I'm running Zabbix server 4.0.4 on Debian 4.19.12-1. Right now to access my Zabbix server I have an nginx proxy_pass for the front end which is public facing. I can access it with mydomain.com/zabbix.
I don't like that this is public facing, and I'd like to only be able to access zabbix on the local network. IE 192.168.x.x/zabbix. Playing around with the settings, it only allows me to connect to the front end using an nginx proxy_pass which I believe was how it was designed. How do I make the zabbix server only available over the local network so that grafana, which is hosted on the same server, can use it?
/etc/zabbix/zabbix_server.conf
SourceIP=127.0.0.1
ListenPort=10051
/etc/zabbix/zabbix_agentd
Server=127.0.0.1
ListenPort=10050
These are the settings I have. Obviously if I go to 192.168.x.x/zabbix it redirects me to mydomain.com/zabbix. This domain is secured with SSL through nginx, and SSL is enabled on mydomain.com/zabbix.