Enhance docker docs structure

2026-02-11 08:21:37 -05:00
parent 8f50eee1d0
commit f7efef25d7
11 changed files with 290 additions and 5 deletions
@@ -0,0 +1,45 @@
+# Change passwords
+
+This section describes how to rotate the credentials used by the provided Docker Compose deployments.
+
+## Scope
+
+The Compose files include the following password-controlled integrations:
+
+- **Wazuh Indexer access (Manager and Dashboard clients)**: `INDEXER_USERNAME`, `INDEXER_PASSWORD`
+- **Wazuh Dashboard login**: `DASHBOARD_USERNAME`, `DASHBOARD_PASSWORD`
+- **Wazuh API access (Dashboard client)**: `API_USERNAME`, `API_PASSWORD`
+
+For variable descriptions, see [Environment variables](environment-variables.md).
+
+## Rotate credentials
+
+1. Navigate to your deployment directory:
+
+    - `single-node/` (single-node stack)
+    - `multi-node/` (multi-node stack)
+
+2. Edit the deployment `docker-compose.yml` and update the required values under `environment`:
+
+    - Single-node: update `wazuh.manager` and `wazuh.dashboard`.
+    - Multi-node: update `wazuh.master`, `wazuh.worker`, and `wazuh.dashboard`.
+
+    Ensure `INDEXER_USERNAME` and `INDEXER_PASSWORD` are consistent anywhere they are defined.
+
+3. Recreate the containers to apply the new values:
+
+    ```bash
+    docker compose down
+    docker compose up -d
+    ```
+
+4. Validate access:
+
+    - Log in to the Dashboard with the updated credentials.
+    - Confirm the Dashboard can query data (indirectly validating the Indexer and API credentials).
+
+## Notes
+
+- The Manager applies `API_USERNAME` / `API_PASSWORD` at startup by creating or updating the API user.
+- The Dashboard regenerates its OpenSearch Dashboards keystore on startup; changes take effect after the container is recreated.
+- Rotating Indexer credentials requires updating both the Indexer user configuration and the Compose client variables (`INDEXER_*`).