config/nagios-master.cfg

   1 # Non comment lines are YAML
   2 #
   3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
   4 #
   5 # vim:set syntax=yaml:
   6
   7 # TODO
   8 #  - *: check munin stats collection works
   9 #  - *: check backups are successful
  10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
  11
  12 ---
  13 #############################
  14 # hosts
  15 #############################
  16 servers:
  17   # {{{ gateways
  18   global:
  19     hostgroups: notacomputer
  20     pingable: false
  21     check_command: dsa_check_always_ok
  22   gw-1und1:
  23     parents: gw-ubcece
  24     hostgroups: notacomputer
  25     pingable: false
  26     check_command: dsa_check_always_ok
  27   gw-1und1-sec:
  28     parents: gw-ubcece
  29     hostgroups: notacomputer
  30     pingable: false
  31     check_command: dsa_check_always_ok
  32   gw-accumu:
  33     address: 130.239.18.97
  34     parents: gw-ubcece
  35     hostgroups: layer3-infrastructure
  36   gw-bytemark:
  37     address: 89.16.160.116
  38     parents: gw-ubcece
  39     hostgroups: layer3-infrastructure
  40   gw-c3sl:
  41     address: 200.17.202.254
  42     parents: gw-ubcece
  43     hostgroups: layer3-infrastructure
  44   gw-cecsit:
  45     address: 150.203.164.38
  46     parents: gw-ubcece
  47     hostgroups: layer3-infrastructure
  48   gw-arm:
  49     address: 213.104.121.213
  50     parents: gw-ubcece
  51     hostgroups: layer3-infrastructure
  52   gw-brown:
  53     address: 138.16.160.1
  54     parents: gw-ubcece
  55     hostgroups: layer3-infrastructure
  56   gw-carnet:
  57     address: 161.53.160.1
  58     parents: gw-ubcece
  59     hostgroups: layer3-infrastructure
  60   gw-conova:
  61     address: 217.196.149.238
  62     parents: gw-ubcece
  63     hostgroups: layer3-infrastructure
  64   gw-csail:
  65     address: 128.31.0.1
  66     parents: gw-ubcece
  67     hostgroups: layer3-infrastructure
  68   gw-dgi:
  69     address: 93.94.132.102
  70     parents: gw-ubcece
  71     hostgroups: layer3-infrastructure
  72     contacts: bzed
  73   gw-freenet:
  74     address: 62.104.23.249
  75     parents: gw-ubcece
  76     hostgroups: layer3-infrastructure
  77   gw-gatech:
  78     address: 128.61.240.1
  79     parents: gw-ubcece
  80     hostgroups: layer3-infrastructure
  81   gw-grnet:
  82     address: 194.177.211.193
  83     parents: gw-ubcece
  84     hostgroups: layer3-infrastructure
  85   gw-isc:
  86     address: 149.20.20.1
  87     parents: gw-ubcece
  88     hostgroups: layer3-infrastructure
  89   gw-karlsruhe:
  90     address: 129.143.57.177
  91     parents: gw-ubcece
  92     hostgroups: layer3-infrastructure
  93   gw-leaseweb:
  94     address: 185.17.185.190
  95     parents: gw-ubcece
  96     hostgroups: layer3-infrastructure
  97   gw-man-da:
  98     address: 82.195.75.126
  99     parents: gw-ubcece
 100     hostgroups: layer3-infrastructure
 101   gw-marist:
 102     address: 148.100.88.1
 103     parents: gw-ubcece
 104     hostgroups: layer3-infrastructure
 105   gw-osuosl:
 106     address: 140.211.166.1
 107     parents: gw-ubcece
 108     hostgroups: layer3-infrastructure
 109   gw-rapidswitch:
 110     address: 193.201.200.129
 111     parents: gw-ubcece
 112     hostgroups: layer3-infrastructure
 113   gw-sanger:
 114     address: 193.62.202.20
 115     parents: gw-ubcece
 116     hostgroups: layer3-infrastructure
 117     contacts: tjrc1, dave
 118   gw-scanplus-lobos:
 119     address: 212.211.132.249
 120     parents: gw-ubcece
 121     hostgroups: layer3-infrastructure
 122   gw-scanplus-villa:
 123     address: 212.211.132.1
 124     parents: gw-ubcece
 125     hostgroups: layer3-infrastructure
 126   gw-sil:
 127     address: 86.59.118.145
 128     parents: gw-ubcece
 129     hostgroups: layer3-infrastructure
 130   gw-ubcece:
 131     address: 206.12.19.254
 132     hostgroups: layer3-infrastructure
 133     contacts: lfilipoz
 134   gw-ugent:
 135     address: 193.191.17.50
 136     parents: gw-ubcece
 137     hostgroups: layer3-infrastructure
 138   gw-umn:
 139     address: 128.101.240.222
 140     parents: gw-ubcece
 141     hostgroups: layer3-infrastructure
 142   gw-unicamp:
 143     address: 143.106.167.234
 144     parents: gw-ubcece
 145     hostgroups: layer3-infrastructure
 146   gw-utwente:
 147     address: 130.89.149.1
 148     parents: gw-ubcece
 149     hostgroups: layer3-infrastructure
 150   gw-ynic:
 151     # really janet, because ynic is stupid about firewalling
 152     #address: 146.97.42.26
 153     address: 146.97.41.66
 154     parents: gw-ubcece
 155     hostgroups: layer3-infrastructure
 156   gw-zivit:
 157     address: 80.245.144.3
 158     parents: gw-ubcece
 159     hostgroups: layer3-infrastructure
 160   # }}}
 161   # {{{ servers
 162   # {{{ gw-1und1
 163   powell:
 164     address: 87.106.64.223
 165     parents: gw-1und1
 166     hostgroups: computers, service, acpid-hosts, wheezy
 167   pkgmirror-1and1:
 168     address: 213.165.95.4
 169     parents: powell
 170     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
 171   babin:
 172     address: 213.165.95.6
 173     parents: powell
 174     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 175   piu-slave-1und1-01:
 176     address: 213.165.95.7
 177     parents: powell
 178     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
 179     contacts: holger
 180   # }}}
 181   # {{{ gw-1und1-sec
 182   schumann:
 183     address: 212.227.126.54
 184     parents: gw-1und1-sec
 185     hostgroups: computers, acpid-hosts, service, wheezy
 186   chopin:
 187     address: 195.20.242.124
 188     parents: schumann
 189     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
 190   geo3:
 191     address: 195.20.242.125
 192     parents: schumann
 193     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
 194   soler:
 195     address: 195.20.242.126
 196     parents: schumann
 197     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
 198   wieck:
 199     address: 195.20.242.89
 200     parents: gw-1und1-sec
 201     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
 202   # }}}
 203   # {{{ gw-accumu
 204   pettersson:
 205     address: 130.239.18.123
 206     parents: gw-accumu
 207     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
 208   praetorius:
 209     address: 130.239.18.121
 210     parents: gw-accumu
 211     hostgroups: computers, buildd, hassrvfs, wheezy
 212   # }}}
 213   # {{{ gw-arm
 214   abel:
 215     address: 217.140.96.56
 216     parents: gw-arm
 217     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
 218   antheil:
 219     address: 217.140.96.60
 220     parents: gw-arm
 221     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 222   arnold:
 223     address: 217.140.96.57
 224     parents: gw-arm
 225     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 226   arm-arm-01:
 227     address: 217.140.96.58
 228     parents: gw-arm
 229     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 230   arm-arm-02:
 231     address: 217.140.96.59
 232     parents: gw-arm
 233     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 234   harris:
 235     address: 217.140.96.66
 236     parents: gw-arm
 237     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
 238   hartmann:
 239     address: 217.140.96.67
 240     parents: gw-arm
 241     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 242   hasse:
 243     address: 217.140.96.68
 244     parents: gw-arm
 245     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 246   henze:
 247     address: 217.140.96.70
 248     parents: gw-arm
 249     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 250   hoiby:
 251     address: 217.140.96.71
 252     parents: gw-arm
 253     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
 254   # }}}
 255   # {{{ gw-brown
 256   franck:
 257     address: 138.16.160.12
 258     parents: gw-brown
 259     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
 260   # }}}
 261   # {{{ gw-bytemark
 262   bm-bl1:
 263     address: 5.153.231.241
 264     parents: gw-bytemark
 265     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 266   bm-bl2:
 267     address: 5.153.231.242
 268     parents: gw-bytemark
 269     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 270   bm-bl3:
 271     address: 5.153.231.243
 272     parents: gw-bytemark
 273     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 274   bm-bl4:
 275     address: 5.153.231.244
 276     parents: gw-bytemark
 277     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 278   bm-bl5:
 279     address: 5.153.231.245
 280     parents: gw-bytemark
 281     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 282   bm-bl6:
 283     address: 5.153.231.246
 284     parents: gw-bytemark
 285     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 286   bm-bl7:
 287     address: 5.153.231.247
 288     parents: gw-bytemark
 289     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 290   bm-bl8:
 291     address: 5.153.231.248
 292     parents: gw-bytemark
 293     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 294   bm-bl9:
 295     address: 5.153.231.249
 296     parents: gw-bytemark
 297     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 298   bm-bl10:
 299     address: 5.153.231.250
 300     parents: gw-bytemark
 301     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 302   bm-bl11:
 303     address: 5.153.231.251
 304     parents: gw-bytemark
 305     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 306   bm-bl12:
 307     address: 5.153.231.252
 308     parents: gw-bytemark
 309     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 310
 311   milanollo:
 312     address: 5.153.231.2
 313     parents: gw-bytemark
 314     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
 315   milanollo2:
 316     address: 5.153.231.9
 317     parents: milanollo
 318     hostgroups: secondary-IPs
 319   picconi:
 320     address: 5.153.231.3
 321     parents: gw-bytemark
 322     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
 323   senfter:
 324     address: 5.153.231.4
 325     parents: gw-bytemark
 326     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
 327   adayevskaya:
 328     address: 5.153.231.5
 329     parents: gw-bytemark
 330     hostgroups: computers, service, kvmdomains, wheezy
 331   pejacevic:
 332     address: 5.153.231.6
 333     parents: gw-bytemark
 334     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
 335     contacts: holger
 336   piu-slave-bm-a:
 337     address: 5.153.231.7
 338     parents: gw-bytemark
 339     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
 340     contacts: holger
 341   binet:
 342     address: 5.153.231.8
 343     parents: gw-bytemark
 344     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 345   bmdb1:
 346     address: 5.153.231.10
 347     parents: gw-bytemark
 348     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
 349   ganeti-bytemark:
 350     address: 82.195.75.111
 351     parents: gw-bytemark
 352     hostgroups: notacomputer
 353   coccia:
 354     address: 5.153.231.11
 355     parents: ganeti-bytemark
 356     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts
 357   backuphost:
 358     address: 5.153.231.12
 359     parents: ganeti-bytemark
 360     hostgroups: computers, hassrvfs, kvmdomains, wheezy
 361   philp:
 362     address: 5.153.231.13
 363     parents: ganeti-bytemark
 364     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
 365   couper:
 366     address: 5.153.231.14
 367     parents: ganeti-bytemark
 368     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
 369   rainier:
 370     address: 5.153.231.16
 371     parents: ganeti-bytemark
 372     hostgroups: computers, kvmdomains, wheezy, no-bacula
 373   rapoport:
 374     address: 5.153.231.15
 375     parents: ganeti-bytemark
 376     hostgroups: computers, kvmdomains, wheezy, no-bacula
 377   delfin:
 378     address: 5.153.231.17
 379     parents: ganeti-bytemark
 380     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
 381   wuiet:
 382     address: 5.153.231.18
 383     parents: ganeti-bytemark
 384     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
 385   dinis:
 386     address: 5.153.231.19
 387     parents: ganeti-bytemark
 388     hostgroups: computers, general, kvmdomains, wheezy
 389   donizetti:
 390     address: 5.153.231.20
 391     parents: ganeti-bytemark
 392     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
 393   moszumanska:
 394     address: 5.153.231.21
 395     parents: ganeti-bytemark
 396     contact_groups: alioth-admins
 397     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
 398     no-servicegroups: true
 399   dillon:
 400     address: 5.153.231.22
 401     parents: ganeti-bytemark
 402     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
 403   ticharich:
 404     address: 5.153.231.23
 405     parents: ganeti-bytemark
 406     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
 407   petrova:
 408     address: 5.153.231.25
 409     parents: ganeti-bytemark
 410     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
 411   oyens:
 412     address: 5.153.231.26
 413     parents: ganeti-bytemark
 414     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
 415   barriere:
 416     address: 5.153.231.27
 417     parents: ganeti-bytemark
 418     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
 419   quantz:
 420     address: 5.153.231.28
 421     parents: ganeti-bytemark
 422     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
 423   portman:
 424     address: 5.153.231.29
 425     parents: ganeti-bytemark
 426     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
 427   paradis:
 428     address: 5.153.231.30
 429     parents: ganeti-bytemark
 430     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 431   x86-bm-01:
 432     address: 5.153.231.32
 433     parents: ganeti-bytemark
 434     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
 435   fischer:
 436     address: 5.153.231.33
 437     parents: ganeti-bytemark
 438     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
 439   # }}}
 440   # {{{ gw-c3sl
 441   santoro:
 442     address: 200.17.202.197
 443     parents: gw-c3sl
 444     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
 445     contacts: faw
 446   # }}}
 447   # {{{ gw-carnet
 448   lebrun:
 449     address: 193.198.184.10
 450     parents: gw-carnet
 451     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
 452   schroeder:
 453     address: 193.198.184.11
 454     parents: gw-carnet
 455     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
 456   # }}}
 457   # {{{ gw-cecsit
 458   gluck:
 459     address: 150.203.164.38
 460     parents: gw-cecsit
 461     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
 462   # }}}
 463   # {{{ gw-conova
 464   sompek:
 465     address: 217.196.149.225
 466     parents: gw-conova
 467     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
 468   stadler:
 469     address: 217.196.149.226
 470     parents: gw-conova
 471     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
 472   # }}}
 473   # {{{ gw-csail
 474   senfl:
 475     address: 128.31.0.51
 476     parents: gw-csail
 477     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
 478   steffani:
 479     address: 128.31.0.36
 480     parents: gw-csail
 481     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 482   csail-node01:
 483     address: 128.31.0.16
 484     parents: gw-csail
 485     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
 486   csail-node02:
 487     address: 128.31.0.46
 488     parents: gw-csail
 489     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
 490   # }}}
 491   # {{{ gw-dgi
 492   storace:
 493     address: 93.94.130.161
 494     parents: gw-dgi
 495     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
 496   # }}}
 497   # {{{ gw-gatech
 498   sechter:
 499     address: 128.61.240.73
 500     parents: gw-gatech
 501     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
 502   # }}}
 503   # {{{ gw-grnet
 504   rautavaara:
 505     address: 194.177.211.199
 506     parents: gw-grnet
 507     hostgroups: computers, acpid-hosts, megaraid, service, squeeze, nfs-server
 508   # }}}
 509   # {{{ gw-isc
 510   schein:
 511     address: 149.20.20.6
 512     parents: gw-isc
 513     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 514   # }}}
 515   # {{{ gw-leaseweb
 516   lw01:
 517     address: 185.17.185.177
 518     parents: gw-leaseweb
 519     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 520   lw02:
 521     address: 185.17.185.178
 522     parents: gw-leaseweb
 523     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 524   lw03:
 525     address: 185.17.185.179
 526     parents: gw-leaseweb
 527     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 528   lw04:
 529     address: 185.17.185.180
 530     parents: gw-leaseweb
 531     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 532   lw07:
 533     address: 185.17.185.187
 534     parents: gw-leaseweb
 535     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
 536   lw08:
 537     address: 185.17.185.189
 538     parents: gw-leaseweb
 539     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
 540   #, apache2-hosts
 541   # }}}
 542   # {{{ gw-karlsruhe
 543   zemlinsky:
 544     address: 129.143.160.6
 545     parents: gw-karlsruhe
 546     hostgroups: computers, buildd, wheezy
 547     contacts: pkern
 548   # }}}
 549   # {{{ gw-man-da
 550   ball:
 551     address: 82.195.75.70
 552     parents: gw-man-da
 553     hostgroups: computers, buildd, hasbootfs, wheezy
 554   # bartok TODO
 555   czerny:
 556     address: 82.195.75.109
 557     parents: gw-man-da
 558     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 559   clementi:
 560     address: 82.195.75.103
 561     parents: gw-man-da
 562     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 563   bendel:
 564     address: 82.195.75.100
 565     parents: ganeti3
 566     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
 567   master:
 568     address: 82.195.75.110
 569     parents: ganeti3
 570     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
 571   mipsel-manda-01:
 572     address: 82.195.75.72
 573     parents: gw-arm
 574     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 575   mipsel-manda-02:
 576     address: 82.195.75.74
 577     parents: gw-arm
 578     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 579   fils:
 580     address: 82.195.75.89
 581     parents: ganeti3
 582     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 583     contacts: christoph
 584   fayrfax:
 585     address: 82.195.75.82
 586     parents: ganeti3
 587     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 588     contacts: christoph
 589   vento:
 590     address: 82.195.75.98
 591     parents: ganeti3
 592     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
 593   lully:
 594     address: 82.195.75.99
 595     parents: ganeti3
 596     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
 597   rem:
 598     address: 82.195.75.68
 599     parents: gw-man-da
 600     hostgroups: computers, buildd, hasbootfs, hassrvfs, wheezy
 601   draghi:
 602     address: 82.195.75.106
 603     parents: ganeti3
 604     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
 605   geo1:
 606     address: 82.195.75.105
 607     parents: ganeti3
 608     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
 609   handel:
 610     address: 82.195.75.104
 611     parents: ganeti3
 612     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
 613   kaufmann:
 614     address: 82.195.75.107
 615     parents: ganeti3
 616     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
 617   stockhausen:
 618     address: 82.195.75.108
 619     parents: ganeti3
 620     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
 621   ganeti3:
 622     address: 82.195.75.111
 623     parents: gw-man-da
 624     hostgroups: notacomputer
 625   wilder:
 626     address: 82.195.75.112
 627     parents: ganeti3
 628     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
 629   mailly:
 630     address: 82.195.75.114
 631     parents: ganeti3
 632     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
 633   denis:
 634     address: 82.195.75.91
 635     parents: ganeti3
 636     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
 637   vogler:
 638     address: 82.195.75.92
 639     parents: ganeti3
 640     hostgroups: computers, service, kvmdomains, wheezy
 641   mipsel-manda-01:
 642     address: 82.195.75.72
 643     parents: gw-man-da
 644     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
 645   mipsel-manda-02:
 646     address: 82.195.75.74
 647     parents: gw-man-da
 648     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
 649   # }}}
 650   # {{{ gw-marist
 651   zani:
 652     address: 148.100.88.22
 653     parents: gw-marist
 654     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
 655   # }}}
 656   # {{{ gw-osuosl
 657   busoni:
 658     address: 140.211.15.34
 659     parents: gw-osuosl
 660     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
 661   byrd:
 662     address: 140.211.166.20
 663     parents: gw-osuosl
 664     hostgroups: computers, service, dl380, acpid-hosts, wheezy
 665   buxtehude:
 666     address: 140.211.166.26
 667     parents: byrd
 668     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
 669   # malo TODO
 670   mayer:
 671     address: 140.211.166.78
 672     parents: gw-osuosl
 673     hostgroups: computers, buildd, hasbootfs, wheezy
 674 #  mayr:
 675 #    address: 140.211.166.58
 676 #    parents: gw-osuosl
 677 #    hostgroups: computers, buildd, hasbootfs
 678   merulo:
 679     address: 140.211.166.46
 680     parents: gw-osuosl
 681     hostgroups: computers, porterbox, hasusrfs, wheezy
 682   parry:
 683     address: 140.211.15.153
 684     parents: gw-osuosl
 685     hostgroups: computers, wheezy, buildd, hassrvfs
 686   partch:
 687     address: 140.211.15.152
 688     parents: gw-osuosl
 689     hostgroups: computers, wheezy, hassrvfs, porterbox
 690   rietz:
 691     address: 140.211.166.43
 692     parents: gw-osuosl
 693     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
 694     #, bosserver
 695   rietz2:
 696     address: 140.211.166.44
 697     parents: rietz
 698     hostgroups: secondary-IPs
 699   # zee TODO
 700   # }}}
 701   # {{{ gs-rapidswitch
 702   caballero:
 703     address: 193.201.200.200
 704     parents: gw-rapidswitch
 705     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
 706   # }}}
 707   # {{{ gw-sanger
 708   sibelius:
 709     address: 193.62.202.28
 710     parents: gw-sanger
 711     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts, hasvarlogfs
 712     contacts: tjrc1, dave
 713   smetana:
 714     address: 193.62.202.29
 715     parents: gw-sanger
 716     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
 717     contacts: tjrc1, dave
 718   # }}}
 719   # {{{ gw-scanplus
 720   lobos:
 721     address: 212.211.132.250
 722     parents: gw-scanplus-lobos
 723     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 724   villa:
 725     address: 212.211.132.32
 726     parents: gw-scanplus-villa
 727     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 728   # }}}
 729   # {{{ gw-sil
 730   eder:
 731     address: 86.59.118.151
 732     parents: gw-sil
 733     hostgroups: computers, porterbox, wheezy, hassrvfs
 734   eysler:
 735     address: 86.59.118.152
 736     parents: gw-sil
 737     hostgroups: computers, buildd, wheezy
 738   eberlin:
 739     address: 86.59.118.155
 740     parents: gw-sil
 741     hostgroups: computers, buildd, wheezy
 742   # }}}
 743   # {{{ gw-ubcece
 744   sw-ubcece:
 745     hostgroups: layer2-infrastructure
 746     contacts: lfilipoz
 747     pingable: false
 748     check_command: dsa_check_always_ok
 749   sw-ubcece-mcld:
 750     hostgroups: layer2-infrastructure
 751     parents: sw-ubcece
 752     contacts: lfilipoz
 753     pingable: false
 754     check_command: dsa_check_always_ok
 755   sw-ubcece-kais:
 756     hostgroups: layer2-infrastructure
 757     parents: sw-ubcece
 758     contacts: lfilipoz
 759     pingable: false
 760     check_command: dsa_check_always_ok
 761   spontini:
 762     address: 206.12.19.14
 763     parents: sw-ubcece-mcld
 764     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
 765     contacts: lfilipoz
 766   ravel:
 767     address: 206.12.19.5
 768     parents: sw-ubcece-kais
 769     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
 770   dijkstra:
 771     address: 206.12.19.218
 772     parents: sw-ubcece-kais
 773     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 774   pasquini:
 775     address: 206.12.19.217
 776     parents: sw-ubcece-kais
 777     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 778   luchesi:
 779     address: 206.12.19.214
 780     parents: sw-ubcece-kais
 781     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 782   tristano:
 783     address: 206.12.19.213
 784     parents: sw-ubcece-kais
 785     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 786   boito:
 787     address: 206.12.19.216
 788     parents: sw-ubcece-kais
 789     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 790   bertali:
 791     address: 206.12.19.212
 792     parents: sw-ubcece-kais
 793     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 794   ganeti2:
 795     address: 206.12.19.23
 796     parents: sw-ubcece-kais
 797     hostgroups: notacomputer
 798   tchaikovsky:
 799     address: 206.12.19.118
 800     parents: ganeti2
 801     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
 802   wolkenstein:
 803     address: 206.12.19.116
 804     parents: ganeti2
 805     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
 806   brahms:
 807     address: 206.12.19.115
 808     parents: ganeti2
 809     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 810   geo2:
 811     address: 206.12.19.113
 812     parents: ganeti2
 813     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
 814   # MSA 2000 (2012i)
 815   giustini:
 816     address: 192.168.2.6
 817     parents: dijkstra
 818     hostgroups: notacomputer
 819     # unless we implement runfrom for host alive checks
 820     pingable: false
 821     check_command: dsa_check_always_ok
 822   falla:
 823     address: 206.12.19.117
 824     parents: ganeti2
 825     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
 826   fano:
 827     address: 206.12.19.110
 828     parents: ganeti2
 829     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 830     contacts: christoph
 831   finzi:
 832     address: 206.12.19.111
 833     parents: ganeti2
 834     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 835     contacts: christoph
 836   gabrielli:
 837     address: 206.12.19.17
 838     parents: sw-ubcece-kais
 839     hostgroups: computers, porterbox, wheezy
 840   corelli:
 841     address: 206.12.19.16
 842     parents: sw-ubcece-kais
 843     hostgroups: computers, buildd, wheezy
 844   lucatelli:
 845     address: 206.12.19.15
 846     parents: sw-ubcece-kais
 847     hostgroups: computers, buildd, wheezy
 848   rossini:
 849     address: 206.12.19.19
 850     parents: sw-ubcece-kais
 851     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 852   salieri:
 853     address: 206.12.19.20
 854     parents: sw-ubcece-kais
 855     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 856   traetta:
 857     address: 206.12.19.21
 858     parents: sw-ubcece-kais
 859     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 860 #  locke:
 861 #    address: 206.12.19.120
 862 #    parents: sw-ubcece-kais
 863 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
 864   lotti:
 865     address: 206.12.19.121
 866     parents: sw-ubcece-kais
 867     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
 868   nono:
 869     address: 206.12.19.123
 870     parents: traetta
 871     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
 872   reger:
 873     address: 206.12.19.124
 874     parents: ganeti2
 875     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
 876   danzi:
 877     address: 206.12.19.125
 878     parents: ganeti2
 879     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
 880   glinka:
 881     address: 206.12.19.126
 882     parents: traetta
 883     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
 884   tye:
 885     address: 206.12.19.129
 886     parents: ganeti2
 887     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
 888   elgar:
 889     address: 206.12.19.130
 890     parents: salieri
 891     hostgroups: computers, service, kvmdomains, wheezy
 892   gombert:
 893     address: 206.12.19.132
 894     parents: ganeti2
 895     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
 896   jenkins:
 897     address: 206.12.19.133
 898     parents: salieri
 899     hostgroups: computers, service, kvmdomains, wheezy
 900   blavet:
 901     address: 206.12.19.134
 902     parents: ganeti2
 903     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
 904   diabelli:
 905     address: 206.12.19.136
 906     parents: traetta
 907     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
 908   bizet:
 909     address: 206.12.19.137
 910     parents: ganeti2
 911     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
 912   lilburn:
 913     address: 206.12.19.138
 914     parents: ganeti2
 915     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
 916   popov:
 917     address: 206.12.19.119
 918     parents: ganeti2
 919     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
 920   beach:
 921     address: 206.12.19.140
 922     parents: ganeti2
 923     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
 924   ullmann:
 925     address: 206.12.19.141
 926     parents: ganeti2
 927     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
 928   sonntag:
 929     address: 206.12.19.142
 930     parents: ganeti2
 931     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
 932   menotti:
 933     address: 206.12.19.143
 934     parents: ganeti2
 935     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 936   muffat:
 937     address: 206.12.19.146
 938     parents: ganeti2
 939     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
 940   # }}}
 941   # {{{ gw-ugent
 942   ancina:
 943     address: 157.193.39.13
 944     parents: gw-ugent
 945     hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, wheezy
 946     contacts: luk
 947   # }}}
 948   # {{{ gw-umn
 949   saens:
 950     address: 128.101.240.212
 951     parents: gw-umn
 952     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 953   # }}}
 954   # {{{ gw-unicamp
 955   asgard:
 956     address: 143.106.167.145
 957     parents: gw-unicamp
 958     hostgroups: layer3-infrastructure
 959   powerpc-unicamp-01:
 960     address: 143.106.167.149
 961     parents: asgard
 962     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 963   # }}}
 964   # {{{ gw-utwente
 965   klecker:
 966     address: 130.89.148.10
 967     parents: gw-utwente
 968     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
 969   klecker-ftp:
 970     address: 130.89.148.12
 971     parents: klecker
 972     hostgroups: secondary-IPs
 973   klecker-archive:
 974     address: 130.89.148.13
 975     parents: klecker
 976     hostgroups: secondary-IPs
 977   klecker-static:
 978     address: 130.89.148.14
 979     parents: klecker
 980     hostgroups: secondary-IPs
 981   # }}}
 982   # {{{ gw-ynic
 983   howells:
 984     address: 144.32.168.75
 985     parents: gw-ynic
 986     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
 987   hummel:
 988     address: 144.32.168.76
 989     parents: gw-ynic
 990     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
 991   porpora:
 992     address: 144.32.168.78
 993     parents: gw-ynic
 994     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
 995   poulenc:
 996     address: 144.32.168.77
 997     parents: gw-ynic
 998     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
 999   # }}}
1000   # {{{ gw-zivit
1001   zandonai:
1002     address: 80.245.147.46
1003     parents: gw-zivit
1004     hostgroups: computers, buildd, hassrvfs, wheezy
1005   zelenka:
1006     address: 80.245.147.40
1007     parents: gw-zivit
1008     hostgroups: computers, porterbox, hassrvfs, wheezy
1009   # }}}
1010   # }}}
1011
1012 # {{{ ############################# host groups #############################
1013 hostgroups:
1014   computers:
1015     alias: computers
1016     private: 1
1017   layer2-infrastructure:
1018     alias: Layer 2 Devices
1019     extinfo-icon_image: base/switch40.png
1020     extinfo-icon_image_alt: switch
1021   layer3-infrastructure:
1022     alias: Layer 3 Devices
1023     extinfo-icon_image: base/switch40.png
1024     extinfo-icon_image_alt: router
1025   notacomputer:
1026     alias: Systems that are not really systems.  Yeah :)
1027     private: 1
1028   freebsd:
1029     alias: freebsd
1030     private: 1
1031   armhf:
1032     alias: armhf
1033     private: 1
1034   sparc:
1035     alias: sparc
1036     private: 1
1037
1038   porterbox:
1039     alias: developer accessible porter machines
1040     extinfo-icon_image: base/debian.png
1041     extinfo-icon_image_alt: Debian GNU/Linux
1042     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1043   service:
1044     alias: machines running services
1045     extinfo-icon_image: base/debian.png
1046     extinfo-icon_image_alt: Debian GNU/Linux
1047     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1048   buildd:
1049     alias: buildd systems
1050     extinfo-icon_image: base/debian.png
1051     extinfo-icon_image_alt: Debian GNU/Linux
1052     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1053   general:
1054     alias: general purpose developer accessible machines
1055     extinfo-icon_image: base/debian.png
1056     extinfo-icon_image_alt: Debian GNU/Linux
1057     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1058
1059   dl380:
1060     alias: HP DL380 hosts
1061     private: 1
1062   dl385:
1063     alias: HP DL385 hosts
1064     private: 1
1065   dl360:
1066     alias: HP DL360 hosts
1067     private: 1
1068   bl460:
1069     alias: HP BL460 blades
1070     private: 1
1071   bm-bl:
1072     alias: HP blades at bytemark
1073     private: 1
1074   dl585:
1075     alias: HP DL385 hosts
1076     private: 1
1077   dl180:
1078     alias: HP DL180
1079     private: 1
1080   dl120:
1081     alias: HP DL120
1082     private: 1
1083   sw-raid:
1084     alias: Hosts with Linux software raid
1085     private: 1
1086   aacraid:
1087     alias: Hosts with Adaptec AACraid
1088     private: 1
1089   megaraid:
1090     alias: Hosts with LSI Logic MegaRAID
1091     private: 1
1092
1093   squeeze:
1094     alias: Hosts running squeeze
1095   wheezy:
1096     alias: Hosts running wheezy
1097
1098   kvmdomains:
1099     alias: Hosts that are KVM domains
1100     private: 1
1101
1102   drbd-hosts:
1103     alias: hosts running drbd
1104   postfix-hosts:
1105     alias: hosts running postfix instead of exim
1106     private: 1
1107   heavy-exim:
1108     alias: "hosts running the full mail stuff, including clamav and postgrey"
1109     private: 1
1110   mail-relay:
1111     alias: "relays usually are hosts with more exim processes"
1112     private: 1
1113   spamd:
1114     alias: "hosts running spamassassin as daemon"
1115     private: 1
1116   heavy-postfix:
1117     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1118     private: 1
1119   apache2-hosts:
1120     alias: hosts running apache2
1121     private: 1
1122   jetty-hosts:
1123     alias: hosts running jetty
1124     private: 1
1125   bind9-hosts:
1126     alias: hosts running bind9
1127     private: 1
1128   # once every host runs unbound, do away with this group and check "computers" instead
1129   amavis-hosts:
1130     alias: hosts running amavis
1131     private: 1
1132   rsyncd-hosts:
1133     alias: hosts providing rsync services via xinetd
1134     private: 1
1135   xinetd-hosts:
1136     alias: hosts providing services via xinetd
1137     private: 1
1138   postgres91-hosts:
1139     alias: hosts running postgres91
1140     private: 1
1141   no-ulogd:
1142     alias: hosts not running ulogd
1143     private: 1
1144   acpid-hosts:
1145     alias: hosts running acpid
1146     private: 1
1147   uploadqueue:
1148     alias: hosts that are an anonymous ftp uploadqueue
1149     private: 1
1150   bosserver:
1151     alias: hosts running bosserver
1152     private: 1
1153   apache-https:
1154     alias: hosts with https services
1155     private: 1
1156   broken_https_default_vhost:
1157     alias: https default vhost does not say 200 OK
1158     private: 1
1159
1160   no-bacula:
1161     alias: hosts which are not being backed up with bacula
1162     private: 1
1163
1164   nfs-client:
1165     alias: hosts mounting filesystems using NFS
1166     private: 1
1167   nfs-server:
1168     alias: hosts serving filesystems using NFS
1169     private: 1
1170   autofs:
1171     alias: hosts running the automounter
1172     private: 1
1173
1174   highload:
1175     alias: "hosts on which high load is normal"
1176     private: 1
1177
1178   secondary-IPs:
1179     alias: secondary IP addresses
1180     private: 1
1181
1182   hasbootfs:
1183     alias: hosts with a /boot filesystem
1184     private: 1
1185   hassrvfs:
1186     alias: hosts with a /srv filesystem
1187     private: 1
1188   hasorgfs:
1189     alias: hosts with a /org filesystem
1190     private: 1
1191   hasvarfs:
1192     alias: hosts with a /var filesystem
1193     private: 1
1194   hasvarlogfs:
1195     alias: hosts with a /var/log filesystem
1196     private: 1
1197   hasusrfs:
1198     alias: hosts with a /usr filesystem
1199     private: 1
1200
1201   incomingmailrelayed:
1202     alias: incoming mail needs to go through a mail relay
1203     # i.e. no port 25
1204     private: 1
1205   incomingmailrelayed2025:
1206     alias: incoming mail needs to go through a mail relay
1207     # i.e. no port 25
1208     private: 1
1209
1210   brokensamhain:
1211     alias: machines that can not run samhain
1212     private: 1
1213   high-RTT:
1214     alias: machines with high round trip times
1215     private: 1
1216   ping-suckers:
1217     alias: machines that just suck at icmp
1218     private: 1
1219   alioth:
1220     alias: machines that just are just awkward
1221     private: 1
1222   openstack-compute:
1223     alias: nodes that run OpenStack compute
1224     private: 1
1225   openstack-controller:
1226     alias: nodes that run OpenStack controller
1227     private: 1
1228
1229   security_mirror:
1230     alias: hosts that are security mirrors
1231     private: 1
1232
1233   broken_mq:
1234     alias: hosts whose MQ is broken
1235     private: 1
1236 # }}}
1237 # {{{ ############################# servicegroups #############################
1238 servicegroups:
1239   diskspace:
1240     alias: diskusage checks
1241   buildd:
1242     alias: buildd checks
1243   raid:
1244     alias: raid checks
1245   backup:
1246     alias: backup checks
1247   kernel:
1248     alias: kernel checks
1249   apt:
1250     alias: apt upgrade status
1251   samhain:
1252     alias: samhain integrity status
1253   time:
1254     alias: time stuff
1255   security:
1256     alias: security
1257     servicegroup_members: apt, kernel, samhain
1258   MQ:
1259     alias: rabbitMQ stuff
1260 # }}}
1261 # {{{ ############################# services #############################
1262 services:
1263   # {{{ ### basic networking
1264   -
1265     name: PING
1266     check: "check_ping!350.0,20%!600.0,40%"
1267     hostgroups: pingable
1268     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1269     normal_check_interval: 5
1270     max_check_attempts: 4
1271     retry_check_interval: 1
1272   -
1273     name: PING
1274     check: "check_ping!600.0,20%!900.0,40%"
1275     hostgroups: high-RTT
1276     normal_check_interval: 5
1277     max_check_attempts: 4
1278     retry_check_interval: 1
1279   -
1280     name: PING
1281     check: "check_ping!600.0,90%!900.0,95%"
1282     hostgroups: ping-suckers
1283     normal_check_interval: 5
1284     max_check_attempts: 4
1285     retry_check_interval: 1
1286   -
1287     name: PING
1288     check: "check_ping!2000.0,60%!3000.0,80%"
1289     hostgroups: layer3-infrastructure
1290     normal_check_interval: 5
1291     max_check_attempts: 4
1292     retry_check_interval: 1
1293   # }}}
1294   # {{{ ### disk usage
1295   -
1296     name: disk usage - all
1297     servicegroups: diskspace
1298     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1299     hostgroups: computers
1300     excludehosts: sibelius
1301   -
1302     name: disk usage - all
1303     servicegroups: diskspace
1304     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98"
1305     hosts: sibelius
1306
1307   -
1308     name: disk usage on /
1309     servicegroups: diskspace
1310     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1311     hostgroups: computers
1312   -
1313     name: disk usage on /boot
1314     servicegroups: diskspace
1315     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1316     hostgroups: hasbootfs
1317   -
1318     name: disk usage on /var
1319     servicegroups: diskspace
1320     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1321     hostgroups: hasvarfs
1322   -
1323     name: disk usage on /org
1324     servicegroups: diskspace
1325     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1326     hostgroups: hasorgfs
1327   -
1328     name: disk usage on /srv
1329     servicegroups: diskspace
1330     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1331     hostgroups: hassrvfs
1332   -
1333     name: disk usage on /tmp
1334     servicegroups: diskspace
1335     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1336     hosts: saens
1337   -
1338     name: disk usage on /usr
1339     servicegroups: diskspace
1340     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1341     hostgroups: hasusrfs
1342   -
1343     name: disk usage on /var/lib/postgresql
1344     servicegroups: diskspace
1345     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1346     hosts: sibelius, busoni, buxtehude, lw07
1347   -
1348     name: disk usage on /var/log
1349     servicegroups: diskspace
1350     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1351     hostgroups: hasvarlogfs
1352   -
1353     name: disk usage on /var/spool/postfix
1354     servicegroups: diskspace
1355     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1356     hosts: bendel
1357   -
1358     name: disk usage on /srv/mirrors
1359     servicegroups: diskspace
1360     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1361     hosts: sibelius
1362   -
1363     name: disk usage on /srv/snapshot.debian.org
1364     servicegroups: diskspace
1365     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1366     hosts: sibelius
1367   -
1368     name: disk usage on /srv/farm-snapshot/farm-misc
1369     servicegroups: diskspace
1370     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-misc"
1371     hosts: sibelius
1372   -
1373     name: disk usage on /var/lib/postgresql/9.1
1374     servicegroups: diskspace
1375     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1376     hosts: franck
1377   -
1378     name: disk usage on /srv/ftp-master.debian.org
1379     servicegroups: diskspace
1380     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1381     hosts: franck
1382   -
1383     name: disk usage on /storage/snapshot-farm-1
1384     servicegroups: diskspace
1385     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1386     hosts: lw01
1387   -
1388     name: disk usage on /storage/snapshot-farm-2
1389     servicegroups: diskspace
1390     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1391     hosts: lw02
1392   -
1393     name: disk usage on /storage/snapshot-farm-3
1394     servicegroups: diskspace
1395     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1396     hosts: lw03
1397   -
1398     name: disk usage on /storage/snapshot-farm-4
1399     servicegroups: diskspace
1400     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1401     hosts: lw04
1402   -
1403     name: disk usage on /srv/morgue.debian.org/
1404     servicegroups: diskspace
1405     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1406     hosts: lw03
1407   # }}}
1408   # {{{ ### system
1409   # {{{ setup
1410   -
1411     name: setup - dsa config
1412     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1413     hostgroups: computers
1414     normal_check_interval: 60
1415     excludehostgroups: alioth
1416   -
1417     name: setup - local hostname etc-hosts
1418     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1419     hostgroups: computers
1420     normal_check_interval: 60
1421   # }}}
1422   # {{{ os health
1423   ####
1424   -
1425     name: users
1426     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1427     hostgroups: computers
1428   -
1429     name: load
1430     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1431     hostgroups: computers
1432     excludehostgroups: highload
1433   -
1434     name: load
1435     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1436     hostgroups: highload
1437   -
1438     name: uptime check
1439     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1440     hostgroups: computers
1441   -
1442     name: processes - total
1443     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1444     hostgroups: computers
1445   -
1446     name: swap usage - percent
1447     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1448     hostgroups: computers
1449   -
1450     name: swap usage - mb
1451     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1452     hostgroups: computers
1453   -
1454     name: process - getty
1455     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1456     hostgroups: computers
1457     excludehosts: zelenka, zandonai
1458   -
1459     name: processes - zombies
1460     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1461     hostgroups: computers
1462   -
1463     name: system - available entropy
1464     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1465     event_handler: dsa_event_handler_restart_ekey
1466     hostgroups: computers
1467     excludehostgroups: freebsd
1468   -
1469     name: system - filesystem check
1470     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1471     normal_check_interval:  60
1472     retry_check_interval: 15
1473     hostgroups: computers
1474   # }}}
1475   # {{{ backup
1476   -
1477     name: backup
1478     servicegroups: backup
1479     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1480     hostgroups: computers
1481     excludehosts: backuphost
1482     normal_check_interval: 60
1483     max_check_attempts: 2
1484     retry_check_interval: 5
1485   -
1486     name: backup server config
1487     servicegroups: backup
1488     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1489     hosts: backuphost
1490     normal_check_interval: 60
1491     max_check_attempts: 2
1492     retry_check_interval: 5
1493   -
1494     name: backup - bacula - last backup
1495     servicegroups: backup
1496     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1497     runfrom: dinis
1498     hostgroups: computers
1499     excludehostgroups: buildd, porterbox, no-bacula
1500     normal_check_interval:  60
1501     retry_check_interval: 15
1502   -
1503     name: backup - bacula - last full backup
1504     servicegroups: backup
1505     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1506     runfrom: dinis
1507     hostgroups: computers
1508     excludehostgroups: buildd, porterbox, no-bacula
1509     normal_check_interval:  60
1510     retry_check_interval: 15
1511   -
1512     name: process - bacula-fd
1513     servicegroups: backup
1514     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1515     hostgroups: computers
1516     excludehostgroups: freebsd, alioth
1517   -
1518     name: process - bacula-fd
1519     servicegroups: backup
1520     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1521     hostgroups: freebsd
1522
1523   ####
1524   -
1525     name: process - acc.umu.se backup
1526     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1527     hosts: sibelius
1528   # }}}
1529   # {{{ security
1530   -
1531     name: running kernel
1532     servicegroups: kernel
1533     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1534     hostgroups: computers
1535     normal_check_interval: 60
1536     retry_check_interval: 5
1537   -
1538     name: apt - security updates
1539     servicegroups: apt
1540     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1541     hostgroups: computers
1542     normal_check_interval:  60
1543     retry_check_interval: 15
1544   -
1545     name: installed firewall
1546     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1547     hostgroups: computers
1548     excludehostgroups: freebsd
1549   -
1550     name: puppetized firewall
1551     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1552     hostgroups: computers
1553     excludehostgroups: freebsd
1554   -
1555     name: process - ulogd
1556     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1557     hostgroups: computers
1558     excludehostgroups: freebsd, sparc
1559   -
1560     name: unexpected process - ulogd
1561     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1562     hostgroups: freebsd, sparc
1563   ####
1564   -
1565     name: process - samhain
1566     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1567     hostgroups: computers
1568     excludehostgroups: brokensamhain
1569   -
1570     name: samhain
1571     servicegroups: samhain
1572     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1573     hostgroups: computers
1574     depends: process - samhain
1575     normal_check_interval: 60
1576     retry_check_interval: 5
1577     excludehostgroups: brokensamhain
1578   -
1579     name: processes - samhain zombies
1580     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1581     event_handler: dsa_event_handler_restart_samhain
1582     hostgroups: computers
1583     excludehostgroups: brokensamhain
1584   # }}}
1585   # {{{ logging
1586   -
1587     name: process - syslog-ng
1588     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1589     hostgroups: computers
1590     excludehostgroups: freebsd
1591
1592   -
1593     name: process - syslog-ng
1594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1595     hostgroups: freebsd
1596
1597   -
1598     name: remote logging on lotti
1599     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1600     runfrom: lotti
1601     hostgroups: computers
1602     excludehostgroups: alioth
1603   -
1604     name: remote logging on lully
1605     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1606     runfrom: lully
1607     hostgroups: computers
1608     excludehostgroups: alioth
1609   # }}}
1610   # {{{ base service
1611   -
1612     name: process - sshd
1613     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1614     hostgroups: computers
1615   -
1616     name: "network service - sshd"
1617     check: dsa_check_ssh
1618     hostgroups: computers
1619     depends: process - sshd
1620     normal_check_interval:  60
1621     notification_interval: 1440
1622   ####
1623   -
1624     name: network service - nrpe
1625     check: check_tcp!5666
1626     hostgroups: computers
1627     max_check_attempts: -2
1628     notification_interval: 1440
1629   -
1630     name: process - nrpe
1631     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1632     hostgroups: computers
1633     max_check_attempts: -1
1634     depends: network service - nrpe
1635   ###
1636   -
1637     name: process - munin-node
1638     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1639     hostgroups: computers
1640     excludehostgroups: freebsd, armhf
1641   -
1642     name: process - munin-node
1643     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1644     hostgroups: freebsd
1645   -
1646     name: process - munin-node
1647     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1648     hostgroups: wheezy
1649     excludehostgroups: freebsd
1650   -
1651     name: network service - munin-node
1652     check: check_tcp!4949
1653     hostgroups: computers
1654     depends: process - munin-node
1655   ###
1656   -
1657     name: process - ntpd
1658     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1659     hostgroups: computers
1660     servicegroups: time
1661   -
1662     name: network service - ntp
1663     check: dsa_check_ntp
1664     hostgroups: computers
1665     depends: process - ntpd
1666     excludehosts: ancina
1667     servicegroups: time
1668   ###
1669   -
1670     name: network service - time
1671     check: dsa_check_time
1672     hosts: ancina
1673     depends: process - xinetd
1674     servicegroups: time
1675   ###
1676   -
1677     name: process - atd
1678     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1679     hostgroups: computers
1680   ###
1681   -
1682     name: process - cron
1683     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1684     hostgroups: computers
1685   ###
1686   -
1687     name: process - ud-replicated
1688     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1689     hostgroups: computers
1690     excludehostgroups: squeeze, freebsd, alioth
1691   -
1692     name: process - ud-replicated
1693     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1694     hostgroups: freebsd
1695   ###
1696   -
1697     name: process - monit
1698     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1699     hostgroups: squeeze
1700   -
1701     name: process - monit
1702     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1703     hostgroups: computers
1704     excludehostgroups: squeeze, alioth
1705   ###
1706   -
1707     name: MQ connection on rainier
1708     servicegroups: MQ
1709     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1710     runfrom: rainier
1711     hostgroups: computers
1712     normal_check_interval:  60
1713     retry_check_interval: 15
1714     excludehostgroups: alioth, broken_mq
1715   -
1716     name: MQ connection on rapoport
1717     servicegroups: MQ
1718     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1719     runfrom: rapoport
1720     hostgroups: computers
1721     normal_check_interval:  60
1722     retry_check_interval: 15
1723     excludehostgroups: alioth, broken_mq
1724   ###
1725   -
1726     name: local resolver
1727     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1728     hostgroups: computers
1729     normal_check_interval: 60
1730   -
1731     name: process - unbound
1732     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1733     hostgroups: computers
1734     excludehostgroups: alioth
1735   ###
1736   -
1737     name: process - uptimed
1738     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1739     hostgroups: computers
1740   ###
1741   -
1742     name: process - udevd
1743     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1744     hostgroups: computers
1745     excludehostgroups: freebsd
1746   -
1747     name: unexpected process - udev
1748     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1749     hostgroups: freebsd
1750   ###
1751   -
1752     name: process - acpid
1753     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1754     hostgroups: acpid-hosts
1755   -
1756     name: unexpected process - acpid
1757     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1758     hostgroups: computers
1759     excludehostgroups: acpid-hosts, kvmdomains
1760   ###
1761   -
1762     name: process - xinetd
1763     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1764     hostgroups: xinetd-hosts
1765   -
1766     name: unwanted process - xinetd
1767     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1768     hostgroups: computers
1769     excludehostgroups: xinetd-hosts
1770   ###
1771   -
1772     name: process - stunnel4 - puppet-ekeyd
1773     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1774     hostgroups: squeeze, wheezy
1775     excludehostgroups: freebsd, alioth
1776   # }}}
1777   # {{{ anti-services
1778   -
1779     name: ganeti - job watcher paused
1780     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1781     hostgroups: computers
1782   -
1783     name: unwanted process - irqbalance
1784     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1785     hostgroups: computers
1786   -
1787     name: unwanted process - openvpn
1788     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1789     hostgroups: computers
1790     normal_check_interval: 120
1791   -
1792     name: unwanted process - gkrellmd
1793     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1794     hostgroups: computers
1795   -
1796     name: unwanted process - rpc.statd
1797     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1798     hostgroups: computers
1799     excludehostgroups: nfs-client, nfs-server
1800   -
1801     name: unwanted process - inetd
1802     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1803     hostgroups: computers
1804     excludehosts: abel
1805   -
1806     name: unwanted process - snmpd
1807     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1808     hostgroups: computers
1809   # }}}
1810   # {{{ ssl certs
1811   -
1812     name: "host SSL cert"
1813     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1814     hostgroups: computers
1815   # }}}
1816   # {{{ HW health/raid
1817   -
1818     name: process - mdadm monitor
1819     servicegroups: raid
1820     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
1821     hostgroups: sw-raid
1822     excludehostgroups: wheezy
1823   -
1824     # wheezy:
1825     name: process - mdadm monitor
1826     servicegroups: raid
1827     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1828     hostgroups: sw-raid
1829     excludehostgroups: squeeze
1830   -
1831     name: RAID - sw raid
1832     servicegroups: raid
1833     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1834     hostgroups: sw-raid
1835   ###
1836   -
1837     name: HW - hpacucli status
1838     servicegroups: raid
1839     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1840     normal_check_interval: 120
1841     hostgroups: dl385, dl380, dl360, bl460, dl180
1842     excludehosts: schein, rietz
1843   -
1844     name: HW - hpacucli status
1845     servicegroups: raid
1846     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1847     normal_check_interval: 120
1848     hostgroups: bm-bl
1849   -
1850     name: HW - hpacucli status
1851     servicegroups: raid
1852     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1853     normal_check_interval: 120
1854     hosts: schein, rietz
1855   -
1856     name: HW - hpacucli enclosure status
1857     servicegroups: raid
1858     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1859     normal_check_interval: 120
1860     hosts: franck
1861   -
1862     name: HW - hpacucli status
1863     servicegroups: raid
1864     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1865     normal_check_interval: 120
1866     hostgroups: dl585
1867   ###
1868 #  -
1869 #    name: HW - edac status
1870 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1871 #    normal_check_interval: 120
1872     #hostgroups: computers
1873     #excludehosts: villa, lobos, senfl, schein
1874   -
1875     name: HW - hpasmcli status
1876     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1877     normal_check_interval: 120
1878     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1879     excludehosts: villa, lobos, senfl, schein, storace
1880   -
1881     name: HW - hpasmcli status
1882     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1883     normal_check_interval: 120
1884     hosts: villa
1885   -
1886     name: HW - hpasmcli status
1887     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1888     normal_check_interval: 120
1889     hosts: lobos
1890   -
1891     name: HW - hpasmcli status
1892     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1893     normal_check_interval: 120
1894     hosts: senfl, schein
1895   -
1896     name: HW - hpasmcli status
1897     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1898     normal_check_interval: 120
1899     hosts: storace
1900   ###
1901   -
1902     name: RAID - 3ware
1903     servicegroups: raid
1904     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1905     hosts: powell
1906   ###
1907   -
1908     name: RAID - aacraid
1909     servicegroups: raid
1910     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1911     hostgroups: aacraid
1912   ###
1913   -
1914     name: RAID - megaraid
1915     servicegroups: raid
1916     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1917     hostgroups: megaraid
1918   ###
1919   -
1920     name: RAID - DRBD
1921     servicegroups: raid
1922     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1923     hostgroups: drbd-hosts
1924   # }}}
1925   # }}}
1926   # {{{ ### mail stuff
1927   # {{{ exim processes and mailq
1928   -
1929     name: process - exim
1930     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1931     hostgroups: computers
1932     excludehostgroups: postfix-hosts, mail-relay
1933     excludehosts: master, busoni, quantz, buxtehude
1934   -
1935     name: process - exim
1936     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1937     hostgroups: mail-relay
1938   -
1939     name: process - exim - total
1940     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
1941     hostgroups: computers
1942     excludehostgroups: postfix-hosts
1943     excludehosts: master, busoni, quantz, buxtehude
1944   -
1945     name: process - exim
1946     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
1947     hosts: master, busoni, quantz, buxtehude
1948   -
1949     name: mail queue
1950     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
1951     hostgroups: heavy-exim
1952   # }}}
1953   # {{{ clamav
1954   -
1955     name: process - clamav - clamd
1956     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
1957     hostgroups: heavy-exim, heavy-postfix
1958   -
1959     name: service - clamav
1960     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
1961     hostgroups: heavy-exim, heavy-postfix
1962     depends: process - clamav - clamd
1963   -
1964     name: process - clamav - freshclam
1965     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
1966     hostgroups: heavy-exim, heavy-postfix
1967   -
1968     name: unwanted process - clamav
1969     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
1970     hostgroups: computers
1971     excludehostgroups: heavy-exim, heavy-postfix
1972   -
1973     name: unwanted process - freshclam
1974     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
1975     hostgroups: computers
1976     excludehostgroups: heavy-exim, heavy-postfix
1977   # }}}
1978   # {{{ anti-spam
1979   -
1980     name: process - spamd - master
1981     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
1982     hostgroups: spamd
1983     excludehosts: picconi
1984   -
1985     name: process - spamd - master
1986     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
1987     hosts: picconi
1988   -
1989     name: process - spamd - master
1990     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
1991     hosts: bendel
1992   -
1993     name: process - spamd - child
1994     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
1995     hosts: bendel
1996     hostgroups: spamd
1997     depends: process - spamd - master
1998   #
1999   -
2000     name: process - spamd - master
2001     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2002     hosts: buxtehude
2003   -
2004     name: process - spamd - child
2005     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2006     hosts: buxtehude
2007   #
2008   -
2009     name: unwanted process - spamd
2010     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2011     hostgroups: computers
2012     excludehostgroups: spamd
2013     excludehosts: bendel, busoni, buxtehude
2014
2015   -
2016     name: unwanted process - greylistd
2017     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2018     hostgroups: computers
2019
2020   ###
2021   -
2022     name: process - postgrey
2023     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2024     hostgroups: heavy-exim
2025   -
2026     name: process - postgrey
2027     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2028     hostgroups: heavy-postfix
2029   #
2030   -
2031     name: unwanted process - postgrey
2032     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2033     hostgroups: computers
2034     excludehostgroups: heavy-postfix, heavy-exim
2035   ###
2036   -
2037     name: process - amavis - master
2038     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2039     hostgroups: amavis-hosts
2040   -
2041     name: process - amavis - all
2042     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2043     hostgroups: amavis-hosts
2044     depends: process - amavis - master
2045   #
2046   -
2047     name: unwanted process - amavis
2048     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2049     hostgroups: computers
2050     excludehostgroups: amavis-hosts
2051   ###
2052   -
2053     name: process - weightd - master
2054     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2055     hostgroups: heavy-postfix, alioth
2056   -
2057     name: process - weightd - cache
2058     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2059     hostgroups: heavy-postfix, alioth
2060     depends: process - weightd - master
2061   -
2062     name: process - weightd - child
2063     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2064     hostgroups: heavy-postfix, alioth
2065     depends: process - weightd - master
2066   ###
2067   -
2068     name: unwanted process - policyd-weight
2069     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2070     hostgroups: computers
2071     excludehostgroups: heavy-postfix, alioth
2072   # }}}
2073   # {{{ postfix
2074   ###
2075   -
2076     name: process - postfix - master
2077     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2078     hostgroups: postfix-hosts
2079   -
2080     name: process - postfix - qmgr
2081     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2082     hostgroups: postfix-hosts
2083     depends: process - postfix - master
2084   -
2085     name: process - postfix - pickup
2086     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2087     hostgroups: postfix-hosts
2088     depends: process - postfix - master
2089   -
2090     name: process - postfix - anvil
2091     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2092     hostgroups: postfix-hosts
2093     depends: process - postfix - master
2094
2095   -
2096     name: process - postfix - trivial-rewrite
2097     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2098     hostgroups: postfix-hosts
2099     depends: process - postfix - master
2100   -
2101     name: process - postfix - proxymap
2102     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2103     hostgroups: postfix-hosts
2104     depends: process - postfix - master
2105   -
2106     name: process - postfix - cleanup
2107     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2108     hostgroups: postfix-hosts
2109     depends: process - postfix - master
2110   -
2111     name: process - postfix - local
2112     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2113     hostgroups: postfix-hosts
2114     depends: process - postfix - master
2115
2116   -
2117     name: network service local - smtps cert
2118     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2119     hostgroups: postfix-hosts
2120     depends: process - postfix - master
2121     normal_check_interval: 120
2122   # }}}
2123   # {{{ mail - network service
2124   -
2125     name: network service - smtp
2126     check: dsa_check_smtp
2127     hostgroups: computers
2128     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2129     depends: process - exim
2130
2131   -
2132     name: network service - smtp
2133     check: dsa_check_smtp
2134     hostgroups: postfix-hosts
2135     depends: process - postfix - master
2136   -
2137     name: network service - submission
2138     check: dsa_check_smtp_port!587
2139     hostgroups: incomingmailrelayed
2140     depends: process - exim
2141   -
2142     name: network service - smtp 2025
2143     check: dsa_check_smtp_port!2025
2144     hostgroups: incomingmailrelayed2025
2145     depends: process - exim
2146   # }}}
2147   # }}}
2148   # {{{ ### host specific services
2149   # {{{ HTTP
2150   -
2151     name: process - apache2 - master
2152     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2153     hostgroups: apache2-hosts
2154   -
2155     name: process - apache2 - worker
2156     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2157     hostgroups: apache2-hosts
2158     depends: process - apache2 - master
2159   -
2160     name: unwanted process - apache2
2161     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2162     hostgroups: computers
2163     excludehostgroups: apache2-hosts
2164
2165   -
2166     name: network service - http
2167     check: check_http
2168     hostgroups: apache2-hosts
2169     excludehosts: klecker
2170     depends: process - apache2 - master
2171   -
2172     name: network service - http
2173     check: check_http
2174     depends: klecker:process - apache2 - master
2175     hosts: klecker-ftp
2176
2177   # keyserver on kaufmann
2178   -
2179     name: network service - http keyserver
2180     check: dsa_check_http_port!11371
2181     hosts: kaufmann
2182     depends: process - apache2 - master
2183
2184   # https on various hosts
2185   -
2186     name: network service - https
2187     check: check_https
2188     hostgroups: apache-https
2189     excludehosts: handel,menotti
2190     excludehostgroups: broken_https_default_vhost
2191     depends: "process - apache2 - master"
2192     normal_check_interval: 120
2193   -
2194     name: network service - https
2195     check: dsa_check_https_want_auth
2196     hosts: handel,menotti
2197     depends: "process - apache2 - master"
2198     normal_check_interval: 120
2199   -
2200     name: network service - https
2201     check: dsa_check_https_any_status
2202     hostgroups: broken_https_default_vhost
2203     depends: "process - apache2 - master"
2204     normal_check_interval: 120
2205   -
2206     name: network service - https cert
2207     check: dsa_check_cert!443
2208     hostgroups: apache-https
2209     depends: network service - https
2210     normal_check_interval: 60
2211   -
2212     name: unwanted network service - https
2213     check: dsa_check_port_closed!443
2214     hostgroups: apache2-hosts
2215     excludehostgroups: apache-https
2216     # ravel does ssh on port 443
2217     excludehosts: ravel
2218     normal_check_interval: 60
2219   # }}}
2220   # {{{ FTP
2221   -
2222     name: network service - ftp
2223     check: check_ftp
2224     hostgroups: uploadqueue, security_mirror
2225     excludehosts: klecker
2226   -
2227     name: network service - ftp
2228     check: check_ftp
2229     hosts: klecker-ftp
2230     depends: klecker:process - xinetd
2231   # }}}
2232   # {{{ postgres
2233   -
2234     name: unwanted process - postgresql
2235     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2236     hostgroups: computers
2237     excludehostgroups: postgres91-hosts
2238   -
2239     name: unwanted process - postgresql 9.0
2240     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2241     hostgroups: computers
2242   -
2243     name: process - postgresql91 - master
2244     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2245     hostgroups: postgres91-hosts
2246   -
2247     name: postgresql backups
2248     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2249     hosts: backuphost
2250   # }}}
2251   # {{{ power
2252 #  -
2253 #    name: process - UPS - nut usbhid-ups - ups1
2254 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2255 #    hosts: franck
2256 #  -
2257 #    name: process - UPS - nut upsd
2258 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2259 #    hosts: franck
2260 #  -
2261 #    name: process - UPS - nut upsmon master
2262 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2263 #    hosts: franck
2264 #  -
2265 #    name: process - UPS - nut upsmon worker
2266 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2267 #    hosts: franck
2268 #    depends: process - UPS - nut upsmon master
2269 #  -
2270 #    name: UPS - on line power
2271 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2272 #    hosts: franck
2273 #    depends: process - UPS - nut upsd
2274   # }}}
2275   # {{{ buildd
2276   -
2277     name: process - buildd
2278     servicegroups: buildd
2279     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2280     hosts: fano, finzi, fils, fayrfax
2281     contact_groups: buildd
2282   -
2283     name: process - buildd
2284     servicegroups: buildd
2285     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2286     hostgroups: buildd
2287     excludehosts: fano, finzi, fils, fayrfax
2288     contact_groups: buildd
2289   -
2290     name: processes - zombie schroot
2291     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2292     hostgroups: buildd
2293     contact_groups: +buildd
2294     normal_check_interval: 5
2295     max_check_attempts: 24
2296     retry_check_interval: 5
2297   -
2298     name: processes - lvcreate
2299     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2300     hostgroups: buildd
2301     contact_groups: +buildd
2302   # }}}
2303   # {{{ NFS Stuff
2304   -
2305     name: process - statd
2306     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2307     hostgroups: nfs-client, nfs-server
2308   -
2309     name: process - nfsd
2310     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2311     hostgroups: nfs-server
2312   -
2313     name: process - lockd
2314     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2315     hostgroups: nfs-server
2316   -
2317     name: process - mountd
2318     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2319     hostgroups: nfs-server
2320   #
2321   -
2322     name: process - automount
2323     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2324     hostgroups: autofs
2325   -
2326     name: unwanted process - automount
2327     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2328     hostgroups: computers
2329     excludehostgroups: autofs
2330   # }}}
2331   # {{{ mirroring
2332   -
2333     name: mirror sync - bugs
2334     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2335     hosts: global
2336   -
2337     name: mirror sync - security
2338     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2339     hosts: global
2340   -
2341     name: mirror sync - packages
2342     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2343     hosts: global
2344     normal_check_interval: 15
2345     max_check_attempts: 5
2346     retry_check_interval: 5
2347   -
2348     name: mirror sync - snapshot
2349     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2350     hosts: global
2351     normal_check_interval: 15
2352     max_check_attempts: 5
2353     retry_check_interval: 5
2354   # }}}
2355   # {{{ DNS
2356   -
2357     name: process - named
2358     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2359     hostgroups: bind9-hosts
2360   -
2361     name: network service - dns
2362     check: check_dns
2363     hostgroups: bind9-hosts
2364     depends: process - named
2365   -
2366     name: unwanted process - named
2367     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2368     hostgroups: computers
2369     excludehostgroups: bind9-hosts
2370   ###
2371   -
2372     name: DNS SOA sync - debian.org
2373     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2374     hosts: global
2375   -
2376     name: DNS SOA sync - debian.net
2377     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2378     hosts: global
2379   -
2380     name: DNS SOA sync - debian.com
2381     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2382     hosts: global
2383   -
2384     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2385     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2386     hosts: global
2387   -
2388     name: DNS SOA sync - alioth.debian.org
2389     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2390     hosts: global
2391   -
2392     name: DNS - delegation and signature expiry
2393     hosts: global
2394     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2395     runfrom: denis
2396   -
2397     name: DNS - security delegations
2398     hosts: global
2399     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2400     runfrom: denis
2401   -
2402     name: DNS - key coverage
2403     hosts: global
2404     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2405     runfrom: denis
2406   -
2407     name: DNS - DS expiry
2408     hosts: global
2409     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2410     runfrom: denis
2411   # }}}
2412   # {{{ storage
2413   -
2414     name: ping alive check
2415     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2416     runfrom: dijkstra
2417     hosts: giustini
2418     normal_check_interval: 5
2419     max_check_attempts: 4
2420     retry_check_interval: 1
2421   -
2422     name: Overall Unit Status
2423     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2424     runfrom: dijkstra
2425     hosts: giustini
2426   -
2427     name: event log
2428     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2429     runfrom: dijkstra
2430     hosts: giustini
2431   # }}}
2432   # {{{ porterbox
2433   -
2434     name: current chroots
2435     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2436     hostgroups: porterbox
2437     normal_check_interval:  60
2438     retry_check_interval: 15
2439   # }}}
2440   # {{{ openstack
2441   -
2442     name: process - openstack - memcached
2443     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2444     hostgroups: openstack-controller
2445   -
2446     name: process - openstack - glance-registry
2447     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2448     hostgroups: openstack-controller
2449   -
2450     name: process - openstack - nova-api
2451     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2452     hostgroups: openstack-controller
2453   -
2454     name: process - openstack - nova-compute
2455     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2456     hostgroups: openstack-compute
2457   -
2458     name: process - openstack - nova-cert
2459     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2460     hostgroups: openstack-controller
2461   -
2462     name: process - openstack - nova-conductor
2463     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2464     hostgroups: openstack-controller
2465   -
2466     name: process - openstack - nova-consoleauth
2467     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2468     hostgroups: openstack-controller
2469   -
2470     name: process - openstack - nova-scheduler
2471     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2472     hostgroups: openstack-controller
2473   -
2474     name: process - openstack - nova-spicehtml5proxy
2475     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2476     hostgroups: openstack-controller
2477   -
2478     name: process - openstack - neutron-server
2479     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2480     hostgroups: openstack-controller
2481   # }}}
2482   # {{{ misc
2483   -
2484     name: process - rngd
2485     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2486     hostgroups: dl385
2487   ###
2488   -
2489     name: process - slapd
2490     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2491     hosts: draghi
2492   -
2493     name: network service - ldaps cert
2494     check: dsa_check_cert!636
2495     depends: process - slapd
2496     normal_check_interval: 60
2497     hosts: draghi
2498   ###
2499   -
2500     name: network service - finger
2501     check: check_tcp!79
2502     hosts: draghi
2503     depends: process - xinetd
2504   ###
2505   -
2506     name: network service - rsync
2507     check: check_tcp!873
2508     hostgroups: rsyncd-hosts
2509     depends: process - xinetd
2510     excludehosts: rietz
2511   -
2512     name: network service - rsync
2513     check: check_tcp!873
2514     hosts: rietz2
2515     depends: rietz:process - xinetd
2516   -
2517     name: network service - rsync
2518     check: check_tcp!873
2519     hosts: milanollo2
2520     depends: milanollo:process - xinetd
2521   ###
2522   -
2523     name: process - icinga
2524     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2525     hosts: tchaikovsky
2526   ###
2527   -
2528     name: process - jetty - master
2529     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2530     hostgroups: jetty-hosts
2531   -
2532     name: process - jetty - worker
2533     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2534     hostgroups: jetty-hosts
2535     depends: process - jetty - master
2536   ###
2537   -
2538     name: process - debianqueued
2539     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2540     hostgroups: uploadqueue
2541   ####
2542   -
2543     name: network service - gobby
2544     check: check_tcp!6523
2545     hosts: gombert
2546     contact_groups: gobby
2547   ####
2548   -
2549     name: puppetmaster cert
2550     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2551     hosts: handel
2552     normal_check_interval: 60
2553     max_check_attempts: 2
2554     retry_check_interval: 5
2555   # }}}
2556 # }}}
2557
2558 # vim: set ts=2 sw=2 et ai si fdm=marker: