How to disable honeypots on a sensor?

[kresten0x50]

As the title indicates, I would like to disable certain honeypots on my Sensor nodes so they are not as obvious as they currently are.

It works fine on my Hive node by editing the docker-compose.yml, but when I do the same on my Sensor node (and restart tpot or the machine for that matter), it just starts the same honeypots as it originally did.

I have probably missed something in the documentation, but I can't seem to find it. Can anyone point me in the right direction?

(I have found an old(-ish) forum post that points to a docker-compose file in /opt/tpot/etc, but that doesn't seem to exist anymore.)

[t3chn0m4g3]

1. Stop T-Pot (sudo systemctl stop tpot)
2. Remove network name and service of the honeypot you wish to remove from ~/tpotce/docker-compose.yml
3. Reboot sudo reboot or start T-Pot again (sudo systemctl start tpot)