pipistrello
673d747abd
Telemt's Prometheus endpoint exposes only active-IP counts, while its loopback control API includes both the address list and sensitive proxy links. Add a root systemd timer that enters the Telemt container network namespace, filters the API response in memory, and publishes only username/address rows through the Zabbix agent key telemt.active_ips.list.\n\nThe collector refreshes every 30 seconds, writes atomically with root:zabbix 0640 permissions, and leaves the control API unexposed. Document the host installation and recommend one-day Zabbix history because client IP addresses are sensitive operational data.
3 lines
155 B
Plaintext
3 lines
155 B
Plaintext
# Sanitized by zabbix-telemt-active-ips.service; contains no proxy secrets.
|
|
UserParameter=telemt.active_ips.list,cat /var/lib/zabbix/telemt-active-ips.txt
|