diff --git a/roles/debian/wazuh/defaults/main.yml b/roles/debian/wazuh/defaults/main.yml index e58c2d045..931593f64 100644 --- a/roles/debian/wazuh/defaults/main.yml +++ b/roles/debian/wazuh/defaults/main.yml @@ -86,6 +86,8 @@ wazuh: wazuh_manager_log_level: 3 wazuh_manager_email_level: 12 wazuh_manager_config: + decoder_dir: "ruleset/decoders" + rule_dir: "ruleset/rules" active_responses: - command: "firewall-drop" location: "all" @@ -97,6 +99,8 @@ wazuh: rules_id: "100205" repeated_offenders: "30,60,120" timeout: 3600 + authd: + enabled: false wazuh_manager_globals: - '1.1.1.1' agent_groups: [] # maps to `groups` string in agent config above diff --git a/roles/debian/wazuh/tasks/main.yml b/roles/debian/wazuh/tasks/main.yml index eac0a4a45..0d950c9cb 100644 --- a/roles/debian/wazuh/tasks/main.yml +++ b/roles/debian/wazuh/tasks/main.yml @@ -60,6 +60,7 @@ wazuh_manager_globals: "{{ wazuh.manager.wazuh_manager_globals }}" wazuh_manager_config: active_responses: "{{ wazuh.manager.wazuh_manager_config.active_responses }}" + authd: "{{ wazuh.manager.wazuh_manager_config.authd }}" wazuh_manager_email_level: "{{ wazuh.manager.wazuh_manager_email_level }}" wazuh_manager_extra_emails: "{{ wazuh.manager.wazuh_manager_extra_emails }}" wazuh_manager_reports: "{{ wazuh.manager.wazuh_manager_reports }}"