Guest User

Untitled

a guest
Mar 14th, 2023
214
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
YAML 23.46 KB | None | 0 0
  1.  
  2. # This is a configuration file for Zabbix server daemon
  3. # To get more information about Zabbix, visit http://www.zabbix.com
  4.  
  5. ############ GENERAL PARAMETERS #################
  6.  
  7. ### Option: ListenPort
  8. #       Listen port for trapper.
  9. #
  10. # Mandatory: no
  11. # Range: 1024-32767
  12. # Default:
  13. # ListenPort=10051
  14.  
  15. ### Option: SourceIP
  16. #       Source IP address for outgoing connections.
  17. #
  18. # Mandatory: no
  19. # Default:
  20. # SourceIP=
  21.  
  22. ### Option: LogType
  23. #       Specifies where log messages are written to:
  24. #               system  - syslog
  25. #               file    - file specified with LogFile parameter
  26. #               console - standard output
  27. #
  28. # Mandatory: no
  29. # Default:
  30. # LogType=file
  31.  
  32. ### Option: LogFile
  33. #       Log file name for LogType 'file' parameter.
  34. #
  35. # Mandatory: yes, if LogType is set to file, otherwise no
  36. # Default:
  37. # LogFile=
  38.  
  39. LogFile=/var/log/zabbix/zabbix_server.log
  40.  
  41. ### Option: LogFileSize
  42. #       Maximum size of log file in MB.
  43. #       0 - disable automatic log rotation.
  44. #
  45. # Mandatory: no
  46. # Range: 0-1024
  47. # Default:
  48. # LogFileSize=1
  49.  
  50. LogFileSize=0
  51.  
  52. ### Option: DebugLevel
  53. #       Specifies debug level:
  54. #       0 - basic information about starting and stopping of Zabbix processes
  55. #       1 - critical information
  56. #       2 - error information
  57. #       3 - warnings
  58. #       4 - for debugging (produces lots of information)
  59. #       5 - extended debugging (produces even more information)
  60. #
  61. # Mandatory: no
  62. # Range: 0-5
  63. # Default:
  64. # DebugLevel=3
  65.  
  66. ### Option: PidFile
  67. #       Name of PID file.
  68. #
  69. # Mandatory: no
  70. # Default:
  71. # PidFile=/tmp/zabbix_server.pid
  72.  
  73. PidFile=/var/run/zabbix/zabbix_server.pid
  74.  
  75. ### Option: SocketDir
  76. #       IPC socket directory.
  77. #               Directory to store IPC sockets used by internal Zabbix services.
  78. #
  79. # Mandatory: no
  80. # Default:
  81. # SocketDir=/tmp
  82.  
  83. SocketDir=/var/run/zabbix
  84.  
  85. ### Option: DBHost
  86. #       Database host name.
  87. #       If set to localhost, socket is used for MySQL.
  88. #       If set to empty string, socket is used for PostgreSQL.
  89. #
  90. # Mandatory: no
  91. # Default:
  92. # DBHost=localhost
  93.  
  94. ### Option: DBName
  95. #       Database name.
  96. #
  97. # Mandatory: yes
  98. # Default:
  99. # DBName=
  100.  
  101. DBName=*****
  102.  
  103. ### Option: DBSchema
  104. #       Schema name. Used for PostgreSQL.
  105. #
  106. # Mandatory: no
  107. # Default:
  108. # DBSchema=
  109.  
  110. ### Option: DBUser
  111. #       Database user.
  112. #
  113. # Mandatory: no
  114. # Default:
  115. # DBUser=
  116.  
  117. DBUser=*****
  118.  
  119. ### Option: DBPassword
  120. #       Database password.
  121. #       Comment this line if no password is used.
  122. #
  123. # Mandatory: no
  124. # Default:
  125. # DBPassword=
  126. DBPassword=*****
  127.  
  128. ### Option: DBSocket
  129. #       Path to MySQL socket.
  130. #
  131. # Mandatory: no
  132. # Default:
  133. # DBSocket=
  134.  
  135. ### Option: DBPort
  136. #       Database port when not using local socket.
  137. #
  138. # Mandatory: no
  139. # Range: 1024-65535
  140. # Default:
  141. # DBPort=
  142.  
  143. ### Option: HistoryStorageURL
  144. #       History storage HTTP[S] URL.
  145. #
  146. # Mandatory: no
  147. # Default:
  148. # HistoryStorageURL=
  149.  
  150. ### Option: HistoryStorageTypes
  151. #       Comma separated list of value types to be sent to the history storage.
  152. #
  153. # Mandatory: no
  154. # Default:
  155. # HistoryStorageTypes=uint,dbl,str,log,text
  156.  
  157. ### Option: HistoryStorageDateIndex
  158. #       Enable preprocessing of history values in history storage to store values in different indices based on date.
  159. #       0 - disable
  160. #       1 - enable
  161. #
  162. # Mandatory: no
  163. # Default:
  164. # HistoryStorageDateIndex=0
  165.  
  166. ### Option: ExportDir
  167. #       Directory for real time export of events, history and trends in newline delimited JSON format.
  168. #       If set, enables real time export.
  169. #
  170. # Mandatory: no
  171. # Default:
  172. # ExportDir=
  173.  
  174. ### Option: ExportFileSize
  175. #       Maximum size per export file in bytes.
  176. #       Only used for rotation if ExportDir is set.
  177. #
  178. # Mandatory: no
  179. # Range: 1M-1G
  180. # Default:
  181. # ExportFileSize=1G
  182.  
  183. ############ ADVANCED PARAMETERS ################
  184.  
  185. ### Option: StartPollers
  186. #       Number of pre-forked instances of pollers.
  187. #
  188. # Mandatory: no
  189. # Range: 0-1000
  190. # Default:
  191. # StartPollers=5
  192.  
  193. ### Option: StartIPMIPollers
  194. #       Number of pre-forked instances of IPMI pollers.
  195. #               The IPMI manager process is automatically started when at least one IPMI poller is started.
  196. #
  197. # Mandatory: no
  198. # Range: 0-1000
  199. # Default:
  200. # StartIPMIPollers=0
  201.  StartIPMIPollers=3
  202.  
  203. ### Option: StartPreprocessors
  204. #       Number of pre-forked instances of preprocessing workers.
  205. #               The preprocessing manager process is automatically started when preprocessor worker is started.
  206. #
  207. # Mandatory: no
  208. # Range: 1-1000
  209. # Default:
  210. # StartPreprocessors=3
  211.  
  212. ### Option: StartPollersUnreachable
  213. #       Number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java).
  214. #       At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers
  215. #       are started.
  216. #
  217. # Mandatory: no
  218. # Range: 0-1000
  219. # Default:
  220. # StartPollersUnreachable=1
  221.  
  222. ### Option: StartTrappers
  223. #       Number of pre-forked instances of trappers.
  224. #       Trappers accept incoming connections from Zabbix sender, active agents and active proxies.
  225. #       At least one trapper process must be running to display server availability and view queue
  226. #       in the frontend.
  227. #
  228. # Mandatory: no
  229. # Range: 0-1000
  230. # Default:
  231. # StartTrappers=5
  232.  
  233. ### Option: StartPingers
  234. #       Number of pre-forked instances of ICMP pingers.
  235. #
  236. # Mandatory: no
  237. # Range: 0-1000
  238. # Default:
  239. StartPingers=3
  240.  
  241. ### Option: StartDiscoverers
  242. #       Number of pre-forked instances of discoverers.
  243. #
  244. # Mandatory: no
  245. # Range: 0-250
  246. # Default:
  247. # StartDiscoverers=1
  248.  
  249. ### Option: StartHTTPPollers
  250. #       Number of pre-forked instances of HTTP pollers.
  251. #
  252. # Mandatory: no
  253. # Range: 0-1000
  254. # Default:
  255. # StartHTTPPollers=1
  256.  
  257. ### Option: StartTimers
  258. #       Number of pre-forked instances of timers.
  259. #       Timers process maintenance periods.
  260. #       Only the first timer process handles host maintenance updates. Problem suppression updates are shared
  261. #       between all timers.
  262. #
  263. # Mandatory: no
  264. # Range: 1-1000
  265. # Default:
  266. # StartTimers=1
  267.  
  268. ### Option: StartEscalators
  269. #       Number of pre-forked instances of escalators.
  270. #
  271. # Mandatory: no
  272. # Range: 0-100
  273. # Default:
  274. # StartEscalators=1
  275.  
  276. ### Option: StartAlerters
  277. #       Number of pre-forked instances of alerters.
  278. #       Alerters send the notifications created by action operations.
  279. #
  280. # Mandatory: no
  281. # Range: 0-100
  282. # Default:
  283. # StartAlerters=3
  284.  
  285. ### Option: JavaGateway
  286. #       IP address (or hostname) of Zabbix Java gateway.
  287. #       Only required if Java pollers are started.
  288. #
  289. # Mandatory: no
  290. # Default:
  291. # JavaGateway=
  292.  
  293. ### Option: JavaGatewayPort
  294. #       Port that Zabbix Java gateway listens on.
  295. #
  296. # Mandatory: no
  297. # Range: 1024-32767
  298. # Default:
  299. # JavaGatewayPort=10052
  300.  
  301. ### Option: StartJavaPollers
  302. #       Number of pre-forked instances of Java pollers.
  303. #
  304. # Mandatory: no
  305. # Range: 0-1000
  306. # Default:
  307. # StartJavaPollers=0
  308.  
  309. ### Option: StartVMwareCollectors
  310. #       Number of pre-forked vmware collector instances.
  311. #
  312. # Mandatory: no
  313. # Range: 0-250
  314. # Default:
  315. # StartVMwareCollectors=0
  316.  
  317. ### Option: VMwareFrequency
  318. #       How often Zabbix will connect to VMware service to obtain a new data.
  319. #
  320. # Mandatory: no
  321. # Range: 10-86400
  322. # Default:
  323. # VMwareFrequency=60
  324.  
  325. ### Option: VMwarePerfFrequency
  326. #       How often Zabbix will connect to VMware service to obtain performance data.
  327. #
  328. # Mandatory: no
  329. # Range: 10-86400
  330. # Default:
  331. # VMwarePerfFrequency=60
  332.  
  333. ### Option: VMwareCacheSize
  334. #       Size of VMware cache, in bytes.
  335. #       Shared memory size for storing VMware data.
  336. #       Only used if VMware collectors are started.
  337. #
  338. # Mandatory: no
  339. # Range: 256K-2G
  340. # Default:
  341. # VMwareCacheSize=8M
  342. VMwareCacheSize=2048M
  343.  
  344. ### Option: VMwareTimeout
  345. #       Specifies how many seconds vmware collector waits for response from VMware service.
  346. #
  347. # Mandatory: no
  348. # Range: 1-300
  349. # Default:
  350. # VMwareTimeout=10
  351.  
  352. ### Option: SNMPTrapperFile
  353. #       Temporary file used for passing data from SNMP trap daemon to the server.
  354. #       Must be the same as in zabbix_trap_receiver.pl or SNMPTT configuration file.
  355. #
  356. # Mandatory: no
  357. # Default:
  358. # SNMPTrapperFile=/tmp/zabbix_traps.tmp
  359.  
  360. SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
  361.  
  362. ### Option: StartSNMPTrapper
  363. #       If 1, SNMP trapper process is started.
  364. #
  365. # Mandatory: no
  366. # Range: 0-1
  367. # Default:
  368. # StartSNMPTrapper=0
  369.  
  370. ### Option: ListenIP
  371. #       List of comma delimited IP addresses that the trapper should listen on.
  372. #       Trapper will listen on all network interfaces if this parameter is missing.
  373. #
  374. # Mandatory: no
  375. # Default:
  376. # ListenIP=0.0.0.0
  377.  
  378. # ListenIP=127.0.0.1
  379.  
  380. ### Option: HousekeepingFrequency
  381. #       How often Zabbix will perform housekeeping procedure (in hours).
  382. #       Housekeeping is removing outdated information from the database.
  383. #       To prevent Housekeeper from being overloaded, no more than 4 times HousekeepingFrequency
  384. #       hours of outdated information are deleted in one housekeeping cycle, for each item.
  385. #       To lower load on server startup housekeeping is postponed for 30 minutes after server start.
  386. #       With HousekeepingFrequency=0 the housekeeper can be only executed using the runtime control option.
  387. #       In this case the period of outdated information deleted in one housekeeping cycle is 4 times the
  388. #       period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days.
  389. #
  390. # Mandatory: no
  391. # Range: 0-24
  392. # Default:
  393. #HousekeepingFrequency=1
  394. HousekeepingFrequency=2
  395.  
  396. ### Option: MaxHousekeeperDelete
  397. #       The table "housekeeper" contains "tasks" for housekeeping procedure in the format:
  398. #       [housekeeperid], [tablename], [field], [value].
  399. #       No more than 'MaxHousekeeperDelete' rows (corresponding to [tablename], [field], [value])
  400. #       will be deleted per one task in one housekeeping cycle.
  401. #       If set to 0 then no limit is used at all. In this case you must know what you are doing!
  402. #
  403. # Mandatory: no
  404. # Range: 0-1000000
  405. # Default:
  406. # MaxHousekeeperDelete=5000
  407. MaxHousekeeperDelete=10000
  408.  
  409. ### Option: CacheSize
  410. #       Size of configuration cache, in bytes.
  411. #       Shared memory size for storing host, item and trigger data.
  412. #
  413. # Mandatory: no
  414. # Range: 128K-8G
  415. # Default:
  416. # CacheSize=8M
  417. CacheSize=3G
  418.  
  419. ### Option: CacheUpdateFrequency
  420. #       How often Zabbix will perform update of configuration cache, in seconds.
  421. #
  422. # Mandatory: no
  423. # Range: 1-3600
  424. # Default:
  425. # CacheUpdateFrequency=60
  426.  
  427. ### Option: StartDBSyncers
  428. #       Number of pre-forked instances of DB Syncers.
  429. #
  430. # Mandatory: no
  431. # Range: 1-100
  432. # Default:
  433. # StartDBSyncers=4
  434.  
  435. ### Option: HistoryCacheSize
  436. #       Size of history cache, in bytes.
  437. #       Shared memory size for storing history data.
  438. #
  439. # Mandatory: no
  440. # Range: 128K-2G
  441. # Default:
  442. # HistoryCacheSize=16M
  443. HistoryCacheSize=400M
  444.  
  445. ### Option: HistoryIndexCacheSize
  446. #       Size of history index cache, in bytes.
  447. #       Shared memory size for indexing history cache.
  448. #
  449. # Mandatory: no
  450. # Range: 128K-2G
  451. # Default:
  452. # HistoryIndexCacheSize=4M
  453. HistoryIndexCacheSize=512M
  454.  
  455. ### Option: TrendCacheSize
  456. #       Size of trend cache, in bytes.
  457. #       Shared memory size for storing trends data.
  458. #
  459. # Mandatory: no
  460. # Range: 128K-2G
  461. # Default:
  462. # TrendCacheSize=4M
  463.  
  464. ### Option: ValueCacheSize
  465. #       Size of history value cache, in bytes.
  466. #       Shared memory size for caching item history data requests.
  467. #       Setting to 0 disables value cache.
  468. #
  469. # Mandatory: no
  470. # Range: 0,128K-64G
  471. # Default:
  472. # ValueCacheSize=8M
  473. ValueCacheSize=400M
  474.  
  475. ### Option: Timeout
  476. #       Specifies how long we wait for agent, SNMP device or external check (in seconds).
  477. #
  478. # Mandatory: no
  479. # Range: 1-30
  480. # Default:
  481. # Timeout=3
  482.  
  483. Timeout=30
  484.  
  485. ### Option: TrapperTimeout
  486. #       Specifies how many seconds trapper may spend processing new data.
  487. #
  488. # Mandatory: no
  489. # Range: 1-300
  490. # Default:
  491. # TrapperTimeout=300
  492.  
  493. ### Option: UnreachablePeriod
  494. #       After how many seconds of unreachability treat a host as unavailable.
  495. #
  496. # Mandatory: no
  497. # Range: 1-3600
  498. # Default:
  499. # UnreachablePeriod=45
  500.  
  501. ### Option: UnavailableDelay
  502. #       How often host is checked for availability during the unavailability period, in seconds.
  503. #
  504. # Mandatory: no
  505. # Range: 1-3600
  506. # Default:
  507. # UnavailableDelay=60
  508.  
  509. ### Option: UnreachableDelay
  510. #       How often host is checked for availability during the unreachability period, in seconds.
  511. #
  512. # Mandatory: no
  513. # Range: 1-3600
  514. # Default:
  515. # UnreachableDelay=15
  516.  
  517. ### Option: AlertScriptsPath
  518. #       Full path to location of custom alert scripts.
  519. #       Default depends on compilation options.
  520. #       To see the default path run command "zabbix_server --help".
  521. #
  522. # Mandatory: no
  523. # Default:
  524. # AlertScriptsPath=${datadir}/zabbix/alertscripts
  525.  
  526. AlertScriptsPath=/usr/lib/zabbix/alertscripts
  527.  
  528. ### Option: ExternalScripts
  529. #       Full path to location of external scripts.
  530. #       Default depends on compilation options.
  531. #       To see the default path run command "zabbix_server --help".
  532. #
  533. # Mandatory: no
  534. # Default:
  535. # ExternalScripts=${datadir}/zabbix/externalscripts
  536.  
  537. ExternalScripts=/usr/lib/zabbix/externalscripts
  538.  
  539. ### Option: FpingLocation
  540. #       Location of fping.
  541. #       Make sure that fping binary has root ownership and SUID flag set.
  542. #
  543. # Mandatory: no
  544. # Default:
  545. # FpingLocation=/usr/sbin/fping
  546.  
  547. ### Option: Fping6Location
  548. #       Location of fping6.
  549. #       Make sure that fping6 binary has root ownership and SUID flag set.
  550. #       Make empty if your fping utility is capable to process IPv6 addresses.
  551. #
  552. # Mandatory: no
  553. # Default:
  554. # Fping6Location=/usr/sbin/fping6
  555.  
  556. ### Option: SSHKeyLocation
  557. #       Location of public and private keys for SSH checks and actions.
  558. #
  559. # Mandatory: no
  560. # Default:
  561. # SSHKeyLocation=
  562.  
  563. ### Option: LogSlowQueries
  564. #       How long a database query may take before being logged (in milliseconds).
  565. #       Only works if DebugLevel set to 3, 4 or 5.
  566. #       0 - don't log slow queries.
  567. #
  568. # Mandatory: no
  569. # Range: 1-3600000
  570. # Default:
  571. # LogSlowQueries=0
  572.  
  573. LogSlowQueries=3000
  574.  
  575. ### Option: TmpDir
  576. #       Temporary directory.
  577. #
  578. # Mandatory: no
  579. # Default:
  580. # TmpDir=/tmp
  581.  
  582. ### Option: StartProxyPollers
  583. #       Number of pre-forked instances of pollers for passive proxies.
  584. #
  585. # Mandatory: no
  586. # Range: 0-250
  587. # Default:
  588. # StartProxyPollers=1
  589.  
  590. ### Option: ProxyConfigFrequency
  591. #       How often Zabbix Server sends configuration data to a Zabbix Proxy in seconds.
  592. #       This parameter is used only for proxies in the passive mode.
  593. #
  594. # Mandatory: no
  595. # Range: 1-3600*24*7
  596. # Default:
  597. # ProxyConfigFrequency=3600
  598.  
  599. ### Option: ProxyDataFrequency
  600. #       How often Zabbix Server requests history data from a Zabbix Proxy in seconds.
  601. #       This parameter is used only for proxies in the passive mode.
  602. #
  603. # Mandatory: no
  604. # Range: 1-3600
  605. # Default:
  606. # ProxyDataFrequency=1
  607.  
  608. ### Option: StartLLDProcessors
  609. #       Number of pre-forked instances of low level discovery processors.
  610. #
  611. # Mandatory: no
  612. # Range: 1-100
  613. # Default:
  614. # StartLLDProcessors=2
  615.  
  616. ### Option: AllowRoot
  617. #       Allow the server to run as 'root'. If disabled and the server is started by 'root', the server
  618. #       will try to switch to the user specified by the User configuration option instead.
  619. #       Has no effect if started under a regular user.
  620. #       0 - do not allow
  621. #       1 - allow
  622. #
  623. # Mandatory: no
  624. # Default:
  625. # AllowRoot=0
  626.  
  627. ### Option: User
  628. #       Drop privileges to a specific, existing user on the system.
  629. #       Only has effect if run as 'root' and AllowRoot is disabled.
  630. #
  631. # Mandatory: no
  632. # Default:
  633. # User=zabbix
  634.  
  635. ### Option: Include
  636. #       You may include individual files or all files in a directory in the configuration file.
  637. #       Installing Zabbix will create include directory in /usr/local/etc, unless modified during the compile time.
  638. #
  639. # Mandatory: no
  640. # Default:
  641. # Include=
  642.  
  643. # Include=/usr/local/etc/zabbix_server.general.conf
  644. # Include=/usr/local/etc/zabbix_server.conf.d/
  645. # Include=/usr/local/etc/zabbix_server.conf.d/*.conf
  646.  
  647. ### Option: SSLCertLocation
  648. #       Location of SSL client certificates.
  649. #       This parameter is used only in web monitoring.
  650. #       Default depends on compilation options.
  651. #       To see the default path run command "zabbix_server --help".
  652. #
  653. # Mandatory: no
  654. # Default:
  655. # SSLCertLocation=${datadir}/zabbix/ssl/certs
  656.  
  657. ### Option: SSLKeyLocation
  658. #       Location of private keys for SSL client certificates.
  659. #       This parameter is used only in web monitoring.
  660. #       Default depends on compilation options.
  661. #       To see the default path run command "zabbix_server --help".
  662. #
  663. # Mandatory: no
  664. # Default:
  665. # SSLKeyLocation=${datadir}/zabbix/ssl/keys
  666.  
  667. ### Option: SSLCALocation
  668. #       Override the location of certificate authority (CA) files for SSL server certificate verification.
  669. #       If not set, system-wide directory will be used.
  670. #       This parameter is used only in web monitoring and SMTP authentication.
  671. #
  672. # Mandatory: no
  673. # Default:
  674. # SSLCALocation=
  675.  
  676. ### Option: StatsAllowedIP
  677. #       List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of external Zabbix instances.
  678. #       Stats request will be accepted only from the addresses listed here. If this parameter is not set no stats requests
  679. #       will be accepted.
  680. #       If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally
  681. #       and '::/0' will allow any IPv4 or IPv6 address.
  682. #       '0.0.0.0/0' can be used to allow any IPv4 address.
  683. #       Example: StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com
  684. #
  685. # Mandatory: no
  686. # Default:
  687. # StatsAllowedIP=
  688. StatsAllowedIP=127.0.0.1
  689.  
  690. ####### LOADABLE MODULES #######
  691.  
  692. ### Option: LoadModulePath
  693. #       Full path to location of server modules.
  694. #       Default depends on compilation options.
  695. #       To see the default path run command "zabbix_server --help".
  696. #
  697. # Mandatory: no
  698. # Default:
  699. # LoadModulePath=${libdir}/modules
  700.  
  701. ### Option: LoadModule
  702. #       Module to load at server startup. Modules are used to extend functionality of the server.
  703. #       Formats:
  704. #               LoadModule=<module.so>
  705. #               LoadModule=<path/module.so>
  706. #               LoadModule=</abs_path/module.so>
  707. #       Either the module must be located in directory specified by LoadModulePath or the path must precede the module name.
  708. #       If the preceding path is absolute (starts with '/') then LoadModulePath is ignored.
  709. #       It is allowed to include multiple LoadModule parameters.
  710. #
  711. # Mandatory: no
  712. # Default:
  713. # LoadModule=
  714.  
  715. ####### TLS-RELATED PARAMETERS #######
  716.  
  717. ### Option: TLSCAFile
  718. #       Full pathname of a file containing the top-level CA(s) certificates for
  719. #       peer certificate verification.
  720. #
  721. # Mandatory: no
  722. # Default:
  723. # TLSCAFile=
  724.  
  725. ### Option: TLSCRLFile
  726. #       Full pathname of a file containing revoked certificates.
  727. #
  728. # Mandatory: no
  729. # Default:
  730. # TLSCRLFile=
  731.  
  732. ### Option: TLSCertFile
  733. #       Full pathname of a file containing the server certificate or certificate chain.
  734. #
  735. # Mandatory: no
  736. # Default:
  737. # TLSCertFile=
  738.  
  739. ### Option: TLSKeyFile
  740. #       Full pathname of a file containing the server private key.
  741. #
  742. # Mandatory: no
  743. # Default:
  744. # TLSKeyFile=
  745.  
  746. ####### For advanced users - TLS ciphersuite selection criteria #######
  747.  
  748. ### Option: TLSCipherCert13
  749. #       Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
  750. #       Override the default ciphersuite selection criteria for certificate-based encryption.
  751. #
  752. # Mandatory: no
  753. # Default:
  754. # TLSCipherCert13=
  755.  
  756. ### Option: TLSCipherCert
  757. #       GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
  758. #       Override the default ciphersuite selection criteria for certificate-based encryption.
  759. #       Example for GnuTLS:
  760. #               NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
  761. #       Example for OpenSSL:
  762. #               EECDH+aRSA+AES128:RSA+aRSA+AES128
  763. #
  764. # Mandatory: no
  765. # Default:
  766. # TLSCipherCert=
  767.  
  768. ### Option: TLSCipherPSK13
  769. #       Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
  770. #       Override the default ciphersuite selection criteria for PSK-based encryption.
  771. #       Example:
  772. #               TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
  773. #
  774. # Mandatory: no
  775. # Default:
  776. # TLSCipherPSK13=
  777.  
  778. ### Option: TLSCipherPSK
  779. #       GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
  780. #       Override the default ciphersuite selection criteria for PSK-based encryption.
  781. #       Example for GnuTLS:
  782. #               NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL
  783. #       Example for OpenSSL:
  784. #               kECDHEPSK+AES128:kPSK+AES128
  785. #
  786. # Mandatory: no
  787. # Default:
  788. # TLSCipherPSK=
  789.  
  790. ### Option: TLSCipherAll13
  791. #       Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
  792. #       Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
  793. #       Example:
  794. #               TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
  795. #
  796. # Mandatory: no
  797. # Default:
  798. # TLSCipherAll13=
  799.  
  800. ### Option: TLSCipherAll
  801. #       GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
  802. #       Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
  803. #       Example for GnuTLS:
  804. #               NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
  805. #       Example for OpenSSL:
  806. #               EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128
  807. #
  808. # Mandatory: no
  809. # Default:
  810. # TLSCipherAll=
  811.  
  812. ### Option: DBTLSConnect
  813. #       Setting this option enforces to use TLS connection to database.
  814. #       required    - connect using TLS
  815. #       verify_ca   - connect using TLS and verify certificate
  816. #       verify_full - connect using TLS, verify certificate and verify that database identity specified by DBHost
  817. #                     matches its certificate
  818. #       On MySQL starting from 5.7.11 and PostgreSQL following values are supported: "required", "verify_ca" and
  819. #       "verify_full".
  820. #       On MariaDB starting from version 10.2.6 "required" and "verify_full" values are supported.
  821. #       Default is not to set any option and behavior depends on database configuration
  822. #
  823. # Mandatory: no
  824. # Default:
  825. # DBTLSConnect=
  826.  
  827. ### Option: DBTLSCAFile
  828. #       Full pathname of a file containing the top-level CA(s) certificates for database certificate verification.
  829. #       Supported only for MySQL and PostgreSQL
  830. #
  831. # Mandatory: no
  832. #       (yes, if DBTLSConnect set to one of: verify_ca, verify_full)
  833. # Default:
  834. # DBTLSCAFile=
  835.  
  836. ### Option: DBTLSCertFile
  837. #       Full pathname of file containing Zabbix server certificate for authenticating to database.
  838. #       Supported only for MySQL and PostgreSQL
  839. #
  840. # Mandatory: no
  841. # Default:
  842. # DBTLSCertFile=
  843.  
  844. ### Option: DBTLSKeyFile
  845. #       Full pathname of file containing the private key for authenticating to database.
  846. #       Supported only for MySQL and PostgreSQL
  847. #
  848. # Mandatory: no
  849. # Default:
  850. # DBTLSKeyFile=
  851.  
  852. ### Option: DBTLSCipher
  853. #       The list of encryption ciphers that Zabbix server permits for TLS protocols up through TLSv1.2
  854. #       Supported only for MySQL
  855. #
  856. # Mandatory no
  857. # Default:
  858. # DBTLSCipher=
  859.  
  860. ### Option: DBTLSCipher13
  861. #       The list of encryption ciphersuites that Zabbix server permits for TLSv1.3 protocol
  862. #       Supported only for MySQL, starting from version 8.0.16
  863. #
  864. # Mandatory no
  865. # Default:
  866. # DBTLSCipher13=
Advertisement
Add Comment
Please, Sign In to add comment