Set up Zabbix proxy for distributed network monitoring

#!/usr/bin/env bash

set -euo pipefail

# Colors for output
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m' # No Color

# Configuration variables
ZABBIX_SERVER=""
PROXY_HOSTNAME=""
DATABASE_TYPE="sqlite"
DB_PASSWORD=""

# Usage function
usage() {
    echo "Usage: $0 -s ZABBIX_SERVER_IP -h PROXY_HOSTNAME [-d DATABASE_TYPE] [-p DB_PASSWORD]"
    echo ""
    echo "Options:"
    echo "  -s  Zabbix server IP address (required)"
    echo "  -h  Proxy hostname (required)"
    echo "  -d  Database type: sqlite or postgresql (default: sqlite)"
    echo "  -p  Database password (required if using postgresql)"
    echo ""
    echo "Example: $0 -s 192.168.1.10 -h proxy-office-london"
    echo "Example: $0 -s 192.168.1.10 -h proxy-office-london -d postgresql -p mypassword"
    exit 1
}

# Parse command line arguments
while getopts "s:h:d:p:" opt; do
    case $opt in
        s) ZABBIX_SERVER="$OPTARG" ;;
        h) PROXY_HOSTNAME="$OPTARG" ;;
        d) DATABASE_TYPE="$OPTARG" ;;
        p) DB_PASSWORD="$OPTARG" ;;
        *) usage ;;
    esac
done

# Check required arguments
if [[ -z "$ZABBIX_SERVER" || -z "$PROXY_HOSTNAME" ]]; then
    echo -e "${RED}Error: Zabbix server IP and proxy hostname are required${NC}"
    usage
fi

if [[ "$DATABASE_TYPE" == "postgresql" && -z "$DB_PASSWORD" ]]; then
    echo -e "${RED}Error: Database password is required when using PostgreSQL${NC}"
    usage
fi

# Check if running as root
if [[ $EUID -ne 0 ]]; then
    echo -e "${RED}Error: This script must be run as root${NC}"
    exit 1
fi

# Cleanup function for rollback
cleanup() {
    echo -e "${YELLOW}Cleaning up on error...${NC}"
    systemctl stop zabbix-proxy 2>/dev/null || true
    if [[ "$DATABASE_TYPE" == "postgresql" ]]; then
        systemctl stop postgresql 2>/dev/null || true
    fi
}

trap cleanup ERR

# Auto-detect distribution
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu|debian) 
            PKG_MGR="apt"
            PKG_UPDATE="apt update"
            PKG_INSTALL="apt install -y"
            PKG_UPGRADE="apt upgrade -y"
            DISTRO_FAMILY="debian"
            ;;
        almalinux|rocky|centos|rhel|ol|fedora) 
            PKG_MGR="dnf"
            PKG_UPDATE="dnf update -y"
            PKG_INSTALL="dnf install -y"
            PKG_UPGRADE="dnf update -y"
            DISTRO_FAMILY="rhel"
            ;;
        amzn) 
            PKG_MGR="yum"
            PKG_UPDATE="yum update -y"
            PKG_INSTALL="yum install -y"
            PKG_UPGRADE="yum update -y"
            DISTRO_FAMILY="rhel"
            ;;
        *) 
            echo -e "${RED}Unsupported distribution: $ID${NC}"
            exit 1
            ;;
    esac
else
    echo -e "${RED}Cannot detect distribution${NC}"
    exit 1
fi

echo -e "${BLUE}Setting up Zabbix Proxy on $PRETTY_NAME${NC}"

# Step 1: Update system packages
echo -e "${GREEN}[1/8] Updating system packages...${NC}"
$PKG_UPDATE
$PKG_UPGRADE

# Step 2: Add Zabbix repository
echo -e "${GREEN}[2/8] Adding Zabbix repository...${NC}"
if [[ "$DISTRO_FAMILY" == "debian" ]]; then
    $PKG_INSTALL wget
    if [[ "$ID" == "ubuntu" ]]; then
        UBUNTU_VERSION=$(lsb_release -rs | cut -d. -f1,2)
        wget -q "https://repo.zabbix.com/zabbix/7.0/ubuntu/pool/main/z/zabbix-release/zabbix-release_7.0-2+ubuntu${UBUNTU_VERSION}_all.deb"
        dpkg -i "zabbix-release_7.0-2+ubuntu${UBUNTU_VERSION}_all.deb" || true
    else
        wget -q "https://repo.zabbix.com/zabbix/7.0/debian/pool/main/z/zabbix-release/zabbix-release_7.0-2+debian12_all.deb"
        dpkg -i "zabbix-release_7.0-2+debian12_all.deb" || true
    fi
    apt-get update
else
    RHEL_VERSION=$(echo $VERSION_ID | cut -d. -f1)
    rpm -Uvh "https://repo.zabbix.com/zabbix/7.0/rhel/${RHEL_VERSION}/x86_64/zabbix-release-7.0-2.el${RHEL_VERSION}.noarch.rpm" || true
    $PKG_MGR clean all
    $PKG_UPDATE
fi

# Step 3: Install Zabbix proxy
echo -e "${GREEN}[3/8] Installing Zabbix proxy...${NC}"
if [[ "$DATABASE_TYPE" == "sqlite" ]]; then
    $PKG_INSTALL zabbix-proxy-sqlite3
else
    $PKG_INSTALL zabbix-proxy-pgsql postgresql postgresql-contrib
    if [[ "$DISTRO_FAMILY" == "rhel" ]]; then
        $PKG_INSTALL postgresql-server
    fi
fi

# Step 4: Configure database
if [[ "$DATABASE_TYPE" == "postgresql" ]]; then
    echo -e "${GREEN}[4/8] Configuring PostgreSQL database...${NC}"
    
    if [[ "$DISTRO_FAMILY" == "rhel" ]]; then
        postgresql-setup --initdb 2>/dev/null || true
    fi
    
    systemctl enable postgresql
    systemctl start postgresql
    
    # Create database and user
    sudo -u postgres psql -c "CREATE USER zabbix_proxy WITH PASSWORD '$DB_PASSWORD';" 2>/dev/null || true
    sudo -u postgres createdb -O zabbix_proxy zabbix_proxy 2>/dev/null || true
    
    # Import schema
    zcat /usr/share/zabbix-sql-scripts/postgresql/proxy.sql.gz | sudo -u zabbix_proxy psql zabbix_proxy
else
    echo -e "${GREEN}[4/8] Configuring SQLite database...${NC}"
    mkdir -p /var/lib/zabbix
    chown zabbix:zabbix /var/lib/zabbix
    chmod 755 /var/lib/zabbix
fi

# Step 5: Configure Zabbix proxy
echo -e "${GREEN}[5/8] Configuring Zabbix proxy...${NC}"
PROXY_CONF="/etc/zabbix/zabbix_proxy.conf"

# Backup original config
cp "$PROXY_CONF" "${PROXY_CONF}.backup"

# Configure proxy settings
cat > "$PROXY_CONF" << EOF
ProxyMode=0
Server=$ZABBIX_SERVER
Hostname=$PROXY_HOSTNAME
ListenPort=10051
EOF

if [[ "$DATABASE_TYPE" == "sqlite" ]]; then
    echo "DBName=/var/lib/zabbix/zabbix_proxy.db" >> "$PROXY_CONF"
else
    cat >> "$PROXY_CONF" << EOF
DBHost=localhost
DBName=zabbix_proxy
DBUser=zabbix_proxy
DBPassword=$DB_PASSWORD
EOF
fi

cat >> "$PROXY_CONF" << EOF
ConfigFrequency=3600
DataSenderFrequency=1
ProxyOfflineBuffer=1
EnableRemoteCommands=1
LogFile=/var/log/zabbix/zabbix_proxy.log
LogFileSize=10
DebugLevel=3
PIDFile=/run/zabbix/zabbix_proxy.pid
CacheSize=8M
HistoryCacheSize=16M
TrendCacheSize=4M
ValueCacheSize=8M
Timeout=4
TrapperTimeout=300
UnreachablePeriod=45
UnavailableDelay=60
UnreachableDelay=15
EOF

chmod 644 "$PROXY_CONF"
chown root:zabbix "$PROXY_CONF"

# Step 6: Set up directories and permissions
echo -e "${GREEN}[6/8] Setting up directories and permissions...${NC}"
mkdir -p /var/log/zabbix /run/zabbix
chown zabbix:zabbix /var/log/zabbix /run/zabbix
chmod 755 /var/log/zabbix /run/zabbix

# Step 7: Configure firewall
echo -e "${GREEN}[7/8] Configuring firewall...${NC}"
if command -v ufw >/dev/null 2>&1; then
    ufw allow 10051/tcp
elif command -v firewall-cmd >/dev/null 2>&1; then
    firewall-cmd --permanent --add-port=10051/tcp
    firewall-cmd --reload
fi

# Step 8: Start and enable services
echo -e "${GREEN}[8/8] Starting Zabbix proxy service...${NC}"
systemctl enable zabbix-proxy
systemctl start zabbix-proxy

# Verification
echo -e "${BLUE}Verifying installation...${NC}"
sleep 5

if systemctl is-active --quiet zabbix-proxy; then
    echo -e "${GREEN}✓ Zabbix proxy service is running${NC}"
else
    echo -e "${RED}✗ Zabbix proxy service is not running${NC}"
    echo "Check logs: journalctl -u zabbix-proxy"
    exit 1
fi

if ss -tlnp | grep -q :10051; then
    echo -e "${GREEN}✓ Zabbix proxy is listening on port 10051${NC}"
else
    echo -e "${RED}✗ Zabbix proxy is not listening on port 10051${NC}"
    exit 1
fi

echo -e "${GREEN}Zabbix proxy installation completed successfully!${NC}"
echo -e "${YELLOW}Next steps:${NC}"
echo "1. Add this proxy ($PROXY_HOSTNAME) in your Zabbix server web interface"
echo "2. Assign hosts to this proxy in the Zabbix server"
echo "3. Monitor the proxy status in Administration → Proxies"
echo ""
echo -e "${BLUE}Configuration file: $PROXY_CONF${NC}"
echo -e "${BLUE}Log file: /var/log/zabbix/zabbix_proxy.log${NC}"