updated admin password

This commit is contained in:
2026-09-15 17:20:29 -06:00
parent 6202985353
commit 9e2e03e6c1
5 changed files with 78 additions and 34 deletions

View File

@@ -58,7 +58,6 @@
value: '1'
sysctl_set: true
state: present
reload: true
- name: Enable source valid mark on host
ansible.posix.sysctl:
@@ -236,6 +235,25 @@
mode: preserve
force: true
- name: Check for stale Wazuh certificate residue
ansible.builtin.stat:
path: /opt/apps/wazuh/config/wazuh_indexer_ssl_certs/root-ca.pem
register: wazuh_cert_residue
- name: Remove stale Wazuh certificate directories
ansible.builtin.file:
path: /opt/apps/wazuh/config/wazuh_indexer_ssl_certs
state: absent
when: wazuh_cert_residue.stat.exists and wazuh_cert_residue.stat.isdir
- name: Recreate Wazuh certificates directory
ansible.builtin.file:
path: /opt/apps/wazuh/config/wazuh_indexer_ssl_certs
state: directory
mode: '0755'
owner: root
group: root
- name: Generate Wazuh certificates
ansible.builtin.command: podman run --rm -e CERT_TOOL_VERSION=4.14 -v /opt/apps/wazuh/config/certs.yml:/config/certs.yml:z -v /opt/apps/wazuh/config/wazuh_indexer_ssl_certs/:/certificates:z docker.io/wazuh/wazuh-certs-generator:0.0.3
args:
@@ -292,7 +310,7 @@
env:
INDEXER_URL: "https://wazuh.indexer:9200"
INDEXER_USERNAME: "admin"
INDEXER_PASSWORD: "SecretPassword"
INDEXER_PASSWORD: "*WD*oW9m6iKf4hDovy7BbMmhLxC9D?Tv"
FILEBEAT_SSL_VERIFICATION_MODE: "full"
SSL_CERTIFICATE_AUTHORITIES: "/etc/ssl/root-ca.pem"
SSL_CERTIFICATE: "/etc/ssl/filebeat.pem"
@@ -313,6 +331,8 @@
- "wazuh_logs:/var/ossec/logs"
- "wazuh_queue:/var/ossec/queue"
- "wazuh_var_multigroups:/var/ossec/var/multigroups"
- "wazuh_integrations:/var/ossec/integrations"
- "wazuh_agentless:/var/ossec/agentless"
- "wazuh_active_response:/var/ossec/active-response/bin"
- "wazuh_wodles:/var/ossec/wodles"
- "filebeat_etc:/etc/filebeat"