diff --git a/roles/wazuh/ansible-wazuh-manager/tasks/main.yml b/roles/wazuh/ansible-wazuh-manager/tasks/main.yml index 1c029b6c..ba1c5080 100644 --- a/roles/wazuh/ansible-wazuh-manager/tasks/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/tasks/main.yml @@ -37,6 +37,22 @@ - include_tasks: "Debian.yml" when: ansible_os_family == "Debian" +- name: Generate the wazuh-keystore (username) + shell: > + /var/ossec/bin/wazuh-keystore -f indexer -k username -v {{ indexer_security_user }} + notify: restart wazuh-manager + tags: + - init + - config + +- name: Generate the wazuh-keystore (password) + shell: > + /var/ossec/bin/wazuh-keystore -f indexer -k password -v {{ indexer_security_password }} + notify: restart wazuh-manager + tags: + - init + - config + - name: Install expect package: name: expect diff --git a/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 b/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 index d14a7bf6..d0b33170 100644 --- a/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 +++ b/roles/wazuh/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 @@ -267,20 +267,18 @@ {% if wazuh_manager_config.vulnerability_detection.enabled == 'yes' or wazuh_manager_config.indexer.enabled == 'yes' %}yes{% else %}no{% endif %} - {% for item in wazuh_manager_config.indexer.hosts %} - https://{{ item }}:{{ filebeat_output_indexer_port }} - {% endfor %} + {% for item in wazuh_manager_config.indexer.hosts %} + https://{{ item }}:{{ filebeat_output_indexer_port }} + {% endfor %} - {{ indexer_security_user }} - {{ indexer_security_password }} - - - {{ filebeat_ssl_dir }}/root-ca.pem - - {{ filebeat_ssl_dir }}/{{ filebeat_node_name }}.pem - {{ filebeat_ssl_dir }}/{{ filebeat_node_name }}-key.pem - + + + {{ filebeat_ssl_dir }}/root-ca.pem + + {{ filebeat_ssl_dir }}/{{ filebeat_node_name }}.pem + {{ filebeat_ssl_dir }}/{{ filebeat_node_name }}-key.pem +