{"id":178,"date":"2022-03-04T21:23:11","date_gmt":"2022-03-04T20:23:11","guid":{"rendered":"https:\/\/34.75.207.203\/?p=178"},"modified":"2022-03-04T21:23:11","modified_gmt":"2022-03-04T20:23:11","slug":"zabbix-on-ubuntu-with-ssl","status":"publish","type":"post","link":"https:\/\/tillnet.se\/?p=178","title":{"rendered":"Zabbix on Ubuntu with SSL"},"content":{"rendered":"\n

Everyone needs a monitor system, right?<\/p>\n\n\n\n

Disclaimer or Scope\/Intention<\/h2>\n\n\n\n

This is how I did it. Short guide, more or less for myself so I won\u2019t forget.
If Linux\/Ubuntu\/Apache\/SSL-certs is new territory for you this isn\u2019t the guide you were looking for, sorry. Some steps and detailed explanations are omitted.
Also never run cmds you don\u2019t trust and know what they do.<\/p>\n\n\n\n

What I used<\/h2>\n\n\n\n

Machine: VM in Vmware vSphere, 2vCPU, 4GB RAM, 32GB disk.
OS: Ubuntu Server 20.04 LTS Free OpenSource (https:\/\/ubuntu.com\/download\/server)
WebApp: Zabbix 6.0 Free OpenSource (https:\/\/zabbix.com)
SSL cert: I used Let\u2019s Encrypt for my cert and key.<\/p>\n\n\n\n

Preparation<\/h2>\n\n\n\n

I downloaded the software from Ubuntu. Spun up a small VM and installed Ubuntu Server on it. Performed some housekeeping on the machine.<\/p>\n\n\n\n

\"\"
Spun up a vm in vSphere.<\/figcaption><\/figure>\n\n\n\n

Step 1: Install LAMP Stack (Linux, Apache, MySQL, and PHP) <\/h2>\n\n\n\n

On the newly setup Ubuntu machine install LAMP Stack and some extra pieces.<\/p>\n\n\n\n

sudo apt install tasksel\nsudo tasksel install lamp-server\nsudo apt install php-curl php-gd php-mbstring php-xml php-xmlrpc\nsudo apt install php-imap\nsudo phpenmod imap<\/code><\/pre>\n\n\n\n
 Step 2: Follow instructions on Zabbix homepage. <\/h2>\n\n\n\n
\"\"
 https:\/\/www.zabbix.com\/download?zabbix=6.0&os_distribution=ubuntu&os_version=20.04_focal&db=mysql&ws=apache <\/figcaption><\/figure>\n\n\n\n
Just a headsup, the step “zcat \/usr\/share\/doc\/zabbix-sql-scripts\/mysql\/server.sql.gz | mysql -uzabbix -p zabbix<\/code>“. Will take a long time with low resource utilization, be patient.<\/p>\n\n\n\n
Step 3: Done, ish.<\/h2>\n\n\n\n
 Now it’s installed. Enter the FQDN or ip-adress + \/zabbix in a web-browser. <\/p>\n\n\n\n
\"\"
This is the Zabbix welcome screen. Enter the user name Admin with password zabbix to log in.<\/figcaption><\/figure>\n\n\n\n
More info, https:\/\/www.zabbix.com\/documentation\/6.0\/en\/manual\/quickstart\/login<\/p>\n\n\n\n
Optional to continue. Next steps will add SSL\/https and force that.<\/p>\n\n\n\n
Step 4: Remove \/zabbix\/ from URL<\/h2>\n\n\n\n
Configure Apache conf for website (this removes “zabbix” from the end of the URL), optional.<\/p>\n\n\n\n
sudo nano \/etc\/apache2\/conf-enabled\/zabbix.conf<\/code><\/pre>\n\n\n\n
Comment the three lines at the top regarding alias.
Ctr+X, Y, Enter<\/p>\n\n\n\n
sudo cd \/etc\/apache2\/sites-available\nsudo nano example.com.conf<\/code><\/pre>\n\n\n\n
Paste into editor:<\/p>\n\n\n\n
<VirtualHost *:80>\n    ServerAdmin webmaster@example.com\n    ServerName example.com\n    ServerAlias www.example.com\n    DocumentRoot \/usr\/share\/zabbix\n    ErrorLog ${APACHE_LOG_DIR}\/error.log\n    CustomLog ${APACHE_LOG_DIR}\/access.log combined\n<\/VirtualHost><\/code><\/pre>\n\n\n\n
Then activate the site.<\/p>\n\n\n\n
sudo a2dissite 000-default.conf\nsudo a2ensite example.com.conf\nsudo systemctl reload apache2<\/code><\/pre>\n\n\n\n
Step 5: Get SSL cert and key<\/h2>\n\n\n\n
All websites should use https now when there\u2019s free and easy services like Let\u2019s Encrypt (https:\/\/letsencrypt.org) or Cloudflare (https:\/\/cloudflare.com). There are good guides on their webpages and also a lot of specific howtos to find elsewhere. This is out of scope for this guide.<\/p>\n\n\n\n
Get your cert and key from source of your choosing.<\/p>\n\n\n\n
Step 6: Copy Cert and Key to Server<\/h2>\n\n\n\n
Create a new directory where your Cert and Key will reside.<\/p>\n\n\n\n
sudo mkdir -p \/etc\/letsencrypt\/<\/code><\/pre>\n\n\n\n
Using nano text editor, create a new file example.com.pem (where example.com is your own domain).<\/p>\n\n\n\n
sudo nano \/etc\/letsencrypt\/example.com.pem<\/code><\/pre>\n\n\n\n
Now paste in your Origin Certificate. Save file and exit. (Press CTRL + X, press Y and then press ENTER).<\/p>\n\n\n\n
Create a new file example.com.key (where example.com is your own domain).<\/p>\n\n\n\n
sudo nano \/etc\/letsencrypt\/example.com.key<\/code><\/pre>\n\n\n\n
Paste in your Private Key. Save file and exit. (Press CTRL + X, press Y and then press ENTER).<\/p>\n\n\n\n
Step 7: Configure Apache for https<\/h2>\n\n\n\n
Firstly, make sure you have the SSL module enabled for Apache by running:<\/p>\n\n\n\n
sudo a2enmod ssl<\/code><\/pre>\n\n\n\n
Open the Apache configuration file for your domain.<\/p>\n\n\n\n
sudo nano \/etc\/apache2\/sites-available\/example.com.conf<\/code><\/pre>\n\n\n\n
You need to add a new block underneath for SSL port 443. You can also add a rewrite condition in your port 80 block to redirect all requests to https. Paste example and modify for your domain.<\/p>\n\n\n\n
<VirtualHost *:80>\n    ServerAdmin webmaster@example.com\n    ServerName example.com\n    ServerAlias www.example.com\n    DocumentRoot \/usr\/share\/zabbix\n    ErrorLog ${APACHE_LOG_DIR}\/error.log\n    CustomLog ${APACHE_LOG_DIR}\/access.log combined\n\n    ReWriteEngine on\n    ReWriteCond %{SERVER_NAME} =example.com\n    ReWriteRule ^ https:\/\/%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]\n\n<\/VirtualHost>\n<VirtualHost *:443>\n\n    ServerAdmin webmaster@example.com\n    ServerName example.com\n    ServerAlias www.example.com\n    DocumentRoot \/usr\/share\/zabbix\n    ErrorLog ${APACHE_LOG_DIR}\/error.log\n    CustomLog ${APACHE_LOG_DIR}\/access.log combined\n\n    SSLEngine on\n    SSLCertificateFile \/etc\/letsencrypt\/example.com.pem\n    SSLCertificateKeyFile \/etc\/letsencrypt\/example.com.key\n\n<\/VirtualHost><\/code><\/pre>\n\n\n\n
Save file and exit. (Press CTRL + X, press Y and then press ENTER).<\/p>\n\n\n\n
Enable the RewriteEngine.<\/p>\n\n\n\n
sudo a2enmod rewrite<\/code><\/pre>\n\n\n\n
Test the configuration syntax for errors.<\/p>\n\n\n\n
sudo apachectl configtest<\/code><\/pre>\n\n\n\n
You can ignore any errors that say Could not reliably determine the server\u2019s fully qualified domain name.
If you see Syntax OK, restart Apache.<\/p>\n\n\n\n
sudo systemctl restart apache2<\/code><\/pre>\n\n\n\n
Done. Now you have your own monitoring system.<\/p>\n","protected":false},"excerpt":{"rendered":"
Everyone needs a monitor system, right? Disclaimer or Scope\/Intention This is how I did it. Short guide, more or less for myself so I won\u2019t …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-178","post","type-post","status-publish","format-standard","hentry","category-it"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/tillnet.se\/index.php?rest_route=\/wp\/v2\/posts\/178","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tillnet.se\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tillnet.se\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tillnet.se\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tillnet.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=178"}],"version-history":[{"count":2,"href":"https:\/\/tillnet.se\/index.php?rest_route=\/wp\/v2\/posts\/178\/revisions"}],"predecessor-version":[{"id":193,"href":"https:\/\/tillnet.se\/index.php?rest_route=\/wp\/v2\/posts\/178\/revisions\/193"}],"wp:attachment":[{"href":"https:\/\/tillnet.se\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=178"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tillnet.se\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=178"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tillnet.se\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=178"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}