Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Set Security.force_https just when baseurl starts with https:// #5

Merged
merged 3 commits into from
Jan 5, 2022
Merged

Set Security.force_https just when baseurl starts with https:// #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
a16f33d
Set `Security.force_https` just when baseurl starts with `https://`
ondj Jan 5, 2022
5e16f18
README: Show how to build MISP on top of AlmaLinux or Rocky Linux
ondj Jan 5, 2022
0234850
Actions: Set timeout to 60 minutes
ondj Jan 5, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/docker-image.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,6 @@ name: Docker Image CI
on:
push:
branches: [ main ]
tags: [ 'v*' ]
pull_request:
branches: [ main ]

Expand All @@ -13,6 +12,7 @@ env:
jobs:
build:
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
-
name: Checkout
Expand Down
2 changes: 1 addition & 1 deletion Config/config.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -132,7 +132,7 @@
),
'Security' =>
array (
'force_https' => true,
'force_https' => {{ 'true' if MISP_BASEURL.startswith('https://') else 'false' }},
'csp_enforce' => true,
'syslog' => true,
'syslog_to_stderr' => false,
Expand Down
7 changes: 6 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ to update MISP from the user interface and instead, an admin should download a n

Docker Compose file contains MISP itself, [MISP Modules](https://github.com/NUKIB/misp-modules), MariaDB and Redis, so everything you need to run MISP. Just run:

curl --proto '=https' --tlsv1.3 -O https://raw.githubusercontent.com/NUKIB/misp/main/docker-compose.yml
curl --proto '=https' --tlsv1.2 -O https://raw.githubusercontent.com/NUKIB/misp/main/docker-compose.yml
docker compose up -d

Then you can access MISP in your browser by accessing `localhost:8080`. Default user after installation is `admin@admin.test` with password `admin`.
Expand Down Expand Up @@ -42,6 +42,10 @@ If you don't trust image build by GitHub Actions and stored in GitHub Container

docker build --build-arg MISP_VERSION=v2.4.152 -t ghcr.io/nukib/misp https://github.com/NUKIB/misp.git#main

If you don't like CentOS Stream, you can use as base image different distribution that is compatible with CentOS, like [AlmaLinux](https://hub.docker.com/_/almalinux) or [Rocky Linux](https://hub.docker.com/r/rockylinux/rockylinux):

docker build --build-arg BASE_IMAGE=almalinux -t ghcr.io/nukib/misp https://github.com/NUKIB/misp.git#main

### Automation

Automation tasks are run by [jobber](https://github.com/dshearer/jobber) application, which is managed by `supervisor`. Check `.jobber` file for tasks definition.
Expand Down Expand Up @@ -74,6 +78,7 @@ By default, MISP requires Redis. MISP will connect to Redis defined in `REDIS_HO
* `REDIS_PASSWORD` (optional, string)

#### Default Redis databases

* `10` - ZeroMQ connector
* `11` - SimpleBackgroundJobs
* `12` - session data if `PHP_SESSIONS_IN_REDIS` is enabled
Expand Down