semiFunctionalDocker

defGuardDocker/docker-compose/.env

@@ -0,0 +1,35 @@
+# The best way to define each secret is to generate random strings with e.g.:
+#
+# openssl rand -base64 48 #this will generate a 48chars random string
+#
+# Please provide secret strings (do not share them) for:
+#
+# Secret used for JWT cryptography
+DEFGUARD_AUTH_SECRET=NcbMI1ahJHi3UR4PGdaZchvLlcr0lvo9xMRuqikDlqIqlGaD02L7mUT6NdAQ4Mx1
+# Secret used for JWT cryptography in YubiBridge GRPC communication
+DEFGUARD_YUBIBRIDGE_SECRET=NokI3c35i6HZSfNKq1WCluA7yTQyvOla2Tr4MG56N58dGmwwSuLvFmiHwoEeYJUr
+# Secret used for JWT cryptography in gateway GRPC communication
+DEFGUARD_GATEWAY_SECRET=kDTUdh8Y3LEpa8NHNoter3RQGyr7bnwDptr1uhJvsG2ZXm64T7XobalQdizwlDXJ
+# Secret used for private cookies cryptography; must be at least 64 characters long
+DEFGUARD_SECRET_KEY=XHkQ0463B5xtQNmUA915Ueaqyr7Hg4r07LusdGxrtyXICbF6NE7No8qIsuDnAzFc
+# Database password
+DEFGUARD_DB_PASSWORD=2USAuHjZw14G7PcA
+# Public URL of your Defguard instance
+# E.g.: https://defguard.mycompany.com
+DEFGUARD_URL=https://defguard.zacksolutions.dev
+# Webauthn RP ID (https://w3c.github.io/webauthn/#rp-id)
+# E.g.: defguard.mycompany.com (without http/https)
+DEFGUARD_WEBAUTHN_RP_ID=defguard.zacksolutions.dev
+# Public URL of your defguard proxy gRPC server
+# DEFGUARD_PROXY_URL=<YOUR_PROXY_GRPC_URL>
+# Public URL of your enrollment service
+# E.g.: https://enrollment.mycompany.com
+DEFGUARD_ENROLLMENT_URL=https://enrollement.zacksolutions.dev
+# Token used for VPN gateway authorization
+DEFGUARD_TOKEN=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJEZWZHdWFyZCIsInN1YiI6IkRFRkdVQVJELU5FVFdPUkstMSIsImNsaWVudF9pZCI6IjEiLCJleHAiOjYwMTg3NDAyNjQsIm5iZiI6MTcyMzc3Mjk2OX0.wL0UYiIECDooNVB9sYaioOnwsUS7__A0pNSpNiDqIv0
+# Enable insecure cookies when not using HTTPS
+DEFGUARD_COOKIE_INSECURE=true  # [HTTP]
+CORE_IMAGE_TAG=latest
+PROXY_IMAGE_TAG=latest
+GATEWAY_IMAGE_TAG=latest
+DEFGUARD_DEFAULT_ADMIN_PASSWORD=DrxLEJShMFCNKsB3

defGuardDocker/docker-compose/.env.template

@@ -0,0 +1,31 @@
+# The best way to define each secret is to generate random strings with e.g.:
+#
+# openssl rand -base64 48 #this will generate a 48chars random string
+#
+# Please provide secret strings (do not share them) for:
+#
+# Secret used for JWT cryptography
+DEFGUARD_AUTH_SECRET=<YOUR_AUTH_SECRET>
+# Secret used for JWT cryptography in YubiBridge GRPC communication
+DEFGUARD_YUBIBRIDGE_SECRET=<DEFGUARD_YUBIBRIDGE_SECRET>
+# Secret used for JWT cryptography in gateway GRPC communication
+DEFGUARD_GATEWAY_SECRET=<DEFGUARD_GATEWAY_SECRET>
+# Secret used for private cookies cryptography; must be at least 64 characters long
+DEFGUARD_SECRET_KEY=<DEFGUARD_SECRET_KEY>
+# Database password
+DEFGUARD_DB_PASSWORD=<YOUR_DB_PASSWORD>
+# Public URL of your Defguard instance
+# E.g.: https://defguard.mycompany.com
+DEFGUARD_URL=<YOUR_DEFGUARD_URL>
+# Webauthn RP ID (https://w3c.github.io/webauthn/#rp-id)
+# E.g.: defguard.mycompany.com (without http/https)
+DEFGUARD_WEBAUTHN_RP_ID=<YOUR_DEFGUARD_WEBAUTHN_RP_ID>
+# Public URL of your defguard proxy gRPC server
+# DEFGUARD_PROXY_URL=<YOUR_PROXY_GRPC_URL>
+# Public URL of your enrollment service
+# E.g.: https://enrollment.mycompany.com
+# DEFGUARD_ENROLLMENT_URL=<YOUR_PROXY_URL>  # [ENROLLMENT]
+# Token used for VPN gateway authorization
+# DEFGUARD_TOKEN=<GATEWAY_TOKEN>  # [VPN]
+# Enable insecure cookies when not using HTTPS
+# DEFGUARD_COOKIE_INSECURE=true  # [HTTP]

defGuardDocker/docker-compose/.volumes/core/rsakey.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

defGuardDocker/docker-compose/.volumes/db/PG_VERSION

@@ -0,0 +1 @@
+15