mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5.5
163edebf01
Wazuh carries no network-specific code any more: the onion front-proxy include, WAZUH_DASHBOARD_ONION_DOMAIN, the forked templates/proxy.conf.j2 vhost and the tor exclusive/primary overrides are gone. The role follows the Tor provider default like every other role with a Tor bond; serving one role on several networks returns generically in the multi-network change. Without the forked vhost nothing forwards X-Forwarded-Host, so the dashboard OIDC redirect base is the static canonical url.base instead of trust_dynamic_headers. Also: the dashboard port is read from one variable, the Playwright specs share wazuhLoginViaOidc and withBiberInGroup and assert worker-src blob:, PR-added explanatory comments are removed, and the root README lists the role. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
25 lines
1.3 KiB
YAML
25 lines
1.3 KiB
YAML
---
|
|
credentials:
|
|
indexer_admin_password:
|
|
description: "Password for the wazuh-indexer's internal 'admin' service account (OpenSearch security plugin). Consumed by manager/dashboard as INDEXER_PASSWORD,
|
|
by Ansible health checks and securityadmin.sh, and hashed into internal_users.yml."
|
|
algorithm: alphanumeric
|
|
validation: "^[A-Za-z0-9]{32,}$"
|
|
length: 40
|
|
dashboard_service_password:
|
|
description: "Password for the wazuh-indexer's internal 'kibanaserver' service account. Consumed by wazuh.dashboard as DASHBOARD_PASSWORD and hashed into internal_users.yml."
|
|
algorithm: alphanumeric
|
|
validation: "^[A-Za-z0-9]{32,}$"
|
|
length: 40
|
|
wazuh_wui_password:
|
|
description: "Password for the 'wazuh-wui' Wazuh API account. Consumed by wazuh.manager (API_PASSWORD, creates the account) and wazuh.dashboard (WAZUH API connection
|
|
in wazuh.yml)."
|
|
algorithm: alphanumeric
|
|
validation: "^[A-Za-z0-9]{32,}$"
|
|
length: 40
|
|
manager_cluster_key:
|
|
description: "wazuh-manager cluster key (ossec.conf <cluster><key>). Clustering is disabled in this single-node deployment, but the key MUST NOT ship as the well-known
|
|
upstream demo value in case clustering is enabled later."
|
|
algorithm: random_hex_16
|
|
validation: "^[a-f0-9]{32}$"
|