boxswapper/Internal-apps
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

images updated for wazuh to previous version, images pull haven't tested full deploy yet

Browse Source
This commit is contained in:
boxswapper
2025-11-12 13:37:40 -07:00
parent 16e40447f3
commit 1ed2afba27
2 changed files with 26 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

39
ansible-playbook.yml
View File

@@ -117,6 +117,7 @@
name: wazuh-certs-generator name: wazuh-certs-generator
env: env:
CERT_TOOL_VERSION: 4.14 CERT_TOOL_VERSION: 4.14
auto_remove: yes
command: "generator" command: "generator"
volumes: volumes:
- /opt/apps/wazuh/config/wazuh_indexer_ssl_certs/:/certificates/ - /opt/apps/wazuh/config/wazuh_indexer_ssl_certs/:/certificates/
@@ -126,18 +127,18 @@
- name: Deploy Wazuh Manager - name: Deploy Wazuh Manager
containers.podman.podman_container: containers.podman.podman_container:
image: wazuh/wazuh-manager:5.0.0 image: wazuh/wazuh-manager:{{ wazah_version }}
name: wazuh.manager name: wazuh.manager
env: env:
INDEXER_URL: https://wazuh.indexer:9200 INDEXER_URL: "https://wazuh.indexer:9200"
INDEXER_USERNAME: admin INDEXER_USERNAME: "admin"
INDEXER_PASSWORD: SecretPassword INDEXER_PASSWORD: "SecretPassword"
FILEBEAT_SSL_VERIFICATION_MODE: full FILEBEAT_SSL_VERIFICATION_MODE: "full"
SSL_CERTIFICATE_AUTHORITIES: /etc/ssl/root-ca.pem SSL_CERTIFICATE_AUTHORITIES: "/etc/ssl/root-ca.pem"
SSL_CERTIFICATE: /etc/ssl/filebeat.pem SSL_CERTIFICATE: "/etc/ssl/filebeat.pem"
SSL_KEY: /etc/ssl/filebeat.key SSL_KEY: "/etc/ssl/filebeat.key"
API_USERNAME: wazuh-wui API_USERNAME: "wazuh-wui"
API_PASSWORD: MyS3cr37P450r.*- API_PASSWORD: "MyS3cr37P450r.*-"
ulimits: ulimits:
- "memlock:-1:-1" - "memlock:-1:-1"
- "nofile:655360:655360" - "nofile:655360:655360"
@@ -168,7 +169,7 @@
- name: Deploy Wazuh Indexer - name: Deploy Wazuh Indexer
containers.podman.podman_container: containers.podman.podman_container:
image: wazuh/wazuh-indexer:5.0.0 image: wazuh/wazuh-indexer:{{ wazah_version }}
name: wazuh.indexer name: wazuh.indexer
env: env:
OENSEARCH_JAVA_OPTS: "-Xms1g -Xmx1g" OENSEARCH_JAVA_OPTS: "-Xms1g -Xmx1g"
@@ -192,16 +193,16 @@
- name: Deploy Wazuh Dashboard - name: Deploy Wazuh Dashboard
containers.podman.podman_container: containers.podman.podman_container:
image: wazuh/wazuh-dashboard:5.0.0 image: wazuh/wazuh-dashboard:{{ wazah_version }}
name: wazuh.dashboard name: wazuh.dashboard
env: env:
INDEXER_USERNAME: admin INDEXER_USERNAME: "admin"
INDEXER_PASSWORD: SecretPassword INDEXER_PASSWORD: "SecretPassword"
WAZUH_API_URL: https://wazuh.manager WAZUH_API_URL: "https://wazuh.manager"
DASHBOARD_USERNAME: kibanaserver DASHBOARD_USERNAME: "kibanaserver"
DASHBOARD_PASSWORD: kibanaserver DASHBOARD_PASSWORD: "kibanaserver"
API_USERNAME: wazuh-wui API_USERNAME: "wazuh-wui"
API_PASSWORD: "MyS3cr37P450r.*-"" API_PASSWORD: "MyS3cr37P450r.*-"
ulimits: ulimits:
- "memlock:-1:-1" - "memlock:-1:-1"
- "nofile:655360:655360" - "nofile:655360:655360"

7
vars.yml
View File

@@ -11,7 +11,7 @@ directories:
- /opt/apps/prowler/postgres/data - /opt/apps/prowler/postgres/data
- /opt/apps/wazuh - /opt/apps/wazuh
# - /opt/apps/n8n/files # - /opt/apps/n8n/files
-
## Jellyfin directories for media ## Jellyfin directories for media
directories_jellyfin: directories_jellyfin:
@@ -23,7 +23,12 @@ images:
- lscr.io/linuxserver/jellyfin:latest - lscr.io/linuxserver/jellyfin:latest
# - docker.n8n.io/n8nio/n8n # - docker.n8n.io/n8nio/n8n
- docker.gitea.com/gitea:nightly - docker.gitea.com/gitea:nightly
- docker.io/wazuh/wazuh-certs-generator:0.0.3
- docker.io/wazuh/wazuh-dashboard:{{ wazah_version }}
- docker.io/wazuh/wazuh-indexer:{{ wazah_version }}
- docker.io/wazuh/wazuh-manager:{{ wazah_version }}
wazah_version: 4.14.1
sudo_password: sdfwwww sudo_password: sdfwwww
POSTGRES_ADMIN_USER: theuseriwant POSTGRES_ADMIN_USER: theuseriwant