# Ubuntu 24.04, Zabbix Agent 2 7.0 LTS. Replace documentation IP/name/identity.
LogType=file
LogFile=/var/log/zabbix/zabbix_agent2.log
LogFileSize=10
Server=192.0.2.10
ServerActive=192.0.2.10:10051
Hostname=linux-app-01
ListenIP=198.51.100.21
ListenPort=10050
TLSConnect=psk
TLSAccept=psk
TLSPSKIdentity=linux-app-01-psk
TLSPSKFile=/etc/zabbix/keys/agent2.psk
DenyKey=system.run[*]
UnsafeUserParameters=0
Include=/etc/zabbix/zabbix_agent2.d/*.conf
Include=/etc/zabbix/zabbix_agent2.d/plugins.d/*.conf
# Explicit read-only key for one approved service; no wildcard shell execution.
UserParameter=custom.service.nginx,/usr/bin/systemctl is-active nginx || true