Added the rest of the files; updated for password security

.gitignore

@@ -1 +1,2 @@
 /zabbix/psql_password
+/zabbix/psql.env

zabbix/docker-compose.yml

@@ -1,7 +1,9 @@
 version: '3.3'
-secrets:
-   psql_password:
-     file: ./psql_password
+#secrets:
+#   psql_password:
+#     file: ./psql_password
+env_file:
+    - psql.env
 
 services:
   zabbix-web:
@@ -23,9 +25,6 @@ services:
       ZBX_SERVER_NAME: Skyfall Zabbix
       ZBX_SERVER_HOST: zabbix-server
       DB_SERVER_HOST: zabbix-database
-      POSTGRES_DB: zabbix
-      POSTGRES_USER: zabbix
-      POSTGRES_PASSWORD_FILE: /run/secrets/psql_password
       PHP_TZ: America/Chicago
 
   zabbix-server:
@@ -52,9 +51,6 @@ services:
        - ./zabbix/zabbix-server/data/mibs:/var/lib/zabbix/mibs
     environment:
       DB_SERVER_HOST: zabbix-database
-      POSTGRES_DB: zabbix
-      POSTGRES_USER: zabbix
-      POSTGRES_PASSWORD_FILE: /run/secrets/psql_password
       TZ: America/Chicago
 
   zabbix-database:
@@ -67,9 +63,10 @@ services:
       zabbix_network:
         ipv4_address: 192.168.176.2
     environment:
-      POSTGRES_DB: zabbix
-      POSTGRES_USER: zabbix
-      POSTGRES_PASSWORD_FILE: /run/secrets/psql_password
+      #POSTGRES_DB: zabbix
+      #POSTGRES_USER: zabbix
+      #POSTGRES_PASSWORD: REDACTED
+      #POSTGRES_PASSWORD_FILE: /run/secrets/psql_password
 
   zabbix-java-gateway:
     image: zabbix/zabbix-java-gateway:latest

zabbix/example/psql.env

@@ -0,0 +1,4 @@
+POSTGRES_DB: zabbix
+POSTGRES_USER: zabbix
+POSTGRES_PASSWORD: REDACTED
+

zabbix/zabbix/zabbix-server/build/Dockerfile

@@ -0,0 +1,3 @@
+FROM zabbix/zabbix-server-pgsql:alpine-5.2-latest
+USER root
+RUN apk update && apk add curl nmap

zabbix/zabbix/zabbix-web/build/Dockerfile

@@ -0,0 +1,14 @@
+FROM zabbix/zabbix-web-nginx-pgsql:alpine-5.2-latest
+
+#Tell nginx to include letsencrypt.conf, which allows access to .well-known directory
+#This enables us to do Lets Encrypt webroot verifications
+#Copy of the letsencrypt.conf config file
+USER root
+RUN sed -i "/robots.txt/i\ \ \ \ include \/etc\/nginx\/letsencrypt.conf;\n" /etc/zabbix/nginx_ssl.conf
+RUN sed -i "/robots.txt/i\ \ \ \ include \/etc\/nginx\/letsencrypt.conf;\n" /etc/zabbix/nginx.conf
+COPY letsencrypt.conf /etc/nginx/
+
+#Create a link called .well-known in the webroot that points to /leverify/.well-known
+#/leverify will me mounted on the host OS and cerbot will be told that it is the 
+#web root. Certbot will create a .well-known directory there (which will make the symlink valid) and then put the verification file inside of it.
+RUN mkdir /leverify && ln -s /leverify/.well-known /usr/share/zabbix/.well-known

zabbix/zabbix/zabbix-web/build/letsencrypt.conf

@@ -0,0 +1,5 @@
+	location ~ /\.well-known/acme-challenge {
+		default_type "text/plain";
+		root /usr/share/zabbix;
+		allow all;
+	}