---
manager_api_configuration:
  type: volume
  name: wazuh_manager_api_configuration
  mounts:
    - service: manager
      target: /var/ossec/api/configuration
manager_etc:
  type: volume
  name: wazuh_manager_etc
  mounts:
    - service: manager
      target: /var/ossec/etc
manager_logs:
  type: volume
  name: wazuh_manager_logs
  mounts:
    - service: manager
      target: /var/ossec/logs
manager_queue:
  type: volume
  name: wazuh_manager_queue
  mounts:
    - service: manager
      target: /var/ossec/queue
manager_vd:
  type: volume
  name: wazuh_manager_vd
  backup: false
  mounts:
    - service: manager
      target: /var/ossec/queue/vd
manager_var_multigroups:
  type: volume
  name: wazuh_manager_var_multigroups
  backup: false
  mounts:
    - service: manager
      target: /var/ossec/var/multigroups
manager_integrations:
  type: volume
  name: wazuh_manager_integrations
  mounts:
    - service: manager
      target: /var/ossec/integrations
manager_active_response:
  type: volume
  name: wazuh_manager_active_response
  mounts:
    - service: manager
      target: /var/ossec/active-response/bin
manager_agentless:
  type: volume
  name: wazuh_manager_agentless
  mounts:
    - service: manager
      target: /var/ossec/agentless
manager_wodles:
  type: volume
  name: wazuh_manager_wodles
  mounts:
    - service: manager
      target: /var/ossec/wodles
manager_filebeat_etc:
  type: volume
  name: wazuh_manager_filebeat_etc
  mounts:
    - service: manager
      target: /etc/filebeat
manager_filebeat_var:
  type: volume
  name: wazuh_manager_filebeat_var
  mounts:
    - service: manager
      target: /var/lib/filebeat
indexer_data:
  type: volume
  name: wazuh_indexer_data
  mounts:
    - service: indexer
      target: /var/lib/wazuh-indexer
dashboard_config:
  type: volume
  name: wazuh_dashboard_config
  mounts:
    - service: dashboard
      target: /usr/share/wazuh-dashboard/data/wazuh/config
dashboard_custom:
  type: volume
  name: wazuh_dashboard_custom
  mounts:
    - service: dashboard
      target: /usr/share/wazuh-dashboard/plugins/wazuh/public/assets/custom

certs_generator_config:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: certs_generator
      target: /config/certs.yml
certs_generator_entrypoint:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs-entrypoint.sh' ] | path_join }}"
  mode: "0555"
  mounts:
    - service: certs_generator
      target: &entrypoint_target /infinito-entrypoint.sh
indexer_entrypoint:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'indexer-entrypoint.sh' ] | path_join }}"
  mode: "0555"
  mounts:
    - service: indexer
      target: *entrypoint_target
wazuh_manager_conf:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'wazuh_manager.conf' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: manager
      target: /wazuh-config-mount/etc/ossec.conf
wazuh_indexer_yml:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'wazuh.indexer.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/opensearch.yml
internal_users_yml:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'internal_users.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/opensearch-security/internal_users.yml
config_yml:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'config.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/opensearch-security/config.yml
indexer_roles_yml:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'roles.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/opensearch-security/roles.yml
roles_mapping_yml:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'roles_mapping.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/opensearch-security/roles_mapping.yml
opensearch_dashboards_yml:
  type: secret
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'opensearch_dashboards.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: dashboard
      target: /usr/share/wazuh-dashboard/config/opensearch_dashboards.yml
dashboard_wazuh_yml:
  type: config
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'wazuh.yml' ] | path_join }}"
  mode: "0444"
  mounts:
    - service: dashboard
      target: /usr/share/wazuh-dashboard/data/wazuh/config/wazuh.yml

wazuh_certs_dir:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs' ] | path_join }}"
  swarm_safe: false
  mounts:
    - service: certs_generator
      target: /certificates/
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
root_ca_manager_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'root-ca-manager.pem' ] | path_join }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: manager
      target: /etc/ssl/root-ca.pem
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
manager_filebeat_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.manager.name') ~ '.pem' ] | path_join
    }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: manager
      target: /etc/ssl/filebeat.pem
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
manager_filebeat_key_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.manager.name') ~ '-key.pem' ] |
    path_join }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: manager
      target: /etc/ssl/filebeat.key
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
root_ca_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'root-ca.pem' ] | path_join }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/certs/root-ca.pem
    - service: dashboard
      target: /usr/share/wazuh-dashboard/certs/root-ca.pem
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
indexer_key_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.indexer.name') ~ '-key.pem' ] |
    path_join }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
indexer_cert_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', lookup('config', 'web-app-wazuh', 'services.indexer.name') ~ '.pem' ] | path_join
    }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
admin_cert_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'admin.pem' ] | path_join }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/certs/admin.pem
# nocheck: meta-volume-file-bind-should-be-config  Reason: generated at deploy time by certs_generator in this same stack; placement: manager guarantees the bind source exists on the scheduled node.
admin_key_pem:
  type: bind
  source: "{{ [ lookup('container', 'web-app-wazuh', 'directories.instance'), 'certs', 'admin-key.pem' ] | path_join }}"
  read_only: true
  swarm_safe: false
  mounts:
    - service: indexer
      target: /usr/share/wazuh-indexer/config/certs/admin-key.pem