Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Disable TLSv1 + TLSv1.1 and enable TLSv1.3 #402

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Disable TLSv1 + TLSv1.1 and enable TLSv1.3 #402

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
522e121
Disable TLSv1 + TLSv1.1 and enable TLSv1.3
woundride Apr 22, 2022
3acc65a
elasticsearch-daily-cleanup.sh
woundride May 17, 2022
3a64992
Update cleanup.sh
woundride Nov 4, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docker/containers-data/nginx/nginx.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,8 +32,8 @@ http {
# SSL Settings
##

ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.3 TLSv1.2;
ssl_prefer_server_ciphers off;

##
# Logging Settings
Expand Down
22 changes: 2 additions & 20 deletions docker/scripts/cleanup.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,26 +7,8 @@
#
# GPLv3 <http://www.gnu.org/licenses/>.

BASEDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )/.." &> /dev/null && pwd )"

function Help(){
# Display Help
{ echo "*** cleanup.sh help ***"
echo
echo "Use this script to remove all data from elasticsearch and suricata"
echo "Containers must be running for the data to be removed"
echo
echo -e " Syntax: cleanup.sh"
echo
echo

} | fmt
}

if [ $# -gt 0 ]; then
Help
exit -1
fi
#BASEDIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )/.." &> /dev/null && pwd )"
BASEDIR="/opt/selksd/SELKS/docker/"


## TEMPORARY FIX WHILE PERMISSION ISSUE
Expand Down
20 changes: 20 additions & 0 deletions docker/scripts/elasticsearch-daily-cleanup.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
#! /bin/sh
# © Charles BLANC-ROLIN - https://pawpatrules.fr
# This script comes with ABSOLUTELY NO WARRANTY!
# License : GPLv3
# This script delete Logstash indexes on Elastic Search containter.
# It is intended to be used daily via cron, if data is older than the number of retention days you set, it will not be deleted.

# To enable, uncomment the last line of the script and add this line in OS crontab (not in container) for root user :
# 00 03 * * * sh /opt/selksd/SELKS/docker/scripts/elasticsearch-daily-cleanup.sh

# Define number of days (>1) you want to keep :

RETENTION=15

echo "\n##########################################################\nElastic Search Daily Cleanup Script for SELKS with Docker\n##########################################################\n"
echo "You've choosed $RETENTION days of retention\n"
echo "These indexes will be deleted :\n"
docker exec scirius curl -s http://elasticsearch:9200/_cat/indices/*`date +%Y.%m.%d -d "-$RETENTION days"`?pretty
echo "\nDeletion process starting..."
#docker exec scirius curl -X DELETE -s -i http://elasticsearch:9200/*`date +%Y.%m.%d -d "-$RETENTION days"`?pretty