ishara / docker-defectdojo Goto Github PK

Ready to run production environment for DefectDojo, a security defect tool.

DefectDojo is a great product for managing security defects. The project's goal is to make it simple to run Dojo in a production environment. Simply clone this project and start up with docker-compose.

The easiest way to get up and running is via docker cloud where you can choose which service provider you would like to use. Use the docker-cloud.yml to provision a DefectDojo stack.

1. Install docker and docker-compose per the Docker website.
2. Git clone the docker-DefectDojo repo and cd into its directory
3. If necessary, run

   $ chmod u+x setup.bash

   to make it executable.
4. Run the setup.bash script which will create a random password for MySQL and Dojo and other setup tasks.

To run docker-DefectDojo and see the Dojo logs in the terminal, use:

$ docker-compose up

To run docker-DefectDojo and get your terminal prompt back, use:

$ docker-compose up -d

The compose file will start three containers labeled as: dojo, nginx and mysql. The initial start will take a minute or so as the startup script is creating the database and setting up the default user. Once the service is started (usually a minute or less), then browse to https://localhost and login with the username admin and the password that is in the .env file.

If you would like to build the docker file and test it out with debugging then run:

docker-compose -f docker-compose-dev.yml build

Then:

docker-compose -f docker-compose-dev.yml up

• Aaron Weaver
• Matt Tesauro

MIT