diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index 48790cd2..4004328c 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -395,6 +395,7 @@ wazuh_manager_api: https_cert: "api/configuration/ssl/server.crt" https_use_ca: False https_ca: "api/configuration/ssl/ca.crt" + https_ssl_cipher: "TLSv1.2" logging_level: "info" logging_path: "logs/api.log" cors: no @@ -410,7 +411,10 @@ wazuh_manager_api: use_only_authd: no drop_privileges: yes experimental_features: no - + remote_commands_localfile: yes + remote_commands_localfile_exceptions: [] + remote_commands_wodle: yes + remote_commands_wodle_exceptions: [] # wazuh_api_users: # - username: custom-user # password: .S3cur3Pa55w0rd*- # Must comply with requirements (8+ length, uppercase, lowercase, specials chars) diff --git a/roles/wazuh/ansible-wazuh-manager/templates/api.yaml.j2 b/roles/wazuh/ansible-wazuh-manager/templates/api.yaml.j2 index 638c4750..4308216b 100644 --- a/roles/wazuh/ansible-wazuh-manager/templates/api.yaml.j2 +++ b/roles/wazuh/ansible-wazuh-manager/templates/api.yaml.j2 @@ -14,7 +14,7 @@ cert: "{{ wazuh_manager_config.api.https_cert }}" use_ca: {{ wazuh_manager_config.api.https_use_ca }} ca: "{{ wazuh_manager_config.api.https_ca }}" - + ssl_cipher: "{{ wazuh_manager_config.api.https_ssl_cipher }}" # Logging configuration # Values for API log level: disabled, info, warning, error, debug, debug2 (each level includes the previous level). logs: @@ -41,4 +41,13 @@ # Drop privileges (Run as ossec user) drop_privileges: {{ wazuh_manager_config.api.drop_privileges }} # Enable features under development - experimental_features: {{ wazuh_manager_config.api.experimental_features }} \ No newline at end of file + experimental_features: {{ wazuh_manager_config.api.experimental_features }} + +# Enable remote commands +remote_commands: + localfile: + enabled: {{ wazuh_manager_config.api.remote_commands_localfile }} + exceptions: {{ wazuh_manager_config.api.remote_commands_localfile_exceptions }} + wodle_command: + enabled: {{ wazuh_manager_config.api.remote_commands_wodle }} + exceptions: {{ wazuh_manager_config.api.remote_commands_wodle_exceptions }}