mirror of
https://github.com/SpecterOps/Nemesis
synced 2026-06-08 12:36:42 +00:00
Will Schroeder
6525ce7140
Replace Minio backend storage with SeaweedFS (as Minio has been deprecated).
99 lines
3.5 KiB
Plaintext
99 lines
3.5 KiB
Plaintext
S3_ACCESS_KEY="nemesis"
|
|
S3_SECRET_KEY="Qwerty12345"
|
|
|
|
RABBITMQ_PASSWORD="Qwerty12345"
|
|
RABBITMQ_USER="nemesis"
|
|
|
|
POSTGRES_PASSWORD="Qwerty12345"
|
|
POSTGRES_USER="nemesis"
|
|
POSTGRES_HOST="postgres"
|
|
POSTGRES_PORT=5432
|
|
POSTGRES_DB="enrichment"
|
|
POSTGRES_PARAMETERS="sslmode=disable"
|
|
|
|
|
|
|
|
# You can change the password used by HASURA. If not defined a default password will be used (pass456)
|
|
# Example:
|
|
# HASURA_ADMIN_SECRET="Qwerty12345"
|
|
|
|
|
|
# NEMESIS_URL is used when building hyperlinks for findings and Apprise alerts.
|
|
# If you change the port Nemesis listens on using NEMESIS_PORT (below), ensure this URL's port matches.
|
|
# If using a host/domain name, a FQDN (with a top level domain) is recommended.
|
|
NEMESIS_URL="https://localhost:7443/"
|
|
|
|
|
|
####################
|
|
# Optional Settings
|
|
####################
|
|
|
|
# Setup users using BASIC_AUTH_USERS (default is 'n:n'). Define multiple users by separating them with a comma.
|
|
# You can generate hashes for the users using various methods:
|
|
# - OpenSSL: printf "myusername:$(openssl passwd -apr1 'asdf')\n"
|
|
# - Via the CLI using the "htpasswd" command from the"apache2-utils" package:
|
|
# - echo asdf | htpasswd -nmi myusername
|
|
# - Online generator: https://htpasswd.utils.com/
|
|
#
|
|
# Example: Defining the users 'alice' and 'bob':
|
|
# BASIC_AUTH_USERS='alice:$apr1$dVGX3WZH$r2b86WcF/F0oSxVivfLMg.,bob:$apr1$ZJIjt2ti$nbXWdeIQfQzKmWSMTsrW9/'
|
|
|
|
|
|
# Change the port Nemesis listens using NEMESIS_PORT (default is 7443).
|
|
# - Ensure the NEMESIS_URL value also uses this port.
|
|
# Example:
|
|
# NEMESIS_PORT=7443
|
|
|
|
|
|
# Configure Apprise alerting using APPRISE_URLS.
|
|
# - See Apprise's docs for how to format each provider: https://github.com/caronc/apprise/wiki#notification-services
|
|
# - To route user feedback to a specific channel use "?tag=feedback" as shown in the example below.
|
|
# Otherwise, only alerts listed.
|
|
# - See the Alerting docs for more details: https://specterops.github.io/Nemesis/usage_guide/#alerting
|
|
# Example:
|
|
# APPRISE_URLS=slack://Nemesis@T...6x/#nemesis-testing,slack://Nemesis@T...k/#nemesis-feedback?tag=feedback
|
|
|
|
|
|
# (Optional) Set Jupyter credentials using JUPYTER_PASSWORD.
|
|
# If not defined, a random password will be generated and printed in the jupyter container's logs.
|
|
# Example:
|
|
# JUPYTER_PASSWORD="Qwerty12345"
|
|
|
|
|
|
# (Optional) Enable Phoenix LLM tracing for Pydantic AI agents.
|
|
# Requires starting Nemesis with monitoring profile: ./tools/nemesis-ctl.sh start dev --monitoring
|
|
# Phoenix UI will be available at http://localhost:6006
|
|
# Example:
|
|
# PHOENIX_ENABLED=true
|
|
|
|
|
|
# (Optional) Chatbot database configuration.
|
|
# Password for the read-only database user used by the chatbot.
|
|
# Example:
|
|
# CHATBOT_DB_PASSWORD="chatbot_secure_password"
|
|
CHATBOT_DB_PASSWORD="chatbot_pass_change_me"
|
|
|
|
# (Optional) Maximum number of results returned by chatbot tools
|
|
# Helps prevent expensive queries and context window issues.
|
|
# Example:
|
|
# MCP_MAX_RESULTS=500
|
|
MCP_MAX_RESULTS=1000
|
|
|
|
######################
|
|
# (Optional) Enrichment Settings
|
|
#
|
|
# https://specterops.github.io/Nemesis/enrichment_configuration/
|
|
#
|
|
######################
|
|
|
|
# Enable PII Detection
|
|
# ENABLE_PII_DETECTION=true
|
|
# PII_DETECTION_THRESHOLD=0.7
|
|
|
|
# Enable OCR text extraction from images/documents
|
|
# Note: Enabling OCR significantly increases CPU usage anytime Nemesis processes an image.
|
|
# When enabled, the default language is 'eng' for English.
|
|
# - See https://github.com/tesseract-ocr/tessdata for a full list of available language packs.
|
|
# Example: Multiple languages
|
|
# TIKA_USE_OCR=true
|
|
# TIKA_OCR_LANGUAGES="eng chi_sim chi_tra jpn rus deu spa" |