Redirect Zabbix to HTTPS

[e-mardones]

Good morning everyone,

For security reasons, we need our Zabbix server to be accessible via HTTPS. Our system is an Ubuntu 22.04 LTS server with Apache and MySQL, and the Zabbix version is 7.0 LTS. I am trying to achieve this, but I can't find the way.

Does anyone here have a Zabbix server accessible via HTTPS?

Thank you.

[tim.mooney]

we need our Zabbix server to be accessible via HTTPS.

with Apache

I am trying to achieve this, but I can't find the way.

Sure, but that's not really a Zabbix question, that is an Apache httpd question, about how to require HTTPS. You can likely find answer to that question on many different forums.

Do you know how to generate a certificate signing request (CSR) and get it signed? Are you using an auto-renewing system (like ACME) from a vendor or Let's Encrypt on your other systems?

Getting a signed certificate is the first step. Have you done that?

What steps have you tried? What issue are you running into?

[e-mardones]

Hi,

Not yet, have you got any procedure to get it free.

Thanks

[tim.mooney]

You can get free certificates that will be trusted by most modern browsers from the "Let's Encrypt" project. It's a consortium of vendors. I don't know if including the URL here will get flagged as potential spam, but if you just type "Let's Encrypt" into a web search engine and then go to the web site with the same name (ending in .org), you're on the right track. There is documentation on getting started with Let's Encrypt both on that site and on lots of other web sites.

There are dozens of different software packages that can do the setup and automatic update of certs on your servers. Pick any one you like, there are lots of choices. I would bet that Ubuntu provides either "certbot" or "acme" as a package -- both of which are very popular packages that speak the ACME protocol that underpins Let's Encrypt.

Some of those clients even can output the exact config you need to include inside your Apache web server config files, to enable SSL (TLS) and point at the certificate, private key, etc.