move wolkenstein to man-da
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-aql:
37     address: 141.170.2.17
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-bytemark:
41     address: 89.16.160.116
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-c3sl:
45     address: 200.17.202.254
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-cecsit:
49     address: 150.203.164.38
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-arm:
53     address: 213.104.121.213
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-brown:
57     address: 138.16.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-carnet:
61     address: 161.53.160.1
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-conova:
65     address: 217.196.149.238
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-csail:
69     address: 128.31.0.1
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72   gw-dgi:
73     address: 93.94.132.102
74     parents: gw-ubcece
75     hostgroups: layer3-infrastructure
76     contacts: bzed
77   gw-freenet:
78     address: 62.104.23.249
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-linaro:
102     address: 64.28.108.36
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-man-da:
106     address: 82.195.75.126
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-marist:
110     address: 148.100.88.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-osuosl:
114     address: 140.211.166.1
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-rapidswitch:
118     address: 193.201.200.129
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121   gw-sanger:
122     address: 193.62.202.20
123     parents: gw-ubcece
124     hostgroups: layer3-infrastructure
125     contacts: tjrc1, dave
126   gw-scanplus-lobos:
127     address: 212.211.132.249
128     parents: gw-ubcece
129     hostgroups: layer3-infrastructure
130   gw-scanplus-villa:
131     address: 212.211.132.1
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-sil:
135     address: 86.59.118.145
136     parents: gw-ubcece
137     hostgroups: layer3-infrastructure
138   gw-ubcece:
139     address: 206.12.19.254
140     hostgroups: layer3-infrastructure
141     contacts: lfilipoz
142   gw-ugent:
143     address: 193.191.17.50
144     parents: gw-ubcece
145     hostgroups: layer3-infrastructure
146   gw-umn:
147     address: 128.101.240.222
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-unicamp:
151     address: 143.106.167.234
152     parents: gw-ubcece
153     hostgroups: layer3-infrastructure
154   gw-utwente:
155     address: 130.89.149.1
156     parents: gw-ubcece
157     hostgroups: layer3-infrastructure
158   gw-ynic:
159     # really janet, because ynic is stupid about firewalling
160     #address: 146.97.42.26
161     address: 146.97.41.66
162     parents: gw-ubcece
163     hostgroups: layer3-infrastructure
164   gw-zivit:
165     address: 80.245.144.3
166     parents: gw-ubcece
167     hostgroups: layer3-infrastructure
168   # }}}
169   # {{{ servers
170   # {{{ gw-1und1
171   powell:
172     address: 87.106.64.223
173     parents: gw-1und1
174     hostgroups: computers, service, acpid-hosts, wheezy
175   pkgmirror-1and1:
176     address: 213.165.95.4
177     parents: powell
178     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
179   babin:
180     address: 213.165.95.6
181     parents: powell
182     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
183   piu-slave-1und1-01:
184     address: 213.165.95.7
185     parents: powell
186     hostgroups: computers, service, kvmdomains, wheezy
187     contacts: holger
188   # }}}
189   # {{{ gw-1und1-sec
190   schumann:
191     address: 212.227.126.54
192     parents: gw-1und1-sec
193     hostgroups: computers, acpid-hosts, service, wheezy
194   chopin:
195     address: 195.20.242.124
196     parents: schumann
197     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
198   geo3:
199     address: 195.20.242.125
200     parents: schumann
201     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
202   soler:
203     address: 195.20.242.126
204     parents: schumann
205     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
206   wieck:
207     address: 195.20.242.89
208     parents: gw-1und1-sec
209     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
210   # }}}
211   # {{{ gw-accumu
212   pettersson:
213     address: 130.239.18.123
214     parents: gw-accumu
215     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
216   praetorius:
217     address: 130.239.18.121
218     parents: gw-accumu
219     hostgroups: computers, buildd, hassrvfs, wheezy
220   # }}}
221   # {{{ gw-aql
222   mips-aql-01:
223     address: 141.170.6.149
224     parents: gw-aql
225     hostgroups: computers, buildd, wheezy
226   mips-aql-02:
227     address: 141.170.6.150
228     parents: gw-aql
229     hostgroups: computers, buildd, wheezy
230   # }}}
231   # {{{ gw-arm
232   abel:
233     address: 217.140.96.56
234     parents: gw-arm
235     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
236   arnold:
237     address: 217.140.96.57
238     parents: gw-arm
239     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
240   arm-arm-01:
241     address: 217.140.96.58
242     parents: gw-arm
243     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
244   arm-arm-02:
245     address: 217.140.96.59
246     parents: gw-arm
247     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
248   harris:
249     address: 217.140.96.66
250     parents: gw-arm
251     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
252   hartmann:
253     address: 217.140.96.67
254     parents: gw-arm
255     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
256   hoiby:
257     address: 217.140.96.71
258     parents: gw-arm
259     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
260   ia64-arm-01:
261     address: 217.140.96.61
262     parents: gw-arm
263     hostgroups: computers, hasbootfs, hassrvfs, wheezy, buildd, broken_mq, sw-raid, acpid-hosts
264   # }}}
265   # {{{ gw-brown
266   franck:
267     address: 138.16.160.12
268     parents: gw-brown
269     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
270   # }}}
271   # {{{ gw-bytemark
272   bm-bl1:
273     address: 5.153.231.241
274     parents: gw-bytemark
275     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
276   bm-bl2:
277     address: 5.153.231.242
278     parents: gw-bytemark
279     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
280   bm-bl3:
281     address: 5.153.231.243
282     parents: gw-bytemark
283     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
284   bm-bl4:
285     address: 5.153.231.244
286     parents: gw-bytemark
287     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
288   bm-bl5:
289     address: 5.153.231.245
290     parents: gw-bytemark
291     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
292   bm-bl6:
293     address: 5.153.231.246
294     parents: gw-bytemark
295     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
296   bm-bl7:
297     address: 5.153.231.247
298     parents: gw-bytemark
299     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
300   bm-bl8:
301     address: 5.153.231.248
302     parents: gw-bytemark
303     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
304   bm-bl9:
305     address: 5.153.231.249
306     parents: gw-bytemark
307     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
308   bm-bl10:
309     address: 5.153.231.250
310     parents: gw-bytemark
311     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
312   bm-bl11:
313     address: 5.153.231.251
314     parents: gw-bytemark
315     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
316   bm-bl12:
317     address: 5.153.231.252
318     parents: gw-bytemark
319     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
320
321   milanollo:
322     address: 5.153.231.2
323     parents: gw-bytemark
324     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
325   milanollo2:
326     address: 5.153.231.9
327     parents: milanollo
328     hostgroups: secondary-IPs
329   picconi:
330     address: 5.153.231.3
331     parents: gw-bytemark
332     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
333   senfter:
334     address: 5.153.231.4
335     parents: gw-bytemark
336     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
337   adayevskaya:
338     address: 5.153.231.5
339     parents: gw-bytemark
340     hostgroups: computers, service, kvmdomains, wheezy
341   pejacevic:
342     address: 5.153.231.6
343     parents: gw-bytemark
344     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
345     contacts: holger
346   piu-slave-bm-a:
347     address: 5.153.231.7
348     parents: gw-bytemark
349     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
350     contacts: holger
351   binet:
352     address: 5.153.231.8
353     parents: gw-bytemark
354     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
355   bmdb1:
356     address: 5.153.231.10
357     parents: gw-bytemark
358     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
359   ganeti-bytemark:
360     address: 82.195.75.111
361     parents: gw-bytemark
362     hostgroups: notacomputer
363   coccia:
364     address: 5.153.231.11
365     parents: ganeti-bytemark
366     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts, apache-https, apache2-hosts
367   philp:
368     address: 5.153.231.13
369     parents: ganeti-bytemark
370     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
371   couper:
372     address: 5.153.231.14
373     parents: ganeti-bytemark
374     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
375   rainier:
376     address: 5.153.231.16
377     parents: ganeti-bytemark
378     hostgroups: computers, kvmdomains, wheezy, no-bacula
379   rapoport:
380     address: 5.153.231.15
381     parents: ganeti-bytemark
382     hostgroups: computers, kvmdomains, wheezy, no-bacula
383   delfin:
384     address: 5.153.231.17
385     parents: ganeti-bytemark
386     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
387   wuiet:
388     address: 5.153.231.18
389     parents: ganeti-bytemark
390     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
391   dinis:
392     address: 5.153.231.19
393     parents: ganeti-bytemark
394     hostgroups: computers, general, kvmdomains, wheezy
395   donizetti:
396     address: 5.153.231.20
397     parents: ganeti-bytemark
398     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
399   moszumanska:
400     address: 5.153.231.21
401     parents: ganeti-bytemark
402     contact_groups: alioth-admins
403     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
404     no-servicegroups: true
405   dillon:
406     address: 5.153.231.22
407     parents: ganeti-bytemark
408     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
409   ticharich:
410     address: 5.153.231.23
411     parents: ganeti-bytemark
412     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
413   petrova:
414     address: 5.153.231.25
415     parents: ganeti-bytemark
416     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
417   oyens:
418     address: 5.153.231.26
419     parents: ganeti-bytemark
420     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
421   barriere:
422     address: 5.153.231.27
423     parents: ganeti-bytemark
424     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
425   quantz:
426     address: 5.153.231.28
427     parents: ganeti-bytemark
428     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
429   portman:
430     address: 5.153.231.29
431     parents: ganeti-bytemark
432     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
433   paradis:
434     address: 5.153.231.30
435     parents: ganeti-bytemark
436     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
437   x86-bm-01:
438     address: 5.153.231.32
439     parents: ganeti-bytemark
440     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
441   gideon:
442     address: 5.153.231.34
443     parents: ganeti-bytemark
444     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
445   httpredir-bm-01:
446     address: 5.153.231.35
447     parents: ganeti-bytemark
448     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
449   # }}}
450   # {{{ gw-c3sl
451   santoro:
452     address: 200.17.202.197
453     parents: gw-c3sl
454     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
455     contacts: faw
456   # }}}
457   # {{{ gw-carnet
458   lebrun:
459     address: 193.198.184.10
460     parents: gw-carnet
461     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
462   schroeder:
463     address: 193.198.184.11
464     parents: gw-carnet
465     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
466   # }}}
467   # {{{ gw-cecsit
468   gluck:
469     address: 150.203.164.38
470     parents: gw-cecsit
471     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
472   # }}}
473   # {{{ gw-conova
474   sompek:
475     address: 217.196.149.225
476     parents: gw-conova
477     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
478   stadler:
479     address: 217.196.149.226
480     parents: gw-conova
481     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
482   # }}}
483   # {{{ gw-csail
484   senfl:
485     address: 128.31.0.51
486     parents: gw-csail
487     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
488   steffani:
489     address: 128.31.0.36
490     parents: gw-csail
491     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
492
493   csail-node01:
494     address: 128.31.0.16
495     parents: gw-csail
496     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
497   csail-node02:
498     address: 128.31.0.46
499     parents: gw-csail
500     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
501   ganeti-csail:
502     address: 128.31.0.49
503     parents: gw-bytemark
504     hostgroups: notacomputer
505
506   falla:
507     address: 128.31.0.65
508     parents: ganeti-csail
509     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
510   fischer:
511     address: 128.31.0.35
512     parents: ganeti-csail
513     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
514   mirror-csail:
515     address: 128.31.0.62
516     parents: ganeti-csail
517     hostgroups: computers, service, hassrvfs, kvmdomains, wheezy, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
518   x86-csail-01:
519     address: 128.31.0.50
520     parents: ganeti-csail
521     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
522   # }}}
523   # {{{ gw-dgi
524   storace:
525     address: 93.94.130.161
526     parents: gw-dgi
527     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
528   # }}}
529   # {{{ gw-gatech
530   sechter:
531     address: 128.61.240.73
532     parents: gw-gatech
533     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
534   # }}}
535   # {{{ gw-grnet
536   ganeti-grnet:
537     address: 194.177.211.194
538     parents: gw-grnet
539     hostgroups: notacomputer
540   grnet-node01:
541     address: 194.177.211.195
542     parents: gw-grnet
543     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
544   grnet-node02:
545     address: 194.177.211.196
546     parents: gw-grnet
547     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
548   rautavaara:
549     address: 194.177.211.199
550     parents: gw-grnet
551     hostgroups: computers, acpid-hosts, megaraid, service, wheezy
552   loghost-grnet-01:
553     address: 194.177.211.200
554     parents: gw-grnet
555     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
556   # }}}
557   # {{{ gw-isc
558   schein:
559     address: 149.20.20.6
560     parents: gw-isc
561     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
562   # }}}
563   # {{{ gw-leaseweb
564   lw01:
565     address: 185.17.185.177
566     parents: gw-leaseweb
567     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
568   lw02:
569     address: 185.17.185.178
570     parents: gw-leaseweb
571     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
572   lw03:
573     address: 185.17.185.179
574     parents: gw-leaseweb
575     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
576   lw04:
577     address: 185.17.185.180
578     parents: gw-leaseweb
579     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
580   lw07:
581     address: 185.17.185.187
582     parents: gw-leaseweb
583     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
584   lw08:
585     address: 185.17.185.189
586     parents: gw-leaseweb
587     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
588   #, apache2-hosts
589   # }}}
590   # {{{ gw-linaro
591   arm-linaro-01:
592     address: 64.28.108.83
593     parents: gw-linaro
594     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
595   arm-linaro-03:
596     address: 64.28.108.85
597     parents: gw-linaro
598     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
599   asachi:
600     address: 64.28.108.84
601     parents: gw-linaro
602     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
603   # }}}
604   # {{{ gw-karlsruhe
605   zemlinsky:
606     address: 129.143.160.6
607     parents: gw-karlsruhe
608     hostgroups: computers, buildd, wheezy
609     contacts: pkern
610   # }}}
611   # {{{ gw-man-da
612   ball:
613     address: 82.195.75.70
614     parents: gw-man-da
615     hostgroups: computers, buildd, hasbootfs, wheezy
616   # bartok TODO
617   czerny:
618     address: 82.195.75.109
619     parents: gw-man-da
620     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
621   clementi:
622     address: 82.195.75.103
623     parents: gw-man-da
624     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
625   bendel:
626     address: 82.195.75.100
627     parents: ganeti3
628     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
629   master:
630     address: 82.195.75.110
631     parents: ganeti3
632     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
633   mipsel-manda-01:
634     address: 82.195.75.72
635     parents: gw-man-da
636     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
637   mipsel-manda-02:
638     address: 82.195.75.74
639     parents: gw-man-da
640     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
641   fils:
642     address: 82.195.75.89
643     parents: ganeti3
644     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
645     contacts: christoph
646   fayrfax:
647     address: 82.195.75.82
648     parents: ganeti3
649     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
650     contacts: christoph
651   vento:
652     address: 82.195.75.98
653     parents: ganeti3
654     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
655   lully:
656     address: 82.195.75.99
657     parents: ganeti3
658     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
659   rem:
660     address: 82.195.75.68
661     parents: gw-man-da
662     hostgroups: computers, hasbootfs, hassrvfs, wheezy, no-bacula
663   draghi:
664     address: 82.195.75.106
665     parents: ganeti3
666     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
667   geo1:
668     address: 82.195.75.105
669     parents: ganeti3
670     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
671   handel:
672     address: 82.195.75.104
673     parents: ganeti3
674     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
675   kaufmann:
676     address: 82.195.75.107
677     parents: ganeti3
678     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
679   stockhausen:
680     address: 82.195.75.108
681     parents: ganeti3
682     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
683   ganeti3:
684     address: 82.195.75.111
685     parents: gw-man-da
686     hostgroups: notacomputer
687   wilder:
688     address: 82.195.75.112
689     parents: ganeti3
690     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
691   mailly:
692     address: 82.195.75.114
693     parents: ganeti3
694     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
695   denis:
696     address: 82.195.75.91
697     parents: ganeti3
698     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
699   vogler:
700     address: 82.195.75.92
701     parents: ganeti3
702     hostgroups: computers, service, kvmdomains, wheezy
703   wolkenstein:
704     address: 82.195.75.65
705     parents: ganeti3
706     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
707   mipsel-manda-01:
708     address: 82.195.75.72
709     parents: gw-man-da
710     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
711   mipsel-manda-02:
712     address: 82.195.75.74
713     parents: gw-man-da
714     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
715   # }}}
716   # {{{ gw-marist
717   zani:
718     address: 148.100.88.22
719     parents: gw-marist
720     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
721   # }}}
722   # {{{ gw-osuosl
723   busoni:
724     address: 140.211.15.34
725     parents: gw-osuosl
726     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
727   byrd:
728     address: 140.211.166.20
729     parents: gw-osuosl
730     hostgroups: computers, service, dl380, acpid-hosts, wheezy
731   buxtehude:
732     address: 140.211.166.26
733     parents: byrd
734     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
735   # malo TODO
736   mayer:
737     address: 140.211.166.78
738     parents: gw-osuosl
739     hostgroups: computers, buildd, hasbootfs, wheezy
740 #  mayr:
741 #    address: 140.211.166.58
742 #    parents: gw-osuosl
743 #    hostgroups: computers, buildd, hasbootfs
744   merulo:
745     address: 140.211.166.46
746     parents: gw-osuosl
747     hostgroups: computers, porterbox, hasusrfs, wheezy
748   parry:
749     address: 140.211.15.153
750     parents: gw-osuosl
751     hostgroups: computers, wheezy, buildd, hassrvfs
752   partch:
753     address: 140.211.15.152
754     parents: gw-osuosl
755     hostgroups: computers, wheezy, hassrvfs, porterbox
756   rietz:
757     address: 140.211.166.43
758     parents: gw-osuosl
759     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
760     #, bosserver
761   rietz2:
762     address: 140.211.166.44
763     parents: rietz
764     hostgroups: secondary-IPs
765   # zee TODO
766   # }}}
767   # {{{ gs-rapidswitch
768   caballero:
769     address: 193.201.200.200
770     parents: gw-rapidswitch
771     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
772   # }}}
773   # {{{ gw-sanger
774   sibelius:
775     address: 193.62.202.28
776     parents: gw-sanger
777     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, wheezy, rsyncd-hosts, xinetd-hosts, hasvarlogfs
778     contacts: tjrc1, dave
779   smetana:
780     address: 193.62.202.29
781     parents: gw-sanger
782     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
783     contacts: tjrc1, dave
784   # }}}
785   # {{{ gw-scanplus
786   lobos:
787     address: 212.211.132.250
788     parents: gw-scanplus-lobos
789     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
790   villa:
791     address: 212.211.132.32
792     parents: gw-scanplus-villa
793     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
794   # }}}
795   # {{{ gw-sil
796   eder:
797     address: 86.59.118.151
798     parents: gw-sil
799     hostgroups: computers, porterbox, wheezy, hassrvfs
800   eysler:
801     address: 86.59.118.152
802     parents: gw-sil
803     hostgroups: computers, buildd, wheezy
804   eberlin:
805     address: 86.59.118.155
806     parents: gw-sil
807     hostgroups: computers, buildd, wheezy
808   # }}}
809   # {{{ gw-ubcece
810   sw-ubcece:
811     hostgroups: layer2-infrastructure
812     contacts: lfilipoz
813     pingable: false
814     check_command: dsa_check_always_ok
815   sw-ubcece-mcld:
816     hostgroups: layer2-infrastructure
817     parents: sw-ubcece
818     contacts: lfilipoz
819     pingable: false
820     check_command: dsa_check_always_ok
821   sw-ubcece-kais:
822     hostgroups: layer2-infrastructure
823     parents: sw-ubcece
824     contacts: lfilipoz
825     pingable: false
826     check_command: dsa_check_always_ok
827   spontini:
828     address: 206.12.19.14
829     parents: sw-ubcece-mcld
830     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
831     contacts: lfilipoz
832   ravel:
833     address: 206.12.19.5
834     parents: sw-ubcece-kais
835     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
836   dijkstra:
837     address: 206.12.19.218
838     parents: sw-ubcece-kais
839     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
840   pasquini:
841     address: 206.12.19.217
842     parents: sw-ubcece-kais
843     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
844   luchesi:
845     address: 206.12.19.214
846     parents: sw-ubcece-kais
847     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
848   tristano:
849     address: 206.12.19.213
850     parents: sw-ubcece-kais
851     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
852   boito:
853     address: 206.12.19.216
854     parents: sw-ubcece-kais
855     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
856   bertali:
857     address: 206.12.19.212
858     parents: sw-ubcece-kais
859     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
860   ganeti2:
861     address: 206.12.19.23
862     parents: sw-ubcece-kais
863     hostgroups: notacomputer
864   tchaikovsky:
865     address: 206.12.19.118
866     parents: ganeti2
867     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
868   brahms:
869     address: 206.12.19.115
870     parents: ganeti2
871     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
872   geo2:
873     address: 206.12.19.113
874     parents: ganeti2
875     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
876   # MSA 2000 (2012i)
877   giustini:
878     address: 192.168.2.6
879     parents: dijkstra
880     hostgroups: notacomputer
881     # unless we implement runfrom for host alive checks
882     pingable: false
883     check_command: dsa_check_always_ok
884   fano:
885     address: 206.12.19.110
886     parents: ganeti2
887     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
888     contacts: christoph
889   finzi:
890     address: 206.12.19.111
891     parents: ganeti2
892     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
893     contacts: christoph
894   gabrielli:
895     address: 206.12.19.17
896     parents: sw-ubcece-kais
897     hostgroups: computers, porterbox, wheezy
898   corelli:
899     address: 206.12.19.16
900     parents: sw-ubcece-kais
901     hostgroups: computers, buildd, wheezy
902   lucatelli:
903     address: 206.12.19.15
904     parents: sw-ubcece-kais
905     hostgroups: computers, buildd, wheezy
906   rossini:
907     address: 206.12.19.19
908     parents: sw-ubcece-kais
909     hostgroups: computers, dl585, acpid-hosts, service, wheezy
910   salieri:
911     address: 206.12.19.20
912     parents: sw-ubcece-kais
913     hostgroups: computers, dl585, acpid-hosts, service, wheezy
914   traetta:
915     address: 206.12.19.21
916     parents: sw-ubcece-kais
917     hostgroups: computers, dl585, acpid-hosts, service, wheezy
918 #  locke:
919 #    address: 206.12.19.120
920 #    parents: sw-ubcece-kais
921 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
922   lotti:
923     address: 206.12.19.121
924     parents: sw-ubcece-kais
925     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
926   nono:
927     address: 206.12.19.123
928     parents: traetta
929     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
930   reger:
931     address: 206.12.19.124
932     parents: ganeti2
933     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
934   danzi:
935     address: 206.12.19.125
936     parents: ganeti2
937     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
938   glinka:
939     address: 206.12.19.126
940     parents: traetta
941     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
942   tye:
943     address: 206.12.19.129
944     parents: ganeti2
945     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
946   elgar:
947     address: 206.12.19.130
948     parents: salieri
949     hostgroups: computers, service, kvmdomains, wheezy
950   gombert:
951     address: 206.12.19.132
952     parents: ganeti2
953     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
954   jenkins:
955     address: 206.12.19.133
956     parents: salieri
957     hostgroups: computers, service, kvmdomains, wheezy
958   blavet:
959     address: 206.12.19.134
960     parents: ganeti2
961     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
962   diabelli:
963     address: 206.12.19.136
964     parents: traetta
965     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
966   bizet:
967     address: 206.12.19.137
968     parents: ganeti2
969     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
970   lilburn:
971     address: 206.12.19.138
972     parents: ganeti2
973     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
974   popov:
975     address: 206.12.19.119
976     parents: ganeti2
977     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
978   beach:
979     address: 206.12.19.140
980     parents: ganeti2
981     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
982   ullmann:
983     address: 206.12.19.141
984     parents: ganeti2
985     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
986   sonntag:
987     address: 206.12.19.142
988     parents: ganeti2
989     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
990   menotti:
991     address: 206.12.19.143
992     parents: ganeti2
993     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
994   muffat:
995     address: 206.12.19.146
996     parents: ganeti2
997     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
998   # }}}
999   # {{{ gw-ugent
1000   # }}}
1001   # {{{ gw-umn
1002   saens:
1003     address: 128.101.240.212
1004     parents: gw-umn
1005     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1006   # }}}
1007   # {{{ gw-unicamp
1008   asgard:
1009     address: 143.106.167.145
1010     parents: gw-unicamp
1011     hostgroups: layer3-infrastructure
1012   powerpc-unicamp-01:
1013     address: 143.106.167.149
1014     parents: asgard
1015     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
1016   # }}}
1017   # {{{ gw-utwente
1018   klecker:
1019     address: 130.89.148.10
1020     parents: gw-utwente
1021     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
1022   klecker-ftp:
1023     address: 130.89.148.12
1024     parents: klecker
1025     hostgroups: secondary-IPs
1026   klecker-archive:
1027     address: 130.89.148.13
1028     parents: klecker
1029     hostgroups: secondary-IPs
1030   klecker-static:
1031     address: 130.89.148.14
1032     parents: klecker
1033     hostgroups: secondary-IPs
1034   # }}}
1035   # {{{ gw-ynic
1036   henze:
1037     address: 144.32.168.74
1038     parents: gw-ynic
1039     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1040   hasse:
1041     address: 144.32.168.75
1042     parents: gw-ynic
1043     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1044   antheil:
1045     address: 144.32.168.76
1046     parents: gw-ynic
1047     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1048   porpora:
1049     address: 144.32.168.78
1050     parents: gw-ynic
1051     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1052   poulenc:
1053     address: 144.32.168.77
1054     parents: gw-ynic
1055     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1056   #antheil:
1057   #  address: 217.140.96.60
1058   #  parents: gw-arm
1059   #  hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
1060   #hasse:
1061   #  address: 217.140.96.68
1062   #  parents: gw-arm
1063   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1064   #henze:
1065   #  address: 217.140.96.70
1066   #  parents: gw-arm
1067   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1068   # }}}
1069   # {{{ gw-zivit
1070   zandonai:
1071     address: 80.245.147.46
1072     parents: gw-zivit
1073     hostgroups: computers, buildd, hassrvfs, wheezy
1074   zelenka:
1075     address: 80.245.147.40
1076     parents: gw-zivit
1077     hostgroups: computers, porterbox, hassrvfs, wheezy
1078   # }}}
1079   # }}}
1080
1081 # {{{ ############################# host groups #############################
1082 hostgroups:
1083   computers:
1084     alias: computers
1085     private: 1
1086   layer2-infrastructure:
1087     alias: Layer 2 Devices
1088     extinfo-icon_image: base/switch40.png
1089     extinfo-icon_image_alt: switch
1090   layer3-infrastructure:
1091     alias: Layer 3 Devices
1092     extinfo-icon_image: base/switch40.png
1093     extinfo-icon_image_alt: router
1094   notacomputer:
1095     alias: Systems that are not really systems.  Yeah :)
1096     private: 1
1097   freebsd:
1098     alias: freebsd
1099     private: 1
1100   armhf:
1101     alias: armhf
1102     private: 1
1103   sparc:
1104     alias: sparc
1105     private: 1
1106
1107   porterbox:
1108     alias: developer accessible porter machines
1109     extinfo-icon_image: base/debian.png
1110     extinfo-icon_image_alt: Debian GNU/Linux
1111     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1112   service:
1113     alias: machines running services
1114     extinfo-icon_image: base/debian.png
1115     extinfo-icon_image_alt: Debian GNU/Linux
1116     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1117   buildd:
1118     alias: buildd systems
1119     extinfo-icon_image: base/debian.png
1120     extinfo-icon_image_alt: Debian GNU/Linux
1121     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1122   general:
1123     alias: general purpose developer accessible machines
1124     extinfo-icon_image: base/debian.png
1125     extinfo-icon_image_alt: Debian GNU/Linux
1126     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1127
1128   dl380:
1129     alias: HP DL380 hosts
1130     private: 1
1131   dl385:
1132     alias: HP DL385 hosts
1133     private: 1
1134   dl360:
1135     alias: HP DL360 hosts
1136     private: 1
1137   bl460:
1138     alias: HP BL460 blades
1139     private: 1
1140   bm-bl:
1141     alias: HP blades at bytemark
1142     private: 1
1143   dl585:
1144     alias: HP DL385 hosts
1145     private: 1
1146   dl180:
1147     alias: HP DL180
1148     private: 1
1149   dl120:
1150     alias: HP DL120
1151     private: 1
1152   sw-raid:
1153     alias: Hosts with Linux software raid
1154     private: 1
1155   aacraid:
1156     alias: Hosts with Adaptec AACraid
1157     private: 1
1158   megaraid:
1159     alias: Hosts with LSI Logic MegaRAID
1160     private: 1
1161
1162   squeeze:
1163     alias: Hosts running squeeze
1164   wheezy:
1165     alias: Hosts running wheezy
1166
1167   kvmdomains:
1168     alias: Hosts that are KVM domains
1169     private: 1
1170
1171   drbd-hosts:
1172     alias: hosts running drbd
1173   postfix-hosts:
1174     alias: hosts running postfix instead of exim
1175     private: 1
1176   heavy-exim:
1177     alias: "hosts running the full mail stuff, including clamav and postgrey"
1178     private: 1
1179   mail-relay:
1180     alias: "relays usually are hosts with more exim processes"
1181     private: 1
1182   spamd:
1183     alias: "hosts running spamassassin as daemon"
1184     private: 1
1185   heavy-postfix:
1186     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1187     private: 1
1188   apache2-hosts:
1189     alias: hosts running apache2
1190     private: 1
1191   jetty-hosts:
1192     alias: hosts running jetty
1193     private: 1
1194   bind9-hosts:
1195     alias: hosts running bind9
1196     private: 1
1197   # once every host runs unbound, do away with this group and check "computers" instead
1198   amavis-hosts:
1199     alias: hosts running amavis
1200     private: 1
1201   rsyncd-hosts:
1202     alias: hosts providing rsync services via xinetd
1203     private: 1
1204   xinetd-hosts:
1205     alias: hosts providing services via xinetd
1206     private: 1
1207   postgres91-hosts:
1208     alias: hosts running postgres91
1209     private: 1
1210   no-ulogd:
1211     alias: hosts not running ulogd
1212     private: 1
1213   acpid-hosts:
1214     alias: hosts running acpid
1215     private: 1
1216   uploadqueue:
1217     alias: hosts that are an anonymous ftp uploadqueue
1218     private: 1
1219   bosserver:
1220     alias: hosts running bosserver
1221     private: 1
1222   apache-https:
1223     alias: hosts with https services
1224     private: 1
1225   broken_https_default_vhost:
1226     alias: https default vhost does not say 200 OK
1227     private: 1
1228
1229   no-bacula:
1230     alias: hosts which are not being backed up with bacula
1231     private: 1
1232
1233   nfs-client:
1234     alias: hosts mounting filesystems using NFS
1235     private: 1
1236   nfs-server:
1237     alias: hosts serving filesystems using NFS
1238     private: 1
1239   autofs:
1240     alias: hosts running the automounter
1241     private: 1
1242
1243   highload:
1244     alias: "hosts on which high load is normal"
1245     private: 1
1246
1247   secondary-IPs:
1248     alias: secondary IP addresses
1249     private: 1
1250
1251   hasbootfs:
1252     alias: hosts with a /boot filesystem
1253     private: 1
1254   hassrvfs:
1255     alias: hosts with a /srv filesystem
1256     private: 1
1257   hasorgfs:
1258     alias: hosts with a /org filesystem
1259     private: 1
1260   hasvarfs:
1261     alias: hosts with a /var filesystem
1262     private: 1
1263   hasvarlogfs:
1264     alias: hosts with a /var/log filesystem
1265     private: 1
1266   hasusrfs:
1267     alias: hosts with a /usr filesystem
1268     private: 1
1269
1270   incomingmailrelayed:
1271     alias: incoming mail needs to go through a mail relay
1272     # i.e. no port 25
1273     private: 1
1274   incomingmailrelayed2025:
1275     alias: incoming mail needs to go through a mail relay
1276     # i.e. no port 25
1277     private: 1
1278
1279   brokensamhain:
1280     alias: machines that can not run samhain
1281     private: 1
1282   high-RTT:
1283     alias: machines with high round trip times
1284     private: 1
1285   ping-suckers:
1286     alias: machines that just suck at icmp
1287     private: 1
1288   alioth:
1289     alias: machines that just are just awkward
1290     private: 1
1291   openstack-compute:
1292     alias: nodes that run OpenStack compute
1293     private: 1
1294   openstack-controller:
1295     alias: nodes that run OpenStack controller
1296     private: 1
1297
1298   security_mirror:
1299     alias: hosts that are security mirrors
1300     private: 1
1301
1302   broken_mq:
1303     alias: hosts whose MQ is broken
1304     private: 1
1305 # }}}
1306 # {{{ ############################# servicegroups #############################
1307 servicegroups:
1308   diskspace:
1309     alias: diskusage checks
1310   buildd:
1311     alias: buildd checks
1312   raid:
1313     alias: raid checks
1314   backup:
1315     alias: backup checks
1316   kernel:
1317     alias: kernel checks
1318   apt:
1319     alias: apt upgrade status
1320   samhain:
1321     alias: samhain integrity status
1322   time:
1323     alias: time stuff
1324   security:
1325     alias: security
1326     servicegroup_members: apt, kernel, samhain
1327   MQ:
1328     alias: rabbitMQ stuff
1329 # }}}
1330 # {{{ ############################# services #############################
1331 services:
1332   # {{{ ### basic networking
1333   -
1334     name: PING
1335     check: "check_ping!350.0,20%!600.0,40%"
1336     hostgroups: pingable
1337     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1338     normal_check_interval: 5
1339     max_check_attempts: 4
1340     retry_check_interval: 1
1341   -
1342     name: PING
1343     check: "check_ping!600.0,20%!900.0,40%"
1344     hostgroups: high-RTT
1345     normal_check_interval: 5
1346     max_check_attempts: 4
1347     retry_check_interval: 1
1348   -
1349     name: PING
1350     check: "check_ping!600.0,90%!900.0,95%"
1351     hostgroups: ping-suckers
1352     normal_check_interval: 5
1353     max_check_attempts: 4
1354     retry_check_interval: 1
1355   -
1356     name: PING
1357     check: "check_ping!2000.0,60%!3000.0,80%"
1358     hostgroups: layer3-infrastructure
1359     normal_check_interval: 5
1360     max_check_attempts: 4
1361     retry_check_interval: 1
1362   # }}}
1363   # {{{ ### disk usage
1364   -
1365     name: disk usage - all
1366     servicegroups: diskspace
1367     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1368     hostgroups: computers
1369     excludehosts: sibelius
1370   -
1371     name: disk usage - all
1372     servicegroups: diskspace
1373     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x /srv/farm-snapshot/farm-misc 95 98"
1374     hosts: sibelius
1375
1376   -
1377     name: disk usage on /
1378     servicegroups: diskspace
1379     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1380     hostgroups: computers
1381   -
1382     name: disk usage on /boot
1383     servicegroups: diskspace
1384     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1385     hostgroups: hasbootfs
1386   -
1387     name: disk usage on /var
1388     servicegroups: diskspace
1389     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1390     hostgroups: hasvarfs
1391   -
1392     name: disk usage on /org
1393     servicegroups: diskspace
1394     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1395     hostgroups: hasorgfs
1396   -
1397     name: disk usage on /srv
1398     servicegroups: diskspace
1399     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1400     hostgroups: hassrvfs
1401   -
1402     name: disk usage on /tmp
1403     servicegroups: diskspace
1404     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1405     hosts: saens
1406   -
1407     name: disk usage on /usr
1408     servicegroups: diskspace
1409     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1410     hostgroups: hasusrfs
1411   -
1412     name: disk usage on /var/lib/postgresql
1413     servicegroups: diskspace
1414     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1415     hosts: sibelius, busoni, buxtehude, lw07
1416   -
1417     name: disk usage on /var/log
1418     servicegroups: diskspace
1419     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1420     hostgroups: hasvarlogfs
1421   -
1422     name: disk usage on /var/spool/postfix
1423     servicegroups: diskspace
1424     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1425     hosts: bendel
1426   -
1427     name: disk usage on /srv/mirrors
1428     servicegroups: diskspace
1429     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1430     hosts: sibelius
1431   -
1432     name: disk usage on /srv/snapshot.debian.org
1433     servicegroups: diskspace
1434     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1435     hosts: sibelius
1436   -
1437     name: disk usage on /srv/farm-snapshot/farm-1
1438     servicegroups: diskspace
1439     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-1"
1440     hosts: sibelius
1441   -
1442     name: disk usage on /srv/farm-snapshot/farm-2
1443     servicegroups: diskspace
1444     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2"
1445     hosts: sibelius
1446   -
1447     name: disk usage on /srv/farm-snapshot/farm-3
1448     servicegroups: diskspace
1449     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-3"
1450     hosts: sibelius
1451   -
1452     name: disk usage on /srv/farm-snapshot/farm-4
1453     servicegroups: diskspace
1454     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-4"
1455     hosts: sibelius
1456   -
1457     name: disk usage on /var/lib/postgresql/9.1
1458     servicegroups: diskspace
1459     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1460     hosts: franck
1461   -
1462     name: disk usage on /srv/ftp-master.debian.org
1463     servicegroups: diskspace
1464     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1465     hosts: franck
1466   -
1467     name: disk usage on /storage/snapshot-farm-1
1468     servicegroups: diskspace
1469     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1470     hosts: lw01
1471   -
1472     name: disk usage on /storage/snapshot-farm-2
1473     servicegroups: diskspace
1474     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1475     hosts: lw02
1476   -
1477     name: disk usage on /storage/snapshot-farm-3
1478     servicegroups: diskspace
1479     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1480     hosts: lw03
1481   -
1482     name: disk usage on /storage/snapshot-farm-4
1483     servicegroups: diskspace
1484     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1485     hosts: lw04
1486   -
1487     name: disk usage on /srv/morgue.debian.org/
1488     servicegroups: diskspace
1489     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1490     hosts: lw03
1491   # }}}
1492   # {{{ ### system
1493   # {{{ setup
1494   -
1495     name: setup - dsa config
1496     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1497     hostgroups: computers
1498     normal_check_interval: 60
1499     excludehostgroups: alioth
1500   -
1501     name: setup - local hostname etc-hosts
1502     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1503     hostgroups: computers
1504     normal_check_interval: 60
1505   # }}}
1506   # {{{ os health
1507   ####
1508   -
1509     name: users
1510     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1511     hostgroups: computers
1512   -
1513     name: load
1514     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1515     hostgroups: computers
1516     excludehostgroups: highload
1517   -
1518     name: load
1519     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1520     hostgroups: highload
1521   -
1522     name: uptime check
1523     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1524     hostgroups: computers
1525   -
1526     name: processes - total
1527     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1528     hostgroups: computers
1529   -
1530     name: swap usage - percent
1531     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1532     hostgroups: computers
1533   -
1534     name: swap usage - mb
1535     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1536     hostgroups: computers
1537   -
1538     name: process - getty
1539     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1540     hostgroups: computers
1541     excludehosts: zelenka, zandonai
1542   -
1543     name: processes - zombies
1544     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1545     hostgroups: computers
1546   -
1547     name: system - available entropy
1548     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1549     event_handler: dsa_event_handler_restart_ekey
1550     hostgroups: computers
1551     excludehostgroups: freebsd
1552   -
1553     name: system - filesystem check
1554     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1555     normal_check_interval:  60
1556     retry_check_interval: 15
1557     hostgroups: computers
1558   # }}}
1559   # {{{ backup
1560   -
1561     name: backup
1562     servicegroups: backup
1563     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1564     hostgroups: computers
1565     excludehosts: storace
1566     normal_check_interval: 60
1567     max_check_attempts: 2
1568     retry_check_interval: 5
1569   -
1570     name: backup server config
1571     servicegroups: backup
1572     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1573     hosts: storace
1574     normal_check_interval: 60
1575     max_check_attempts: 2
1576     retry_check_interval: 5
1577   -
1578     name: backup - bacula - last backup
1579     servicegroups: backup
1580     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1581     runfrom: dinis
1582     hostgroups: computers
1583     excludehostgroups: buildd, porterbox, no-bacula
1584     normal_check_interval:  60
1585     retry_check_interval: 15
1586   -
1587     name: backup - bacula - last full backup
1588     servicegroups: backup
1589     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1590     runfrom: dinis
1591     hostgroups: computers
1592     excludehostgroups: buildd, porterbox, no-bacula
1593     normal_check_interval:  60
1594     retry_check_interval: 15
1595   -
1596     name: process - bacula-fd
1597     servicegroups: backup
1598     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1599     hostgroups: computers
1600     excludehostgroups: freebsd, alioth
1601   -
1602     name: process - bacula-fd
1603     servicegroups: backup
1604     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1605     hostgroups: freebsd
1606
1607   ####
1608   -
1609     name: process - acc.umu.se backup
1610     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1611     hosts: sibelius
1612   # }}}
1613   # {{{ security
1614   -
1615     name: running kernel
1616     servicegroups: kernel
1617     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1618     hostgroups: computers
1619     normal_check_interval: 60
1620     retry_check_interval: 5
1621   -
1622     name: apt - security updates
1623     servicegroups: apt
1624     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1625     hostgroups: computers
1626     normal_check_interval:  60
1627     retry_check_interval: 15
1628   -
1629     name: installed firewall
1630     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1631     hostgroups: computers
1632     excludehostgroups: freebsd
1633   -
1634     name: puppetized firewall
1635     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1636     hostgroups: computers
1637     excludehostgroups: freebsd
1638   -
1639     name: process - ulogd
1640     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1641     hostgroups: computers
1642     excludehostgroups: freebsd, sparc
1643   -
1644     name: unexpected process - ulogd
1645     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1646     hostgroups: freebsd, sparc
1647   ####
1648   -
1649     name: process - samhain
1650     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1651     hostgroups: computers
1652     excludehostgroups: brokensamhain
1653   -
1654     name: samhain
1655     servicegroups: samhain
1656     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1657     hostgroups: computers
1658     depends: process - samhain
1659     normal_check_interval: 60
1660     retry_check_interval: 5
1661     excludehostgroups: brokensamhain
1662   -
1663     name: processes - samhain zombies
1664     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1665     event_handler: dsa_event_handler_restart_samhain
1666     hostgroups: computers
1667     excludehostgroups: brokensamhain
1668   # }}}
1669   # {{{ logging
1670   -
1671     name: process - syslog-ng
1672     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1673     hostgroups: computers
1674     excludehostgroups: freebsd
1675
1676   -
1677     name: process - syslog-ng
1678     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1679     hostgroups: freebsd
1680
1681   -
1682     name: remote logging on lotti
1683     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1684     runfrom: lotti
1685     hostgroups: computers
1686     excludehostgroups: alioth
1687   -
1688     name: remote logging on lully
1689     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1690     runfrom: lully
1691     hostgroups: computers
1692     excludehostgroups: alioth
1693   -
1694     name: remote logging on loghost-grnet-01
1695     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1696     runfrom: loghost-grnet-01
1697     hostgroups: computers
1698     excludehostgroups: alioth
1699   # }}}
1700   # {{{ base service
1701   -
1702     name: process - sshd
1703     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1704     hostgroups: computers
1705   -
1706     name: "network service - sshd"
1707     check: dsa_check_ssh
1708     hostgroups: computers
1709     depends: process - sshd
1710     normal_check_interval:  60
1711     notification_interval: 1440
1712   ####
1713   -
1714     name: network service - nrpe
1715     check: check_tcp!5666
1716     hostgroups: computers
1717     max_check_attempts: -2
1718     notification_interval: 1440
1719   -
1720     name: process - nrpe
1721     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1722     hostgroups: computers
1723     max_check_attempts: -1
1724     depends: network service - nrpe
1725   ###
1726   -
1727     name: process - munin-node
1728     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1729     hostgroups: computers
1730     excludehostgroups: freebsd, armhf
1731   -
1732     name: process - munin-node
1733     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1734     hostgroups: freebsd
1735   -
1736     name: process - munin-node
1737     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1738     hostgroups: wheezy
1739     excludehostgroups: freebsd
1740   -
1741     name: network service - munin-node
1742     check: check_tcp!4949
1743     hostgroups: computers
1744     depends: process - munin-node
1745   ###
1746   -
1747     name: process - ntpd
1748     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1749     hostgroups: computers
1750     servicegroups: time
1751   -
1752     name: network service - ntp
1753     check: dsa_check_ntp
1754     hostgroups: computers
1755     depends: process - ntpd
1756     servicegroups: time
1757   ###
1758   -
1759     name: process - atd
1760     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1761     hostgroups: computers
1762   ###
1763   -
1764     name: process - cron
1765     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1766     hostgroups: computers
1767   ###
1768   -
1769     name: process - ud-replicated
1770     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1771     hostgroups: computers
1772     excludehostgroups: squeeze, freebsd, alioth
1773   -
1774     name: process - ud-replicated
1775     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1776     hostgroups: freebsd
1777   ###
1778   -
1779     name: process - monit
1780     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1781     hostgroups: squeeze
1782   -
1783     name: process - monit
1784     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1785     hostgroups: computers
1786     excludehostgroups: squeeze, alioth
1787   ###
1788   -
1789     name: MQ connection on rainier
1790     servicegroups: MQ
1791     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1792     runfrom: rainier
1793     hostgroups: computers
1794     normal_check_interval:  60
1795     retry_check_interval: 15
1796     excludehostgroups: alioth, broken_mq
1797   -
1798     name: MQ connection on rapoport
1799     servicegroups: MQ
1800     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1801     runfrom: rapoport
1802     hostgroups: computers
1803     normal_check_interval:  60
1804     retry_check_interval: 15
1805     excludehostgroups: alioth, broken_mq
1806   ###
1807   -
1808     name: local resolver
1809     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1810     hostgroups: computers
1811     normal_check_interval: 60
1812   -
1813     name: process - unbound
1814     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1815     hostgroups: computers
1816     excludehostgroups: alioth
1817   ###
1818   -
1819     name: process - uptimed
1820     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1821     hostgroups: computers
1822   ###
1823   -
1824     name: process - udevd
1825     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1826     hostgroups: computers
1827     excludehostgroups: freebsd
1828   -
1829     name: unexpected process - udev
1830     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1831     hostgroups: freebsd
1832   ###
1833   -
1834     name: process - acpid
1835     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1836     hostgroups: acpid-hosts
1837   -
1838     name: unexpected process - acpid
1839     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1840     hostgroups: computers
1841     excludehostgroups: acpid-hosts, kvmdomains
1842   ###
1843   -
1844     name: process - xinetd
1845     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1846     hostgroups: xinetd-hosts
1847   -
1848     name: unwanted process - xinetd
1849     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1850     hostgroups: computers
1851     excludehostgroups: xinetd-hosts
1852   ###
1853   -
1854     name: process - stunnel4 - puppet-ekeyd
1855     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1856     hostgroups: squeeze, wheezy
1857     excludehostgroups: freebsd, alioth
1858   # }}}
1859   # {{{ anti-services
1860   -
1861     name: ganeti - job watcher paused
1862     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1863     hostgroups: computers
1864   -
1865     name: unwanted process - irqbalance
1866     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1867     hostgroups: computers
1868   -
1869     name: unwanted process - openvpn
1870     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1871     hostgroups: computers
1872     normal_check_interval: 120
1873   -
1874     name: unwanted process - gkrellmd
1875     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1876     hostgroups: computers
1877   -
1878     name: unwanted process - rpc.statd
1879     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1880     hostgroups: computers
1881     excludehostgroups: nfs-client, nfs-server
1882   -
1883     name: unwanted process - inetd
1884     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1885     hostgroups: computers
1886     excludehosts: abel
1887   -
1888     name: unwanted process - snmpd
1889     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1890     hostgroups: computers
1891   # }}}
1892   # {{{ ssl certs
1893   -
1894     name: "host SSL cert"
1895     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1896     hostgroups: computers
1897   # }}}
1898   # {{{ HW health/raid
1899   -
1900     name: process - mdadm monitor
1901     servicegroups: raid
1902     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1903     hostgroups: sw-raid
1904   -
1905     name: RAID - sw raid
1906     servicegroups: raid
1907     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1908     hostgroups: sw-raid
1909   ###
1910   -
1911     name: HW - hpacucli status
1912     servicegroups: raid
1913     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1914     normal_check_interval: 120
1915     hostgroups: dl385, dl380, dl360, bl460, dl180
1916     excludehosts: schein, rietz
1917   -
1918     name: HW - hpacucli status
1919     servicegroups: raid
1920     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1921     normal_check_interval: 120
1922     hostgroups: bm-bl
1923   -
1924     name: HW - hpacucli status
1925     servicegroups: raid
1926     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1927     normal_check_interval: 120
1928     hosts: schein, rietz
1929   -
1930     name: HW - hpacucli enclosure status
1931     servicegroups: raid
1932     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1933     normal_check_interval: 120
1934     hosts: franck
1935   -
1936     name: HW - hpacucli status
1937     servicegroups: raid
1938     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1939     normal_check_interval: 120
1940     hostgroups: dl585
1941   ###
1942 #  -
1943 #    name: HW - edac status
1944 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1945 #    normal_check_interval: 120
1946     #hostgroups: computers
1947     #excludehosts: villa, lobos, senfl, schein
1948   -
1949     name: HW - hpasmcli status
1950     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1951     normal_check_interval: 120
1952     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1953     excludehosts: villa, lobos, senfl, schein, storace
1954   -
1955     name: HW - hpasmcli status
1956     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1957     normal_check_interval: 120
1958     hosts: villa
1959   -
1960     name: HW - hpasmcli status
1961     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1962     normal_check_interval: 120
1963     hosts: lobos
1964   -
1965     name: HW - hpasmcli status
1966     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1967     normal_check_interval: 120
1968     hosts: senfl, schein
1969   -
1970     name: HW - hpasmcli status
1971     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1972     normal_check_interval: 120
1973     hosts: storace
1974   ###
1975   -
1976     name: RAID - 3ware
1977     servicegroups: raid
1978     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1979     hosts: powell
1980   ###
1981   -
1982     name: RAID - aacraid
1983     servicegroups: raid
1984     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1985     hostgroups: aacraid
1986   ###
1987   -
1988     name: RAID - megaraid
1989     servicegroups: raid
1990     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1991     hostgroups: megaraid
1992   ###
1993   -
1994     name: RAID - DRBD
1995     servicegroups: raid
1996     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1997     hostgroups: drbd-hosts
1998   # }}}
1999   # }}}
2000   # {{{ ### mail stuff
2001   # {{{ exim processes and mailq
2002   -
2003     name: process - exim
2004     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2005     hostgroups: computers
2006     excludehostgroups: postfix-hosts, mail-relay
2007     excludehosts: master, busoni, quantz, buxtehude
2008   -
2009     name: process - exim
2010     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2011     hostgroups: mail-relay
2012   -
2013     name: process - exim - total
2014     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2015     hostgroups: computers
2016     excludehostgroups: postfix-hosts
2017     excludehosts: master, busoni, quantz, buxtehude
2018   -
2019     name: process - exim
2020     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2021     hosts: master, busoni, quantz, buxtehude
2022   -
2023     name: mail queue
2024     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2025     hostgroups: heavy-exim
2026   # }}}
2027   # {{{ clamav
2028   -
2029     name: process - clamav - clamd
2030     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2031     hostgroups: heavy-exim, heavy-postfix
2032   -
2033     name: service - clamav
2034     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2035     hostgroups: heavy-exim, heavy-postfix
2036     depends: process - clamav - clamd
2037   -
2038     name: process - clamav - freshclam
2039     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2040     hostgroups: heavy-exim, heavy-postfix
2041   -
2042     name: unwanted process - clamav
2043     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2044     hostgroups: computers
2045     excludehostgroups: heavy-exim, heavy-postfix
2046   -
2047     name: unwanted process - freshclam
2048     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2049     hostgroups: computers
2050     excludehostgroups: heavy-exim, heavy-postfix
2051   # }}}
2052   # {{{ anti-spam
2053   -
2054     name: process - spamd - master
2055     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2056     hostgroups: spamd
2057     excludehosts: picconi
2058   -
2059     name: process - spamd - master
2060     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2061     hosts: picconi
2062   -
2063     name: process - spamd - master
2064     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2065     hosts: bendel
2066   -
2067     name: process - spamd - child
2068     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2069     hosts: bendel
2070     hostgroups: spamd
2071     depends: process - spamd - master
2072   #
2073   -
2074     name: process - spamd - master
2075     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2076     hosts: buxtehude
2077   -
2078     name: process - spamd - child
2079     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2080     hosts: buxtehude
2081   #
2082   -
2083     name: unwanted process - spamd
2084     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2085     hostgroups: computers
2086     excludehostgroups: spamd
2087     excludehosts: bendel, busoni, buxtehude
2088
2089   -
2090     name: unwanted process - greylistd
2091     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2092     hostgroups: computers
2093
2094   ###
2095   -
2096     name: process - postgrey
2097     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2098     hostgroups: heavy-exim
2099   -
2100     name: process - postgrey
2101     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2102     hostgroups: heavy-postfix
2103   #
2104   -
2105     name: unwanted process - postgrey
2106     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2107     hostgroups: computers
2108     excludehostgroups: heavy-postfix, heavy-exim
2109   ###
2110   -
2111     name: process - amavis - master
2112     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2113     hostgroups: amavis-hosts
2114   -
2115     name: process - amavis - all
2116     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2117     hostgroups: amavis-hosts
2118     depends: process - amavis - master
2119   #
2120   -
2121     name: unwanted process - amavis
2122     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2123     hostgroups: computers
2124     excludehostgroups: amavis-hosts
2125   ###
2126   -
2127     name: process - weightd - master
2128     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2129     hostgroups: heavy-postfix, alioth
2130   -
2131     name: process - weightd - cache
2132     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2133     hostgroups: heavy-postfix, alioth
2134     depends: process - weightd - master
2135   -
2136     name: process - weightd - child
2137     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2138     hostgroups: heavy-postfix, alioth
2139     depends: process - weightd - master
2140   ###
2141   -
2142     name: unwanted process - policyd-weight
2143     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2144     hostgroups: computers
2145     excludehostgroups: heavy-postfix, alioth
2146   # }}}
2147   # {{{ postfix
2148   ###
2149   -
2150     name: process - postfix - master
2151     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2152     hostgroups: postfix-hosts
2153   -
2154     name: process - postfix - qmgr
2155     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2156     hostgroups: postfix-hosts
2157     depends: process - postfix - master
2158   -
2159     name: process - postfix - pickup
2160     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2161     hostgroups: postfix-hosts
2162     depends: process - postfix - master
2163   -
2164     name: process - postfix - anvil
2165     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2166     hostgroups: postfix-hosts
2167     depends: process - postfix - master
2168
2169   -
2170     name: process - postfix - trivial-rewrite
2171     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2172     hostgroups: postfix-hosts
2173     depends: process - postfix - master
2174   -
2175     name: process - postfix - proxymap
2176     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2177     hostgroups: postfix-hosts
2178     depends: process - postfix - master
2179   -
2180     name: process - postfix - cleanup
2181     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2182     hostgroups: postfix-hosts
2183     depends: process - postfix - master
2184   -
2185     name: process - postfix - local
2186     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2187     hostgroups: postfix-hosts
2188     depends: process - postfix - master
2189
2190   -
2191     name: network service local - smtps cert
2192     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2193     hostgroups: postfix-hosts
2194     depends: process - postfix - master
2195     normal_check_interval: 120
2196   # }}}
2197   # {{{ mail - network service
2198   -
2199     name: network service - smtp
2200     check: dsa_check_smtp
2201     hostgroups: computers
2202     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2203     depends: process - exim
2204
2205   -
2206     name: network service - smtp
2207     check: dsa_check_smtp
2208     hostgroups: postfix-hosts
2209     depends: process - postfix - master
2210   -
2211     name: network service - submission
2212     check: dsa_check_smtp_port!587
2213     hostgroups: incomingmailrelayed
2214     depends: process - exim
2215   -
2216     name: network service - smtp 2025
2217     check: dsa_check_smtp_port!2025
2218     hostgroups: incomingmailrelayed2025
2219     depends: process - exim
2220   # }}}
2221   # }}}
2222   # {{{ ### host specific services
2223   # {{{ HTTP
2224   -
2225     name: process - apache2 - master
2226     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2227     hostgroups: apache2-hosts
2228   -
2229     name: process - apache2 - worker
2230     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2231     hostgroups: apache2-hosts
2232     depends: process - apache2 - master
2233   -
2234     name: unwanted process - apache2
2235     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2236     hostgroups: computers
2237     excludehostgroups: apache2-hosts
2238
2239   -
2240     name: network service - http
2241     check: check_http
2242     hostgroups: apache2-hosts
2243     excludehosts: klecker
2244     depends: process - apache2 - master
2245   -
2246     name: network service - http
2247     check: check_http
2248     depends: klecker:process - apache2 - master
2249     hosts: klecker-ftp
2250
2251   # keyserver on kaufmann
2252   -
2253     name: network service - http keyserver
2254     check: dsa_check_http_port!11371
2255     hosts: kaufmann
2256     depends: process - apache2 - master
2257
2258   # https on various hosts
2259   -
2260     name: network service - https
2261     check: check_https
2262     hostgroups: apache-https
2263     excludehosts: handel,menotti
2264     excludehostgroups: broken_https_default_vhost
2265     depends: "process - apache2 - master"
2266     normal_check_interval: 120
2267   -
2268     name: network service - https
2269     check: dsa_check_https_want_auth
2270     hosts: handel,menotti
2271     depends: "process - apache2 - master"
2272     normal_check_interval: 120
2273   -
2274     name: network service - https
2275     check: dsa_check_https_any_status
2276     hostgroups: broken_https_default_vhost
2277     depends: "process - apache2 - master"
2278     normal_check_interval: 120
2279   -
2280     name: network service - https cert
2281     check: dsa_check_cert!443
2282     hostgroups: apache-https
2283     depends: network service - https
2284     normal_check_interval: 60
2285   -
2286     name: unwanted network service - https
2287     check: dsa_check_port_closed!443
2288     hostgroups: apache2-hosts
2289     excludehostgroups: apache-https
2290     # ravel does ssh on port 443
2291     excludehosts: ravel
2292     normal_check_interval: 60
2293   # }}}
2294   # {{{ FTP
2295   -
2296     name: network service - ftp
2297     check: check_ftp
2298     hostgroups: uploadqueue, security_mirror
2299     excludehosts: klecker
2300   -
2301     name: network service - ftp
2302     check: check_ftp
2303     hosts: klecker-ftp
2304     depends: klecker:process - xinetd
2305   # }}}
2306   # {{{ postgres
2307   -
2308     name: unwanted process - postgresql
2309     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2310     hostgroups: computers
2311     excludehostgroups: postgres91-hosts
2312   -
2313     name: unwanted process - postgresql 9.0
2314     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2315     hostgroups: computers
2316   -
2317     name: process - postgresql91 - master
2318     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2319     hostgroups: postgres91-hosts
2320   -
2321     name: postgresql backups
2322     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2323     hosts: storace
2324   # }}}
2325   # {{{ power
2326 #  -
2327 #    name: process - UPS - nut usbhid-ups - ups1
2328 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2329 #    hosts: franck
2330 #  -
2331 #    name: process - UPS - nut upsd
2332 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2333 #    hosts: franck
2334 #  -
2335 #    name: process - UPS - nut upsmon master
2336 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2337 #    hosts: franck
2338 #  -
2339 #    name: process - UPS - nut upsmon worker
2340 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2341 #    hosts: franck
2342 #    depends: process - UPS - nut upsmon master
2343 #  -
2344 #    name: UPS - on line power
2345 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2346 #    hosts: franck
2347 #    depends: process - UPS - nut upsd
2348   # }}}
2349   # {{{ buildd
2350   -
2351     name: process - buildd
2352     servicegroups: buildd
2353     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2354     hosts: fano, finzi, fils, fayrfax
2355     contact_groups: buildd
2356   -
2357     name: process - buildd
2358     servicegroups: buildd
2359     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2360     hostgroups: buildd
2361     excludehosts: fano, finzi, fils, fayrfax
2362     contact_groups: buildd
2363   -
2364     name: processes - zombie schroot
2365     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2366     hostgroups: buildd
2367     contact_groups: +buildd
2368     normal_check_interval: 5
2369     max_check_attempts: 24
2370     retry_check_interval: 5
2371   -
2372     name: processes - lvcreate
2373     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2374     hostgroups: buildd
2375     contact_groups: +buildd
2376   # }}}
2377   # {{{ NFS Stuff
2378   -
2379     name: process - statd
2380     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2381     hostgroups: nfs-client, nfs-server
2382   -
2383     name: process - nfsd
2384     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2385     hostgroups: nfs-server
2386   -
2387     name: process - lockd
2388     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2389     hostgroups: nfs-server
2390   -
2391     name: process - mountd
2392     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2393     hostgroups: nfs-server
2394   #
2395   -
2396     name: process - automount
2397     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2398     hostgroups: autofs
2399   -
2400     name: unwanted process - automount
2401     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2402     hostgroups: computers
2403     excludehostgroups: autofs
2404   # }}}
2405   # {{{ mirroring
2406   -
2407     name: mirror sync - bugs
2408     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2409     hosts: global
2410   -
2411     name: mirror sync - security
2412     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2413     hosts: global
2414   -
2415     name: mirror sync - packages
2416     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2417     hosts: global
2418     normal_check_interval: 15
2419     max_check_attempts: 5
2420     retry_check_interval: 5
2421   -
2422     name: mirror sync - snapshot
2423     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2424     hosts: global
2425     normal_check_interval: 15
2426     max_check_attempts: 5
2427     retry_check_interval: 5
2428   # }}}
2429   # {{{ DNS
2430   -
2431     name: process - named
2432     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2433     hostgroups: bind9-hosts
2434   -
2435     name: network service - dns
2436     check: check_dns
2437     hostgroups: bind9-hosts
2438     depends: process - named
2439   -
2440     name: unwanted process - named
2441     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2442     hostgroups: computers
2443     excludehostgroups: bind9-hosts
2444   ###
2445   -
2446     name: DNS SOA sync - debian.org
2447     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2448     hosts: global
2449   -
2450     name: DNS SOA sync - debian.net
2451     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2452     hosts: global
2453   -
2454     name: DNS SOA sync - debian.com
2455     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2456     hosts: global
2457   -
2458     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2459     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2460     hosts: global
2461   -
2462     name: DNS SOA sync - alioth.debian.org
2463     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2464     hosts: global
2465   -
2466     name: DNS - delegation and signature expiry
2467     hosts: global
2468     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2469     runfrom: denis
2470   -
2471     name: DNS - security delegations
2472     hosts: global
2473     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2474     runfrom: denis
2475   -
2476     name: DNS - key coverage
2477     hosts: global
2478     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2479     runfrom: denis
2480   -
2481     name: DNS - DS expiry
2482     hosts: global
2483     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2484     runfrom: denis
2485   # }}}
2486   # {{{ storage
2487   -
2488     name: ping alive check
2489     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2490     runfrom: dijkstra
2491     hosts: giustini
2492     normal_check_interval: 5
2493     max_check_attempts: 4
2494     retry_check_interval: 1
2495   -
2496     name: Overall Unit Status
2497     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2498     runfrom: dijkstra
2499     hosts: giustini
2500   -
2501     name: event log
2502     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2503     runfrom: dijkstra
2504     hosts: giustini
2505   # }}}
2506   # {{{ porterbox
2507   -
2508     name: current chroots
2509     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2510     hostgroups: porterbox
2511     normal_check_interval:  60
2512     retry_check_interval: 15
2513   # }}}
2514   # {{{ openstack
2515   -
2516     name: process - openstack - memcached
2517     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2518     hostgroups: openstack-controller
2519   -
2520     name: process - openstack - glance-registry
2521     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2522     hostgroups: openstack-controller
2523   -
2524     name: process - openstack - nova-api
2525     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2526     hostgroups: openstack-controller
2527   -
2528     name: process - openstack - nova-compute
2529     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2530     hostgroups: openstack-compute
2531   -
2532     name: process - openstack - nova-cert
2533     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2534     hostgroups: openstack-controller
2535   -
2536     name: process - openstack - nova-conductor
2537     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2538     hostgroups: openstack-controller
2539   -
2540     name: process - openstack - nova-consoleauth
2541     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2542     hostgroups: openstack-controller
2543   -
2544     name: process - openstack - nova-scheduler
2545     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2546     hostgroups: openstack-controller
2547   -
2548     name: process - openstack - nova-spicehtml5proxy
2549     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2550     hostgroups: openstack-controller
2551   -
2552     name: process - openstack - neutron-server
2553     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2554     hostgroups: openstack-controller
2555   # }}}
2556   # {{{ misc
2557   -
2558     name: process - rngd
2559     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2560     hostgroups: dl385
2561   ###
2562   -
2563     name: process - slapd
2564     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2565     hosts: draghi
2566   -
2567     name: network service - ldaps cert
2568     check: dsa_check_cert!636
2569     depends: process - slapd
2570     normal_check_interval: 60
2571     hosts: draghi
2572   ###
2573   -
2574     name: network service - finger
2575     check: check_tcp!79
2576     hosts: draghi
2577     depends: process - xinetd
2578   ###
2579   -
2580     name: network service - rsync
2581     check: check_tcp!873
2582     hostgroups: rsyncd-hosts
2583     depends: process - xinetd
2584     excludehosts: rietz
2585   -
2586     name: network service - rsync
2587     check: check_tcp!873
2588     hosts: rietz2
2589     depends: rietz:process - xinetd
2590   -
2591     name: network service - rsync
2592     check: check_tcp!873
2593     hosts: milanollo2
2594     depends: milanollo:process - xinetd
2595   ###
2596   -
2597     name: process - icinga
2598     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2599     hosts: tchaikovsky
2600   ###
2601   -
2602     name: process - jetty - master
2603     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2604     hostgroups: jetty-hosts
2605   -
2606     name: process - jetty - worker
2607     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2608     hostgroups: jetty-hosts
2609     depends: process - jetty - master
2610   ###
2611   -
2612     name: process - debianqueued
2613     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2614     hostgroups: uploadqueue
2615   ####
2616   -
2617     name: network service - gobby
2618     check: check_tcp!6523
2619     hosts: gombert
2620     contact_groups: gobby
2621   ####
2622   -
2623     name: network service - sip-tls cert - 443
2624     check: dsa_check_cert!443
2625     normal_check_interval: 60
2626     hosts: vogler
2627   -
2628     name: network service - sip-tls cert - 5061
2629     check: dsa_check_cert!5061
2630     normal_check_interval: 60
2631     hosts: vogler
2632   ####
2633   -
2634     name: puppetmaster cert
2635     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2636     hosts: handel
2637     normal_check_interval: 60
2638     max_check_attempts: 2
2639     retry_check_interval: 5
2640   # }}}
2641 # }}}
2642
2643 # vim: set ts=2 sw=2 et ai si fdm=marker: