---
credentials:
indexer_admin_password:
description: "Password for the wazuh-indexer's internal 'admin' service account (OpenSearch security plugin). Consumed by manager/dashboard as INDEXER_PASSWORD,
by Ansible health checks and securityadmin.sh, and hashed into internal_users.yml."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 40
dashboard_service_password:
description: "Password for the wazuh-indexer's internal 'kibanaserver' service account. Consumed by wazuh.dashboard as DASHBOARD_PASSWORD and hashed into internal_users.yml."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 40
wazuh_wui_password:
description: "Password for the 'wazuh-wui' Wazuh API account. Consumed by wazuh.manager (API_PASSWORD, creates the account) and wazuh.dashboard (WAZUH API connection
in wazuh.yml)."
algorithm: alphanumeric
validation: "^[A-Za-z0-9]{32,}$"
length: 40
manager_cluster_key:
description: "wazuh-manager cluster key (ossec.conf <cluster><key>). Clustering is disabled in this single-node deployment, but the key MUST NOT ship as the well-known
upstream demo value in case clustering is enabled later."
algorithm: random_hex_16
validation: "^[a-f0-9]{32}$"
