@@ -205,8 +205,27 @@ Reinstall the role if required:
205205
206206``kayobe control host bootstrap ``
207207
208+ Secrets
209+ -------
210+
211+ Wazuh requires that secrets or passwords are set for itself and the services with which it communicates.
212+ Wazuh secrets playbook is located in ``$KAYOBE_CONFIG_PATH/ansible/deployment/wazuh-secrets.yml ``.
213+ Running this playbook will generate and put pertinent security items into secrets
214+ vault file which will be placed in ``$KAYOBE_CONFIG_PATH/deployment/wazuh-secrets.yml ``.
215+ If using environments it ends up in ``$KAYOBE_CONFIG_PATH/environments/<env_name>/deployment/wazuh-secrets.yml ``
216+ Remember to encrypt!
217+
218+ Wazuh secrets template is located in ``$KAYOBE_CONFIG_PATH/ansible/templates/wazuh-secrets.yml.j2 ``.
219+ It will be used by wazuh secrets playbook to generate wazuh secrets vault file.
220+
221+
222+ .. code-block :: console
223+
224+ kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/deployment/wazuh-secrets.yml
208225
209- Edit the playbook and variables to your needs:
226+ .. note :: Use ``ansible-vault`` to view the secrets:
227+
228+ ``ansible-vault view --vault-password-file ~/vault.password $KAYOBE_CONFIG_PATH/inventory/group_vars/wazuh-manager/deployment/wazuh-secrets.yml ``
210229
211230Wazuh manager configuration
212231---------------------------
@@ -242,28 +261,6 @@ You may need to modify some of the variables, including:
242261
243262You'll need to run ``wazuh-manager.yml `` playbook again to apply customisation.
244263
245- Secrets
246- -------
247-
248- Wazuh requires that secrets or passwords are set for itself and the services with which it communiticates.
249- Wazuh secrets playbook is located in ``$KAYOBE_CONFIG_PATH/ansible/deployment/wazuh-secrets.yml ``.
250- Running this playbook will generate and put pertinent security items into secrets
251- vault file which will be placed in ``$KAYOBE_CONFIG_PATH/deployment/wazuh-secrets.yml ``.
252- If using environments it ends up in ``$KAYOBE_CONFIG_PATH/environments/<env_name>/deployment/wazuh-secrets.yml ``
253- Remember to encrypt!
254-
255- Wazuh secrets template is located in ``$KAYOBE_CONFIG_PATH/ansible/templates/wazuh-secrets.yml.j2 ``.
256- It will be used by wazuh secrets playbook to generate wazuh secrets vault file.
257-
258-
259- .. code-block :: console
260-
261- kayobe playbook run $KAYOBE_CONFIG_PATH/ansible/deployment/wazuh-secrets.yml
262-
263- .. note :: Use ``ansible-vault`` to view the secrets:
264-
265- ``ansible-vault view --vault-password-file ~/vault.password $KAYOBE_CONFIG_PATH/inventory/group_vars/wazuh-manager/deployment/wazuh-secrets.yml ``
266-
267264Configure Wazuh Dashboard's Server Host
268265---------------------------------------
269266
0 commit comments