Deployment Overview of Zabbix proxy on Server¶

Prerequisites and Basic Requirements¶

The following requirements must be met for a successful deployment:

• Operating System: Ubuntu (22.04 recommended)

• Privileges: Root or sudo access is required to install packages and manage services.

• Dependencies: The system must have ca-certificates, curl, gnupg, and apt-transport-https installed.

• Network Access: Outbound access to repo.zabbix.com for package installation and outbound access for SSL certificate verification via Certbot.

FQDN of the final panel on the hostkey.in domain¶

The application is accessible via a specific subdomain template within the hostkey.in domain.

Application installation process¶

The application is installed using the system package manager (apt) on Ubuntu systems. The installation follows these steps:

1. Repository Setup: The Zabbix release repository for version 7.0 is added to the system's package sources.

2. Package Installation: Depending on the configured backend, one of the following packages is installed:

3. For SQLite: zabbix-proxy-sqlite3 and zabbix-sql-scripts.

4. For MySQL/MariaDB: zabbix-proxy-mysql.

5. For PostgreSQL: zabbix-proxy-pgsql.

6. Service Configuration: The configuration file /etc/zabbix/zabbix_proxy.conf is modified to include the following parameters:

7. Connection settings for the Zabbix Server (Server).

8. Proxy Hostname (Hostname).

9. Database connection details (DBName, DBUser, DBPassword, and DBHost).

10. Service Initialization: The zabbix-proxy service is enabled to start on boot and is started immediately after configuration.

Access Rights and Security¶

• Database Directory Permissions: For SQLite deployments, the directory /var/lib/zabbix is created with ownership assigned to the zabbix user and permissions set to 0750.

• Nginx Configuration: Nginx configuration files are managed in /data/nginx/user_conf.d/ to handle reverse proxying for the application.

Databases¶

The application supports multiple database backends. The current implementation uses SQLite by default, but MySQL and PostgreSQL are also supported.

Docker Containers and Their Deployment¶

The deployment utilizes a Docker container to manage SSL certificates and Nginx reverse proxying via Docker Compose.

Nginx-Certbot Container

• Image: jonasal/nginx-certbot:latest

• Ports: Uses host network mode (mapping directly to host ports).

• Volumes:

• nginx_secrets:/etc/letsencrypt (External volume for SSL certificates)

• /data/nginx/user_conf.d:/etc/nginx/user_conf.d (User configuration files)

• Environment Variables:

• [email protected]

• Restart Policy: unless-stopped

Application Update Instructions¶

To update the Zabbix Proxy application, perform the following steps:

1. Update the local package index:

   sudo apt update
   

2. Upgrade the installed packages:

   sudo apt upgrade zabbix-proxy-sqlite3 # Replace with your specific backend package
   

3. Restart the service to apply changes:

   sudo systemctl restart zabbix-proxy
   

Location of configuration files and data¶

Available ports for connection¶

• External HTTPS: 443 (via Nginx proxy)

• Internal Proxy Port: 8083 (used for internal routing between Nginx and the application)