---

- name: Generate random PSK key for TLS encryption
  shell: "openssl rand -hex 32 > /etc/zabbix/zabbix_proxy.psk"
  args:
    creates: /etc/zabbix/zabbix_proxy.psk
  tags: zabbix

- name: Restrict permission on PSK file
  file: path=/etc/zabbix/zabbix_proxy.psk owner=root group=zabbix mode=0640
  tags: zabbix