monitoring_zabbix_version: "7.0"
monitoring_zabbix_release_package: "zabbix-release_latest_{{ monitoring_zabbix_version }}+debian{{ ansible_distribution_major_version }}_all.deb"
monitoring_zabbix_release_url: "https://repo.zabbix.com/zabbix/{{ monitoring_zabbix_version }}/debian/pool/main/z/zabbix-release/{{ monitoring_zabbix_release_package }}"
monitoring_zabbix_release_path: "/tmp/{{ monitoring_zabbix_release_package }}"
monitoring_zabbix_agent_package: zabbix-agent2
monitoring_zabbix_agent_service: zabbix-agent2
monitoring_zabbix_config_file: /etc/zabbix/zabbix_agent2.conf
monitoring_zabbix_agent_user: zabbix
monitoring_zabbix_passive_servers: ["192.168.212.1"]
monitoring_zabbix_active_servers: ""
monitoring_zabbix_listen_port: 10050
monitoring_zabbix_docker_group: docker
monitoring_zabbix_docker_socket_path: /var/run/docker.sock
monitoring_zabbix_docker_plugin_config_file: /etc/zabbix/zabbix_agent2.d/plugins.d/docker.conf
monitoring_zabbix_docker_endpoint: "unix://{{ monitoring_zabbix_docker_socket_path }}"

# --- TLS / PSK ----------------------------------------------------------------
monitoring_zabbix_tls_connect: psk          # outgoing connections from agent: psk
monitoring_zabbix_tls_accept: psk           # incoming connections to agent:   psk
monitoring_zabbix_psk_identity: "{{ inventory_hostname }}"
monitoring_zabbix_psk_file: /etc/zabbix/zabbix_agent2.psk
monitoring_zabbix_psk_bits: 256             # 32 bytes -> 64 hex chars
# Directory on the Ansible controller used to persist per-host PSKs across runs.
monitoring_zabbix_psk_store: "{{ playbook_dir }}/../.zabbix-psk"
monitoring_zabbix_psk_store_mode: "0700"

# --- Zabbix Proxy (optional) --------------------------------------------------
# Leave both empty to have the agent talk to the Zabbix server directly.
# monitoring_zabbix_proxy:         name of the proxy in Zabbix (for API assignment)
# monitoring_zabbix_proxy_address: IP/DNS of the proxy the agent should contact
monitoring_zabbix_proxy: ""
monitoring_zabbix_proxy_address: ""

# --- Zabbix API / host registration ------------------------------------------
monitoring_zabbix_api_url: "https://zabbix/api_jsonrpc.php"
monitoring_zabbix_api_user: Admin
# monitoring_zabbix_api_password: <set in vault.yml>
monitoring_zabbix_api_validate_certs: true
monitoring_zabbix_register_host: true
monitoring_zabbix_host_name: "{{ inventory_hostname }}"
monitoring_zabbix_host_groups: ["Linux servers"]
monitoring_zabbix_host_interface_ip: "{{ ansible_host }}"
monitoring_zabbix_host_interface_port: "{{ monitoring_zabbix_listen_port }}"
monitoring_zabbix_host_inventory_mode: manual
# Templates linked to every host
monitoring_zabbix_templates: ["Linux by Zabbix agent", "Zabbix agent2"]
# Templates added when a Docker socket is present on the host
monitoring_zabbix_docker_templates: ["Docker by Zabbix agent2"]