01/01: hydra: berlin: Restrict zabbix front-end to localhost.

[Ricardo Wurmus]

rekado pushed a commit to branch master
in repository maintenance.

commit 8a8eef3388ac7c8fc35b7ff5cb65fedb69356b45
Author: Ricardo Wurmus <address@hidden>
Date:   Sat Dec 29 15:15:52 2018 +0100

    hydra: berlin: Restrict zabbix front-end to localhost.
    
    * hydra/berlin.scm <services>: Override zabbix-front-end-configuration
    to only listen on localhost.
---
 hydra/berlin.scm | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/hydra/berlin.scm b/hydra/berlin.scm
index 1b8f8bf..c3d1460 100644
--- a/hydra/berlin.scm
+++ b/hydra/berlin.scm
@@ -3,7 +3,8 @@
 
 (use-modules (gnu) (guix) (sysadmin services) (sysadmin people))
 (use-service-modules base databases monitoring networking admin shepherd)
-(use-package-modules admin certs emacs linux ssh tls vim package-management
+(use-package-modules admin certs emacs linux monitoring
+                     ssh tls vim package-management
                      web wget ci rsync)
 
 (define %sysadmins
@@ -169,6 +170,20 @@ Happy hacking!\n"))
                        (include-files '("/root/zabbix-pass"))))
              (service zabbix-front-end-service-type
                       (zabbix-front-end-configuration
+                       (nginx (list
+                               (nginx-server-configuration
+                                (root #~(string-append 
#$zabbix-server:front-end "/share/zabbix/php"))
+                                (listen '("127.0.0.1:7878"))
+                                (index '("index.php"))
+                                (locations
+                                 (let ((php-location (nginx-php-location)))
+                                   (list (nginx-location-configuration
+                                          (inherit php-location)
+                                          (body (append 
(nginx-location-configuration-body php-location)
+                                                        (list "
+fastcgi_param PHP_VALUE \"post_max_size = 16M
+                          max_execution_time = 300\";
+"))))))))))
                        (db-secret-file "/root/zabbix-front-end-secrets")))
 
              ;; For the Zabbix database.  It was created by manually