Open
Description
Description
Environment
- OS (where OpenBAS server runs): 24.10
- OpenBAS version: 1.8.2
- OpenBAS client: NA
- Other environment details: NA
application.properties (file)
# Global configuration
# suppress inspection "SpringBootApplicationProperties"
[email protected]@
# suppress inspection "SpringBootApplicationProperties"
[email protected]@
# OpenBAS configuration
[email protected]@
[email protected]@
openbas.base-url=http://localhost:8080
openbas.map-tile-server-light=https://map.openbas.io/styles/filigran-light2/{z}/{x}/{y}.png
openbas.map-tile-server-dark=https://map.openbas.io/styles/filigran-dark2/{z}/{x}/{y}.png
openbas.cookie-name=openbas_token
openbas.cookie-secure=false
openbas.cookie-duration=P1D
openbas.unsecured-certificate=false
openbas.with-proxy=false
[email protected]
#openbas.admin.email=admin@localhost
openbas.admin.password=<REDACTED>
openbas.admin.token=<REDACTED>
#Feature Flag
openbas.disabled-dev-features=
openbas.xls.import.mail.enable=true
# Server configuration
server.address=0.0.0.0
server.port=8080
server.servlet.context-path=/
server.servlet.session.timeout=1440m
server.ssl.enabled=false
server.http2.enabled=true
server.ssl.key-store-type=PKCS12
server.ssl.key-store=classpath:localhost.p12
server.ssl.key-store-password=<REDACTED>
server.ssl.key-alias=localhost
server.compression.enabled=true
# Authenticators
## Local
openbas.auth-local-enable=true
## Oauth
openbas.auth-openid-enable=false
## Configuration examples
### Auth0
# spring.security.oauth2.client.provider.{registrationId}.issuer-uri=https://auth.auth0.io/
# spring.security.oauth2.client.registration.{registrationId}.client-name=Login with auth0
# spring.security.oauth2.client.registration.{registrationId}.client-id=
# spring.security.oauth2.client.registration.{registrationId}.client-secret=
# spring.security.oauth2.client.registration.{registrationId}.redirect-uri=${openbas.base-url}/login/oauth2/code/{registrationId}
# spring.security.oauth2.client.registration.{registrationId}.scope=openid,profile,email
### GitHub / Facebook or any other pre handled OAuth2
# spring.security.oauth2.client.registration.{registrationId}.client-name=Login with Github
# spring.security.oauth2.client.registration.{registrationId}.client-id=
# spring.security.oauth2.client.registration.{registrationId}.client-secret=
## Saml2
openbas.auth-saml2-enable=false
## Configuration examples
### Microsoft / Okta or any other saml2 providers
# spring.security.saml2.relyingparty.registration.{registrationId}.entity-id=
# spring.security.saml2.relyingparty.registration.{registrationId}.assertingparty.metadata-uri=
#### saml attibutes keys for firstname & lastname
# openbas.provider.{registrationId}.firstname_attribute_key=
# openbas.provider.{registrationId}.lastname_attribute_key=
## Oauth & Saml2
### To handle admin with sso
# openbas.provider.{registrationId}.roles_path=
# openbas.provider.{registrationId}.roles_admin=
# openbas.logout-success-url=/
## Kerberos
openbas.auth-kerberos-enable=false
# Technical
server.forward-headers-strategy=framework
spring.servlet.multipart.max-file-size=5GB
spring.servlet.multipart.max-request-size=5GB
spring.application.name=${openbas.name}
spring.quartz.properties.org.quartz.scheduler.instanceName=OpenBAS_Scheduler
spring.mvc.pathmatch.matching-strategy=ant_path_matcher
spring.quartz.properties.org.quartz.threadPool.threadCount=10
spring.data.rest.basePath=/api
springdoc.api-docs.path=/api-docs
springdoc.swagger-ui.validatorUrl=none
# Encoding
spring.mail.default-encoding=UTF-8
spring.messages.encoding=UTF-8
server.tomcat.uri-encoding=UTF-8
spring.freemarker.charset=UTF-8
server.servlet.encoding.charset=UTF-8
# Database Properties
spring.datasource.url=jdbc:postgresql://localhost:5432/openbas
spring.datasource.username=openbas
spring.datasource.password=<REDACTED>
spring.jpa.properties.hibernate.dialect=org.hibernate.dialect.PostgreSQLDialect
spring.jpa.hibernate.ddl-auto=validate
#spring.jpa.hibernate.ddl-auto=update
# spring.jpa.show-sql=true
# spring.jpa.properties.hibernate.format_sql=true
spring.flyway.enabled=true
spring.flyway.url=${spring.datasource.url}
spring.flyway.user=${spring.datasource.username}
spring.flyway.password=${spring.datasource.password}
spring.flyway.table=migrations
#spring.flyway.locations=classpath:io/openbas/migration
spring.flyway.locations=/home/tiger/Downloads/openbas/openbas/openbas_extracted/BOOT-INF/classes/io/openbas/migration
spring.flyway.baseline-on-migrate=true
spring.flyway.baseline-version=0
spring.flyway.postgresql.transactional-lock=false
# IA Properties
ai.enabled=false
ai.type=mistralai
ai.endpoint=<REDACTED>
ai.token=<REDACTED>
ai.model=mistral
ai.model_images=<REDACTED>
# Minio Properties
minio.endpoint=127.0.0.1
minio.bucket=openbas
minio.port=9000
#MINIO_ROOT_USER=minioadmin
#MINIO_ROOT_PASSWORD=<REDACTED>
minio.access-key=<REDACTED>
minio.access-secret=<REDACTED>
# S3 configuration
openbas.s3.use-aws-role=false
openbas.s3.sts-endpoint=<REDACTED>
# Logging
logging.level.root=fatal
logging.level.org.flywaydb=error
logging.level.io.openbas=error
logging.file.name=./logs/openbas.log
logging.logback.rollingpolicy.file-name-pattern=${LOG_FILE}.-%d{yyyy-MM-dd}.%i
logging.logback.rollingpolicy.max-file-size=10MB
logging.logback.rollingpolicy.max-history=7
#############
# EXECUTORS #
#############
# Executor Caldera
executor.caldera.enable=false
executor.caldera.id=2f9a0936-c327-4e95-b406-d161d32a2500
executor.caldera.url=http://localhost:8888/
executor.caldera.public-url=http://localhost:8888/
executor.caldera.api-key=<REDACTED>
# Executor Tanium
executor.tanium.enable=false
executor.tanium.id=fbcce3cc-9cd3-4fdb-b451-1c90f4ae035d
executor.tanium.url=<REDACTED>
executor.tanium.api-key=<REDACTED>
executor.tanium.computer-group-id=1
executor.tanium.action-group-id=4
executor.tanium.windows-package-id=<REDACTED>
executor.tanium.unix-package-id=<REDACTED>
#############
# INJECTORS #
#############
openbas.rabbitmq.prefix=openbas
openbas.rabbitmq.hostname=localhost
openbas.rabbitmq.vhost=/
openbas.rabbitmq.ssl=false
openbas.rabbitmq.port=5672
openbas.rabbitmq.management-port=15672
openbas.rabbitmq.user=guest
openbas.rabbitmq.pass=<REDACTED>
openbas.rabbitmq.queue-type=classic
openbas.rabbitmq.management-insecure=true
openbas.rabbitmq.trust.store=file:/home/tiger/Downloads/openbas/openbas/certs/dummy-store.p12
openbas.rabbitmq.trust-store-password=<REDACTED>
# Mail sending config (Always available, mandatory)
[email protected]
[email protected]
spring.mail.host=smtp.openbasmail.com
spring.mail.port=465
[email protected]
spring.mail.password=<REDACTED>
spring.mail.protocol=smtps
# Extra mail configuration
spring.mail.properties.mail.smtp.ssl.trust=*
spring.mail.properties.mail.smtp.ssl.enable=true
spring.mail.properties.mail.smtp.auth=true
spring.mail.properties.mail.smtp.starttls.enable=false
# IMAP Configuration
openbas.mail.imap.enabled=false
openbas.mail.imap.host=imap.mail.com
[email protected]
openbas.mail.imap.password=<REDACTED>
openbas.mail.imap.port=993
openbas.mail.imap.inbox=INBOX
openbas.mail.imap.sent=Sent
# Extra IMAP configuration
openbas.mail.imap.ssl.trust=*
openbas.mail.imap.ssl.enable=true
openbas.mail.imap.auth=true
openbas.mail.imap.starttls.enable=false
# Extra XTM configuration
openbas.xtm.opencti.enable=false
openbas.xtm.opencti.url=<REDACTED>
openbas.xtm.opencti.token=<REDACTED>
# XLS Import
openbas.xls.import.mail.enable=true
openbas.xls.import.sms.enable=true
# Injector Caldera config
injector.caldera.enable=false
injector.caldera.id=7736918d-6a3f-46c7-b303-cbf5dc476c84
injector.caldera.url=http://localhost:8888/
injector.caldera.public-url=http://localhost:8888/
injector.caldera.api-key=<REDACTED>
# OVH SMS config
ovh.sms.enable=false
ovh.sms.ak=<REDACTED>
ovh.sms.as=<REDACTED>
ovh.sms.ck=<REDACTED>
ovh.sms.service=<REDACTED>
ovh.sms.sender=<REDACTED>
# Mastodon config
mastodon.enable=false
mastodon.url=<REDACTED>
# Airbus LADE config
lade.enable=false
lade.url=<REDACTED>
lade.session=30
lade.username=<REDACTED>
lade.password=<REDACTED>
### Telemetry
telemetry.enable=false
### Expectation
openbas.expectation.technical.expiration-time=21600
#openbas.expectation.detection.expiration-time=21600
#openbas.expectation.prevention.expiration-time=21600
openbas.expectation.human.expiration-time=86400
#openbas.expectation.challenge.expiration-time=3600
#openbas.expectation.article.expiration-time=3600
#openbas.expectation.manual.expiration-time=3600
# Min value: 1
# Max value: 100
# Default value: 50
openbas.expectation.manual.default-score-value=50
Actual Output (error)
`Couldn't connect to host, port:
Description: Failed to connect to the specified IMAP server (imap.openbasmail.com) on port 993.
Details: Timeout occurred (timeout -1).
Application run failed:
Description: The application failed to start due to an exception during the execution of a CommandLineRunner.
Error Type: java.lang.IllegalStateException
Details:
Cause: java.lang.IllegalArgumentException
Message: Config properties 'openbas.admin.email' should be a valid email address.
Root Cause Location: io.openbas.runner.InitAdminCommandLineRunner.createUser at line 68.`