From cf1a44fbec27b7c7b411a755a6924d958d92093c Mon Sep 17 00:00:00 2001
From: Alexey Pustovalov <alexey.pustovalov@zabbix.com>
Date: Mon, 22 Nov 2021 15:32:57 +0200
Subject: [PATCH] Possible specify PSK key using full path to file

(cherry picked from commit 8bed89afce97fd14ad17f309b1af688483b49021)
---
 Dockerfiles/agent/alpine/docker-entrypoint.sh          | 2 +-
 Dockerfiles/agent/centos/docker-entrypoint.sh          | 2 +-
 Dockerfiles/agent/ol/docker-entrypoint.sh              | 2 +-
 Dockerfiles/agent/rhel/docker-entrypoint.sh            | 2 +-
 Dockerfiles/agent/ubuntu/docker-entrypoint.sh          | 2 +-
 Dockerfiles/agent2/alpine/docker-entrypoint.sh         | 2 +-
 Dockerfiles/agent2/centos/docker-entrypoint.sh         | 2 +-
 Dockerfiles/agent2/ol/docker-entrypoint.sh             | 2 +-
 Dockerfiles/agent2/rhel/docker-entrypoint.sh           | 2 +-
 Dockerfiles/agent2/ubuntu/docker-entrypoint.sh         | 2 +-
 Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh    | 2 +-
 Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh    | 2 +-
 Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh        | 2 +-
 Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh      | 2 +-
 Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh    | 2 +-
 Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh  | 2 +-
 Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh  | 2 +-
 Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh      | 2 +-
 Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh    | 2 +-
 Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh  | 2 +-
 Dockerfiles/server-mysql/alpine/docker-entrypoint.sh   | 2 +-
 Dockerfiles/server-mysql/centos/docker-entrypoint.sh   | 2 +-
 Dockerfiles/server-mysql/ol/docker-entrypoint.sh       | 2 +-
 Dockerfiles/server-mysql/rhel/docker-entrypoint.sh     | 2 +-
 Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh   | 2 +-
 Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh   | 2 +-
 Dockerfiles/server-pgsql/centos/docker-entrypoint.sh   | 2 +-
 Dockerfiles/server-pgsql/ol/docker-entrypoint.sh       | 2 +-
 Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh   | 2 +-
 Dockerfiles/zabbix-appliance/rhel/docker-entrypoint.sh | 2 +-
 30 files changed, 30 insertions(+), 30 deletions(-)

diff --git a/Dockerfiles/agent/alpine/docker-entrypoint.sh b/Dockerfiles/agent/alpine/docker-entrypoint.sh
index 181a885a1..242ffd44b 100755
--- a/Dockerfiles/agent/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/agent/alpine/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent/centos/docker-entrypoint.sh b/Dockerfiles/agent/centos/docker-entrypoint.sh
index 181a885a1..242ffd44b 100755
--- a/Dockerfiles/agent/centos/docker-entrypoint.sh
+++ b/Dockerfiles/agent/centos/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent/ol/docker-entrypoint.sh b/Dockerfiles/agent/ol/docker-entrypoint.sh
index 181a885a1..242ffd44b 100755
--- a/Dockerfiles/agent/ol/docker-entrypoint.sh
+++ b/Dockerfiles/agent/ol/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent/rhel/docker-entrypoint.sh b/Dockerfiles/agent/rhel/docker-entrypoint.sh
index 181a885a1..242ffd44b 100755
--- a/Dockerfiles/agent/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/agent/rhel/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent/ubuntu/docker-entrypoint.sh b/Dockerfiles/agent/ubuntu/docker-entrypoint.sh
index 181a885a1..242ffd44b 100755
--- a/Dockerfiles/agent/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/agent/ubuntu/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent2/alpine/docker-entrypoint.sh b/Dockerfiles/agent2/alpine/docker-entrypoint.sh
index 14229d7ab..314204280 100755
--- a/Dockerfiles/agent2/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/agent2/alpine/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent2/centos/docker-entrypoint.sh b/Dockerfiles/agent2/centos/docker-entrypoint.sh
index 14229d7ab..314204280 100755
--- a/Dockerfiles/agent2/centos/docker-entrypoint.sh
+++ b/Dockerfiles/agent2/centos/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent2/ol/docker-entrypoint.sh b/Dockerfiles/agent2/ol/docker-entrypoint.sh
index 14229d7ab..314204280 100755
--- a/Dockerfiles/agent2/ol/docker-entrypoint.sh
+++ b/Dockerfiles/agent2/ol/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent2/rhel/docker-entrypoint.sh b/Dockerfiles/agent2/rhel/docker-entrypoint.sh
index 14229d7ab..314204280 100755
--- a/Dockerfiles/agent2/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/agent2/rhel/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/agent2/ubuntu/docker-entrypoint.sh b/Dockerfiles/agent2/ubuntu/docker-entrypoint.sh
index 14229d7ab..314204280 100755
--- a/Dockerfiles/agent2/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/agent2/ubuntu/docker-entrypoint.sh
@@ -72,7 +72,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh b/Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh
index 788697355..c4cc4e958 100755
--- a/Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/alpine/docker-entrypoint.sh
@@ -102,7 +102,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh b/Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh
index d96fdc149..36c0c062d 100755
--- a/Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/centos/docker-entrypoint.sh
@@ -102,7 +102,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh b/Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh
index d96fdc149..36c0c062d 100755
--- a/Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/ol/docker-entrypoint.sh
@@ -102,7 +102,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh b/Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh
index 702979595..555e51c4c 100755
--- a/Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/rhel/docker-entrypoint.sh
@@ -102,7 +102,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh b/Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh
index bd410d5e5..9f8394c54 100755
--- a/Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-mysql/ubuntu/docker-entrypoint.sh
@@ -102,7 +102,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh b/Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh
index 0ece9b0e3..cda78b27e 100755
--- a/Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/alpine/docker-entrypoint.sh
@@ -71,7 +71,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh b/Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh
index 0ece9b0e3..cda78b27e 100755
--- a/Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/centos/docker-entrypoint.sh
@@ -71,7 +71,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh b/Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh
index 0ece9b0e3..cda78b27e 100755
--- a/Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/ol/docker-entrypoint.sh
@@ -71,7 +71,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh b/Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh
index 0ece9b0e3..cda78b27e 100755
--- a/Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/rhel/docker-entrypoint.sh
@@ -71,7 +71,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh b/Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh
index a8a8791ba..0b7ad9569 100755
--- a/Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/proxy-sqlite3/ubuntu/docker-entrypoint.sh
@@ -71,7 +71,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-mysql/alpine/docker-entrypoint.sh b/Dockerfiles/server-mysql/alpine/docker-entrypoint.sh
index d6958b9fd..7f0d3c628 100755
--- a/Dockerfiles/server-mysql/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/alpine/docker-entrypoint.sh
@@ -97,7 +97,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-mysql/centos/docker-entrypoint.sh b/Dockerfiles/server-mysql/centos/docker-entrypoint.sh
index 19d33201f..0c3456c84 100755
--- a/Dockerfiles/server-mysql/centos/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/centos/docker-entrypoint.sh
@@ -97,7 +97,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-mysql/ol/docker-entrypoint.sh b/Dockerfiles/server-mysql/ol/docker-entrypoint.sh
index 19d33201f..0c3456c84 100755
--- a/Dockerfiles/server-mysql/ol/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/ol/docker-entrypoint.sh
@@ -97,7 +97,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-mysql/rhel/docker-entrypoint.sh b/Dockerfiles/server-mysql/rhel/docker-entrypoint.sh
index 19d33201f..0c3456c84 100755
--- a/Dockerfiles/server-mysql/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/rhel/docker-entrypoint.sh
@@ -97,7 +97,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh b/Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh
index bb26eb39a..b267065f4 100755
--- a/Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/server-mysql/ubuntu/docker-entrypoint.sh
@@ -97,7 +97,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh b/Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh
index 549918e4b..af1bac9ba 100755
--- a/Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/alpine/docker-entrypoint.sh
@@ -100,7 +100,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-pgsql/centos/docker-entrypoint.sh b/Dockerfiles/server-pgsql/centos/docker-entrypoint.sh
index 549918e4b..af1bac9ba 100755
--- a/Dockerfiles/server-pgsql/centos/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/centos/docker-entrypoint.sh
@@ -100,7 +100,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-pgsql/ol/docker-entrypoint.sh b/Dockerfiles/server-pgsql/ol/docker-entrypoint.sh
index 549918e4b..af1bac9ba 100755
--- a/Dockerfiles/server-pgsql/ol/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/ol/docker-entrypoint.sh
@@ -100,7 +100,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh b/Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh
index 93bbf2b53..d08fca4dd 100755
--- a/Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh
+++ b/Dockerfiles/server-pgsql/ubuntu/docker-entrypoint.sh
@@ -100,7 +100,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi
 
diff --git a/Dockerfiles/zabbix-appliance/rhel/docker-entrypoint.sh b/Dockerfiles/zabbix-appliance/rhel/docker-entrypoint.sh
index e0ddb905c..f2af5a5d9 100755
--- a/Dockerfiles/zabbix-appliance/rhel/docker-entrypoint.sh
+++ b/Dockerfiles/zabbix-appliance/rhel/docker-entrypoint.sh
@@ -110,7 +110,7 @@ update_config_var() {
     fi
 
     # Use full path to a file for TLS related configuration parameters
-    if [[ $var_name =~ ^TLS.*File$ ]]; then
+    if [[ $var_name =~ ^TLS.*File$ ]] && [[ ! $var_value =~ ^/.+$ ]]; then
         var_value=$ZABBIX_USER_HOME_DIR/enc/$var_value
     fi