45 lines
1.3 KiB
YAML
45 lines
1.3 KiB
YAML
---
|
|
- hosts: target_servers
|
|
become: yes
|
|
vars:
|
|
wazuh_version: 4.9.2
|
|
wazuh_manager_ip: '10.75.50.5'
|
|
wazuh_agent_group: 'Infrastructure'
|
|
wazuh_deb_filename: "wazuh-agent_{{ wazuh_version }}-1_amd64.deb"
|
|
wazuh_deb_url: "https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/{{ wazuh_deb_filename }}"
|
|
|
|
tasks:
|
|
- name: Download Wazuh Agent .deb package
|
|
ansible.builtin.get_url:
|
|
url: "{{ wazuh_deb_url }}"
|
|
dest: "/tmp/{{ wazuh_deb_filename }}"
|
|
mode: '0755'
|
|
|
|
- name: Install Wazuh Agent
|
|
ansible.builtin.apt:
|
|
deb: "/tmp/{{ wazuh_deb_filename }}"
|
|
state: present
|
|
|
|
- name: Configure Wazuh Agent
|
|
ansible.builtin.lineinfile:
|
|
path: /etc/ossec-agent/ossec.conf
|
|
regexp: '^(\s*)<manager>.*</manager>'
|
|
line: " <manager>{{ wazuh_manager_ip }}</manager>"
|
|
backrefs: yes
|
|
|
|
- name: Set Wazuh Agent Group
|
|
ansible.builtin.command:
|
|
cmd: "/var/ossec/bin/agent-groups -a {{ wazuh_agent_group }} -g default"
|
|
changed_when: false
|
|
|
|
- name: Restart Wazuh Agent
|
|
ansible.builtin.service:
|
|
name: wazuh-agent
|
|
state: restarted
|
|
enabled: yes
|
|
|
|
post_tasks:
|
|
- name: Clean up downloaded .deb file
|
|
ansible.builtin.file:
|
|
path: "/tmp/{{ wazuh_deb_filename }}"
|
|
state: absent |