monitoringartist · yeoldegrove · Jun 24, 2019
diff --git a/Dockerfile/dockbix-xxl-4.2/Dockerfile b/Dockerfile/dockbix-xxl-4.2/Dockerfile
@@ -0,0 +1,213 @@
+FROM centos:centos7
+LABEL maintainer "Jan Garaj <[email protected]>"
+
+ENV \
+  ZABBIX_VERSION=4.2 \
+  ZABBIX_SOURCES=https://git.zabbix.com/scm/zbx/zabbix.git \
+  ZS_enabled=true \
+  ZA_enabled=true \
+  ZW_enabled=true \
+  ZJ_enabled=false \
+  ZP_enabled=false \
+  SNMPTRAP_enabled=false \
+  STATUS_PAGE_ALLOWED_IP=127.0.0.1 \
+  JAVA_HOME=/usr/lib/jvm/jre \
+  JAVA=/usr/bin/java \
+  PHP_date_timezone=UTC \
+  PHP_max_execution_time=300 \
+  PHP_max_input_time=300 \
+  PHP_memory_limit=128M \
+  PHP_error_reporting=E_ALL \
+  ZS_LogType=console \
+  ZS_PidFile=/var/run/zabbix_server.pid \
+  ZS_User=zabbix \
+  ZS_DBHost=zabbix.db \
+  ZS_DBName=zabbix \
+  ZS_DBUser=zabbix \
+  ZS_DBPassword=zabbix \
+  ZS_DBPort=3306 \
+  ZS_PidFile=/tmp/zabbix_server.pid \
+  ZS_AlertScriptsPath=/usr/local/share/zabbix/alertscripts \
+  ZS_ExternalScripts=/usr/local/share/zabbix/externalscripts \
+  ZS_SSLCertLocation=/usr/local/share/zabbix/ssl/certs \
+  ZS_SSLKeyLocation=/usr/local/share/zabbix/ssl/keys \
+  ZS_LoadModulePath=/usr/lib/zabbix/modules \
+  ZS_JavaGateway=127.0.0.1 \
+  ZS_JavaGatewayPort=10052 \
+  ZS_SNMPTrapperFile=/tmp/zabbix_traps.tmp \
+  ZW_ZBX_SERVER=localhost \
+  ZW_ZBX_SERVER_PORT=10051 \
+  ZW_ZBX_SERVER_NAME="Zabbix Server" \
+  ZA_LogType=console \
+  ZA_Hostname="Zabbix Server" \
+  ZA_User=zabbix \
+  ZA_PidFile=/tmp/zabbix_agentd.pid \
+  ZA_Server=127.0.0.1 \
+  ZA_ServerActive=127.0.0.1 \
+  ZJ_LISTEN_IP=0.0.0.0 \
+  ZJ_LISTEN_PORT=10052 \
+  ZJ_PID_FILE=/tmp/zabbix_java.pid \
+  ZJ_START_POLLERS=5 \
+  ZJ_TIMEOUT=3 \
+  ZJ_LogLevel=error \
+  ZJ_TCP_TIMEOUT=3000 \
+  ZP_LogType=console \
+  ZP_DBHost=zabbixproxy.db \
+  ZP_DBName=zabbix \
+  ZP_DBUser=zabbix \
+  ZP_DBPassword=zabbix \
+  ZP_User=zabbix \
+  XXL_searcher=true \
+  XXL_updatechecker=true \
+  XXL_zapix=false \
+  XXL_grapher=false \
+  XXL_api=true \
+  XXL_apiuser=Admin \
+  XXL_apipass=zabbix \
+  XXL_analytics=true \
+  TERM=xterm
+
+# Layer: base
+RUN \
+  yum clean all && \
+  yum update -y && \
+  yum install -y epel-release && \
+  yum clean all && \
+  yum install -y supervisor && \
+  yum install -y http://nginx.org/packages/centos/7/noarch/RPMS/nginx-release-centos-7-0.el7.ngx.noarch.rpm && \
+  yum install -y nginx inotify-tools && \
+  groupmod --gid 80 --new-name www nginx && \
+  usermod --uid 80 --home /data/www --gid 80 --login www --shell /bin/bash --comment www nginx && \
+  rm -rf /etc/nginx/*.d /etc/nginx/*_params && \
+  mkdir -p /etc/nginx/ssl && \
+  openssl genrsa -out /etc/nginx/ssl/dummy.key 2048 && \
+  openssl req -new -key /etc/nginx/ssl/dummy.key -out /etc/nginx/ssl/dummy.csr -subj "/C=GB/L=London/O=Company Ltd/CN=zabbix-docker" && \
+  openssl x509 -req -days 3650 -in /etc/nginx/ssl/dummy.csr -signkey /etc/nginx/ssl/dummy.key -out /etc/nginx/ssl/dummy.crt && \
+  yum install -y http://rpms.remirepo.net/enterprise/remi-release-7.rpm && \
+  yum install -y --enablerepo=remi-php71 php-fpm \
+       php-gd php-bcmath php-ctype php-xml php-xmlreader php-xmlwriter \
+       php-session php-net-socket php-mbstring php-gettext php-cli \
+       php-mysqlnd php-opcache php-pdo php-snmp php-ldap && \
+  yum clean all && rm -rf /tmp/*
+ADD container-files-base /
+
+# Layer: zabbix
+COPY container-files-zabbix /
+RUN \
+  export FPING_VERSION=4.0 && \
+  yum clean all && \
+  yum install -y https://repo.zabbix.com/zabbix/4.2/rhel/7/x86_64/zabbix-release-4.2-1.el7.noarch.rpm && \
+  yum update -y && \
+  yum install -y tar git gcc automake make nmap traceroute iptstate wget \
+              net-snmp-devel net-snmp-libs net-snmp net-snmp-perl iksemel \
+              net-snmp-python net-snmp-utils java-1.8.0-openjdk \
+              java-1.8.0-openjdk-devel mariadb-devel libxml2-devel gettext \
+              libcurl-devel OpenIPMI-devel mysql iksemel-devel libssh2-devel \
+              unixODBC unixODBC-devel mysql-connector-odbc postgresql-odbc \
+              openldap-devel telnet net-tools snmptt sudo rubygems ruby-devel \
+              jq openssh-clients python-httplib2 python-simplejson \
+              libevent-devel openldap-clients && \
+  yum -y -q reinstall glibc-common && \
+  cp /usr/local/etc/zabbix_agentd.conf /tmp && \
+  git clone ${ZABBIX_SOURCES} --branch release/${ZABBIX_VERSION} --depth 1 --single-branch /usr/local/src/zabbix && \
+  cd /usr/local/src/zabbix && \
+  DATE=$(date +%Y-%m-%d) && \
+  sed -i "s/ZABBIX_VERSION.*'\(.*\)'/ZABBIX_VERSION', '\1 Dockbix XXL ($DATE)'/g" frontends/php/include/defines.inc.php && \
+  sed -i "s/ZABBIX_VERSION_RC.*\"\(.*\)\"/ZABBIX_VERSION_RC \"\1 Dockbix XXL (${DATE})\"/g" include/version.h && \
+  sed -i "s/String VERSION =.*\"\(.*\)\"/String VERSION = \"\1 Dockbix XXL (${DATE})\"/g" src/zabbix_java/src/com/zabbix/gateway/GeneralInformation.java && \
+  zabbix_revision=$(svn info svn://svn.zabbix.com/${ZABBIX_VERSION} |grep "Last Changed Rev"|awk '{print $4;}') && \
+  zabbix_revision=$(git rev-parse --short HEAD) && \
+  sed -i "s/{ZABBIX_REVISION}/$zabbix_revision/g" include/version.h && \
+  ./bootstrap.sh && \
+  export CFLAGS="-fPIC -pie -Wl,-z,relro -Wl,-z,now" && \
+  ./configure --enable-server --enable-agent --with-mysql --enable-java \
+              --with-net-snmp --with-libcurl --with-libxml2 --with-openipmi \
+              --enable-ipv6 --with-jabber --with-openssl --with-ssh2 \
+              --enable-proxy --with-ldap --with-unixodbc && \
+  make -j"$(nproc)" dbschema && \
+  make -j"$(nproc)" install && \
+  mv /health/ /usr/local/src/zabbix/frontends/php/ && \
+  cp /usr/local/etc/web/zabbix.conf.php /usr/local/src/zabbix/frontends/php/conf/ && \
+  wget https://github.com/schweikert/fping/releases/download/v${FPING_VERSION}/fping-${FPING_VERSION}.tar.gz && \
+  tar -xvf fping-${FPING_VERSION}.tar.gz && \
+  cd fping-${FPING_VERSION}/ && \
+  ./configure --prefix=/usr --disable-ipv6; make clean install && \
+  ./configure --prefix=/usr --disable-ipv4 --program-suffix=6; make clean install && \
+  setcap cap_net_raw+ep /usr/sbin/fping || echo 'Warning: setcap cap_net_raw+ep /usr/sbin/fping' && \
+  setcap cap_net_raw+ep /usr/sbin/fping6 || echo 'Warning: setcap cap_net_raw+ep /usr/sbin/fping6' && \
+  chmod 4710 /usr/sbin/fping && \
+  chmod 4710 /usr/sbin/fping6 && \
+  cd .. && \
+  cp -f /tmp/zabbix_agentd.conf /usr/local/etc/ && \
+  rm -rf fping-${FPING_VERSION} && \
+  rm -rf ${FPING_VERSION}.tar.gz && \
+  cd /usr/local/src/zabbix/frontends/php && \
+  locale/make_mo.sh && \
+  yum autoremove -y gettext svn gcc automake mariadb-devel \
+                    java-1.8.0-openjdk-devel libxml2-devel libcurl-devel \
+                    OpenIPMI-devel iksemel-devel rubygems ruby-devel \
+                    ruby-devel unixODBC-devel && \
+  yum install -y OpenIPMI-libs && \
+  chmod +x /config/bootstrap.sh && \
+  chmod +x /config/ds.sh && \
+  chmod +x /usr/local/src/zabbix/misc/snmptrap/zabbix_trap_receiver.pl && \
+  chmod +x /usr/share/snmptt/snmptthandler-embedded && \
+  sed -i -e "s/Defaults    requiretty.*/ #Defaults    requiretty/g" /etc/sudoers && \
+  localedef -i en_US -f UTF-8 en_US.UTF-8 && \
+  yum clean all && \
+  mkdir -p /usr/local/share/ssl/certs && \
+  mkdir -p /usr/local/share/ssl/keys && \
+  mkdir -p /usr/lib/zabbix/modules && \
+  mkdir -p /etc/zabbix/snmp/mibs && \
+  rm -rf /usr/local/src/zabbix/[a,A,b,c,C,i,I,m,M,n,N,r,R,s,t,u,r,\.]* /usr/local/src/zabbix/depcomp /usr/local/src/zabbix/.svn && \
+  rm -rf /usr/local/src/zabbix/database/[i,M,o,p,s]* && \
+  rm -rf /tmp/*
+  # TODO apply http://geofrogger.net/review/snmptt-hide-generic-part.patch
+
+# Layer: dockbix-xxl
+COPY container-files-dockbix-xxl /
+RUN \
+  chmod +x /usr/local/src/zabbix/supervisord-listener.py && \
+  yum -y -q reinstall glibc-common && \
+  cd /tmp && \
+  yumdownloader glibc-common && \
+  rpm2cpio glibc-common*.rpm | cpio -idmv && \
+  rm -vf /usr/lib/locale/locale-archive.tmpl && \
+  cp -vf ./usr/lib/locale/locale-archive.tmpl /usr/lib/locale/ && \
+  build-locale-archive && \
+  rm -rf /tmp/* && \
+  yum install -y ipa-pgothic-fonts python-boto python-pip && \
+  cp /usr/share/fonts/ipa-pgothic/ipagp.ttf /usr/local/src/zabbix/frontends/php/fonts && \
+  pip install pyzabbix && \
+  yum autoremove -y ipa-pgothic-fonts python-pip && \
+  yum clean all && \
+  grep 'XXL' /usr/local/src/zabbix/frontends/php/include/defines.inc.php && \
+  sed -i "s#]))->addClass(ZBX_STYLE_FOOTER);#,' / ',(new CLink('Monitoring Artist Ltd', 'http://www.monitoringartist.com'))->addClass(ZBX_STYLE_GREY)->addClass(ZBX_STYLE_LINK_ALT)->setAttribute('target', '_blank'),]))->addClass(ZBX_STYLE_FOOTER);#g" /usr/local/src/zabbix/frontends/php/include/html.inc.php && \
+  true || grep 'www.monitoringartist.com' /usr/local/src/zabbix/frontends/php/include/html.inc.php && \
+  sed -i "s/(new CDiv())->addClass(ZBX_STYLE_SIGNIN_LOGO),/(new CDiv())->addClass(ZBX_STYLE_SIGNIN_LOGO),(new CDiv())->addClass(ZBX_STYLE_CENTER)->addItem((new CTag('h1', true, _('Dockbix XXL')))->addClass(ZBX_STYLE_BLUE))->addItem((new CLink(_('Maintained by Monitoring Artist'), 'http:\/\/www.monitoringartist.com'))->setTarget('_blank')->addClass(ZBX_STYLE_GREY)),/g" /usr/local/src/zabbix/frontends/php/include/views/general.login.php && \
+  true || grep 'www.monitoringartist.com' /usr/local/src/zabbix/frontends/php/include/views/general.login.php && \
+  sed -i "s#echo '</body></html>';#echo \"<script>(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)})(window,document,'script','//www.google-analytics.com/analytics.js','ga');ga('create','UA-72810204-2','auto');ga('send','pageview');</script></body></html>\";#g" /usr/local/src/zabbix/frontends/php/include/page_footer.php && \
+  grep 'UA-72810204-2' /usr/local/src/zabbix/frontends/php/include/page_footer.php && \
+  sed -i "s#echo '</body></html>';#echo \"<script>(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)})(window,document,'script','//www.google-analytics.com/analytics.js','ga');ga('create','UA-72810204-2','auto');ga('set','anonymizeIp',true);ga('send','pageview');</script></body></html>\";#g" /usr/local/src/zabbix/frontends/php/app/views/layout.htmlpage.php && \
+  grep 'UA-72810204-2' /usr/local/src/zabbix/frontends/php/app/views/layout.htmlpage.php && \
+  ZVERSION=$(zabbix_agentd -V | grep ^zabbix_agentd | awk -F'\\(Zabbix\\) ' '{print $2}') && \
+  sed -i "s#^var xxlCurrentVersion =.*#var xxlCurrentVersion = \"$ZVERSION\";#" /usr/local/src/zabbix/frontends/php/updatechecker/updatechecker.js && \
+  grep "$ZVERSION" /usr/local/src/zabbix/frontends/php/updatechecker/updatechecker.js && \
+  sed -i "s#.*</body></html>.*#echo \"<script type='text/javascript' src='updatechecker/updatechecker.js'></script>\";\n&#" /usr/local/src/zabbix/frontends/php/include/page_footer.php && \
+  grep 'updatechecker.js' /usr/local/src/zabbix/frontends/php/include/page_footer.php && \
+  sed -i "s#</body></html>#<script type='text/javascript' src='updatechecker/updatechecker.js'></script></body></html>#g" /usr/local/src/zabbix/frontends/php/app/views/layout.htmlpage.php && \
+  grep 'updatechecker.js' /usr/local/src/zabbix/frontends/php/app/views/layout.htmlpage.php && \
+  sed -i "s#'login' => \[#'xxl' => \n[\n'label' => _('XXL extensions'),\n'user_type' => USER_TYPE_SUPER_ADMIN,\n'default_page_id' => 0,\n'pages' => [\n['url' => 'searcher.php','label' => _('Searcher'),],\n['url' => 'zapix.php','label' => _('Zapix'),],\n['url' => 'grapher.php','label' => _('Grapher'),],\n['url' => 'about.php','label' => _('About'),]\n]],\n'login' => [#g" /usr/local/src/zabbix/frontends/php/include/menu.inc.php && \
+  grep 'XXL extensions' /usr/local/src/zabbix/frontends/php/include/menu.inc.php && \
+  sed -i "s#'admin': 0},# 'admin': 0, 'xxl': 0},#g" /usr/local/src/zabbix/frontends/php/js/main.js && \
+  grep "'xxl': 0}" /usr/local/src/zabbix/frontends/php/js/main.js && \
+  INITIAL_ADMIN_SEARCH="'Admin','Zabbix','Administrator','5fce1b3e34b520afeffb37ce08c7cd66'" && \
+  INITIAL_ADMIN_REPLACE="'$XXL_apiuser','Zabbix','Administrator','$(echo -n $XXL_apipass | md5sum | awk '{print $1}')'" && \
+  grep "$INITIAL_ADMIN_SEARCH" /usr/local/src/zabbix/database/mysql/data.sql && \
+  sed -i "s/$INITIAL_ADMIN_SEARCH/$INITIAL_ADMIN_REPLACE/" /usr/local/src/zabbix/database/mysql/data.sql && \
+  rm -rf /tmp/* && \
+  touch /tmp/zabbix_traps.tmp
+
+CMD ["/config/bootstrap.sh"]
+
+EXPOSE 80/TCP 162/UDP 10051/TCP 10052/TCP
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/bootstrap.sh b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/bootstrap.sh
@@ -0,0 +1,48 @@
+#!/bin/bash
+
+set -e
+set -u
+
+# Supervisord default params
+SUPERVISOR_PARAMS='-c /etc/supervisord.conf'
+
+
+# Create directories for supervisor's UNIX socket and logs (which might be missing
+# as container might start with /data mounted from another data-container).
+mkdir -p /data/conf /data/run /data/logs
+chmod 711 /data/conf /data/run /data/logs
+
+if [ "$(ls /config/init/)" ]; then
+  for init in /config/init/*.sh; do
+    . $init
+  done
+fi
+
+
+# We have TTY, so probably an interactive container...
+if test -t 0; then
+  # Run supervisord detached...
+  exec supervisord $SUPERVISOR_PARAMS
+
+  # Some command(s) has been passed to container? Execute them and exit.
+  # No commands provided? Run bash.
+  if [[ $@ ]]; then 
+    eval $@
+  else 
+    export PS1='[\u@\h : \w]\$ '
+    /bin/bash
+  fi
+
+# Detached mode? Run supervisord in foreground, which will stay until container is stopped.
+else
+  # If some extra params were passed, execute them before.
+  # @TODO It is a bit confusing that the passed command runs *before* supervisord, 
+  #       while in interactive mode they run *after* supervisor.
+  #       Not sure about that, but maybe when any command is passed to container,
+  #       it should be executed *always* after supervisord? And when the command ends,
+  #       container exits as well.
+  if [[ $@ ]]; then 
+    eval $@
+  fi
+  exec supervisord -n $SUPERVISOR_PARAMS
+fi
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-cache-dirs.sh b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-cache-dirs.sh
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+#
+# This script will be placed in /config/init/ and run when container starts.
+# It creates (if they're not exist yet) necessary Nginx directories
+# @see /etc/nginx/addon.d/fastcgi-cache.example
+#
+
+set -e
+
+mkdir -p /run/user/nginx-cache
+mkdir -p /run/user/nginx-cache-tmp
+chown -R www:www /run/user/nginx-cache*
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-data-dirs.sh b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-data-dirs.sh
@@ -0,0 +1,20 @@
+#!/bin/sh
+
+#
+# This script will be placed in /config/init/ and run when container starts.
+# It creates (if they're not exist yet) necessary directories
+# from where custom Nginx configs can be loaded (from mounted /data volumes).
+#
+
+set -e
+
+mkdir -p /data/conf/nginx/addon.d
+mkdir -p /data/conf/nginx/conf.d
+mkdir -p /data/conf/nginx/hosts.d
+mkdir -p /data/conf/nginx/nginx.d
+chmod 711 /data/conf/nginx
+
+mkdir -p /data/www/default
+echo "default vhost # created on $(date)" > /data/www/default/index.html
+
+chown -R www:www /data/www
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-internal-proxy.sh b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-internal-proxy.sh
@@ -0,0 +1,21 @@
+#!/bin/sh
+
+#
+# Configure internal transparent proxy on specified port (SET_INTERNAL_PROXY_ON_PORT)
+# which redirect all traffic to localhost:80. See README for more info.
+#
+
+PROXY_SOURCE_CONF="/config/init/vhost-proxy.conf"
+PROXY_SOURCE_CONF_HTTPS="/config/init/vhost-proxy-https.conf"
+PROXY_TARGET_CONF="/etc/nginx/hosts.d/internal-proxy.conf"
+PROXY_TARGET_CONF_HTTPS="/etc/nginx/hosts.d/internal-proxy-https.conf"
+
+if [ ! -z "${SET_INTERNAL_PROXY_ON_PORT+xxx}" ] && [ ! -z "${SET_INTERNAL_PROXY_ON_PORT}" ]; then
+  cat $PROXY_SOURCE_CONF | sed "s/%proxy_port%/$SET_INTERNAL_PROXY_ON_PORT/g" > $PROXY_TARGET_CONF
+  echo "Nginx: internal proxy set on port :$SET_INTERNAL_PROXY_ON_PORT."; echo
+fi
+
+if [ ! -z "${SET_INTERNAL_HTTPS_PROXY_ON_PORT+xxx}" ] && [ ! -z "${SET_INTERNAL_HTTPS_PROXY_ON_PORT}" ]; then
+  cat $PROXY_SOURCE_CONF_HTTPS | sed "s/%proxy_port%/$SET_INTERNAL_HTTPS_PROXY_ON_PORT/g" > $PROXY_TARGET_CONF_HTTPS
+  echo "Nginx: internal HTTPS proxy set on port :$SET_INTERNAL_HTTPS_PROXY_ON_PORT."; echo
+fi
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-stub-status.sh b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-nginx-stub-status.sh
@@ -0,0 +1,23 @@
+#!/bin/sh
+#
+# Configure access IP address for nginx status page under /nginx_status
+#
+set -eu
+export TERM=xterm
+# Bash Colors
+red=`tput setaf 1`
+green=`tput setaf 2`
+yellow=`tput setaf 3`
+white=`tput setaf 7`
+bold=`tput bold`
+reset=`tput sgr0`
+separator=$(echo && printf '=%.0s' {1..100} && echo)
+
+# Logging functions
+log() {
+  if [[ "$@" ]]; then echo "${bold}${green}`date +'%Y-%m-%d %H:%M:%S,000'` INFO${reset} $@";
+  else echo -n; fi
+}
+
+sed -i "s|allow 127.0.0.1|allow ${STATUS_PAGE_ALLOWED_IP}|g" /etc/nginx/conf.d/stub-status.conf
+log "Nginx status page: allowed address set to $STATUS_PAGE_ALLOWED_IP."
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-php-fpm-status.sh b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/10-php-fpm-status.sh
@@ -0,0 +1,24 @@
+#!/bin/sh
+#
+# Configure access IP address for PHP-FPM satus page under /fpm_status
+#
+
+set -eu
+export TERM=xterm
+# Bash Colors
+red=`tput setaf 1`
+green=`tput setaf 2`
+yellow=`tput setaf 3`
+white=`tput setaf 7`
+bold=`tput bold`
+reset=`tput sgr0`
+separator=$(echo && printf '=%.0s' {1..100} && echo)
+
+# Logging functions
+log() {
+  if [[ "$@" ]]; then echo "${bold}${green}`date +'%Y-%m-%d %H:%M:%S,000'` INFO${reset} $@";
+  else echo -n; fi
+}
+
+sed -i "s|allow 127.0.0.1|allow ${STATUS_PAGE_ALLOWED_IP}|g" /etc/nginx/conf.d/fpm-status.conf
+log "PHP-FPM status page: allowed address set to $STATUS_PAGE_ALLOWED_IP."
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/vhost-proxy-https.conf b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/vhost-proxy-https.conf
@@ -0,0 +1,14 @@
+# Internal proxy, HTTPS version
+server {
+  listen %proxy_port% ssl;
+  ssl_certificate       /etc/nginx/ssl/dummy.crt;
+  ssl_certificate_key   /etc/nginx/ssl/dummy.key;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Port $server_port;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_redirect off;
+    proxy_pass https://127.0.0.1:443;
+  }
+}
diff --git a/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/vhost-proxy.conf b/Dockerfile/dockbix-xxl-4.2/container-files-base/config/init/vhost-proxy.conf
@@ -0,0 +1,11 @@
+# Internal proxy, HTTP version
+server {
+  listen %proxy_port%;
+  location / {
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-Port $server_port;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_redirect off;
+    proxy_pass http://127.0.0.1:80;
+  }
+}