🔹 DefectDojo Community Edition on DefectDojo Documentation

Installation

Mon, 01 Jan 0001 00:00:00 +0000

Recommended Options

Docker Compose

See instructions in DOCKER.md

The Compose file pulls DefectDojo’s images through registry.defectdojo.com (run by DefectDojo, Inc.), which keeps them off your Docker Hub rate limits and logs each pull: the IP address is used to identify the organization and deleted within three days, and DefectDojo may reach out about its products or to ask for feedback. See section 1.4 of the privacy policy for details and how to object, or set DD_IMAGE_REGISTRY=docker.io to pull straight from Docker Hub.

System Architecture

Mon, 01 Jan 0001 00:00:00 +0000

NGINX

The webserver NGINX delivers all static content, e.g. images, JavaScript files or CSS files.

uWSGI

uWSGI is the application server that runs the DefectDojo platform, written in Python/Django, to serve all dynamic content.

Configuration

Mon, 01 Jan 0001 00:00:00 +0000

dojo/settings/settings.dist.py

The main settings are stored in dojo/settings/settings.dist.py. It is great to use this file as a reference for what can be configured, but it shouldn't be edited directly, because changes will be overwritten when updating DefectDojo. There are several methods to change the default settings:

Running in Production

Mon, 01 Jan 0001 00:00:00 +0000

Production Use (with Docker compose)

The docker-compose.yml file in this repository is fully functional to evaluate DefectDojo in your local environment.