3 Commits

Author	SHA1	Message	Date
boxswapper	695b7b017e	updatd with wazah deploymnt	2026-09-16 09:39:56 -06:00
boxswapper	3e7939b682	feat: install wazuh agent in packages role; remove unused deployment files ... Wazuh agent: - packages role now copies the local wazuh-agent RPM to the host, installs it via dnf, points /var/ossec/etc/ossec.conf at wazuh.boxswapper.io, and enables/starts the wazuh-agent service - new vars: wazuh_agent_rpm, wazuh_server_address (manager version 4.14.1 matches the agent RPM) Cleanup of files not used by the ansible deployment: - removed wazuh-docker/docker-compose.yml, generate-indexer-certs.yml, README.md (role generates certs via podman run, config/ dir is the only part referenced) - removed committed .omo/ session data (already gitignored) Done by Sisyphus.	2026-09-16 09:33:42 -06:00
boxswapper	170146efb1	refactor: split monolithic playbook into 9 focused ansible roles ... Refactored the single ansible-playbook.yml into granular roles under roles/: - packages: dnf update + package installs - directories: /opt/apps/* directory creation - sysctl: ip_forward, src_valid_mark, vm.max_map_count tuning - network: npm_internal podman network - wireguard: kernel module, wg-easy container, nftables hook patching - npm: Nginx Proxy Manager container - gitea: Gitea container - jellyfin: Jellyfin container - wazuh: cert generation + indexer/manager/dashboard containers Top-level playbook is now a role dispatcher with image pre-pull kept upfront. n8n deployment kept as commented-out guidance with an enable checklist. All variables remain in top-level vars.yml. Done by Sisyphus.	2026-09-16 09:24:32 -06:00