diff --git a/legacy/_automation_scripts/etc/proxy-sinc/paths.conf b/legacy/_automation_scripts/etc/proxy-sinc/paths.conf deleted file mode 100644 index 5eb402d..0000000 --- a/legacy/_automation_scripts/etc/proxy-sinc/paths.conf +++ /dev/null @@ -1,12 +0,0 @@ -# Adicione aqui os caminhos completos para os ficheiros e diretórios que deseja versionar, um por linha. -# Linhas que começam com '#' são ignoradas. -/etc/nginx -/etc/fail2ban -/etc/resolv.conf -/etc/nsswitch.conf -/etc/hosts -/etc/ufw -/etc/zabbix -/etc/sudoers.d -/etc/tmpfiles.d -/etc/ssl diff --git a/legacy/_automation_scripts/etc/systemd/system/proxy-sinc.service b/legacy/_automation_scripts/etc/systemd/system/proxy-sinc.service deleted file mode 100644 index 634cdbf..0000000 --- a/legacy/_automation_scripts/etc/systemd/system/proxy-sinc.service +++ /dev/null @@ -1,6 +0,0 @@ -[Unit] -Description=Serviço de Sincronização de Configurações do Nginx para o Git -After=network.target -[Service] -Type=oneshot -ExecStart=/usr/local/sbin/commit_configs.sh diff --git a/legacy/_automation_scripts/etc/systemd/system/proxy-sinc.timer b/legacy/_automation_scripts/etc/systemd/system/proxy-sinc.timer deleted file mode 100644 index 5c0b2d7..0000000 --- a/legacy/_automation_scripts/etc/systemd/system/proxy-sinc.timer +++ /dev/null @@ -1,8 +0,0 @@ -[Unit] -Description=Executa o serviço de sincronização de configurações a cada minuto -[Timer] -OnBootSec=1min -OnUnitActiveSec=1min -Unit=proxy-sinc.service -[Install] -WantedBy=timers.target diff --git a/legacy/_automation_scripts/usr/local/sbin/commit_configs.sh b/legacy/_automation_scripts/usr/local/sbin/commit_configs.sh deleted file mode 100644 index 5286cf7..0000000 --- a/legacy/_automation_scripts/usr/local/sbin/commit_configs.sh +++ /dev/null @@ -1,60 +0,0 @@ -#!/bin/bash -set -e - -REPO_PATH="/opt/config_repo" -CONFIG_DIR="/etc/proxy-sinc" -PATHS_FILE="${CONFIG_DIR}/paths.conf" -AUTOMATION_FILES_SOURCE=("/usr/local/sbin/commit_configs.sh" "/usr/local/sbin/proxy-sinc-update" "/etc/systemd/system/proxy-sinc.service" "/etc/systemd/system/proxy-sinc.timer" "/usr/share/man/man8/proxy-sinc.8.gz" "${PATHS_FILE}") -AUTOMATION_FILES_DEST="$REPO_PATH/_automation_scripts/" - -log_info() { echo "[INFO] $1"; } - -log_info "--- Iniciando a verificação de sincronização [$(date)] ---" -if [ "$EUID" -ne 0 ]; then echo "[ERRO] O script deve ser executado como root." >&2; exit 1; fi -if [ ! -d "$REPO_PATH/.git" ]; then echo "[ERRO] O diretório do repositório $REPO_PATH não é um repositório Git válido." >&2; exit 1; fi - -log_info "Sincronizando ficheiros de configuração definidos em $PATHS_FILE..." -if [ ! -f "$PATHS_FILE" ]; then - echo "[AVISO] O ficheiro de caminhos $PATHS_FILE não foi encontrado. Nenhum ficheiro de configuração foi sincronizado." -else - while IFS= read -r path_to_sync || [ -n "$path_to_sync" ]; do - if [ -z "$path_to_sync" ] || [[ "$path_to_sync" =~ ^# ]]; then - continue - fi - - if [ -e "$path_to_sync" ]; then - # Copia para a raiz do repositório - rsync -avz --delete --exclude='*.swp' --exclude='*.bak' --exclude='sites-enabled/' --exclude='modules-enabled/' --exclude='/var/log/' --exclude='/var/run/' --exclude='/var/cache/' "$path_to_sync" "$REPO_PATH/" - else - echo "[AVISO] O caminho '$path_to_sync' definido em $PATHS_FILE não existe. A ignorar." - fi - done < "$PATHS_FILE" -fi - -log_info "Sincronizando ficheiros de automação..." -mkdir -p "$AUTOMATION_FILES_DEST" -for file in "${AUTOMATION_FILES_SOURCE[@]}"; do - if [ -f "$file" ]; then - rsync -aR "$file" "$AUTOMATION_FILES_DEST" - fi -done - -cd "$REPO_PATH" -log_info "A verificar o status do repositório Git..." -if [ -n "$(git status --porcelain)" ]; then - log_info "Alterações detetadas. A preparar o commit." - log_info "A puxar alterações do repositório remoto para evitar conflitos..." - git pull --ff-only - log_info "A adicionar alterações ao stage..." - git add . - COMMIT_MESSAGE="[Auto-Sync] Atualização das configurações em $(hostname -f) - $(date +'%Y-%m-%d %H:%M:%S')" - log_info "A fazer o commit com a mensagem: $COMMIT_MESSAGE" - git commit -m "$COMMIT_MESSAGE" - log_info "A enviar as alterações para o Gitea (git push)..." - git push origin main - echo "[SUCESSO] As alterações foram enviadas para o repositório remoto!" -else - log_info "Nenhuma alteração de configuração detetada. O repositório está atualizado." -fi -log_info "--- Verificação de sincronização concluída [$(date)] ---" -exit 0 diff --git a/legacy/_automation_scripts/usr/local/sbin/proxy-sinc-update b/legacy/_automation_scripts/usr/local/sbin/proxy-sinc-update deleted file mode 100644 index 5851317..0000000 --- a/legacy/_automation_scripts/usr/local/sbin/proxy-sinc-update +++ /dev/null @@ -1,27 +0,0 @@ -#!/bin/bash -set -e -echo "A procurar por atualizações para o serviço Proxy-Sinc..." -UPDATE_SCRIPT_URL="https://git.itguys.com.br/joao.goncalves/NgixProxy_Pathfinder/raw/branch/main/Instal-Proxy-Sinc.sh" -TEMP_SCRIPT="/tmp/setup_latest.sh" - -echo "A baixar a versão mais recente do instalador de: $UPDATE_SCRIPT_URL" - -SSL_VERIFY_FLAG="" -if [ -d "/opt/config_repo/.git" ]; then - if [ "$(cd /opt/config_repo && git config --get http.sslVerify)" == "false" ]; then - SSL_VERIFY_FLAG="--insecure" - echo "[AVISO] A usar o modo inseguro para baixar a atualização devido à configuração do repositório." - fi -fi - -if curl $SSL_VERIFY_FLAG -L "$UPDATE_SCRIPT_URL" -o "$TEMP_SCRIPT"; then - chmod +x "$TEMP_SCRIPT" - echo "Instalador baixado com sucesso. A executar a atualização..." - sudo "$TEMP_SCRIPT" - rm "$TEMP_SCRIPT" - echo "Atualização concluída!" -else - echo "ERRO: Falha ao baixar o script de atualização." >&2 - exit 1 -fi -exit 0 diff --git a/legacy/_automation_scripts/usr/share/man/man8/proxy-sinc.8.gz b/legacy/_automation_scripts/usr/share/man/man8/proxy-sinc.8.gz deleted file mode 100644 index 11a08ac..0000000 Binary files a/legacy/_automation_scripts/usr/share/man/man8/proxy-sinc.8.gz and /dev/null differ diff --git a/legacy/_deployment_logs/srvproxy001.itguys.com.br.md b/legacy/_deployment_logs/srvproxy001.itguys.com.br.md deleted file mode 100644 index 2e70bff..0000000 --- a/legacy/_deployment_logs/srvproxy001.itguys.com.br.md +++ /dev/null @@ -1,30 +0,0 @@ -# Registo de Deploy do Proxy-Sinc - -**Servidor:** srvproxy001.itguys.com.br -**Instalado por:** joao.goncalves -**Data de Instalação:** ter 16 set 2025 19:03:23 -03 - ---- -**Tipo de Ação:** Instalação Manual Inicial -**Executado por:** joao.goncalves@itguys.com.br -**Data:** ter 16 set 2025 20:13:37 -03 - ---- -**Tipo de Ação:** Atualização Manual -**Executado por:** joao.goncalves@itguys.com.br -**Data:** ter 16 set 2025 20:16:56 -03 - ---- -**Tipo de Ação:** Atualização Manual -**Executado por:** joao.goncalves@itguys.com.br -**Data:** ter 16 set 2025 20:29:19 -03 - ---- -**Tipo de Ação:** Atualização Manual -**Executado por:** joao.goncalves@itguys.com.br -**Data:** ter 16 set 2025 20:35:37 -03 - ---- -**Tipo de Ação:** Atualização Manual -**Executado por:** joao.goncalves@itguys.com.br -**Data:** ter 16 set 2025 20:41:37 -03 diff --git a/legacy/sudoers.d/README b/legacy/sudoers.d/README deleted file mode 100644 index 356d882..0000000 --- a/legacy/sudoers.d/README +++ /dev/null @@ -1,24 +0,0 @@ -# -# The default /etc/sudoers file created on installation of the -# sudo package now includes the directive: -# -# @includedir /etc/sudoers.d -# -# This will cause sudo to read and parse any files in the /etc/sudoers.d -# directory that do not end in '~' or contain a '.' character. -# -# Note that there must be at least one file in the sudoers.d directory (this -# one will do). -# -# Note also, that because sudoers contents can vary widely, no attempt is -# made to add this directive to existing sudoers files on upgrade. Feel free -# to add the above directive to the end of your /etc/sudoers file to enable -# this functionality for existing installations if you wish! Sudo -# versions older than the one in Debian 11 (bullseye) require the -# directive will only support the old syntax #includedir, and the current -# sudo will happily accept both @includedir and #includedir -# -# Finally, please note that using the visudo command is the recommended way -# to update sudoers content, since it protects against many failure modes. -# See the man page for visudo and sudoers for more information. -# diff --git a/legacy/sudoers.d/zabbix-fail2ban b/legacy/sudoers.d/zabbix-fail2ban deleted file mode 100644 index d8abd4f..0000000 --- a/legacy/sudoers.d/zabbix-fail2ban +++ /dev/null @@ -1 +0,0 @@ -zabbix ALL=NOPASSWD: /usr/bin/fail2ban-client diff --git a/legacy/ufw/after.init b/legacy/ufw/after.init deleted file mode 100644 index e89217d..0000000 --- a/legacy/ufw/after.init +++ /dev/null @@ -1,40 +0,0 @@ -#!/bin/sh -# -# after.init: if executable, called by ufw-init. See 'man ufw-framework' for -# details. Note that output from these scripts is not seen via the -# the ufw command, but instead via ufw-init. -# -# Copyright 2013 Canonical Ltd. -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU General Public License version 3, -# as published by the Free Software Foundation. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see . -# -set -e - -case "$1" in -start) - # typically required - ;; -stop) - # typically required - ;; -status) - # optional - ;; -flush-all) - # optional - ;; -*) - echo "'$1' not supported" - echo "Usage: after.init {start|stop|flush-all|status}" - ;; -esac diff --git a/legacy/ufw/after.rules b/legacy/ufw/after.rules deleted file mode 100644 index 0d6c646..0000000 --- a/legacy/ufw/after.rules +++ /dev/null @@ -1,30 +0,0 @@ -# -# rules.input-after -# -# Rules that should be run after the ufw command line added rules. Custom -# rules should be added to one of these chains: -# ufw-after-input -# ufw-after-output -# ufw-after-forward -# - -# Don't delete these required lines, otherwise there will be errors -*filter -:ufw-after-input - [0:0] -:ufw-after-output - [0:0] -:ufw-after-forward - [0:0] -# End required lines - -# don't log noisy services by default --A ufw-after-input -p udp --dport 137 -j ufw-skip-to-policy-input --A ufw-after-input -p udp --dport 138 -j ufw-skip-to-policy-input --A ufw-after-input -p tcp --dport 139 -j ufw-skip-to-policy-input --A ufw-after-input -p tcp --dport 445 -j ufw-skip-to-policy-input --A ufw-after-input -p udp --dport 67 -j ufw-skip-to-policy-input --A ufw-after-input -p udp --dport 68 -j ufw-skip-to-policy-input - -# don't log noisy broadcast --A ufw-after-input -m addrtype --dst-type BROADCAST -j ufw-skip-to-policy-input - -# don't delete the 'COMMIT' line or these rules won't be processed -COMMIT diff --git a/legacy/ufw/after6.rules b/legacy/ufw/after6.rules deleted file mode 100644 index 0d99672..0000000 --- a/legacy/ufw/after6.rules +++ /dev/null @@ -1,27 +0,0 @@ -# -# rules.input-after -# -# Rules that should be run after the ufw command line added rules. Custom -# rules should be added to one of these chains: -# ufw6-after-input -# ufw6-after-output -# ufw6-after-forward -# - -# Don't delete these required lines, otherwise there will be errors -*filter -:ufw6-after-input - [0:0] -:ufw6-after-output - [0:0] -:ufw6-after-forward - [0:0] -# End required lines - -# don't log noisy services by default --A ufw6-after-input -p udp --dport 137 -j ufw6-skip-to-policy-input --A ufw6-after-input -p udp --dport 138 -j ufw6-skip-to-policy-input --A ufw6-after-input -p tcp --dport 139 -j ufw6-skip-to-policy-input --A ufw6-after-input -p tcp --dport 445 -j ufw6-skip-to-policy-input --A ufw6-after-input -p udp --dport 546 -j ufw6-skip-to-policy-input --A ufw6-after-input -p udp --dport 547 -j ufw6-skip-to-policy-input - -# don't delete the 'COMMIT' line or these rules won't be processed -COMMIT diff --git a/legacy/ufw/applications.d/nginx b/legacy/ufw/applications.d/nginx deleted file mode 100644 index 0cb0449..0000000 --- a/legacy/ufw/applications.d/nginx +++ /dev/null @@ -1,14 +0,0 @@ -[Nginx HTTP] -title=Web Server (Nginx, HTTP) -description=Small, but very powerful and efficient web server -ports=80/tcp - -[Nginx HTTPS] -title=Web Server (Nginx, HTTPS) -description=Small, but very powerful and efficient web server -ports=443/tcp - -[Nginx Full] -title=Web Server (Nginx, HTTP + HTTPS) -description=Small, but very powerful and efficient web server -ports=80,443/tcp diff --git a/legacy/ufw/applications.d/openssh-server b/legacy/ufw/applications.d/openssh-server deleted file mode 100644 index 9bbe906..0000000 --- a/legacy/ufw/applications.d/openssh-server +++ /dev/null @@ -1,4 +0,0 @@ -[OpenSSH] -title=Secure shell server, an rshd replacement -description=OpenSSH is a free implementation of the Secure Shell protocol. -ports=22/tcp diff --git a/legacy/ufw/applications.d/ufw-bittorent b/legacy/ufw/applications.d/ufw-bittorent deleted file mode 100644 index 171fce2..0000000 --- a/legacy/ufw/applications.d/ufw-bittorent +++ /dev/null @@ -1,19 +0,0 @@ -[Transmission] -title=Transmission -description=Transmission BitTorrent client -ports=51413 - -[Deluge] -title=Deluge -description=Deluge BitTorrent client -ports=6881:6891/tcp - -[KTorrent] -title=KTorrent -description=KTorrent BitTorrent client -ports=6881/tcp|4444/udp - -[qBittorrent] -title=qBittorrent -description=qBittorrent BitTorrent client -ports=6881/tcp diff --git a/legacy/ufw/applications.d/ufw-chat b/legacy/ufw/applications.d/ufw-chat deleted file mode 100644 index 32b4fe7..0000000 --- a/legacy/ufw/applications.d/ufw-chat +++ /dev/null @@ -1,35 +0,0 @@ -[PeopleNearby] -title=People Nearby -description=People Nearby (Bonjour/Salut) functionality in Empathy -ports=5353/udp|5298 - -[Bonjour] -title=Bonjour -description=Bonjour protocol -ports=5353/udp|5298 - -[MSN] -title=MSN Chat -description=MSN chat protocol (with file transfer and voice) -ports=1863|6891:6900/tcp|6901 - -[MSN SSL] -title=MSN Chat (SSL) -description=MSN chat protocol (SSL) -ports=443/tcp - -[AIM] -title=AIM Talk -description=AIM talk protocol -ports=5190/tcp - -[Yahoo] -title=Yahoo Chat -description=Yahoo chat protocol -ports=5050 - -[XMPP] -title=XMPP Chat -description=XMPP protocol (Jabber and Google Talk) -ports=5222/tcp|5269/tcp - diff --git a/legacy/ufw/applications.d/ufw-directoryserver b/legacy/ufw/applications.d/ufw-directoryserver deleted file mode 100644 index 90fa2f7..0000000 --- a/legacy/ufw/applications.d/ufw-directoryserver +++ /dev/null @@ -1,29 +0,0 @@ -[Kerberos KDC] -title=Kerberos v5 KDC server -description=Kerberos v5 KDC server -ports=88 - -[Kerberos Admin] -title=Kerberos v5 admin -description=Kerberos v5 server -ports=749/tcp - -[Kerberos Password] -title=Kerberos v5 password -description=Kerberos v5 password -ports=464/udp - -[Kerberos Full] -title=Kerberos v5 server -description=Kerberos v5 server -ports=88,749/tcp|464/udp - -[LDAP] -title=LDAP server -description=LDAP server -ports=389/tcp - -[LDAPS] -title=LDAP server (LDAPS) -description=LDAP server (LDAPS) -ports=636/tcp diff --git a/legacy/ufw/applications.d/ufw-dnsserver b/legacy/ufw/applications.d/ufw-dnsserver deleted file mode 100644 index 7a61781..0000000 --- a/legacy/ufw/applications.d/ufw-dnsserver +++ /dev/null @@ -1,4 +0,0 @@ -[DNS] -title=Internet Domain Name Server -description=Internet Domain Name Server -ports=53 diff --git a/legacy/ufw/applications.d/ufw-fileserver b/legacy/ufw/applications.d/ufw-fileserver deleted file mode 100644 index 6cb4c77..0000000 --- a/legacy/ufw/applications.d/ufw-fileserver +++ /dev/null @@ -1,14 +0,0 @@ -[CIFS] -title=SMB/CIFS server -description=SMB/CIFS server -ports=137,138/udp|139,445/tcp - -[NFS] -title=NFS server -description=NFS and portmap server. Will also need access to mountd, statd and possibly others -ports=2049,111/tcp|2049,111/udp - -[svnserve] -title=Subversion server -description=Subversion server for access to Subversion repositories. -ports=3690/tcp diff --git a/legacy/ufw/applications.d/ufw-loginserver b/legacy/ufw/applications.d/ufw-loginserver deleted file mode 100644 index 5f01853..0000000 --- a/legacy/ufw/applications.d/ufw-loginserver +++ /dev/null @@ -1,14 +0,0 @@ -[Telnet] -title=Telnet server (insecure) -description=Telnet server (insecure) -ports=23/tcp - -[SSH] -title=SSH server -description=SSH server -ports=22/tcp - -[VNC] -title=VNC server -description=VNC server -ports=5900/tcp diff --git a/legacy/ufw/applications.d/ufw-mailserver b/legacy/ufw/applications.d/ufw-mailserver deleted file mode 100644 index dd55cc0..0000000 --- a/legacy/ufw/applications.d/ufw-mailserver +++ /dev/null @@ -1,30 +0,0 @@ -[POP3] -title=Mail server (POP3) -description=Mail server (POP3) -ports=110/tcp - -[POP3S] -title=Secure mail server (POP3S) -description=Secure mail server (POP3S) -ports=995/tcp - -[IMAP] -title=Mail server (IMAP) -description=Mail server (IMAP) -ports=143/tcp - -[IMAPS] -title=Secure mail server (IMAPS) -description=Secure mail server (IMAPS) -ports=993/tcp - -[SMTP] -title=Mail server (SMTP) -description=Mail server (SMTP) -ports=25/tcp - -[Mail submission] -title=Mail server (Submission) -description=Mail server (Submission) -ports=587/tcp - diff --git a/legacy/ufw/applications.d/ufw-printserver b/legacy/ufw/applications.d/ufw-printserver deleted file mode 100644 index e634b61..0000000 --- a/legacy/ufw/applications.d/ufw-printserver +++ /dev/null @@ -1,9 +0,0 @@ -[IPP] -title=Cups server (IPP) -description=Cups server (IPP) -ports=631 - -[LPD] -title=LPD server -description=LPD server -ports=515/tcp diff --git a/legacy/ufw/applications.d/ufw-proxyserver b/legacy/ufw/applications.d/ufw-proxyserver deleted file mode 100644 index a598c98..0000000 --- a/legacy/ufw/applications.d/ufw-proxyserver +++ /dev/null @@ -1,9 +0,0 @@ -[Socks] -title=Socks proxy -description=Socks proxy -ports=1080/tcp - -[Transparent Proxy] -title=Transparent proxy -description=Transparent proxy -ports=8081/tcp diff --git a/legacy/ufw/applications.d/ufw-webserver b/legacy/ufw/applications.d/ufw-webserver deleted file mode 100644 index fab4b82..0000000 --- a/legacy/ufw/applications.d/ufw-webserver +++ /dev/null @@ -1,19 +0,0 @@ -[WWW] -title=Web Server -description=Web server -ports=80/tcp - -[WWW Secure] -title=Web Server (HTTPS) -description=Web Server (HTTPS) -ports=443/tcp - -[WWW Full] -title=Web Server (HTTP,HTTPS) -description=Web Server (HTTP,HTTPS) -ports=80,443/tcp - -[WWW Cache] -title=Web Server (8080) -description=Web Server (8080) -ports=8080/tcp diff --git a/legacy/ufw/before.init b/legacy/ufw/before.init deleted file mode 100644 index 1348cb1..0000000 --- a/legacy/ufw/before.init +++ /dev/null @@ -1,40 +0,0 @@ -#!/bin/sh -# -# before.init: if executable, called by ufw-init. See 'man ufw-framework' for -# details. Note that output from these scripts is not seen via the -# the ufw command, but instead via ufw-init. -# -# Copyright 2013 Canonical Ltd. -# -# This program is free software: you can redistribute it and/or modify -# it under the terms of the GNU General Public License version 3, -# as published by the Free Software Foundation. -# -# This program is distributed in the hope that it will be useful, -# but WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the -# GNU General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program. If not, see . -# -set -e - -case "$1" in -start) - # typically required - ;; -stop) - # typically required - ;; -status) - # optional - ;; -flush-all) - # optional - ;; -*) - echo "'$1' not supported" - echo "Usage: before.init {start|stop|flush-all|status}" - ;; -esac diff --git a/legacy/ufw/before.rules b/legacy/ufw/before.rules deleted file mode 100644 index 23b384e..0000000 --- a/legacy/ufw/before.rules +++ /dev/null @@ -1,75 +0,0 @@ -# -# rules.before -# -# Rules that should be run before the ufw command line added rules. Custom -# rules should be added to one of these chains: -# ufw-before-input -# ufw-before-output -# ufw-before-forward -# - -# Don't delete these required lines, otherwise there will be errors -*filter -:ufw-before-input - [0:0] -:ufw-before-output - [0:0] -:ufw-before-forward - [0:0] -:ufw-not-local - [0:0] -# End required lines - - -# allow all on loopback --A ufw-before-input -i lo -j ACCEPT --A ufw-before-output -o lo -j ACCEPT - -# quickly process packets for which we already have a connection --A ufw-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT --A ufw-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT --A ufw-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT - -# drop INVALID packets (logs these in loglevel medium and higher) --A ufw-before-input -m conntrack --ctstate INVALID -j ufw-logging-deny --A ufw-before-input -m conntrack --ctstate INVALID -j DROP - -# ok icmp codes for INPUT --A ufw-before-input -p icmp --icmp-type destination-unreachable -j ACCEPT --A ufw-before-input -p icmp --icmp-type time-exceeded -j ACCEPT --A ufw-before-input -p icmp --icmp-type parameter-problem -j ACCEPT --A ufw-before-input -p icmp --icmp-type echo-request -j ACCEPT - -# ok icmp code for FORWARD --A ufw-before-forward -p icmp --icmp-type destination-unreachable -j ACCEPT --A ufw-before-forward -p icmp --icmp-type time-exceeded -j ACCEPT --A ufw-before-forward -p icmp --icmp-type parameter-problem -j ACCEPT --A ufw-before-forward -p icmp --icmp-type echo-request -j ACCEPT - -# allow dhcp client to work --A ufw-before-input -p udp --sport 67 --dport 68 -j ACCEPT - -# -# ufw-not-local -# --A ufw-before-input -j ufw-not-local - -# if LOCAL, RETURN --A ufw-not-local -m addrtype --dst-type LOCAL -j RETURN - -# if MULTICAST, RETURN --A ufw-not-local -m addrtype --dst-type MULTICAST -j RETURN - -# if BROADCAST, RETURN --A ufw-not-local -m addrtype --dst-type BROADCAST -j RETURN - -# all other non-local packets are dropped --A ufw-not-local -m limit --limit 3/min --limit-burst 10 -j ufw-logging-deny --A ufw-not-local -j DROP - -# allow MULTICAST mDNS for service discovery (be sure the MULTICAST line above -# is uncommented) --A ufw-before-input -p udp -d 224.0.0.251 --dport 5353 -j ACCEPT - -# allow MULTICAST UPnP for service discovery (be sure the MULTICAST line above -# is uncommented) --A ufw-before-input -p udp -d 239.255.255.250 --dport 1900 -j ACCEPT - -# don't delete the 'COMMIT' line or these rules won't be processed -COMMIT diff --git a/legacy/ufw/before6.rules b/legacy/ufw/before6.rules deleted file mode 100644 index abebbe7..0000000 --- a/legacy/ufw/before6.rules +++ /dev/null @@ -1,142 +0,0 @@ -# -# rules.before -# -# Rules that should be run before the ufw command line added rules. Custom -# rules should be added to one of these chains: -# ufw6-before-input -# ufw6-before-output -# ufw6-before-forward -# - -# Don't delete these required lines, otherwise there will be errors -*filter -:ufw6-before-input - [0:0] -:ufw6-before-output - [0:0] -:ufw6-before-forward - [0:0] -# End required lines - - -# allow all on loopback --A ufw6-before-input -i lo -j ACCEPT --A ufw6-before-output -o lo -j ACCEPT - -# drop packets with RH0 headers --A ufw6-before-input -m rt --rt-type 0 -j DROP --A ufw6-before-forward -m rt --rt-type 0 -j DROP --A ufw6-before-output -m rt --rt-type 0 -j DROP - -# quickly process packets for which we already have a connection --A ufw6-before-input -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT --A ufw6-before-output -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT --A ufw6-before-forward -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT - -# multicast ping replies are part of the ok icmp codes for INPUT (rfc4890, -# 4.4.1 and 4.4.2), but don't have an associated connection and are otherwise -# be marked INVALID, so allow here instead. --A ufw6-before-input -p icmpv6 --icmpv6-type echo-reply -j ACCEPT - -# drop INVALID packets (logs these in loglevel medium and higher) --A ufw6-before-input -m conntrack --ctstate INVALID -j ufw6-logging-deny --A ufw6-before-input -m conntrack --ctstate INVALID -j DROP - -# ok icmp codes for INPUT (rfc4890, 4.4.1 and 4.4.2) --A ufw6-before-input -p icmpv6 --icmpv6-type destination-unreachable -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT -# codes 0 and 1 --A ufw6-before-input -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT -# codes 0-2 (echo-reply needs to be before INVALID, see above) --A ufw6-before-input -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type echo-request -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type router-solicitation -m hl --hl-eq 255 -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type router-advertisement -m hl --hl-eq 255 -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type neighbor-solicitation -m hl --hl-eq 255 -j ACCEPT --A ufw6-before-input -p icmpv6 --icmpv6-type neighbor-advertisement -m hl --hl-eq 255 -j ACCEPT -# IND solicitation --A ufw6-before-input -p icmpv6 --icmpv6-type 141 -m hl --hl-eq 255 -j ACCEPT -# IND advertisement --A ufw6-before-input -p icmpv6 --icmpv6-type 142 -m hl --hl-eq 255 -j ACCEPT -# MLD query --A ufw6-before-input -p icmpv6 --icmpv6-type 130 -s fe80::/10 -j ACCEPT -# MLD report --A ufw6-before-input -p icmpv6 --icmpv6-type 131 -s fe80::/10 -j ACCEPT -# MLD done --A ufw6-before-input -p icmpv6 --icmpv6-type 132 -s fe80::/10 -j ACCEPT -# MLD report v2 --A ufw6-before-input -p icmpv6 --icmpv6-type 143 -s fe80::/10 -j ACCEPT -# SEND certificate path solicitation --A ufw6-before-input -p icmpv6 --icmpv6-type 148 -m hl --hl-eq 255 -j ACCEPT -# SEND certificate path advertisement --A ufw6-before-input -p icmpv6 --icmpv6-type 149 -m hl --hl-eq 255 -j ACCEPT -# MR advertisement --A ufw6-before-input -p icmpv6 --icmpv6-type 151 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT -# MR solicitation --A ufw6-before-input -p icmpv6 --icmpv6-type 152 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT -# MR termination --A ufw6-before-input -p icmpv6 --icmpv6-type 153 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT - -# ok icmp codes for OUTPUT (rfc4890, 4.4.1 and 4.4.2) --A ufw6-before-output -p icmpv6 --icmpv6-type destination-unreachable -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT -# codes 0 and 1 --A ufw6-before-output -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT -# codes 0-2 --A ufw6-before-output -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type echo-request -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type echo-reply -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type router-solicitation -m hl --hl-eq 255 -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type neighbor-advertisement -m hl --hl-eq 255 -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type neighbor-solicitation -m hl --hl-eq 255 -j ACCEPT --A ufw6-before-output -p icmpv6 --icmpv6-type router-advertisement -m hl --hl-eq 255 -j ACCEPT -# IND solicitation --A ufw6-before-output -p icmpv6 --icmpv6-type 141 -m hl --hl-eq 255 -j ACCEPT -# IND advertisement --A ufw6-before-output -p icmpv6 --icmpv6-type 142 -m hl --hl-eq 255 -j ACCEPT -# MLD query --A ufw6-before-output -p icmpv6 --icmpv6-type 130 -s fe80::/10 -j ACCEPT -# MLD report --A ufw6-before-output -p icmpv6 --icmpv6-type 131 -s fe80::/10 -j ACCEPT -# MLD done --A ufw6-before-output -p icmpv6 --icmpv6-type 132 -s fe80::/10 -j ACCEPT -# MLD report v2 --A ufw6-before-output -p icmpv6 --icmpv6-type 143 -s fe80::/10 -j ACCEPT -# SEND certificate path solicitation --A ufw6-before-output -p icmpv6 --icmpv6-type 148 -m hl --hl-eq 255 -j ACCEPT -# SEND certificate path advertisement --A ufw6-before-output -p icmpv6 --icmpv6-type 149 -m hl --hl-eq 255 -j ACCEPT -# MR advertisement --A ufw6-before-output -p icmpv6 --icmpv6-type 151 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT -# MR solicitation --A ufw6-before-output -p icmpv6 --icmpv6-type 152 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT -# MR termination --A ufw6-before-output -p icmpv6 --icmpv6-type 153 -s fe80::/10 -m hl --hl-eq 1 -j ACCEPT - -# ok icmp codes for FORWARD (rfc4890, 4.3.1) --A ufw6-before-forward -p icmpv6 --icmpv6-type destination-unreachable -j ACCEPT --A ufw6-before-forward -p icmpv6 --icmpv6-type packet-too-big -j ACCEPT -# codes 0 and 1 --A ufw6-before-forward -p icmpv6 --icmpv6-type time-exceeded -j ACCEPT -# codes 0-2 --A ufw6-before-forward -p icmpv6 --icmpv6-type parameter-problem -j ACCEPT --A ufw6-before-forward -p icmpv6 --icmpv6-type echo-request -j ACCEPT --A ufw6-before-forward -p icmpv6 --icmpv6-type echo-reply -j ACCEPT -# ok icmp codes for FORWARD (rfc4890, 4.3.2) -# Home Agent Address Discovery Reques --A ufw6-before-input -p icmpv6 --icmpv6-type 144 -j ACCEPT -# Home Agent Address Discovery Reply --A ufw6-before-input -p icmpv6 --icmpv6-type 145 -j ACCEPT -# Mobile Prefix Solicitation --A ufw6-before-input -p icmpv6 --icmpv6-type 146 -j ACCEPT -# Mobile Prefix Advertisement --A ufw6-before-input -p icmpv6 --icmpv6-type 147 -j ACCEPT - -# allow dhcp client to work --A ufw6-before-input -p udp -s fe80::/10 --sport 547 -d fe80::/10 --dport 546 -j ACCEPT - -# allow MULTICAST mDNS for service discovery --A ufw6-before-input -p udp -d ff02::fb --dport 5353 -j ACCEPT - -# allow MULTICAST UPnP for service discovery --A ufw6-before-input -p udp -d ff02::f --dport 1900 -j ACCEPT - -# don't delete the 'COMMIT' line or these rules won't be processed -COMMIT diff --git a/legacy/ufw/sysctl.conf b/legacy/ufw/sysctl.conf deleted file mode 100644 index 7bebf81..0000000 --- a/legacy/ufw/sysctl.conf +++ /dev/null @@ -1,41 +0,0 @@ -# -# Configuration file for setting network variables. Please note these settings -# override /etc/sysctl.conf and /etc/sysctl.d. If you prefer to use -# /etc/sysctl.conf, please adjust IPT_SYSCTL in /etc/default/ufw. See -# Documentation/networking/ip-sysctl.txt in the kernel source code for more -# information. -# - -# Uncomment this to allow this host to route packets between interfaces -#net/ipv4/ip_forward=1 -#net/ipv6/conf/default/forwarding=1 -#net/ipv6/conf/all/forwarding=1 - -# Disable ICMP redirects. ICMP redirects are rarely used but can be used in -# MITM (man-in-the-middle) attacks. Disabling ICMP may disrupt legitimate -# traffic to those sites. -net/ipv4/conf/all/accept_redirects=0 -net/ipv4/conf/default/accept_redirects=0 -net/ipv6/conf/all/accept_redirects=0 -net/ipv6/conf/default/accept_redirects=0 - -# Ignore bogus ICMP errors -net/ipv4/icmp_echo_ignore_broadcasts=1 -net/ipv4/icmp_ignore_bogus_error_responses=1 -net/ipv4/icmp_echo_ignore_all=0 - -# Don't log Martian Packets (impossible addresses) -# packets -net/ipv4/conf/all/log_martians=0 -net/ipv4/conf/default/log_martians=0 - -#net/ipv4/tcp_fin_timeout=30 -#net/ipv4/tcp_keepalive_intvl=1800 - -# Uncomment this to turn off ipv6 autoconfiguration -#net/ipv6/conf/default/autoconf=1 -#net/ipv6/conf/all/autoconf=1 - -# Uncomment this to enable ipv6 privacy addressing -#net/ipv6/conf/default/use_tempaddr=2 -#net/ipv6/conf/all/use_tempaddr=2 diff --git a/legacy/ufw/ufw.conf b/legacy/ufw/ufw.conf deleted file mode 100644 index 28fe534..0000000 --- a/legacy/ufw/ufw.conf +++ /dev/null @@ -1,10 +0,0 @@ -# /etc/ufw/ufw.conf -# - -# Set to yes to start on boot. If setting this remotely, be sure to add a rule -# to allow your remote connection before starting ufw. Eg: 'ufw allow 22/tcp' -ENABLED=yes - -# Please use the 'ufw' command to set the loglevel. Eg: 'ufw logging medium'. -# See 'man ufw' for details. -LOGLEVEL=low diff --git a/legacy/ufw/user.rules b/legacy/ufw/user.rules deleted file mode 100644 index 16454da..0000000 --- a/legacy/ufw/user.rules +++ /dev/null @@ -1,65 +0,0 @@ -*filter -:ufw-user-input - [0:0] -:ufw-user-output - [0:0] -:ufw-user-forward - [0:0] -:ufw-before-logging-input - [0:0] -:ufw-before-logging-output - [0:0] -:ufw-before-logging-forward - [0:0] -:ufw-user-logging-input - [0:0] -:ufw-user-logging-output - [0:0] -:ufw-user-logging-forward - [0:0] -:ufw-after-logging-input - [0:0] -:ufw-after-logging-output - [0:0] -:ufw-after-logging-forward - [0:0] -:ufw-logging-deny - [0:0] -:ufw-logging-allow - [0:0] -:ufw-user-limit - [0:0] -:ufw-user-limit-accept - [0:0] -### RULES ### - -### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in --A ufw-user-input -p tcp --dport 22 -j ACCEPT - -### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0 in --A ufw-user-input -p tcp --dport 80 -j ACCEPT - -### tuple ### allow any 443 0.0.0.0/0 any 0.0.0.0/0 in --A ufw-user-input -p tcp --dport 443 -j ACCEPT --A ufw-user-input -p udp --dport 443 -j ACCEPT - -### tuple ### allow any any 0.0.0.0/0 any 172.16.254.11 in --A ufw-user-input -s 172.16.254.11 -j ACCEPT - -### tuple ### allow any any 0.0.0.0/0 any 172.16.254.125 in --A ufw-user-input -s 172.16.254.125 -j ACCEPT - -### tuple ### allow udp 443 0.0.0.0/0 any 0.0.0.0/0 in --A ufw-user-input -p udp --dport 443 -j ACCEPT - -### tuple ### allow udp 80 0.0.0.0/0 any 0.0.0.0/0 in --A ufw-user-input -p udp --dport 80 -j ACCEPT - -### tuple ### allow tcp 10051 0.0.0.0/0 any 0.0.0.0/0 in --A ufw-user-input -p tcp --dport 10051 -j ACCEPT - -### tuple ### allow tcp 6160 0.0.0.0/0 any 0.0.0.0/0 in comment=566565616d206465706c6f796d656e742072756c65 --A ufw-user-input -p tcp --dport 6160 -j ACCEPT - -### tuple ### allow tcp 6162 0.0.0.0/0 any 0.0.0.0/0 in comment=566565616d207472616e73706f72742072756c65 --A ufw-user-input -p tcp --dport 6162 -j ACCEPT - -### END RULES ### - -### LOGGING ### --A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10 --I ufw-logging-deny -m conntrack --ctstate INVALID -j RETURN -m limit --limit 3/min --limit-burst 10 --A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10 --A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10 -### END LOGGING ### - -### RATE LIMITING ### --A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] " --A ufw-user-limit -j REJECT --A ufw-user-limit-accept -j ACCEPT -### END RATE LIMITING ### -COMMIT diff --git a/legacy/ufw/user6.rules b/legacy/ufw/user6.rules deleted file mode 100644 index b952129..0000000 --- a/legacy/ufw/user6.rules +++ /dev/null @@ -1,59 +0,0 @@ -*filter -:ufw6-user-input - [0:0] -:ufw6-user-output - [0:0] -:ufw6-user-forward - [0:0] -:ufw6-before-logging-input - [0:0] -:ufw6-before-logging-output - [0:0] -:ufw6-before-logging-forward - [0:0] -:ufw6-user-logging-input - [0:0] -:ufw6-user-logging-output - [0:0] -:ufw6-user-logging-forward - [0:0] -:ufw6-after-logging-input - [0:0] -:ufw6-after-logging-output - [0:0] -:ufw6-after-logging-forward - [0:0] -:ufw6-logging-deny - [0:0] -:ufw6-logging-allow - [0:0] -:ufw6-user-limit - [0:0] -:ufw6-user-limit-accept - [0:0] -### RULES ### - -### tuple ### allow tcp 22 ::/0 any ::/0 in --A ufw6-user-input -p tcp --dport 22 -j ACCEPT - -### tuple ### allow tcp 80 ::/0 any ::/0 in --A ufw6-user-input -p tcp --dport 80 -j ACCEPT - -### tuple ### allow any 443 ::/0 any ::/0 in --A ufw6-user-input -p tcp --dport 443 -j ACCEPT --A ufw6-user-input -p udp --dport 443 -j ACCEPT - -### tuple ### allow udp 443 ::/0 any ::/0 in --A ufw6-user-input -p udp --dport 443 -j ACCEPT - -### tuple ### allow udp 80 ::/0 any ::/0 in --A ufw6-user-input -p udp --dport 80 -j ACCEPT - -### tuple ### allow tcp 10051 ::/0 any ::/0 in --A ufw6-user-input -p tcp --dport 10051 -j ACCEPT - -### tuple ### allow tcp 6160 ::/0 any ::/0 in comment=566565616d206465706c6f796d656e742072756c65 --A ufw6-user-input -p tcp --dport 6160 -j ACCEPT - -### tuple ### allow tcp 6162 ::/0 any ::/0 in comment=566565616d207472616e73706f72742072756c65 --A ufw6-user-input -p tcp --dport 6162 -j ACCEPT - -### END RULES ### - -### LOGGING ### --A ufw6-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10 --I ufw6-logging-deny -m conntrack --ctstate INVALID -j RETURN -m limit --limit 3/min --limit-burst 10 --A ufw6-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10 --A ufw6-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10 -### END LOGGING ### - -### RATE LIMITING ### --A ufw6-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] " --A ufw6-user-limit -j REJECT --A ufw6-user-limit-accept -j ACCEPT -### END RATE LIMITING ### -COMMIT diff --git a/legacy/zabbix/zabbix_agent2.conf b/legacy/zabbix/zabbix_agent2.conf deleted file mode 100644 index cd4abe1..0000000 --- a/legacy/zabbix/zabbix_agent2.conf +++ /dev/null @@ -1,564 +0,0 @@ -# This is a configuration file for Zabbix agent 2 (Unix) -# To get more information about Zabbix, visit https://www.zabbix.com - -############ GENERAL PARAMETERS ################# - -### Option: PidFile -# Name of PID file. -# -# Mandatory: no -# Default: -# PidFile=/tmp/zabbix_agent2.pid - -PidFile=/run/zabbix/zabbix_agent2.pid - -### Option: LogType -# Specifies where log messages are written to: -# system - syslog -# file - file specified with LogFile parameter -# console - standard output -# -# Mandatory: no -# Default: -# LogType=file - -### Option: LogFile -# Log file name for LogType 'file' parameter. -# -# Mandatory: yes, if LogType is set to file, otherwise no -# Default: -# LogFile=/tmp/zabbix_agent2.log - -LogFile=/var/log/zabbix/zabbix_agent2.log - -### Option: LogFileSize -# Maximum size of log file in MB. -# 0 - disable automatic log rotation. -# -# Mandatory: no -# Range: 0-1024 -# Default: -# LogFileSize=1 - -LogFileSize=0 - -### Option: DebugLevel -# Specifies debug level: -# 0 - basic information about starting and stopping of Zabbix processes -# 1 - critical information -# 2 - error information -# 3 - warnings -# 4 - for debugging (produces lots of information) -# 5 - extended debugging (produces even more information) -# -# Mandatory: no -# Range: 0-5 -# Default: -# DebugLevel=3 - -### Option: SourceIP -# Source IP address for outgoing connections. -# -# Mandatory: no -# Default: -# SourceIP= - -##### Passive checks related - -### Option: Server -# List of comma delimited IP addresses, optionally in CIDR notation, or DNS names of Zabbix servers and Zabbix proxies. -# Incoming connections will be accepted only from the hosts listed here. -# If IPv6 support is enabled then '127.0.0.1', '::127.0.0.1', '::ffff:127.0.0.1' are treated equally -# and '::/0' will allow any IPv4 or IPv6 address. -# '0.0.0.0/0' can be used to allow any IPv4 address. -# Example: Server=127.0.0.1,192.168.1.0/24,::1,2001:db8::/32,zabbix.example.com -# -# If left empty or not set will disable passive checks, and Zabbix agent 2 will not listen on the ListenPort. -# -# Mandatory: no -# Default: -# Server= - -Server=172.16.254.11 - -### Option: ListenPort -# Agent will listen on this port for connections from the server. -# -# Mandatory: no -# Range: 1024-32767 -# Default: -# ListenPort=10050 - -### Option: ListenIP -# List of comma delimited IP addresses that the agent should listen on. -# First IP address is sent to Zabbix server if connecting to it to retrieve list of active checks. -# -# Mandatory: no -# Default: -# ListenIP=0.0.0.0 - -### Option: StatusPort -# Agent will listen on this port for HTTP status requests. -# -# Mandatory: no -# Range: 1024-32767 -# Default: -# StatusPort= - -##### Active checks related - -### Option: ServerActive -# Zabbix server/proxy address or cluster configuration to get active checks from. -# Server/proxy address is IP address or DNS name and optional port separated by colon. -# Cluster configuration is one or more server addresses separated by semicolon. -# Multiple Zabbix servers/clusters and Zabbix proxies can be specified, separated by comma. -# More than one Zabbix proxy should not be specified from each Zabbix server/cluster. -# If Zabbix proxy is specified then Zabbix server/cluster for that proxy should not be specified. -# Multiple comma-delimited addresses can be provided to use several independent Zabbix servers in parallel. Spaces are allowed. -# If port is not specified, default port is used. -# IPv6 addresses must be enclosed in square brackets if port for that host is specified. -# If port is not specified, square brackets for IPv6 addresses are optional. -# If this parameter is not specified, active checks are disabled. -# Example for Zabbix proxy: -# ServerActive=127.0.0.1:10051 -# Example for multiple servers: -# ServerActive=127.0.0.1:20051,zabbix.domain,[::1]:30051,::1,[12fc::1] -# Example for high availability: -# ServerActive=zabbix.cluster.node1;zabbix.cluster.node2:20051;zabbix.cluster.node3 -# Example for high availability with two clusters and one server: -# ServerActive=zabbix.cluster.node1;zabbix.cluster.node2:20051,zabbix.cluster2.node1;zabbix.cluster2.node2,zabbix.domain -# -# Mandatory: no -# Default: -# ServerActive= - -ServerActive=172.16.254.11 - -### Option: Hostname -# List of comma delimited unique, case sensitive hostnames. -# Required for active checks and must match hostnames as configured on the server. -# Value is acquired from HostnameItem if undefined. -# -# Mandatory: no -# Default: -# Hostname= - -Hostname=srvproxy001 - -### Option: HostnameItem -# Item used for generating Hostname if it is undefined. Ignored if Hostname is defined. -# Does not support UserParameters or aliases. -# -# Mandatory: no -# Default: -# HostnameItem=system.hostname - -### Option: HostMetadata -# Optional parameter that defines host metadata. -# Host metadata is used at host auto-registration process. -# An agent will issue an error and not start if the value is over limit of 2034 bytes. -# If not defined, value will be acquired from HostMetadataItem. -# -# Mandatory: no -# Range: 0-2034 bytes -# Default: -# HostMetadata= - -### Option: HostMetadataItem -# Optional parameter that defines an item used for getting host metadata. -# Host metadata is used at host auto-registration process. -# During an auto-registration request an agent will log a warning message if -# the value returned by specified item is over limit of 65535 characters. -# This option is only used when HostMetadata is not defined. -# -# Mandatory: no -# Default: -# HostMetadataItem= - -### Option: HostInterface -# Optional parameter that defines host interface. -# Host interface is used at host auto-registration process. -# An agent will issue an error and not start if the value is over limit of 255 characters. -# If not defined, value will be acquired from HostInterfaceItem. -# -# Mandatory: no -# Range: 0-255 characters -# Default: -# HostInterface= - -### Option: HostInterfaceItem -# Optional parameter that defines an item used for getting host interface. -# Host interface is used at host auto-registration process. -# During an auto-registration request an agent will log a warning message if -# the value returned by specified item is over limit of 255 characters. -# This option is only used when HostInterface is not defined. -# -# Mandatory: no -# Default: -# HostInterfaceItem= - -### Option: RefreshActiveChecks -# How often list of active checks is refreshed, in seconds. -# -# Mandatory: no -# Range: 1-86400 -# Default: -# RefreshActiveChecks=5 - -### Option: BufferSend -# Do not keep data longer than N seconds in buffer. -# -# Mandatory: no -# Range: 1-3600 -# Default: -# BufferSend=5 - -### Option: BufferSize -# Maximum number of values in a memory buffer. The agent will send -# all collected data to Zabbix Server or Proxy if the buffer is full. -# Option is not valid if EnablePersistentBuffer=1 -# -# Mandatory: no -# Range: 2-65535 -# Default: -# BufferSize=1000 - -### Option: EnablePersistentBuffer -# Enable usage of local persistent storage for active items. -# 0 - disabled, in-memory buffer is used (default); 1 - use persistent buffer -# Mandatory: no -# Range: 0-1 -# Default: -# EnablePersistentBuffer=0 - -### Option: PersistentBufferPeriod -# Zabbix Agent2 will keep data for this time period in case of no -# connectivity with Zabbix server or proxy. Older data will be lost. Log data will be preserved. -# Option is valid if EnablePersistentBuffer=1 -# -# Mandatory: no -# Range: 1m-365d -# Default: -# PersistentBufferPeriod=1h - -### Option: PersistentBufferFile -# Full filename. Zabbix Agent2 will keep SQLite database in this file. -# Option is valid if EnablePersistentBuffer=1 -# -# Mandatory: no -# Default: -# PersistentBufferFile= - -### Option: HeartbeatFrequency -# Frequency of heartbeat messages in seconds. -# Used for monitoring availability of active checks. -# 0 - heartbeat messages disabled. -# -# Mandatory: no -# Range: 0-3600 -# Default: 60 -# HeartbeatFrequency= - -############ ADVANCED PARAMETERS ################# - -### Option: Alias -# Sets an alias for an item key. It can be used to substitute long and complex item key with a smaller and simpler one. -# Multiple Alias parameters may be present. Multiple parameters with the same Alias key are not allowed. -# Different Alias keys may reference the same item key. -# For example, to retrieve the ID of user 'zabbix': -# Alias=zabbix.userid:vfs.file.regexp[/etc/passwd,^zabbix:.:([0-9]+),,,,\1] -# Now shorthand key zabbix.userid may be used to retrieve data. -# Aliases can be used in HostMetadataItem but not in HostnameItem parameters. -# -# Mandatory: no -# Range: -# Default: - -### Option: Timeout -# Specifies how long to wait (in seconds) for establishing connection and exchanging data with Zabbix proxy or server. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Timeout=3 - -### Option:PluginTimeout -# Timeout for connections with external plugins. -# -# Mandatory: no -# Range: 1-30 -# Default: -# PluginTimeout= - -### Option:PluginSocket -# Path to unix socket for external plugin communications. -# -# Mandatory: no -# Default:/tmp/agent.plugin.sock -# PluginSocket= - -PluginSocket=/run/zabbix/agent.plugin.sock - -####### USER-DEFINED MONITORED PARAMETERS ####### - -### Option: UnsafeUserParameters -# Allow all characters to be passed in arguments to user-defined parameters. -# The following characters are not allowed: -# \ ' " ` * ? [ ] { } ~ $ ! & ; ( ) < > | # @ -# Additionally, newline characters are not allowed. -# 0 - do not allow -# 1 - allow -# -# Mandatory: no -# Range: 0-1 -# Default: -UnsafeUserParameters=1 - -### Option: UserParameter -# User-defined parameter to monitor. There can be several user-defined parameters. -# Format: UserParameter=, -# See 'zabbix_agentd' directory for examples. -# -# Mandatory: no -# Default: -# UserParameter= - -### Option: UserParameterDir -# Directory to execute UserParameter commands from. Only one entry is allowed. -# When executing UserParameter commands the agent will change the working directory to the one -# specified in the UserParameterDir option. -# This way UserParameter commands can be specified using the relative ./ prefix. -# -# Mandatory: no -# Default: -# UserParameterDir= - -### Option: ControlSocket -# The control socket, used to send runtime commands with '-R' option. -# -# Mandatory: no -# Default: -# ControlSocket= - -ControlSocket=/run/zabbix/agent.sock - -####### TLS-RELATED PARAMETERS ####### - -### Option: TLSConnect -# How the agent should connect to server or proxy. Used for active checks. -# Only one value can be specified: -# unencrypted - connect without encryption -# psk - connect using TLS and a pre-shared key -# cert - connect using TLS and a certificate -# -# Mandatory: yes, if TLS certificate or PSK parameters are defined (even for 'unencrypted' connection) -# Default: -# TLSConnect=unencrypted - -### Option: TLSAccept -# What incoming connections to accept. -# Multiple values can be specified, separated by comma: -# unencrypted - accept connections without encryption -# psk - accept connections secured with TLS and a pre-shared key -# cert - accept connections secured with TLS and a certificate -# -# Mandatory: yes, if TLS certificate or PSK parameters are defined (even for 'unencrypted' connection) -# Default: -# TLSAccept=unencrypted - -### Option: TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificates for -# peer certificate verification. -# -# Mandatory: no -# Default: -# TLSCAFile= - -### Option: TLSCRLFile -# Full pathname of a file containing revoked certificates. -# -# Mandatory: no -# Default: -# TLSCRLFile= - -### Option: TLSServerCertIssuer -# Allowed server certificate issuer. -# -# Mandatory: no -# Default: -# TLSServerCertIssuer= - -### Option: TLSServerCertSubject -# Allowed server certificate subject. -# -# Mandatory: no -# Default: -# TLSServerCertSubject= - -### Option: TLSCertFile -# Full pathname of a file containing the agent certificate or certificate chain. -# -# Mandatory: no -# Default: -# TLSCertFile= - -### Option: TLSKeyFile -# Full pathname of a file containing the agent private key. -# -# Mandatory: no -# Default: -# TLSKeyFile= - -### Option: TLSPSKIdentity -# Unique, case sensitive string used to identify the pre-shared key. -# -# Mandatory: no -# Default: -# TLSPSKIdentity= - -### Option: TLSPSKFile -# Full pathname of a file containing the pre-shared key. -# -# Mandatory: no -# Default: -# TLSPSKFile= - -####### PLUGIN-SPECIFIC PARAMETERS ####### - -### Option: Plugins -# A plugin can have one or more plugin specific configuration parameters in format: -# Plugins..= -# Plugins..= -# -# Mandatory: no -# Range: -# Default: - -### Option: Plugins.Log.MaxLinesPerSecond -# Maximum number of new lines the agent will send per second to Zabbix Server -# or Proxy processing 'log' and 'logrt' active checks. -# The provided value will be overridden by the parameter 'maxlines', -# provided in 'log' or 'logrt' item keys. -# -# Mandatory: no -# Range: 1-1000 -# Default: -# Plugins.Log.MaxLinesPerSecond=20 - -### Option: AllowKey -# Allow execution of item keys matching pattern. -# Multiple keys matching rules may be defined in combination with DenyKey. -# Key pattern is wildcard expression, which support "*" character to match any number of any characters in certain position. It might be used in both key name and key arguments. -# Parameters are processed one by one according their appearance order. -# If no AllowKey or DenyKey rules defined, all keys are allowed. -# -# Mandatory: no - -### Option: DenyKey -# Deny execution of items keys matching pattern. -# Multiple keys matching rules may be defined in combination with AllowKey. -# Key pattern is wildcard expression, which support "*" character to match any number of any characters in certain position. It might be used in both key name and key arguments. -# Parameters are processed one by one according their appearance order. -# If no AllowKey or DenyKey rules defined, all keys are allowed. -# Unless another system.run[*] rule is specified DenyKey=system.run[*] is added by default. -# -# Mandatory: no -# Default: -# DenyKey=system.run[*] - -### Option: Plugins.SystemRun.LogRemoteCommands -# Enable logging of executed shell commands as warnings. -# 0 - disabled -# 1 - enabled -# -# Mandatory: no -# Default: -# Plugins.SystemRun.LogRemoteCommands=0 - -### Option: ForceActiveChecksOnStart -# Perform active checks immediately after restart for first received configuration. -# Also available as per plugin configuration, example: Plugins.Uptime.System.ForceActiveChecksOnStart=1 -# -# Mandatory: no -# Range: 0-1 -# Default: -ForceActiveChecksOnStart=1 - -# Include configuration files for plugins -Include=/etc/zabbix/zabbix_agent2.d/plugins.d/*.conf - -####### For advanced users - TLS ciphersuite selection criteria ####### - -### Option: TLSCipherCert13 -# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. -# Override the default ciphersuite selection criteria for certificate-based encryption. -# -# Mandatory: no -# Default: -# TLSCipherCert13= - -### Option: TLSCipherCert -# OpenSSL (TLS 1.2) cipher string. -# Override the default ciphersuite selection criteria for certificate-based encryption. -# Example: -# EECDH+aRSA+AES128:RSA+aRSA+AES128 -# -# Mandatory: no -# Default: -# TLSCipherCert= - -### Option: TLSCipherPSK13 -# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. -# Override the default ciphersuite selection criteria for PSK-based encryption. -# Example: -# TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256 -# -# Mandatory: no -# Default: -# TLSCipherPSK13= - -### Option: TLSCipherPSK -# OpenSSL (TLS 1.2) cipher string. -# Override the default ciphersuite selection criteria for PSK-based encryption. -# Example: -# kECDHEPSK+AES128:kPSK+AES128 -# -# Mandatory: no -# Default: -# TLSCipherPSK= - -### Option: TLSCipherAll13 -# Cipher string for OpenSSL 1.1.1 or newer in TLS 1.3. -# Override the default ciphersuite selection criteria for certificate- and PSK-based encryption. -# Example: -# TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256 -# -# Mandatory: no -# Default: -# TLSCipherAll13= - -### Option: TLSCipherAll -# OpenSSL (TLS 1.2) cipher string. -# Override the default ciphersuite selection criteria for certificate- and PSK-based encryption. -# Example: -# EECDH+aRSA+AES128:RSA+aRSA+AES128:kECDHEPSK+AES128:kPSK+AES128 -# -# Mandatory: no -# Default: -# TLSCipherAll= - -####### Additional configuration files ####### - -### Option: Include -# You may include individual files or all files in a directory in the configuration file. -# Installing Zabbix will create include directory in /usr/local/etc, unless modified during the compile time. -# -# Mandatory: no -# Default: -# Include= - -Include=/etc/zabbix/zabbix_agent2.d/*.conf - -# Include=/usr/local/etc/zabbix_agent2.userparams.conf -# Include=/usr/local/etc/zabbix_agent2.conf.d/ -# Include=/usr/local/etc/zabbix_agent2.conf.d/*.conf diff --git a/legacy/zabbix/zabbix_agent2.d/Fail2ban.conf b/legacy/zabbix/zabbix_agent2.d/Fail2ban.conf deleted file mode 100644 index 2990f3d..0000000 --- a/legacy/zabbix/zabbix_agent2.d/Fail2ban.conf +++ /dev/null @@ -1,2 +0,0 @@ -UserParameter=fail2ban.status[*],sudo /usr/bin/fail2ban-client status '$1' -UserParameter=fail2ban.discovery,sudo /usr/bin/fail2ban-client status | grep 'Jail list:' | sed -e 's/^.*:\W\+//' -e 's/ //g' -e 's/,/ /g' | xargs -n1 | sed -e 's/\(.*\)/{"{#JAIL}":"\1"}/' | tr '\n' ',' | sed -e 's/,$//' -e 's/.*/{"data":[&]}/' diff --git a/legacy/zabbix/zabbix_agent2.d/nginx_custom.conf b/legacy/zabbix/zabbix_agent2.d/nginx_custom.conf deleted file mode 100644 index 189e6ca..0000000 --- a/legacy/zabbix/zabbix_agent2.d/nginx_custom.conf +++ /dev/null @@ -1,5 +0,0 @@ -# UserParameter para monitoramento customizado do Nginx -# Data: 2025-09-27 -# Contexto: Listar todos os arquivos de log (.log) no diretório /var/log/nginx/ - -UserParameter=nginx.access.logs.list,ls -m /var/log/nginx/*.access.log diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/ceph.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/ceph.conf deleted file mode 100644 index 9bd4ceb..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/ceph.conf +++ /dev/null @@ -1,77 +0,0 @@ -### Option: Plugins.Ceph.InsecureSkipVerify -# InsecureSkipVerify controls whether an HTTP client verifies the server's certificate chain and host name. -# If InsecureSkipVerify is true, TLS accepts any certificate presented by the server and any host name -# in that certificate. In this mode, TLS is susceptible to man-in-the-middle attacks. -# This should be used only for testing. -# -# Mandatory: no -# Range: false | true -# Default: -# Plugins.Ceph.InsecureSkipVerify=false - -### Option: Plugins.Ceph.KeepAlive -# The amount of time a connection can remain idle before it is closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.Ceph.KeepAlive=300 - -### Option: Plugins.Ceph.Timeout -# The maximum amount of time in seconds to wait for a request to be done. -# The timeout includes connection time, any redirects, and reading the response body. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Ceph.Timeout= - -### Option: Plugins.Ceph.Sessions.*.ApiKey -# ApiKey to be used for connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Ceph.Sessions.*.ApiKey= - -### Option: Plugins.Ceph.Sessions.*.User -# Username to be used for connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Ceph.Sessions.*.User= - -### Option: Plugins.Ceph.Sessions.*.Uri -# Uri to connect. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "https". -# Embedded credentials will be ignored. -# Default: -# Plugins.Ceph.Sessions.*.Uri= - -### Option: Plugins.Ceph.Default.ApiKey -# ApiKey to be used for connection. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Ceph.Default.ApiKey= - -### Option: Plugins.Ceph.Default.User -# Username to be used for connection. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Ceph.Default.User= - -### Option: Plugins.Ceph.Default.Uri -# Uri to connect. Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "https". -# Embedded credentials will be ignored. -# Default: -# Plugins.Ceph.Default.Uri= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/docker.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/docker.conf deleted file mode 100644 index a633de3..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/docker.conf +++ /dev/null @@ -1,14 +0,0 @@ -### Option: Plugins.Docker.Endpoint -# Docker API endpoint. -# -# Mandatory: no -# Default: unix:///var/run/docker.sock -# Plugins.Docker.Endpoint=unix:///var/run/docker.sock - -### Option: Plugins.Docker.Timeout -# The maximum time (in seconds) for waiting when a request has to be done. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Docker.Timeout= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/memcached.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/memcached.conf deleted file mode 100644 index 44afbe5..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/memcached.conf +++ /dev/null @@ -1,65 +0,0 @@ -### Option: Plugins.Memcached.Timeout -# The maximum time (in seconds) for waiting when a request has to be done. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Memcached.Timeout= - -### Option: Plugins.Memcached.KeepAlive -# Time in seconds for waiting before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.Memcached.KeepAlive=300 - -### Option: Plugins.Memcached.Sessions.*.Uri -# Uri to connect. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# Supported schemas: "tcp" and "unix". -# Embedded credentials will be ignored. -# Default: -# Plugins.Memcached.Sessions.*.Uri= - -### Option: Plugins.Memcached.Sessions.*.User -# Username to send to protected Memcached server. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Memcached.Sessions.*.User= - -### Option: Plugins.Memcached.Sessions.*.Password -# Password to send to protected Memcached server. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Memcached.Sessions.*.Password= - -### Option: Plugins.Memcached.Default.Uri -# Uri to connect. Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# Supported schemas: "tcp" and "unix". -# Embedded credentials will be ignored. -# Default: -# Plugins.Memcached.Default.Uri= - -### Option: Plugins.Memcached.Default.User -# Username to send to protected Memcached server. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Memcached.Default.User= - -### Option: Plugins.Memcached.Default.Password -# Password to send to protected Memcached server. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Memcached.Default.Password= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/modbus.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/modbus.conf deleted file mode 100644 index 4be5276..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/modbus.conf +++ /dev/null @@ -1,23 +0,0 @@ -### Option: Plugins.Modbus.Timeout -# The maximum time (in seconds) for connections. -# -# Mandatory: no -# Range: 1-30 -# Default: global timeout - -### Option: Plugins.Modbus.Sessions.*.Endpoint -# Endpoint is a connection string consisting of a protocol scheme, a host address and a port or seral port name and attributes. -# -# Mandatory: no - -### Option: Plugins.Modbus.Sessions.*.SlaveID -# Slave ID of modbus devices. -# -# Mandatory: no - -### Option: Plugins.Modbus.Sessions.*.Timeout -# The maximum time (in seconds) for connections. -# -# Mandatory: no -# Range: 1-30 -# Default: plugin modbus timeout diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/mongodb.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/mongodb.conf deleted file mode 100644 index b9b854c..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/mongodb.conf +++ /dev/null @@ -1,104 +0,0 @@ -### Option:Plugins.MongoDB.System.Path -# Path to external plugin executable. -# -# Mandatory: yes -# Default: -# Plugins.MongoDB.System.Path= - -Plugins.MongoDB.System.Path=/usr/sbin/zabbix-agent2-plugin/zabbix-agent2-plugin-mongodb - -### Option: Plugins.MongoDB.Timeout -# Amount of time to wait for a server to respond when first connecting and on -# follow up operations in the session. -# Global item-type timeout (or individual item timeout) will override this value if it is greater. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.MongoDB.Timeout= - -### Option: Plugins.MongoDB.KeepAlive -# Time in seconds for waiting before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.MongoDB.KeepAlive=300 - -### Option: Plugins.MongoDB.Sessions.*.Uri -# Uri to connect. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "tcp". -# Embedded credentials will be ignored. -# Default: -# Plugins.MongoDB.Sessions.*.Uri= - -### Option: Plugins.MongoDB.Sessions.*.User -# Username to send to protected MongoDB server. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.MongoDB.Sessions.*.User= - -### Option: Plugins.MongoDB.Sessions.*.Password -# Password to send to protected MongoDB server. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.MongoDB.Sessions.*.Password= - -### Option: Plugins.MongoDB.Sessions.*.TLSConnect -#Encryption type for MongoDB connection. "*" should be replaced with a session name. -# tls connection required - required -# verifies certificates - verify_ca -# verify certificates and ip - verify_full -## Mandatory: no -# Default: -# Plugins.MongoDB.Sessions.*.TLSConnect= - -### Option: Plugins.MongoDB.Sessions.*.TLSCAFile -# Full path-name of a file containing the top-level CA(s) certificates for MongoDB -# peer certificate verification. -## Mandatory: no -# Default: -# Plugins.MongoDB.Sessions.*.TLSCAFile= - -### Option: Plugins.MongoDB.Sessions.*.TLSCertFile -# Full path-name of a file containing the MongoDB certificate or certificate chain. -## Mandatory: no -# Default: -# Plugins.MongoDB.Sessions.*.TLSCertFile= - -### Option: Plugins.MongoDB.Sessions.*.TLSKeyFile -# Full path-name of a file containing the MongoDB private key. -## Mandatory: no -# Default: -# Plugins.MongoDB.Sessions.*.TLSKeyFile= - -### Option: Plugins.MongoDB.Default.Uri -# Uri to connect. Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "tcp". -# Embedded credentials will be ignored. -# Default: -# Plugins.MongoDB.Default.Uri= - -### Option: Plugins.MongoDB.Default.User -# Username to send to protected MongoDB server. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MongoDB.Default.User= - -### Option: Plugins.MongoDB.Default.Password -# Password to send to protected MongoDB server. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MongoDB.Default.Password= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/mqtt.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/mqtt.conf deleted file mode 100644 index 72b542c..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/mqtt.conf +++ /dev/null @@ -1,112 +0,0 @@ -### Option: Plugins.MQTT.Timeout -# The maximum time (in seconds) for connections, disconnections and subscribtions. -# -# Mandatory: no -# Range: 1-30 -# Default: global timeout -# Plugins.MQTT.Timeout= - -### Option: Plugins.MQTT.Sessions.*.Url -# Broker connection string. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must matches the URL format. -# Default: -# Plugins.MQTT.Sessions.*.Url= - -### Option: Plugins.MQTT.Sessions.*.Topic -# Topic to subscribe. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must matches the URL format. -# Default: -# Plugins.MQTT.Sessions.*.Topic= - -### Option: Plugins.MQTT.Sessions.*.User -# Username to be used for MQTT authentication. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Sessions.*.User= - -### Option: Plugins.MQTT.Sessions.*.Password -# Password to be used for MQTT authentication. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Sessions.*.Password= - -### Option: Plugins.MQTT.Sessions.*.TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificates for MQTT -# peer certificate verification. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Sessions.*.TLSCAFile= - -### Option: Plugins.MQTT.Sessions.*.TLSCertFile -# Full pathname of a file containing the MQTT certificate or certificate chain. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Sessions.*.TLSCertFile= - -### Option: Plugins.MQTT.Sessions.*.TLSKeyFile -# Full pathname of a file containing the mysql private key. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Sessions.*.TLSKeyFile= - -### Option: Plugins.MQTT.Default.*.Url -# Broker connection string. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must matches the URL format. -# Default: -# Plugins.MQTT.Default.*.Url= - -### Option: Plugins.MQTT.Default.*.Topic -# Topic to subscribe. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must matches the URL format. -# Default: -# Plugins.MQTT.Default.*.Topic= - -### Option: Plugins.MQTT.Default.*.User -# Username to be used for MQTT authentication. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Default.*.User= - -### Option: Plugins.MQTT.Default.*.Password -# Password to be used for MQTT authentication. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Default.*.Password= - -### Option: Plugins.MQTT.Default.TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificates for mysql -# peer certificate verification. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Default.TLSCAFile= - -### Option: Plugins.MQTT.Default.TLSCertFile -# Full pathname of a file containing the MQTT certificate or certificate chain. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Default.TLSCertFile= - -### Option: Plugins.MQTT.Default.TLSKeyFile -# Full pathname of a file containing the MQTT private key. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MQTT.Default.TLSKeyFile= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/mssql.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/mssql.conf deleted file mode 100644 index e28827f..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/mssql.conf +++ /dev/null @@ -1,184 +0,0 @@ -### Option:Plugins.MSSQL.System.Path -# Path to external plugin executable. -# -# Mandatory: yes -# Default: -# Plugins.MSSQL.System.Path= - -Plugins.MSSQL.System.Path=/usr/sbin/zabbix-agent2-plugin/zabbix-agent2-plugin-mssql - -### Option: Plugins.MSSQL.Timeout -# Amount of time to wait for a server to respond when first connecting and on -# follow up operations in the session. -# Global item-type timeout (or individual item timeout) will override this value if it is greater. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.MSSQL.Timeout= - -### Option: Plugins.MSSQL.KeepAlive -# Time in seconds for waiting before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.MSSQL.KeepAlive=300 - -### Option: Plugins.MSSQL.CustomQueriesDir -# Filepath to a directory containing user defined .sql files with custom -# queries that the plugin can execute. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.CustomQueriesDir= - -### Option: Plugins.MSSQL.Sessions.*.Uri -# Uri to connect. -# Replace "*" with a session name. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "sqlserver". -# Embedded credentials will be ignored. -# Connection to named instance can be made by specifying instance name in the URI. -# Example: sqlserver://localhost/InstanceName -# Default: sqlserver://localhost:1433 -# Plugins.MSSQL.Sessions.*.Uri= - -### Option: Plugins.MSSQL.Sessions.*.User -# Username to send to protected MSSQL server. -# Replace "*" with a session name. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Sessions.*.User= - -### Option: Plugins.MSSQL.Sessions.*.Password -# Password to send to protected MSSQL server. -# Replace "*" with a session name. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Sessions.*.Password= - -### Option: Plugins.MSSQL.Sessions.*.CACertPath -# Filepath to the public key certificate of the certificate authority (CA) -# that issued the certificate of the MSSQL server. -# Replace "*" with a session name. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Sessions.*.CACertPath= - -### Option: Plugins.MSSQL.Sessions.*.TrustServerCertificate -# Boolean value to indicate whether the plugin should trust the server -# certificate without validating it. -# Replace "*" with a session name. -# -# Mandatory: no -# Range: true, false -# Default: -# Plugins.MSSQL.Sessions.*.TrustServerCertificate= - -### Option: Plugins.MSSQL.Sessions.*.HostNameInCertificate -# Common name (CN) of the certificate of the MSSQL server. -# Replace "*" with a session name. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Sessions.*.HostNameInCertificate= - -### Option: Plugins.MSSQL.Sessions.*.Encrypt -# Connection encription type. -# Replace "*" with a session name. -# -# Mandatory: no -# Default: -# Range: true, false, strict, disable -# Plugins.MSSQL.Sessions.*.Encrypt= - -### Option: Plugins.MSSQL.Sessions.*.TLSMinVersion -# Minimum TLS version to use. -# Replace "*" with a session name. -# -# Mandatory: no -# Default: -# Range: 1.0, 1.1, 1.2, 1.3 -# Plugins.MSSQL.Sessions.*.TLSMinVersion= - -### Option: Plugins.MSSQL.Default.Uri -# Uri to connect. -# Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "sqlserver". -# Embedded credentials will be ignored. -# Connection to named instance can be made by specifying instance name in the URI. -# Example: sqlserver://localhost/InstanceName -# Default: sqlserver://localhost:1433 -# Plugins.MSSQL.Default.Uri= - -### Option: Plugins.MSSQL.Default.User -# Username to send to protected MSSQL server. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Default.User= - -### Option: Plugins.MSSQL.Default.Password -# Password to send to protected MSSQL server. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Default.Password= - -### Option: Plugins.MSSQL.Default.CACertPath -# Filepath to the public key certificate of the certificate authority (CA) -# that issued the certificate of the MSSQL server. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Default.CACertPath= - -### Option: Plugins.MSSQL.Default.TrustServerCertificate -# Boolean value to indicate whether the plugin should trust the server -# certificate without validating it. -# Default value used if no other is specified. -# -# Mandatory: no -# Range: true, false -# Default: -# Plugins.MSSQL.Default.TrustServerCertificate= - -### Option: Plugins.MSSQL.Default.HostNameInCertificate -# Common name (CN) of the certificate of the MSSQL server. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.MSSQL.Default.HostNameInCertificate= - -### Option: Plugins.MSSQL.Default.Encrypt -# Connection encryption type. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Range: true, false, strict, disable -# Plugins.MSSQL.Default.Encrypt= - -### Option: Plugins.MSSQL.Default.TLSMinVersion -# Minimum TLS version to use. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Range: 1.0, 1.1, 1.2, 1.3 -# Plugins.MSSQL.Default.TLSMinVersion= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/mysql.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/mysql.conf deleted file mode 100644 index f6fd4fa..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/mysql.conf +++ /dev/null @@ -1,138 +0,0 @@ -### Option: Plugins.Mysql.CallTimeout -# The maximum time in seconds for waiting when a request has to be done. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Mysql.CallTimeout= - -### Option: Plugins.Mysql.Timeout -# The maximum time in seconds for waiting when a connection has to be established. -# -# Mandatory: no -# Range: 1-30 -# Default: global timeout - -### Option: Plugins.Mysql.CustomQueriesPath -# Full pathname of a directory containing *.sql* files with custom queries. -# -# Mandatory: no -# Default: -# Plugins.Mysql.CustomQueriesPath= - -### Option: Plugins.Mysql.KeepAlive -# Time (in seconds) to wait before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.Mysql.KeepAlive=300 - -### Option: Plugins.Mysql.Sessions.*.Uri -# Connection string. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must matches the URI format. -# Default: -# Plugins.Mysql.Sessions.*.Uri= - -### Option: Plugins.Mysql.Sessions.*.User -# Username to be used for MySQL authentication. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Sessions.*.User= - -### Option: Plugins.Mysql.Sessions.*.Password -# Password to be used for MySQL authentication. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Sessions.*.Password= - -### Option: Plugins.Mysql.Sessions.*.TLSConnect -# Encryption type for MySQL connection. "*" should be replaced with a session name. -# tls connection required - required -# verifies certificates - verify_ca -# verify certificates and ip - verify_full -# -# Mandatory: no -# Default: -# Plugins.Mysql.Sessions.*.TLSConnect= - -### Option: Plugins.Mysql.Sessions.*.TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificates for mysql -# peer certificate verification. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Sessions.*.TLSCAFile= - -### Option: Plugins.Mysql.Sessions.*.TLSCertFile -# Full pathname of a file containing the mysql certificate or certificate chain. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Sessions.*.TLSCertFile= - -### Option: Plugins.Mysql.Sessions.*.TLSKeyFile -# Full pathname of a file containing the mysql private key. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Sessions.*.TLSKeyFile= - -### Option: Plugins.Mysql.Default.Uri -# Connection string. Default value used if no other is specified. -# -# Mandatory: no -# Range: Must matches the URI format. -# Default: -# Plugins.Mysql.Default.Uri= - -### Option: Plugins.Mysql.Default.User -# Username to be used for MySQL authentication. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Default.User= - -### Option: Plugins.Mysql.Default.Password -# Password to be used for MySQL authentication. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Default.Password= - -### Option: Plugins.Mysql.Default.TLSConnect -# Encryption type for MySQL connection. Default value used if no other is specified. -# tls connection required - required -# verifies certificates - verify_ca -# verify certificates and ip - verify_full -# -# Mandatory: no -# Default: -# Plugins.Mysql.Default.TLSConnect= - -### Option: Plugins.Mysql.Default.TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificates for mysql -# peer certificate verification. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Default.TLSCAFile= - -### Option: Plugins.Mysql.Default.TLSCertFile -# Full pathname of a file containing the mysql certificate or certificate chain. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Default.TLSCertFile= - -### Option: Plugins.Mysql.Default.TLSKeyFile -# Full pathname of a file containing the mysql private key. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Mysql.Default.TLSKeyFile= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/oracle.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/oracle.conf deleted file mode 100644 index 881602b..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/oracle.conf +++ /dev/null @@ -1,96 +0,0 @@ -### Option: Plugins.Oracle.CallTimeout -# The maximum time in seconds for waiting when a request has to be done. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Oracle.CallTimeout= - -### Option: Plugins.Oracle.ConnectTimeout -# The maximum time in seconds for waiting when a connection has to be established. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Oracle.ConnectTimeout= - -### Option: Plugins.Oracle.CustomQueriesPath -# Full pathname of a directory containing *.sql* files with custom queries. -# -# Mandatory: no -# Default: -# Plugins.Oracle.CustomQueriesPath= - -### Option: Plugins.Oracle.KeepAlive -# Time in seconds for waiting before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.Oracle.KeepAlive=300 - -### Option: Plugins.Oracle.Sessions.*.Uri -# Uri to connect. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "tcp". -# Embedded credentials will be ignored. -# Default: -# Plugins.Oracle.Sessions.*.Uri= - -### Option: Plugins.Oracle.Sessions.*.Service -# Service name to be used for connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: SID is not supported. -# Default: -# Plugins.Oracle.Sessions.*.Service= - -### Option: Plugins.Oracle.Sessions.*.User -# Username to be used for connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Oracle.Sessions.*.User= - -### Option: Plugins.Oracle.Sessions.*.Password -# Password to be used for connectione. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Oracle.Sessions.*.Password= - -### Option: Plugins.Oracle.Default.Uri -# Uri to connect. Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# The only supported schema is "tcp". -# Embedded credentials will be ignored. -# Default: -# Plugins.Oracle.Default.Uri= - -### Option: Plugins.Oracle.Default.Service -# Service name to be used for connection. Default value used if no other is specified. -# -# Mandatory: no -# Range: SID is not supported. -# Default: -# Plugins.Oracle.Default.Service= - -### Option: Plugins.Oracle.Default.User -# Username to be used for connection. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Oracle.Default.User= - -### Option: Plugins.Oracle.Default.Password -# Password to be used for connectione. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Oracle.Default.Password= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/postgresql.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/postgresql.conf deleted file mode 100644 index d356d7a..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/postgresql.conf +++ /dev/null @@ -1,194 +0,0 @@ -### Option:Plugins.PostgreSQL.System.Path -# Path to external plugin executable. -# -# Mandatory: yes -# Default: -Plugins.PostgreSQL.System.Path=/usr/sbin/zabbix-agent2-plugin/zabbix-agent2-plugin-postgresql - -### Option: Plugins.PostgreSQL.CallTimeout -# The maximum time in seconds for waiting when a request has to be done. -# Global item-type timeout (or individual item timeout) will override this value if it is greater. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.PostgreSQL.CallTimeout= - -### Option: Plugins.PostgreSQL.Timeout -# The maximum time in seconds for waiting when a connection has to be established. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.PostgreSQL.Timeout= - -### Option: Plugins.PostgreSQL.KeepAlive -# Time in seconds for waiting before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.PostgreSQL.KeepAlive=300 - -### Option: Plugins.PostgreSQL.CustomQueriesPath -# Full pathname of a directory containing *.sql* files with custom queries. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.CustomQueriesPath= - -### Option: Plugins.PostgreSQL.Sessions.*.Uri -# Uri to connect. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: -# Must match the URI format. -# Supported schemas: "tcp" and "unix". -# Embedded credentials will be ignored. -# Default: -# Plugins.PostgreSQL.Sessions.*.Uri= - -### Option: Plugins.PostgreSQL.Sessions.*.User -# Username for session connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must match the PostgreSQL user name. -# Default: -# Plugins.PostgreSQL.Sessions.*.User= - -### Option: Plugins.PostgreSQL.Sessions.*.Password -# Password for session connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: Must match the Password format. -# Default: -# Plugins.PostgreSQL.Sessions.*.Password= - -### Option: Plugins.PostgreSQL.Sessions.*.Database -# Database for session connection. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Sessions.*.Database= - -### Option: Plugins.PostgreSQL.Sessions.*.TLSConnect -# Encryption type for PostgreSQL connection. "*" should be replaced with a session name. -# require/required - connect using TLS as transport mode without identity checks, acts like verify-ca if ca -# file is provided; -# verify-ca/verify_ca - connect using TLS and verify certificate; -# verify-full/verify_full - connect using TLS, verify certificate and verify that database identity (CN) specified -# by DBHost matches its certificate; -# Undefined encryption type means unencrypted connection. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Sessions.*.TLSConnect= - -### Option: Plugins.PostgreSQL.Sessions.*.TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificate -# peer certificate verification. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Sessions.*.TLSCAFile= - -### Option: Plugins.PostgreSQL.Sessions.*.TLSCertFile -# Full pathname of a file containing the PostgreSQL certificate or certificate chain. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Sessions.*.TLSCertFile= - -### Option: Plugins.PostgreSQL.Sessions.*.TLSKeyFile -# Full pathname of a file containing the PostgreSQL private key. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Sessions.*.TLSKeyFile= - -### Option: Plugins.PostgreSQL.Sessions.*.CacheMode -# Cache mode for PostgreSQL connection. "*" should be replaced with a session name. -# prepare - will create prepared statements on the PostgreSQL server.; -# describe - will use the anonymous prepared statement to describe a statement without creating a statement on the -# server. -# -# Mandatory: no -# Default: prepare -# Plugins.PostgreSQL.Sessions.*.CacheMode= - -### Option: Plugins.PostgreSQL.Default.Uri -# Uri to connect. Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# Supported schemas: "tcp" and "unix". -# Embedded credentials will be ignored. -# Default: -# Plugins.PostgreSQL.Default.Uri= - -### Option: Plugins.PostgreSQL.Default.User -# Username for session connection. Default value used if no other is specified. -# -# Mandatory: no -# Range: Must matches PostgreSQL user name. -# Default: -# Plugins.PostgreSQL.Default.User= - -### Option: Plugins.PostgreSQL.Default.Password -# Password for session connection. Default value used if no other is specified. -# -# Mandatory: no -# Range: Must matches the Password format. -# Default: -# Plugins.PostgreSQL.Default.Password= - -### Option: Plugins.PostgreSQL.Default.Database -# Database for session connection. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Default.Database= - -### Option: Plugins.PostgreSQL.Default.TLSConnect -# Encryption type for Postgres connection. Default value used if no other is specified. -# tls connection required - required -# verifies certificates - verify_ca -# verify certificates and ip - verify_full -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Default.TLSConnect= - -### Option: Plugins.PostgreSQL.Default.TLSCAFile -# Full pathname of a file containing the top-level CA(s) certificate -# peer certificate verification. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Default.TLSCAFile= - -### Option: Plugins.PostgreSQL.Default.TLSCertFile -# Full pathname of a file containing the postgres certificate or certificate chain. -# Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Default.TLSCertFile= - -### Option: Plugins.PostgreSQL.Default.TLSKeyFile -# Full pathname of a file containing the postgres private key. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.PostgreSQL.Default.TLSKeyFile= - -### Option: Plugins.PostgreSQL.Default.CacheMode -# Cache mode for PostgreSQL connection. -# prepare - will create prepared statements on the PostgreSQL server.; -# describe - will use the anonymous prepared statement to describe a statement without creating a statement on the -# server. -# -# Mandatory: no -# Default: prepare -# Plugins.PostgreSQL.Default.CacheMode= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/redis.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/redis.conf deleted file mode 100644 index 7e81f28..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/redis.conf +++ /dev/null @@ -1,65 +0,0 @@ -### Option: Plugins.Redis.Timeout -# The maximum time (in seconds) for waiting when a request has to be done. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Redis.Timeout= - -### Option: Plugins.Redis.KeepAlive -# Time in seconds for waiting before unused connections will be closed. -# -# Mandatory: no -# Range: 60-900 -# Default: -# Plugins.Redis.KeepAlive=300 - -### Option: Plugins.Redis.Sessions.*.Uri -# Uri to connect. "*" should be replaced with a session name. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# Supported schemas: "tcp" and "unix". -# Embedded credentials will be ignored. -# Default: -# Plugins.Redis.Sessions.*.Uri= - -### Option: Plugins.Redis.Sessions.*.User -# User to send to protected Redis server. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: default -# Plugins.Redis.Sessions.*.User= - -### Option: Plugins.Redis.Sessions.*.Password -# Password to send to protected Redis server. "*" should be replaced with a session name. -# -# Mandatory: no -# Default: -# Plugins.Redis.Sessions.*.Password= - -### Option: Plugins.Redis.Default.Uri -# Uri to connect. Default value used if no other is specified. -# -# Mandatory: no -# Range: -# Must matches the URI format. -# Supported schemas: "tcp" and "unix". -# Embedded credentials will be ignored. -# Default: -# Plugins.Redis.Default.Uri= - -### Option: Plugins.Redis.Default.User -# User to send to protected Redis server. Default value used if no other is specified. -# -# Mandatory: no -# Default: default -# Plugins.Redis.Default.User= - -### Option: Plugins.Redis.Default.Password -# Password to send to protected Redis server. Default value used if no other is specified. -# -# Mandatory: no -# Default: -# Plugins.Redis.Default.Password= diff --git a/legacy/zabbix/zabbix_agent2.d/plugins.d/smart.conf b/legacy/zabbix/zabbix_agent2.d/plugins.d/smart.conf deleted file mode 100644 index f29c3a9..0000000 --- a/legacy/zabbix/zabbix_agent2.d/plugins.d/smart.conf +++ /dev/null @@ -1,15 +0,0 @@ -### Option: Plugins.Smart.Timeout -# The maximum time in seconds for waiting before smartctl execution is terminated. -# The timeout is for a single smartctl command line execution. -# -# Mandatory: no -# Range: 1-30 -# Default: -# Plugins.Smart.Timeout= - -### Option: Plugins.Smart.Path -# Path to smartctl executable. -# -# Mandatory: no -# Default: smartctl -# Plugins.Smart.Path=