MirrorNest
← All guides

TheHive

TheHive is a scalable security incident response platform for case and alert management, officially shipped as a Docker Compose bundle backed by Cassandra and Elasticsearch.

Target: Any Docker hostSecurityOfficial homepage ↗Official docs ↗
This guide is synthesized from TheHive's own official documentation, linked above — always cross-check exact package/version names there before running these commands on a production server, since distro and project versions move over time.

  1. 1Install prerequisites

    Docker Engine 23+, the Docker Compose plugin 2.20.2+, and jq are required.

  2. 2Clone the official Docker templates

    git clone https://github.com/StrangeBeeCorp/docker.git
    cd docker

  3. 3Initialize a production profile

    Pick a profile directory (e.g. prod1-thehive) — the init script generates certs and config for you.

    cd prod1-thehive
    bash ./scripts/init.sh

  4. 4Start the stack

    docker compose up -d
    docker compose ps

  5. 5Log in

    Without DNS set up, browse to https://localhost or your server's IP and accept the self-signed certificate.