# Default username/password

Admin:zabbix

# TLS

## Generate CA

### Generate CA key
openssl genrsa -passout env:CA_PASSWD -aes256 -out zabbix-ca.key 4096
### Generate CA
openssl req -x509 -new -key zabbix-ca.key -sha256 -days 36500 -out zabbix-ca.crt -passin env:CA_PASSWD -subj "/CN=zabbix-server"

## Generate host cert

### Set host variable
HOST=zabbix-host.domain.tld
### Generate host key and csr
openssl req -new -newkey rsa:4096 -nodes -keyout "${HOST}.key" -out "${HOST}.csr" -subj "/CN=${HOST}"
### Generate host cert
openssl x509 -req -CA zabbix-ca.crt -CAkey zabbix-ca.key -CAcreateserial -days 36500 -sha256 -passin env:CA_PASSWD -in "${HOST}.csr" -out "${HOST}.crt"
### Remove csr
rm "${HOST}.csr"