odfees-config
- update-opensearches-config
- include: restart.yml
tags:
- restart
- restart-odfees
- restart-opensearches
......@@ -30,7 +30,7 @@
roles:
- opensearches
- name: Update Configs for Opensearch Kibana
- name: Update Configs for Opensearch Dashboards
hosts: opensearchdashboardscontainers
roles:
- opensearch-dashboards
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment