1. Buat sertifikat SSL self-signed (sementara) -> Sertifikat SSL self-signed adalah sertifikat yang dibuat dan ditandatangani sendiri oleh server, bukan oleh otoritas sertifikat resmi (seperti Let's Encrypt, Sectigo, dll).
sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
-keyout /etc/ssl/private/zabbix-selfsigned.key \
-out /etc/ssl/certs/zabbix-selfsigned.crt \
-subj "/C=ID/ST=Jakarta/L=Jakarta/O=Terasys/CN=zabbix.terasys.co.id"
2. Tambahkan konfigurasi HTTPS ke Apache
<VirtualHost *:443>
ServerName zabbix.terasys.co.id
ServerAdmin webmaster@localhost
DocumentRoot /usr/share/zabbix
ErrorLog ${APACHE_LOG_DIR}/zabbix_ssl_error.log
CustomLog ${APACHE_LOG_DIR}/zabbix_ssl_access.log combined
SSLEngine on
SSLCertificateFile /etc/ssl/certs/zabbix-selfsigned.crt
SSLCertificateKeyFile /etc/ssl/private/zabbix-selfsigned.key
<Directory "/usr/share/zabbix">
Options FollowSymLinks
AllowOverride All
Require all granted
</Directory>
</VirtualHost>
Komentar
Posting Komentar