Big apps section haulover
This commit is contained in:
parent
a9247073fc
commit
29419d41c2
1
.idea/KleinserverDocs.iml
generated
1
.idea/KleinserverDocs.iml
generated
@ -1,5 +1,6 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<module type="EMPTY_MODULE" version="4">
|
||||
<component name="Go" enabled="true" />
|
||||
<component name="NewModuleRootManager">
|
||||
<content url="file://$MODULE_DIR$" />
|
||||
<orderEntry type="inheritedJdk" />
|
||||
|
||||
16
.idea/inspectionProfiles/Project_Default.xml
generated
16
.idea/inspectionProfiles/Project_Default.xml
generated
@ -1,6 +1,22 @@
|
||||
<component name="InspectionProjectProfileManager">
|
||||
<profile version="1.0">
|
||||
<option name="myName" value="Project Default" />
|
||||
<inspection_tool class="HtmlUnknownTag" enabled="true" level="WARNING" enabled_by_default="true">
|
||||
<option name="myValues">
|
||||
<value>
|
||||
<list size="7">
|
||||
<item index="0" class="java.lang.String" itemvalue="nobr" />
|
||||
<item index="1" class="java.lang.String" itemvalue="noembed" />
|
||||
<item index="2" class="java.lang.String" itemvalue="comment" />
|
||||
<item index="3" class="java.lang.String" itemvalue="noscript" />
|
||||
<item index="4" class="java.lang.String" itemvalue="embed" />
|
||||
<item index="5" class="java.lang.String" itemvalue="script" />
|
||||
<item index="6" class="java.lang.String" itemvalue="primary-label" />
|
||||
</list>
|
||||
</value>
|
||||
</option>
|
||||
<option name="myCustomValuesEnabled" value="true" />
|
||||
</inspection_tool>
|
||||
<inspection_tool class="SpellCheckingInspection" enabled="false" level="TYPO" enabled_by_default="false">
|
||||
<option name="processCode" value="true" />
|
||||
<option name="processLiterals" value="true" />
|
||||
|
||||
@ -22,17 +22,14 @@
|
||||
<toc-element topic="Cockpit.md"/>
|
||||
<toc-element topic="Changedetection.md"/>
|
||||
<toc-element topic="Paperless-AI.md"/>
|
||||
<toc-element topic="Ollama.md"/>
|
||||
<toc-element topic="Paperless-NGX.md">
|
||||
<toc-element topic="Paperless-gebruik.md"/>
|
||||
</toc-element>
|
||||
<toc-element topic="Portainer.md"/>
|
||||
<toc-element topic="TrueNAS_Scale.md"/>
|
||||
<toc-element topic="OPNsense.md"/>
|
||||
<toc-element topic="Netdata.md"/>
|
||||
<toc-element topic="Immich.md"/>
|
||||
<toc-element topic="Gitea.md"/>
|
||||
<toc-element topic="Watchtower_Containerrr.md"/>
|
||||
<toc-element topic="Wazuh.md"/>
|
||||
</toc-element>
|
||||
<toc-element topic="Network_frontpage.md">
|
||||
@ -79,4 +76,8 @@
|
||||
</toc-element>
|
||||
</toc-element>
|
||||
<toc-element topic="Home_grid_frontpage.md"/>
|
||||
<toc-element topic="Proton.md"/>
|
||||
<toc-element topic="Openmediavault.md"/>
|
||||
<toc-element topic="Archive-team.md"/>
|
||||
<toc-element topic="Blinko.md"/>
|
||||
</instance-profile>
|
||||
@ -1,16 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Change Detection (VM, KleinServer)
|
||||
|
||||
A container-based solution for monitering webpage or product changes.
|
||||
|
||||
### Source
|
||||
[](https://changedetection.io/)
|
||||
|
||||
### Access through
|
||||
[](https://dashboard.kleinsense.nl/)
|
||||
[](http://192.168.1.200:3077/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,16 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Grafana (LXC, KleinMox)
|
||||
|
||||
A container-based solution for monitering webpage or product changes.
|
||||
|
||||
### Source
|
||||
[](https://grafana.com/)
|
||||
|
||||
### Access through
|
||||
[](https://graph.kleinsense.nl/)
|
||||
[](http://192.168.1.6:3000/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,19 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Immich (VMN, KleinNAS)
|
||||
Self-hosted photo and video management. Runs on KleinNAS as a VM-based application offered by the TrueNAS repo.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://immich.app/)
|
||||
|
||||
### Access through
|
||||
[](https://photo.kleinwizard.nl/photos) or
|
||||
[](http://192.168.1.150:30041)
|
||||
|
||||
Or through the TrueNAS interface
|
||||
|
||||
[](http://192.168.1.150)
|
||||
[](https://nas.kleinsense.nl)
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,16 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# InfluxDB (LXC, KleinMox)
|
||||
|
||||
A container-based solution for monitering webpage or product changes.
|
||||
|
||||
### Source
|
||||
[](https://influxdata.com/)
|
||||
|
||||
### Access through
|
||||
[](https://flux.kleinsense.nl/)
|
||||
[](http://192.168.1.5:8086/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
16
topics/KleinOps/apps/K8s/Archive-team.md
Normal file
16
topics/KleinOps/apps/K8s/Archive-team.md
Normal file
@ -0,0 +1,16 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Archive team (K8s, Klein8s)
|
||||
|
||||
This website is intended to be an offloading point and information depot for a number of archiving projects, all related to saving websites or data that is in danger of being lost. Besides serving as a hub for team-based pulling down and mirroring of data, this site will provide advice on managing your own data and rescuing it from the brink of destruction.
|
||||
## ___________________
|
||||
### Source
|
||||
Wiki (https://wiki.archiveteam.org/)
|
||||
|
||||
### Access through
|
||||
Dashboard (https://dashboard.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:10163/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
15
topics/KleinOps/apps/K8s/Blinko.md
Normal file
15
topics/KleinOps/apps/K8s/Blinko.md
Normal file
@ -0,0 +1,15 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Blinko (K8s, Klein8s)
|
||||
Blinko is an innovative open-source project designed for individuals who want to quickly capture and organize their fleeting thoughts.
|
||||
## ___________________
|
||||
### Source
|
||||
Website (https://changedetection.io/)
|
||||
|
||||
### Access through
|
||||
External URL (https://blinko.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:11111/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
16
topics/KleinOps/apps/K8s/ConvertX.md
Normal file
16
topics/KleinOps/apps/K8s/ConvertX.md
Normal file
@ -0,0 +1,16 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# ConvertX (K8s, Klein8s)
|
||||
Convert Anything, Anytime
|
||||
Easily convert files to any format with just a few clicks. Fast, secure, and free!
|
||||
## ___________________
|
||||
### Source
|
||||
Website (https://convertx.org/)
|
||||
|
||||
### Access through
|
||||
External URL (https://convert.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:13088/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
16
topics/KleinOps/apps/K8s/Gethomepage.md
Normal file
16
topics/KleinOps/apps/K8s/Gethomepage.md
Normal file
@ -0,0 +1,16 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# getHomepage (K8S, Klein8s)
|
||||
A modern, fully static, fast, secure fully proxied, highly customizable application dashboard with integrations for over 100 services and translations into multiple languages. Easily configured via YAML files or through docker label discovery.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://gethomepage.dev/)
|
||||
|
||||
### Access through
|
||||
External URL (https://dashboard.kleinsense.nl)
|
||||
Internal URL (http://192.168.1.17:18020/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,22 +1,22 @@
|
||||
<primary-label ref="document"/>
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Gitea (VM, KleinGit)
|
||||
Gitea enables the creation and management of repositories based on Git.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://gitea.io/en-us/)
|
||||
[](https://docs.gitea.io/en-us/)
|
||||
Website (https://gitea.io/en-us/)
|
||||
Docs (https://docs.gitea.io/en-us/)
|
||||
|
||||
### Access through
|
||||
[](https://gitea.kleinsense.nl/)
|
||||
[](http://192.168.1.2:3000/)
|
||||
External URL (https://gitea.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.200:3000/)
|
||||
|
||||
### Current projects on KleinGitea.
|
||||
[](https://gitea.kleinsense.nl/klein-projects/KleinDocs)
|
||||
[](https://gitea.kleinsense.nl/HU-Projects/pid-balancer)
|
||||
[](https://gitea.kleinsense.nl/klein-projects/wazuh-notify)
|
||||
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
17
topics/KleinOps/apps/K8s/Grafana.md
Normal file
17
topics/KleinOps/apps/K8s/Grafana.md
Normal file
@ -0,0 +1,17 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Grafana (K8s, Klein8s)
|
||||
|
||||
A container-based solution for data vizualization.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://grafana.com/)
|
||||
|
||||
### Access through
|
||||
External URL (https://graph.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:13000/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
16
topics/KleinOps/apps/K8s/ITtools.md
Normal file
16
topics/KleinOps/apps/K8s/ITtools.md
Normal file
@ -0,0 +1,16 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# ITtools (K8s, Klein8s)
|
||||
|
||||
Useful tools for developer and people working in ITA container-based InfluxDB database.
|
||||
## ___________________
|
||||
### Source
|
||||
Website (https://it-tools.tech/)
|
||||
|
||||
### Access through
|
||||
External URL (https://tools.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:14020/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
17
topics/KleinOps/apps/K8s/Immich.md
Normal file
17
topics/KleinOps/apps/K8s/Immich.md
Normal file
@ -0,0 +1,17 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Immich (K8s, Klein8s)
|
||||
Self-hosted photo and video management.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://immich.app/)
|
||||
|
||||
### Access through
|
||||
ExternaL URL (https://photo.kleinwizard.nl/photos)
|
||||
Internal URL (http://192.168.1.17:12283/)
|
||||
|
||||
## ___________________
|
||||
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
16
topics/KleinOps/apps/K8s/InfluxDB.md
Normal file
16
topics/KleinOps/apps/K8s/InfluxDB.md
Normal file
@ -0,0 +1,16 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# InfluxDB (K8s, Klein8s)
|
||||
|
||||
A container-based InfluxDB database.
|
||||
## ___________________
|
||||
### Source
|
||||
Website (https://influxdata.com/)
|
||||
|
||||
### Access through
|
||||
External URL (https://flux.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:18086/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
16
topics/KleinOps/apps/K8s/Myspeed.md
Normal file
16
topics/KleinOps/apps/K8s/Myspeed.md
Normal file
@ -0,0 +1,16 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# MySpeed (K8s, Klein8s)
|
||||
|
||||
Speedtest automation made simple.
|
||||
## ___________________
|
||||
### Source
|
||||
Website (https://myspeed.dev/)
|
||||
|
||||
### Access through
|
||||
External URL (https://myspeed.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.17:15216/)
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,4 +1,4 @@
|
||||
<primary-label ref="document"/>
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Netdata (KleinSense)
|
||||
Netdata is a distributed real-time, health monitoring platform for systems, hardware, containers & applications,
|
||||
@ -6,10 +6,10 @@ collecting metrics. It monitors: KleinHole, KleinServer, KleinNAS, KleinNext and
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://www.netdata.cloud/)
|
||||
Website (https://www.netdata.cloud/)
|
||||
|
||||
### Access through
|
||||
[](https://netdata.kleinsense.nl)
|
||||
[](http://192.168.1.1:19999/)
|
||||
|
||||
External URL (https://netdata.kleinsense.nl)
|
||||
Internal URL (http://192.168.1.1:19999/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
343
topics/KleinOps/apps/K8s/Notifier.md
Normal file
343
topics/KleinOps/apps/K8s/Notifier.md
Normal file
@ -0,0 +1,343 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Wazuh Notifier (KleinServer)
|
||||
Netdata is a distributed real-time, health monitoring platform for systems, hardware, containers & applications,
|
||||
collecting metrics. It monitors: KleinHole, KleinServer, KleinNAS, KleinNext and KleinPVE (pve, Proxmox)
|
||||
## ___________________
|
||||
|
||||
|
||||
## Table of Contents
|
||||
|
||||
- [Introduction](#introduction)
|
||||
- [Installation](#installation)
|
||||
- [Step 1: download](#step-1-download)
|
||||
- [Step 2: copy files](#step-2-copy-files)
|
||||
- [Python](#python_1)
|
||||
- [Golang](#golang_1)
|
||||
- [Step 3: copy the TOML file](#step-3-copy-the-toml-configuration-file)
|
||||
- [Step 4: create .env file](#step-4-create-env-file)
|
||||
- [Wazuh configuration](#wazuh-configuration)
|
||||
- [Golang](#golang_2)
|
||||
- [Python](#python_2)
|
||||
- [Note](#note)
|
||||
- [The TOML configuration file](#the-toml-configuration)
|
||||
- [Setting up the platforms](#setting-up-the-platforms-receiving-the-notifications)
|
||||
|
||||
## Introduction
|
||||
|
||||
Wazuh notifier enables the Wazuh manager to be notified when Wazuh selected events occur, using 3 messaging platforms:
|
||||
[ntfy.sh](https://ntfy.sh), [Discord](https://discord.com) and [Slack](https://slack.com).
|
||||
|
||||
There are 2 implementations of Wazuh notify. One written in Golang, the other in Python. Both implementations have
|
||||
similar functionality, but the Python version is slightly more configurable for testing purposes.
|
||||
|
||||
Wazuh notify is a stateless implementation and only notifies: triggered by specific rules, agents, or threat levels.
|
||||
|
||||
Wazuh notify is executed by configuring the **ossec.conf** and adding an **active response configuration**.
|
||||
|
||||
## Installation
|
||||
|
||||
### Step 1: download
|
||||
|
||||
Download the files from https://github.com/kleinprojects/wazuh-notify to your server.
|
||||
|
||||
### Step 2: copy files
|
||||
|
||||
#### _Python_ {id="python_1"}
|
||||
|
||||
Copy the 2 Python scripts to the /var/ossec/active-response/bin/ folder
|
||||
|
||||
```
|
||||
$ sudo cp <download folder>/wazuh-*.py /var/ossec/active-response/bin/
|
||||
```
|
||||
|
||||
Set the correct ownership {id="set-the-correct-ownership_1"}
|
||||
|
||||
```
|
||||
$ sudo chown root:wazuh /var/ossec/active-response/bin/wazuh-notify.py
|
||||
$ sudo chown root:wazuh /var/ossec/active-response/bin/wazuh_notify_module.py
|
||||
```
|
||||
|
||||
Set the correct permissions {id="set-the-correct-permissions_1"}
|
||||
|
||||
```
|
||||
$ sudo chmod uog+rx /var/ossec/active-response/bin/wazuh-notify.py
|
||||
$ sudo chmod uog+rx /var/ossec/active-response/bin/wazuh_notify_module.py
|
||||
```
|
||||
|
||||
#### _Golang_ {id="golang_1"}
|
||||
|
||||
Copy the Go executable to the /var/ossec/active-response/bin/ folder
|
||||
|
||||
```
|
||||
$ sudo cp <download folder>/wazuh-notify /var/ossec/active-response/bin/
|
||||
```
|
||||
|
||||
Set the correct ownership {id="set-the-correct-ownership_2"}
|
||||
|
||||
```
|
||||
$ sudo chown root:wazuh /var/ossec/active-response/bin/wazuh-notify
|
||||
```
|
||||
|
||||
Set the correct permissions {id="set-the-correct-permissions_2"}
|
||||
|
||||
```
|
||||
$ sudo chmod uog+rx /var/ossec/active-response/bin/wazuh-notify
|
||||
```
|
||||
|
||||
### Step 3: copy the TOML configuration file
|
||||
|
||||
Copy the TOML file to /var/ossec/etc/
|
||||
|
||||
```
|
||||
$ sudo cp <download folder>/wazuh-notify-config.toml /var/ossec/etc/
|
||||
```
|
||||
|
||||
Set the correct ownership {id="set-the-correct-ownership_3"}
|
||||
|
||||
```
|
||||
$ sudo chown root:wazuh /var/ossec/etc/wazuh-notify-config.toml
|
||||
```
|
||||
|
||||
Set the correct permissions {id="set-the-correct-permissions_3"}
|
||||
|
||||
```
|
||||
$ sudo chmod uog+r /var/ossec/etc/wazuh-notify-config.toml
|
||||
```
|
||||
|
||||
### Step 4: create .env file
|
||||
|
||||
Create an .env file in /var/ossec/etc/
|
||||
|
||||
```
|
||||
$ sudo touch /var/ossec/etc/.env
|
||||
```
|
||||
|
||||
Set the correct ownership {id="set-the-correct-ownership_4"}
|
||||
|
||||
```
|
||||
$ sudo chown root:wazuh /var/ossec/etc/wazuh-notify-config.toml
|
||||
```
|
||||
|
||||
Set the correct permissions {id="set-the-correct-permissions_4"}
|
||||
|
||||
```
|
||||
$ sudo chmod uog+r /var/ossec/etc/wazuh-notify-config.toml
|
||||
```
|
||||
|
||||
## Wazuh configuration
|
||||
|
||||
#### _Golang_ {id="golang_2"}
|
||||
|
||||
Modify the /var/ossec/etc/ossec.conf configuration file and add the following:<br/>
|
||||
|
||||
*Command section*
|
||||
|
||||
```
|
||||
<command>
|
||||
<name>wazuh-notify-go</name>
|
||||
<executable>wazuh-notify</executable>
|
||||
<timeout_allowed>yes</timeout_allowed>
|
||||
</command>
|
||||
```
|
||||
|
||||
*Active response section*
|
||||
|
||||
```
|
||||
<active-response>
|
||||
<command>wazuh-notify-go</command>
|
||||
<location>server</location>
|
||||
<level></level>
|
||||
<rules_id></rules_id>
|
||||
</active-response>
|
||||
```
|
||||
|
||||
#### _Python_ {id="python_2"}
|
||||
|
||||
*Command section*
|
||||
|
||||
```
|
||||
<command>
|
||||
<name>wazuh-notify-py</name>
|
||||
<executable>wazuh-notify.py</executable>
|
||||
<timeout_allowed>yes</timeout_allowed>
|
||||
</command>
|
||||
```
|
||||
|
||||
*Active response section*
|
||||
|
||||
```
|
||||
<active-response>
|
||||
<command>wazuh-notify-py</command>
|
||||
<location>server</location>
|
||||
<level></level>
|
||||
<rules_id></rules_id>
|
||||
</active-response>
|
||||
```
|
||||
|
||||
#### NOTE: <format color="OrangeRed">!</format>
|
||||
The ```<name>``` in the ```<command>``` section needs to be the same as the ```<command>``` in
|
||||
the ```<active-response>``` section.
|
||||
The ```<command>``` section describes the program that is executed. The ```<active-response>``` section describes the
|
||||
trigger that runs the ```<command>```.
|
||||
|
||||
Add the rules you want to be informed about between the ```<rules_id></rules_id>```, with the rules id's separated by
|
||||
comma's.
|
||||
Example: ```<rules_id>5402, 3461, 8777</rules_id>```.
|
||||
|
||||
Please refer to
|
||||
the [Wazuh online documentation](https://documentation.wazuh.com/current/user-manual/capabilities/active-response/index.html)
|
||||
for more information.
|
||||
|
||||
## The TOML configuration
|
||||
|
||||
This is the toml configuration file for wazuh-notify (for both the Python and Golang version).
|
||||
|
||||
The targets setting defines the platforms where notifications will be sent to.
|
||||
Platforms in this comma-separated string will receive notifications, if and when they are set up.
|
||||
Refer to [setting up the platforms](#setting-up-the-platforms-receiving-the-notifications).
|
||||
|
||||
```
|
||||
targets: "slack, ntfy, discord"
|
||||
```
|
||||
|
||||
Platforms in this comma-separated string will receive the full event information.
|
||||
|
||||
```
|
||||
full_alert: ""
|
||||
```
|
||||
|
||||
Exclude_rules and excluded_agents will disable notification for these particular events or agents that are enabled in
|
||||
the ossec.conf active response definition.
|
||||
These settings provide an easier way to disable event notifications from firing. No need to restart Wazuh-manager.
|
||||
|
||||
Enter rule numbers as a string with comma-separated values.
|
||||
Enter numeric agent id's as a string with comma-separated values.
|
||||
|
||||
```
|
||||
excluded_rules: "99999, 00000"
|
||||
excluded_agents: "99999"
|
||||
```
|
||||
|
||||
[The threat levels used in Wazuh](https://documentation.wazuh.com/current/user-manual/ruleset/rules-classification.html)
|
||||
(0-15) are mapped to notification priority levels (1-5), and their respective colors (Discord only).
|
||||
The Wazuh threat level scale runs from 0-15, where 15 is the most severe threat. It corresponds to the
|
||||
[HSAS](https://en.wikipedia.org/wiki/Homeland_Security_Advisory_System) threat scale that runs from 5-1, whereby 1 is
|
||||
the highest threat level. The configuration allows for customized mapping: in some use cases the mapping could be different.
|
||||
|
||||
The mention threshold defines when Discord users receive a DM, next to the common messages they receive in their channel.
|
||||
Often these common channels are muted and DM's will draw more attention. 1 means that for every notification a DM will be sent.
|
||||
A mention threshold of 5 means that for every 5th occurrence of this specific event, a DM will be sent also.
|
||||
|
||||
The notify threshold is somewhat similar to the mention threshold. A notify threshold of 1 will send each notification,
|
||||
a notify threshold of 4 will only send each 4th notification triggered by a specific event. This will reduce high amounts
|
||||
of notifications for the same event. The fired_times value in the message will show the actual number of the times this
|
||||
specific event was generated.
|
||||
|
||||
Enter a threat_map as a list of integers,
|
||||
color as a hex RGB color values,
|
||||
mention/notify_threshold as integers.
|
||||
```
|
||||
[[priority_map]] # Priority 1 on the HSAS scale
|
||||
threat_map = [15, 14, 13, 12] # Wazuh threat levels -> priority 2
|
||||
color = 0xec3e40 # Red, SEVERE on the HSAS scale
|
||||
mention_threshold = 1
|
||||
notify_threshold = 1
|
||||
|
||||
[[priority_map]] # Priority 2 on the HSAS scale
|
||||
threat_map = [11, 10, 9] # Wazuh threat levels -> priority 2
|
||||
color = 0xff9b2b # Orange, HIGH on the HSAS scale
|
||||
mention_threshold = 1
|
||||
notify_threshold = 1
|
||||
|
||||
[[priority_map]] # Priority 3 on the HSAS scale
|
||||
threat_map = [8, 7, 6] # Wazuh threat levels -> priority 3
|
||||
color = 0xf5d800 # Yellow, ELEVATED on the HSAS scale
|
||||
mention_threshold = 5
|
||||
notify_threshold = 5
|
||||
|
||||
[[priority_map]] # Priority 4 on the HSAS scale
|
||||
threat_map = [5, 4] # Wazuh threat levels -> priority 4
|
||||
color = 0x377fc7 # Blue, GUARDED on the HSAS scale
|
||||
mention_threshold = 20
|
||||
notify_threshold = 5
|
||||
|
||||
[[priority_map]] # Priority 5 on the HSAS scale
|
||||
threat_map = [3, 2, 1, 0] # Wazuh threat levels -> priority 5
|
||||
color = 0x01a465 # Green, LOW on the HSAS scale
|
||||
mention_threshold = 20
|
||||
notify_threshold = 1
|
||||
```
|
||||
|
||||
The next settings are used to add information to the messages.
|
||||
```Sender``` translate to the ``` username ``` field in Discord and Slack and to the ```title``` field in ntfy.sh.
|
||||
The ```click``` parameter adds an arbitrary URL to the message.
|
||||
|
||||
```
|
||||
sender: "Wazuh (IDS)"
|
||||
click: "https://documentation.wazuh.com/"
|
||||
```
|
||||
|
||||
### From here on the settings are ONLY used by the Python version of wazuh-notify.
|
||||
|
||||
Below settings provide for a window that enable/disables events from firing the notifiers.
|
||||
|
||||
Enter ```excluded_days``` as a string with comma separated values. Be aware of your regional settings.
|
||||
|
||||
```
|
||||
excluded_days: ""
|
||||
```
|
||||
|
||||
Enter ```excluded_hours``` as a tuple of string values.
|
||||
|
||||
```
|
||||
excluded_hours: [ "23:59", "00:00" ]
|
||||
```
|
||||
|
||||
The following parameters define the markdown characters used to emphasise the parameter names in the notification
|
||||
messages (Markdown style). This is a dictionary notation.
|
||||
|
||||
```
|
||||
markdown_emphasis:
|
||||
slack: "*"
|
||||
ntfy: "**"
|
||||
discord: "**"
|
||||
```
|
||||
|
||||
The next settings are used for testing purposes.
|
||||
|
||||
```Test mode``` will add an example event (```wazuh-notify-test-event.json```) instead of the message received through Wazuh.
|
||||
This enables customization for testing of a particular event.
|
||||
|
||||
```
|
||||
test_mode: False
|
||||
```
|
||||
|
||||
Setting the ```extended_logging``` and ```extended_print``` parameters provides more logging to the wazuh-notifier log
|
||||
and console. The possible values are:
|
||||
|
||||
0-> limited logging
|
||||
1-> basic logging
|
||||
2-> verbose logging
|
||||
|
||||
```
|
||||
extended_logging: 2
|
||||
extended_print: 0
|
||||
```
|
||||
|
||||
### Setting up the platforms receiving the notifications
|
||||
|
||||
Each of the 3 platforms make use of webhooks or similar API's. In order to have the right information in the ```.env```
|
||||
file, please refer to the platform's documentation.
|
||||
|
||||
[Slack](https://api.slack.com/) API documentation
|
||||
|
||||
[ntfy.sh](https://docs.ntfy.sh/subscribe/api/) API documentation
|
||||
|
||||
[ntfy.sh](https://docs.ntfy.sh/examples/) examples
|
||||
|
||||
[Discord](https://discord.com/developers/docs/intro) developers documentation
|
||||
|
||||
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
15
topics/KleinOps/apps/K8s/Paperless-NGX.md
Normal file
15
topics/KleinOps/apps/K8s/Paperless-NGX.md
Normal file
@ -0,0 +1,15 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Paperless (K8s, Klein8s)
|
||||
|
||||
Het documentsarchief gebaseerd op de open source applicatie Paperless.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://paperless.readthedocs.io/en/latest/)
|
||||
|
||||
### Access through
|
||||
External URL (https://paperless.kleinsense.nl)
|
||||
Internal URL (http://192.168.1.17:18002/)
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,4 +1,4 @@
|
||||
<primary-label ref="document"/>
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Paperless handleiding
|
||||
|
||||
@ -42,8 +42,6 @@ De bijlage wordt automatisch in Paperless gezet.
|
||||
Als je op **KleinMeTwo** het programma **Paperless** start (via het icon, bovenin-midden op de desktop), kun je met een druk op
|
||||
de knop een document scannen vanaf Draadje en deze toevoegen in Paperless.
|
||||
|
||||
<img alt="Paperless icon" src="Paperless_icon_4.png" title="Paperless"/>
|
||||
|
||||
#### Via de scanner van Draadje
|
||||
Scan een document als PDF in zoals je gewend bent en sleep het daarna in de Paperless-folder (Drive P:).
|
||||
|
||||
17
topics/KleinOps/apps/K8s/Speedtest.md
Normal file
17
topics/KleinOps/apps/K8s/Speedtest.md
Normal file
@ -0,0 +1,17 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# OpenSpeedTest (K8s, Klein8s)
|
||||
Designed to replicate your real-world connection speed!
|
||||
|
||||
THE MOST ACCURATE AND POWERFUL NETWORK SPEED TEST TOOL
|
||||
Run a network speed test from any device — phones, TVs, consoles, or computers.
|
||||
(No app. No plugin. Just your browser)
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://openspeedtest.com/)
|
||||
|
||||
### Access through
|
||||
Internal URL (http://192.168.1.17:13009/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
13
topics/KleinOps/apps/K8s/Termix.md
Normal file
13
topics/KleinOps/apps/K8s/Termix.md
Normal file
@ -0,0 +1,13 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# OpenSpeedTest (K8s, Klein8s)
|
||||
Termix is an open-source, forever-free, self-hosted all-in-one server management platform. It provides a multi-platform solution for managing your servers and infrastructure through a single, intuitive interface. Termix offers SSH terminal access, SSH tunneling capabilities, and remote file management, with many more tools to come. Termix is the perfect free and self-hosted alternative to Termius available for all platforms.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://github.com/Termix-SSH/Termix)
|
||||
|
||||
### Access through
|
||||
Internal URL (http://192.168.1.17:14021/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
17
topics/KleinOps/apps/K8s/Uptime-kuma.md
Normal file
17
topics/KleinOps/apps/K8s/Uptime-kuma.md
Normal file
@ -0,0 +1,17 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# OpenSpeedTest (K8s, Klein8s)
|
||||
Uptime Kuma – A Fancy Self-Hosted Monitoring Tool
|
||||
Uptime Kuma is an open-source, free and easy-to-use self-hosted monitoring tool. Uptime Kuma is compatible with multiple platforms including Linux, Windows 10 (x64) and Windows Server.
|
||||
|
||||
Monitoring uptime has never been easier and Uptime Kuma offers exactly this, with a simple but effective and powerful dashboard.
|
||||
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website https://uptimekuma.org/)
|
||||
|
||||
### Access through
|
||||
Internal URL (http://192.168.1.17:13001/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
14
topics/KleinOps/apps/K8s/Vert.md
Normal file
14
topics/KleinOps/apps/K8s/Vert.md
Normal file
@ -0,0 +1,14 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Vert (K8s, Klein8s)
|
||||
The file converter you'll love.
|
||||
All image, audio, and document processing is done on your device. Videos are converted on our lightning-fast servers. No file size limit, no ads, and completely open source
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://vert.sh/)
|
||||
|
||||
### Access through
|
||||
Internal URL (http://192.168.1.17:14022/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,16 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Ollama (VM, KleinServer)
|
||||
|
||||
Ollama is a lightweight, extensible framework for building and running language models on the local machine.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://ollama.com)
|
||||
[Ollama on Github](https://github.com/ollama/ollama)
|
||||
[Ollama models website](https://ollama.com)
|
||||
|
||||
### Access through
|
||||
[](http://192.168.1.200:3099/)
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,13 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Paperless-AI (VM, KleinServer)
|
||||
|
||||
De AI-applicatie gebaseerd op de open source applicatie Paperless.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://paperless.readthedocs.io/en/latest/)
|
||||
### Access through
|
||||
[](http://192.168.1.200:3099/)
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,15 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Paperless (VM, KleinServer)
|
||||
|
||||
Het documentsarchief gebaseerd op de open source applicatie Paperless.
|
||||
## ___________________
|
||||
|
||||
Source
|
||||
[](https://paperless.readthedocs.io/en/latest/)
|
||||
|
||||
### Access through
|
||||
[](https://paperless.kleinsense.nl)
|
||||
[](http://192.168.1.200:3098/)
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,14 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Portainer (VM, KleinServer)
|
||||
Portainer is our container management software to deploy, troubleshoot, and secure applications across our homelab.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://www.portainer.io/)
|
||||
### Access through
|
||||
|
||||
[](https://portainer.kleinsense.nl)
|
||||
[](https://192.168.1.200:9443/)
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,9 +0,0 @@
|
||||
<primary-label ref="document"/>
|
||||
|
||||
# Watchtower (Containerrr)
|
||||
|
||||
A container-based solution for automating Docker container base image updates.
|
||||
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,15 +1,15 @@
|
||||
<primary-label ref="document"/>
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Cockpit (KleinServer)
|
||||
|
||||
Cockpit is a web-based graphical interface for servers, intended for everyone.
|
||||
|
||||
## ___________________
|
||||
### Source
|
||||
[](https://cockpit-project.org/)
|
||||
|
||||
### Access through
|
||||
[](https://dashboard.kleinsense.nl/)
|
||||
[](http://192.168.1.200:9090)
|
||||
External URL (https://dashboard.kleinsense.nl/)
|
||||
Internal URL (http://192.168.1.200:9090)
|
||||
## ___________________
|
||||
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,4 +1,4 @@
|
||||
<primary-label ref="document"/>
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# OPNsense (KleinSense)
|
||||
Open Source network routing software that handles all the network traffic. It includes a firewall,
|
||||
@ -6,10 +6,10 @@ reverse-proxy server (nginx) and DHCP (Kea).
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://opnsense.org/)
|
||||
Website (https://opnsense.org/)
|
||||
|
||||
### Access through
|
||||
[](https://opnsense.kleinsense.nl)
|
||||
[](http://192.168.1.200:8001/)
|
||||
|
||||
External URL (https://opnsense.kleinsense.nl)
|
||||
Internal URL (http://192.168.1.1:8001/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
14
topics/KleinOps/apps/server/Openmediavault.md
Normal file
14
topics/KleinOps/apps/server/Openmediavault.md
Normal file
@ -0,0 +1,14 @@
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# openmediavault (KleinOMV)
|
||||
openmediavault (OMV) is a free network-attached storage (NAS) solution based on Debian Linux. It is designed to be easy to use and provides a web-based interface for managing storage, users, and services. OMV supports various file systems, RAID configurations, and plugins for additional functionality.
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
Website (https://openmediavault.org/)
|
||||
|
||||
### Access through
|
||||
External URL (https://omv.kleinsense.nl)
|
||||
Internal URL (http://192.168.1.4/)
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,4 +1,4 @@
|
||||
<primary-label ref="chapter"/>
|
||||
<primary-label ref="chapter"></primary-label>
|
||||
|
||||
# TrueNAS Scale (VM, pve)
|
||||
TrueNAS® SCALE is an Open Source NAS Infrastructure solution. In addition to powerful scale-out storage capabilities,
|
||||
@ -6,9 +6,11 @@ SCALE adds Linux Containers and VMs (KVM)
|
||||
## ___________________
|
||||
|
||||
### Source
|
||||
[](https://www.truenas.com/truenas-scale/)
|
||||
Webiste (https://www.truenas.com/truenas-scale/)
|
||||
### Access through
|
||||
[](http://192.168.1.150)
|
||||
[](https://nas.kleinsense.nl)
|
||||
External URL(https://nas.kleinsense.nl)
|
||||
|
||||
Internal URL (http://192.168.1.150)
|
||||
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
@ -1,4 +1,4 @@
|
||||
<primary-label ref="document"/>
|
||||
<primary-label ref="document"></primary-label>
|
||||
|
||||
# Wazuh (KleinServer)
|
||||
|
||||
@ -8,12 +8,12 @@ Protection is provided for public clouds, private clouds, and on-premise data ce
|
||||
|
||||
## ___________________
|
||||
### Source
|
||||
[](https://wazuh.com/)
|
||||
[](https://documentation.wazuh.com/current/index.html)
|
||||
Website (https://wazuh.com/)
|
||||
Docs (https://documentation.wazuh.com/current/index.html)
|
||||
|
||||
### Access through
|
||||
[](https://wazuh.kleinwizard.nl)
|
||||
[](https://192.168.1.2/)
|
||||
External URL (https://wazuh.kleinwizard.nl)
|
||||
Internal URL (https://192.168.1.200:3020/)
|
||||
|
||||
### Troubleshooting
|
||||
|
||||
@ -91,5 +91,5 @@ $ systemctl daemon-reload
|
||||
$ systemctl restart wazuh-indexer
|
||||
$ systemctl restart wazuh-dashboard
|
||||
```
|
||||
|
||||
## ___________________
|
||||
<a href="FrontPage.md#shorts" >Shortcut to pages overview</a>
|
||||
Loading…
x
Reference in New Issue
Block a user