soc-ops/global/overlay/etc/puppet/modules/soc/manifests/vuln_dashboard.pp

49 lines
1.7 KiB
ObjectPascal
Raw Normal View History

2024-12-06 13:18:18 +01:00
class soc::vuln_dashboard(
2025-02-17 10:54:29 +01:00
String $allowed_origins = $facts['networking']['fqdn'],
2025-02-17 11:12:14 +01:00
String $allowed_hosts = $facts['networking']['fqdn'],
String $docker_tag = 'latest',
2024-12-06 12:35:49 +01:00
String $db_datadir = '/opt/vuln-dashboard/dbdata',
String $pocs_storage_dir = '/opt/vuln-dashboard/pocsdata',
String $sso_service_name = 'dashboard-dev',
2025-02-17 10:54:29 +01:00
String $admin_contact = 'cert@cert.sunet.se',
String $docker_image = 'platform.sunet.se/verglasz/vuln-management/dashboard-dev',
String $sso_proxy_network= 'sso',
2024-12-06 13:12:27 +01:00
) {
2024-12-06 12:35:49 +01:00
2025-02-17 10:54:29 +01:00
$db_name=lookup('vuln-dashboard.dn_name', undef, undef, 'vuln_dashboard')
$db_user=lookup('vuln-dashboard.db_user', undef, undef, 'dashboard_app')
2024-12-06 12:35:49 +01:00
$db_pass=lookup('vuln-dashboard.db_pass', undef, undef, 'password')
$db_port=lookup('vuln-dashbaord.db_port', undef, undef, '5432')
$db_host=lookup('vuln-dashboard.db_host', undef, undef, 'postgres')
$censys_api_secret=lookup('vuln-dashboard.censys_api_secret', undef, undef, 'null')
$censys_api_id=lookup('vuln-dashboard.censys.api_id', undef, undef, 'null')
2025-02-17 10:54:29 +01:00
$app_config_file='/opt/vuln-dashboard/app-config.yaml'
2024-12-06 12:35:49 +01:00
file {
'/opt/vuln-dashboard':
ensure => directory,
;
2024-12-06 13:22:06 +01:00
$db_datadir:
2024-12-06 12:35:49 +01:00
ensure => directory,
;
2024-12-06 13:22:06 +01:00
$pocs_storage_dir:
2024-12-06 12:35:49 +01:00
ensure => directory,
2024-12-06 13:15:25 +01:00
;
2025-02-17 10:54:29 +01:00
$app_config_file:
ensure => file,
2025-02-17 11:09:48 +01:00
mode => '0644',
2025-02-17 10:54:29 +01:00
content => template('soc/vuln-dashboard/app-config.yaml.erb'),
;
2024-12-06 12:35:49 +01:00
}
2024-12-06 13:20:15 +01:00
sunet::docker_compose { 'vuln-dashboard':
2024-12-06 12:35:49 +01:00
service_name => 'vuln-dashboard',
description => 'SOC vuln dashboard',
2024-12-06 13:16:53 +01:00
compose_dir => '/opt/vuln-dashboard',
2024-12-06 12:35:49 +01:00
content => template('soc/vuln-dashboard/docker-compose.yml.erb'),
}
}