1 # Non comment lines are YAML
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
8 # - *: check munin stats collection works
9 # - *: check backups are successful
10 # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
13 #############################
15 #############################
19 hostgroups: notacomputer
21 check_command: dsa_check_always_ok
24 hostgroups: notacomputer
26 check_command: dsa_check_always_ok
28 address: 130.239.18.97
30 hostgroups: layer3-infrastructure
32 address: 130.242.6.198
34 hostgroups: layer3-infrastructure
38 hostgroups: layer3-infrastructure
40 address: 89.16.160.116
42 hostgroups: layer3-infrastructure
44 address: 200.17.202.254
46 hostgroups: layer3-infrastructure
48 address: 150.203.164.1
50 hostgroups: layer3-infrastructure
52 address: 213.104.121.213
54 hostgroups: layer3-infrastructure
58 hostgroups: layer3-infrastructure
60 address: 217.196.149.238
62 hostgroups: layer3-infrastructure
66 hostgroups: layer3-infrastructure
68 address: 93.94.130.190
70 hostgroups: layer3-infrastructure
72 address: 62.104.23.249
74 hostgroups: layer3-infrastructure
78 hostgroups: layer3-infrastructure
80 address: 194.177.211.193
82 hostgroups: layer3-infrastructure
84 # really henet, because of something weird
87 hostgroups: layer3-infrastructure
89 address: 185.17.185.190
91 hostgroups: layer3-infrastructure
93 address: 82.195.78.118
95 hostgroups: layer3-infrastructure
99 hostgroups: layer3-infrastructure
101 address: 140.211.166.1
103 hostgroups: layer3-infrastructure
105 address: 133.242.99.65
107 hostgroups: layer3-infrastructure
109 address: 193.62.202.20
111 hostgroups: layer3-infrastructure
112 contacts: tjrc1, dave
114 address: 212.211.132.249
116 hostgroups: layer3-infrastructure
118 address: 212.211.132.1
120 hostgroups: layer3-infrastructure
122 address: 86.59.118.145
124 hostgroups: layer3-infrastructure
126 address: 154.57.0.249
128 hostgroups: layer3-infrastructure
130 address: 154.57.0.250
132 hostgroups: layer3-infrastructure
134 address: 206.12.19.254
135 hostgroups: layer3-infrastructure
138 address: 128.101.240.222
140 hostgroups: layer3-infrastructure
142 address: 143.106.167.113
144 hostgroups: layer3-infrastructure
146 address: 130.89.149.1
148 hostgroups: layer3-infrastructure
150 # really janet, because ynic is stupid about firewalling
151 address: 144.32.255.227
153 hostgroups: layer3-infrastructure
156 hostgroups: notacomputer
158 check_command: dsa_check_always_ok
160 address: 209.87.16.254
162 hostgroups: layer3-infrastructure
167 address: 212.227.126.54
168 parents: gw-1und1-sec
169 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hassrvfs, pe1950
171 address: 195.20.242.89
172 parents: gw-1und1-sec
173 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950
177 address: 130.239.18.123
179 hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, stretch, autofs, sw-raid
180 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
183 address: 130.242.6.199
185 hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts
189 address: 141.170.6.156
191 hostgroups: computers, porterbox, stretch, hassrvfs
193 address: 141.170.6.149
195 hostgroups: computers, buildd, stretch, nfs-client
197 address: 141.170.6.150
199 hostgroups: computers, buildd, stretch, nfs-client
201 address: 141.170.6.154
203 hostgroups: computers, buildd, stretch, nfs-client
205 address: 141.170.6.155
207 hostgroups: computers, buildd, stretch, nfs-client
209 address: 141.170.6.157
211 hostgroups: computers, buildd, stretch, hassrvfs
213 address: 141.170.6.151
215 hostgroups: computers, porterbox, stretch, nfs-client
217 address: 141.170.6.152
219 hostgroups: computers, buildd, buster, hassrvfs, hasbootfs, sw-raid
221 address: 141.170.6.153
223 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
225 address: 141.170.6.158
227 hostgroups: computers, buildd, stretch, hassrvfs
231 address: 217.140.96.56
233 hostgroups: computers, hasbootfs, hassrvfs, porterbox, stretch, broken_mq
235 address: 217.140.96.57
237 hostgroups: computers, hasbootfs, hassrvfs, buildd, buster, broken_mq
239 address: 217.140.96.58
241 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq, sw-raid
243 address: 217.140.96.60
245 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq, sw-raid
247 address: 217.140.96.61
249 hostgroups: computers, hassrvfs, buildd, buster, broken_mq, sw-raid
251 address: 217.140.96.66
253 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, porterbox, broken_mq
255 address: 217.140.96.67
257 hostgroups: computers, hasbootfs, hassrvfs, buster, armhf, buildd, broken_mq
259 address: 217.140.96.71
261 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd, broken_mq
265 address: 138.16.160.17
267 hostgroups: computers, service, apache2-hosts, apache-https, dl380, rsyncd-hosts, stretch, hassrvfs, postgres96-hosts, manyprocesses
271 address: 5.153.231.241
273 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
275 address: 5.153.231.242
277 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
279 address: 5.153.231.243
281 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
283 address: 5.153.231.244
285 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
287 address: 5.153.231.245
289 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
291 address: 5.153.231.246
293 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
295 address: 5.153.231.247
297 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
299 address: 5.153.231.248
301 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
303 address: 5.153.231.249
305 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
307 address: 5.153.231.250
309 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
311 address: 5.153.231.251
313 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
315 address: 5.153.231.252
317 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
319 address: 5.153.231.253
321 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
323 address: 5.153.231.254
325 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
330 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, nfs-server, systemd-timesyncd
334 hostgroups: secondary-IPs, rsyncd-hosts
338 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
342 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd
346 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
350 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
355 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
360 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
362 address: 5.153.231.10
364 hostgroups: computers, hassrvfs, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
368 hostgroups: notacomputer
370 address: 5.153.231.11
371 parents: ganeti-bytemark
372 hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
374 address: 5.153.231.12
375 parents: ganeti-bytemark
376 hostgroups: computers, hassrvfs, kvmdomains, stretch, systemd-timesyncd
378 address: 5.153.231.13
379 parents: ganeti-bytemark
380 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd, broken_https_default_vhost
382 address: 5.153.231.16
383 parents: ganeti-bytemark
384 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
386 address: 5.153.231.15
387 parents: ganeti-bytemark
388 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
390 address: 5.153.231.17
391 parents: ganeti-bytemark
392 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
394 address: 5.153.231.18
395 parents: ganeti-bytemark
396 hostgroups: computers, general, kvmdomains, stretch, service, apache-https, apache2-hosts, heavy-exim, systemd-timesyncd
398 address: 5.153.231.19
399 parents: ganeti-bytemark
400 hostgroups: computers, general, kvmdomains, buster, hassrvfs, systemd-timesyncd
402 address: 5.153.231.20
403 parents: ganeti-bytemark
404 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
406 address: 5.153.231.22
407 parents: ganeti-bytemark
408 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
410 address: 5.153.231.23
411 parents: ganeti-bytemark
412 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
414 address: 5.153.231.25
415 parents: ganeti-bytemark
416 hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
418 address: 5.153.231.26
419 parents: ganeti-bytemark
420 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
422 address: 5.153.231.27
423 parents: ganeti-bytemark
424 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, porterbox, systemd-timesyncd
426 address: 5.153.231.28
427 parents: ganeti-bytemark
428 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
430 address: 5.153.231.29
431 parents: ganeti-bytemark
432 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
434 address: 5.153.231.30
435 parents: ganeti-bytemark
436 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
438 address: 5.153.231.32
439 parents: ganeti-bytemark
440 hostgroups: computers, pybuildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
442 address: 5.153.231.33
443 parents: ganeti-bytemark
444 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
446 address: 5.153.231.34
447 parents: ganeti-bytemark
448 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
450 address: 5.153.231.36
451 parents: ganeti-bytemark
452 hostgroups: computers, service, kvmdomains, buster, autofs, nfs-client, systemd-timesyncd
454 address: 5.153.231.38
455 parents: ganeti-bytemark
456 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
458 address: 5.153.231.39
459 parents: ganeti-bytemark
460 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
462 address: 5.153.231.40
463 parents: ganeti-bytemark
464 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
466 address: 5.153.231.42
467 parents: ganeti-bytemark
468 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd
470 address: 5.153.231.43
471 parents: ganeti-bytemark
472 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
474 address: 5.153.231.44
475 parents: ganeti-bytemark
476 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
479 address: 5.153.231.41
481 hostgroups: computers, service, stretch, hassrvfs, dl380, manyprocesses, apache2-hosts
482 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
487 address: 200.17.202.197
489 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https
494 address: 150.203.164.39
496 hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, stretch, apache-https
498 address: 150.203.164.60
500 hostgroups: secondary-IPs, rsyncd-hosts
502 address: 150.203.164.61
504 hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
506 address: 150.203.164.62
508 hostgroups: secondary-IPs
512 address: 217.196.149.227
514 hostgroups: computers, stretch, service, sw-raid, drbd-hosts
516 address: 217.196.149.228
518 hostgroups: computers, stretch, service, sw-raid, drbd-hosts
520 address: 217.196.149.235
522 hostgroups: notacomputer
525 address: 217.196.149.230
526 parents: ganeti-conova
527 hostgroups: computers, hassrvfs, buildd, stretch
529 address: 217.196.149.231
530 parents: ganeti-conova
531 hostgroups: computers, hassrvfs, buildd, stretch
533 address: 217.196.149.236
534 parents: ganeti-conova
535 hostgroups: computers, hassrvfs, porterbox, stretch
538 address: 185.69.161.161
540 hostgroups: computers, service, stretch, r540, manyprocesses, apache2-hosts, apache-https, systemd-timesyncd
542 address: 217.196.149.232
543 hostgroups: secondary-IPs
546 address: 217.196.149.233
547 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
550 address: 217.196.149.234
551 hostgroups: secondary-IPs, rsyncd-hosts
553 schmelzer-syncproxy4-eu:
554 address: 217.196.149.237
555 hostgroups: secondary-IPs, rsyncd-hosts, https-service
562 hostgroups: computers, service, dl360, stretch, drbd-hosts
566 hostgroups: computers, service, dl360, stretch, drbd-hosts
570 hostgroups: notacomputer
574 parents: ganeti-csail
575 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, apache2-hosts, rsyncd-hosts, apache-https, systemd-timesyncd
578 parents: ganeti-csail
579 hostgroups: computers, buildd, hassrvfs, kvmdomains, buster, systemd-timesyncd
582 parents: ganeti-csail
583 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
586 parents: ganeti-csail
587 hostgroups: computers, service, kvmdomains, hassrvfs, stretch, apache2-hosts, apache-https, systemd-timesyncd
590 parents: ganeti-csail
591 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd, varnish-hosts
594 parents: ganeti-csail
595 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, uploadqueue, queued, systemd-timesyncd
599 address: 93.94.130.161
601 hostgroups: computers, stretch, dl380, nfs-client, hassrvfs
605 address: 128.61.240.73
607 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror
611 address: 194.177.211.194
613 hostgroups: notacomputer
615 address: 194.177.211.195
617 hostgroups: computers, service, dl380, stretch, drbd-hosts
619 address: 194.177.211.196
621 hostgroups: computers, service, dl380, stretch, drbd-hosts
623 address: 194.177.211.200
625 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
627 address: 194.177.211.201
629 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
631 address: 194.177.211.202
633 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, xinetd-hosts, systemd-timesyncd
635 address: 194.177.211.203
636 parents: ganeti-grnet
637 hostgroups: computers, pybuildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
639 address: 194.177.211.205
640 parents: ganeti-grnet
641 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, postgres96-hosts, apache2-hosts, apache-https, systemd-timesyncd
643 address: 194.177.211.206
644 parents: ganeti-grnet
645 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, systemd-timesyncd
647 address: 194.177.211.207
648 parents: ganeti-grnet
649 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, rsyncd-hosts, systemd-timesyncd
651 address: 194.177.211.208
652 parents: ganeti-grnet
653 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs
654 static-master-grnet-01:
655 address: 194.177.211.209
656 parents: ganeti-grnet
657 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, hassrvfs
663 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch
667 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
671 hostgroups: secondary-IPs
672 mirror-isc-syncproxy:
675 hostgroups: secondary-IPs, rsyncd-hosts
679 address: 185.17.185.177
681 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
683 address: 185.17.185.178
685 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
687 address: 185.17.185.179
689 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
691 address: 185.17.185.180
693 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
695 address: 185.17.185.187
697 hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, postgres96-hosts, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts
699 address: 185.17.185.185
701 hostgroups: secondary-IPs, https-service
704 address: 185.17.185.189
706 hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, apache2-hosts
708 address: 185.17.185.181
710 hostgroups: computers, service, stretch, dl180
712 address: 185.17.185.182
714 hostgroups: computers, service, stretch, dl180
718 address: 82.195.75.109
720 hostgroups: computers, service, dl380, acpid-hosts, stretch, manyprocesses
722 address: 82.195.75.103
724 hostgroups: computers, service, dl380, acpid-hosts, stretch, manyprocesses
726 address: 82.195.75.69
728 hostgroups: computers, service, stretch, r540, drbd-hosts, manyprocesses
730 address: 82.195.75.70
732 hostgroups: computers, service, stretch, r540, drbd-hosts, manyprocesses
734 address: 82.195.75.100
735 parents: ganeti-manda
736 hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs, systemd-timesyncd
738 address: 82.195.75.110
739 parents: ganeti-manda
740 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload, systemd-timesyncd
742 address: 82.195.75.98
743 parents: ganeti-manda
744 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
746 address: 82.195.75.106
747 parents: ganeti-manda
748 hostgroups: computers, service, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch, systemd-timesyncd
750 address: 82.195.75.105
751 parents: ganeti-manda
752 hostgroups: computers, service, bind9-hosts, kvmdomains, buster, systemd-timesyncd
754 address: 82.195.75.104
755 parents: ganeti-manda
756 hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts, hassrvfs, systemd-timesyncd
758 address: 82.195.75.107
759 parents: ganeti-manda
760 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https, systemd-timesyncd
762 address: 82.195.75.71
764 hostgroups: notacomputer
766 address: 82.195.75.112
767 parents: ganeti-manda
768 hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts, systemd-timesyncd
770 address: 82.195.75.114
771 parents: ganeti-manda
772 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
774 address: 82.195.75.91
775 parents: ganeti-manda
776 hostgroups: computers, service, kvmdomains, stretch, bind9-hosts, systemd-timesyncd
778 address: 82.195.75.92
779 parents: ganeti-manda
780 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
782 address: 82.195.75.65
783 parents: ganeti-manda
784 hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https, systemd-timesyncd
786 address: 82.195.75.66
788 hostgroups: computers, buildd, stretch, hassrvfs
790 address: 82.195.75.72
792 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
794 address: 82.195.75.74
796 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
798 address: 82.195.75.67
800 hostgroups: computers, buildd, stretch, hassrvfs
802 address: 82.195.75.93
803 parents: ganeti-manda
804 hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch, systemd-timesyncd
806 address: 82.195.75.68
807 parents: ganeti-manda
808 hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd
812 address: 148.100.88.22
814 hostgroups: computers, pybuildd, hassrvfs, buster, incomingmailrelayed
818 address: 140.211.166.200
820 hostgroups: computers, service, dl380, stretch
822 address: 140.211.166.201
824 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, apache-https
827 address: 140.211.166.194
829 hostgroups: computers, stretch, service, manyprocesses
831 address: 140.211.166.202
833 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
836 address: 140.211.166.195
838 hostgroups: computers, stretch, service, manyprocesses
840 address: 140.211.166.196
842 hostgroups: computers, hassrvfs, buildd, buster
846 address: 193.62.202.26
848 hostgroups: computers, service, stretch, dl380, nfs-client, autofs, postgres96-hosts, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts
850 address: 193.62.202.27
852 hostgroups: secondary-IPs, https-service
854 address: 193.62.202.28
856 hostgroups: computers, service, apache2-hosts, sw-raid, jessie, rsyncd-hosts, hasvarlogfs, multipath-hosts, nfs-server, varnish-hosts
857 contacts: tjrc1, dave
861 address: 212.211.132.250
862 parents: gw-scanplus-lobos
863 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror
865 address: 212.211.132.32
866 parents: gw-scanplus-villa
867 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror
871 address: 86.59.118.155
873 hostgroups: computers, buildd, stretch, sw-raid
875 address: 86.59.118.146
877 hostgroups: computers, buildd, buster, hassrvfs
879 address: 86.59.118.147
881 hostgroups: computers, buildd, stretch, hassrvfs
885 address: 154.57.0.251
886 parents: gw-skroutz1, gw-skroutz2
887 hostgroups: computers, stretch, service, sw-raid, hassrvfs, apache2-hosts
893 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
897 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
901 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
903 address: 209.87.16.10
905 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
908 address: 209.87.16.20
910 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
912 address: 209.87.16.21
914 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
916 address: 209.87.16.24
918 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
920 address: 209.87.16.25
922 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
924 address: 209.87.16.26
926 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
928 address: 209.87.16.27
930 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
932 address: 209.87.16.28
934 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, broken_https_default_vhost, systemd-timesyncd
936 address: 209.87.16.29
938 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
940 address: 209.87.16.30
942 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
944 address: 209.87.16.31
946 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
948 address: 209.87.16.32
950 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
952 address: 209.87.16.33
954 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
956 address: 209.87.16.34
958 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
960 address: 209.87.16.35
962 hostgroups: computers, general, apache2-hosts, kvmdomains, apache-https, stretch, systemd-timesyncd
964 address: 209.87.16.36
966 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, nfs-server, apache2-hosts, xinetd-hosts, apache-https, systemd-timesyncd
968 address: 209.87.16.37
970 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd
972 address: 209.87.16.38
974 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, nfs-client, apache2-hosts, autofs, apache-https, systemd-timesyncd
976 address: 209.87.16.39
978 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, heavy-exim, postgres96-hosts, hasvarlogfs, apache-https, spamd, nfs-server, systemd-timesyncd
980 address: 209.87.16.42
982 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
985 address: 209.87.16.43
987 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
989 address: 209.87.16.44
991 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd, postfix-hosts, postgres96-hosts, crazymanyprocesses
993 address: 209.87.16.45
995 hostgroups: notacomputer
997 address: 209.87.16.46
999 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https, broken_https_default_vhost
1001 address: 209.87.16.48
1002 parents: ubc-gateway
1003 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https
1005 address: 209.87.16.49
1006 parents: ubc-gateway
1007 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
1011 # address: 128.101.240.212
1013 # hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1015 address: 128.101.240.212
1017 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch
1019 address: 128.101.240.215
1021 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
1023 address: 128.101.240.216
1025 hostgroups: secondary-IPs, rsyncd-hosts
1027 address: 128.101.240.217
1029 hostgroups: secondary-IPs
1033 address: 143.106.167.124
1035 hostgroups: computers, stretch, service, manyprocesses
1037 address: 143.106.167.121
1039 hostgroups: computers, hassrvfs, buildd, stretch
1041 address: 143.106.167.122
1043 hostgroups: computers, porterbox, hassrvfs, stretch
1047 address: 130.89.148.10
1049 hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs
1051 address: 130.89.148.12
1053 hostgroups: secondary-IPs
1055 address: 130.89.148.13
1057 hostgroups: secondary-IPs
1059 address: 130.89.148.14
1061 hostgroups: secondary-IPs
1063 address: 130.89.148.78
1065 hostgroups: computers, service, stretch, r540, manyprocesses, incomingmailrelayed2025
1069 address: 144.32.168.74
1071 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1073 address: 144.32.168.75
1075 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1077 address: 144.32.168.76
1079 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1083 address: 80.245.147.46
1085 hostgroups: computers, buildd, hassrvfs, stretch
1087 address: 80.245.147.40
1089 hostgroups: computers, porterbox, hassrvfs, stretch
1093 address: 133.242.99.74
1095 hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror
1098 # {{{ ############################# host groups #############################
1103 layer3-infrastructure:
1104 alias: Layer 3 Devices
1106 alias: Systems that are not really systems. Yeah :)
1113 alias: developer accessible porter machines
1115 alias: machines running services
1117 alias: buildd systems
1119 alias: buildd systems running pybuildd
1121 alias: general purpose developer accessible machines
1124 alias: HP DL380 hosts
1127 alias: HP DL360 hosts
1130 alias: HP BL460 blades
1133 alias: HP BL460 Gen8 blades
1136 alias: HP blades at bytemark
1145 alias: Hosts with Linux software raid
1148 alias: Hosts with Adaptec AACraid
1151 alias: Dell PowerEdge 1950 hosts
1154 alias: Dell PowerEdge R540 hosts
1158 alias: Hosts running jessie
1160 alias: Hosts running stretch
1162 alias: Hosts running buster
1165 alias: Hosts that are KVM domains
1169 alias: hosts running drbd
1171 alias: hosts running multipathd
1173 alias: hosts running postfix instead of exim
1176 alias: "hosts running the full mail stuff, including clamav and postgrey"
1179 alias: "relays usually are hosts with more exim processes"
1182 alias: "hosts running spamassassin as daemon"
1185 alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1188 alias: hosts running apache2
1191 alias: hosts running bind9
1194 alias: hosts running amavis
1197 alias: hosts providing rsync services
1200 alias: hosts providing services via xinetd
1203 alias: hosts running postgres96
1206 alias: hosts not running ulogd
1209 alias: hosts running acpid
1212 alias: hosts that are an anonymous ftp uploadqueue
1215 alias: hosts running queued
1218 alias: hosts running bosserver
1221 alias: hosts with https services
1224 alias: https service for secondary addresses
1226 broken_https_default_vhost:
1227 alias: https default vhost does not say 200 OK
1230 alias: hosts with lots and lots of (kernel) processes
1232 alias: hosts with stupidly lots of processes
1234 alias: hosts running varnish
1237 alias: hosts running haproxy
1240 alias: "host providing https on the standard port via haproxy"
1244 alias: hosts which are not being backed up with bacula
1248 alias: hosts mounting filesystems using NFS
1251 alias: hosts serving filesystems using NFS
1254 alias: hosts running the automounter
1257 alias: Vms running systemd-timesyncd
1261 alias: "hosts on which high load is normal"
1265 alias: secondary IP addresses
1269 alias: hosts with a /boot filesystem
1272 alias: hosts with a /srv filesystem
1275 alias: hosts with a /var/log filesystem
1278 incomingmailrelayed:
1279 alias: incoming mail needs to go through a mail relay
1282 incomingmailrelayed2025:
1283 alias: incoming mail needs to go through a mail relay
1288 alias: machines that can not run samhain
1291 alias: machines with high round trip times
1294 # alias: nodes that run OpenStack compute
1296 openstack-controller:
1297 alias: nodes that run OpenStack controller
1301 alias: hosts that are security mirrors
1305 alias: hosts whose MQ is broken
1308 # {{{ ############################# servicegroups #############################
1311 alias: diskusage checks
1313 alias: buildd checks
1317 alias: backup checks
1319 alias: kernel checks
1321 alias: apt upgrade status
1323 alias: samhain integrity status
1328 servicegroup_members: apt, kernel, samhain
1332 alias: rabbitMQ stuff
1334 # {{{ ############################# services #############################
1336 # {{{ ### basic networking
1339 check: "check_ping!350.0,20%!600.0,40%"
1340 hostgroups: pingable
1341 excludehostgroups: layer3-infrastructure, high-RTT
1343 max_check_attempts: 4
1347 check: "check_ping!600.0,20%!900.0,40%"
1348 hostgroups: high-RTT
1350 max_check_attempts: 4
1354 check: "check_ping!2000.0,60%!3000.0,80%"
1355 hostgroups: layer3-infrastructure
1357 max_check_attempts: 4
1360 name: network - v6 gw
1361 nrpe: "/usr/lib/nagios/plugins/dsa-check-ipv6-default-gw"
1362 hostgroups: computers
1365 # {{{ ### disk usage
1367 name: disk usage - all
1368 servicegroups: diskspace
1369 nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
1370 hostgroups: computers
1371 excludehosts: sibelius
1373 name: disk usage - all
1374 servicegroups: diskspace
1375 nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
1379 name: disk usage on /
1380 servicegroups: diskspace
1381 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1382 hostgroups: computers
1384 name: disk usage on /boot
1385 servicegroups: diskspace
1386 nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1387 hostgroups: hasbootfs
1389 name: disk usage on /srv
1390 servicegroups: diskspace
1391 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
1392 hostgroups: hassrvfs
1394 name: disk usage on /var/lib/postgresql
1395 servicegroups: diskspace
1396 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1397 hosts: sibelius, buxtehude, lw07, fasolo
1399 name: disk usage on /var/log
1400 servicegroups: diskspace
1401 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1402 hostgroups: hasvarlogfs
1404 name: disk usage on /var/spool/postfix
1405 servicegroups: diskspace
1406 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1409 name: disk usage on /srv/mirrors
1410 servicegroups: diskspace
1411 nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1414 name: disk usage on /srv/snapshot.debian.org
1415 servicegroups: diskspace
1416 nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1419 name: disk usage on /srv/farm-snapshot/farm-2017-0
1420 servicegroups: diskspace
1421 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-0"
1424 name: disk usage on /srv/farm-snapshot/farm-2017-1
1425 servicegroups: diskspace
1426 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-1"
1429 name: disk usage on /srv/farm-snapshot/farm-2017-2
1430 servicegroups: diskspace
1431 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-2"
1434 name: disk usage on /srv/farm-snapshot/farm-2017-3
1435 servicegroups: diskspace
1436 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-3"
1439 name: disk usage on /srv/farm-snapshot/farm-2017-4
1440 servicegroups: diskspace
1441 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-4"
1444 name: disk usage on /srv/farm-snapshot/farm-2017-5
1445 servicegroups: diskspace
1446 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-5"
1449 name: disk usage on /srv/farm-snapshot/farm-2017-6
1450 servicegroups: diskspace
1451 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-6"
1454 name: disk usage on /srv/farm-snapshot/farm-2017-7
1455 servicegroups: diskspace
1456 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-7"
1459 name: disk usage on /srv/ftp-master.debian.org
1460 servicegroups: diskspace
1461 nrpe: "/usr/lib/nagios/plugins/check_disk 93 96 /srv/ftp-master.debian.org"
1464 name: disk usage on /storage/snapshot-farm-1
1465 servicegroups: diskspace
1466 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-1"
1469 name: disk usage on /storage/snapshot-farm-2
1470 servicegroups: diskspace
1471 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-2"
1474 name: disk usage on /storage/snapshot-farm-3
1475 servicegroups: diskspace
1476 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-3"
1479 name: disk usage on /storage/snapshot-farm-4
1480 servicegroups: diskspace
1481 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-4"
1484 name: disk usage on /storage/snapshot-farm-90
1485 servicegroups: diskspace
1486 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-09"
1489 name: disk usage on /storage/snapshot-farm-10
1490 servicegroups: diskspace
1491 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-10"
1495 name: disk usage on nfs farm 1
1496 servicegroups: diskspace
1497 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-1"
1500 name: disk usage on nfs farm 2
1501 servicegroups: diskspace
1502 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-2"
1505 name: disk usage on nfs farm 3
1506 servicegroups: diskspace
1507 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-3"
1510 name: disk usage on nfs farm 4
1511 servicegroups: diskspace
1512 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-4"
1515 name: disk usage on nfs farm 09
1516 servicegroups: diskspace
1517 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-09"
1520 name: disk usage on nfs farm 10
1521 servicegroups: diskspace
1522 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-10"
1526 name: disk usage on /srv/morgue.debian.org/
1527 servicegroups: diskspace
1528 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org"
1531 name: disk usage on /srv/QNAP-big/
1532 servicegroups: diskspace
1533 nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/QNAP-big"
1536 name: disk usage on /srv/QNAP-tiny
1537 servicegroups: diskspace
1538 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/QNAP-tiny"
1544 name: setup - dsa config
1545 nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1546 hostgroups: computers
1549 name: setup - local hostname etc-hosts
1550 nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1551 hostgroups: computers
1558 nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1559 hostgroups: computers
1562 nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1563 hostgroups: computers
1564 excludehostgroups: highload
1567 nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1568 hostgroups: highload
1571 nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1572 hostgroups: computers
1574 name: processes - total
1575 nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1576 hostgroups: computers
1577 excludehostgroups: manyprocesses, crazymanyprocesses
1579 name: processes - total
1580 hostgroups: manyprocesses
1581 nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
1583 name: processes - total
1584 hostgroups: crazymanyprocesses
1585 nrpe: "/usr/lib/nagios/plugins/check_procs 15000 25000"
1587 name: free memory - mb
1588 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m mb"
1589 hostgroups: computers
1591 name: free memory - percent
1592 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m pct"
1593 hostgroups: computers
1595 name: process - getty
1596 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1597 hostgroups: computers
1600 name: processes - zombies
1601 nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1602 hostgroups: computers
1604 name: system - available entropy
1605 nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1606 event_handler: dsa_event_handler_restart_ekey
1607 hostgroups: computers
1609 name: system - filesystem check
1610 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1613 hostgroups: computers
1618 servicegroups: backup
1619 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1620 hostgroups: computers
1621 excludehosts: backuphost, storace
1623 max_check_attempts: 2
1626 name: backup server config
1627 servicegroups: backup
1628 nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1631 max_check_attempts: 2
1634 name: backup - bacula - last backup
1635 servicegroups: backup
1636 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1638 hostgroups: computers
1639 excludehostgroups: buildd, pybuildd, porterbox, no-bacula
1643 name: backup - bacula - last full backup
1644 servicegroups: backup
1645 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1647 hostgroups: computers
1648 excludehostgroups: buildd, pybuildd, porterbox, no-bacula
1652 name: process - bacula-dir
1653 servicegroups: backup
1654 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -fP -c /etc/bacula/bacula-dir.conf'"
1657 name: process - bacula-fd
1658 servicegroups: backup
1659 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1660 hostgroups: computers
1663 name: network backup status - draghi
1664 servicegroups: backup
1665 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 2h /home/debbackup/nagios-status"
1670 name: process - acc.umu.se backup
1671 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1676 name: running kernel
1677 servicegroups: kernel
1678 nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1679 hostgroups: computers
1683 name: apt - security updates
1685 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1686 hostgroups: computers
1690 name: unexpected file - apt sources.list
1692 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /etc/apt/sources.list"
1693 hostgroups: computers
1695 name: upgraded libraries
1696 servicegroups: security
1697 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h"
1698 hostgroups: computers
1701 notification_interval: 10080
1703 name: installed firewall
1704 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1705 hostgroups: computers
1707 name: puppetized firewall
1708 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1709 hostgroups: computers
1711 name: process - ulogd
1712 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1713 hostgroups: computers
1716 name: process - samhain
1717 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1718 hostgroups: computers
1719 excludehostgroups: brokensamhain
1722 servicegroups: samhain
1723 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1724 hostgroups: computers
1725 depends: process - samhain
1728 excludehostgroups: brokensamhain
1730 name: processes - samhain zombies
1731 nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1732 event_handler: dsa_event_handler_restart_samhain
1733 hostgroups: computers
1734 excludehostgroups: brokensamhain
1738 name: process - syslog-ng
1739 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -F'"
1740 hostgroups: computers
1743 name: remote logging on lotti
1744 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1746 hostgroups: computers
1748 name: remote logging on loghost-grnet-01
1749 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1750 runfrom: loghost-grnet-01
1751 hostgroups: computers
1753 name: remote logging on loghost-osuosl-01
1754 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1755 runfrom: loghost-osuosl-01
1756 hostgroups: computers
1760 name: process - sshd
1761 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1762 hostgroups: computers
1764 name: "network service - sshd"
1765 check: dsa_check_ssh
1766 hostgroups: computers
1767 depends: process - sshd
1769 notification_interval: 1440
1772 name: network service - nrpe
1773 check: check_tcp!5666
1774 hostgroups: computers
1775 max_check_attempts: -2
1776 notification_interval: 1440
1778 name: process - nrpe
1779 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1780 hostgroups: computers
1781 excludehostgroups: stretch, buster
1782 max_check_attempts: -1
1783 depends: network service - nrpe
1785 name: process - nrpe
1786 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -f'"
1787 hostgroups: stretch, buster
1788 max_check_attempts: -1
1789 depends: network service - nrpe
1792 name: process - munin-node
1793 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1794 hostgroups: computers
1796 name: network service - munin-node
1797 check: check_tcp!4949
1798 hostgroups: computers
1799 depends: process - munin-node
1802 name: process - ntpd
1803 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1804 hostgroups: computers
1805 excludehostgroups: systemd-timesyncd
1808 name: network service - ntp
1809 check: dsa_check_ntp
1810 hostgroups: computers
1811 excludehostgroups: systemd-timesyncd
1812 depends: process - ntpd
1815 name: system time synced
1816 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl -s"
1817 hostgroups: computers
1818 excludehostgroups: systemd-timesyncd
1821 name: system time synced
1822 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl"
1823 hostgroups: systemd-timesyncd
1828 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1829 hostgroups: computers
1832 name: process - irqbalance
1833 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
1834 hostgroups: computers
1835 excludehosts: harris
1838 name: process - cron
1839 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1840 hostgroups: computers
1843 name: process - ud-replicated
1844 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1845 hostgroups: computers
1848 name: MQ connection on rainier
1850 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1852 hostgroups: computers
1855 excludehostgroups: broken_mq
1857 name: MQ connection on rapoport
1859 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1861 hostgroups: computers
1864 excludehostgroups: broken_mq
1867 name: local resolver
1868 nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1869 hostgroups: computers
1872 name: process - unbound
1873 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1874 hostgroups: computers
1876 name: unbound trust anchors
1877 nrpe: "/usr/lib/nagios/plugins/dsa-check-unbound-anchors"
1878 hostgroups: computers
1882 name: process - uptimed
1883 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1884 hostgroups: computers
1886 name: process - udevd
1887 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1888 hostgroups: computers
1891 name: unexpected process - acpid
1892 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1893 hostgroups: computers
1894 excludehostgroups: acpid-hosts, kvmdomains
1897 name: process - xinetd
1898 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
1899 hostgroups: xinetd-hosts
1901 name: unwanted process - xinetd
1902 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1903 hostgroups: computers
1904 excludehostgroups: xinetd-hosts
1907 name: process - stunnel4 - puppet-ekeyd
1908 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1909 hostgroups: computers
1911 name: process - stunnel4 - puppet-ekeyd is crazy
1912 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-stunnel-sanity"
1913 hostgroups: computers
1914 excludehosts: czerny, grnet-node01, storace
1918 name: ganeti - job watcher paused
1919 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1920 hostgroups: computers
1922 name: unwanted process - openvpn
1923 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1924 hostgroups: computers
1927 name: unwanted process - gkrellmd
1928 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1929 hostgroups: computers
1931 name: unwanted process - rpc.statd
1932 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1933 hostgroups: computers
1934 excludehostgroups: nfs-client, nfs-server
1936 name: unwanted process - rpc.statd
1937 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1938 hostgroups: stretch, buster
1939 excludehosts: storace
1941 name: unwanted process - inetd
1942 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1943 hostgroups: computers
1946 name: unwanted process - snmpd
1947 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1948 hostgroups: computers
1952 name: "host SSL cert"
1953 nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1954 hostgroups: computers
1956 name: "host SSL cert - debian server"
1957 nrpe: "if [ -e /etc/ssl/debian/certs/thishost-server.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost-server.crt; else echo 'No thishost-server.crt on this host.'; fi"
1958 hostgroups: computers
1960 name: "host SSL cert - debian client"
1961 nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
1962 hostgroups: computers
1964 name: "host SSL cert - CA"
1965 nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt"
1969 nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
1970 hostgroups: computers
1972 name: SSL certs - LE
1974 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /srv/puppet.debian.org/from-letsencrypt"
1977 # {{{ HW health/raid
1979 name: process - mdadm monitor
1981 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1984 name: RAID - sw raid
1986 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1989 name: RAID - unexpected sw raid
1991 nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
1992 hostgroups: computers
1993 excludehostgroups: sw-raid
1996 name: HW - HP raid status
1998 nrpe: "if [ -e /var/cache/dsa/nagios/dsa-check-hpssacli ] ; then /usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/dsa-check-hpssacli ; else /usr/lib/nagios/plugins/dsa-check-hpacucli; fi"
2000 hostgroups: dl380, dl360, bl460, bl460g8, dl180
2002 name: HW - hpacucli status
2004 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
2009 # name: HW - edac status
2010 # nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
2011 # check_interval: 120
2012 #hostgroups: computers
2013 #excludehosts: villa, lobos
2015 name: HW - hpasmcli status
2016 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2018 hostgroups: dl380, dl360, bl460, bm-bl
2019 excludehosts: villa, lobos, storace, mirror-anu, sallinen
2021 name: HW - hpasmcli status
2022 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2026 name: HW - hpasmcli status
2027 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant --ignore-failed='PS2'"
2031 name: HW - hpasmcli status
2032 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2034 hosts: storace, sallinen
2036 name: HW - hpasmcli status
2037 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present --ps-no-redundant --ignore-failed='PS1'"
2041 name: HW - hpasmcli status
2042 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2047 name: RAID - aacraid
2049 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2055 nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2056 hostgroups: drbd-hosts
2058 name: HW - OpenManage status
2059 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage"
2060 hostgroups: pe1950, r540
2061 excludehosts: wieck, schumann
2063 name: HW - OpenManage status
2064 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0 -b bat_charge=0:0"
2065 hosts: wieck, schumann
2068 # {{{ ### mail stuff
2069 # {{{ exim processes and mailq
2071 name: process - exim
2072 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2073 hostgroups: computers
2074 excludehostgroups: postfix-hosts, mail-relay
2075 excludehosts: master, quantz, buxtehude
2077 name: process - exim
2078 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2079 hostgroups: mail-relay
2081 name: process - exim - total
2082 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2083 hostgroups: computers
2084 excludehostgroups: postfix-hosts
2085 excludehosts: master, quantz, buxtehude
2087 name: process - exim
2088 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2089 hosts: master, quantz, buxtehude
2092 nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2093 hostgroups: heavy-exim
2095 name: process - fail2ban
2096 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -C fail2ban-server"
2097 hostgroups: heavy-exim, heavy-postfix
2099 name: unwanted process - fail2ban
2100 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C fail2ban-server"
2101 hostgroups: computers
2102 excludehostgroups: heavy-exim, heavy-postfix
2106 name: process - clamav - clamd
2107 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2108 hostgroups: heavy-exim, heavy-postfix
2110 name: service - clamav
2111 nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2112 hostgroups: heavy-exim, heavy-postfix
2113 depends: process - clamav - clamd
2115 name: process - clamav - freshclam
2116 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --foreground=true'"
2117 hostgroups: heavy-exim, heavy-postfix
2119 name: unwanted process - clamav
2120 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2121 hostgroups: computers
2122 excludehostgroups: heavy-exim, heavy-postfix
2124 name: unwanted process - freshclam
2125 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2126 hostgroups: computers
2127 excludehostgroups: heavy-exim, heavy-postfix
2131 name: process - spamd - master
2132 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 5 --helper-home-dir'"
2134 excludehosts: picconi
2136 name: process - spamd - master
2137 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 20 --min-spare=5 --helper-home-dir'"
2140 name: process - spamd - master
2141 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 10 --helper-home-dir'"
2144 name: process - spamd - child
2145 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2148 depends: process - spamd - master
2151 name: unwanted process - spamd
2152 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2153 hostgroups: computers
2154 excludehostgroups: spamd
2155 excludehosts: bendel
2158 name: unwanted process - greylistd
2159 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2160 hostgroups: computers
2164 name: process - postgrey
2165 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2166 hostgroups: heavy-exim
2168 name: process - postgrey
2169 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2170 hostgroups: heavy-postfix
2173 name: unwanted process - postgrey
2174 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2175 hostgroups: computers
2176 excludehostgroups: heavy-postfix, heavy-exim
2179 name: process - amavis - master
2180 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2181 hostgroups: amavis-hosts
2183 name: process - amavis - all
2184 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2185 hostgroups: amavis-hosts
2186 depends: process - amavis - master
2189 name: unwanted process - amavis
2190 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2191 hostgroups: computers
2192 excludehostgroups: amavis-hosts
2195 name: process - weightd - master
2196 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2197 hostgroups: heavy-postfix
2199 name: process - weightd - cache
2200 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2201 hostgroups: heavy-postfix
2202 depends: process - weightd - master
2204 name: process - weightd - child
2205 nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2206 hostgroups: heavy-postfix
2207 depends: process - weightd - master
2210 name: unwanted process - policyd-weight
2211 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2212 hostgroups: computers
2213 excludehostgroups: heavy-postfix
2218 name: process - postfix - master
2219 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/sbin/master'"
2220 hostgroups: postfix-hosts
2223 name: process - postfix - qmgr
2224 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t unix -u'"
2225 hostgroups: postfix-hosts
2226 depends: process - postfix - master
2229 name: process - postfix - pickup
2230 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t unix -u -c'"
2231 hostgroups: postfix-hosts
2232 depends: process - postfix - master
2235 name: process - postfix - anvil
2236 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2237 hostgroups: postfix-hosts
2238 depends: process - postfix - master
2241 name: process - postfix - trivial-rewrite
2242 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2243 hostgroups: postfix-hosts
2244 depends: process - postfix - master
2246 name: process - postfix - proxymap
2247 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2248 hostgroups: postfix-hosts
2249 depends: process - postfix - master
2251 name: process - postfix - cleanup
2252 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2253 hostgroups: postfix-hosts
2254 depends: process - postfix - master
2256 name: process - postfix - local
2257 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2258 hostgroups: postfix-hosts
2259 depends: process - postfix - master
2262 name: network service local - smtps cert
2263 nrpe: "/usr/lib/nagios/plugins/check_smtp -H localhost -S -D 14"
2264 hostgroups: postfix-hosts
2265 depends: process - postfix - master
2268 # {{{ mail - network service
2270 name: network service - smtp
2271 check: dsa_check_smtp
2272 hostgroups: computers
2273 excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2274 depends: process - exim
2277 name: network service - smtp
2278 check: dsa_check_smtp
2279 hostgroups: postfix-hosts
2280 depends: process - postfix - master
2282 name: network service - submission
2283 check: dsa_check_smtp_port!587
2284 hostgroups: incomingmailrelayed
2285 depends: process - exim
2287 name: network service - smtp 2025
2288 check: dsa_check_smtp_port!2025
2289 hostgroups: incomingmailrelayed2025
2290 depends: process - exim
2293 # {{{ ### host specific services
2296 name: process - apache2 - master
2297 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2298 hostgroups: apache2-hosts
2300 name: process - apache2 - worker
2301 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2302 hostgroups: apache2-hosts
2303 depends: process - apache2 - master
2304 excludehosts: klecker
2306 name: process - apache2 - worker
2307 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
2309 depends: process - apache2 - master
2311 name: unwanted process - apache2
2312 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2313 hostgroups: computers
2314 excludehostgroups: apache2-hosts
2317 name: network service - http
2319 hostgroups: apache2-hosts
2320 excludehosts: klecker, casulana
2321 depends: process - apache2 - master
2323 name: network service - http
2325 depends: klecker:process - apache2 - master
2328 # keyserver on kaufmann
2330 name: network service - http keyserver
2331 check: dsa_check_http_port!11371
2333 depends: process - apache2 - master
2335 # https on various hosts
2337 name: network service - https
2339 hostgroups: apache-https
2340 excludehosts: menotti
2341 excludehostgroups: broken_https_default_vhost
2342 depends: "process - apache2 - master"
2345 name: network service - https
2347 hostgroups: https-service
2348 excludehostgroups: broken_https_default_vhost
2351 name: network service - https
2352 check: dsa_check_https_want_auth
2354 depends: "process - apache2 - master"
2357 name: network service - https
2358 check: dsa_check_https_any_status
2359 hostgroups: broken_https_default_vhost
2360 depends: "process - apache2 - master"
2363 name: network service - https cert
2364 check: dsa_check_cert!443
2365 hostgroups: apache-https, https-service, haproxy-https-host
2366 depends: network service - https
2369 name: unwanted network service - https
2370 check: dsa_check_port_closed!443
2371 hostgroups: apache2-hosts
2372 excludehostgroups: apache-https, haproxy-https-host
2377 name: process - haproxy - master
2378 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a '/usr/sbin/haproxy-systemd-wrapper'"
2379 hostgroups: haproxy-hosts
2381 name: process - haproxy - worker
2382 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1:15 -u haproxy -a '/usr/sbin/haproxy '"
2383 hostgroups: haproxy-hosts
2384 depends: process - haproxy - master
2386 name: network service - https
2388 hostgroups: haproxy-https-host
2389 depends: "process - haproxy - master"
2393 name: unwanted process - haproxy
2394 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C haproxy"
2395 hostgroups: computers
2396 excludehostgroups: haproxy-hosts
2400 name: process - varnish
2401 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1:15 -u vcache -a '/usr/sbin/varnishd -j unix,user=vcache -F -a '"
2402 hostgroups: varnish-hosts
2403 excludehostgroups: jessie
2405 name: unwanted process - varnish
2406 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C varnishd"
2407 hostgroups: computers
2408 excludehostgroups: varnish-hosts
2414 name: network service - ftp
2416 hostgroups: uploadqueue
2420 name: unwanted process - postgresql
2421 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2422 hostgroups: computers
2423 excludehostgroups: postgres96-hosts
2425 name: unwanted process - postgresql 9.0
2426 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2427 hostgroups: computers
2429 name: process - postgresql96 - master
2430 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.6/bin/postgres'"
2431 hostgroups: postgres96-hosts
2433 name: postgresql backups
2434 nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2435 hosts: storace, backuphost
2439 name: process - buildd
2440 servicegroups: buildd
2441 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2443 contact_groups: buildd
2445 name: process - buildd
2446 servicegroups: buildd
2447 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C python3 -a 'buildd.py'"
2448 hostgroups: pybuildd
2449 contact_groups: buildd
2451 name: processes - zombie schroot
2452 nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2453 hostgroups: buildd, pybuildd
2454 contact_groups: +buildd
2456 max_check_attempts: 24
2461 name: process - statd
2462 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2463 hostgroups: nfs-client, nfs-server
2464 excludehostgroups: stretch, buster
2466 name: process - nfsd
2467 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2468 hostgroups: nfs-server
2470 name: process - lockd
2471 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2472 hostgroups: nfs-server
2474 name: process - mountd
2475 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2476 hostgroups: nfs-server
2479 name: process - automount
2480 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2483 name: unwanted process - automount
2484 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2485 hostgroups: computers
2486 excludehostgroups: autofs
2490 name: mirror sync - bugs
2491 check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2493 servicegroups: mirror
2495 name: mirror sync - security
2496 check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2498 servicegroups: mirror
2500 name: mirror sync - packages
2501 check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2504 max_check_attempts: 5
2506 servicegroups: mirror
2508 name: mirror sync - snapshot
2509 check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2512 max_check_attempts: 5
2514 servicegroups: mirror
2516 name: mirror sync - debian archive backend
2517 check: "dsa_check_mirrorsync!debian.backend.mirrors.debian.org!debian/project/trace/master"
2520 max_check_attempts: 5
2522 servicegroups: mirror
2525 name: mirror static sync - bits
2526 check: "dsa_check_staticsync!bits.debian.org"
2528 servicegroups: mirror
2530 name: mirror static sync - network-test
2531 check: "dsa_check_staticsync_nossl!network-test.debian.org"
2533 servicegroups: mirror
2535 name: mirror static sync - appstream
2536 check: "dsa_check_staticsync!appstream.debian.org"
2538 servicegroups: mirror
2540 name: mirror static sync - blends
2541 check: "dsa_check_staticsync!blends.debian.org"
2543 servicegroups: mirror
2545 name: mirror static sync - d-i
2546 check: "dsa_check_staticsync!d-i.debian.org"
2548 servicegroups: mirror
2550 name: mirror static sync - debaday
2551 check: "dsa_check_staticsync!debaday.debian.net"
2553 servicegroups: mirror
2555 name: mirror static sync - debdeltas
2556 check: "dsa_check_staticsync_nossl!debdeltas.debian.net"
2558 servicegroups: mirror
2560 name: mirror static sync - dsa
2561 check: "dsa_check_staticsync!dsa.debian.org"
2563 servicegroups: mirror
2565 name: mirror static sync - lintian
2566 check: "dsa_check_staticsync!lintian.debian.org"
2568 servicegroups: mirror
2570 name: mirror static sync - mozilla
2571 check: "dsa_check_staticsync_nossl!mozilla.debian.net"
2573 servicegroups: mirror
2575 name: mirror static sync - news
2576 check: "dsa_check_staticsync!news.debian.net"
2578 servicegroups: mirror
2580 name: mirror static sync - incoming.ports
2581 check: "dsa_check_staticsync_nossl!incoming.ports.debian.org"
2583 servicegroups: mirror
2585 # name: mirror static sync - release
2586 # check: "dsa_check_staticsync!release.debian.org"
2588 # servicegroups: mirror
2590 name: mirror static sync - rtc
2591 check: "dsa_check_staticsync!rtc.debian.org"
2593 servicegroups: mirror
2595 name: mirror static sync - security-team
2596 check: "dsa_check_staticsync!security-team.debian.org"
2598 servicegroups: mirror
2600 name: mirror static sync - wnpp-by-tags
2601 check: "dsa_check_staticsync!wnpp-by-tags.debian.net"
2603 servicegroups: mirror
2605 name: mirror static sync - www.ports
2606 check: "dsa_check_staticsync!www.ports.debian.org"
2608 servicegroups: mirror
2610 name: mirror static sync - timeline
2611 check: "dsa_check_staticsync!timeline.debian.net"
2613 servicegroups: mirror
2615 name: mirror static sync - backports
2616 check: "dsa_check_staticsync!backports.debian.org"
2618 servicegroups: mirror
2620 name: mirror static sync - incoming
2621 check: "dsa_check_staticsync_nossl!incoming.debian.org"
2623 servicegroups: mirror
2625 name: mirror static sync - metadata.ftp-master
2626 check: "dsa_check_staticsync_nossl!metadata.ftp-master.debian.org"
2628 servicegroups: mirror
2630 name: mirror static sync - mirror-master
2631 check: "dsa_check_staticsync_nossl!mirror-master.debian.org"
2633 servicegroups: mirror
2635 name: mirror static sync - deb
2636 check: "dsa_check_staticsync_nossl!deb.debian.org"
2638 servicegroups: mirror
2640 name: mirror static sync - manpages
2641 check: "dsa_check_staticsync!manpages.debian.org"
2643 servicegroups: mirror
2646 name: mirror static sync - 10years
2647 check: "dsa_check_staticsync!10years.debconf.org"
2649 servicegroups: mirror
2651 name: mirror static sync - debconf0
2652 check: "dsa_check_staticsync!debconf0.debconf.org"
2654 servicegroups: mirror
2656 name: mirror static sync - debconf1
2657 check: "dsa_check_staticsync!debconf1.debconf.org"
2659 servicegroups: mirror
2661 name: mirror static sync - debconf2
2662 check: "dsa_check_staticsync!debconf2.debconf.org"
2664 servicegroups: mirror
2666 name: mirror static sync - debconf3
2667 check: "dsa_check_staticsync!debconf3.debconf.org"
2669 servicegroups: mirror
2671 name: mirror static sync - debconf4
2672 check: "dsa_check_staticsync!debconf4.debconf.org"
2674 servicegroups: mirror
2676 name: mirror static sync - debconf5
2677 check: "dsa_check_staticsync!debconf5.debconf.org"
2679 servicegroups: mirror
2681 name: mirror static sync - debconf6
2682 check: "dsa_check_staticsync!debconf6.debconf.org"
2684 servicegroups: mirror
2686 name: mirror static sync - debconf7
2687 check: "dsa_check_staticsync!debconf7.debconf.org"
2689 servicegroups: mirror
2691 name: mirror static sync - debconf16
2692 check: "dsa_check_staticsync!debconf16.debconf.org"
2694 servicegroups: mirror
2696 name: mirror static sync - es
2697 check: "dsa_check_staticsync!es.debconf.org"
2699 servicegroups: mirror
2701 name: mirror static sync - fr
2702 check: "dsa_check_staticsync!fr.debconf.org"
2704 servicegroups: mirror
2706 name: mirror static sync - miniconf10
2707 check: "dsa_check_staticsync!miniconf10.debconf.org"
2709 servicegroups: mirror
2711 name: mirror static sync - wiki
2712 check: "dsa_check_staticsync!wiki.debconf.org"
2714 servicegroups: mirror
2716 name: mirror static sync - www
2717 check: "dsa_check_staticsync!www.debconf.org"
2719 servicegroups: mirror
2723 name: process - named
2724 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
2725 hostgroups: bind9-hosts
2727 name: network service - dns
2729 hostgroups: bind9-hosts
2730 depends: process - named
2732 name: unwanted process - named
2733 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2734 hostgroups: computers
2735 excludehostgroups: bind9-hosts
2738 name: DNS SOA sync - debian.org
2739 check: "dsa_check_soas_add!denis.debian.org!debian.org"
2742 name: DNS SOA sync - debian.net
2743 check: "dsa_check_soas_add!denis.debian.org!debian.net"
2746 name: DNS SOA sync - debian.com
2747 check: "dsa_check_soas_add!denis.debian.org!debian.com"
2750 name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2751 check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2754 name: DNS SOA sync - debconf.net
2755 check: "dsa_check_soas_add!denis.debian.org!debconf.net"
2758 name: DNS SOA sync - debconf.org
2759 check: "dsa_check_soas_add!denis.debian.org!debconf.org"
2762 name: DNS SOA sync - debianday.org
2763 check: "dsa_check_soas_add!denis.debian.org!debianday.org"
2766 name: DNS SOA sync - dpkg.org
2767 check: "dsa_check_soas_add!denis.debian.org!dpkg.org"
2770 name: DNS - delegation and signature expiry
2772 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2775 name: DNS - security delegations
2777 remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2780 name: DNS - key coverage
2782 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2785 name: DNS - DS expiry
2787 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2790 name: DNS - zones signed properly
2792 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-signature-all"
2797 name: process - multipathd
2798 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u root -C multipathd -a '/sbin/multipathd'"
2799 hostgroups: multipath-hosts
2801 name: unwanted process - multipathd
2802 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C multipathd"
2803 hostgroups: computers
2804 excludehostgroups: multipath-hosts
2808 name: current chroots
2809 nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2810 hostgroups: porterbox
2816 # name: process - openstack - memcached
2817 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2818 # hostgroups: openstack-controller
2820 # name: process - openstack - glance-registry
2821 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2822 # hostgroups: openstack-controller
2824 # name: process - openstack - nova-api
2825 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2826 # hostgroups: openstack-controller
2828 # name: process - openstack - nova-compute
2829 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2830 # hostgroups: openstack-compute
2832 # name: process - openstack - nova-cert
2833 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2834 # hostgroups: openstack-controller
2836 # name: process - openstack - nova-conductor
2837 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2838 # hostgroups: openstack-controller
2840 # name: process - openstack - nova-consoleauth
2841 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2842 # hostgroups: openstack-controller
2844 # name: process - openstack - nova-scheduler
2845 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2846 # hostgroups: openstack-controller
2848 # name: process - openstack - nova-spicehtml5proxy
2849 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2850 # hostgroups: openstack-controller
2852 # name: process - openstack - neutron-server
2853 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2854 # hostgroups: openstack-controller
2858 name: system - all services running
2859 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-systemd-services"
2860 hostgroups: computers
2863 name: process - slapd
2864 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2867 name: network service - ldaps cert
2868 check: dsa_check_cert!636
2869 depends: process - slapd
2874 name: network service - finger
2877 depends: process - xinetd
2880 name: network service - rsync
2881 check: check_tcp!873
2882 hostgroups: rsyncd-hosts
2885 name: process - icinga
2886 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:90 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2890 name: process - debianqueued
2891 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2895 name: network service - gobby
2896 check: check_tcp!6523
2898 contact_groups: gobby
2901 name: network service - sip-tls cert - 443
2902 check: dsa_check_cert!443
2906 name: network service - sip-tls cert - 5061
2907 check: dsa_check_cert!5061
2911 name: freeradius process
2912 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u freerad -C freeradius -a '/usr/sbin/freeradius -xx'"
2917 name: puppetmaster cert
2918 nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2921 max_check_attempts: 2
2924 name: puppet - agent check
2925 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/puppet-agent"
2926 hostgroups: computers
2931 name: ping peer on mgmt network
2932 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.184.12 -w 50,10% -c 200,30%"
2933 hosts: conova-node01
2935 max_check_attempts: 4
2938 name: ping peer on mgmt network
2939 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.184.11 -w 50,10% -c 200,30%"
2940 hosts: conova-node02
2942 max_check_attempts: 4
2946 name: ping peer on mgmt network
2947 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.182.14 -w 50,10% -c 200,30%"
2950 max_check_attempts: 4
2953 name: ping peer on mgmt network
2954 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.182.13 -w 50,10% -c 200,30%"
2957 max_check_attempts: 4
2963 # vim: set ts=2 sw=2 et ai si fdm=marker: