1# This is a configuration file for Zabbix server daemon 2# To get more information about Zabbix, visit http://www.zabbix.com 3 4############ GENERAL PARAMETERS ################# 5 6### Option: ListenPort 7# Listen port for trapper. 8# 9# Mandatory: no 10# Range: 1024-32767 11# Default: 12# ListenPort=10051 13 14### Option: SourceIP 15# Source IP address for outgoing connections. 16# 17# Mandatory: no 18# Default: 19# SourceIP= 20 21### Option: LogType 22# Specifies where log messages are written to: 23# system - syslog 24# file - file specified with LogFile parameter 25# console - standard output 26# 27# Mandatory: no 28# Default: 29# LogType=file 30 31### Option: LogFile 32# Log file name for LogType 'file' parameter. 33# 34# Mandatory: yes, if LogType is set to file, otherwise no 35# Default: 36# LogFile= 37 38LogFile=/tmp/zabbix_server.log 39 40### Option: LogFileSize 41# Maximum size of log file in MB. 42# 0 - disable automatic log rotation. 43# 44# Mandatory: no 45# Range: 0-1024 46# Default: 47# LogFileSize=1 48 49### Option: DebugLevel 50# Specifies debug level: 51# 0 - basic information about starting and stopping of Zabbix processes 52# 1 - critical information 53# 2 - error information 54# 3 - warnings 55# 4 - for debugging (produces lots of information) 56# 5 - extended debugging (produces even more information) 57# 58# Mandatory: no 59# Range: 0-5 60# Default: 61# DebugLevel=3 62 63### Option: PidFile 64# Name of PID file. 65# 66# Mandatory: no 67# Default: 68# PidFile=/tmp/zabbix_server.pid 69 70### Option: SocketDir 71# IPC socket directory. 72# Directory to store IPC sockets used by internal Zabbix services. 73# 74# Mandatory: no 75# Default: 76# SocketDir=/tmp 77 78### Option: DBHost 79# Database host name. 80# If set to localhost, socket is used for MySQL. 81# If set to empty string, socket is used for PostgreSQL. 82# If set to empty string, the Net Service Name connection method is used to connect to Oracle database; also see 83# the TNS_ADMIN environment variable to specify the directory where the tnsnames.ora file is located. 84# 85# Mandatory: no 86# Default: 87# DBHost=localhost 88 89### Option: DBName 90# Database name. 91# If the Net Service Name connection method is used to connect to Oracle database, specify the service name from 92# the tnsnames.ora file or set to empty string; also see the TWO_TASK environment variable if DBName is set to 93# empty string. 94# 95# Mandatory: yes 96# Default: 97# DBName= 98 99DBName=zabbix 100 101### Option: DBSchema 102# Schema name. Used for PostgreSQL. 103# 104# Mandatory: no 105# Default: 106# DBSchema= 107 108### Option: DBUser 109# Database user. 110# 111# Mandatory: no 112# Default: 113# DBUser= 114 115DBUser=zabbix 116 117### Option: DBPassword 118# Database password. 119# Comment this line if no password is used. 120# 121# Mandatory: no 122# Default: 123# DBPassword= 124 125### Option: DBSocket 126# Path to MySQL socket. 127# 128# Mandatory: no 129# Default: 130# DBSocket= 131 132### Option: DBPort 133# Database port when not using local socket. 134# If the Net Service Name connection method is used to connect to Oracle database, the port number from the 135# tnsnames.ora file will be used. The port number set here will be ignored. 136# 137# Mandatory: no 138# Range: 1024-65535 139# Default: 140# DBPort= 141 142### Option: HistoryStorageURL 143# History storage HTTP[S] URL. 144# 145# Mandatory: no 146# Default: 147# HistoryStorageURL= 148 149### Option: HistoryStorageTypes 150# Comma separated list of value types to be sent to the history storage. 151# 152# Mandatory: no 153# Default: 154# HistoryStorageTypes=uint,dbl,str,log,text 155 156### Option: HistoryStorageDateIndex 157# Enable preprocessing of history values in history storage to store values in different indices based on date. 158# 0 - disable 159# 1 - enable 160# 161# Mandatory: no 162# Default: 163# HistoryStorageDateIndex=0 164 165### Option: ExportDir 166# Directory for real time export of events, history and trends in newline delimited JSON format. 167# If set, enables real time export. 168# 169# Mandatory: no 170# Default: 171# ExportDir= 172 173### Option: ExportFileSize 174# Maximum size per export file in bytes. 175# Only used for rotation if ExportDir is set. 176# 177# Mandatory: no 178# Range: 1M-1G 179# Default: 180# ExportFileSize=1G 181 182### Option: ExportType 183# List of comma delimited types of real time export - allows to control export entities by their 184# type (events, history, trends) individually. 185# Valid only if ExportDir is set. 186# 187# Mandatory: no 188# Default: 189# ExportType=events,history,trends 190 191############ ADVANCED PARAMETERS ################ 192 193### Option: StartPollers 194# Number of pre-forked instances of pollers. 195# 196# Mandatory: no 197# Range: 0-1000 198# Default: 199# StartPollers=5 200 201### Option: StartIPMIPollers 202# Number of pre-forked instances of IPMI pollers. 203# The IPMI manager process is automatically started when at least one IPMI poller is started. 204# 205# Mandatory: no 206# Range: 0-1000 207# Default: 208# StartIPMIPollers=0 209 210### Option: StartPreprocessors 211# Number of pre-forked instances of preprocessing workers. 212# The preprocessing manager process is automatically started when preprocessor worker is started. 213# 214# Mandatory: no 215# Range: 1-1000 216# Default: 217# StartPreprocessors=3 218 219### Option: StartPollersUnreachable 220# Number of pre-forked instances of pollers for unreachable hosts (including IPMI and Java). 221# At least one poller for unreachable hosts must be running if regular, IPMI or Java pollers 222# are started. 223# 224# Mandatory: no 225# Range: 0-1000 226# Default: 227# StartPollersUnreachable=1 228 229### Option: StartHistoryPollers 230# Number of pre-forked instances of history pollers. 231# Only required for calculated, aggregated and internal checks. 232# A database connection is required for each history poller instance. 233# 234# Mandatory: no 235# Range: 0-1000 236# Default: 237# StartHistoryPollers=5 238 239### Option: StartTrappers 240# Number of pre-forked instances of trappers. 241# Trappers accept incoming connections from Zabbix sender, active agents and active proxies. 242# At least one trapper process must be running to display server availability and view queue 243# in the frontend. 244# 245# Mandatory: no 246# Range: 0-1000 247# Default: 248# StartTrappers=5 249 250### Option: StartPingers 251# Number of pre-forked instances of ICMP pingers. 252# 253# Mandatory: no 254# Range: 0-1000 255# Default: 256# StartPingers=1 257 258### Option: StartDiscoverers 259# Number of pre-forked instances of discoverers. 260# 261# Mandatory: no 262# Range: 0-250 263# Default: 264# StartDiscoverers=1 265 266### Option: StartHTTPPollers 267# Number of pre-forked instances of HTTP pollers. 268# 269# Mandatory: no 270# Range: 0-1000 271# Default: 272# StartHTTPPollers=1 273 274### Option: StartTimers 275# Number of pre-forked instances of timers. 276# Timers process maintenance periods. 277# Only the first timer process handles host maintenance updates. Problem suppression updates are shared 278# between all timers. 279# 280# Mandatory: no 281# Range: 1-1000 282# Default: 283# StartTimers=1 284 285### Option: StartEscalators 286# Number of pre-forked instances of escalators. 287# 288# Mandatory: no 289# Range: 0-100 290# Default: 291# StartEscalators=1 292 293### Option: StartAlerters 294# Number of pre-forked instances of alerters. 295# Alerters send the notifications created by action operations. 296# 297# Mandatory: no 298# Range: 0-100 299# Default: 300# StartAlerters=3 301 302### Option: JavaGateway 303# IP address (or hostname) of Zabbix Java gateway. 304# Only required if Java pollers are started. 305# 306# Mandatory: no 307# Default: 308# JavaGateway= 309 310### Option: JavaGatewayPort 311# Port that Zabbix Java gateway listens on. 312# 313# Mandatory: no 314# Range: 1024-32767 315# Default: 316# JavaGatewayPort=10052 317 318### Option: StartJavaPollers 319# Number of pre-forked instances of Java pollers. 320# 321# Mandatory: no 322# Range: 0-1000 323# Default: 324# StartJavaPollers=0 325 326### Option: StartVMwareCollectors 327# Number of pre-forked vmware collector instances. 328# 329# Mandatory: no 330# Range: 0-250 331# Default: 332# StartVMwareCollectors=0 333 334### Option: VMwareFrequency 335# How often Zabbix will connect to VMware service to obtain a new data. 336# 337# Mandatory: no 338# Range: 10-86400 339# Default: 340# VMwareFrequency=60 341 342### Option: VMwarePerfFrequency 343# How often Zabbix will connect to VMware service to obtain performance data. 344# 345# Mandatory: no 346# Range: 10-86400 347# Default: 348# VMwarePerfFrequency=60 349 350### Option: VMwareCacheSize 351# Size of VMware cache, in bytes. 352# Shared memory size for storing VMware data. 353# Only used if VMware collectors are started. 354# 355# Mandatory: no 356# Range: 256K-2G 357# Default: 358# VMwareCacheSize=8M 359 360### Option: VMwareTimeout 361# Specifies how many seconds vmware collector waits for response from VMware service. 362# 363# Mandatory: no 364# Range: 1-300 365# Default: 366# VMwareTimeout=10 367 368### Option: SNMPTrapperFile 369# Temporary file used for passing data from SNMP trap daemon to the server. 370# Must be the same as in zabbix_trap_receiver.pl or SNMPTT configuration file. 371# 372# Mandatory: no 373# Default: 374# SNMPTrapperFile=/tmp/zabbix_traps.tmp 375 376### Option: StartSNMPTrapper 377# If 1, SNMP trapper process is started. 378# 379# Mandatory: no 380# Range: 0-1 381# Default: 382# StartSNMPTrapper=0 383 384### Option: ListenIP 385# List of comma delimited IP addresses that the trapper should listen on. 386# Trapper will listen on all network interfaces if this parameter is missing. 387# 388# Mandatory: no 389# Default: 390# ListenIP=0.0.0.0 391 392### Option: HousekeepingFrequency 393# How often Zabbix will perform housekeeping procedure (in hours). 394# Housekeeping is removing outdated information from the database. 395# To prevent Housekeeper from being overloaded, no more than 4 times HousekeepingFrequency 396# hours of outdated information are deleted in one housekeeping cycle, for each item. 397# To lower load on server startup housekeeping is postponed for 30 minutes after server start. 398# With HousekeepingFrequency=0 the housekeeper can be only executed using the runtime control option. 399# In this case the period of outdated information deleted in one housekeeping cycle is 4 times the 400# period since the last housekeeping cycle, but not less than 4 hours and not greater than 4 days. 401# 402# Mandatory: no 403# Range: 0-24 404# Default: 405# HousekeepingFrequency=1 406 407### Option: MaxHousekeeperDelete 408# The table "housekeeper" contains "tasks" for housekeeping procedure in the format: 409# [housekeeperid], [tablename], [field], [value]. 410# No more than 'MaxHousekeeperDelete' rows (corresponding to [tablename], [field], [value]) 411# will be deleted per one task in one housekeeping cycle. 412# If set to 0 then no limit is used at all. In this case you must know what you are doing! 413# 414# Mandatory: no 415# Range: 0-1000000 416# Default: 417# MaxHousekeeperDelete=5000 418 419### Option: CacheSize 420# Size of configuration cache, in bytes. 421# Shared memory size for storing host, item and trigger data. 422# 423# Mandatory: no 424# Range: 128K-64G 425# Default: 426# CacheSize=8M 427 428### Option: CacheUpdateFrequency 429# How often Zabbix will perform update of configuration cache, in seconds. 430# 431# Mandatory: no 432# Range: 1-3600 433# Default: 434# CacheUpdateFrequency=60 435 436### Option: StartDBSyncers 437# Number of pre-forked instances of DB Syncers. 438# 439# Mandatory: no 440# Range: 1-100 441# Default: 442# StartDBSyncers=4 443 444### Option: HistoryCacheSize 445# Size of history cache, in bytes. 446# Shared memory size for storing history data. 447# 448# Mandatory: no 449# Range: 128K-2G 450# Default: 451# HistoryCacheSize=16M 452 453### Option: HistoryIndexCacheSize 454# Size of history index cache, in bytes. 455# Shared memory size for indexing history cache. 456# 457# Mandatory: no 458# Range: 128K-2G 459# Default: 460# HistoryIndexCacheSize=4M 461 462### Option: TrendCacheSize 463# Size of trend write cache, in bytes. 464# Shared memory size for storing trends data. 465# 466# Mandatory: no 467# Range: 128K-2G 468# Default: 469# TrendCacheSize=4M 470 471### Option: TrendFunctionCacheSize 472# Size of trend function cache, in bytes. 473# Shared memory size for caching calculated trend function data. 474# 475# Mandatory: no 476# Range: 128K-2G 477# Default: 478# TrendFunctionCacheSize=4M 479 480### Option: ValueCacheSize 481# Size of history value cache, in bytes. 482# Shared memory size for caching item history data requests. 483# Setting to 0 disables value cache. 484# 485# Mandatory: no 486# Range: 0,128K-64G 487# Default: 488# ValueCacheSize=8M 489 490### Option: Timeout 491# Specifies how long we wait for agent, SNMP device or external check (in seconds). 492# 493# Mandatory: no 494# Range: 1-30 495# Default: 496# Timeout=3 497 498Timeout=4 499 500### Option: TrapperTimeout 501# Specifies how many seconds trapper may spend processing new data. 502# 503# Mandatory: no 504# Range: 1-300 505# Default: 506# TrapperTimeout=300 507 508### Option: UnreachablePeriod 509# After how many seconds of unreachability treat a host as unavailable. 510# 511# Mandatory: no 512# Range: 1-3600 513# Default: 514# UnreachablePeriod=45 515 516### Option: UnavailableDelay 517# How often host is checked for availability during the unavailability period, in seconds. 518# 519# Mandatory: no 520# Range: 1-3600 521# Default: 522# UnavailableDelay=60 523 524### Option: UnreachableDelay 525# How often host is checked for availability during the unreachability period, in seconds. 526# 527# Mandatory: no 528# Range: 1-3600 529# Default: 530# UnreachableDelay=15 531 532### Option: AlertScriptsPath 533# Full path to location of custom alert scripts. 534# Default depends on compilation options. 535# To see the default path run command "zabbix_server --help". 536# 537# Mandatory: no 538# Default: 539# AlertScriptsPath=${datadir}/zabbix/alertscripts 540 541### Option: ExternalScripts 542# Full path to location of external scripts. 543# Default depends on compilation options. 544# To see the default path run command "zabbix_server --help". 545# 546# Mandatory: no 547# Default: 548# ExternalScripts=${datadir}/zabbix/externalscripts 549 550### Option: FpingLocation 551# Location of fping. 552# Make sure that fping binary has root ownership and SUID flag set. 553# 554# Mandatory: no 555# Default: 556# FpingLocation=/usr/local/sbin/fping 557 558### Option: Fping6Location 559# Location of fping6. 560# Make sure that fping6 binary has root ownership and SUID flag set. 561# Make empty if your fping utility is capable to process IPv6 addresses. 562# 563# Mandatory: no 564# Default: 565# Fping6Location=/usr/local/sbin/fping6 566 567### Option: SSHKeyLocation 568# Location of public and private keys for SSH checks and actions. 569# 570# Mandatory: no 571# Default: 572# SSHKeyLocation= 573 574### Option: LogSlowQueries 575# How long a database query may take before being logged (in milliseconds). 576# Only works if DebugLevel set to 3, 4 or 5. 577# 0 - don't log slow queries. 578# 579# Mandatory: no 580# Range: 1-3600000 581# Default: 582# LogSlowQueries=0 583 584LogSlowQueries=3000 585 586### Option: TmpDir 587# Temporary directory. 588# 589# Mandatory: no 590# Default: 591# TmpDir=/tmp 592 593### Option: StartProxyPollers 594# Number of pre-forked instances of pollers for passive proxies. 595# 596# Mandatory: no 597# Range: 0-250 598# Default: 599# StartProxyPollers=1 600 601### Option: ProxyConfigFrequency 602# How often Zabbix Server sends configuration data to a Zabbix Proxy in seconds. 603# This parameter is used only for proxies in the passive mode. 604# 605# Mandatory: no 606# Range: 1-3600*24*7 607# Default: 608# ProxyConfigFrequency=3600 609 610### Option: ProxyDataFrequency 611# How often Zabbix Server requests history data from a Zabbix Proxy in seconds. 612# This parameter is used only for proxies in the passive mode. 613# 614# Mandatory: no 615# Range: 1-3600 616# Default: 617# ProxyDataFrequency=1 618 619### Option: StartLLDProcessors 620# Number of pre-forked instances of low level discovery processors. 621# 622# Mandatory: no 623# Range: 1-100 624# Default: 625# StartLLDProcessors=2 626 627### Option: AllowRoot 628# Allow the server to run as 'root'. If disabled and the server is started by 'root', the server 629# will try to switch to the user specified by the User configuration option instead. 630# Has no effect if started under a regular user. 631# 0 - do not allow 632# 1 - allow 633# 634# Mandatory: no 635# Default: 636# AllowRoot=0 637 638### Option: User 639# Drop privileges to a specific, existing user on the system. 640# Only has effect if run as 'root' and AllowRoot is disabled. 641# 642# Mandatory: no 643# Default: 644# User=zabbix 645 646### Option: Include 647# You may include individual files or all files in a directory in the configuration file. 648# Installing Zabbix will create include directory in /usr/local/etc/zabbix54, unless modified during the compile time. 649# 650# Mandatory: no 651# Default: 652# Include= 653 654# Include=/usr/local/etc/zabbix54/zabbix_server.general.conf 655# Include=/usr/local/etc/zabbix54/zabbix_server.conf.d/ 656# Include=/usr/local/etc/zabbix54/zabbix_server.conf.d/*.conf 657 658### Option: SSLCertLocation 659# Location of SSL client certificates. 660# This parameter is used only in web monitoring. 661# Default depends on compilation options. 662# To see the default path run command "zabbix_server --help". 663# 664# Mandatory: no 665# Default: 666# SSLCertLocation=${datadir}/zabbix/ssl/certs 667 668### Option: SSLKeyLocation 669# Location of private keys for SSL client certificates. 670# This parameter is used only in web monitoring. 671# Default depends on compilation options. 672# To see the default path run command "zabbix_server --help". 673# 674# Mandatory: no 675# Default: 676# SSLKeyLocation=${datadir}/zabbix/ssl/keys 677 678### Option: SSLCALocation 679# Override the location of certificate authority (CA) files for SSL server certificate verification. 680# If not set, system-wide directory will be used. 681# This parameter is used in web monitoring, SMTP authentication, HTTP agent items and for communication with Vault. 682# 683# Mandatory: no 684# Default: 685# SSLCALocation= 686 687### Option: StatsAllowedIP 688# List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of external Zabbix instances. 689# Stats request will be accepted only from the addresses listed here. If this parameter is not set no stats requests 690# will be accepted. 691# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally 692# and '::/0' will allow any IPv4 or IPv6 address. 693# '0.0.0.0/0' can be used to allow any IPv4 address. 694# Example: StatsAllowedIP=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com 695# 696# Mandatory: no 697# Default: 698# StatsAllowedIP= 699StatsAllowedIP=127.0.0.1 700 701####### LOADABLE MODULES ####### 702 703### Option: LoadModulePath 704# Full path to location of server modules. 705# Default depends on compilation options. 706# To see the default path run command "zabbix_server --help". 707# 708# Mandatory: no 709# Default: 710# LoadModulePath=${libdir}/modules 711 712### Option: LoadModule 713# Module to load at server startup. Modules are used to extend functionality of the server. 714# Formats: 715# LoadModule=<module.so> 716# LoadModule=<path/module.so> 717# LoadModule=</abs_path/module.so> 718# Either the module must be located in directory specified by LoadModulePath or the path must precede the module name. 719# If the preceding path is absolute (starts with '/') then LoadModulePath is ignored. 720# It is allowed to include multiple LoadModule parameters. 721# 722# Mandatory: no 723# Default: 724# LoadModule= 725 726####### TLS-RELATED PARAMETERS ####### 727 728### Option: TLSCAFile 729# Full pathname of a file containing the top-level CA(s) certificates for 730# peer certificate verification. 731# 732# Mandatory: no 733# Default: 734# TLSCAFile= 735 736### Option: TLSCRLFile 737# Full pathname of a file containing revoked certificates. 738# 739# Mandatory: no 740# Default: 741# TLSCRLFile= 742 743### Option: TLSCertFile 744# Full pathname of a file containing the server certificate or certificate chain. 745# 746# Mandatory: no 747# Default: 748# TLSCertFile= 749 750### Option: TLSKeyFile 751# Full pathname of a file containing the server private key. 752# 753# Mandatory: no 754# Default: 755# TLSKeyFile= 756 757####### For advanced users - TLS ciphersuite selection criteria ####### 758 759### Option: TLSCipherCert13 760# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. 761# Override the default ciphersuite selection criteria for certificate-based encryption. 762# 763# Mandatory: no 764# Default: 765# TLSCipherCert13= 766 767### Option: TLSCipherCert 768# GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. 769# Override the default ciphersuite selection criteria for certificate-based encryption. 770# Example for GnuTLS: 771# NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509 772# Example for OpenSSL: 773# EECDH+aRSA+AES128:RSA+aRSA+AES128 774# 775# Mandatory: no 776# Default: 777# TLSCipherCert= 778 779### Option: TLSCipherPSK13 780# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. 781# Override the default ciphersuite selection criteria for PSK-based encryption. 782# Example: 783# TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256 784# 785# Mandatory: no 786# Default: 787# TLSCipherPSK13= 788 789### Option: TLSCipherPSK 790# GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. 791# Override the default ciphersuite selection criteria for PSK-based encryption. 792# Example for GnuTLS: 793# NONE:+VERS-TLS1.2:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL 794# Example for OpenSSL: 795# kECDHEPSK+AES128:kPSK+AES128 796# 797# Mandatory: no 798# Default: 799# TLSCipherPSK= 800 801### Option: TLSCipherAll13 802# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. 803# Override the default ciphersuite selection criteria for certificate- and PSK-based encryption. 804# Example: 805# TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256 806# 807# Mandatory: no 808# Default: 809# TLSCipherAll13= 810 811### Option: TLSCipherAll 812# GnuTLS priority string or OpenSSL (TLS 1.2) cipher string. 813# Override the default ciphersuite selection criteria for certificate- and PSK-based encryption. 814# Example for GnuTLS: 815# NONE:+VERS-TLS1.2:+ECDHE-RSA:+RSA:+ECDHE-PSK:+PSK:+AES-128-GCM:+AES-128-CBC:+AEAD:+SHA256:+SHA1:+CURVE-ALL:+COMP-NULL:+SIGN-ALL:+CTYPE-X.509 816# Example for OpenSSL: 817# EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128 818# 819# Mandatory: no 820# Default: 821# TLSCipherAll= 822 823### Option: DBTLSConnect 824# Setting this option enforces to use TLS connection to database. 825# required - connect using TLS 826# verify_ca - connect using TLS and verify certificate 827# verify_full - connect using TLS, verify certificate and verify that database identity specified by DBHost 828# matches its certificate 829# On MySQL starting from 5.7.11 and PostgreSQL following values are supported: "required", "verify_ca" and 830# "verify_full". 831# On MariaDB starting from version 10.2.6 "required" and "verify_full" values are supported. 832# Default is not to set any option and behavior depends on database configuration 833# 834# Mandatory: no 835# Default: 836# DBTLSConnect= 837 838### Option: DBTLSCAFile 839# Full pathname of a file containing the top-level CA(s) certificates for database certificate verification. 840# Supported only for MySQL and PostgreSQL 841# 842# Mandatory: no 843# (yes, if DBTLSConnect set to one of: verify_ca, verify_full) 844# Default: 845# DBTLSCAFile= 846 847### Option: DBTLSCertFile 848# Full pathname of file containing Zabbix server certificate for authenticating to database. 849# Supported only for MySQL and PostgreSQL 850# 851# Mandatory: no 852# Default: 853# DBTLSCertFile= 854 855### Option: DBTLSKeyFile 856# Full pathname of file containing the private key for authenticating to database. 857# Supported only for MySQL and PostgreSQL 858# 859# Mandatory: no 860# Default: 861# DBTLSKeyFile= 862 863### Option: DBTLSCipher 864# The list of encryption ciphers that Zabbix server permits for TLS protocols up through TLSv1.2 865# Supported only for MySQL 866# 867# Mandatory no 868# Default: 869# DBTLSCipher= 870 871### Option: DBTLSCipher13 872# The list of encryption ciphersuites that Zabbix server permits for TLSv1.3 protocol 873# Supported only for MySQL, starting from version 8.0.16 874# 875# Mandatory no 876# Default: 877# DBTLSCipher13= 878 879### Option: VaultToken 880# Vault authentication token that should have been generated exclusively for Zabbix server with read only permission 881# to paths specified in Vault macros and read only permission to path specified in optional VaultDBPath 882# configuration parameter. 883# It is an error if VaultToken and VAULT_TOKEN environment variable are defined at the same time. 884# 885# Mandatory: no 886# Default: 887# VaultToken= 888 889### Option: VaultURL 890# Vault server HTTP[S] URL. System-wide CA certificates directory will be used if SSLCALocation is not specified. 891# 892# Mandatory: no 893# Default: 894# VaultURL=https://127.0.0.1:8200 895 896### Option: VaultDBPath 897# Vault path from where credentials for database will be retrieved by keys 'password' and 'username'. 898# Example: secret/zabbix/database 899# This option can only be used if DBUser and DBPassword are not specified. 900# 901# Mandatory: no 902# Default: 903# VaultDBPath= 904 905### Option: StartReportWriters 906# Number of pre-forked report writer instances. 907# 908# Mandatory: no 909# Range: 0-100 910# Default: 911# StartReportWriters=0 912 913### Option: WebServiceURL 914# URL to Zabbix web service, used to perform web related tasks. 915# Example: http://localhost:10053/report 916# 917# Mandatory: no 918# Default: 919# WebServiceURL= 920 921####### For advanced users - TCP-related fine-tuning parameters ####### 922 923## Option: ListenBacklog 924# The maximum number of pending connections in the queue. This parameter is passed to 925# listen() function as argument 'backlog' (see "man listen"). 926# 927# Mandatory: no 928# Range: 0 - INT_MAX (depends on system, too large values may be silently truncated to implementation-specified maximum) 929# Default: SOMAXCONN (hard-coded constant, depends on system) 930# ListenBacklog= 931