docker-compose.yml

version: '3.3'
services:
  unfetter-discover-gateway:
    container_name: unfetter-discover-gateway
    image: unfetter/unfetter-discover-gateway:0.3.12.demo
    ports:
     - "443:443"
     - "80:80"
    depends_on:
     - unfetter-discover-openssl
    links:
     - unfetter-api-explorer
     - unfetter-discover-api
     - unfetter-ctf-ingest
     - unfetter-threat-ingest
#     - unfetter-ui
#     - unfetter-socket-server

    volumes:
     - ./config/nginx/default.conf:/etc/nginx/conf.d/default.conf
     - ./config/nginx/conf.d.extra/:/etc/nginx/conf.d.extra
     - ./config/nginx/blank.conf:/etc/nginx/conf.d.runmode/runmode-locations.conf
     - ./config/nginx/logging-blank.conf:/etc/nginx/conf.d.runmode/logging.conf
     - ./config/nginx/taxii-blank.conf:/etc/nginx/conf.d.runmode/taxii.conf
     - ./config/nginx/taxii-auth-blank.conf:/etc/nginx/conf.d.runmode/taxii-auth.conf
     - ./config/nginx/ui-prod.conf:/etc/nginx/conf.d.runmode/ui.conf
     - ./certs/:/etc/pki/tls/certs

  unfetter-discover-openssl:
    image: svagi/openssl:latest
    container_name: unfetter-discover-openssl
    entrypoint:
     - openssl
     - req
     - -subj
     - /CN=localhost/DC=localhost/DC=localdomain
     - -new
     - -newkey
     - rsa:2048
     - -days
     - "365"
     - -nodes
     - -x509
     - -keyout
     - /tmp/certs/server.key
     - -out
     - /tmp/certs/server.crt
    volumes:
     - ./certs/:/tmp/certs

  unfetter-discover-processor:
    image: unfetter/unfetter-discover-processor:0.3.12
    container_name: unfetter-discover-processor
    links:
    - unfetter-pattern-handler
    volumes:
     - ./config/examples:/tmp/examples
    environment:
    - PATTERN_HANDLER_DOMAIN=unfetter-pattern-handler
    - PATTERN_HANDLER_PORT=5000
    - MONGO_HOST=repository
    # If deployed in a proxy, add the proxy's URL here
    - HTTPS_PROXY_URL=
    entrypoint:
     - ts-node
     - src/app.ts
     - --stix
     - /tmp/examples/unfetter-stix/assessments3/assessment-sets.stix.json
     - /tmp/examples/unfetter-stix/assessments3/capabilities.stix.json
     - /tmp/examples/unfetter-stix/assessments3/categories.stix.json
     - /tmp/examples/unfetter-stix/assessments3/object-assessments.stix.json
     - /tmp/examples/unfetter-stix/ntctf-attack-patterns.stix.json
     - /tmp/examples/unfetter-stix/reports.alerts.stix.json
     - /tmp/examples/unfetter-stix/reports.vulns.stix.json
     - /tmp/examples/unfetter-stix/sightings.stix.json
     - /tmp/examples/unfetter-stix/stix.json
     - --enhanced-stix-properties
     - /tmp/examples/unfetter-db/stix-enhancements.json
     - /tmp/examples/unfetter-db/stix-meta.json
     - --config
     - /tmp/examples/unfetter-db/config.json
     - /tmp/examples/unfetter-db/translation-config.json
     - /tmp/examples/unfetter-db/taxii.config.json
     - --mitre-attack-data
     - enterprise
     - --auto-publish
     - "true"
     - --auto-validate-patterns
     - "true"
     # Interval options: daily, weekly, monthly
    #  - --interval
    #  - daily
    depends_on:
     - cti-stix-store-repository
    links:
     - cti-stix-store-repository:repository

  unfetter-threat-ingest:
    container_name: unfetter-threat-ingest
    image: unfetter/unfetter-threat-ingest:0.3.12
    ports:
      - "5010:5010"
    environment:
#      - THREAT_INGEST_PORT=5010
      - MONGO_HOST=repository
      - MONGO_PORT=27017
#      - MONGO_DB=stix
#      - SERVER_SOCKET_HOST=localhost
#      - SERVER_SOCKET_PORT=3333
    entrypoint:
      - npm
      - run
      - start
      - --
#      - --debug
#      - --cert-dir=/etc/pki/tls/certs
#      - --server-key=server.key
#      - --server-cert=server.crt
      - --fire-notifications=false
    depends_on:
      - cti-stix-store-repository
#      - unfetter-socket-server
    links:
      - cti-stix-store-repository:repository
    volumes:
      - ./certs/:/etc/pki/tls/certs

  unfetter-ctf-ingest:
    container_name: unfetter-ctf-ingest
    image: unfetter/unfetter-ctf-ingest:0.3.12
    environment:
      - API_PROTOCOL=https
      - API_HOST=apihost
      - API_PORT=3000
      - API_CONTEXT=/
      - MONGO_REPOSITORY=repository
      - MONGO_PORT=27017
      - MONGO_DBNAME=stix
    entrypoint:
     - npm
     - start
    depends_on:
     - cti-stix-store-repository
     - unfetter-discover-api
    links:
     - cti-stix-store-repository:repository
     - unfetter-discover-api:apihost
     
  cti-stix-store-repository:
    image: mongo:3.4.1
    container_name: cti-stix-store-repository
    # NOTE: Uncomment this out and restart the stac to run ../unfetter-store/unfetter-utils/user_promotion_tool.py
    # ports:
    # - "27018:27017"
    volumes:
    - ./data/db:/data/db
    # Uncomment this if using authentication
    # entrypoint: /entrypoint.sh mongod --auth

  unfetter-api-explorer:
    image: unfetter/unfetter-api-explorer:0.3.12
    container_name: unfetter-api-explorer
    environment:
     - PUBLIC_PATH=/explorer/
    entrypoint:
     - npm
     - start

  unfetter-discover-api:
    image: unfetter/unfetter-discover-api:0.3.12
    container_name: unfetter-discover-api
    depends_on:
    - unfetter-discover-openssl
    - cti-stix-store-repository
    links:
    - cti-stix-store-repository:repository
    - unfetter-pattern-handler     
    volumes:
    - ./certs/:/etc/pki/tls/certs
    environment:
    - CTF_PARSE_HOST=http://unfetter-ctf-ingest
    - STIX_API_PROTOCOL=http
    - STIX_API_HOST=cti-stix-store
    - STIX_API_PORT=3000
    - STIX_API_PATH=cti-stix-store-api
    - MONGO_REPOSITORY=repository
    - MONGO_PORT=27017
    - MONGO_DBNAME=stix
    - ENV=dev
    # Options: UAC, TEST, DEMO
    - RUN_MODE=DEMO
    # If deployed in a proxy, add the proxy's URL here
    - HTTPS_PROXY_URL=
    - PATTERN_HANDLER_DOMAIN=unfetter-pattern-handler
    - PATTERN_HANDLER_PORT=5000
    entrypoint:
    - npm
    - start

  unfetter-pattern-handler:
    image: unfetter/unfetter-pattern-handler:0.3.12
    container_name: unfetter-pattern-handler
    entrypoint:
    - gunicorn
    - --config
    - /opt/stix/gunicorn_config.py
    - --access-logfile
    - "-"
    - app:app