From 694162e2a7da7af79e9704e2d435545b90381b90 Mon Sep 17 00:00:00 2001 From: saranf Date: Mon, 6 Jul 2026 20:26:51 +0900 Subject: [PATCH] Fix ZBX_ALLOW_HTTP_AUTH being ignored in web frontend config The web config redesign changed the HTTP-auth lookup from getenv('ZBX_ALLOW_HTTP_AUTH') to env_bool('ALLOW_HTTP_AUTH', true), dropping the ZBX_ prefix. The entrypoint (php.sh) still sets and exports ZBX_ALLOW_HTTP_AUTH, and every web image README documents ZBX_ALLOW_HTTP_AUTH, so the frontend now reads a variable that is never set and always falls back to the default (true). As a result, setting ZBX_ALLOW_HTTP_AUTH=false no longer disables HTTP authentication in the frontend. Restore the documented variable name. --- templates/config/web/zabbix.conf.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/config/web/zabbix.conf.php b/templates/config/web/zabbix.conf.php index d4cfb0c7..b2035409 100644 --- a/templates/config/web/zabbix.conf.php +++ b/templates/config/web/zabbix.conf.php @@ -100,7 +100,7 @@ $SSO['IDP_CERT'] = resolve_file('/etc/zabbix/web/certs/idp.crt', 'ZBX_SSO_IDP_CE $SSO['SETTINGS'] = env_json('ZBX_SSO_SETTINGS'); -$ALLOW_HTTP_AUTH = env_bool('ALLOW_HTTP_AUTH', true); +$ALLOW_HTTP_AUTH = env_bool('ZBX_ALLOW_HTTP_AUTH', true); $ZBX_SERVER_TLS['ACTIVE'] = env_bool('ZBX_SERVER_TLS_ACTIVE'); $ZBX_SERVER_TLS['CA_FILE'] = resolve_file('', 'ZBX_SERVER_TLS_CAFILE');