cybexer/delrap repository overview

⁠Quick Reference

• Maintainer: https://cybexer.com⁠
• Where to get help: https://support.cybexer.com⁠

Interactive tool for human risk behavior mitigation in cyber security with integrated e-Learning Platform and Risk Evaluation Tool. Proven results in raising cyber awareness and mitigating human behavior-related risks.

⁠How to run this image

docker network create delrap-network

docker run -d --name delrap-mongo --network delrap-network --restart unless-stopped --volume delrap-data:/data/db mongo:4.2

docker run -d --name delrap-wildfly --network delrap-network --restart unless-stopped \
-e ELP_MONGO_URI=mongodb://delrap-mongo/delrap \
-e JAVA_OPTS="-XX:MaxRAM=4096m -XX:MaxRAMFraction=2 -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true" \
cybexer/delrap:<TAG>

docker run -d --name delrap-nginx --network delrap-network --restart unless-stopped -p 80:80 -p 443:443 --volume /opt/delrap-data/proxy-certs/:/etc/ssl --volume /opt/delrap-data/proxy-config/default.conf:/etc/nginx/conf.d/default.conf nginx:latest

⁠First run

docker exec -it $(docker ps --filter name=mongo -q) mongo delrap --eval='db.users.insert({"username":"admin","fullName":"Built-in Admin","origin":"LOCAL","password":"1eaf9a59afcbe1d65b358a978c06093cfc51d91359bb4c03355dc1e298325e3d83bfa89d2440f23faf166762d02ffd62c2d5258681a70860b81e9833c5107528","salt":"uijsfilefmqlgutpnue9usdjuj","roles":["ADMIN","ANALYST"],"loginTimestamps":[]})'

⁠Example NGINX default.conf

server {
    listen       80;
    server_name  localhost;
    client_max_body_size 10M;
    return 301 https://$host$request_uri;
}
server {
	listen 443 ssl;
	listen [::]:443 default_server;

        ssl_certificate /etc/ssl/delrap.crt;
        ssl_certificate_key /etc/ssl/delrap.key;

        large_client_header_buffers 4 64k;
        client_header_buffer_size 64k;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers On;
        ssl_ciphers EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH;
        client_max_body_size 200M;

    location / {
    # proxy the / listening on delrap-wildfly:8080

        proxy_set_header   X-Real-IP $remote_addr;
        proxy_set_header   Host      $http_host;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
        proxy_pass http://delrap-wildfly:8080;
	proxy_read_timeout 600;
        server_tokens off;
        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
        add_header X-Content-Type-Options nosniff;
        add_header X-XSS-Protection "1; mode=block";
        add_header X-Frame-Options "DENY";
        add_header Referrer-Policy "no-referrer";
}
}

This NGINX configuration expects that your HTTPS certificates are stored as delrap.crt and delrap.key and by the NGINX docker run command example these must be stored in /opt/delrap-data/proxy-certs/ in the host machine.