docker-compose

services:

redis:

image: redis:7.4.1

restart: always

volumes:

- redisdata:/data

healthcheck:

test: ["CMD", "redis-cli", "ping"]

interval: 10s

timeout: 5s

retries: 3

elasticsearch:

image: docker.elastic.co/elasticsearch/elasticsearch:8.17.0

volumes:

- esdata:/usr/share/elasticsearch/data

environment:

# Comment-out the line below for a cluster of multiple nodes

- discovery.type=single-node

# Uncomment the line below below for a cluster of multiple nodes

# - cluster.name=docker-cluster

- xpack.ml.enabled=false

- xpack.security.enabled=false

- thread_pool.search.queue_size=5000

- logger.org.elasticsearch.discovery="ERROR"

- "ES_JAVA_OPTS=-Xms${ELASTIC_MEMORY_SIZE} -Xmx${ELASTIC_MEMORY_SIZE}"

restart: always

ulimits:

memlock:

soft: -1

hard: -1

nofile:

soft: 65536

hard: 65536

healthcheck:

test: curl -s http://elasticsearch:9200 >/dev/null || exit 1

interval: 30s

timeout: 10s

retries: 50

minio:

image: minio/minio:RELEASE.2024-05-28T17-19-04Z # Use "minio/minio:RELEASE.2024-05-28T17-19-04Z-cpuv1" to troubleshoot compatibility issues with CPU

volumes:

- s3data:/data

ports:

- "9000:9000"

environment:

MINIO_ROOT_USER: ${MINIO_ROOT_USER}

MINIO_ROOT_PASSWORD: ${MINIO_ROOT_PASSWORD}

command: server /data

restart: always

healthcheck:

test: ["CMD", "mc", "ready", "local"]

interval: 10s

timeout: 5s

retries: 3

rabbitmq:

image: rabbitmq:4.0-management

environment:

- RABBITMQ_DEFAULT_USER=${RABBITMQ_DEFAULT_USER}

- RABBITMQ_DEFAULT_PASS=${RABBITMQ_DEFAULT_PASS}

- RABBITMQ_NODENAME=rabbit01@localhost

volumes:

- amqpdata:/var/lib/rabbitmq

restart: always

healthcheck:

test: rabbitmq-diagnostics -q ping

interval: 30s

timeout: 30s

retries: 3

opencti:

image: opencti/platform:6.4.8

environment:

- NODE_OPTIONS=--max-old-space-size=8096

- APP__PORT=8080

- APP__BASE_URL=${OPENCTI_BASE_URL}

- APP__ADMIN__EMAIL=${OPENCTI_ADMIN_EMAIL}

- APP__ADMIN__PASSWORD=${OPENCTI_ADMIN_PASSWORD}

- APP__ADMIN__TOKEN=${OPENCTI_ADMIN_TOKEN}

- APP__APP_LOGS__LOGS_LEVEL=error

- REDIS__HOSTNAME=redis

- REDIS__PORT=6379

- ELASTICSEARCH__URL=http://elasticsearch:9200

- ELASTICSEARCH__NUMBER_OF_REPLICAS=0

- MINIO__ENDPOINT=minio

- MINIO__PORT=9000

- MINIO__USE_SSL=false

- MINIO__ACCESS_KEY=${MINIO_ROOT_USER}

- MINIO__SECRET_KEY=${MINIO_ROOT_PASSWORD}

- RABBITMQ__HOSTNAME=rabbitmq

- RABBITMQ__PORT=5672

- RABBITMQ__PORT_MANAGEMENT=15672

- RABBITMQ__MANAGEMENT_SSL=false

- RABBITMQ__USERNAME=${RABBITMQ_DEFAULT_USER}

- RABBITMQ__PASSWORD=${RABBITMQ_DEFAULT_PASS}

- SMTP__HOSTNAME=${SMTP_HOSTNAME}

- SMTP__PORT=25

- PROVIDERS__LOCAL__STRATEGY=LocalStrategy

- APP__HEALTH_ACCESS_KEY=${OPENCTI_HEALTHCHECK_ACCESS_KEY}

ports:

- "8080:8080"

depends_on:

- redis

- elasticsearch

- minio

- rabbitmq

restart: always

healthcheck:

test: ["CMD", "wget", "-qO-", "http://opencti:8080/health?health_access_key=${OPENCTI_HEALTHCHECK_ACCESS_KEY}"]

interval: 10s

timeout: 5s

retries: 20

worker:

image: opencti/worker:6.4.8

environment:

- OPENCTI_URL=http://opencti:8080

- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}

- WORKER_LOG_LEVEL=info

depends_on:

- opencti

deploy:

mode: replicated

replicas: 3

restart: always

connector-export-file-stix:

image: opencti/connector-export-file-stix:6.4.8

environment:

- OPENCTI_URL=http://opencti:8080

- OPENCTI_TOKEN=${OPENCTI_ADMIN_TOKEN}

- CONNECTOR_ID=${CONNECTOR_EXPORT_FILE_STIX_ID} # Valid UUIDv4

- CONNECTOR_TYPE=INTERNAL_EXPORT_FILE

- CONNECTOR_NAME=ExportFileStix2

- CONNECTOR_SCOPE=application/json

- CONNECTOR_LOG_LEVEL=info

restart: always

depends_on:

- opencti