Dockerized self-initializing parsedmarc docker stack for lazy people

Go to file

Patrik Kernstock 705e80da70 Update		2020-08-08 23:28:40 +01:00
.github/workflows	Update	2020-08-08 23:28:40 +01:00
data	Update	2020-08-08 23:28:40 +01:00
.gitignore	Improved setup and README	2020-08-08 23:02:00 +01:00
LICENSE	Update	2020-08-08 23:28:40 +01:00
README.md	.gitignore is now working	2020-08-08 23:16:14 +01:00
docker-compose.yml	.gitignore is now working	2020-08-08 23:16:14 +01:00

README.md

parsedmarc-dockerized

Note: The standalone parsedmarc docker image on DockerHub @ patschi/parsedmarc can also be used, if interested.

Setup:

Get basics together:

git clone https://github.com/patschi/parsedmarc-dockerized.git /opt/parsedmarc-dockerized/
cd /opt/parsedmarc-dockerized/ && cp data/conf/parsedmarc/config.sample.ini data/conf/parsedmarc/config.ini

Now we create an environment file for your geoipupdate settings from your MaxMind account (fill in your data!)

cat > geoipupdate.env <<EOF
GEOIPUPDATE_ACCOUNT_ID=HERE_GOES_YOUR_ACCOUNT_ID
GEOIPUPDATE_LICENSE_KEY=HERE_GOES_YOUR_LICENSE_KEY
EOF

Next we change the parsedmarc config (see docs, and change Test to False when proper testing done)

nano data/conf/parsedmarc/config.ini

Finally, we start up the stack:

docker-compose up -d

What's happening then?

First, the whole stack is being created and started.
During the startup of the "init" container, all required steps are being taken care of - like generating a self-signed certificate for the webserver.
Once kibana container is started up, the corresponding parsedmarc dashboard is automatically imported into Kibana.
After a while you can access the Kibana dashboard under the shipped reverse proxy with at https://HOST_IP:9999.

Credits

Built on top of the awesome parsedmarc, Elasticsearch and Kibana, nginx, Docker and using MaxMind GeoIP.