-
Notifications
You must be signed in to change notification settings - Fork 0
/
docker-compose.yml
149 lines (141 loc) · 3.25 KB
/
docker-compose.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
version: '3.2'
services:
elasticsearch:
container_name: honey_es
build:
context: elasticsearch/
args:
ELK_VERSION: $ELK_VERSION
environment:
ES_JAVA_OPTS: "-Xmx256m -Xms256m"
ELASTIC_PASSWORD: changeme
discovery.type: single-node
volumes:
- type: bind
source: ./elasticsearch/config/elasticsearch.yml
target: /usr/share/elasticsearch/config/elasticsearch.yml
read_only: true
- esdata:/usr/share/elasticsearch/data
ports:
- "9200:9200"
- "9300:9300"
ulimits:
memlock:
soft: -1
hard: -1
networks:
- elk
kibana:
container_name: honey_ki
build:
context: kibana/
args:
ELK_VERSION: $ELK_VERSION
volumes:
- type: bind
source: ./kibana/config/kibana.yml
target: /usr/share/kibana/config/kibana.yml
read_only: true
ports:
- "5601:5601"
networks:
- elk
depends_on:
- elasticsearch
filebeat:
container_name: honey_fb
build:
context: filebeat/
args:
ELK_VERSION: $ELK_VERSION
volumes:
- /var/lib/docker/volumes:/var/lib/docker/volumes:ro
- /var/run/docker.sock:/var/run/docker.sock
networks:
- elk
depends_on:
- elasticsearch
logstash:
container_name: honey_ls
build:
context: logstash/
args:
ELK_VERSION: $ELK_VERSION
volumes:
- type: bind
source: ./logstash/config/logstash.yml
target: /usr/share/logstash/config/logstash.yml
read_only: true
- type: bind
source: ./logstash/pipeline
target: /usr/share/logstash/pipeline
read_only: true
ports:
- "5000:5000"
- "9600:9600"
environment:
LS_JAVA_OPTS: "-Xmx256m -Xms256m"
networks:
- elk
depends_on:
- elasticsearch
cowrie:
container_name: honey_cowrie
restart: always
build:
context: cowrie/
ports:
- "2222:2222"
- "2223:2223"
volumes:
- cowrie-var:/cowrie/cowrie-git/var/log/cowrie/
- cowrie-etc:/cowrie/cowrie-git/etc
networks:
- honeypots
dionaea:
container_name: honey_dionaea
restart: always
tty: true
build:
context: dionaea/
ports:
- "20:20"
- "21:21"
- "42:42"
- "69:69/udp"
- "81:81"
- "135:135"
- "443:443"
- "445:445"
- "1433:1433"
- "1723:1723"
- "1883:1883"
- "1900:1900"
- "3306:3306"
- "5060:5060/udp"
- "5061:5061"
- "11211:11211"
- "27017:27017"
volumes:
- /data/dionaea/roots/ftp:/opt/dionaea/var/dionaea/roots/ftp
- /data/dionaea/roots/tftp:/opt/dionaea/var/dionaea/roots/tftp
- /data/dionaea/roots/www:/opt/dionaea/var/dionaea/roots/www
- /data/dionaea/roots/upnp:/opt/dionaea/var/dionaea/roots/upnp
- /data/dionaea:/opt/dionaea/var/dionaea
- /data/dionaea/binaries:/opt/dionaea/var/dionaea/binaries
- dionaea:/opt/dionaea/var/log
- /data/dionaea/rtp:/opt/dionaea/var/dionaea/rtp
networks:
- honeypots
networks:
elk:
honeypots:
volumes:
esdata:
driver: local
cowrie-var:
driver: local
cowrie-etc:
driver: local
dionaea:
driver: local