johannes
e5f25f1c2c
CD - Develop / build-and-deploy (push) Failing after 11m31s
- Spring Boot service on port 8095, database hiveiq_aria - Flyway schema: threat_ioc, threat_event, precursor_sequence_alert, device_security_posture - FBI FLASH-20260219-001 IOC seed data (executables, MD5s, directories, registry keys, services) - ThreatEventClassifier — maps 20+ signal keys to severity + attack phase + IOC match - ThreatEventIngestionService — persists events, publishes HIGH/CRITICAL to Kafka - Kafka producer: topic hiveops.aria.threats (AriaThreatEvent payload) - ThreatIocController — CRUD IOC management (MSP_ADMIN/BCOS_ADMIN) - ThreatEventIngestionController — agent-facing ingest endpoint with service secret auth - CI/CD: cd-develop.yml + cd-main.yml
74 lines
2.4 KiB
Properties
74 lines
2.4 KiB
Properties
spring.application.name=hiveops-aria
|
|
|
|
# Server
|
|
server.port=8095
|
|
|
|
# Database
|
|
spring.datasource.url=${DB_URL:jdbc:postgresql://localhost:5432/hiveiq_aria}
|
|
spring.datasource.username=${DB_USERNAME:hiveiq}
|
|
spring.datasource.password=${DB_PASSWORD}
|
|
spring.datasource.driver-class-name=org.postgresql.Driver
|
|
|
|
# JPA/Hibernate
|
|
spring.jpa.database-platform=org.hibernate.dialect.PostgreSQLDialect
|
|
spring.jpa.hibernate.ddl-auto=validate
|
|
|
|
# Flyway
|
|
spring.flyway.enabled=true
|
|
spring.flyway.locations=classpath:db/migration
|
|
spring.flyway.baseline-on-migrate=true
|
|
spring.flyway.baseline-version=1
|
|
spring.flyway.validate-on-migrate=true
|
|
spring.jpa.show-sql=false
|
|
spring.jpa.properties.hibernate.format_sql=true
|
|
spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.PostgreSQLDialect
|
|
|
|
# Logging
|
|
logging.level.root=WARN
|
|
logging.level.com.hiveops.aria=INFO
|
|
logging.level.org.springframework.security=DEBUG
|
|
|
|
# Error responses
|
|
server.error.include-message=always
|
|
|
|
# Actuator
|
|
management.endpoints.web.exposure.include=health,info,loggers
|
|
management.endpoint.loggers.enabled=true
|
|
|
|
# Pagination
|
|
spring.data.web.pageable.default-page-size=25
|
|
spring.data.web.pageable.max-page-size=100
|
|
|
|
# Jackson
|
|
spring.jackson.default-property-inclusion=non_null
|
|
spring.jackson.serialization.write-dates-as-timestamps=false
|
|
spring.jackson.time-zone=UTC
|
|
|
|
# JWT
|
|
jwt.secret=${JWT_SECRET}
|
|
jwt.expiration=86400000
|
|
|
|
# OpenAPI
|
|
springdoc.api-docs.enabled=${SWAGGER_ENABLED:false}
|
|
springdoc.swagger-ui.enabled=${SWAGGER_ENABLED:false}
|
|
|
|
# Internal service auth (used by agent ingestion endpoint)
|
|
aria.internal.service-secret=${ARIA_SERVICE_SECRET:}
|
|
|
|
# Sequence detection window (minutes)
|
|
aria.sequence.window.minutes=${ARIA_SEQUENCE_WINDOW_MINUTES:15}
|
|
|
|
# Auto-response — disabled by default for safe initial deployment
|
|
aria.autoresponse.shutdown.enabled=${ARIA_AUTORESPONSE_SHUTDOWN_ENABLED:false}
|
|
|
|
# hiveops-incident (for auto-response fleet tasks)
|
|
aria.incident.url=${INCIDENT_SERVICE_URL:http://hiveiq-incident:8080}
|
|
aria.incident.service-secret=${INTERNAL_SERVICE_SECRET:}
|
|
|
|
# Kafka
|
|
spring.kafka.bootstrap-servers=${KAFKA_BOOTSTRAP_SERVERS:localhost:9092}
|
|
spring.kafka.admin.fail-fast=false
|
|
spring.kafka.producer.key-serializer=org.apache.kafka.common.serialization.StringSerializer
|
|
spring.kafka.producer.value-serializer=org.springframework.kafka.support.serializer.JsonSerializer
|
|
spring.kafka.producer.properties.spring.json.add.type.headers=false
|