initial user, env file

Author: David Garcia

README.md

@@ -35,6 +35,18 @@ mv thethe/install.sh
 ./install.sh
 ```
 
+You **MUST** have a .env file with the following structure in thethe root directory:
+
+```bash
+MONGO_INITDB_ROOT_USERNAME=
+MONGO_INITDB_ROOT_PASSWORD=
+MONGO_INITDB_DATABASE=thethe
+THETHE_SECRET=
+```
+
+- Select a **secure** user/pass/secret combination at your own for each value.
+- Leave **MONGO_INITDB_DATABASE** with "thethe" value.
+
 ---
 
 ### Running thethe
@@ -53,16 +65,6 @@ Are you a developer?
 
 ---
 
-### Default user
-
-By default, there is a single user **admin** with password **admin**
-
-Change the **admin** password as soon as you log into **thethe** the very first time.
-
-_(It is planned to have a proper multiuser support)_
-
----
-
 ### API keys
 
 There are not API keys stored by default on the system.

docker-compose.yml

@@ -5,14 +5,9 @@ services:
     image: mongo
     container_name: thethe_mongo
     restart: always
-    environment:
-      MONGO_INITDB_ROOT_USERNAME: root
-      MONGO_INITDB_ROOT_PASSWORD: root
-      MONGO_INITDB_DATABASE: thethe
+    env_file: .env
     volumes:
-      - ./mongo-init.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
       - ./mongodb_data/:/data/db
-
   redis:
     image: redis
     container_name: thethe_redis
@@ -45,8 +40,7 @@ services:
     build:
       context: ./thethe_server
     container_name: thethe_server
-    environment:
-      - THETHE_SECRET
+    env_file: .env
     command: >
       sh -c "python server/register_plugins.py &&
       /usr/local/bin/gunicorn server.main:app -w 4 -t 90 --log-level=info -b 0.0.0.0:8000"

docker-compose_dev.yml

@@ -7,13 +7,8 @@ services:
     restart: always
     ports:
       - 27017:27017
-    environment:
-      MONGO_INITDB_ROOT_USERNAME: root
-      MONGO_INITDB_ROOT_PASSWORD: root
-      MONGO_INITDB_DATABASE: thethe
-
+    env_file: .env
     volumes:
-      - ./mongo-init.js:/docker-entrypoint-initdb.d/mongo-init.js:ro
       - ./mongodb_data:/data/db
 
   redis:
@@ -38,8 +33,7 @@ services:
   server:
     build:
       context: thethe_server/
-    environment:
-      - THETHE_SECRET
+    env_file: .env
     container_name: thethe_server
     command: >
       sh -c "python server/register_plugins.py && /usr/local/bin/gunicorn server.main:app -w 4 -t 90 --log-level=info -b 0.0.0.0:8000 --reload"

install.sh

@@ -103,4 +103,4 @@ echo -e "${Green}[+] Building docker images. It will take a while.${Color_Off}"
 docker-compose build
 
 echo -e "${BGreen}[*] Installation completed.${Color_Off}"
-echo -e "${Blue}Run start.sh (inside thethe directory) if you want to launch thethe.${Color_Off}"
+echo -e "${Blue}Make sure you have a proper .env file with your desired values. Then, run start.sh (inside thethe directory).${Color_Off}"

mongo-init.js

@@ -48,11 +48,11 @@ echo "                                                                  "
 echo -e "${Blue}Welcome to The Threat Hunting Environment ${Color_Off} "
 echo "                                                                  "
 
-function set_secret() {
-    secret=$(openssl rand -hex 64)
-    echo -e "${BGreen}[*] Generating secret...${Color_Off}"
-    export THETHE_SECRET=$secret
-}
+# function set_secret() {
+#     secret=$(openssl rand -hex 64)
+#     echo -e "${BGreen}[*] Generating secret...${Color_Off}"
+#     export THETHE_SECRET=$secret
+# }
 
 function check_certs() {
     CERT_CRT=./external/certs/thethe.crt
@@ -78,7 +78,12 @@ function check_certs() {
 
 development=$1
 
-set_secret
+if [[ -f ".env" ]]; then
+    echo ".env file exists...ok"
+else
+    echo ".env file not found...go to README"
+    exit
+fi
 
 if [[ $1 == "dev" ]]; then
     echo -e "${Red}Development mode on${Color_Off}"