From 56bf36fc92614c9c5ffd5b8a84249bb087927a76 Mon Sep 17 00:00:00 2001 From: mizhm Date: Thu, 5 Feb 2026 22:20:41 +0700 Subject: [PATCH 1/2] feat: update nessus compose file --- Makefile | 20 +++++++++++++++++++- tools/nessus/compose.yml | 34 ++++++++++++++++++++++++++++++++++ tools/nessus/config.yml | 29 +++++++++++++++++++++++++++++ 3 files changed, 82 insertions(+), 1 deletion(-) create mode 100644 tools/nessus/compose.yml create mode 100644 tools/nessus/config.yml diff --git a/Makefile b/Makefile index ba9df21..697d2a8 100644 --- a/Makefile +++ b/Makefile @@ -36,4 +36,22 @@ down: # Clean up everything (stop services and remove volumes) clean: down docker compose down -v --remove-orphans - docker compose -f docker-compose-assistant.yml down -v --remove-orphans \ No newline at end of file + docker compose -f docker-compose-assistant.yml down -v --remove-orphans + +# Nessus tool targets +nessus-pull: + docker compose -f tools/nessus/compose.yml pull + +nessus-run: + docker compose -f tools/nessus/compose.yml up -d --force-recreate --remove-orphans + +nessus-update: + docker compose -f tools/nessus/compose.yml pull + docker compose -f tools/nessus/compose.yml down + docker compose -f tools/nessus/compose.yml up -d --force-recreate --remove-orphans + +nessus-down: + docker compose -f tools/nessus/compose.yml down --remove-orphans + +nessus-clean: + docker compose -f tools/nessus/compose.yml down -v --remove-orphans \ No newline at end of file diff --git a/tools/nessus/compose.yml b/tools/nessus/compose.yml new file mode 100644 index 0000000..c3e514d --- /dev/null +++ b/tools/nessus/compose.yml @@ -0,0 +1,34 @@ +services: + oasm-nessus: + container_name: oasm-worker-nessus + image: oasm/oasm-nessus:latest + platform: linux/amd64 + # networks: + # - oasm + network_mode: "host" + restart: no + volumes: + - ./config.yml:/root/configs/config.yml + + docker-nessus: + container_name: docker-nessus + image: tenable/nessus:latest-ubuntu + restart: no + ports: + - "8834:8834" + environment: + - USERNAME=admin + - PASSWORD=admin + - ACTIVATION_CODE=your-activation-code + networks: + - oasm + volumes: + - nessus-official-data:/opt/nessus/var/nessus + +volumes: + nessus-data: + +networks: + oasm: + external: true + name: oasm_net diff --git a/tools/nessus/config.yml b/tools/nessus/config.yml new file mode 100644 index 0000000..2e18825 --- /dev/null +++ b/tools/nessus/config.yml @@ -0,0 +1,29 @@ +log: + format: text + level: info + +server: + pprof: + enable: true + port: 6060 + +schedule: + clean_session_scan: "*/15 * * * *" # every 15 minutes + create_session_scan: "*/5 * * * *" # every 5 minutes + store_session_scan: "*/5 * * * *" # every 5 minutes + keep_worker_alive: "*/30 * * * * *" # every 30 seconds + +nessus: + - url: https://localhost:8834 + username: admin + password: admin + access_key: 91ba4cf0a754e3a31e212304a6c375ff2371a8b353a4b64cb71d66e4e38d16e4 + secret_key: 398a4eb759264eda4f3950958249c58a603cbb010880dd2e2ff0d77a288a964d + create_session: true + store_session: true + clean_session: true + max_scan: 5 + +oasm: + url: http://localhost:6276 + api_key: x8DHGDVKXRnXF3WrN5Ae6OWqpSQdMf8C1hPD From 005049880f1fac33829aafd7f471190c604ef257 Mon Sep 17 00:00:00 2001 From: mizhm Date: Sat, 7 Feb 2026 16:15:08 +0700 Subject: [PATCH 2/2] fix: fix code base on review --- .env.example | 6 ++++++ Makefile | 16 +++++++++------- tools/nessus/compose.yml | 14 +++++++------- tools/nessus/config.yml | 4 ++-- 4 files changed, 24 insertions(+), 16 deletions(-) diff --git a/.env.example b/.env.example index 5777066..70ea924 100644 --- a/.env.example +++ b/.env.example @@ -29,3 +29,9 @@ EMBEDDING_BASE_URL= EMBEDDING_API_KEY= SEARXNG_URL=http://oasm-searxng:8080 SEARXNG_SECRET=change_me + +#NESSUS CONFIGURATION +NESSUS_USERNAME=change_me +NESSUS_PASSWORD=change_me +NESSUS_ACTIVATION_CODE=change_me + diff --git a/Makefile b/Makefile index 697d2a8..aa79e5b 100644 --- a/Makefile +++ b/Makefile @@ -39,19 +39,21 @@ clean: down docker compose -f docker-compose-assistant.yml down -v --remove-orphans # Nessus tool targets +NESSUS_COMPOSE := docker compose -f tools/nessus/compose.yml + nessus-pull: - docker compose -f tools/nessus/compose.yml pull + $(NESSUS_COMPOSE) pull nessus-run: - docker compose -f tools/nessus/compose.yml up -d --force-recreate --remove-orphans + $(NESSUS_COMPOSE) up -d --force-recreate --remove-orphans nessus-update: - docker compose -f tools/nessus/compose.yml pull - docker compose -f tools/nessus/compose.yml down - docker compose -f tools/nessus/compose.yml up -d --force-recreate --remove-orphans + $(NESSUS_COMPOSE) pull + $(NESSUS_COMPOSE) down --remove-orphans + $(NESSUS_COMPOSE) up -d --force-recreate --remove-orphans nessus-down: - docker compose -f tools/nessus/compose.yml down --remove-orphans + $(NESSUS_COMPOSE) down --remove-orphans nessus-clean: - docker compose -f tools/nessus/compose.yml down -v --remove-orphans \ No newline at end of file + $(NESSUS_COMPOSE) down -v --remove-orphans diff --git a/tools/nessus/compose.yml b/tools/nessus/compose.yml index c3e514d..1efeedc 100644 --- a/tools/nessus/compose.yml +++ b/tools/nessus/compose.yml @@ -3,9 +3,8 @@ services: container_name: oasm-worker-nessus image: oasm/oasm-nessus:latest platform: linux/amd64 - # networks: - # - oasm - network_mode: "host" + networks: + - oasm restart: no volumes: - ./config.yml:/root/configs/config.yml @@ -14,16 +13,17 @@ services: container_name: docker-nessus image: tenable/nessus:latest-ubuntu restart: no + env_file: ../../.env ports: - "8834:8834" environment: - - USERNAME=admin - - PASSWORD=admin - - ACTIVATION_CODE=your-activation-code + - USERNAME=${NESSUS_USERNAME:-admin} + - PASSWORD=${NESSUS_PASSWORD:-admin} + - ACTIVATION_CODE=${NESSUS_ACTIVATION_CODE} networks: - oasm volumes: - - nessus-official-data:/opt/nessus/var/nessus + - nessus-data:/opt/nessus/var/nessus volumes: nessus-data: diff --git a/tools/nessus/config.yml b/tools/nessus/config.yml index 2e18825..8eb32b6 100644 --- a/tools/nessus/config.yml +++ b/tools/nessus/config.yml @@ -14,7 +14,7 @@ schedule: keep_worker_alive: "*/30 * * * * *" # every 30 seconds nessus: - - url: https://localhost:8834 + - url: https://docker-nessus:8834 username: admin password: admin access_key: 91ba4cf0a754e3a31e212304a6c375ff2371a8b353a4b64cb71d66e4e38d16e4 @@ -25,5 +25,5 @@ nessus: max_scan: 5 oasm: - url: http://localhost:6276 + url: http://console:6276 api_key: x8DHGDVKXRnXF3WrN5Ae6OWqpSQdMf8C1hPD