setup_env.py

#!/usr/bin/env python3
import secrets
import string
import os

def generate_password(length=32):
    alphabet = string.ascii_letters + string.digits + "!@#$%^&*()-_=+"
    return ''.join(secrets.choice(alphabet) for i in range(length))

def generate_alphanumeric(length=32):
    alphabet = string.ascii_letters + string.digits
    return ''.join(secrets.choice(alphabet) for i in range(length))

def main():
    env_file = ".env"
    if os.path.exists(env_file):
        print(f"Warning: {env_file} already exists.")
        overwrite = input("Do you want to overwrite it? (y/N): ")
        if overwrite.lower() != 'y':
            print("Aborting.")
            return

    print("Generating secure credentials...")

    # Generate secrets
    mysql_root_password = generate_password()
    mysql_password = generate_password()
    redis_password = generate_password()
    security_salt = generate_alphanumeric(32)
    crypt_key = generate_alphanumeric(32) # MISP encryption key

    # Default values
    mysql_user = "misp"
    mysql_database = "misp"
    base_url = "https://localhost:8443"
    
    env_content = f"""# MISP Environment Variables
# Generated by setup_env.py

# Base URL
BASE_URL='{base_url}'

# Session Configuration
PHP_SESSION_COOKIE_SECURE='true'
PHP_SESSION_COOKIE_SAMESITE='Lax'
PHP_SESSION_DEFAULTS='redis'

# Database
MYSQL_HOST='db'
MYSQL_PORT='3306'
MYSQL_USER='{mysql_user}'
MYSQL_PASSWORD='{mysql_password}'
MYSQL_ROOT_PASSWORD='{mysql_root_password}'
MYSQL_DATABASE='{mysql_database}'

# Redis
REDIS_HOST='redis'
REDIS_PORT='6379'
REDIS_PASSWORD='{redis_password}'
ENABLE_REDIS_EMPTY_PASSWORD='false'

# MISP Security
SECURITY_SALT='{security_salt}'
CRYPT_KEY='{crypt_key}'

# MISP Modules
MISP_MODULES_FQDN='http://misp-modules'

# SMTP
SMTP_FQDN='mail'
SMTP_PORT='25'

# Guard
GUARD_PORT='8888'
GUARD_ARGS='--ssl-insecure'
"""

    with open(env_file, "w") as f:
        f.write(env_content)

    print(f"Successfully created {env_file} with secure defaults.")
    print("Please review the file and adjust BASE_URL if needed.")

if __name__ == "__main__":
    main()