diff --git a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml index 586fd594..c2652053 100644 --- a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml @@ -294,4 +294,19 @@ wazuh_agent_config: list: - key: Env value: Production + enrollment: + enabled: no + manager_address: '' + port: 1515 + agent_name: '' + groups: '' + agent_address: '' + ssl_cipher: HIGH:!ADH:!EXP:!MD5:!RC4:!3DES:!CAMELLIA:@STRENGTH + server_ca_path: '' + agent_certificate_path: '' + agent_key_path: '' + authorization_pass: ChangeMe + auto_method: no + delay_after_enrollment: 20 + use_source_ip: no wazuh_agent_nat: false diff --git a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 index a1e79db5..d5433660 100644 --- a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 +++ b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 @@ -45,6 +45,26 @@ {{ wazuh_agent_config.client_buffer.events_per_sec }} + {% if wazuh_agent_config.enrollment is defined and wazuh_agent_config.enrollment.enabled == 'yes' %} + + {{ wazuh_agent_config.enrollment.enabled }} + {{ wazuh_agent_config.enrollment.manager_address }} + {{ wazuh_agent_config.enrollment.port }} + {{ wazuh_agent_config.enrollment.agent_name }} + {{ wazuh_agent_config.enrollment.groups }} + {{ wazuh_agent_config.enrollment.agent_address }} + {{ wazuh_agent_config.enrollment.ssl_cipher }} + {{ wazuh_agent_config.enrollment.server_ca_path }} + {{ wazuh_agent_config.enrollment.agent_certificate_path }} + {{ wazuh_agent_config.enrollment.agent_key_path }} + {{ wazuh_agent_config.enrollment.authorization_pass }} + {{ wazuh_agent_config.enrollment.auto_method }} + {{ wazuh_agent_config.enrollment.delay_after_enrollment }} + {{ wazuh_agent_config.enrollment.use_source_ip }} + + {% endif %} + + {% if wazuh_agent_config.rootcheck is defined %} no