Adding wazuh install

This commit is contained in:
Kris 2025-01-23 11:06:54 +00:00
parent 138a948025
commit 53668ed9b9

45
wazuh_install.yml Normal file
View File

@ -0,0 +1,45 @@
---
- hosts: target_servers
become: yes
vars:
wazuh_version: 4.9.2
wazuh_manager_ip: '10.75.50.5'
wazuh_agent_group: 'Infrastructure'
wazuh_deb_filename: "wazuh-agent_{{ wazuh_version }}-1_amd64.deb"
wazuh_deb_url: "https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/{{ wazuh_deb_filename }}"
tasks:
- name: Download Wazuh Agent .deb package
ansible.builtin.get_url:
url: "{{ wazuh_deb_url }}"
dest: "/tmp/{{ wazuh_deb_filename }}"
mode: '0755'
- name: Install Wazuh Agent
ansible.builtin.apt:
deb: "/tmp/{{ wazuh_deb_filename }}"
state: present
- name: Configure Wazuh Agent
ansible.builtin.lineinfile:
path: /etc/ossec-agent/ossec.conf
regexp: '^(\s*)<manager>.*</manager>'
line: " <manager>{{ wazuh_manager_ip }}</manager>"
backrefs: yes
- name: Set Wazuh Agent Group
ansible.builtin.command:
cmd: "/var/ossec/bin/agent-groups -a {{ wazuh_agent_group }} -g default"
changed_when: false
- name: Restart Wazuh Agent
ansible.builtin.service:
name: wazuh-agent
state: restarted
enabled: yes
post_tasks:
- name: Clean up downloaded .deb file
ansible.builtin.file:
path: "/tmp/{{ wazuh_deb_filename }}"
state: absent