chore: update

monitoring/security/wazuh/config/wazuh_manager/init.sh

@@ -0,0 +1,33 @@
+#!/bin/bash
+set -e
+
+# ─── Copie de la config custom (montée hors du volume wazuh_etc) ──────────────
+CUSTOM=/wazuh-custom
+
+cp "$CUSTOM/ossec.conf" /var/ossec/etc/ossec.conf
+
+mkdir -p /var/ossec/etc/decoders /var/ossec/etc/rules /var/ossec/etc/lists
+cp "$CUSTOM/decoders/"*.xml /var/ossec/etc/decoders/ 2>/dev/null || true
+cp "$CUSTOM/rules/"*.xml    /var/ossec/etc/rules/    2>/dev/null || true
+cp "$CUSTOM/lists/"*        /var/ossec/etc/lists/    2>/dev/null || true
+
+# ─── Agent config partagée (distribuée aux agents) ───────────────────────────
+if [ -f "$CUSTOM/agent.conf" ]; then
+    mkdir -p /var/ossec/etc/shared/default
+    cp "$CUSTOM/agent.conf" /var/ossec/etc/shared/default/agent.conf
+fi
+
+# ─── Active-response scripts ──────────────────────────────────────────────────
+if [ -d "$CUSTOM/active-response" ]; then
+    for script in "$CUSTOM/active-response/"*.sh; do
+        [ -f "$script" ] || continue
+        dest="/var/ossec/active-response/bin/$(basename "$script")"
+        cp "$script" "$dest"
+        chmod 750 "$dest"
+        chown root:wazuh "$dest" 2>/dev/null || true
+        echo "Active-response déployé: $dest"
+    done
+fi
+
+# ─── Démarrage Wazuh Manager (entrypoint original) ────────────────────────────
+exec /init