From 4b93b2360690bd2ab45468daa0e74ed80b2ac0a1 Mon Sep 17 00:00:00 2001
From: Gui-Gos <97973228+Gui-Gos@users.noreply.github.com>
Date: Thu, 29 Jan 2026 10:20:29 +0100
Subject: [PATCH] fix(wazuh): persist agent groups between restarts

Add manager-shared volume to mount /var/ossec/etc/shared for Wazuh
manager, ensuring agent groups are persisted across container restarts.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 apps/wazuh-runtipi/docker-compose.json | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/apps/wazuh-runtipi/docker-compose.json b/apps/wazuh-runtipi/docker-compose.json
index 98cf4e1..5da3f56 100644
--- a/apps/wazuh-runtipi/docker-compose.json
+++ b/apps/wazuh-runtipi/docker-compose.json
@@ -40,6 +40,10 @@
           "hostPath": "${APP_DATA_DIR}/data/manager-queue",
           "containerPath": "/manager-queue"
         },
+        {
+          "hostPath": "${APP_DATA_DIR}/data/manager-shared",
+          "containerPath": "/manager-shared"
+        },
         {
           "hostPath": "${APP_DATA_DIR}/data/dashboard-config",
           "containerPath": "/dashboard-config"
@@ -329,6 +333,10 @@
           "hostPath": "${APP_DATA_DIR}/data/config/wazuh_ssl_certs",
           "containerPath": "/var/ossec/etc/certs"
         },
+        {
+          "hostPath": "${APP_DATA_DIR}/data/manager-shared",
+          "containerPath": "/var/ossec/etc/shared"
+        },
         {
           "hostPath": "${APP_DATA_DIR}/data/scripts",
           "containerPath": "/scripts"