zabbix

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "zabbix-appliance/zabbix-docker"]
+	path = zabbix-appliance/zabbix-docker
+	url = https://github.com/zabbix/zabbix-docker.git

zabbix-appliance/.env.example

@@ -0,0 +1,2 @@
+TAILSCALE_OAUTH_KEY=
+TAILSCALE_TAGS=

zabbix-appliance/docker-compose.yml

@@ -0,0 +1,28 @@
+---
+include:
+  - ./zabbix-docker/docker-compose_v3_alpine_pgsql_latest.yaml
+services:
+  ts-zabbix-server:
+    image: tailscale/tailscale:latest
+    container_name: ts-zabbix-server
+    hostname: zabbix
+    environment:
+      - TS_AUTHKEY=${TAILSCALE_OAUTH_KEY}
+      - TS_EXTRA_ARGS=--advertise-tags=${TAILSCALE_TAGS}
+      - TS_SERVE_CONFIG=/config/zabbix-server.json
+      - TS_STATE_DIR=/var/lib/tailscale
+    volumes:
+      - ts-zabbix-server-state:/var/lib/tailscale
+      - ${PWD}/ts-zabbix-server/config:/config
+      - /dev/net/tun:/dev/net/tun
+    cap_add:
+      - net_admin
+      - sys_module
+    restart: unless-stopped
+  
+volumes:
+  ts-kuma-state:
+    driver: local
+  ts-zabbix-server-state:
+    driver: local
+

zabbix-appliance/ts-zabbix-server/config/zabbix-server.json

@@ -0,0 +1,20 @@
+{
+    "TCP": {
+      "443": {
+        "HTTPS": true
+      }
+    },
+    "Web": {
+      "${TS_CERT_DOMAIN}:443": {
+        "Handlers": {
+          "/": {
+            "Proxy": "http://127.0.0.1:80"
+          }
+        }
+      }
+    },
+    "AllowFunnel": {
+      "${TS_CERT_DOMAIN}:443": false
+    }
+  }
+