afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

roles/wazuh-manager/templates/api.yaml: add new vars supporting new Wazuh API settings. Update related templates

Browse Source
This commit is contained in:
zenidd 2021-01-15 11:10:46 +01:00
parent f7c84a357d
commit 9d83afc8f0
No known key found for this signature in database
GPG Key ID: 5BBAD5CEE8B6F335
2 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
roles/wazuh/ansible-wazuh-manager/defaults/main.yml
View File

@ -395,6 +395,7 @@ wazuh_manager_api:
https_cert: "api/configuration/ssl/server.crt" https_cert: "api/configuration/ssl/server.crt"
https_use_ca: False https_use_ca: False
https_ca: "api/configuration/ssl/ca.crt" https_ca: "api/configuration/ssl/ca.crt"
https_ssl_cipher: "TLSv1.2"
logging_level: "info" logging_level: "info"
logging_path: "logs/api.log" logging_path: "logs/api.log"
cors: no cors: no
@ -410,7 +411,10 @@ wazuh_manager_api:
use_only_authd: no use_only_authd: no
drop_privileges: yes drop_privileges: yes
experimental_features: no experimental_features: no
remote_commands_localfile: yes
remote_commands_localfile_exceptions: []
remote_commands_wodle: yes
remote_commands_wodle_exceptions: []
# wazuh_api_users: # wazuh_api_users:
# - username: custom-user # - username: custom-user
# password: .S3cur3Pa55w0rd*- # Must comply with requirements (8+ length, uppercase, lowercase, specials chars) # password: .S3cur3Pa55w0rd*- # Must comply with requirements (8+ length, uppercase, lowercase, specials chars)

13
roles/wazuh/ansible-wazuh-manager/templates/api.yaml.j2
View File

@ -14,7 +14,7 @@
cert: "{{ wazuh_manager_config.api.https_cert }}" cert: "{{ wazuh_manager_config.api.https_cert }}"
use_ca: {{ wazuh_manager_config.api.https_use_ca }} use_ca: {{ wazuh_manager_config.api.https_use_ca }}
ca: "{{ wazuh_manager_config.api.https_ca }}" ca: "{{ wazuh_manager_config.api.https_ca }}"
ssl_cipher: "{{ wazuh_manager_config.api.https_ssl_cipher }}"
# Logging configuration # Logging configuration
# Values for API log level: disabled, info, warning, error, debug, debug2 (each level includes the previous level). # Values for API log level: disabled, info, warning, error, debug, debug2 (each level includes the previous level).
logs: logs:
@ -41,4 +41,13 @@
# Drop privileges (Run as ossec user) # Drop privileges (Run as ossec user)
drop_privileges: {{ wazuh_manager_config.api.drop_privileges }} drop_privileges: {{ wazuh_manager_config.api.drop_privileges }}
# Enable features under development # Enable features under development
experimental_features: {{ wazuh_manager_config.api.experimental_features }} experimental_features: {{ wazuh_manager_config.api.experimental_features }}
# Enable remote commands
remote_commands:
localfile:
enabled: {{ wazuh_manager_config.api.remote_commands_localfile }}
exceptions: {{ wazuh_manager_config.api.remote_commands_localfile_exceptions }}
wodle_command:
enabled: {{ wazuh_manager_config.api.remote_commands_wodle }}
exceptions: {{ wazuh_manager_config.api.remote_commands_wodle_exceptions }}