docs: Add 16, update 2 and remove 2 files

graylog/config/service.env

@@ -0,0 +1,28 @@
+# Graylog Configuration
+CONTAINER_NAME=graylog
+
+# Server settings (REQUIRED by dropshell)
+SSH_USER="root"
+
+# Ports
+WEB_PORT=9000           # Graylog web UI
+GELF_UDP_PORT=12201     # GELF UDP input
+GELF_TCP_PORT=12202     # GELF TCP input
+SYSLOG_UDP_PORT=1514    # Syslog UDP input
+SYSLOG_TCP_PORT=1515    # Syslog TCP input
+BEATS_PORT=5044         # Beats input
+
+# Graylog Admin Password (CHANGE THIS!)
+# Generate a new secret with: pwgen -N 1 -s 96
+GRAYLOG_PASSWORD_SECRET="somepasswordpepper"
+# Admin password (plain text - converted to SHA256 during install)
+GRAYLOG_ROOT_PASSWORD="admin"
+
+# Graylog settings
+GRAYLOG_HTTP_EXTERNAL_URI="http://localhost:9000/"
+GRAYLOG_TIMEZONE="UTC"
+
+# OpenSearch/Elasticsearch settings
+OPENSEARCH_JAVA_OPTS="-Xms1g -Xmx1g"
+
+# MongoDB settings (no authentication by default for internal use)