This repository offers various Docker Compose profiles to set up TheHive and Cortex for different use cases, including both testing and production environments. These profiles are designed to simplify deployment and ensure optimal performance based on your infrastructure requirements.

To implement ElasticSearch authentication, we need to recreate the .env file and create new index.conf.
This is done automatically by doing the following commands:

# Pull the latest version of this codebase
git pull

# Go to the relevant profile (e.g. "testing" here)
cd ./testing

# Run the "init.sh" script
./scripts/init.sh

A password for ElasticSearch will be created and propagated to TheHive and Cortex.

• Testing environment: Deploys TheHive and Cortex on a single server for testing purposes. Requirements: 8 GB RAM, 4 vCPU.
• Production environment #1 – TheHive: Single server deployment optimized for TheHive. Requirements: 16 GB RAM, 4 vCPU.
• Production environment #1 – Cortex: Single server deployment optimized for Cortex. Requirements: 16 GB RAM, 4 vCPU.
• Production environment #2 – TheHive: High-performance deployment for TheHive on a dedicated server. Requirements: 32 GB RAM, 8 vCPU.
• Production environment #2 – Cortex: High-performance deployment for Cortex on a dedicated server. Requirements: 32 GB RAM, 8 vCPU.

These Docker Compose profiles include scripts to help you manage and optimize various resources and settings. To ensure a smooth experience with these applications, please ensure the following software is installed on the host system:

• Docker engine v23.0.15 and later (install instructions)
• Docker compose plugin v2.20.2 and later (install instructions)
• jq https://jqlang.github.io/jq/
• Current user should have at least sudo permissions