Zabbix demonstração segurança - Ambiente A

docker-compose.yaml

version: "3"

volumes:
  db_data:
    driver: local

services: 
  zabbix-server:
    hostname: zabbix-server
    restart: unless-stopped
    image: zabbix/zabbix-server-pgsql:alpine-5.4-latest
    environment:
      - DB_SERVER_PORT=5432
      - DB_SERVER_HOST=postgresql
      - POSTGRES_DB=zabbix
      - POSTGRES_USER=zabbix
      - POSTGRES_PASSWORD=zabbix
      - ENABLE_TIMESCALEDB=true
    volumes:
      - ./zabbix/usr/lib/zabbix/externalscripts:/usr/lib/zabbix/externalscripts:ro
    depends_on:
      - postgresql

  zabbix-frontend:
    hostname: zabbix-frontend
    restart: unless-stopped
    image: zabbix/zabbix-web-apache-pgsql:alpine-5.4-latest
    environment:
      - DB_SERVER_PORT=5432
      - DB_SERVER_HOST=postgresql
      - POSTGRES_DB=zabbix
      - POSTGRES_USER=zabbix
      - POSTGRES_PASSWORD=zabbix
      - PHP_TZ=America/Sao_Paulo
      - ZBX_SERVER_NAME=zabbix-server
    volumes:
      - /etc/timezone:/etc/timezone:ro
      - /etc/localtime:/etc/localtime:ro
      - ./zabbix/etc/ssl/apache2:/etc/ssl/apache2:ro
    depends_on:
      - postgresql
      - zabbix-server
    ports:
      - "8443:8080"

  postgresql:
    hostname: postgresql
    restart: unless-stopped
    image: timescale/timescaledb:latest-pg13
    environment:
      - POSTGRES_DB=zabbix
      - POSTGRES_USER=zabbix
      - POSTGRES_PASSWORD=zabbix
      - TS_TUNE_MEMORY=4GB
      - TS_TUNE_NUM_CPUS=4
    volumes:
      - db_data:/var/lib/postgresql/data
    command: ["postgres", "-c", "max_connections=1000"]
  
  dvwa:
    hostname: dvwa
    restart: unless-stopped
    image: vulnerables/web-dvwa
    ports:
      - "8081:80"
  
  bwapp:
    hostname: bwapp
    restart: unless-stopped
    image: raesene/bwapp
    ports:
      - "8082:80"
  
  shellshock:
    hostname: shellshock
    restart: unless-stopped
    image: vulnerables/cve-2014-6271
    ports:
      - "8083:80"
  
  heartbleed:
    hostname: heartbleed
    restart: unless-stopped
    image: vulnerables/cve-2014-0160
    ports:
      - "8084:443"
  
  metasploit-vul-nemu:
    hostname: metasploit
    restart: unless-stopped
    image: vulnerables/metasploit-vulnerability-emulator
    ports:
      - "20:20"
      - "21:21"
      - "80:80"
      - "443:443"
      - "4848:4848"
      - "6000:6000"
      - "6060:6060"
      - "7000:7000"
      - "7181:7181"
      - "7547:7547"
      - "8000:8000"
      - "8008:8008"
      - "8020:8020"
      - "8080:8080"
      - "8400:8400"
  
  sambacry:
    hostname: sambacry
    restart: unless-stopped
    image: vulnerables/cve-2017-7494
    ports:
      - "137-139:137-139"
      - "445:445"
      - "6699:6699"

  # kali:
  #   hostname: kalilinux
  #   restart: unless-stopped
  #   image: kalilinux/kali-rolling
  #   command: ["bash"]