From 0084b7e85fa6c9b00731e217202f2c8a4e76e454 Mon Sep 17 00:00:00 2001 From: Paulo Ruiz Date: Mon, 26 Jan 2026 19:48:45 -0300 Subject: [PATCH 1/2] Fix inverted TLS variables in zabbix_proxy role The task configuring the zabbix_proxy API object incorrectly mapped `tls_connect` and `tls_accept`, using the opposite variables. This resulted in wrong TLS configuration being applied to the proxy. Corrected the mapping so that: - tls_connect uses zabbix_proxy_tlsconnect - tls_accept uses zabbix_proxy_tlsaccept --- roles/zabbix_proxy/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/zabbix_proxy/tasks/main.yml b/roles/zabbix_proxy/tasks/main.yml index 2f453089f..3f6346779 100644 --- a/roles/zabbix_proxy/tasks/main.yml +++ b/roles/zabbix_proxy/tasks/main.yml @@ -141,8 +141,8 @@ tls_psk: "{{ zabbix_proxy_tlspsk_secret | default(omit) }}" tls_psk_identity: "{{ zabbix_proxy_tlspskidentity | default(omit) }}" tls_subject: "{{ zabbix_proxy_tls_subject | default(omit) }}" - tls_connect: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsaccept | default('no_encryption')] }}" - tls_accept: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsconnect | default('no_encryption')] }}" + tls_connect: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsconnect | default('no_encryption')] }}" + tls_accept: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsaccept | default('no_encryption')] }}" when: - zabbix_api_create_proxy | bool - zabbix_proxy_version is version('7.0', '<') From 2b8d12314241f8cf6bb91ba3a79711dac8529b1f Mon Sep 17 00:00:00 2001 From: Paulo Ruiz Date: Tue, 27 Jan 2026 16:53:11 -0300 Subject: [PATCH 2/2] Invert variables for versions >= 7.0 --- roles/zabbix_proxy/tasks/main.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/zabbix_proxy/tasks/main.yml b/roles/zabbix_proxy/tasks/main.yml index 3f6346779..8c183acf2 100644 --- a/roles/zabbix_proxy/tasks/main.yml +++ b/roles/zabbix_proxy/tasks/main.yml @@ -213,8 +213,8 @@ timeout_telnet_agent: "{{ zabbix_proxy_timeout_telnet_agent | default(omit) }}" timeout_script: "{{ zabbix_proxy_timeout_script | default(omit) }}" timeout_browser: "{{ zabbix_proxy_timeout_browser | default(omit) }}" - tls_connect: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsaccept | default('no_encryption')] }}" - tls_accept: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsconnect | default('no_encryption')] }}" + tls_connect: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsconnect | default('no_encryption')] }}" + tls_accept: "{{ zabbix_proxy_tls_config[zabbix_proxy_tlsaccept | default('no_encryption')] }}" tls_psk: "{{ zabbix_proxy_tlspsk_secret | default(omit) }}" tls_psk_identity: "{{ zabbix_proxy_tlspskidentity | default(omit) }}" ca_cert: "{{ zabbix_proxy_ca_cert | default(omit) }}"