Wazuh Server

Learn about configurations >

• agent-password | secret

  The Juju secret ID corresponding to the password used by the agents to connect to Wazuh.

• custom-config-repository | string

  A repository URL where configuration files are stored. The URL must be provided in the format git+ssh://username@repository@ref, where 'username' is mandatory and 'ref' is optional and may be either a branch name or tag name. Tags are encouraged for reproducibility and for efficiency. If a branch is provided, the charm will re-pull the configuration on most charm events, as it cannot guarantee that it has the latest commits otherwise. The following paths, if they exist in the repository, will be synced over the corresponding paths in the charm filesystem: var/ossec/, etc/rsyslog.conf, etc/rsyslog.d/, usr/share/filebeat/, etc/filebeat/

• custom-config-ssh-key | secret

  The Juju secret ID corresponding to the private key for SSH authentication to the git repository. The secret should contain a single key, "value", which maps to the actual SSH key. To create the secret, run the following command: juju add-secret my-custom-config-ssh-key value=<ssh-key> && juju grant-secret my-custom-config-ssh-key wazuh-server, and use the secret ID output to configure this option.

• enable-vulnerability-detection | boolean

  Default: True

  If true, the charm will ensure that Wazuh's vulnerability detection module is disabled. This overrides any configuration in the custom-config-repository. The primary purpose is to prevent the automatic download of Wazuh's vulnerability database upon initial installation if that feature is not going to be utilized. If not set, defaults to 'true'.

• logs-ca-cert | string

  The certification authority certificate used to sign client certificates that the server should accept logs from.