initial

desktop.yml

@@ -13,3 +13,5 @@
       tags: autofs_client
     - role: ldap_client
       tags: ldap_client
+    - role: wazuh-agent
+      tags: wazuh-agent

roles/ssh_banner/tasks/main.yml

@@ -33,3 +33,6 @@
       name: ssh.service
       state: restarted
   become: true
+
+
+  

roles/wazuh-agent/tasks/main.yml

@@ -0,0 +1,19 @@
+- block:
+  - name: Get keys
+    ansible.builtin.shell: curl -s https://packages.wazuh.com/key/GPG-KEY-WAZUH | gpg --no-default-keyring --keyring gnupg-ring:/usr/share/keyrings/wazuh.gpg --import && chmod 644 /usr/share/keyrings/wazuh.gpg
+
+  - name: Add repo
+    ansible.builtin.shell: echo "deb [signed-by=/usr/share/keyrings/wazuh.gpg] https://packages.wazuh.com/4.x/apt/ stable main" | tee -a /etc/apt/sources.list.d/wazuh.list
+  - name: Install docker
+    ansible.builtin.apt:
+      update_cache: true
+  - name: Add repo
+    ansible.builtin.shell: WAZUH_MANAGER="192.168.77.101" apt-get install wazuh-agent
+
+  - name: Restart wazuh service
+    ansible.builtin.service:
+      name: wazuh-agent
+      state: restarted
+      enabled: true
+
+  become: true

roles/wazuh-agent/vars/main.yml

@@ -0,0 +1 @@
+ZABBIX_SERVER: "zabbix.home.lan"

servers.yml

@@ -1,13 +1,23 @@
 ---
 - hosts: servers
   roles:
-    - common
+    - name: common
-    - wake_on_lan
+      tags: common
-    - matter-server
+    - name: wake_on_lan
-    - docker
+      tags: wake_on_lan
-    - timeshift
+    - name: matter-server
-    - monitoring
+      tags: matter-server
-    - zabbix-agent
+    - name: docker
-    - autofs_client
+      tags: docker
-    - ldap_client
+    - name: timeshift
-    - ssh_banner
+      tags: timeshift
+    - name: monitoring
+      tags: monitoring
+    - name: zabbix-agent
+      tags: zabbix-agent
+    - name: autofs_client
+      tags: autofs_client
+    - name: ldap_client
+      tags: ldap_client
+    - name: ssh_banner
+      tags: ssh_banner

test.yml

@@ -1,4 +1,4 @@
 ---
 - hosts: datacenter
   roles:
-    - omv_backup
+    - wazuh-agent