Subversion Repositories configs

Rev

Rev 197 | Go to most recent revision | Details | Compare with Previous | Last modification | View Log | RSS feed

Rev Author Line No. Line
192 - 1
# This is a configuration file for Zabbix server daemon
2
# To get more information about Zabbix, visit http://www.zabbix.com
3
 
4
############ GENERAL PARAMETERS #################
5
 
6
### Option: ListenPort
7
#	Listen port for trapper.
8
#
9
# Mandatory: no
10
# Range: 1024-32767
11
# Default:
12
# ListenPort=10051
13
 
14
### Option: SourceIP
15
#	Source IP address for outgoing connections.
16
#
17
# Mandatory: no
18
# Default:
19
SourceIP=10.192.25.241
20
 
21
### Option: LogType
22
#	Specifies where log messages are written to:
23
#		system  - syslog
24
#		file    - file specified with LogFile parameter
25
#		console - standard output
26
#
27
# Mandatory: no
28
# Default:
29
# LogType=file
30
 
31
### Option: LogFile
32
#	Log file name for LogType 'file' parameter.
33
#
34
# Mandatory: yes, if LogType is set to file, otherwise no
35
# Default:
36
# LogFile=
37
 
38
LogFile=/var/log/zabbix/zabbix_server.log
39
 
40
### Option: LogFileSize
41
#	Maximum size of log file in MB.
42
#	0 - disable automatic log rotation.
43
#
44
# Mandatory: no
45
# Range: 0-1024
46
# Default:
47
# LogFileSize=1
48
 
49
LogFileSize=0
50
 
51
### Option: DebugLevel
52
#	Specifies debug level:
53
#	0 - basic information about starting and stopping of Zabbix processes
54
#	1 - critical information
55
#	2 - error information
56
#	3 - warnings
57
#	4 - for debugging (produces lots of information)
58
#	5 - extended debugging (produces even more information)
59
#
60
# Mandatory: no
61
# Range: 0-5
62
# Default:
63
# DebugLevel=3
64
 
65
### Option: PidFile
66
#	Name of PID file.
67
#
68
# Mandatory: no
69
# Default:
70
# PidFile=/tmp/zabbix_server.pid
71
 
72
PidFile=/var/run/zabbix/zabbix_server.pid
73
 
74
### Option: SocketDir
75
#	IPC socket directory.
76
#		Directory to store IPC sockets used by internal Zabbix services.
77
#
78
# Mandatory: no
79
# Default:
80
# SocketDir=/tmp
81
 
82
SocketDir=/var/run/zabbix
83
 
84
### Option: DBHost
85
#	Database host name.
86
#	If set to localhost, socket is used for MySQL.
87
#	If set to empty string, socket is used for PostgreSQL.
88
#
89
# Mandatory: no
90
# Default:
91
# DBHost=localhost
92
 
93
### Option: DBName
94
#	Database name.
95
#
96
# Mandatory: yes
97
# Default:
98
# DBName=
99
 
100
DBName=zabbix
101
 
102
### Option: DBSchema
103
#	Schema name. Used for PostgreSQL.
104
#
105
# Mandatory: no
106
# Default:
107
# DBSchema=
108
 
109
### Option: DBUser
110
#	Database user.
111
#
112
# Mandatory: no
113
# Default:
114
# DBUser=
115
 
116
DBUser=zabbix
117
 
118
### Option: DBPassword
119
#	Database password.
120
#	Comment this line if no password is used.
121
#
122
# Mandatory: no
123
# Default:
124
DBPassword=xibbaz
125
 
126
### Option: DBSocket
127
#	Path to MySQL socket.
128
#
129
# Mandatory: no
130
# Default:
131
# DBSocket=
132
 
133
### Option: DBPort
134
#	Database port when not using local socket.
135
#
136
# Mandatory: no
137
# Range: 1024-65535
138
# Default:
139
# DBPort=
140
 
141
### Option: HistoryStorageURL
142
#	History storage HTTP[S] URL.
143
#
144
# Mandatory: no
145
# Default:
146
# HistoryStorageURL=
147
 
148
### Option: HistoryStorageTypes
149
#	Comma separated list of value types to be sent to the history storage.
150
#
151
# Mandatory: no
152
# Default:
153
# HistoryStorageTypes=uint,dbl,str,log,text
154
 
155
### Option: HistoryStorageDateIndex
156
#	Enable preprocessing of history values in history storage to store values in different indices based on date.
157
#	0 - disable
158
#	1 - enable
159
#
160
# Mandatory: no
161
# Default:
162
# HistoryStorageDateIndex=0
163
 
164
### Option: ExportDir
165
#	Directory for real time export of events, history and trends in newline delimited JSON format.
166
#	If set, enables real time export.
167
#
168
# Mandatory: no
169
# Default:
170
# ExportDir=
171
 
172
### Option: ExportFileSize
173
#	Maximum size per export file in bytes.
174
#	Only used for rotation if ExportDir is set.
175
#
176
# Mandatory: no
177
# Range: 1M-1G
178
# Default:
179
# ExportFileSize=1G
180
 
200 - 181
### Option: ExportType
182
#	List of comma delimited types of real time export - allows to control export entities by their
183
#	type (events, history, trends) individually.
184
#	Valid only if ExportDir is set.
185
#
186
# Mandatory: no
187
# Default:
188
# ExportType=events,history,trends
189
 
192 - 190
############ ADVANCED PARAMETERS ################
191
 
192
### Option: StartPollers
193
#	Number of pre-forked instances of pollers.
194
#
195
# Mandatory: no
196
# Range: 0-1000
197
# Default:
198
# StartPollers=5
199
 
200
### Option: StartIPMIPollers
201
#	Number of pre-forked instances of IPMI pollers.
202
#		The IPMI manager process is automatically started when at least one IPMI poller is started.
203
#
204
# Mandatory: no
205
# Range: 0-1000
206
# Default:
207
# StartIPMIPollers=0
208
 
209
### Option: StartPreprocessors
210
#	Number of pre-forked instances of preprocessing workers.
211
#		The preprocessing manager process is automatically started when preprocessor worker is started.
212
#
213
# Mandatory: no
214
# Range: 1-1000
215
# Default:
216
# StartPreprocessors=3
217
 
218
### Option: StartPollersUnreachable
219
#	Number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java).
220
#	At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers
221
#	are started.
222
#
223
# Mandatory: no
224
# Range: 0-1000
225
# Default:
226
# StartPollersUnreachable=1
227
 
228
### Option: StartTrappers
229
#	Number of pre-forked instances of trappers.
230
#	Trappers accept incoming connections from Zabbix sender, active agents and active proxies.
231
#	At least one trapper process must be running to display server availability and view queue
232
#	in the frontend.
233
#
234
# Mandatory: no
235
# Range: 0-1000
236
# Default:
237
# StartTrappers=5
238
 
239
### Option: StartPingers
240
#	Number of pre-forked instances of ICMP pingers.
241
#
242
# Mandatory: no
243
# Range: 0-1000
244
# Default:
245
# StartPingers=1
246
 
247
### Option: StartDiscoverers
248
#	Number of pre-forked instances of discoverers.
249
#
250
# Mandatory: no
251
# Range: 0-250
252
# Default:
253
# StartDiscoverers=1
254
 
255
### Option: StartHTTPPollers
256
#	Number of pre-forked instances of HTTP pollers.
257
#
258
# Mandatory: no
259
# Range: 0-1000
260
# Default:
261
# StartHTTPPollers=1
262
 
263
### Option: StartTimers
264
#	Number of pre-forked instances of timers.
265
#	Timers process maintenance periods.
266
#	Only the first timer process handles host maintenance updates. Problem suppression updates are shared
267
#	between all timers.
268
#
269
# Mandatory: no
270
# Range: 1-1000
271
# Default:
272
# StartTimers=1
273
 
274
### Option: StartEscalators
275
#	Number of pre-forked instances of escalators.
276
#
277
# Mandatory: no
278
# Range: 0-100
279
# Default:
280
# StartEscalators=1
281
 
282
### Option: StartAlerters
283
#	Number of pre-forked instances of alerters.
284
#	Alerters send the notifications created by action operations.
285
#
286
# Mandatory: no
287
# Range: 0-100
288
# Default:
289
# StartAlerters=3
290
 
291
### Option: JavaGateway
292
#	IP address (or hostname) of Zabbix Java gateway.
293
#	Only required if Java pollers are started.
294
#
295
# Mandatory: no
296
# Default:
297
# JavaGateway=
298
 
299
### Option: JavaGatewayPort
300
#	Port that Zabbix Java gateway listens on.
301
#
302
# Mandatory: no
303
# Range: 1024-32767
304
# Default:
305
# JavaGatewayPort=10052
306
 
307
### Option: StartJavaPollers
308
#	Number of pre-forked instances of Java pollers.
309
#
310
# Mandatory: no
311
# Range: 0-1000
312
# Default:
313
# StartJavaPollers=0
314
 
315
### Option: StartVMwareCollectors
316
#	Number of pre-forked vmware collector instances.
317
#
318
# Mandatory: no
319
# Range: 0-250
320
# Default:
321
# StartVMwareCollectors=0
322
 
323
### Option: VMwareFrequency
324
#	How often Zabbix will connect to VMware service to obtain a new data.
325
#
326
# Mandatory: no
327
# Range: 10-86400
328
# Default:
329
# VMwareFrequency=60
330
 
331
### Option: VMwarePerfFrequency
332
#	How often Zabbix will connect to VMware service to obtain performance data.
333
#
334
# Mandatory: no
335
# Range: 10-86400
336
# Default:
337
# VMwarePerfFrequency=60
338
 
339
### Option: VMwareCacheSize
340
#	Size of VMware cache, in bytes.
341
#	Shared memory size for storing VMware data.
342
#	Only used if VMware collectors are started.
343
#
344
# Mandatory: no
345
# Range: 256K-2G
346
# Default:
347
# VMwareCacheSize=8M
348
 
349
### Option: VMwareTimeout
350
#	Specifies how many seconds vmware collector waits for response from VMware service.
351
#
352
# Mandatory: no
353
# Range: 1-300
354
# Default:
355
# VMwareTimeout=10
356
 
357
### Option: SNMPTrapperFile
358
#	Temporary file used for passing data from SNMP trap daemon to the server.
359
#	Must be the same as in zabbix_trap_receiver.pl or SNMPTT configuration file.
360
#
361
# Mandatory: no
362
# Default:
363
# SNMPTrapperFile=/tmp/zabbix_traps.tmp
364
 
365
SNMPTrapperFile=/var/log/snmptrap/snmptrap.log
366
 
367
### Option: StartSNMPTrapper
368
#	If 1, SNMP trapper process is started.
369
#
370
# Mandatory: no
371
# Range: 0-1
372
# Default:
373
# StartSNMPTrapper=0
374
 
375
### Option: ListenIP
376
#	List of comma delimited IP addresses that the trapper should listen on.
377
#	Trapper will listen on all network interfaces if this parameter is missing.
378
#
379
# Mandatory: no
380
# Default:
381
# ListenIP=0.0.0.0
382
 
383
# ListenIP=127.0.0.1
384
 
385
### Option: HousekeepingFrequency
386
#	How often Zabbix will perform housekeeping procedure (in hours).
387
#	Housekeeping is removing outdated information from the database.
388
#	To prevent Housekeeper from being overloaded, no more than 4 times HousekeepingFrequency
389
#	hours of outdated information are deleted in one housekeeping cycle, for each item.
390
#	To lower load on server startup housekeeping is postponed for 30 minutes after server start.
391
#	With HousekeepingFrequency=0 the housekeeper can be only executed using the runtime control option.
392
#	In this case the period of outdated information deleted in one housekeeping cycle is 4 times the
393
#	period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days.
394
#
395
# Mandatory: no
396
# Range: 0-24
397
# Default:
398
# HousekeepingFrequency=1
399
 
400
### Option: MaxHousekeeperDelete
401
#	The table "housekeeper" contains "tasks" for housekeeping procedure in the format:
402
#	[housekeeperid], [tablename], [field], [value].
403
#	No more than 'MaxHousekeeperDelete' rows (corresponding to [tablename], [field], [value])
404
#	will be deleted per one task in one housekeeping cycle.
405
#	If set to 0 then no limit is used at all. In this case you must know what you are doing!
406
#
407
# Mandatory: no
408
# Range: 0-1000000
409
# Default:
410
# MaxHousekeeperDelete=5000
411
 
412
### Option: CacheSize
413
#	Size of configuration cache, in bytes.
414
#	Shared memory size for storing host, item and trigger data.
415
#
416
# Mandatory: no
417
# Range: 128K-64G
418
# Default:
419
# CacheSize=8M
420
 
421
### Option: CacheUpdateFrequency
422
#	How often Zabbix will perform update of configuration cache, in seconds.
423
#
424
# Mandatory: no
425
# Range: 1-3600
426
# Default:
427
# CacheUpdateFrequency=60
428
 
429
### Option: StartDBSyncers
430
#	Number of pre-forked instances of DB Syncers.
431
#
432
# Mandatory: no
433
# Range: 1-100
434
# Default:
435
# StartDBSyncers=4
436
 
437
### Option: HistoryCacheSize
438
#	Size of history cache, in bytes.
439
#	Shared memory size for storing history data.
440
#
441
# Mandatory: no
442
# Range: 128K-2G
443
# Default:
444
# HistoryCacheSize=16M
445
 
446
### Option: HistoryIndexCacheSize
447
#	Size of history index cache, in bytes.
448
#	Shared memory size for indexing history cache.
449
#
450
# Mandatory: no
451
# Range: 128K-2G
452
# Default:
453
# HistoryIndexCacheSize=4M
454
 
455
### Option: TrendCacheSize
456
#	Size of trend cache, in bytes.
457
#	Shared memory size for storing trends data.
458
#
459
# Mandatory: no
460
# Range: 128K-2G
461
# Default:
462
# TrendCacheSize=4M
463
 
464
### Option: ValueCacheSize
465
#	Size of history value cache, in bytes.
466
#	Shared memory size for caching item history data requests.
467
#	Setting to 0 disables value cache.
468
#
469
# Mandatory: no
470
# Range: 0,128K-64G
471
# Default:
472
# ValueCacheSize=8M
473
 
474
### Option: Timeout
475
#	Specifies how long we wait for agent, SNMP device or external check (in seconds).
476
#
477
# Mandatory: no
478
# Range: 1-30
479
# Default:
480
# Timeout=3
481
 
482
Timeout=4
483
 
484
### Option: TrapperTimeout
485
#	Specifies how many seconds trapper may spend processing new data.
486
#
487
# Mandatory: no
488
# Range: 1-300
489
# Default:
490
# TrapperTimeout=300
491
 
492
### Option: UnreachablePeriod
493
#	After how many seconds of unreachability treat a host as unavailable.
494
#
495
# Mandatory: no
496
# Range: 1-3600
497
# Default:
498
# UnreachablePeriod=45
499
 
500
### Option: UnavailableDelay
501
#	How often host is checked for availability during the unavailability period, in seconds.
502
#
503
# Mandatory: no
504
# Range: 1-3600
505
# Default:
506
# UnavailableDelay=60
507
 
508
### Option: UnreachableDelay
509
#	How often host is checked for availability during the unreachability period, in seconds.
510
#
511
# Mandatory: no
512
# Range: 1-3600
513
# Default:
514
# UnreachableDelay=15
515
 
516
### Option: AlertScriptsPath
517
#	Full path to location of custom alert scripts.
518
#	Default depends on compilation options.
519
#	To see the default path run command "zabbix_server --help".
520
#
521
# Mandatory: no
522
# Default:
523
# AlertScriptsPath=/usr/lib/zabbix/alertscripts
524
 
525
### Option: ExternalScripts
526
#	Full path to location of external scripts.
527
#	Default depends on compilation options.
528
#	To see the default path run command "zabbix_server --help".
529
#
530
# Mandatory: no
531
# Default:
532
# ExternalScripts=/usr/lib/zabbix/externalscripts
533
 
534
### Option: FpingLocation
535
#	Location of fping.
536
#	Make sure that fping binary has root ownership and SUID flag set.
537
#
538
# Mandatory: no
539
# Default:
540
# FpingLocation=/usr/sbin/fping
541
 
542
### Option: Fping6Location
543
#	Location of fping6.
544
#	Make sure that fping6 binary has root ownership and SUID flag set.
545
#	Make empty if your fping utility is capable to process IPv6 addresses.
546
#
547
# Mandatory: no
548
# Default:
549
# Fping6Location=/usr/sbin/fping6
550
 
551
### Option: SSHKeyLocation
552
#	Location of public and private keys for SSH checks and actions.
553
#
554
# Mandatory: no
555
# Default:
556
# SSHKeyLocation=
557
 
558
### Option: LogSlowQueries
559
#	How long a database query may take before being logged (in milliseconds).
560
#	Only works if DebugLevel set to 3, 4 or 5.
561
#	0 - don't log slow queries.
562
#
563
# Mandatory: no
564
# Range: 1-3600000
565
# Default:
566
# LogSlowQueries=0
567
 
568
LogSlowQueries=3000
569
 
570
### Option: TmpDir
571
#	Temporary directory.
572
#
573
# Mandatory: no
574
# Default:
575
# TmpDir=/tmp
576
 
577
### Option: StartProxyPollers
578
#	Number of pre-forked instances of pollers for passive proxies.
579
#
580
# Mandatory: no
581
# Range: 0-250
582
# Default:
583
# StartProxyPollers=1
584
 
585
### Option: ProxyConfigFrequency
586
#	How often Zabbix Server sends configuration data to a Zabbix Proxy in seconds.
587
#	This parameter is used only for proxies in the passive mode.
588
#
589
# Mandatory: no
590
# Range: 1-3600*24*7
591
# Default:
592
# ProxyConfigFrequency=3600
593
 
594
### Option: ProxyDataFrequency
595
#	How often Zabbix Server requests history data from a Zabbix Proxy in seconds.
596
#	This parameter is used only for proxies in the passive mode.
597
#
598
# Mandatory: no
599
# Range: 1-3600
600
# Default:
601
# ProxyDataFrequency=1
602
 
603
### Option: StartLLDProcessors
604
#	Number of pre-forked instances of low level discovery processors.
605
#
606
# Mandatory: no
607
# Range: 1-100
608
# Default:
609
# StartLLDProcessors=2
610
 
611
### Option: AllowRoot
612
#	Allow the server to run as 'root'. If disabled and the server is started by 'root', the server
613
#	will try to switch to the user specified by the User configuration option instead.
614
#	Has no effect if started under a regular user.
615
#	0 - do not allow
616
#	1 - allow
617
#
618
# Mandatory: no
619
# Default:
620
# AllowRoot=0
621
 
622
### Option: User
623
#	Drop privileges to a specific, existing user on the system.
624
#	Only has effect if run as 'root' and AllowRoot is disabled.
625
#
626
# Mandatory: no
627
# Default:
628
# User=zabbix
629
 
630
### Option: Include
631
#	You may include individual files or all files in a directory in the configuration file.
632
#	Installing Zabbix will create include directory in /usr/local/etc, unless modified during the compile time.
633
#
634
# Mandatory: no
635
# Default:
636
# Include=
637
 
638
# Include=/usr/local/etc/zabbix_server.general.conf
639
# Include=/usr/local/etc/zabbix_server.conf.d/
640
# Include=/usr/local/etc/zabbix_server.conf.d/*.conf
641
 
642
### Option: SSLCertLocation
643
#	Location of SSL client certificates.
644
#	This parameter is used only in web monitoring.
645
#	Default depends on compilation options.
646
#	To see the default path run command "zabbix_server --help".
647
#
648
# Mandatory: no
649
# Default:
650
# SSLCertLocation=${datadir}/zabbix/ssl/certs
651
 
652
### Option: SSLKeyLocation
653
#	Location of private keys for SSL client certificates.
654
#	This parameter is used only in web monitoring.
655
#	Default depends on compilation options.
656
#	To see the default path run command "zabbix_server --help".
657
#
658
# Mandatory: no
659
# Default:
660
# SSLKeyLocation=${datadir}/zabbix/ssl/keys
661
 
662
### Option: SSLCALocation
663
#	Override the location of certificate authority (CA) files for SSL server certificate verification.
664
#	If not set, system-wide directory will be used.
665
#	This parameter is used in web monitoring, SMTP authentication, HTTP agent items and for communication with Vault.
666
#
667
# Mandatory: no
668
# Default:
669
# SSLCALocation=
670
 
671
### Option: StatsAllowedIP
672
#	List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of external Zabbix instances.
673
#	Stats request will be accepted only from the addresses listed here. If this parameter is not set no stats requests
674
#	will be accepted.
675
#	If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally
676
#	and '::/0' will allow any IPv4 or IPv6 address.
677
#	'0.0.0.0/0' can be used to allow any IPv4 address.
678
#	Example: StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com
679
#
680
# Mandatory: no
681
# Default:
682
# StatsAllowedIP=
683
StatsAllowedIP=127.0.0.1
684
 
685
####### LOADABLE MODULES #######
686
 
687
### Option: LoadModulePath
688
#	Full path to location of server modules.
689
#	Default depends on compilation options.
690
#	To see the default path run command "zabbix_server --help".
691
#
692
# Mandatory: no
693
# Default:
694
# LoadModulePath=${libdir}/modules
695
 
696
### Option: LoadModule
697
#	Module to load at server startup. Modules are used to extend functionality of the server.
698
#	Formats:
699
#		LoadModule=<module.so>
700
#		LoadModule=<path/module.so>
701
#		LoadModule=</abs_path/module.so>
702
#	Either the module must be located in directory specified by LoadModulePath or the path must precede the module name.
703
#	If the preceding path is absolute (starts with '/') then LoadModulePath is ignored.
704
#	It is allowed to include multiple LoadModule parameters.
705
#
706
# Mandatory: no
707
# Default:
708
# LoadModule=
709
 
710
####### TLS-RELATED PARAMETERS #######
711
 
712
### Option: TLSCAFile
713
#	Full pathname of a file containing the top-level CA(s) certificates for
714
#	peer certificate verification.
715
#
716
# Mandatory: no
717
# Default:
718
# TLSCAFile=
719
 
720
### Option: TLSCRLFile
721
#	Full pathname of a file containing revoked certificates.
722
#
723
# Mandatory: no
724
# Default:
725
# TLSCRLFile=
726
 
727
### Option: TLSCertFile
728
#	Full pathname of a file containing the server certificate or certificate chain.
729
#
730
# Mandatory: no
731
# Default:
732
# TLSCertFile=
733
 
734
### Option: TLSKeyFile
735
#	Full pathname of a file containing the server private key.
736
#
737
# Mandatory: no
738
# Default:
739
# TLSKeyFile=
740
 
741
####### For advanced users - TLS ciphersuite selection criteria #######
742
 
743
### Option: TLSCipherCert13
744
#	Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
745
#	Override the default ciphersuite selection criteria for certificate-based encryption.
746
#
747
# Mandatory: no
748
# Default:
749
# TLSCipherCert13=
750
 
751
### Option: TLSCipherCert
752
#	GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
753
#	Override the default ciphersuite selection criteria for certificate-based encryption.
754
#	Example for GnuTLS:
755
#		NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
756
#	Example for OpenSSL:
757
#		EECDH+aRSA+AES128:RSA+aRSA+AES128
758
#
759
# Mandatory: no
760
# Default:
761
# TLSCipherCert=
762
 
763
### Option: TLSCipherPSK13
764
#	Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
765
#	Override the default ciphersuite selection criteria for PSK-based encryption.
766
#	Example:
767
#		TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
768
#
769
# Mandatory: no
770
# Default:
771
# TLSCipherPSK13=
772
 
773
### Option: TLSCipherPSK
774
#	GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
775
#	Override the default ciphersuite selection criteria for PSK-based encryption.
776
#	Example for GnuTLS:
777
#		NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL
778
#	Example for OpenSSL:
779
#		kECDHEPSK+AES128:kPSK+AES128
780
#
781
# Mandatory: no
782
# Default:
783
# TLSCipherPSK=
784
 
785
### Option: TLSCipherAll13
786
#	Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
787
#	Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
788
#	Example:
789
#		TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
790
#
791
# Mandatory: no
792
# Default:
793
# TLSCipherAll13=
794
 
795
### Option: TLSCipherAll
796
#	GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
797
#	Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
798
#	Example for GnuTLS:
799
#		NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
800
#	Example for OpenSSL:
801
#		EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128
802
#
803
# Mandatory: no
804
# Default:
805
# TLSCipherAll=
806
 
807
### Option: DBTLSConnect
808
#	Setting this option enforces to use TLS connection to database.
809
#	required    - connect using TLS
810
#	verify_ca   - connect using TLS and verify certificate
811
#	verify_full - connect using TLS, verify certificate and verify that database identity specified by DBHost
812
#	              matches its certificate
813
#	On MySQL starting from 5.7.11 and PostgreSQL following values are supported: "required", "verify_ca" and
814
#	"verify_full".
815
#	On MariaDB starting from version 10.2.6 "required" and "verify_full" values are supported.
816
#	Default is not to set any option and behavior depends on database configuration
817
#
818
# Mandatory: no
819
# Default:
820
# DBTLSConnect=
821
 
822
### Option: DBTLSCAFile
823
#	Full pathname of a file containing the top-level CA(s) certificates for database certificate verification.
824
#	Supported only for MySQL and PostgreSQL
825
#
826
# Mandatory: no
827
#	(yes, if DBTLSConnect set to one of: verify_ca, verify_full)
828
# Default:
829
# DBTLSCAFile=
830
 
831
### Option: DBTLSCertFile
832
#	Full pathname of file containing Zabbix server certificate for authenticating to database.
833
#	Supported only for MySQL and PostgreSQL
834
#
835
# Mandatory: no
836
# Default:
837
# DBTLSCertFile=
838
 
839
### Option: DBTLSKeyFile
840
#	Full pathname of file containing the private key for authenticating to database.
841
#	Supported only for MySQL and PostgreSQL
842
#
843
# Mandatory: no
844
# Default:
845
# DBTLSKeyFile=
846
 
847
### Option: DBTLSCipher
848
#	The list of encryption ciphers that Zabbix server permits for TLS protocols up through TLSv1.2
849
#	Supported only for MySQL
850
#
851
# Mandatory no
852
# Default:
853
# DBTLSCipher=
854
 
855
### Option: DBTLSCipher13
856
#	The list of encryption ciphersuites that Zabbix server permits for TLSv1.3 protocol
857
#	Supported only for MySQL, starting from version 8.0.16
858
#
859
# Mandatory no
860
# Default:
861
# DBTLSCipher13=
862
 
863
### Option: VaultToken
864
#	Vault authentication token that should have been generated exclusively for Zabbix server with read only permission
865
#	to paths specified in Vault macros and read only permission to path specified in optional VaultDBPath
866
#	configuration parameter.
867
#	It is an error if VaultToken and VAULT_TOKEN environment variable are defined at the same time.
868
#
869
# Mandatory: no
870
# Default:
871
# VaultToken=
872
 
873
### Option: VaultURL
874
#	Vault server HTTP[S] URL. System-wide CA certificates directory will be used if SSLCALocation is not specified.
875
#
876
# Mandatory: no
877
# Default:
878
# VaultURL=https://127.0.0.1:8200
879
 
880
### Option: VaultDBPath
881
#	Vault path from where credentials for database will be retrieved by keys 'password' and 'username'.
882
#	Example: secret/zabbix/database
883
#	This option can only be used if DBUser and DBPassword are not specified.
884
#
885
# Mandatory: no
886
# Default:
887
# VaultDBPath=
888