diff --git a/ansible-wazuh-manager/tasks/main.yml b/ansible-wazuh-manager/tasks/main.yml index b6a094d8..9a2a2c14 100644 --- a/ansible-wazuh-manager/tasks/main.yml +++ b/ansible-wazuh-manager/tasks/main.yml @@ -21,7 +21,7 @@ chdir: /var/ossec/etc/ tags: - config - when: wazuh_manager_config.authd.ssl_agent_ca is not defined + when: not wazuh_manager_config.authd.ssl_agent_ca is not none - name: Copy CA, SSL key and cert for authd copy: @@ -34,7 +34,7 @@ - "{{ wazuh_manager_config.authd.ssl_manager_key }}" tags: - config - when: wazuh_manager_config.authd.ssl_agent_ca is defined + when: wazuh_manager_config.authd.ssl_agent_ca is not none - name: Installing the local_rules.xml (default local_rules.xml) template: src=var-ossec-rules-local_rules.xml.j2 @@ -78,11 +78,15 @@ - name: Enable client-syslog command: /var/ossec/bin/ossec-control enable client-syslog - when: csyslog_running.stdout == '0' and wazuh_manager_config.syslog_outputs is defined + when: + - csyslog_running.stdout == '0' + - wazuh_manager_config.syslog_outputs.server is not none - name: Start client-syslog command: /var/ossec/bin/ossec-control start client-syslog - when: csyslog_running.stdout == '0' and wazuh_manager_config.syslog_outputs is defined + when: + - csyslog_running.stdout == '0' + - wazuh_manager_config.syslog_outputs.server is not none - name: Check if ossec-agentlessd is enabled shell: "/var/ossec/bin/ossec-control status | grep -c 'ossec-agentlessd is running' | xargs echo" diff --git a/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 b/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 index 5040d338..df9aeade 100644 --- a/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 +++ b/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 @@ -25,63 +25,67 @@ {% if wazuh_manager_config.authd.enable == true %} no - {% if wazuh_manager_config.authd.port is defined %}{{wazuh_manager_config.authd.port}}{% else %}1515{% endif %} - {% if wazuh_manager_config.authd.use_source_ip is defined %}{{wazuh_manager_config.authd.use_source_ip}}{% endif %} - {% if wazuh_manager_config.authd.force_insert is defined %}{{wazuh_manager_config.authd.force_insert}}{% endif %} - {% if wazuh_manager_config.authd.force_time is defined %}{{wazuh_manager_config.authd.force_time}}{% endif %} - {% if wazuh_manager_config.authd.purge is defined %}{{wazuh_manager_config.authd.purge}}{% endif %} - {% if wazuh_manager_config.authd.use_password is defined %}{{wazuh_manager_config.authd.use_password}}{% endif %} - {% if wazuh_manager_config.authd.ssl_agent_ca is defined %}/var/ossec/etc/{{wazuh_manager_config.authd.ssl_agent_ca | basename}}{% endif %} - {% if wazuh_manager_config.authd.ssl_verify_host is defined %}{{wazuh_manager_config.authd.ssl_verify_host}}{% endif %} - {% if wazuh_manager_config.authd.ssl_manager_cert is defined %}/var/ossec/etc/{{wazuh_manager_config.authd.ssl_manager_cert | basename}}{% endif %} - {% if wazuh_manager_config.authd.ssl_manager_key is defined %}/var/ossec/etc/{{wazuh_manager_config.authd.ssl_manager_key | basename}}{% endif %} - {% if wazuh_manager_config.authd.ssl_auto_negotiate is defined %}{{wazuh_manager_config.authd.ssl_auto_negotiate}}{% endif %} + {% if wazuh_manager_config.authd.port is not none %}{{wazuh_manager_config.authd.port}}{% else %}1515{% endif %} + {% if wazuh_manager_config.authd.use_source_ip is not none %}{{wazuh_manager_config.authd.use_source_ip}}{% endif %} + {% if wazuh_manager_config.authd.force_insert is not none %}{{wazuh_manager_config.authd.force_insert}}{% endif %} + {% if wazuh_manager_config.authd.force_time is not none %}{{wazuh_manager_config.authd.force_time}}{% endif %} + {% if wazuh_manager_config.authd.purge is not none %}{{wazuh_manager_config.authd.purge}}{% endif %} + {% if wazuh_manager_config.authd.use_password is not none %}{{wazuh_manager_config.authd.use_password}}{% endif %} + {% if wazuh_manager_config.authd.ssl_agent_ca is not none %}/var/ossec/etc/{{wazuh_manager_config.authd.ssl_agent_ca | basename}}{% endif %} + {% if wazuh_manager_config.authd.ssl_verify_host is not none %}{{wazuh_manager_config.authd.ssl_verify_host}}{% endif %} + {% if wazuh_manager_config.authd.ssl_manager_cert is not none %}/var/ossec/etc/{{wazuh_manager_config.authd.ssl_manager_cert | basename}}{% endif %} + {% if wazuh_manager_config.authd.ssl_manager_key is not none %}/var/ossec/etc/{{wazuh_manager_config.authd.ssl_manager_key | basename}}{% endif %} + {% if wazuh_manager_config.authd.ssl_auto_negotiate is not none %}{{wazuh_manager_config.authd.ssl_auto_negotiate}}{% endif %} {% endif %} {% if wazuh_manager_config.extra_emails is defined %} {% for mail in wazuh_manager_config.extra_emails %} +{% if mail.enable == true %} {{ mail.mail_to }} - {% if mail.format is defined %} + {% if mail.format is not none %} {{ mail.format }} {% endif %} - {% if mail.level is defined %} + {% if mail.level is not none %} {{ mail.level }} {% endif %} - {% if mail.event_location is defined %} + {% if mail.event_location is not none %} {{ mail.event_location }} {% endif %} - {% if mail.group is defined %} + {% if mail.group is not none %} {{ mail.group }} {% endif %} - {% if mail.do_not_delay is defined and mail.do_not_delay == true %} + {% if mail.do_not_delay is not none and mail.do_not_delay == true %} {% endif %} - {% if mail.do_not_group is defined and mail.do_not_group == true %} + {% if mail.do_not_group is not none and mail.do_not_group == true %} {% endif %} - {% if mail.rule_id is defined %} + {% if mail.rule_id is not none %} {{ mail.rule_id }} {% endif %} +{% endif %} {% endfor %} {% endif %} {% if wazuh_manager_config.reports is defined %} {% for report in wazuh_manager_config.reports %} +{% if report.enable == true %} {{ report.category }} {{ report.title }} {{ report.email_to }} - {% if report.location is defined %}{{ report.location }}{% endif %} - {% if report.group is defined %}{{ report.group }}{% endif %} - {% if report.rule is defined %}{{ report.rule }}{% endif %} - {% if report.level is defined %}{{ report.level }}{% endif %} - {% if report.srcip is defined %}{{ report.srcip }}{% endif %} - {% if report.user is defined %}{{ report.user }}{% endif %} - {% if report.showlogs is defined %}{{ report.showlogs }}{% endif %} + {% if report.location is not none %}{{ report.location }}{% endif %} + {% if report.group is not none %}{{ report.group }}{% endif %} + {% if report.rule is not none %}{{ report.rule }}{% endif %} + {% if report.level is not none %}{{ report.level }}{% endif %} + {% if report.srcip is not none %}{{ report.srcip }}{% endif %} + {% if report.user is not none %}{{ report.user }}{% endif %} + {% if report.showlogs is not none %}{{ report.showlogs }}{% endif %} +{% endif %} {% endfor %} {% endif %} @@ -263,11 +267,13 @@ {% if wazuh_manager_config.syslog_outputs is defined %} {% for syslog_output in wazuh_manager_config.syslog_outputs %} +{% if syslog_output.server is not none %} {{ syslog_output.server }} {{ syslog_output.port }} {{ syslog_output.format }} +{% endif %} {% endfor %} {% endif %}