---
credentials:
  indexer_admin_password:
    description: "Password for the wazuh-indexer's internal 'admin' service account (OpenSearch security plugin). Consumed by manager/dashboard as INDEXER_PASSWORD,
      by Ansible health checks and securityadmin.sh, and hashed into internal_users.yml."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 40
  dashboard_service_password:
    description: "Password for the wazuh-indexer's internal 'kibanaserver' service account. Consumed by wazuh.dashboard as DASHBOARD_PASSWORD and hashed into internal_users.yml."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 40
  wazuh_wui_password:
    description: "Password for the 'wazuh-wui' Wazuh API account. Consumed by wazuh.manager (API_PASSWORD, creates the account) and wazuh.dashboard (WAZUH API connection
      in wazuh.yml)."
    algorithm: alphanumeric
    validation: "^[A-Za-z0-9]{32,}$"
    length: 40
  manager_cluster_key:
    description: "wazuh-manager cluster key (ossec.conf <cluster><key>). Clustering is disabled in this single-node deployment, but the key MUST NOT ship as the well-known
      upstream demo value in case clustering is enabled later."
    algorithm: random_hex_16
    validation: "^[a-f0-9]{32}$"