mirror of
https://github.com/wazuh/wazuh-ansible.git
synced 2025-12-11 03:35:25 -06:00
improve dashboard and manager roles to address pending tasks automation#2763
This commit is contained in:
parent
1e824255fb
commit
fe840b4a1d
@ -52,12 +52,11 @@
|
|||||||
- https://{{ node }}:9200
|
- https://{{ node }}:9200
|
||||||
{% endfor %}
|
{% endfor %}
|
||||||
|
|
||||||
# - name: Dashboard-config | Configure Wazuh manager address in wazuh.yml
|
- name: Dashboard-config | Set Wazuh server host URL
|
||||||
# ansible.builtin.replace:
|
ansible.builtin.replace:
|
||||||
# path: /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml
|
path: /etc/wazuh-dashboard/opensearch_dashboards.yml
|
||||||
# regexp: 'url:\s+https://.*$'
|
regexp: '^(\s*)url:\s*https://.*$'
|
||||||
# replace: 'url: https://{{ wazuh_manager_master_address }}'
|
replace: '\1url: https://{{ wazuh_manager_master_address }}'
|
||||||
# become: true
|
|
||||||
|
|
||||||
- name: Copy the certificates from local to the Wazuh dashboard instance
|
- name: Copy the certificates from local to the Wazuh dashboard instance
|
||||||
ansible.builtin.copy:
|
ansible.builtin.copy:
|
||||||
|
|||||||
@ -106,31 +106,8 @@
|
|||||||
group: wazuh
|
group: wazuh
|
||||||
mode: '0400'
|
mode: '0400'
|
||||||
with_items:
|
with_items:
|
||||||
- { src: "{{ manager_node_name }}-key.pem", dest: "manager-1-key.pem" }
|
- { src: "{{ manager_node_name }}-key.pem", dest: "server-key.pem" }
|
||||||
- { src: "{{ manager_node_name }}.pem", dest: "manager-1.pem" }
|
- { src: "{{ manager_node_name }}.pem", dest: "server.pem" }
|
||||||
|
|
||||||
# TEMP: make sure destination directory exists
|
|
||||||
- name: Create Filebeat certificates directory
|
|
||||||
ansible.builtin.file:
|
|
||||||
path: /etc/filebeat/certs
|
|
||||||
state: directory
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: '0755'
|
|
||||||
|
|
||||||
# TEMP: to make filebeat work
|
|
||||||
- name: Copy certificates to Filebeat directory
|
|
||||||
ansible.builtin.copy:
|
|
||||||
src: "{{ item.src }}"
|
|
||||||
dest: "{{ item.dest }}"
|
|
||||||
remote_src: true
|
|
||||||
owner: root
|
|
||||||
group: root
|
|
||||||
mode: '0400'
|
|
||||||
with_items:
|
|
||||||
- { src: "/var/ossec/etc/certs/root-ca.pem", dest: "/etc/filebeat/certs/root-ca.pem" }
|
|
||||||
- { src: "/var/ossec/etc/certs/{{ manager_node_name }}.pem", dest: "/etc/filebeat/certs/filebeat.pem" }
|
|
||||||
- { src: "/var/ossec/etc/certs/{{ manager_node_name }}-key.pem", dest: "/etc/filebeat/certs/filebeat-key.pem" }
|
|
||||||
|
|
||||||
- name: Generate the wazuh-keystore (username)
|
- name: Generate the wazuh-keystore (username)
|
||||||
ansible.builtin.shell:
|
ansible.builtin.shell:
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user