Compare commits
6 Commits
f9d3d12cf5
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
d669b0cfe7 | ||
|
|
b62c01e2e6 | ||
|
|
5ceaff9706 | ||
|
|
ac3715aabd | ||
|
|
07b3446551 | ||
|
|
0c3e4184fe |
2
.gitignore
vendored
2
.gitignore
vendored
@@ -1,3 +1,3 @@
|
|||||||
# ---> Ansible
|
# ---> Ansible
|
||||||
*.retry
|
*.retry
|
||||||
|
*_data/
|
||||||
|
|||||||
@@ -1,3 +1,4 @@
|
|||||||
# External-apps
|
# External-apps
|
||||||
|
|
||||||
external home apps with reverse proxy
|
external home apps with reverse proxy
|
||||||
|
|
||||||
|
|||||||
154
prowler/.env
154
prowler/.env
@@ -1,154 +0,0 @@
|
|||||||
#### Important Note ####
|
|
||||||
# This file is used to store environment variables for the Prowler App.
|
|
||||||
# For production, it is recommended to use a secure method to store these variables and change the default secret keys.
|
|
||||||
|
|
||||||
#### Prowler UI Configuration ####
|
|
||||||
PROWLER_UI_VERSION="stable"
|
|
||||||
AUTH_URL=http://localhost:3000
|
|
||||||
API_BASE_URL=http://prowler-api:8080/api/v1
|
|
||||||
NEXT_PUBLIC_API_BASE_URL=${API_BASE_URL}
|
|
||||||
NEXT_PUBLIC_API_DOCS_URL=http://prowler-api:8080/api/v1/docs
|
|
||||||
AUTH_TRUST_HOST=true
|
|
||||||
UI_PORT=3000
|
|
||||||
# Temp URL for feeds need to use actual
|
|
||||||
RSS_FEED_URL=https://prowler.com/blog/rss
|
|
||||||
# openssl rand -base64 32
|
|
||||||
AUTH_SECRET="N/c6mnaS5+SWq81+819OrzQZlmx1Vxtp/orjttJSmw8="
|
|
||||||
# Google Tag Manager ID
|
|
||||||
NEXT_PUBLIC_GOOGLE_TAG_MANAGER_ID=""
|
|
||||||
|
|
||||||
|
|
||||||
#### Prowler API Configuration ####
|
|
||||||
PROWLER_API_VERSION="stable"
|
|
||||||
# PostgreSQL settings
|
|
||||||
# If running Django and celery on host, use 'localhost', else use 'postgres-db'
|
|
||||||
POSTGRES_HOST=postgres-db
|
|
||||||
POSTGRES_PORT=5432
|
|
||||||
POSTGRES_ADMIN_USER=prowler_admin
|
|
||||||
POSTGRES_ADMIN_PASSWORD=postgres
|
|
||||||
POSTGRES_USER=prowler
|
|
||||||
POSTGRES_PASSWORD=postgres
|
|
||||||
POSTGRES_DB=prowler_db
|
|
||||||
|
|
||||||
# Celery-Prowler task settings
|
|
||||||
TASK_RETRY_DELAY_SECONDS=0.1
|
|
||||||
TASK_RETRY_ATTEMPTS=5
|
|
||||||
|
|
||||||
# Valkey settings
|
|
||||||
# If running Valkey and celery on host, use localhost, else use 'valkey'
|
|
||||||
VALKEY_HOST=valkey
|
|
||||||
VALKEY_PORT=6379
|
|
||||||
VALKEY_DB=0
|
|
||||||
|
|
||||||
# API scan settings
|
|
||||||
|
|
||||||
# The path to the directory where scan output should be stored
|
|
||||||
DJANGO_TMP_OUTPUT_DIRECTORY="/tmp/prowler_api_output"
|
|
||||||
|
|
||||||
# The maximum number of findings to process in a single batch
|
|
||||||
DJANGO_FINDINGS_BATCH_SIZE=1000
|
|
||||||
|
|
||||||
# The AWS access key to be used when uploading scan output to an S3 bucket
|
|
||||||
# If left empty, default AWS credentials resolution behavior will be used
|
|
||||||
DJANGO_OUTPUT_S3_AWS_ACCESS_KEY_ID=""
|
|
||||||
|
|
||||||
# The AWS secret key to be used when uploading scan output to an S3 bucket
|
|
||||||
DJANGO_OUTPUT_S3_AWS_SECRET_ACCESS_KEY=""
|
|
||||||
|
|
||||||
# An optional AWS session token
|
|
||||||
DJANGO_OUTPUT_S3_AWS_SESSION_TOKEN=""
|
|
||||||
|
|
||||||
# The AWS region where your S3 bucket is located (e.g., "us-east-1")
|
|
||||||
DJANGO_OUTPUT_S3_AWS_DEFAULT_REGION=""
|
|
||||||
|
|
||||||
# The name of the S3 bucket where scan output should be stored
|
|
||||||
DJANGO_OUTPUT_S3_AWS_OUTPUT_BUCKET=""
|
|
||||||
|
|
||||||
# Django settings
|
|
||||||
DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,prowler-api
|
|
||||||
DJANGO_BIND_ADDRESS=0.0.0.0
|
|
||||||
DJANGO_PORT=8080
|
|
||||||
DJANGO_DEBUG=False
|
|
||||||
DJANGO_SETTINGS_MODULE=config.django.production
|
|
||||||
# Select one of [ndjson|human_readable]
|
|
||||||
DJANGO_LOGGING_FORMATTER=human_readable
|
|
||||||
# Select one of [DEBUG|INFO|WARNING|ERROR|CRITICAL]
|
|
||||||
# Applies to both Django and Celery Workers
|
|
||||||
DJANGO_LOGGING_LEVEL=INFO
|
|
||||||
# Defaults to the maximum available based on CPU cores if not set.
|
|
||||||
DJANGO_WORKERS=4
|
|
||||||
# Token lifetime is in minutes
|
|
||||||
DJANGO_ACCESS_TOKEN_LIFETIME=30
|
|
||||||
# Token lifetime is in minutes
|
|
||||||
DJANGO_REFRESH_TOKEN_LIFETIME=1440
|
|
||||||
DJANGO_CACHE_MAX_AGE=3600
|
|
||||||
DJANGO_STALE_WHILE_REVALIDATE=60
|
|
||||||
DJANGO_MANAGE_DB_PARTITIONS=True
|
|
||||||
# openssl genrsa -out private.pem 2048
|
|
||||||
DJANGO_TOKEN_SIGNING_KEY="-----BEGIN PRIVATE KEY-----
|
|
||||||
MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDs4e+kt7SnUJek
|
|
||||||
6V5r9zMGzXCoU5qnChfPiqu+BgANyawz+MyVZPs6RCRfeo6tlCknPQtOziyXYM2I
|
|
||||||
7X+qckmuzsjqp8+u+o1mw3VvUuJew5k2SQLPYwsiTzuFNVJEOgRo3hywGiGwS2iv
|
|
||||||
/5nh2QAl7fq2qLqZEXQa5+/xJlQggS1CYxOJgggvLyra50QZlBvPve/AxKJ/EV/Q
|
|
||||||
irWTZU5lLNI8sH2iZR05vQeBsxZ0dCnGMT+vGl+cGkqrvzQzKsYbDmabMcfTYhYi
|
|
||||||
78fpv6A4uharJFHayypYBjE39PwhMyyeycrNXlpm1jpq+03HgmDuDMHydk1tNwuT
|
|
||||||
nEC7m7iNAgMBAAECggEAA2m48nJcJbn9SVi8bclMwKkWmbJErOnyEGEy2sTK3Of+
|
|
||||||
NWx9BB0FmqAPNxn0ss8K7cANKOhDD7ZLF9E2MO4/HgfoMKtUzHRbM7MWvtEepldi
|
|
||||||
nnvcUMEgULD8Dk4HnqiIVjt3BdmGiTv46OpBnRWrkSBV56pUL+7msZmMZTjUZvh2
|
|
||||||
ZWv0+I3gtDIjo2Zo/FiwDV7CfwRjJarRpYUj/0YyuSA4FuOUYl41WAX1I301FKMH
|
|
||||||
xo3jiAYi1s7IneJ16OtPpOA34Wg5F6ebm/UO0uNe+iD4kCXKaZmxYQPh5tfB0Qa3
|
|
||||||
qj1T7GNpFNyvtG7VVdauhkb8iu8X/wl6PCwbg0RCKQKBgQD9HfpnpH0lDlHMRw9K
|
|
||||||
X7Vby/1fSYy1BQtlXFEIPTN/btJ/asGxLmAVwJ2HAPXWlrfSjVAH7CtVmzN7v8oj
|
|
||||||
HeIHfeSgoWEu1syvnv2AMaYSo03UjFFlfc/GUxF7DUScRIhcJUPCP8jkAROz9nFv
|
|
||||||
DByNjUL17Q9r43DmDiRsy0IFqQKBgQDvlJ9Uhl+Sp7gRgKYwa/IG0+I4AduAM+Gz
|
|
||||||
Dxbm52QrMGMTjaJFLmLHBUZ/ot+pge7tZZGws8YR8ufpyMJbMqPjxhIvRRa/p1Tf
|
|
||||||
E3TQPW93FMsHUvxAgY3MV5MzXFPhlNAKb+akP/RcXUhetGAuZKLubtDCWa55ZQuL
|
|
||||||
wj2OS+niRQKBgE7K8zUqNi6/22S8xhy/2GPgB1qPObbsABUofK0U6CAGLo6te+gc
|
|
||||||
6Jo84IyzFtQbDNQFW2Fr+j1m18rw9AqkdcUhQndiZS9AfG07D+zFB86LeWHt4DS4
|
|
||||||
ymIRX8Kvaak/iDcu/n3Mf0vCrhB6aetImObTj4GgrwlFvtJOmrYnO8EpAoGAIXXP
|
|
||||||
Xt25gWD9OyyNiVu6HKwA/zN7NYeJcRmdaDhO7B1A6R0x2Zml4AfjlbXoqOLlvLAf
|
|
||||||
zd79vcoAC82nH1eOPiSOq51plPDI0LMF8IN0CtyTkn1Lj7LIXA6rF1RAvtOqzppc
|
|
||||||
SvpHpZK9pcRpXnFdtBE0BMDDtl6fYzCIqlP94UUCgYEAnhXbAQMF7LQifEm34Dx8
|
|
||||||
BizRMOKcqJGPvbO2+Iyt50O5X6onU2ITzSV1QHtOvAazu+B1aG9pEuBFDQ+ASxEu
|
|
||||||
L9ruJElkOkb/o45TSF6KCsHd55ReTZ8AqnRjf5R+lyzPqTZCXXb8KTcRvWT4zQa3
|
|
||||||
VxyT2PnaSqEcexWUy4+UXoQ=
|
|
||||||
-----END PRIVATE KEY-----"
|
|
||||||
# openssl rsa -in private.pem -pubout -out public.pem
|
|
||||||
DJANGO_TOKEN_VERIFYING_KEY="-----BEGIN PUBLIC KEY-----
|
|
||||||
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OHvpLe0p1CXpOlea/cz
|
|
||||||
Bs1wqFOapwoXz4qrvgYADcmsM/jMlWT7OkQkX3qOrZQpJz0LTs4sl2DNiO1/qnJJ
|
|
||||||
rs7I6qfPrvqNZsN1b1LiXsOZNkkCz2MLIk87hTVSRDoEaN4csBohsEtor/+Z4dkA
|
|
||||||
Je36tqi6mRF0Gufv8SZUIIEtQmMTiYIILy8q2udEGZQbz73vwMSifxFf0Iq1k2VO
|
|
||||||
ZSzSPLB9omUdOb0HgbMWdHQpxjE/rxpfnBpKq780MyrGGw5mmzHH02IWIu/H6b+g
|
|
||||||
OLoWqyRR2ssqWAYxN/T8ITMsnsnKzV5aZtY6avtNx4Jg7gzB8nZNbTcLk5xAu5u4
|
|
||||||
jQIDAQAB
|
|
||||||
-----END PUBLIC KEY-----"
|
|
||||||
# openssl rand -base64 32
|
|
||||||
DJANGO_SECRETS_ENCRYPTION_KEY="oE/ltOhp/n1TdbHjVmzcjDPLcLA41CVI/4Rk+UB5ESc="
|
|
||||||
DJANGO_BROKER_VISIBILITY_TIMEOUT=86400
|
|
||||||
DJANGO_SENTRY_DSN=
|
|
||||||
|
|
||||||
# Sentry settings
|
|
||||||
SENTRY_ENVIRONMENT=local
|
|
||||||
SENTRY_RELEASE=local
|
|
||||||
|
|
||||||
#### Prowler release version ####
|
|
||||||
NEXT_PUBLIC_PROWLER_RELEASE_VERSION=v5.10.0
|
|
||||||
|
|
||||||
# Social login credentials
|
|
||||||
SOCIAL_GOOGLE_OAUTH_CALLBACK_URL="${AUTH_URL}/api/auth/callback/google"
|
|
||||||
SOCIAL_GOOGLE_OAUTH_CLIENT_ID=""
|
|
||||||
SOCIAL_GOOGLE_OAUTH_CLIENT_SECRET=""
|
|
||||||
|
|
||||||
SOCIAL_GITHUB_OAUTH_CALLBACK_URL="${AUTH_URL}/api/auth/callback/github"
|
|
||||||
SOCIAL_GITHUB_OAUTH_CLIENT_ID=""
|
|
||||||
SOCIAL_GITHUB_OAUTH_CLIENT_SECRET=""
|
|
||||||
|
|
||||||
# Single Sign-On (SSO)
|
|
||||||
SAML_SSO_CALLBACK_URL="${AUTH_URL}/api/auth/callback/saml"
|
|
||||||
|
|
||||||
# Lighthouse tracing
|
|
||||||
LANGSMITH_TRACING=false
|
|
||||||
LANGSMITH_ENDPOINT="https://api.smith.langchain.com"
|
|
||||||
LANGSMITH_API_KEY=""
|
|
||||||
LANGCHAIN_PROJECT=""
|
|
||||||
@@ -1 +0,0 @@
|
|||||||
16
|
|
||||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user