add setoguchi
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-aql:
37     address: 141.170.2.17
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-bytemark:
41     address: 89.16.160.116
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-c3sl:
45     address: 200.17.202.254
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-cecsit:
49     address: 150.203.164.38
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-arm:
53     address: 213.104.121.213
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-brown:
57     address: 138.16.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-carnet:
61     address: 161.53.160.1
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-conova:
65     address: 217.196.149.238
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-csail:
69     address: 128.31.0.1
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72   gw-dgi:
73     address: 93.94.132.102
74     parents: gw-ubcece
75     hostgroups: layer3-infrastructure
76     contacts: bzed
77   gw-freenet:
78     address: 62.104.23.249
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-linaro:
102     address: 64.28.108.36
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-man-da:
106     address: 82.195.75.126
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-marist:
110     address: 148.100.88.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-osuosl:
114     address: 140.211.166.1
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-rapidswitch:
118     address: 193.201.200.129
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121   gw-sakura:
122     address: 133.242.99.65
123     parents: gw-ubcece
124     hostgroups: layer3-infrastructure
125   gw-sanger:
126     address: 193.62.202.20
127     parents: gw-ubcece
128     hostgroups: layer3-infrastructure
129     contacts: tjrc1, dave
130   gw-scanplus-lobos:
131     address: 212.211.132.249
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-scanplus-villa:
135     address: 212.211.132.1
136     parents: gw-ubcece
137     hostgroups: layer3-infrastructure
138   gw-sil:
139     address: 86.59.118.145
140     parents: gw-ubcece
141     hostgroups: layer3-infrastructure
142   gw-ubcece:
143     address: 206.12.19.254
144     hostgroups: layer3-infrastructure
145     contacts: lfilipoz
146   gw-ugent:
147     address: 193.191.17.50
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-umn:
151     address: 128.101.240.222
152     parents: gw-ubcece
153     hostgroups: layer3-infrastructure
154   gw-unicamp:
155     address: 143.106.167.234
156     parents: gw-ubcece
157     hostgroups: layer3-infrastructure
158   gw-utwente:
159     address: 130.89.149.1
160     parents: gw-ubcece
161     hostgroups: layer3-infrastructure
162   gw-ynic:
163     # really janet, because ynic is stupid about firewalling
164     #address: 146.97.42.26
165     address: 146.97.41.66
166     parents: gw-ubcece
167     hostgroups: layer3-infrastructure
168   gw-zivit:
169     address: 80.245.144.3
170     parents: gw-ubcece
171     hostgroups: layer3-infrastructure
172   # }}}
173   # {{{ servers
174   # {{{ gw-1und1
175   powell:
176     address: 87.106.64.223
177     parents: gw-1und1
178     hostgroups: computers, service, acpid-hosts, wheezy
179   pkgmirror-1and1:
180     address: 213.165.95.4
181     parents: powell
182     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
183   babin:
184     address: 213.165.95.6
185     parents: powell
186     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
187   piu-slave-1und1-01:
188     address: 213.165.95.7
189     parents: powell
190     hostgroups: computers, service, kvmdomains, wheezy
191     contacts: holger
192   # }}}
193   # {{{ gw-1und1-sec
194   schumann:
195     address: 212.227.126.54
196     parents: gw-1und1-sec
197     hostgroups: computers, acpid-hosts, service, wheezy
198   chopin:
199     address: 195.20.242.124
200     parents: schumann
201     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
202   geo3:
203     address: 195.20.242.125
204     parents: schumann
205     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
206   soler:
207     address: 195.20.242.126
208     parents: schumann
209     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
210   wieck:
211     address: 195.20.242.89
212     parents: gw-1und1-sec
213     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
214   # }}}
215   # {{{ gw-accumu
216   pettersson:
217     address: 130.239.18.123
218     parents: gw-accumu
219     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
220   praetorius:
221     address: 130.239.18.121
222     parents: gw-accumu
223     hostgroups: computers, buildd, hassrvfs, wheezy
224   # }}}
225   # {{{ gw-aql
226   mips-aql-01:
227     address: 141.170.6.149
228     parents: gw-aql
229     hostgroups: computers, buildd, wheezy
230   mips-aql-02:
231     address: 141.170.6.150
232     parents: gw-aql
233     hostgroups: computers, buildd, wheezy
234   mipsel-aql-01:
235     address: 141.170.6.152
236     parents: gw-aql
237     hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
238   mipsel-aql-02:
239     address: 141.170.6.153
240     parents: gw-aql
241     hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
242   # }}}
243   # {{{ gw-arm
244   abel:
245     address: 217.140.96.56
246     parents: gw-arm
247     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
248   arnold:
249     address: 217.140.96.57
250     parents: gw-arm
251     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
252   arm-arm-01:
253     address: 217.140.96.58
254     parents: gw-arm
255     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
256   arm-arm-02:
257     address: 217.140.96.59
258     parents: gw-arm
259     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
260   harris:
261     address: 217.140.96.66
262     parents: gw-arm
263     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
264   hartmann:
265     address: 217.140.96.67
266     parents: gw-arm
267     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
268   hoiby:
269     address: 217.140.96.71
270     parents: gw-arm
271     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
272   ia64-arm-01:
273     address: 217.140.96.61
274     parents: gw-arm
275     hostgroups: computers, hasbootfs, hassrvfs, wheezy, buildd, broken_mq, sw-raid, acpid-hosts
276   # }}}
277   # {{{ gw-brown
278   franck:
279     address: 138.16.160.12
280     parents: gw-brown
281     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
282   # }}}
283   # {{{ gw-bytemark
284   bm-bl1:
285     address: 5.153.231.241
286     parents: gw-bytemark
287     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
288   bm-bl2:
289     address: 5.153.231.242
290     parents: gw-bytemark
291     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
292   bm-bl3:
293     address: 5.153.231.243
294     parents: gw-bytemark
295     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
296   bm-bl4:
297     address: 5.153.231.244
298     parents: gw-bytemark
299     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
300   bm-bl5:
301     address: 5.153.231.245
302     parents: gw-bytemark
303     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
304   bm-bl6:
305     address: 5.153.231.246
306     parents: gw-bytemark
307     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
308   bm-bl7:
309     address: 5.153.231.247
310     parents: gw-bytemark
311     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
312   bm-bl8:
313     address: 5.153.231.248
314     parents: gw-bytemark
315     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
316   bm-bl9:
317     address: 5.153.231.249
318     parents: gw-bytemark
319     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
320   bm-bl10:
321     address: 5.153.231.250
322     parents: gw-bytemark
323     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
324   bm-bl11:
325     address: 5.153.231.251
326     parents: gw-bytemark
327     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
328   bm-bl12:
329     address: 5.153.231.252
330     parents: gw-bytemark
331     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
332
333   milanollo:
334     address: 5.153.231.2
335     parents: gw-bytemark
336     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
337   milanollo2:
338     address: 5.153.231.9
339     parents: milanollo
340     hostgroups: secondary-IPs
341   picconi:
342     address: 5.153.231.3
343     parents: gw-bytemark
344     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
345   senfter:
346     address: 5.153.231.4
347     parents: gw-bytemark
348     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
349   adayevskaya:
350     address: 5.153.231.5
351     parents: gw-bytemark
352     hostgroups: computers, service, kvmdomains, wheezy
353   pejacevic:
354     address: 5.153.231.6
355     parents: gw-bytemark
356     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
357     contacts: holger
358   piu-slave-bm-a:
359     address: 5.153.231.7
360     parents: gw-bytemark
361     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
362     contacts: holger
363   binet:
364     address: 5.153.231.8
365     parents: gw-bytemark
366     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
367   bmdb1:
368     address: 5.153.231.10
369     parents: gw-bytemark
370     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
371   ganeti-bytemark:
372     address: 82.195.75.111
373     parents: gw-bytemark
374     hostgroups: notacomputer
375   coccia:
376     address: 5.153.231.11
377     parents: ganeti-bytemark
378     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts, apache-https, apache2-hosts
379   philp:
380     address: 5.153.231.13
381     parents: ganeti-bytemark
382     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
383   couper:
384     address: 5.153.231.14
385     parents: ganeti-bytemark
386     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
387   rainier:
388     address: 5.153.231.16
389     parents: ganeti-bytemark
390     hostgroups: computers, kvmdomains, wheezy, no-bacula
391   rapoport:
392     address: 5.153.231.15
393     parents: ganeti-bytemark
394     hostgroups: computers, kvmdomains, wheezy, no-bacula
395   delfin:
396     address: 5.153.231.17
397     parents: ganeti-bytemark
398     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
399   wuiet:
400     address: 5.153.231.18
401     parents: ganeti-bytemark
402     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
403   dinis:
404     address: 5.153.231.19
405     parents: ganeti-bytemark
406     hostgroups: computers, general, kvmdomains, wheezy
407   donizetti:
408     address: 5.153.231.20
409     parents: ganeti-bytemark
410     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
411   moszumanska:
412     address: 5.153.231.21
413     parents: ganeti-bytemark
414     contact_groups: alioth-admins
415     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
416     no-servicegroups: true
417   dillon:
418     address: 5.153.231.22
419     parents: ganeti-bytemark
420     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
421   ticharich:
422     address: 5.153.231.23
423     parents: ganeti-bytemark
424     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
425   petrova:
426     address: 5.153.231.25
427     parents: ganeti-bytemark
428     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
429   oyens:
430     address: 5.153.231.26
431     parents: ganeti-bytemark
432     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
433   barriere:
434     address: 5.153.231.27
435     parents: ganeti-bytemark
436     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
437   quantz:
438     address: 5.153.231.28
439     parents: ganeti-bytemark
440     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
441   portman:
442     address: 5.153.231.29
443     parents: ganeti-bytemark
444     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
445   paradis:
446     address: 5.153.231.30
447     parents: ganeti-bytemark
448     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
449   x86-bm-01:
450     address: 5.153.231.32
451     parents: ganeti-bytemark
452     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
453   gideon:
454     address: 5.153.231.34
455     parents: ganeti-bytemark
456     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
457   httpredir-bm-01:
458     address: 5.153.231.35
459     parents: ganeti-bytemark
460     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
461   lindsay:
462     address: 5.153.231.36
463     parents: ganeti-bytemark
464     hostgroups: computers, service, kvmdomains, jessie
465   # }}}
466   # {{{ gw-c3sl
467   santoro:
468     address: 200.17.202.197
469     parents: gw-c3sl
470     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
471     contacts: faw
472   # }}}
473   # {{{ gw-carnet
474   lebrun:
475     address: 193.198.184.10
476     parents: gw-carnet
477     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
478   schroeder:
479     address: 193.198.184.11
480     parents: gw-carnet
481     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
482   # }}}
483   # {{{ gw-cecsit
484   gluck:
485     address: 150.203.164.38
486     parents: gw-cecsit
487     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
488   # }}}
489   # {{{ gw-conova
490   sompek:
491     address: 217.196.149.225
492     parents: gw-conova
493     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
494   stadler:
495     address: 217.196.149.226
496     parents: gw-conova
497     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
498   # }}}
499   # {{{ gw-csail
500   senfl:
501     address: 128.31.0.51
502     parents: gw-csail
503     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
504   steffani:
505     address: 128.31.0.36
506     parents: gw-csail
507     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
508
509   csail-node01:
510     address: 128.31.0.16
511     parents: gw-csail
512     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
513   csail-node02:
514     address: 128.31.0.46
515     parents: gw-csail
516     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
517   ganeti-csail:
518     address: 128.31.0.49
519     parents: gw-bytemark
520     hostgroups: notacomputer
521
522   falla:
523     address: 128.31.0.65
524     parents: ganeti-csail
525     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
526   fischer:
527     address: 128.31.0.35
528     parents: ganeti-csail
529     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
530   mirror-csail:
531     address: 128.31.0.62
532     parents: ganeti-csail
533     hostgroups: computers, service, hassrvfs, kvmdomains, wheezy, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
534   x86-csail-01:
535     address: 128.31.0.50
536     parents: ganeti-csail
537     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
538   # }}}
539   # {{{ gw-dgi
540   storace:
541     address: 93.94.130.161
542     parents: gw-dgi
543     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
544   # }}}
545   # {{{ gw-gatech
546   sechter:
547     address: 128.61.240.73
548     parents: gw-gatech
549     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
550   # }}}
551   # {{{ gw-grnet
552   ganeti-grnet:
553     address: 194.177.211.194
554     parents: gw-grnet
555     hostgroups: notacomputer
556   grnet-node01:
557     address: 194.177.211.195
558     parents: gw-grnet
559     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
560   grnet-node02:
561     address: 194.177.211.196
562     parents: gw-grnet
563     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
564   rautavaara:
565     address: 194.177.211.199
566     parents: gw-grnet
567     hostgroups: computers, acpid-hosts, megaraid, service, wheezy
568   loghost-grnet-01:
569     address: 194.177.211.200
570     parents: gw-grnet
571     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
572   # }}}
573   # {{{ gw-isc
574   schein:
575     address: 149.20.20.6
576     parents: gw-isc
577     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
578   # }}}
579   # {{{ gw-leaseweb
580   lw01:
581     address: 185.17.185.177
582     parents: gw-leaseweb
583     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
584   lw02:
585     address: 185.17.185.178
586     parents: gw-leaseweb
587     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
588   lw03:
589     address: 185.17.185.179
590     parents: gw-leaseweb
591     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
592   lw04:
593     address: 185.17.185.180
594     parents: gw-leaseweb
595     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
596   lw07:
597     address: 185.17.185.187
598     parents: gw-leaseweb
599     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
600   lw08:
601     address: 185.17.185.189
602     parents: gw-leaseweb
603     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
604   #, apache2-hosts
605   # }}}
606   # {{{ gw-linaro
607   arm-linaro-01:
608     address: 64.28.108.83
609     parents: gw-linaro
610     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
611   arm-linaro-03:
612     address: 64.28.108.85
613     parents: gw-linaro
614     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
615   asachi:
616     address: 64.28.108.84
617     parents: gw-linaro
618     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
619   # }}}
620   # {{{ gw-karlsruhe
621   zemlinsky:
622     address: 129.143.160.6
623     parents: gw-karlsruhe
624     hostgroups: computers, buildd, wheezy
625     contacts: pkern
626   # }}}
627   # {{{ gw-man-da
628   ball:
629     address: 82.195.75.70
630     parents: gw-man-da
631     hostgroups: computers, buildd, hasbootfs, wheezy
632   # bartok TODO
633   czerny:
634     address: 82.195.75.109
635     parents: gw-man-da
636     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
637   clementi:
638     address: 82.195.75.103
639     parents: gw-man-da
640     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
641   bendel:
642     address: 82.195.75.100
643     parents: ganeti3
644     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
645   master:
646     address: 82.195.75.110
647     parents: ganeti3
648     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
649   mipsel-manda-01:
650     address: 82.195.75.72
651     parents: gw-man-da
652     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
653   mipsel-manda-02:
654     address: 82.195.75.74
655     parents: gw-man-da
656     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
657   fils:
658     address: 82.195.75.89
659     parents: ganeti3
660     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
661     contacts: christoph
662   fayrfax:
663     address: 82.195.75.82
664     parents: ganeti3
665     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
666     contacts: christoph
667   vento:
668     address: 82.195.75.98
669     parents: ganeti3
670     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
671   lully:
672     address: 82.195.75.99
673     parents: ganeti3
674     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
675   draghi:
676     address: 82.195.75.106
677     parents: ganeti3
678     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
679   geo1:
680     address: 82.195.75.105
681     parents: ganeti3
682     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
683   handel:
684     address: 82.195.75.104
685     parents: ganeti3
686     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
687   kaufmann:
688     address: 82.195.75.107
689     parents: ganeti3
690     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
691   stockhausen:
692     address: 82.195.75.108
693     parents: ganeti3
694     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
695   ganeti3:
696     address: 82.195.75.111
697     parents: gw-man-da
698     hostgroups: notacomputer
699   wilder:
700     address: 82.195.75.112
701     parents: ganeti3
702     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
703   mailly:
704     address: 82.195.75.114
705     parents: ganeti3
706     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
707   denis:
708     address: 82.195.75.91
709     parents: ganeti3
710     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
711   vogler:
712     address: 82.195.75.92
713     parents: ganeti3
714     hostgroups: computers, service, kvmdomains, wheezy
715   wolkenstein:
716     address: 82.195.75.65
717     parents: ganeti3
718     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
719   mipsel-manda-01:
720     address: 82.195.75.72
721     parents: gw-man-da
722     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
723   mipsel-manda-02:
724     address: 82.195.75.74
725     parents: gw-man-da
726     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
727   # }}}
728   # {{{ gw-marist
729   zani:
730     address: 148.100.88.22
731     parents: gw-marist
732     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
733   # }}}
734   # {{{ gw-osuosl
735   busoni:
736     address: 140.211.15.34
737     parents: gw-osuosl
738     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
739   byrd:
740     address: 140.211.166.20
741     parents: gw-osuosl
742     hostgroups: computers, service, dl380, acpid-hosts, wheezy
743   buxtehude:
744     address: 140.211.166.26
745     parents: byrd
746     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
747   # malo TODO
748   mayer:
749     address: 140.211.166.78
750     parents: gw-osuosl
751     hostgroups: computers, buildd, hasbootfs, wheezy
752 #  mayr:
753 #    address: 140.211.166.58
754 #    parents: gw-osuosl
755 #    hostgroups: computers, buildd, hasbootfs
756   merulo:
757     address: 140.211.166.46
758     parents: gw-osuosl
759     hostgroups: computers, porterbox, hasusrfs, wheezy
760   parry:
761     address: 140.211.15.153
762     parents: gw-osuosl
763     hostgroups: computers, wheezy, buildd, hassrvfs
764   partch:
765     address: 140.211.15.152
766     parents: gw-osuosl
767     hostgroups: computers, wheezy, hassrvfs, porterbox
768   rietz:
769     address: 140.211.166.43
770     parents: gw-osuosl
771     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
772     #, bosserver
773   rietz2:
774     address: 140.211.166.44
775     parents: rietz
776     hostgroups: secondary-IPs
777   # zee TODO
778   # }}}
779   # {{{ gs-rapidswitch
780   caballero:
781     address: 193.201.200.200
782     parents: gw-rapidswitch
783     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
784   # }}}
785   # {{{ gw-sanger
786   sibelius:
787     address: 193.62.202.28
788     parents: gw-sanger
789     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, wheezy, rsyncd-hosts, xinetd-hosts, hasvarlogfs
790     contacts: tjrc1, dave
791   smetana:
792     address: 193.62.202.29
793     parents: gw-sanger
794     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
795     contacts: tjrc1, dave
796   # }}}
797   # {{{ gw-scanplus
798   lobos:
799     address: 212.211.132.250
800     parents: gw-scanplus-lobos
801     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
802   villa:
803     address: 212.211.132.32
804     parents: gw-scanplus-villa
805     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
806   # }}}
807   # {{{ gw-sil
808   eder:
809     address: 86.59.118.151
810     parents: gw-sil
811     hostgroups: computers, porterbox, wheezy, hassrvfs
812   eysler:
813     address: 86.59.118.152
814     parents: gw-sil
815     hostgroups: computers, buildd, wheezy
816   eberlin:
817     address: 86.59.118.155
818     parents: gw-sil
819     hostgroups: computers, buildd, wheezy
820   # }}}
821   # {{{ gw-ubcece
822   sw-ubcece:
823     hostgroups: layer2-infrastructure
824     contacts: lfilipoz
825     pingable: false
826     check_command: dsa_check_always_ok
827   sw-ubcece-mcld:
828     hostgroups: layer2-infrastructure
829     parents: sw-ubcece
830     contacts: lfilipoz
831     pingable: false
832     check_command: dsa_check_always_ok
833   sw-ubcece-kais:
834     hostgroups: layer2-infrastructure
835     parents: sw-ubcece
836     contacts: lfilipoz
837     pingable: false
838     check_command: dsa_check_always_ok
839   spontini:
840     address: 206.12.19.14
841     parents: sw-ubcece-mcld
842     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
843     contacts: lfilipoz
844   ravel:
845     address: 206.12.19.5
846     parents: sw-ubcece-kais
847     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
848   dijkstra:
849     address: 206.12.19.218
850     parents: sw-ubcece-kais
851     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
852   pasquini:
853     address: 206.12.19.217
854     parents: sw-ubcece-kais
855     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
856   luchesi:
857     address: 206.12.19.214
858     parents: sw-ubcece-kais
859     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
860   tristano:
861     address: 206.12.19.213
862     parents: sw-ubcece-kais
863     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
864   boito:
865     address: 206.12.19.216
866     parents: sw-ubcece-kais
867     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
868   bertali:
869     address: 206.12.19.212
870     parents: sw-ubcece-kais
871     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
872   ganeti2:
873     address: 206.12.19.23
874     parents: sw-ubcece-kais
875     hostgroups: notacomputer
876   tchaikovsky:
877     address: 206.12.19.118
878     parents: ganeti2
879     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
880   brahms:
881     address: 206.12.19.115
882     parents: ganeti2
883     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
884   geo2:
885     address: 206.12.19.113
886     parents: ganeti2
887     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
888   # MSA 2000 (2012i)
889   giustini:
890     address: 192.168.2.6
891     parents: dijkstra
892     hostgroups: notacomputer
893     # unless we implement runfrom for host alive checks
894     pingable: false
895     check_command: dsa_check_always_ok
896   fano:
897     address: 206.12.19.110
898     parents: ganeti2
899     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
900     contacts: christoph
901   finzi:
902     address: 206.12.19.111
903     parents: ganeti2
904     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
905     contacts: christoph
906   gabrielli:
907     address: 206.12.19.17
908     parents: sw-ubcece-kais
909     hostgroups: computers, porterbox, wheezy
910   corelli:
911     address: 206.12.19.16
912     parents: sw-ubcece-kais
913     hostgroups: computers, buildd, wheezy
914   lucatelli:
915     address: 206.12.19.15
916     parents: sw-ubcece-kais
917     hostgroups: computers, buildd, wheezy
918   rossini:
919     address: 206.12.19.19
920     parents: sw-ubcece-kais
921     hostgroups: computers, dl585, acpid-hosts, service, wheezy
922   salieri:
923     address: 206.12.19.20
924     parents: sw-ubcece-kais
925     hostgroups: computers, dl585, acpid-hosts, service, wheezy
926   traetta:
927     address: 206.12.19.21
928     parents: sw-ubcece-kais
929     hostgroups: computers, dl585, acpid-hosts, service, wheezy
930 #  locke:
931 #    address: 206.12.19.120
932 #    parents: sw-ubcece-kais
933 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
934   lotti:
935     address: 206.12.19.121
936     parents: sw-ubcece-kais
937     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
938   nono:
939     address: 206.12.19.123
940     parents: traetta
941     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
942   reger:
943     address: 206.12.19.124
944     parents: ganeti2
945     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
946   danzi:
947     address: 206.12.19.125
948     parents: ganeti2
949     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
950   glinka:
951     address: 206.12.19.126
952     parents: traetta
953     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
954   tye:
955     address: 206.12.19.129
956     parents: ganeti2
957     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
958   elgar:
959     address: 206.12.19.130
960     parents: salieri
961     hostgroups: computers, service, kvmdomains, wheezy
962   gombert:
963     address: 206.12.19.132
964     parents: ganeti2
965     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
966   jenkins:
967     address: 206.12.19.133
968     parents: salieri
969     hostgroups: computers, service, kvmdomains, wheezy
970   blavet:
971     address: 206.12.19.134
972     parents: ganeti2
973     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
974   diabelli:
975     address: 206.12.19.136
976     parents: traetta
977     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
978   bizet:
979     address: 206.12.19.137
980     parents: ganeti2
981     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
982   lilburn:
983     address: 206.12.19.138
984     parents: ganeti2
985     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
986   popov:
987     address: 206.12.19.119
988     parents: ganeti2
989     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
990   beach:
991     address: 206.12.19.140
992     parents: ganeti2
993     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
994   ullmann:
995     address: 206.12.19.141
996     parents: ganeti2
997     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
998   sonntag:
999     address: 206.12.19.142
1000     parents: ganeti2
1001     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
1002   menotti:
1003     address: 206.12.19.143
1004     parents: ganeti2
1005     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
1006   muffat:
1007     address: 206.12.19.146
1008     parents: ganeti2
1009     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
1010   # }}}
1011   # {{{ gw-ugent
1012   # }}}
1013   # {{{ gw-umn
1014   saens:
1015     address: 128.101.240.212
1016     parents: gw-umn
1017     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1018   # }}}
1019   # {{{ gw-unicamp
1020   asgard:
1021     address: 143.106.167.145
1022     parents: gw-unicamp
1023     hostgroups: layer3-infrastructure
1024   prokofiev:
1025     address: 143.106.167.147
1026     parents: gw-unicamp
1027     hostgroups: computers, jessie, acpid-hosts, service
1028   powerpc-unicamp-01:
1029     address: 143.106.167.149
1030     parents: prokofiev
1031     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
1032   # }}}
1033   # {{{ gw-utwente
1034   klecker:
1035     address: 130.89.148.10
1036     parents: gw-utwente
1037     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
1038   klecker-ftp:
1039     address: 130.89.148.12
1040     parents: klecker
1041     hostgroups: secondary-IPs
1042   klecker-archive:
1043     address: 130.89.148.13
1044     parents: klecker
1045     hostgroups: secondary-IPs
1046   klecker-static:
1047     address: 130.89.148.14
1048     parents: klecker
1049     hostgroups: secondary-IPs
1050   # }}}
1051   # {{{ gw-ynic
1052   henze:
1053     address: 144.32.168.74
1054     parents: gw-ynic
1055     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1056   hasse:
1057     address: 144.32.168.75
1058     parents: gw-ynic
1059     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1060   antheil:
1061     address: 144.32.168.76
1062     parents: gw-ynic
1063     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1064   porpora:
1065     address: 144.32.168.78
1066     parents: gw-ynic
1067     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1068   poulenc:
1069     address: 144.32.168.77
1070     parents: gw-ynic
1071     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1072   #antheil:
1073   #  address: 217.140.96.60
1074   #  parents: gw-arm
1075   #  hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
1076   #hasse:
1077   #  address: 217.140.96.68
1078   #  parents: gw-arm
1079   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1080   #henze:
1081   #  address: 217.140.96.70
1082   #  parents: gw-arm
1083   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1084   # }}}
1085   # {{{ gw-zivit
1086   zandonai:
1087     address: 80.245.147.46
1088     parents: gw-zivit
1089     hostgroups: computers, buildd, hassrvfs, wheezy
1090   zelenka:
1091     address: 80.245.147.40
1092     parents: gw-zivit
1093     hostgroups: computers, porterbox, hassrvfs, wheezy
1094   # }}}
1095   # {{{ gw-sakura
1096   setoguchi:
1097     address: 133.242.99.74
1098     parents: gw-sakura
1099     hostgroups: computers, service, wheezy
1100   # }}}
1101
1102 # {{{ ############################# host groups #############################
1103 hostgroups:
1104   computers:
1105     alias: computers
1106     private: 1
1107   layer2-infrastructure:
1108     alias: Layer 2 Devices
1109     extinfo-icon_image: base/switch40.png
1110     extinfo-icon_image_alt: switch
1111   layer3-infrastructure:
1112     alias: Layer 3 Devices
1113     extinfo-icon_image: base/switch40.png
1114     extinfo-icon_image_alt: router
1115   notacomputer:
1116     alias: Systems that are not really systems.  Yeah :)
1117     private: 1
1118   freebsd:
1119     alias: freebsd
1120     private: 1
1121   armhf:
1122     alias: armhf
1123     private: 1
1124   sparc:
1125     alias: sparc
1126     private: 1
1127
1128   porterbox:
1129     alias: developer accessible porter machines
1130     extinfo-icon_image: base/debian.png
1131     extinfo-icon_image_alt: Debian GNU/Linux
1132     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1133   service:
1134     alias: machines running services
1135     extinfo-icon_image: base/debian.png
1136     extinfo-icon_image_alt: Debian GNU/Linux
1137     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1138   buildd:
1139     alias: buildd systems
1140     extinfo-icon_image: base/debian.png
1141     extinfo-icon_image_alt: Debian GNU/Linux
1142     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1143   general:
1144     alias: general purpose developer accessible machines
1145     extinfo-icon_image: base/debian.png
1146     extinfo-icon_image_alt: Debian GNU/Linux
1147     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1148
1149   dl380:
1150     alias: HP DL380 hosts
1151     private: 1
1152   dl385:
1153     alias: HP DL385 hosts
1154     private: 1
1155   dl360:
1156     alias: HP DL360 hosts
1157     private: 1
1158   bl460:
1159     alias: HP BL460 blades
1160     private: 1
1161   bm-bl:
1162     alias: HP blades at bytemark
1163     private: 1
1164   dl585:
1165     alias: HP DL385 hosts
1166     private: 1
1167   dl180:
1168     alias: HP DL180
1169     private: 1
1170   dl120:
1171     alias: HP DL120
1172     private: 1
1173   sw-raid:
1174     alias: Hosts with Linux software raid
1175     private: 1
1176   aacraid:
1177     alias: Hosts with Adaptec AACraid
1178     private: 1
1179   megaraid:
1180     alias: Hosts with LSI Logic MegaRAID
1181     private: 1
1182
1183   squeeze:
1184     alias: Hosts running squeeze
1185   wheezy:
1186     alias: Hosts running wheezy
1187   jessie:
1188     alias: Hosts running jessie
1189
1190   kvmdomains:
1191     alias: Hosts that are KVM domains
1192     private: 1
1193
1194   drbd-hosts:
1195     alias: hosts running drbd
1196   postfix-hosts:
1197     alias: hosts running postfix instead of exim
1198     private: 1
1199   heavy-exim:
1200     alias: "hosts running the full mail stuff, including clamav and postgrey"
1201     private: 1
1202   mail-relay:
1203     alias: "relays usually are hosts with more exim processes"
1204     private: 1
1205   spamd:
1206     alias: "hosts running spamassassin as daemon"
1207     private: 1
1208   heavy-postfix:
1209     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1210     private: 1
1211   apache2-hosts:
1212     alias: hosts running apache2
1213     private: 1
1214   jetty-hosts:
1215     alias: hosts running jetty
1216     private: 1
1217   bind9-hosts:
1218     alias: hosts running bind9
1219     private: 1
1220   # once every host runs unbound, do away with this group and check "computers" instead
1221   amavis-hosts:
1222     alias: hosts running amavis
1223     private: 1
1224   rsyncd-hosts:
1225     alias: hosts providing rsync services via xinetd
1226     private: 1
1227   xinetd-hosts:
1228     alias: hosts providing services via xinetd
1229     private: 1
1230   postgres91-hosts:
1231     alias: hosts running postgres91
1232     private: 1
1233   no-ulogd:
1234     alias: hosts not running ulogd
1235     private: 1
1236   acpid-hosts:
1237     alias: hosts running acpid
1238     private: 1
1239   uploadqueue:
1240     alias: hosts that are an anonymous ftp uploadqueue
1241     private: 1
1242   bosserver:
1243     alias: hosts running bosserver
1244     private: 1
1245   apache-https:
1246     alias: hosts with https services
1247     private: 1
1248   broken_https_default_vhost:
1249     alias: https default vhost does not say 200 OK
1250     private: 1
1251
1252   no-bacula:
1253     alias: hosts which are not being backed up with bacula
1254     private: 1
1255
1256   nfs-client:
1257     alias: hosts mounting filesystems using NFS
1258     private: 1
1259   nfs-server:
1260     alias: hosts serving filesystems using NFS
1261     private: 1
1262   autofs:
1263     alias: hosts running the automounter
1264     private: 1
1265
1266   highload:
1267     alias: "hosts on which high load is normal"
1268     private: 1
1269
1270   secondary-IPs:
1271     alias: secondary IP addresses
1272     private: 1
1273
1274   hasbootfs:
1275     alias: hosts with a /boot filesystem
1276     private: 1
1277   hassrvfs:
1278     alias: hosts with a /srv filesystem
1279     private: 1
1280   hasorgfs:
1281     alias: hosts with a /org filesystem
1282     private: 1
1283   hasvarfs:
1284     alias: hosts with a /var filesystem
1285     private: 1
1286   hasvarlogfs:
1287     alias: hosts with a /var/log filesystem
1288     private: 1
1289   hasusrfs:
1290     alias: hosts with a /usr filesystem
1291     private: 1
1292
1293   incomingmailrelayed:
1294     alias: incoming mail needs to go through a mail relay
1295     # i.e. no port 25
1296     private: 1
1297   incomingmailrelayed2025:
1298     alias: incoming mail needs to go through a mail relay
1299     # i.e. no port 25
1300     private: 1
1301
1302   brokensamhain:
1303     alias: machines that can not run samhain
1304     private: 1
1305   high-RTT:
1306     alias: machines with high round trip times
1307     private: 1
1308   ping-suckers:
1309     alias: machines that just suck at icmp
1310     private: 1
1311   alioth:
1312     alias: machines that just are just awkward
1313     private: 1
1314   openstack-compute:
1315     alias: nodes that run OpenStack compute
1316     private: 1
1317   openstack-controller:
1318     alias: nodes that run OpenStack controller
1319     private: 1
1320
1321   security_mirror:
1322     alias: hosts that are security mirrors
1323     private: 1
1324
1325   broken_mq:
1326     alias: hosts whose MQ is broken
1327     private: 1
1328 # }}}
1329 # {{{ ############################# servicegroups #############################
1330 servicegroups:
1331   diskspace:
1332     alias: diskusage checks
1333   buildd:
1334     alias: buildd checks
1335   raid:
1336     alias: raid checks
1337   backup:
1338     alias: backup checks
1339   kernel:
1340     alias: kernel checks
1341   apt:
1342     alias: apt upgrade status
1343   samhain:
1344     alias: samhain integrity status
1345   time:
1346     alias: time stuff
1347   security:
1348     alias: security
1349     servicegroup_members: apt, kernel, samhain
1350   MQ:
1351     alias: rabbitMQ stuff
1352 # }}}
1353 # {{{ ############################# services #############################
1354 services:
1355   # {{{ ### basic networking
1356   -
1357     name: PING
1358     check: "check_ping!350.0,20%!600.0,40%"
1359     hostgroups: pingable
1360     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1361     normal_check_interval: 5
1362     max_check_attempts: 4
1363     retry_check_interval: 1
1364   -
1365     name: PING
1366     check: "check_ping!600.0,20%!900.0,40%"
1367     hostgroups: high-RTT
1368     normal_check_interval: 5
1369     max_check_attempts: 4
1370     retry_check_interval: 1
1371   -
1372     name: PING
1373     check: "check_ping!600.0,90%!900.0,95%"
1374     hostgroups: ping-suckers
1375     normal_check_interval: 5
1376     max_check_attempts: 4
1377     retry_check_interval: 1
1378   -
1379     name: PING
1380     check: "check_ping!2000.0,60%!3000.0,80%"
1381     hostgroups: layer3-infrastructure
1382     normal_check_interval: 5
1383     max_check_attempts: 4
1384     retry_check_interval: 1
1385   # }}}
1386   # {{{ ### disk usage
1387   -
1388     name: disk usage - all
1389     servicegroups: diskspace
1390     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1391     hostgroups: computers
1392     excludehosts: sibelius
1393   -
1394     name: disk usage - all
1395     servicegroups: diskspace
1396     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x /srv/farm-snapshot/farm-misc 95 98"
1397     hosts: sibelius
1398
1399   -
1400     name: disk usage on /
1401     servicegroups: diskspace
1402     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1403     hostgroups: computers
1404   -
1405     name: disk usage on /boot
1406     servicegroups: diskspace
1407     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1408     hostgroups: hasbootfs
1409   -
1410     name: disk usage on /var
1411     servicegroups: diskspace
1412     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1413     hostgroups: hasvarfs
1414   -
1415     name: disk usage on /org
1416     servicegroups: diskspace
1417     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1418     hostgroups: hasorgfs
1419   -
1420     name: disk usage on /srv
1421     servicegroups: diskspace
1422     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1423     hostgroups: hassrvfs
1424   -
1425     name: disk usage on /tmp
1426     servicegroups: diskspace
1427     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1428     hosts: saens
1429   -
1430     name: disk usage on /usr
1431     servicegroups: diskspace
1432     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1433     hostgroups: hasusrfs
1434   -
1435     name: disk usage on /var/lib/postgresql
1436     servicegroups: diskspace
1437     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1438     hosts: sibelius, busoni, buxtehude, lw07
1439   -
1440     name: disk usage on /var/log
1441     servicegroups: diskspace
1442     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1443     hostgroups: hasvarlogfs
1444   -
1445     name: disk usage on /var/spool/postfix
1446     servicegroups: diskspace
1447     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1448     hosts: bendel
1449   -
1450     name: disk usage on /srv/mirrors
1451     servicegroups: diskspace
1452     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1453     hosts: sibelius
1454   -
1455     name: disk usage on /srv/snapshot.debian.org
1456     servicegroups: diskspace
1457     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1458     hosts: sibelius
1459   -
1460     name: disk usage on /srv/farm-snapshot/farm-1
1461     servicegroups: diskspace
1462     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-1"
1463     hosts: sibelius
1464   -
1465     name: disk usage on /srv/farm-snapshot/farm-2
1466     servicegroups: diskspace
1467     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2"
1468     hosts: sibelius
1469   -
1470     name: disk usage on /srv/farm-snapshot/farm-3
1471     servicegroups: diskspace
1472     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-3"
1473     hosts: sibelius
1474   -
1475     name: disk usage on /srv/farm-snapshot/farm-4
1476     servicegroups: diskspace
1477     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-4"
1478     hosts: sibelius
1479   -
1480     name: disk usage on /var/lib/postgresql/9.1
1481     servicegroups: diskspace
1482     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1483     hosts: franck
1484   -
1485     name: disk usage on /srv/ftp-master.debian.org
1486     servicegroups: diskspace
1487     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1488     hosts: franck
1489   -
1490     name: disk usage on /storage/snapshot-farm-1
1491     servicegroups: diskspace
1492     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1493     hosts: lw01
1494   -
1495     name: disk usage on /storage/snapshot-farm-2
1496     servicegroups: diskspace
1497     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1498     hosts: lw02
1499   -
1500     name: disk usage on /storage/snapshot-farm-3
1501     servicegroups: diskspace
1502     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1503     hosts: lw03
1504   -
1505     name: disk usage on /storage/snapshot-farm-4
1506     servicegroups: diskspace
1507     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1508     hosts: lw04
1509   -
1510     name: disk usage on /srv/morgue.debian.org/
1511     servicegroups: diskspace
1512     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1513     hosts: lw03
1514   # }}}
1515   # {{{ ### system
1516   # {{{ setup
1517   -
1518     name: setup - dsa config
1519     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1520     hostgroups: computers
1521     normal_check_interval: 60
1522     excludehostgroups: alioth
1523   -
1524     name: setup - local hostname etc-hosts
1525     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1526     hostgroups: computers
1527     normal_check_interval: 60
1528   # }}}
1529   # {{{ os health
1530   ####
1531   -
1532     name: users
1533     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1534     hostgroups: computers
1535   -
1536     name: load
1537     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1538     hostgroups: computers
1539     excludehostgroups: highload
1540   -
1541     name: load
1542     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1543     hostgroups: highload
1544   -
1545     name: uptime check
1546     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1547     hostgroups: computers
1548   -
1549     name: processes - total
1550     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1551     hostgroups: computers
1552   -
1553     name: swap usage - percent
1554     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1555     hostgroups: computers
1556   -
1557     name: swap usage - mb
1558     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1559     hostgroups: computers
1560   -
1561     name: process - getty
1562     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1563     hostgroups: computers
1564     excludehosts: zelenka, zandonai
1565     excludehostgroups: jessie
1566   -
1567     name: process - getty
1568     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1569     hostgroups: computers
1570     hostgroups: jessie
1571   -
1572     name: processes - zombies
1573     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1574     hostgroups: computers
1575   -
1576     name: system - available entropy
1577     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1578     event_handler: dsa_event_handler_restart_ekey
1579     hostgroups: computers
1580     excludehostgroups: freebsd
1581   -
1582     name: system - filesystem check
1583     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1584     normal_check_interval:  60
1585     retry_check_interval: 15
1586     hostgroups: computers
1587   # }}}
1588   # {{{ backup
1589   -
1590     name: backup
1591     servicegroups: backup
1592     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1593     hostgroups: computers
1594     excludehosts: storace
1595     normal_check_interval: 60
1596     max_check_attempts: 2
1597     retry_check_interval: 5
1598   -
1599     name: backup server config
1600     servicegroups: backup
1601     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1602     hosts: storace
1603     normal_check_interval: 60
1604     max_check_attempts: 2
1605     retry_check_interval: 5
1606   -
1607     name: backup - bacula - last backup
1608     servicegroups: backup
1609     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1610     runfrom: dinis
1611     hostgroups: computers
1612     excludehostgroups: buildd, porterbox, no-bacula
1613     normal_check_interval:  60
1614     retry_check_interval: 15
1615   -
1616     name: backup - bacula - last full backup
1617     servicegroups: backup
1618     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1619     runfrom: dinis
1620     hostgroups: computers
1621     excludehostgroups: buildd, porterbox, no-bacula
1622     normal_check_interval:  60
1623     retry_check_interval: 15
1624   -
1625     name: process - bacula-fd
1626     servicegroups: backup
1627     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1628     hostgroups: computers
1629     excludehostgroups: freebsd, alioth
1630   -
1631     name: process - bacula-fd
1632     servicegroups: backup
1633     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1634     hostgroups: freebsd
1635
1636   ####
1637   -
1638     name: process - acc.umu.se backup
1639     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1640     hosts: sibelius
1641   # }}}
1642   # {{{ security
1643   -
1644     name: running kernel
1645     servicegroups: kernel
1646     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1647     hostgroups: computers
1648     normal_check_interval: 60
1649     retry_check_interval: 5
1650   -
1651     name: apt - security updates
1652     servicegroups: apt
1653     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1654     hostgroups: computers
1655     normal_check_interval:  60
1656     retry_check_interval: 15
1657   -
1658     name: installed firewall
1659     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1660     hostgroups: computers
1661     excludehostgroups: freebsd
1662   -
1663     name: puppetized firewall
1664     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1665     hostgroups: computers
1666     excludehostgroups: freebsd
1667   -
1668     name: process - ulogd
1669     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1670     hostgroups: computers
1671     excludehostgroups: freebsd, sparc, jessie
1672   -
1673     name: process - ulogd
1674     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1675     hostgroups: jessie
1676     excludehostgroups: freebsd
1677   -
1678     name: unexpected process - ulogd
1679     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1680     hostgroups: freebsd, sparc
1681   ####
1682   -
1683     name: process - samhain
1684     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1685     hostgroups: computers
1686     excludehostgroups: brokensamhain
1687   -
1688     name: samhain
1689     servicegroups: samhain
1690     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1691     hostgroups: computers
1692     depends: process - samhain
1693     normal_check_interval: 60
1694     retry_check_interval: 5
1695     excludehostgroups: brokensamhain
1696   -
1697     name: processes - samhain zombies
1698     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1699     event_handler: dsa_event_handler_restart_samhain
1700     hostgroups: computers
1701     excludehostgroups: brokensamhain
1702   # }}}
1703   # {{{ logging
1704   -
1705     name: process - syslog-ng
1706     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1707     hostgroups: computers
1708     excludehostgroups: freebsd
1709
1710   -
1711     name: process - syslog-ng
1712     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1713     hostgroups: freebsd
1714
1715   -
1716     name: remote logging on lotti
1717     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1718     runfrom: lotti
1719     hostgroups: computers
1720     excludehostgroups: alioth
1721   -
1722     name: remote logging on lully
1723     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1724     runfrom: lully
1725     hostgroups: computers
1726     excludehostgroups: alioth
1727   -
1728     name: remote logging on loghost-grnet-01
1729     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1730     runfrom: loghost-grnet-01
1731     hostgroups: computers
1732     excludehostgroups: alioth
1733   # }}}
1734   # {{{ base service
1735   -
1736     name: process - sshd
1737     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1738     hostgroups: computers
1739   -
1740     name: "network service - sshd"
1741     check: dsa_check_ssh
1742     hostgroups: computers
1743     depends: process - sshd
1744     normal_check_interval:  60
1745     notification_interval: 1440
1746   ####
1747   -
1748     name: network service - nrpe
1749     check: check_tcp!5666
1750     hostgroups: computers
1751     max_check_attempts: -2
1752     notification_interval: 1440
1753   -
1754     name: process - nrpe
1755     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1756     hostgroups: computers
1757     max_check_attempts: -1
1758     depends: network service - nrpe
1759   ###
1760   -
1761     name: process - munin-node
1762     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1763     hostgroups: computers
1764     excludehostgroups: freebsd, armhf
1765   -
1766     name: process - munin-node
1767     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1768     hostgroups: freebsd
1769   -
1770     name: process - munin-node
1771     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1772     hostgroups: wheezy, jessie
1773     excludehostgroups: freebsd
1774   -
1775     name: network service - munin-node
1776     check: check_tcp!4949
1777     hostgroups: computers
1778     depends: process - munin-node
1779   ###
1780   -
1781     name: process - ntpd
1782     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1783     hostgroups: computers
1784     servicegroups: time
1785   -
1786     name: network service - ntp
1787     check: dsa_check_ntp
1788     hostgroups: computers
1789     depends: process - ntpd
1790     servicegroups: time
1791   ###
1792   -
1793     name: process - atd
1794     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1795     hostgroups: computers
1796   ###
1797   -
1798     name: process - cron
1799     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1800     hostgroups: computers
1801   ###
1802   -
1803     name: process - ud-replicated
1804     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1805     hostgroups: computers
1806     excludehostgroups: squeeze, freebsd, alioth
1807   -
1808     name: process - ud-replicated
1809     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1810     hostgroups: freebsd
1811   ###
1812   -
1813     name: process - monit
1814     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1815     hostgroups: squeeze
1816   -
1817     name: process - monit
1818     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1819     hostgroups: computers
1820     excludehostgroups: squeeze, alioth, jessie
1821   ###
1822   -
1823     name: MQ connection on rainier
1824     servicegroups: MQ
1825     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1826     runfrom: rainier
1827     hostgroups: computers
1828     normal_check_interval:  60
1829     retry_check_interval: 15
1830     excludehostgroups: alioth, broken_mq
1831   -
1832     name: MQ connection on rapoport
1833     servicegroups: MQ
1834     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1835     runfrom: rapoport
1836     hostgroups: computers
1837     normal_check_interval:  60
1838     retry_check_interval: 15
1839     excludehostgroups: alioth, broken_mq
1840   ###
1841   -
1842     name: local resolver
1843     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1844     hostgroups: computers
1845     normal_check_interval: 60
1846   -
1847     name: process - unbound
1848     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1849     hostgroups: computers
1850     excludehostgroups: alioth
1851   ###
1852   -
1853     name: process - uptimed
1854     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1855     hostgroups: computers
1856   ###
1857   -
1858     name: process - udevd
1859     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1860     hostgroups: computers
1861     excludehostgroups: freebsd, jessie
1862   -
1863     name: process - udevd
1864     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1865     hostgroups: jessie
1866   -
1867     name: unexpected process - udev
1868     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1869     hostgroups: freebsd
1870   ###
1871   -
1872     name: process - acpid
1873     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1874     hostgroups: acpid-hosts
1875   -
1876     name: unexpected process - acpid
1877     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1878     hostgroups: computers
1879     excludehostgroups: acpid-hosts, kvmdomains
1880   ###
1881   -
1882     name: process - xinetd
1883     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1884     hostgroups: xinetd-hosts
1885   -
1886     name: unwanted process - xinetd
1887     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1888     hostgroups: computers
1889     excludehostgroups: xinetd-hosts
1890   ###
1891   -
1892     name: process - stunnel4 - puppet-ekeyd
1893     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1894     hostgroups: squeeze, wheezy, jessie
1895     excludehostgroups: freebsd, alioth
1896   # }}}
1897   # {{{ anti-services
1898   -
1899     name: ganeti - job watcher paused
1900     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1901     hostgroups: computers
1902   -
1903     name: unwanted process - irqbalance
1904     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1905     hostgroups: computers
1906   -
1907     name: unwanted process - openvpn
1908     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1909     hostgroups: computers
1910     normal_check_interval: 120
1911   -
1912     name: unwanted process - gkrellmd
1913     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1914     hostgroups: computers
1915   -
1916     name: unwanted process - rpc.statd
1917     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1918     hostgroups: computers
1919     excludehostgroups: nfs-client, nfs-server
1920   -
1921     name: unwanted process - inetd
1922     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1923     hostgroups: computers
1924     excludehosts: abel
1925   -
1926     name: unwanted process - snmpd
1927     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1928     hostgroups: computers
1929   # }}}
1930   # {{{ ssl certs
1931   -
1932     name: "host SSL cert"
1933     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1934     hostgroups: computers
1935   # }}}
1936   # {{{ HW health/raid
1937   -
1938     name: process - mdadm monitor
1939     servicegroups: raid
1940     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1941     hostgroups: sw-raid
1942     excludehostgroups: jessie
1943   -
1944     name: process - mdadm monitor
1945     servicegroups: raid
1946     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1947     hostgroups: sw-raid
1948     hostgroups: jessie
1949   -
1950     name: RAID - sw raid
1951     servicegroups: raid
1952     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1953     hostgroups: sw-raid
1954   ###
1955   -
1956     name: HW - hpacucli status
1957     servicegroups: raid
1958     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1959     normal_check_interval: 120
1960     hostgroups: dl385, dl380, dl360, bl460, dl180
1961     excludehosts: schein, rietz
1962   -
1963     name: HW - hpacucli status
1964     servicegroups: raid
1965     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1966     normal_check_interval: 120
1967     hostgroups: bm-bl
1968   -
1969     name: HW - hpacucli status
1970     servicegroups: raid
1971     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1972     normal_check_interval: 120
1973     hosts: schein, rietz
1974   -
1975     name: HW - hpacucli enclosure status
1976     servicegroups: raid
1977     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1978     normal_check_interval: 120
1979     hosts: franck
1980   -
1981     name: HW - hpacucli status
1982     servicegroups: raid
1983     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1984     normal_check_interval: 120
1985     hostgroups: dl585
1986   ###
1987 #  -
1988 #    name: HW - edac status
1989 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1990 #    normal_check_interval: 120
1991     #hostgroups: computers
1992     #excludehosts: villa, lobos, senfl, schein
1993   -
1994     name: HW - hpasmcli status
1995     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1996     normal_check_interval: 120
1997     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1998     excludehosts: villa, lobos, senfl, schein, storace
1999   -
2000     name: HW - hpasmcli status
2001     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2002     normal_check_interval: 120
2003     hosts: villa
2004   -
2005     name: HW - hpasmcli status
2006     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
2007     normal_check_interval: 120
2008     hosts: lobos
2009   -
2010     name: HW - hpasmcli status
2011     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2012     normal_check_interval: 120
2013     hosts: senfl, schein
2014   -
2015     name: HW - hpasmcli status
2016     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2017     normal_check_interval: 120
2018     hosts: storace
2019   ###
2020   -
2021     name: RAID - 3ware
2022     servicegroups: raid
2023     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
2024     hosts: powell
2025   ###
2026   -
2027     name: RAID - aacraid
2028     servicegroups: raid
2029     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2030     hostgroups: aacraid
2031   ###
2032   -
2033     name: RAID - megaraid
2034     servicegroups: raid
2035     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
2036     hostgroups: megaraid
2037   ###
2038   -
2039     name: RAID - DRBD
2040     servicegroups: raid
2041     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2042     hostgroups: drbd-hosts
2043   # }}}
2044   # }}}
2045   # {{{ ### mail stuff
2046   # {{{ exim processes and mailq
2047   -
2048     name: process - exim
2049     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2050     hostgroups: computers
2051     excludehostgroups: postfix-hosts, mail-relay
2052     excludehosts: master, busoni, quantz, buxtehude
2053   -
2054     name: process - exim
2055     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2056     hostgroups: mail-relay
2057   -
2058     name: process - exim - total
2059     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2060     hostgroups: computers
2061     excludehostgroups: postfix-hosts
2062     excludehosts: master, busoni, quantz, buxtehude
2063   -
2064     name: process - exim
2065     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2066     hosts: master, busoni, quantz, buxtehude
2067   -
2068     name: mail queue
2069     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2070     hostgroups: heavy-exim
2071   # }}}
2072   # {{{ clamav
2073   -
2074     name: process - clamav - clamd
2075     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2076     hostgroups: heavy-exim, heavy-postfix
2077   -
2078     name: service - clamav
2079     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2080     hostgroups: heavy-exim, heavy-postfix
2081     depends: process - clamav - clamd
2082   -
2083     name: process - clamav - freshclam
2084     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2085     hostgroups: heavy-exim, heavy-postfix
2086   -
2087     name: unwanted process - clamav
2088     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2089     hostgroups: computers
2090     excludehostgroups: heavy-exim, heavy-postfix
2091   -
2092     name: unwanted process - freshclam
2093     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2094     hostgroups: computers
2095     excludehostgroups: heavy-exim, heavy-postfix
2096   # }}}
2097   # {{{ anti-spam
2098   -
2099     name: process - spamd - master
2100     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2101     hostgroups: spamd
2102     excludehosts: picconi
2103   -
2104     name: process - spamd - master
2105     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2106     hosts: picconi
2107   -
2108     name: process - spamd - master
2109     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2110     hosts: bendel
2111   -
2112     name: process - spamd - child
2113     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2114     hosts: bendel
2115     hostgroups: spamd
2116     depends: process - spamd - master
2117   #
2118   -
2119     name: process - spamd - master
2120     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2121     hosts: buxtehude
2122   -
2123     name: process - spamd - child
2124     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2125     hosts: buxtehude
2126   #
2127   -
2128     name: unwanted process - spamd
2129     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2130     hostgroups: computers
2131     excludehostgroups: spamd
2132     excludehosts: bendel, busoni, buxtehude
2133
2134   -
2135     name: unwanted process - greylistd
2136     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2137     hostgroups: computers
2138
2139   ###
2140   -
2141     name: process - postgrey
2142     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2143     hostgroups: heavy-exim
2144   -
2145     name: process - postgrey
2146     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2147     hostgroups: heavy-postfix
2148   #
2149   -
2150     name: unwanted process - postgrey
2151     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2152     hostgroups: computers
2153     excludehostgroups: heavy-postfix, heavy-exim
2154   ###
2155   -
2156     name: process - amavis - master
2157     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2158     hostgroups: amavis-hosts
2159   -
2160     name: process - amavis - all
2161     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2162     hostgroups: amavis-hosts
2163     depends: process - amavis - master
2164   #
2165   -
2166     name: unwanted process - amavis
2167     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2168     hostgroups: computers
2169     excludehostgroups: amavis-hosts
2170   ###
2171   -
2172     name: process - weightd - master
2173     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2174     hostgroups: heavy-postfix, alioth
2175   -
2176     name: process - weightd - cache
2177     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2178     hostgroups: heavy-postfix, alioth
2179     depends: process - weightd - master
2180   -
2181     name: process - weightd - child
2182     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2183     hostgroups: heavy-postfix, alioth
2184     depends: process - weightd - master
2185   ###
2186   -
2187     name: unwanted process - policyd-weight
2188     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2189     hostgroups: computers
2190     excludehostgroups: heavy-postfix, alioth
2191   # }}}
2192   # {{{ postfix
2193   ###
2194   -
2195     name: process - postfix - master
2196     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2197     hostgroups: postfix-hosts
2198   -
2199     name: process - postfix - qmgr
2200     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2201     hostgroups: postfix-hosts
2202     depends: process - postfix - master
2203   -
2204     name: process - postfix - pickup
2205     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2206     hostgroups: postfix-hosts
2207     depends: process - postfix - master
2208   -
2209     name: process - postfix - anvil
2210     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2211     hostgroups: postfix-hosts
2212     depends: process - postfix - master
2213
2214   -
2215     name: process - postfix - trivial-rewrite
2216     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2217     hostgroups: postfix-hosts
2218     depends: process - postfix - master
2219   -
2220     name: process - postfix - proxymap
2221     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2222     hostgroups: postfix-hosts
2223     depends: process - postfix - master
2224   -
2225     name: process - postfix - cleanup
2226     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2227     hostgroups: postfix-hosts
2228     depends: process - postfix - master
2229   -
2230     name: process - postfix - local
2231     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2232     hostgroups: postfix-hosts
2233     depends: process - postfix - master
2234
2235   -
2236     name: network service local - smtps cert
2237     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2238     hostgroups: postfix-hosts
2239     depends: process - postfix - master
2240     normal_check_interval: 120
2241   # }}}
2242   # {{{ mail - network service
2243   -
2244     name: network service - smtp
2245     check: dsa_check_smtp
2246     hostgroups: computers
2247     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2248     depends: process - exim
2249
2250   -
2251     name: network service - smtp
2252     check: dsa_check_smtp
2253     hostgroups: postfix-hosts
2254     depends: process - postfix - master
2255   -
2256     name: network service - submission
2257     check: dsa_check_smtp_port!587
2258     hostgroups: incomingmailrelayed
2259     depends: process - exim
2260   -
2261     name: network service - smtp 2025
2262     check: dsa_check_smtp_port!2025
2263     hostgroups: incomingmailrelayed2025
2264     depends: process - exim
2265   # }}}
2266   # }}}
2267   # {{{ ### host specific services
2268   # {{{ HTTP
2269   -
2270     name: process - apache2 - master
2271     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2272     hostgroups: apache2-hosts
2273   -
2274     name: process - apache2 - worker
2275     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2276     hostgroups: apache2-hosts
2277     depends: process - apache2 - master
2278   -
2279     name: unwanted process - apache2
2280     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2281     hostgroups: computers
2282     excludehostgroups: apache2-hosts
2283
2284   -
2285     name: network service - http
2286     check: check_http
2287     hostgroups: apache2-hosts
2288     excludehosts: klecker
2289     depends: process - apache2 - master
2290   -
2291     name: network service - http
2292     check: check_http
2293     depends: klecker:process - apache2 - master
2294     hosts: klecker-ftp
2295
2296   # keyserver on kaufmann
2297   -
2298     name: network service - http keyserver
2299     check: dsa_check_http_port!11371
2300     hosts: kaufmann
2301     depends: process - apache2 - master
2302
2303   # https on various hosts
2304   -
2305     name: network service - https
2306     check: check_https
2307     hostgroups: apache-https
2308     excludehosts: handel,menotti
2309     excludehostgroups: broken_https_default_vhost
2310     depends: "process - apache2 - master"
2311     normal_check_interval: 120
2312   -
2313     name: network service - https
2314     check: dsa_check_https_want_auth
2315     hosts: handel,menotti
2316     depends: "process - apache2 - master"
2317     normal_check_interval: 120
2318   -
2319     name: network service - https
2320     check: dsa_check_https_any_status
2321     hostgroups: broken_https_default_vhost
2322     depends: "process - apache2 - master"
2323     normal_check_interval: 120
2324   -
2325     name: network service - https cert
2326     check: dsa_check_cert!443
2327     hostgroups: apache-https
2328     depends: network service - https
2329     normal_check_interval: 60
2330   -
2331     name: unwanted network service - https
2332     check: dsa_check_port_closed!443
2333     hostgroups: apache2-hosts
2334     excludehostgroups: apache-https
2335     # ravel does ssh on port 443
2336     excludehosts: ravel
2337     normal_check_interval: 60
2338   # }}}
2339   # {{{ FTP
2340   -
2341     name: network service - ftp
2342     check: check_ftp
2343     hostgroups: uploadqueue, security_mirror
2344     excludehosts: klecker
2345   -
2346     name: network service - ftp
2347     check: check_ftp
2348     hosts: klecker-ftp
2349     depends: klecker:process - xinetd
2350   # }}}
2351   # {{{ postgres
2352   -
2353     name: unwanted process - postgresql
2354     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2355     hostgroups: computers
2356     excludehostgroups: postgres91-hosts
2357   -
2358     name: unwanted process - postgresql 9.0
2359     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2360     hostgroups: computers
2361   -
2362     name: process - postgresql91 - master
2363     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2364     hostgroups: postgres91-hosts
2365   -
2366     name: postgresql backups
2367     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2368     hosts: storace
2369   # }}}
2370   # {{{ power
2371 #  -
2372 #    name: process - UPS - nut usbhid-ups - ups1
2373 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2374 #    hosts: franck
2375 #  -
2376 #    name: process - UPS - nut upsd
2377 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2378 #    hosts: franck
2379 #  -
2380 #    name: process - UPS - nut upsmon master
2381 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2382 #    hosts: franck
2383 #  -
2384 #    name: process - UPS - nut upsmon worker
2385 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2386 #    hosts: franck
2387 #    depends: process - UPS - nut upsmon master
2388 #  -
2389 #    name: UPS - on line power
2390 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2391 #    hosts: franck
2392 #    depends: process - UPS - nut upsd
2393   # }}}
2394   # {{{ buildd
2395   -
2396     name: process - buildd
2397     servicegroups: buildd
2398     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2399     hosts: fano, finzi, fils, fayrfax
2400     contact_groups: buildd
2401   -
2402     name: process - buildd
2403     servicegroups: buildd
2404     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2405     hostgroups: buildd
2406     excludehosts: fano, finzi, fils, fayrfax
2407     contact_groups: buildd
2408   -
2409     name: processes - zombie schroot
2410     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2411     hostgroups: buildd
2412     contact_groups: +buildd
2413     normal_check_interval: 5
2414     max_check_attempts: 24
2415     retry_check_interval: 5
2416   -
2417     name: processes - lvcreate
2418     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2419     hostgroups: buildd
2420     contact_groups: +buildd
2421   # }}}
2422   # {{{ NFS Stuff
2423   -
2424     name: process - statd
2425     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2426     hostgroups: nfs-client, nfs-server
2427   -
2428     name: process - nfsd
2429     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2430     hostgroups: nfs-server
2431   -
2432     name: process - lockd
2433     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2434     hostgroups: nfs-server
2435   -
2436     name: process - mountd
2437     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2438     hostgroups: nfs-server
2439   #
2440   -
2441     name: process - automount
2442     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2443     hostgroups: autofs
2444   -
2445     name: unwanted process - automount
2446     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2447     hostgroups: computers
2448     excludehostgroups: autofs
2449   # }}}
2450   # {{{ mirroring
2451   -
2452     name: mirror sync - bugs
2453     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2454     hosts: global
2455   -
2456     name: mirror sync - security
2457     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2458     hosts: global
2459   -
2460     name: mirror sync - packages
2461     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2462     hosts: global
2463     normal_check_interval: 15
2464     max_check_attempts: 5
2465     retry_check_interval: 5
2466   -
2467     name: mirror sync - snapshot
2468     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2469     hosts: global
2470     normal_check_interval: 15
2471     max_check_attempts: 5
2472     retry_check_interval: 5
2473   # }}}
2474   # {{{ DNS
2475   -
2476     name: process - named
2477     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2478     hostgroups: bind9-hosts
2479   -
2480     name: network service - dns
2481     check: check_dns
2482     hostgroups: bind9-hosts
2483     depends: process - named
2484   -
2485     name: unwanted process - named
2486     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2487     hostgroups: computers
2488     excludehostgroups: bind9-hosts
2489   ###
2490   -
2491     name: DNS SOA sync - debian.org
2492     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2493     hosts: global
2494   -
2495     name: DNS SOA sync - debian.net
2496     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2497     hosts: global
2498   -
2499     name: DNS SOA sync - debian.com
2500     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2501     hosts: global
2502   -
2503     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2504     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2505     hosts: global
2506   -
2507     name: DNS SOA sync - alioth.debian.org
2508     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2509     hosts: global
2510   -
2511     name: DNS - delegation and signature expiry
2512     hosts: global
2513     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2514     runfrom: denis
2515   -
2516     name: DNS - security delegations
2517     hosts: global
2518     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2519     runfrom: denis
2520   -
2521     name: DNS - key coverage
2522     hosts: global
2523     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2524     runfrom: denis
2525   -
2526     name: DNS - DS expiry
2527     hosts: global
2528     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2529     runfrom: denis
2530   # }}}
2531   # {{{ storage
2532   -
2533     name: ping alive check
2534     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2535     runfrom: dijkstra
2536     hosts: giustini
2537     normal_check_interval: 5
2538     max_check_attempts: 4
2539     retry_check_interval: 1
2540   -
2541     name: Overall Unit Status
2542     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2543     runfrom: dijkstra
2544     hosts: giustini
2545   -
2546     name: event log
2547     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2548     runfrom: dijkstra
2549     hosts: giustini
2550   # }}}
2551   # {{{ porterbox
2552   -
2553     name: current chroots
2554     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2555     hostgroups: porterbox
2556     normal_check_interval:  60
2557     retry_check_interval: 15
2558   # }}}
2559   # {{{ openstack
2560   -
2561     name: process - openstack - memcached
2562     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2563     hostgroups: openstack-controller
2564   -
2565     name: process - openstack - glance-registry
2566     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2567     hostgroups: openstack-controller
2568   -
2569     name: process - openstack - nova-api
2570     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2571     hostgroups: openstack-controller
2572   -
2573     name: process - openstack - nova-compute
2574     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2575     hostgroups: openstack-compute
2576   -
2577     name: process - openstack - nova-cert
2578     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2579     hostgroups: openstack-controller
2580   -
2581     name: process - openstack - nova-conductor
2582     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2583     hostgroups: openstack-controller
2584   -
2585     name: process - openstack - nova-consoleauth
2586     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2587     hostgroups: openstack-controller
2588   -
2589     name: process - openstack - nova-scheduler
2590     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2591     hostgroups: openstack-controller
2592   -
2593     name: process - openstack - nova-spicehtml5proxy
2594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2595     hostgroups: openstack-controller
2596   -
2597     name: process - openstack - neutron-server
2598     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2599     hostgroups: openstack-controller
2600   # }}}
2601   # {{{ misc
2602   -
2603     name: process - rngd
2604     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2605     hostgroups: dl385
2606   ###
2607   -
2608     name: process - slapd
2609     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2610     hosts: draghi
2611   -
2612     name: network service - ldaps cert
2613     check: dsa_check_cert!636
2614     depends: process - slapd
2615     normal_check_interval: 60
2616     hosts: draghi
2617   ###
2618   -
2619     name: network service - finger
2620     check: check_tcp!79
2621     hosts: draghi
2622     depends: process - xinetd
2623   ###
2624   -
2625     name: network service - rsync
2626     check: check_tcp!873
2627     hostgroups: rsyncd-hosts
2628     depends: process - xinetd
2629     excludehosts: rietz
2630   -
2631     name: network service - rsync
2632     check: check_tcp!873
2633     hosts: rietz2
2634     depends: rietz:process - xinetd
2635   -
2636     name: network service - rsync
2637     check: check_tcp!873
2638     hosts: milanollo2
2639     depends: milanollo:process - xinetd
2640   ###
2641   -
2642     name: process - icinga
2643     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2644     hosts: tchaikovsky
2645   ###
2646   -
2647     name: process - jetty - master
2648     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2649     hostgroups: jetty-hosts
2650   -
2651     name: process - jetty - worker
2652     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2653     hostgroups: jetty-hosts
2654     depends: process - jetty - master
2655   ###
2656   -
2657     name: process - debianqueued
2658     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2659     hostgroups: uploadqueue
2660   ####
2661   -
2662     name: network service - gobby
2663     check: check_tcp!6523
2664     hosts: gombert
2665     contact_groups: gobby
2666   ####
2667   -
2668     name: network service - sip-tls cert - 443
2669     check: dsa_check_cert!443
2670     normal_check_interval: 60
2671     hosts: vogler
2672   -
2673     name: network service - sip-tls cert - 5061
2674     check: dsa_check_cert!5061
2675     normal_check_interval: 60
2676     hosts: vogler
2677   ####
2678   -
2679     name: puppetmaster cert
2680     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2681     hosts: handel
2682     normal_check_interval: 60
2683     max_check_attempts: 2
2684     retry_check_interval: 5
2685   # }}}
2686 # }}}
2687
2688 # vim: set ts=2 sw=2 et ai si fdm=marker: