Implement 'listen only' in check_mk.socket

jkirk / ansible-role-checkmkagent

A simple role to deploy the Check_Mk Agent

0 stars 1 forks source link

Implement 'listen only' in check_mk.socket #1

Open jkirk opened 4 years ago

jkirk commented 4 years ago

We need to configure "listen only" for check_mk.socket

mika commented 1 year ago

The following configuration should serve as a starting point:

[Unit]
Description=Check_MK Agent Socket

[Socket]
ListenStream=6556
Accept=true

# only allow access from localhost + monitoring system
IPAddressAllow=localhost
IPAddressAllow=...
IPAddressDeny=any

[Install]
WantedBy=sockets.target