Updates Dockerfile to include security
Mongo users are also now being set up correctly.
This commit is contained in:
2
.gitignore
vendored
Normal file
2
.gitignore
vendored
Normal file
@@ -0,0 +1,2 @@
|
||||
|
||||
poc_variables.js
|
||||
@@ -7,9 +7,9 @@ RUN echo "deb http://repo.mongodb.org/apt/ubuntu $(cat /etc/lsb-release | grep D
|
||||
RUN apt-get update && apt-get install -y mongodb-org
|
||||
|
||||
RUN mkdir -p /data/db
|
||||
COPY setup_mongo_admin.js /tmp/setup_mongo_admin.js
|
||||
RUN mongod --fork --logpath=/var/log/mongodb.log && sleep 5 && mongo < /tmp/setup_mongo_admin.js
|
||||
# COPY mongod.conf /etc/mongod.conf
|
||||
COPY setup_mongo_users.js /tmp/setup_mongo_users.js
|
||||
RUN mongod --fork --logpath=/var/log/mongodb.log && sleep 5 && mongo < /tmp/setup_mongo_users.js
|
||||
COPY mongod.conf /etc/mongod.conf
|
||||
EXPOSE 27107
|
||||
|
||||
CMD ["/usr/bin/mongod"]
|
||||
|
||||
@@ -1,20 +0,0 @@
|
||||
admin = db.getSiblingDB('admin');
|
||||
admin.createUser(
|
||||
{
|
||||
user: "admin",
|
||||
pwd: "HenryPump@1903",
|
||||
roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
|
||||
}
|
||||
);
|
||||
poc = db.getSiblingDB('poc');
|
||||
poc.createUser({
|
||||
user: "poc_www",
|
||||
pwd: "HenryPump1903",
|
||||
roles: [ { role: "readWrite", db: "poc" } ]
|
||||
});
|
||||
|
||||
poc.createUser({
|
||||
user: "poc_java",
|
||||
pwd: "HenryPump@1903",
|
||||
roles: [ { role: "readWrite", db: "poc" } ]
|
||||
});
|
||||
26
setup_mongo_users.js
Normal file
26
setup_mongo_users.js
Normal file
@@ -0,0 +1,26 @@
|
||||
var ADMIN_USER = {username: "", password: ""};
|
||||
var USERLIST = [
|
||||
{username: "", password: "", db: ""},
|
||||
{username: "", password: "", db: ""},
|
||||
];
|
||||
|
||||
|
||||
var admin_db = db.getSiblingDB('admin');
|
||||
admin_db.createUser(
|
||||
{
|
||||
user: ADMIN_USER.username,
|
||||
pwd: ADMIN_USER.password,
|
||||
roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
|
||||
}
|
||||
);
|
||||
|
||||
for (var i = 0; i < USERLIST.length; i++){
|
||||
var user = USERLIST[i];
|
||||
var user_db = db.getSiblingDB(user.db);
|
||||
user_db.users.insert({username: user.username});
|
||||
user_db.createUser({
|
||||
user: user.username,
|
||||
pwd: user.password,
|
||||
roles: [ { role: "readWrite", db: user.db } ]
|
||||
});
|
||||
}
|
||||
Reference in New Issue
Block a user