694162e2a7
The web config redesign changed the HTTP-auth lookup from
getenv('ZBX_ALLOW_HTTP_AUTH') to env_bool('ALLOW_HTTP_AUTH', true),
dropping the ZBX_ prefix. The entrypoint (php.sh) still sets and exports
ZBX_ALLOW_HTTP_AUTH, and every web image README documents ZBX_ALLOW_HTTP_AUTH,
so the frontend now reads a variable that is never set and always falls back
to the default (true).
As a result, setting ZBX_ALLOW_HTTP_AUTH=false no longer disables HTTP
authentication in the frontend. Restore the documented variable name.
111 lines
3.6 KiB
PHP
111 lines
3.6 KiB
PHP
<?php
|
|
|
|
function env_string(string $name, string $default = ''): string {
|
|
$value = getenv($name);
|
|
|
|
return ($value === false) ? $default : $value;
|
|
}
|
|
|
|
function env_int(string $name, int $default = 0): int {
|
|
$value = getenv($name);
|
|
|
|
return ($value === false || $value === '') ? $default : (int) $value;
|
|
}
|
|
|
|
function env_bool(string $name, bool $default = false): bool {
|
|
$value = getenv($name);
|
|
|
|
if ($value === false || $value === '') {
|
|
return $default;
|
|
}
|
|
|
|
return filter_var($value, FILTER_VALIDATE_BOOLEAN);
|
|
}
|
|
|
|
function env_json(string $name, array $default = []): array {
|
|
$value = getenv($name);
|
|
|
|
if ($value === false || $value === '') {
|
|
return $default;
|
|
}
|
|
|
|
$decoded = json_decode(str_replace("'", '"', $value), true);
|
|
|
|
return is_array($decoded) ? $decoded : $default;
|
|
}
|
|
|
|
function resolve_file(string $default_path, string $env_name): string {
|
|
if (file_exists($default_path)) {
|
|
return $default_path;
|
|
}
|
|
|
|
$path = getenv($env_name);
|
|
|
|
return ($path && file_exists($path)) ? $path : '';
|
|
}
|
|
|
|
$DB['TYPE'] = env_string('DB_SERVER_TYPE');
|
|
$DB['SERVER'] = env_string('DB_SERVER_HOST');
|
|
$DB['PORT'] = env_int('DB_SERVER_PORT');
|
|
$DB['DATABASE'] = env_string('DB_SERVER_DBNAME');
|
|
$DB['SCHEMA'] = env_string('DB_SERVER_SCHEMA');
|
|
|
|
if (!getenv('VAULT_TOKEN') || !getenv('ZBX_VAULTURL')) {
|
|
$DB['USER'] = env_string('DB_SERVER_USER');
|
|
$DB['PASSWORD'] = env_string('DB_SERVER_PASS');
|
|
}
|
|
else {
|
|
$DB['USER'] = '';
|
|
$DB['PASSWORD'] = '';
|
|
}
|
|
|
|
if (getenv('ZBX_SERVER_HOST')) {
|
|
$ZBX_SERVER = env_string('ZBX_SERVER_HOST');
|
|
$ZBX_SERVER_PORT = env_string('ZBX_SERVER_PORT');
|
|
}
|
|
|
|
$ZBX_SERVER_NAME = env_string('ZBX_SERVER_NAME');
|
|
|
|
$DB['ENCRYPTION'] = env_bool('ZBX_DB_ENCRYPTION');
|
|
$DB['VERIFY_HOST'] = env_bool('ZBX_DB_VERIFY_HOST');
|
|
$DB['KEY_FILE'] = env_string('ZBX_DB_KEY_FILE');
|
|
$DB['CERT_FILE'] = env_string('ZBX_DB_CERT_FILE');
|
|
$DB['CA_FILE'] = env_string('ZBX_DB_CA_FILE');
|
|
$DB['CIPHER_LIST'] = env_string('ZBX_DB_CIPHER_LIST');
|
|
|
|
$DB['VAULT'] = env_string('ZBX_VAULT');
|
|
$DB['VAULT_URL'] = env_string('ZBX_VAULTURL');
|
|
$DB['VAULT_PREFIX'] = env_string('ZBX_VAULTPREFIX');
|
|
$DB['VAULT_DB_PATH'] = env_string('ZBX_VAULTDBPATH');
|
|
$DB['VAULT_TOKEN'] = env_string('VAULT_TOKEN');
|
|
|
|
$DB['VAULT_CERT_FILE'] = resolve_file('/etc/zabbix/web/certs/vault.crt', 'ZBX_VAULTCERTFILE');
|
|
$DB['VAULT_KEY_FILE'] = resolve_file('/etc/zabbix/web/certs/vault.key', 'ZBX_VAULTKEYFILE');
|
|
|
|
$DB['VAULT_CACHE'] = env_bool('ZBX_VAULTCACHE');
|
|
|
|
$DB['DOUBLE_IEEE754'] = env_bool('DB_DOUBLE_IEEE754');
|
|
|
|
$IMAGE_FORMAT_DEFAULT = IMAGE_FORMAT_PNG;
|
|
|
|
$HISTORY['url'] = env_json('ZBX_HISTORYSTORAGEURL');
|
|
if ($HISTORY['url'] === []) {
|
|
$HISTORY['url'] = env_string('ZBX_HISTORYSTORAGEURL');
|
|
}
|
|
$HISTORY['types'] = env_json('ZBX_HISTORYSTORAGETYPES');
|
|
|
|
$SSO['SP_KEY'] = resolve_file('/etc/zabbix/web/certs/sp.key', 'ZBX_SSO_SP_KEY');
|
|
$SSO['SP_CERT'] = resolve_file('/etc/zabbix/web/certs/sp.crt', 'ZBX_SSO_SP_CERT');
|
|
$SSO['IDP_CERT'] = resolve_file('/etc/zabbix/web/certs/idp.crt', 'ZBX_SSO_IDP_CERT');
|
|
|
|
$SSO['SETTINGS'] = env_json('ZBX_SSO_SETTINGS');
|
|
|
|
$ALLOW_HTTP_AUTH = env_bool('ZBX_ALLOW_HTTP_AUTH', true);
|
|
|
|
$ZBX_SERVER_TLS['ACTIVE'] = env_bool('ZBX_SERVER_TLS_ACTIVE');
|
|
$ZBX_SERVER_TLS['CA_FILE'] = resolve_file('', 'ZBX_SERVER_TLS_CAFILE');
|
|
$ZBX_SERVER_TLS['KEY_FILE'] = resolve_file('', 'ZBX_SERVER_TLS_KEYFILE');
|
|
$ZBX_SERVER_TLS['CERT_FILE'] = resolve_file('', 'ZBX_SERVER_TLS_CERTFILE');
|
|
$ZBX_SERVER_TLS['CERTIFICATE_ISSUER'] = env_string('ZBX_SERVER_TLS_CERT_ISSUER');
|
|
$ZBX_SERVER_TLS['CERTIFICATE_SUBJECT'] = env_string('ZBX_SERVER_TLS_CERT_SUBJECT');
|