Skip to content

Commit dc3ef99

Browse files
committed
(doc)wazuh: Update encryption pattern for private keys
Update the ansible-vault encrypt command pattern to include both *.key and *-key.pem files. This ensures all private key files (root-ca.key, os-wazuh-key.pem, and admin-key.pem) are properly encrypted when deploying Wazuh.
1 parent e24c4ed commit dc3ef99

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

doc/source/configuration/wazuh.rst

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -349,11 +349,11 @@ If you are using the wazuh generated certificates,
349349
this will result in the creation of some certificates and keys (in case of custom certs adjust path to it).
350350
Encrypt the keys (and remember to commit to git):
351351

352-
``ansible-vault encrypt --vault-password-file ~/vault.pass $KAYOBE_CONFIG_PATH/environments/<environment>/wazuh/wazuh-certificates/*.key``
352+
``ansible-vault encrypt --vault-password-file ~/vault.pass $KAYOBE_CONFIG_PATH/environments/<environment>/wazuh/wazuh-certificates/*.key $KAYOBE_CONFIG_PATH/environments/<environment>/wazuh/wazuh-certificates/*-key.pem``
353353

354354
If using the kayobe environments feature, otherwise:
355355

356-
``ansible-vault encrypt --vault-password-file ~/vault.pass $KAYOBE_CONFIG_PATH/ansible/wazuh/certificates/certs/*.key``
356+
``ansible-vault encrypt --vault-password-file ~/vault.pass $KAYOBE_CONFIG_PATH/ansible/wazuh/certificates/certs/*.key $KAYOBE_CONFIG_PATH/ansible/wazuh/certificates/certs/*-key.pem``
357357

358358
.. _wazuh-verification:
359359

0 commit comments

Comments
 (0)