# roles/wazuh-server/tasks/main.yml
---
- name: Add Wazuh repository
  get_url:
    url: https://packages.wazuh.com/key/GPG-KEY-WAZUH
    dest: /tmp/GPG-KEY-WAZUH

- name: Add Wazuh GPG key
  apt_key:
    file: /tmp/GPG-KEY-WAZUH
    state: present

- name: Add Wazuh repository
  apt_repository:
    repo: "deb https://packages.wazuh.com/4.x/apt/ stable main"
    state: present

- name: Install Wazuh manager
  apt:
    name:
      - wazuh-manager
      - wazuh-indexer
      - wazuh-dashboard
    state: present
    update_cache: yes

- name: Configure Wazuh manager
  template:
    src: ossec.conf.j2
    dest: /var/ossec/etc/ossec.conf
    backup: yes
  notify: restart wazuh-manager

- name: Start Wazuh services
  service:
    name: "{{ item }}"
    state: started
    enabled: yes
  loop:
    - wazuh-manager
    - wazuh-indexer
    - wazuh-dashboard