Set up
Comply with these steps to arrange and run the API venture:
1. Clone the Repository
git clone https://github.com/adriyansyah-mf/CentralizedFirewall
cd CentralizedFirewall
2. Edit the .env File
Replace the setting variables in .env based on your configuration.
nano .env
3. Begin the API with Docker Compose
docker compose up -d
This can begin the API in indifferent mode.
4. Confirm the API is Operating
Verify if the containers are up:
docker psFurther Instructions
Cease the API
docker compose down
Restart the API
docker compose restart
Let me know for those who want any modifications! 🚀
Tips on how to setup for the primary time and hook up with firewall shopper
- Set up Firewall Agent in your node server
- Run the agent with the next command
sudo dpkg -i firewall-client_deb.deb
- Create a New Group on the Firewall Supervisor
- Create New API Key on the Firewall Supervisor
- Edit the configuration file on the node server
nano /usr/native/bin/config.ini
- Add the next configuration
[settings]
api_url = API-URL
api_key = API-KEY
hostname = Node Hostname (make it distinctive and similar because the hostname on the SIEM)
- Restart the firewall agent
systemctl daemon-reload
systemctl begin firewall-agent
- Verify the standing of the firewall agent
systemctl standing firewall-agent
- You will notice the linked node on the Firewall Supervisor
Default Credential
Username: admin
Password: admin
You possibly can change the default credential on the setting web page
Tips on how to Integration with SIEM
- Set up the SIEM in your server
- Configure the SIEM to ship the log to the Firewall Supervisor (You are able to do this by way of SOAR or SIEM configuration) The request ought to be POST with the next format
- The format of the log ought to be like this
curl -X 'POST'
'http://api-server:8000/normal/add-ip?ip=123.1.1.99&hostname=check&apikey=apikey&remark=log'
-H 'settle for: software/json'
-d ''
You possibly can see the swagger documentation on the next hyperlink
http://api-server:8000/docs
The .env element configuration
DB=changeme
JWT_SECRET=changeme
PASSWORD_SALT=changme
PASSWORD_TOKEN_KEY=changme
OPENCTI_URL=changme
OPENCTI_TOKEN=changme
Sponsor This Venture 💖
In case you discover this venture useful, contemplate supporting me via GitHub Sponsors
