====== Serveur ======


====== Agents ======


L'agent se configure via puppet en lui précisant l'ip du serveur zabbix:


<file>
class { 'zabbix-agent': server => "192.168.99.1", version => "2.0" }
</file>

====== Frontend web ======


Configuration du vhost nginx via puppet:


<file>
        nginx::vhost { 'zabbix.linuxed.net':
                instance     => 'web03_prod',
                address      => '192.168.122.252',
                port         => '80',
                server_names => ['zabbix.linuxed.net'],
                options => {
                        'access_log' => 'zabbix.linuxed.net-access.log main',
                        'error_log'  => 'zabbix.linuxed.net-error.log',
                        'root' => '/usr/share/zabbix',
                },
                locations => {
                        '/' => {
                                conditions => {
                                        '$host ~* ^(zabbix\.linuxed\.net)$' => 'rewrite  ^/(.*)$  https://zabbix.linuxed.net/$1  permanent'
                                },
                                'return' => '444',
                        }
                }
        }

        nginx::vhost { 'zabbix.linuxed.net_SSL':
                instance     => 'web03_prod',
                address      => '192.168.122.252',
                port         => '443',
                server_names => ['zabbix.linuxed.net'],
                options      => {
                        'access_log' => 'zabbix.linuxed.net-access.log main',
                        'error_log'  => 'zabbix.linuxed.net-error.log',
                        'root'       => '/usr/share/zabbix',
                        'index'      => 'index.html index.php',
                        'ssl'                       => 'on',
                        'ssl_certificate'           => '/etc/pki/httpd/vhosts.crt',
                        'ssl_certificate_key'       => '/etc/pki/httpd/vhosts.key',
                        'ssl_session_timeout'       => '5m',
                        'ssl_protocols'             => 'SSLv2 SSLv3 TLSv1',
                        'ssl_ciphers'               => 'ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP',
                        'ssl_prefer_server_ciphers' => 'on',
                },
                locations    => {
                        '~ \.php$' => {
                                'fastcgi_pass' => 'unix:/var/lib/php/zabbix.linuxed.net.sock',
                                'fastcgi_index' => 'index.php',
                                'fastcgi_param' => 'SCRIPT_FILENAME  /usr/share/zabbix$fastcgi_script_name',
                                'include'       => '/etc/nginx/fastcgi_params',
                        },
                }
        }
</file>