From 25f036786e1bb277eec4d1d4baf8b32c74843f30 Mon Sep 17 00:00:00 2001
From: jegomez <jegomez@agofer.com.co>
Date: Wed, 23 Oct 2024 18:41:00 -0500
Subject: [PATCH] [ADD] Zabbix frontend configuration

---
 roles/zabbix_server/tasks/main.yml            |  8 ++++
 .../templates/zabbix.conf.php.j2              | 47 +++++++++++++++++++
 2 files changed, 55 insertions(+)
 create mode 100644 roles/zabbix_server/templates/zabbix.conf.php.j2

diff --git a/roles/zabbix_server/tasks/main.yml b/roles/zabbix_server/tasks/main.yml
index fc4325d..1c27063 100644
--- a/roles/zabbix_server/tasks/main.yml
+++ b/roles/zabbix_server/tasks/main.yml
@@ -45,6 +45,14 @@
   notify:
     - Reiniciar servidor zabbix
 
+- name: 'Configurar interfaz web zabbix'
+  template:
+    src: zabbix.conf.php.j2
+    dest: /etc/zabbix/web/zabbix.conf.php
+    owner: 'www-data'
+    group: 'www-data'
+    mode: '0640'
+
 - name: 'Configurar Zabbix en Nginx'
   template:
     src: nginx.conf.j2
diff --git a/roles/zabbix_server/templates/zabbix.conf.php.j2 b/roles/zabbix_server/templates/zabbix.conf.php.j2
new file mode 100644
index 0000000..6eebbd5
--- /dev/null
+++ b/roles/zabbix_server/templates/zabbix.conf.php.j2
@@ -0,0 +1,47 @@
+<?php
+// Zabbix GUI configuration file
+{{ ansible_managed | comment('plain', prefix='// ') }}
+global $DB;
+
+$DB['TYPE']                     = 'POSTGRESQL';
+$DB['SERVER']                   = 'localhost';
+$DB['PORT']                     = '0';
+$DB['DATABASE']                 = 'zabbix';
+$DB['USER']                     = 'zabbix';
+$DB['PASSWORD']                 = '{{ zabbix_pgsql_pass }}';
+
+// Schema name. Used for PostgreSQL.
+$DB['SCHEMA']                   = '';
+
+// Used for TLS connection.
+$DB['ENCRYPTION']               = true;
+$DB['KEY_FILE']                 = '';
+$DB['CERT_FILE']                = '';
+$DB['CA_FILE']                  = '';
+$DB['VERIFY_HOST']              = false;
+$DB['CIPHER_LIST']              = '';
+
+// Vault configuration. Used if database credentials are stored in Vault secrets manager.
+$DB['VAULT']                    = '';
+$DB['VAULT_URL']                = '';
+$DB['VAULT_DB_PATH']            = '';
+$DB['VAULT_TOKEN']              = '';
+$DB['VAULT_CERT_FILE']          = '';
+$DB['VAULT_KEY_FILE']           = '';
+// Uncomment to bypass local caching of credentials.
+// $DB['VAULT_CACHE']           = true;
+
+// Use IEEE754 compatible value range for 64-bit Numeric (float) history values.
+// This option is enabled by default for new Zabbix installations.
+// For upgraded installations, please read database upgrade notes before enabling this option.
+$DB['DOUBLE_IEEE754']           = true;
+
+// Uncomment and set to desired values to override Zabbix hostname/IP and port.
+// $ZBX_SERVER                  = '';
+// $ZBX_SERVER_PORT             = '';
+
+$ZBX_SERVER_NAME                = '';
+
+$IMAGE_FORMAT_DEFAULT   = IMAGE_FORMAT_PNG;
+
+?>