Adding wazuh install
This commit is contained in:
parent
138a948025
commit
53668ed9b9
45
wazuh_install.yml
Normal file
45
wazuh_install.yml
Normal file
@ -0,0 +1,45 @@
|
||||
---
|
||||
- hosts: target_servers
|
||||
become: yes
|
||||
vars:
|
||||
wazuh_version: 4.9.2
|
||||
wazuh_manager_ip: '10.75.50.5'
|
||||
wazuh_agent_group: 'Infrastructure'
|
||||
wazuh_deb_filename: "wazuh-agent_{{ wazuh_version }}-1_amd64.deb"
|
||||
wazuh_deb_url: "https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/{{ wazuh_deb_filename }}"
|
||||
|
||||
tasks:
|
||||
- name: Download Wazuh Agent .deb package
|
||||
ansible.builtin.get_url:
|
||||
url: "{{ wazuh_deb_url }}"
|
||||
dest: "/tmp/{{ wazuh_deb_filename }}"
|
||||
mode: '0755'
|
||||
|
||||
- name: Install Wazuh Agent
|
||||
ansible.builtin.apt:
|
||||
deb: "/tmp/{{ wazuh_deb_filename }}"
|
||||
state: present
|
||||
|
||||
- name: Configure Wazuh Agent
|
||||
ansible.builtin.lineinfile:
|
||||
path: /etc/ossec-agent/ossec.conf
|
||||
regexp: '^(\s*)<manager>.*</manager>'
|
||||
line: " <manager>{{ wazuh_manager_ip }}</manager>"
|
||||
backrefs: yes
|
||||
|
||||
- name: Set Wazuh Agent Group
|
||||
ansible.builtin.command:
|
||||
cmd: "/var/ossec/bin/agent-groups -a {{ wazuh_agent_group }} -g default"
|
||||
changed_when: false
|
||||
|
||||
- name: Restart Wazuh Agent
|
||||
ansible.builtin.service:
|
||||
name: wazuh-agent
|
||||
state: restarted
|
||||
enabled: yes
|
||||
|
||||
post_tasks:
|
||||
- name: Clean up downloaded .deb file
|
||||
ansible.builtin.file:
|
||||
path: "/tmp/{{ wazuh_deb_filename }}"
|
||||
state: absent
|
||||
Loading…
Reference in New Issue
Block a user