How to expose zabbix front end to the internet?

[derli1988]

I have a separate Zabbix environment

ld-infra-zabbix-se-01 = 192.168.4.201
ld-infra-zabbix-fe-01 = 192.168.4.202
ld-infra-zabbix-db-01 = 192.168.4.203

Now I'd like to expose the frontend to the internet, this is hosted on-prem on our Vcenter infra.

I have provisioned a public IP for the FrontEnd Server running apache.... My Public IP is 89.xxx.xxx.38

However, i can't do HTTPs for private IP and I can't do HTTP nor HTTPs for the public IP

under my /etc/zabbix/web/zabbix.conf.php

I have this line allowing the private IP


$ZBX_SERVER = '192.168.4.202';

For private connection on HTTP, it works fine with the following URL

http://192.168.4.202/zabbix/zabbix.php

However, when I try with the public, it doesn't work

http://89.xxx.xxx.38/zabbix/zabbix.php

I have added another line to the zabbix.php file

$ZBX_SERVER = '192.168.4.202';
$ZBX_SERVER = '89.xxx.xxx.38';


Any help here, please?

[PeterZielony]

the best approach would be using a reverse proxy like nginx. It's a more secure approach.
https://www.reddit.com/r/selfhosted/...reverse_proxy/

remember this will be only for web frontend and API. Using Nginx you can "inject" SSL with forwarding to non-SSL host behind FW

You would have another route for proxies/agents (for ld-infra-zabbix-se-01 i guess) if you want to expose them too if you have anything external.

[derli1988]

I have followed dimitry's youtube video to allow HTTPS for APache, it works like a charm

ZABBIX Frontend SSL On Apache httpd - YouTube