Wildbox Quick Start Guide

docker --version
docker compose --version
git --version

git clone https://github.com/fabriziosalmi/wildbox.git
cd wildbox

# Copy example environment files
cp .env.example .env

# For sensitive data, use secure values:
# Edit .env and add your actual credentials
nano .env

# Start all services in the background
docker compose up -d

# Check service status
docker compose ps

# View logs
docker compose logs -f

# Stop everything
docker compose down

# Start only the core (gateway, identity, tools API) plus datastores
docker compose up -d postgres wildbox-redis gateway identity api

# Or start individual services
docker compose up -d postgres wildbox-redis

# Wait for databases to be ready
sleep 10

# Then start application services
docker compose up -d identity api

# Check API health
curl http://localhost:8000/health
curl http://localhost:8001/health
curl http://localhost:8006/health

# Expected response:
# {"status":"healthy","timestamp":"...","version":"..."}

# Get initial admin token
curl -X POST http://localhost:8001/auth/jwt/login \
  -H "Content-Type: application/json" \
  -d '{
    "email": "$INITIAL_ADMIN_EMAIL",
    "password": "$INITIAL_ADMIN_PASSWORD"
  }'

# Use the returned token for API requests
curl -H "Authorization: Bearer $TOKEN" http://localhost:8000/v1/dashboard

# Access the identity service shell
docker compose exec identity bash

# Reset password
python -c "
from app.models import User
from passlib.context import CryptContext

pwd_context = CryptContext(schemes=['bcrypt'])
hashed = pwd_context.hash('new-password-here')
# Update in database manually or through admin script
"

# All services
docker compose logs -f

# Specific service
docker compose logs -f identity
docker compose logs -f agents

# Last 100 lines
docker compose logs --tail=100 identity

# For PostgreSQL-based services
docker compose exec identity \
  alembic upgrade head

docker compose exec data \
  alembic upgrade head

# Access a service shell
docker compose exec identity bash
docker compose exec agents bash

# Run a specific command
docker compose exec -T postgres psql -U postgres -d wildbox -c "SELECT COUNT(*) FROM users;"

# Get authentication token
TOKEN=$(curl -s -X POST http://localhost:8001/auth/jwt/login \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "username=$INITIAL_ADMIN_EMAIL&password=$INITIAL_ADMIN_PASSWORD" | jq -r '.access_token')

# Make authenticated requests
curl -H "Authorization: Bearer $TOKEN" http://localhost:8000/v1/indicators
curl -H "Authorization: Bearer $TOKEN" http://localhost:8006/v1/analyze \
  -H "Content-Type: application/json" \
  -d '{"ioc": {"type": "ip", "value": "8.8.8.8"}}'

# Get overall health
curl http://localhost:8000/health | jq .

# Get detailed service status
curl http://localhost:8000/stats | jq .

# Check PostgreSQL
docker compose exec postgres pg_isready -U postgres

# Check Redis
docker compose exec wildbox-redis redis-cli ping

# Check container resource usage
docker stats

# Check disk usage
docker system df

# Check error logs
docker compose logs identity

# Rebuild images
docker compose build --no-cache

# Restart services
docker compose restart

# Full reset (WARNING: Deletes data)
docker compose down -v
docker compose up -d

# Verify services are running
docker compose ps

# Check if ports are open
netstat -an | grep 8000
lsof -i :8000

# Test connectivity
curl -v http://localhost:8000/health

# Check PostgreSQL logs
docker compose logs postgres

# Verify database exists
docker compose exec postgres psql -U postgres -l

# Check Redis connection
docker compose exec wildbox-redis redis-cli info

# Clean up unused images/volumes
docker system prune -a

# Check disk usage
du -sh ./*

# Reduce log retention
docker compose down
# Edit docker-compose.yml and adjust volumes

# 1. Secure all credentials in .env.production
cp .env .env.production
nano .env.production

# 2. Use production docker compose
docker compose -f docker-compose.yml \
               -f docker-compose.prod.yml \
               up -d

# 3. Enable SSL/TLS on the gateway
# Configure certificates for the gateway service (see haproxy/ and docker-compose.prod.yml)

# 4. Set up monitoring and alerting
# Configure Prometheus retention and Grafana alerts

# 5. Enable backups
# Set up automated PostgreSQL and Redis backups

# 6. Security hardening
# Review and implement SECURITY_REMEDIATION_CHECKLIST.md