DerLinkman
30f3e9a4c6
- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update all README/AGENTS call examples and the inventory table - move admin_password hash into encrypted vault.yml; remove plaintext copies from roles/bootstrap/defaults and group_vars/external.yml - bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring) - monitoring: PSK config/registration updates, docker role defaults, os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks - add .project-wiki knowledge base and .github agent instructions
49 lines
2.8 KiB
YAML
49 lines
2.8 KiB
YAML
monitoring_zabbix_version: "7.0"
|
|
monitoring_zabbix_release_package: "zabbix-release_latest_{{ monitoring_zabbix_version }}+debian{{ ansible_distribution_major_version }}_all.deb"
|
|
monitoring_zabbix_release_url: "https://repo.zabbix.com/zabbix/{{ monitoring_zabbix_version }}/debian/pool/main/z/zabbix-release/{{ monitoring_zabbix_release_package }}"
|
|
monitoring_zabbix_release_path: "/tmp/{{ monitoring_zabbix_release_package }}"
|
|
monitoring_zabbix_agent_package: zabbix-agent2
|
|
monitoring_zabbix_agent_service: zabbix-agent2
|
|
monitoring_zabbix_config_file: /etc/zabbix/zabbix_agent2.conf
|
|
monitoring_zabbix_agent_user: zabbix
|
|
monitoring_zabbix_passive_servers: ["192.168.212.1"]
|
|
monitoring_zabbix_active_servers: ""
|
|
monitoring_zabbix_listen_port: 10050
|
|
monitoring_zabbix_docker_group: docker
|
|
monitoring_zabbix_docker_socket_path: /var/run/docker.sock
|
|
monitoring_zabbix_docker_plugin_config_file: /etc/zabbix/zabbix_agent2.d/plugins.d/docker.conf
|
|
monitoring_zabbix_docker_endpoint: "unix://{{ monitoring_zabbix_docker_socket_path }}"
|
|
|
|
# --- TLS / PSK ----------------------------------------------------------------
|
|
monitoring_zabbix_tls_connect: psk # outgoing connections from agent: psk
|
|
monitoring_zabbix_tls_accept: psk # incoming connections to agent: psk
|
|
monitoring_zabbix_psk_identity: "{{ monitoring_zabbix_host_name }}"
|
|
monitoring_zabbix_psk_file: /etc/zabbix/zabbix_agent2.psk
|
|
monitoring_zabbix_psk_bits: 256 # 32 bytes -> 64 hex chars
|
|
# Directory on the Ansible controller used to persist per-host PSKs across runs.
|
|
monitoring_zabbix_psk_store: "{{ role_path }}/../../.zabbix-psk"
|
|
monitoring_zabbix_psk_store_mode: "0700"
|
|
|
|
# --- Zabbix Proxy (optional) --------------------------------------------------
|
|
# Leave both empty to have the agent talk to the Zabbix server directly.
|
|
# monitoring_zabbix_proxy: name of the proxy in Zabbix (for API assignment)
|
|
# monitoring_zabbix_proxy_address: IP/DNS of the proxy the agent should contact
|
|
monitoring_zabbix_proxy: ""
|
|
monitoring_zabbix_proxy_address: ""
|
|
|
|
# --- Zabbix API / host registration ------------------------------------------
|
|
monitoring_zabbix_api_url: "https://zabbix/api_jsonrpc.php"
|
|
monitoring_zabbix_api_user: Admin
|
|
# monitoring_zabbix_api_password: <set in vault.yml>
|
|
monitoring_zabbix_api_validate_certs: true
|
|
monitoring_zabbix_register_host: true
|
|
monitoring_zabbix_host_name: "{{ inventory_hostname }}"
|
|
monitoring_zabbix_host_groups: ["Linux servers"]
|
|
monitoring_zabbix_host_interface_ip: "{{ ansible_host }}"
|
|
monitoring_zabbix_host_interface_port: "{{ monitoring_zabbix_listen_port }}"
|
|
monitoring_zabbix_host_inventory_mode: manual
|
|
# Templates linked to every host
|
|
monitoring_zabbix_templates: ["Linux by Zabbix agent", "Zabbix agent2"]
|
|
# Templates added when a Docker socket is present on the host
|
|
monitoring_zabbix_docker_templates: ["Docker by Zabbix agent2"]
|