chore: fix
This commit is contained in:
@@ -7,12 +7,12 @@ cluster.name: "wazuh-cluster"
|
||||
path.data: /var/lib/wazuh-indexer
|
||||
path.logs: /var/log/wazuh-indexer
|
||||
|
||||
plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
|
||||
plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
|
||||
plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
|
||||
plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.pem
|
||||
plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/certs/wazuh.indexer.key
|
||||
plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/certs/root-ca.pem
|
||||
plugins.security.ssl.http.pemcert_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
|
||||
plugins.security.ssl.http.pemkey_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
|
||||
plugins.security.ssl.http.pemtrustedcas_filepath: /usr/share/wazuh-indexer/config/certs/root-ca.pem
|
||||
plugins.security.ssl.transport.pemcert_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.pem
|
||||
plugins.security.ssl.transport.pemkey_filepath: /usr/share/wazuh-indexer/config/certs/wazuh.indexer.key
|
||||
plugins.security.ssl.transport.pemtrustedcas_filepath: /usr/share/wazuh-indexer/config/certs/root-ca.pem
|
||||
plugins.security.ssl.http.enabled: true
|
||||
plugins.security.ssl.transport.enforce_hostname_verification: false
|
||||
plugins.security.ssl.transport.resolve_hostname: false
|
||||
@@ -42,3 +42,7 @@ plugins.security.system_indices.indices:
|
||||
- ".opensearch-observability"
|
||||
- ".opendistro-asynchronous-search-response*"
|
||||
- ".replication-metadata-store"
|
||||
|
||||
discovery.type: single-node
|
||||
plugins.security.allow_default_init_securityindex: true
|
||||
cluster.routing.allocation.disk.threshold_enabled: false
|
||||
|
||||
@@ -8,27 +8,17 @@ mkdir -p "$CERTS_DIR"
|
||||
cd /tmp
|
||||
|
||||
echo "[*] Téléchargement de l'outil de génération de certificats Wazuh..."
|
||||
curl -sO https://packages.wazuh.com/4.9/wazuh-certs-tool.sh
|
||||
curl -sO https://packages.wazuh.com/4.14/wazuh-certs-tool.sh
|
||||
cp "$SCRIPT_DIR/config/certs.yml" config.yml
|
||||
|
||||
echo "[*] Génération des certificats..."
|
||||
bash wazuh-certs-tool.sh -A
|
||||
|
||||
echo "[*] Extraction des certificats..."
|
||||
tar -xf wazuh-install-files.tar
|
||||
|
||||
cp wazuh-install-files/wazuh.indexer.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/wazuh.indexer-key.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/wazuh.manager.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/wazuh.manager-key.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/wazuh.dashboard.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/wazuh.dashboard-key.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/root-ca.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/root-ca.pem "$CERTS_DIR/root-ca-manager.pem"
|
||||
cp wazuh-install-files/admin.pem "$CERTS_DIR/"
|
||||
cp wazuh-install-files/admin-key.pem "$CERTS_DIR/"
|
||||
echo "[*] Copie des certificats..."
|
||||
cp /tmp/wazuh-certificates/*.pem "$CERTS_DIR/"
|
||||
cp /tmp/wazuh-certificates/root-ca.pem "$CERTS_DIR/root-ca-manager.pem"
|
||||
|
||||
chmod 640 "$CERTS_DIR"/*.pem
|
||||
rm -rf /tmp/wazuh-install-files /tmp/wazuh-install-files.tar /tmp/wazuh-certs-tool.sh /tmp/config.yml
|
||||
rm -rf /tmp/wazuh-certificates /tmp/wazuh-install-files /tmp/wazuh-install-files.tar /tmp/wazuh-certs-tool.sh /tmp/config.yml
|
||||
|
||||
echo "[OK] Certificats générés dans $CERTS_DIR"
|
||||
|
||||
Reference in New Issue
Block a user