[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
01/01: hydra: berlin: Restrict zabbix front-end to localhost.
From: |
Ricardo Wurmus |
Subject: |
01/01: hydra: berlin: Restrict zabbix front-end to localhost. |
Date: |
Sat, 29 Dec 2018 09:16:51 -0500 (EST) |
rekado pushed a commit to branch master
in repository maintenance.
commit 8a8eef3388ac7c8fc35b7ff5cb65fedb69356b45
Author: Ricardo Wurmus <address@hidden>
Date: Sat Dec 29 15:15:52 2018 +0100
hydra: berlin: Restrict zabbix front-end to localhost.
* hydra/berlin.scm <services>: Override zabbix-front-end-configuration
to only listen on localhost.
---
hydra/berlin.scm | 17 ++++++++++++++++-
1 file changed, 16 insertions(+), 1 deletion(-)
diff --git a/hydra/berlin.scm b/hydra/berlin.scm
index 1b8f8bf..c3d1460 100644
--- a/hydra/berlin.scm
+++ b/hydra/berlin.scm
@@ -3,7 +3,8 @@
(use-modules (gnu) (guix) (sysadmin services) (sysadmin people))
(use-service-modules base databases monitoring networking admin shepherd)
-(use-package-modules admin certs emacs linux ssh tls vim package-management
+(use-package-modules admin certs emacs linux monitoring
+ ssh tls vim package-management
web wget ci rsync)
(define %sysadmins
@@ -169,6 +170,20 @@ Happy hacking!\n"))
(include-files '("/root/zabbix-pass"))))
(service zabbix-front-end-service-type
(zabbix-front-end-configuration
+ (nginx (list
+ (nginx-server-configuration
+ (root #~(string-append
#$zabbix-server:front-end "/share/zabbix/php"))
+ (listen '("127.0.0.1:7878"))
+ (index '("index.php"))
+ (locations
+ (let ((php-location (nginx-php-location)))
+ (list (nginx-location-configuration
+ (inherit php-location)
+ (body (append
(nginx-location-configuration-body php-location)
+ (list "
+fastcgi_param PHP_VALUE \"post_max_size = 16M
+ max_execution_time = 300\";
+"))))))))))
(db-secret-file "/root/zabbix-front-end-secrets")))
;; For the Zabbix database. It was created by manually