updated admin password
This commit is contained in:
@@ -58,7 +58,6 @@
|
||||
value: '1'
|
||||
sysctl_set: true
|
||||
state: present
|
||||
reload: true
|
||||
|
||||
- name: Enable source valid mark on host
|
||||
ansible.posix.sysctl:
|
||||
@@ -236,6 +235,25 @@
|
||||
mode: preserve
|
||||
force: true
|
||||
|
||||
- name: Check for stale Wazuh certificate residue
|
||||
ansible.builtin.stat:
|
||||
path: /opt/apps/wazuh/config/wazuh_indexer_ssl_certs/root-ca.pem
|
||||
register: wazuh_cert_residue
|
||||
|
||||
- name: Remove stale Wazuh certificate directories
|
||||
ansible.builtin.file:
|
||||
path: /opt/apps/wazuh/config/wazuh_indexer_ssl_certs
|
||||
state: absent
|
||||
when: wazuh_cert_residue.stat.exists and wazuh_cert_residue.stat.isdir
|
||||
|
||||
- name: Recreate Wazuh certificates directory
|
||||
ansible.builtin.file:
|
||||
path: /opt/apps/wazuh/config/wazuh_indexer_ssl_certs
|
||||
state: directory
|
||||
mode: '0755'
|
||||
owner: root
|
||||
group: root
|
||||
|
||||
- name: Generate Wazuh certificates
|
||||
ansible.builtin.command: podman run --rm -e CERT_TOOL_VERSION=4.14 -v /opt/apps/wazuh/config/certs.yml:/config/certs.yml:z -v /opt/apps/wazuh/config/wazuh_indexer_ssl_certs/:/certificates:z docker.io/wazuh/wazuh-certs-generator:0.0.3
|
||||
args:
|
||||
@@ -292,7 +310,7 @@
|
||||
env:
|
||||
INDEXER_URL: "https://wazuh.indexer:9200"
|
||||
INDEXER_USERNAME: "admin"
|
||||
INDEXER_PASSWORD: "SecretPassword"
|
||||
INDEXER_PASSWORD: "*WD*oW9m6iKf4hDovy7BbMmhLxC9D?Tv"
|
||||
FILEBEAT_SSL_VERIFICATION_MODE: "full"
|
||||
SSL_CERTIFICATE_AUTHORITIES: "/etc/ssl/root-ca.pem"
|
||||
SSL_CERTIFICATE: "/etc/ssl/filebeat.pem"
|
||||
@@ -313,6 +331,8 @@
|
||||
- "wazuh_logs:/var/ossec/logs"
|
||||
- "wazuh_queue:/var/ossec/queue"
|
||||
- "wazuh_var_multigroups:/var/ossec/var/multigroups"
|
||||
- "wazuh_integrations:/var/ossec/integrations"
|
||||
- "wazuh_agentless:/var/ossec/agentless"
|
||||
- "wazuh_active_response:/var/ossec/active-response/bin"
|
||||
- "wazuh_wodles:/var/ossec/wodles"
|
||||
- "filebeat_etc:/etc/filebeat"
|
||||
|
||||
Reference in New Issue
Block a user