1# This is a configuration file for Zabbix server daemon
2# To get more information about Zabbix, visit http://www.zabbix.com
3
4############ GENERAL PARAMETERS #################
5
6### Option: ListenPort
7#	Listen port for trapper.
8#
9# Mandatory: no
10# Range: 1024-32767
11# Default:
12# ListenPort=10051
13
14### Option: SourceIP
15#	Source IP address for outgoing connections.
16#
17# Mandatory: no
18# Default:
19# SourceIP=
20
21### Option: LogType
22#	Specifies where log messages are written to:
23#		system  - syslog
24#		file    - file specified with LogFile parameter
25#		console - standard output
26#
27# Mandatory: no
28# Default:
29# LogType=file
30
31### Option: LogFile
32#	Log file name for LogType 'file' parameter.
33#
34# Mandatory: yes, if LogType is set to file, otherwise no
35# Default:
36# LogFile=
37
38LogFile=/tmp/zabbix_server.log
39
40### Option: LogFileSize
41#	Maximum size of log file in MB.
42#	0 - disable automatic log rotation.
43#
44# Mandatory: no
45# Range: 0-1024
46# Default:
47# LogFileSize=1
48
49### Option: DebugLevel
50#	Specifies debug level:
51#	0 - basic information about starting and stopping of Zabbix processes
52#	1 - critical information
53#	2 - error information
54#	3 - warnings
55#	4 - for debugging (produces lots of information)
56#	5 - extended debugging (produces even more information)
57#
58# Mandatory: no
59# Range: 0-5
60# Default:
61# DebugLevel=3
62
63### Option: PidFile
64#	Name of PID file.
65#
66# Mandatory: no
67# Default:
68# PidFile=/tmp/zabbix_server.pid
69
70### Option: SocketDir
71#	IPC socket directory.
72#		Directory to store IPC sockets used by internal Zabbix services.
73#
74# Mandatory: no
75# Default:
76# SocketDir=/tmp
77
78### Option: DBHost
79#	Database host name.
80#	If set to localhost, socket is used for MySQL.
81#	If set to empty string, socket is used for PostgreSQL.
82#	If set to empty string, the Net Service Name connection method is used to connect to Oracle database; also see
83#	the TNS_ADMIN environment variable to specify the directory where the tnsnames.ora file is located.
84#
85# Mandatory: no
86# Default:
87# DBHost=localhost
88
89### Option: DBName
90#	Database name.
91#	If the Net Service Name connection method is used to connect to Oracle database, specify the service name from
92#	the tnsnames.ora file or set to empty string; also see the TWO_TASK environment variable if DBName is set to
93#	empty string.
94#
95# Mandatory: yes
96# Default:
97# DBName=
98
99DBName=zabbix
100
101### Option: DBSchema
102#	Schema name. Used for PostgreSQL.
103#
104# Mandatory: no
105# Default:
106# DBSchema=
107
108### Option: DBUser
109#	Database user.
110#
111# Mandatory: no
112# Default:
113# DBUser=
114
115DBUser=zabbix
116
117### Option: DBPassword
118#	Database password.
119#	Comment this line if no password is used.
120#
121# Mandatory: no
122# Default:
123# DBPassword=
124
125### Option: DBSocket
126#	Path to MySQL socket.
127#
128# Mandatory: no
129# Default:
130# DBSocket=
131
132### Option: DBPort
133#	Database port when not using local socket.
134#	If the Net Service Name connection method is used to connect to Oracle database, the port number from the
135#	tnsnames.ora file will be used. The port number set here will be ignored.
136#
137# Mandatory: no
138# Range: 1024-65535
139# Default:
140# DBPort=
141
142### Option: HistoryStorageURL
143#	History storage HTTP[S] URL.
144#
145# Mandatory: no
146# Default:
147# HistoryStorageURL=
148
149### Option: HistoryStorageTypes
150#	Comma separated list of value types to be sent to the history storage.
151#
152# Mandatory: no
153# Default:
154# HistoryStorageTypes=uint,dbl,str,log,text
155
156### Option: HistoryStorageDateIndex
157#	Enable preprocessing of history values in history storage to store values in different indices based on date.
158#	0 - disable
159#	1 - enable
160#
161# Mandatory: no
162# Default:
163# HistoryStorageDateIndex=0
164
165### Option: ExportDir
166#	Directory for real time export of events, history and trends in newline delimited JSON format.
167#	If set, enables real time export.
168#
169# Mandatory: no
170# Default:
171# ExportDir=
172
173### Option: ExportFileSize
174#	Maximum size per export file in bytes.
175#	Only used for rotation if ExportDir is set.
176#
177# Mandatory: no
178# Range: 1M-1G
179# Default:
180# ExportFileSize=1G
181
182### Option: ExportType
183#	List of comma delimited types of real time export - allows to control export entities by their
184#	type (events, history, trends) individually.
185#	Valid only if ExportDir is set.
186#
187# Mandatory: no
188# Default:
189# ExportType=events,history,trends
190
191############ ADVANCED PARAMETERS ################
192
193### Option: StartPollers
194#	Number of pre-forked instances of pollers.
195#
196# Mandatory: no
197# Range: 0-1000
198# Default:
199# StartPollers=5
200
201### Option: StartIPMIPollers
202#	Number of pre-forked instances of IPMI pollers.
203#		The IPMI manager process is automatically started when at least one IPMI poller is started.
204#
205# Mandatory: no
206# Range: 0-1000
207# Default:
208# StartIPMIPollers=0
209
210### Option: StartPreprocessors
211#	Number of pre-forked instances of preprocessing workers.
212#		The preprocessing manager process is automatically started when preprocessor worker is started.
213#
214# Mandatory: no
215# Range: 1-1000
216# Default:
217# StartPreprocessors=3
218
219### Option: StartPollersUnreachable
220#	Number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java).
221#	At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers
222#	are started.
223#
224# Mandatory: no
225# Range: 0-1000
226# Default:
227# StartPollersUnreachable=1
228
229### Option: StartHistoryPollers
230#	Number of pre-forked instances of history pollers.
231#	Only required for calculated, aggregated and internal checks.
232#	A database connection is required for each history poller instance.
233#
234# Mandatory: no
235# Range: 0-1000
236# Default:
237# StartHistoryPollers=5
238
239### Option: StartTrappers
240#	Number of pre-forked instances of trappers.
241#	Trappers accept incoming connections from Zabbix sender, active agents and active proxies.
242#	At least one trapper process must be running to display server availability and view queue
243#	in the frontend.
244#
245# Mandatory: no
246# Range: 0-1000
247# Default:
248# StartTrappers=5
249
250### Option: StartPingers
251#	Number of pre-forked instances of ICMP pingers.
252#
253# Mandatory: no
254# Range: 0-1000
255# Default:
256# StartPingers=1
257
258### Option: StartDiscoverers
259#	Number of pre-forked instances of discoverers.
260#
261# Mandatory: no
262# Range: 0-250
263# Default:
264# StartDiscoverers=1
265
266### Option: StartHTTPPollers
267#	Number of pre-forked instances of HTTP pollers.
268#
269# Mandatory: no
270# Range: 0-1000
271# Default:
272# StartHTTPPollers=1
273
274### Option: StartTimers
275#	Number of pre-forked instances of timers.
276#	Timers process maintenance periods.
277#	Only the first timer process handles host maintenance updates. Problem suppression updates are shared
278#	between all timers.
279#
280# Mandatory: no
281# Range: 1-1000
282# Default:
283# StartTimers=1
284
285### Option: StartEscalators
286#	Number of pre-forked instances of escalators.
287#
288# Mandatory: no
289# Range: 0-100
290# Default:
291# StartEscalators=1
292
293### Option: StartAlerters
294#	Number of pre-forked instances of alerters.
295#	Alerters send the notifications created by action operations.
296#
297# Mandatory: no
298# Range: 0-100
299# Default:
300# StartAlerters=3
301
302### Option: JavaGateway
303#	IP address (or hostname) of Zabbix Java gateway.
304#	Only required if Java pollers are started.
305#
306# Mandatory: no
307# Default:
308# JavaGateway=
309
310### Option: JavaGatewayPort
311#	Port that Zabbix Java gateway listens on.
312#
313# Mandatory: no
314# Range: 1024-32767
315# Default:
316# JavaGatewayPort=10052
317
318### Option: StartJavaPollers
319#	Number of pre-forked instances of Java pollers.
320#
321# Mandatory: no
322# Range: 0-1000
323# Default:
324# StartJavaPollers=0
325
326### Option: StartVMwareCollectors
327#	Number of pre-forked vmware collector instances.
328#
329# Mandatory: no
330# Range: 0-250
331# Default:
332# StartVMwareCollectors=0
333
334### Option: VMwareFrequency
335#	How often Zabbix will connect to VMware service to obtain a new data.
336#
337# Mandatory: no
338# Range: 10-86400
339# Default:
340# VMwareFrequency=60
341
342### Option: VMwarePerfFrequency
343#	How often Zabbix will connect to VMware service to obtain performance data.
344#
345# Mandatory: no
346# Range: 10-86400
347# Default:
348# VMwarePerfFrequency=60
349
350### Option: VMwareCacheSize
351#	Size of VMware cache, in bytes.
352#	Shared memory size for storing VMware data.
353#	Only used if VMware collectors are started.
354#
355# Mandatory: no
356# Range: 256K-2G
357# Default:
358# VMwareCacheSize=8M
359
360### Option: VMwareTimeout
361#	Specifies how many seconds vmware collector waits for response from VMware service.
362#
363# Mandatory: no
364# Range: 1-300
365# Default:
366# VMwareTimeout=10
367
368### Option: SNMPTrapperFile
369#	Temporary file used for passing data from SNMP trap daemon to the server.
370#	Must be the same as in zabbix_trap_receiver.pl or SNMPTT configuration file.
371#
372# Mandatory: no
373# Default:
374# SNMPTrapperFile=/tmp/zabbix_traps.tmp
375
376### Option: StartSNMPTrapper
377#	If 1, SNMP trapper process is started.
378#
379# Mandatory: no
380# Range: 0-1
381# Default:
382# StartSNMPTrapper=0
383
384### Option: ListenIP
385#	List of comma delimited IP addresses that the trapper should listen on.
386#	Trapper will listen on all network interfaces if this parameter is missing.
387#
388# Mandatory: no
389# Default:
390# ListenIP=0.0.0.0
391
392### Option: HousekeepingFrequency
393#	How often Zabbix will perform housekeeping procedure (in hours).
394#	Housekeeping is removing outdated information from the database.
395#	To prevent Housekeeper from being overloaded, no more than 4 times HousekeepingFrequency
396#	hours of outdated information are deleted in one housekeeping cycle, for each item.
397#	To lower load on server startup housekeeping is postponed for 30 minutes after server start.
398#	With HousekeepingFrequency=0 the housekeeper can be only executed using the runtime control option.
399#	In this case the period of outdated information deleted in one housekeeping cycle is 4 times the
400#	period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days.
401#
402# Mandatory: no
403# Range: 0-24
404# Default:
405# HousekeepingFrequency=1
406
407### Option: MaxHousekeeperDelete
408#	The table "housekeeper" contains "tasks" for housekeeping procedure in the format:
409#	[housekeeperid], [tablename], [field], [value].
410#	No more than 'MaxHousekeeperDelete' rows (corresponding to [tablename], [field], [value])
411#	will be deleted per one task in one housekeeping cycle.
412#	If set to 0 then no limit is used at all. In this case you must know what you are doing!
413#
414# Mandatory: no
415# Range: 0-1000000
416# Default:
417# MaxHousekeeperDelete=5000
418
419### Option: CacheSize
420#	Size of configuration cache, in bytes.
421#	Shared memory size for storing host, item and trigger data.
422#
423# Mandatory: no
424# Range: 128K-64G
425# Default:
426# CacheSize=8M
427
428### Option: CacheUpdateFrequency
429#	How often Zabbix will perform update of configuration cache, in seconds.
430#
431# Mandatory: no
432# Range: 1-3600
433# Default:
434# CacheUpdateFrequency=60
435
436### Option: StartDBSyncers
437#	Number of pre-forked instances of DB Syncers.
438#
439# Mandatory: no
440# Range: 1-100
441# Default:
442# StartDBSyncers=4
443
444### Option: HistoryCacheSize
445#	Size of history cache, in bytes.
446#	Shared memory size for storing history data.
447#
448# Mandatory: no
449# Range: 128K-2G
450# Default:
451# HistoryCacheSize=16M
452
453### Option: HistoryIndexCacheSize
454#	Size of history index cache, in bytes.
455#	Shared memory size for indexing history cache.
456#
457# Mandatory: no
458# Range: 128K-2G
459# Default:
460# HistoryIndexCacheSize=4M
461
462### Option: TrendCacheSize
463#	Size of trend write cache, in bytes.
464#	Shared memory size for storing trends data.
465#
466# Mandatory: no
467# Range: 128K-2G
468# Default:
469# TrendCacheSize=4M
470
471### Option: TrendFunctionCacheSize
472#	Size of trend function cache, in bytes.
473#	Shared memory size for caching calculated trend function data.
474#
475# Mandatory: no
476# Range: 128K-2G
477# Default:
478# TrendFunctionCacheSize=4M
479
480### Option: ValueCacheSize
481#	Size of history value cache, in bytes.
482#	Shared memory size for caching item history data requests.
483#	Setting to 0 disables value cache.
484#
485# Mandatory: no
486# Range: 0,128K-64G
487# Default:
488# ValueCacheSize=8M
489
490### Option: Timeout
491#	Specifies how long we wait for agent, SNMP device or external check (in seconds).
492#
493# Mandatory: no
494# Range: 1-30
495# Default:
496# Timeout=3
497
498Timeout=4
499
500### Option: TrapperTimeout
501#	Specifies how many seconds trapper may spend processing new data.
502#
503# Mandatory: no
504# Range: 1-300
505# Default:
506# TrapperTimeout=300
507
508### Option: UnreachablePeriod
509#	After how many seconds of unreachability treat a host as unavailable.
510#
511# Mandatory: no
512# Range: 1-3600
513# Default:
514# UnreachablePeriod=45
515
516### Option: UnavailableDelay
517#	How often host is checked for availability during the unavailability period, in seconds.
518#
519# Mandatory: no
520# Range: 1-3600
521# Default:
522# UnavailableDelay=60
523
524### Option: UnreachableDelay
525#	How often host is checked for availability during the unreachability period, in seconds.
526#
527# Mandatory: no
528# Range: 1-3600
529# Default:
530# UnreachableDelay=15
531
532### Option: AlertScriptsPath
533#	Full path to location of custom alert scripts.
534#	Default depends on compilation options.
535#	To see the default path run command "zabbix_server --help".
536#
537# Mandatory: no
538# Default:
539# AlertScriptsPath=${datadir}/zabbix/alertscripts
540
541### Option: ExternalScripts
542#	Full path to location of external scripts.
543#	Default depends on compilation options.
544#	To see the default path run command "zabbix_server --help".
545#
546# Mandatory: no
547# Default:
548# ExternalScripts=${datadir}/zabbix/externalscripts
549
550### Option: FpingLocation
551#	Location of fping.
552#	Make sure that fping binary has root ownership and SUID flag set.
553#
554# Mandatory: no
555# Default:
556# FpingLocation=/usr/local/sbin/fping
557
558### Option: Fping6Location
559#	Location of fping6.
560#	Make sure that fping6 binary has root ownership and SUID flag set.
561#	Make empty if your fping utility is capable to process IPv6 addresses.
562#
563# Mandatory: no
564# Default:
565# Fping6Location=/usr/local/sbin/fping6
566
567### Option: SSHKeyLocation
568#	Location of public and private keys for SSH checks and actions.
569#
570# Mandatory: no
571# Default:
572# SSHKeyLocation=
573
574### Option: LogSlowQueries
575#	How long a database query may take before being logged (in milliseconds).
576#	Only works if DebugLevel set to 3, 4 or 5.
577#	0 - don't log slow queries.
578#
579# Mandatory: no
580# Range: 1-3600000
581# Default:
582# LogSlowQueries=0
583
584LogSlowQueries=3000
585
586### Option: TmpDir
587#	Temporary directory.
588#
589# Mandatory: no
590# Default:
591# TmpDir=/tmp
592
593### Option: StartProxyPollers
594#	Number of pre-forked instances of pollers for passive proxies.
595#
596# Mandatory: no
597# Range: 0-250
598# Default:
599# StartProxyPollers=1
600
601### Option: ProxyConfigFrequency
602#	How often Zabbix Server sends configuration data to a Zabbix Proxy in seconds.
603#	This parameter is used only for proxies in the passive mode.
604#
605# Mandatory: no
606# Range: 1-3600*24*7
607# Default:
608# ProxyConfigFrequency=3600
609
610### Option: ProxyDataFrequency
611#	How often Zabbix Server requests history data from a Zabbix Proxy in seconds.
612#	This parameter is used only for proxies in the passive mode.
613#
614# Mandatory: no
615# Range: 1-3600
616# Default:
617# ProxyDataFrequency=1
618
619### Option: StartLLDProcessors
620#	Number of pre-forked instances of low level discovery processors.
621#
622# Mandatory: no
623# Range: 1-100
624# Default:
625# StartLLDProcessors=2
626
627### Option: AllowRoot
628#	Allow the server to run as 'root'. If disabled and the server is started by 'root', the server
629#	will try to switch to the user specified by the User configuration option instead.
630#	Has no effect if started under a regular user.
631#	0 - do not allow
632#	1 - allow
633#
634# Mandatory: no
635# Default:
636# AllowRoot=0
637
638### Option: User
639#	Drop privileges to a specific, existing user on the system.
640#	Only has effect if run as 'root' and AllowRoot is disabled.
641#
642# Mandatory: no
643# Default:
644# User=zabbix
645
646### Option: Include
647#	You may include individual files or all files in a directory in the configuration file.
648#	Installing Zabbix will create include directory in /usr/local/etc/zabbix54, unless modified during the compile time.
649#
650# Mandatory: no
651# Default:
652# Include=
653
654# Include=/usr/local/etc/zabbix54/zabbix_server.general.conf
655# Include=/usr/local/etc/zabbix54/zabbix_server.conf.d/
656# Include=/usr/local/etc/zabbix54/zabbix_server.conf.d/*.conf
657
658### Option: SSLCertLocation
659#	Location of SSL client certificates.
660#	This parameter is used only in web monitoring.
661#	Default depends on compilation options.
662#	To see the default path run command "zabbix_server --help".
663#
664# Mandatory: no
665# Default:
666# SSLCertLocation=${datadir}/zabbix/ssl/certs
667
668### Option: SSLKeyLocation
669#	Location of private keys for SSL client certificates.
670#	This parameter is used only in web monitoring.
671#	Default depends on compilation options.
672#	To see the default path run command "zabbix_server --help".
673#
674# Mandatory: no
675# Default:
676# SSLKeyLocation=${datadir}/zabbix/ssl/keys
677
678### Option: SSLCALocation
679#	Override the location of certificate authority (CA) files for SSL server certificate verification.
680#	If not set, system-wide directory will be used.
681#	This parameter is used in web monitoring, SMTP authentication, HTTP agent items and for communication with Vault.
682#
683# Mandatory: no
684# Default:
685# SSLCALocation=
686
687### Option: StatsAllowedIP
688#	List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of external Zabbix instances.
689#	Stats request will be accepted only from the addresses listed here. If this parameter is not set no stats requests
690#	will be accepted.
691#	If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally
692#	and '::/0' will allow any IPv4 or IPv6 address.
693#	'0.0.0.0/0' can be used to allow any IPv4 address.
694#	Example: StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com
695#
696# Mandatory: no
697# Default:
698# StatsAllowedIP=
699StatsAllowedIP=127.0.0.1
700
701####### LOADABLE MODULES #######
702
703### Option: LoadModulePath
704#	Full path to location of server modules.
705#	Default depends on compilation options.
706#	To see the default path run command "zabbix_server --help".
707#
708# Mandatory: no
709# Default:
710# LoadModulePath=${libdir}/modules
711
712### Option: LoadModule
713#	Module to load at server startup. Modules are used to extend functionality of the server.
714#	Formats:
715#		LoadModule=<module.so>
716#		LoadModule=<path/module.so>
717#		LoadModule=</abs_path/module.so>
718#	Either the module must be located in directory specified by LoadModulePath or the path must precede the module name.
719#	If the preceding path is absolute (starts with '/') then LoadModulePath is ignored.
720#	It is allowed to include multiple LoadModule parameters.
721#
722# Mandatory: no
723# Default:
724# LoadModule=
725
726####### TLS-RELATED PARAMETERS #######
727
728### Option: TLSCAFile
729#	Full pathname of a file containing the top-level CA(s) certificates for
730#	peer certificate verification.
731#
732# Mandatory: no
733# Default:
734# TLSCAFile=
735
736### Option: TLSCRLFile
737#	Full pathname of a file containing revoked certificates.
738#
739# Mandatory: no
740# Default:
741# TLSCRLFile=
742
743### Option: TLSCertFile
744#	Full pathname of a file containing the server certificate or certificate chain.
745#
746# Mandatory: no
747# Default:
748# TLSCertFile=
749
750### Option: TLSKeyFile
751#	Full pathname of a file containing the server private key.
752#
753# Mandatory: no
754# Default:
755# TLSKeyFile=
756
757####### For advanced users - TLS ciphersuite selection criteria #######
758
759### Option: TLSCipherCert13
760#	Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
761#	Override the default ciphersuite selection criteria for certificate-based encryption.
762#
763# Mandatory: no
764# Default:
765# TLSCipherCert13=
766
767### Option: TLSCipherCert
768#	GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
769#	Override the default ciphersuite selection criteria for certificate-based encryption.
770#	Example for GnuTLS:
771#		NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
772#	Example for OpenSSL:
773#		EECDH+aRSA+AES128:RSA+aRSA+AES128
774#
775# Mandatory: no
776# Default:
777# TLSCipherCert=
778
779### Option: TLSCipherPSK13
780#	Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
781#	Override the default ciphersuite selection criteria for PSK-based encryption.
782#	Example:
783#		TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
784#
785# Mandatory: no
786# Default:
787# TLSCipherPSK13=
788
789### Option: TLSCipherPSK
790#	GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
791#	Override the default ciphersuite selection criteria for PSK-based encryption.
792#	Example for GnuTLS:
793#		NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL
794#	Example for OpenSSL:
795#		kECDHEPSK+AES128:kPSK+AES128
796#
797# Mandatory: no
798# Default:
799# TLSCipherPSK=
800
801### Option: TLSCipherAll13
802#	Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3.
803#	Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
804#	Example:
805#		TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256
806#
807# Mandatory: no
808# Default:
809# TLSCipherAll13=
810
811### Option: TLSCipherAll
812#	GnuTLS priority string or OpenSSL (TLS 1.2) cipher string.
813#	Override the default ciphersuite selection criteria for certificate- and PSK-based encryption.
814#	Example for GnuTLS:
815#		NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509
816#	Example for OpenSSL:
817#		EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128
818#
819# Mandatory: no
820# Default:
821# TLSCipherAll=
822
823### Option: DBTLSConnect
824#	Setting this option enforces to use TLS connection to database.
825#	required    - connect using TLS
826#	verify_ca   - connect using TLS and verify certificate
827#	verify_full - connect using TLS, verify certificate and verify that database identity specified by DBHost
828#	              matches its certificate
829#	On MySQL starting from 5.7.11 and PostgreSQL following values are supported: "required", "verify_ca" and
830#	"verify_full".
831#	On MariaDB starting from version 10.2.6 "required" and "verify_full" values are supported.
832#	Default is not to set any option and behavior depends on database configuration
833#
834# Mandatory: no
835# Default:
836# DBTLSConnect=
837
838### Option: DBTLSCAFile
839#	Full pathname of a file containing the top-level CA(s) certificates for database certificate verification.
840#	Supported only for MySQL and PostgreSQL
841#
842# Mandatory: no
843#	(yes, if DBTLSConnect set to one of: verify_ca, verify_full)
844# Default:
845# DBTLSCAFile=
846
847### Option: DBTLSCertFile
848#	Full pathname of file containing Zabbix server certificate for authenticating to database.
849#	Supported only for MySQL and PostgreSQL
850#
851# Mandatory: no
852# Default:
853# DBTLSCertFile=
854
855### Option: DBTLSKeyFile
856#	Full pathname of file containing the private key for authenticating to database.
857#	Supported only for MySQL and PostgreSQL
858#
859# Mandatory: no
860# Default:
861# DBTLSKeyFile=
862
863### Option: DBTLSCipher
864#	The list of encryption ciphers that Zabbix server permits for TLS protocols up through TLSv1.2
865#	Supported only for MySQL
866#
867# Mandatory no
868# Default:
869# DBTLSCipher=
870
871### Option: DBTLSCipher13
872#	The list of encryption ciphersuites that Zabbix server permits for TLSv1.3 protocol
873#	Supported only for MySQL, starting from version 8.0.16
874#
875# Mandatory no
876# Default:
877# DBTLSCipher13=
878
879### Option: VaultToken
880#	Vault authentication token that should have been generated exclusively for Zabbix server with read only permission
881#	to paths specified in Vault macros and read only permission to path specified in optional VaultDBPath
882#	configuration parameter.
883#	It is an error if VaultToken and VAULT_TOKEN environment variable are defined at the same time.
884#
885# Mandatory: no
886# Default:
887# VaultToken=
888
889### Option: VaultURL
890#	Vault server HTTP[S] URL. System-wide CA certificates directory will be used if SSLCALocation is not specified.
891#
892# Mandatory: no
893# Default:
894# VaultURL=https://127.0.0.1:8200
895
896### Option: VaultDBPath
897#	Vault path from where credentials for database will be retrieved by keys 'password' and 'username'.
898#	Example: secret/zabbix/database
899#	This option can only be used if DBUser and DBPassword are not specified.
900#
901# Mandatory: no
902# Default:
903# VaultDBPath=
904
905### Option: StartReportWriters
906#	Number of pre-forked report writer instances.
907#
908# Mandatory: no
909# Range: 0-100
910# Default:
911# StartReportWriters=0
912
913### Option: WebServiceURL
914#	URL to Zabbix web service, used to perform web related tasks.
915#	Example: http://localhost:10053/report
916#
917# Mandatory: no
918# Default:
919# WebServiceURL=
920
921####### For advanced users - TCP-related fine-tuning parameters #######
922
923## Option: ListenBacklog
924#       The maximum number of pending connections in the queue. This parameter is passed to
925#       listen() function as argument 'backlog' (see "man listen").
926#
927# Mandatory: no
928# Range: 0 - INT_MAX (depends on system, too large values may be silently truncated to implementation-specified maximum)
929# Default: SOMAXCONN (hard-coded constant, depends on system)
930# ListenBacklog=
931