---
- name: Copy Filebeat configuration.
  template:
    src: filebeat.yml.j2
    dest: "/etc/filebeat/filebeat.yml"
    owner: root
    group: root
    mode: 0400
  notify: restart filebeat
  tags: configure

- name: Copy Elasticsearch template.
  template:
    src: elasticsearch.yml.j2
    dest: "/etc/filebeat/wazuh-template.json"
    owner: root
    group: root
    mode: 0400
  notify: restart filebeat
  tags: configure

- name: Ensure Filebeat SSL key pair directory exists.
  file:
    path: "{{ filebeat_ssl_dir }}"
    state: directory
  when: filebeat_ssl_key_file
  tags: configure

- name: Copy SSL key and cert for filebeat.
  copy:
    src: "{{ item }}"
    dest: "{{ filebeat_ssl_dir }}/{{ item | basename }}"
    mode: 0400
  with_items:
    - "{{ filebeat_ssl_key_file }}"
    - "{{ filebeat_ssl_certificate_file }}"
  notify: restart filebeat
  when: filebeat_ssl_key_file and filebeat_ssl_certificate_file
  tags: configure