1 # Non comment lines are YAML
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
8 # - *: check munin stats collection works
9 # - *: check backups are successful
10 # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
13 #############################
15 #############################
19 hostgroups: notacomputer
21 check_command: dsa_check_always_ok
24 hostgroups: notacomputer
26 check_command: dsa_check_always_ok
28 address: 130.239.18.97
30 hostgroups: layer3-infrastructure
32 address: 130.242.6.198
34 hostgroups: layer3-infrastructure
38 hostgroups: layer3-infrastructure
40 address: 89.16.160.116
42 hostgroups: layer3-infrastructure
44 address: 200.17.202.254
46 hostgroups: layer3-infrastructure
48 address: 150.203.164.1
50 hostgroups: layer3-infrastructure
52 address: 213.104.121.213
54 hostgroups: layer3-infrastructure
58 hostgroups: layer3-infrastructure
60 address: 217.196.149.238
62 hostgroups: layer3-infrastructure
66 hostgroups: layer3-infrastructure
68 address: 93.94.130.190
70 hostgroups: layer3-infrastructure
72 address: 62.104.23.249
74 hostgroups: layer3-infrastructure
78 hostgroups: layer3-infrastructure
80 address: 194.177.211.193
82 hostgroups: layer3-infrastructure
84 # really henet, because of something weird
87 hostgroups: layer3-infrastructure
89 address: 129.143.59.214
91 hostgroups: layer3-infrastructure
93 address: 185.17.185.190
95 hostgroups: layer3-infrastructure
97 address: 82.195.78.118
99 hostgroups: layer3-infrastructure
101 address: 148.100.88.1
103 hostgroups: layer3-infrastructure
105 address: 140.211.166.1
107 hostgroups: layer3-infrastructure
109 address: 133.242.99.65
111 hostgroups: layer3-infrastructure
113 address: 193.62.202.20
115 hostgroups: layer3-infrastructure
116 contacts: tjrc1, dave
118 address: 212.211.132.249
120 hostgroups: layer3-infrastructure
122 address: 212.211.132.1
124 hostgroups: layer3-infrastructure
126 address: 86.59.118.145
128 hostgroups: layer3-infrastructure
130 address: 154.57.0.249
132 hostgroups: layer3-infrastructure
134 address: 154.57.0.250
136 hostgroups: layer3-infrastructure
138 address: 206.12.19.254
139 hostgroups: layer3-infrastructure
142 address: 128.101.240.222
144 hostgroups: layer3-infrastructure
146 address: 177.220.10.129
148 hostgroups: layer3-infrastructure
150 address: 130.89.149.1
152 hostgroups: layer3-infrastructure
154 # really janet, because ynic is stupid about firewalling
155 address: 146.97.71.46
157 hostgroups: layer3-infrastructure
160 hostgroups: notacomputer
162 check_command: dsa_check_always_ok
164 address: 209.87.16.254
166 hostgroups: layer3-infrastructure
171 address: 212.227.126.54
172 parents: gw-1und1-sec
173 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hassrvfs, pe1950
175 address: 195.20.242.89
176 parents: gw-1und1-sec
177 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950
181 address: 130.239.18.123
183 hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, stretch, autofs, sw-raid
185 address: 130.242.6.199
187 hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts
191 address: 141.170.6.156
193 hostgroups: computers, porterbox, stretch, hassrvfs
195 address: 141.170.6.149
197 hostgroups: computers, buildd, stretch, nfs-client
199 address: 141.170.6.150
201 hostgroups: computers, buildd, stretch, nfs-client
203 address: 141.170.6.154
205 hostgroups: computers, buildd, stretch, nfs-client
207 address: 141.170.6.155
209 hostgroups: computers, buildd, stretch, nfs-client
211 address: 141.170.6.157
213 hostgroups: computers, buildd, stretch, hassrvfs
215 address: 141.170.6.151
217 hostgroups: computers, porterbox, stretch, nfs-client
219 address: 141.170.6.152
221 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
223 address: 141.170.6.153
225 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
227 address: 141.170.6.158
229 hostgroups: computers, buildd, stretch, hassrvfs
233 address: 217.140.96.56
235 hostgroups: computers, hasbootfs, hassrvfs, porterbox, stretch, broken_mq
237 address: 217.140.96.57
239 hostgroups: computers, hasbootfs, hassrvfs, buildd, stretch, broken_mq
241 address: 217.140.96.58
243 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
245 address: 217.140.96.60
247 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
249 address: 217.140.96.61
251 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
253 address: 217.140.96.66
255 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, porterbox, broken_mq
257 address: 217.140.96.67
259 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, buildd, broken_mq
261 address: 217.140.96.71
263 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd, broken_mq
267 address: 138.16.160.17
269 hostgroups: computers, service, apache2-hosts, apache-https, dl380, rsyncd-hosts, stretch, hassrvfs, postgres96-hosts, manyprocesses
273 address: 5.153.231.241
275 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
277 address: 5.153.231.242
279 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
281 address: 5.153.231.243
283 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
285 address: 5.153.231.244
287 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
289 address: 5.153.231.245
291 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
293 address: 5.153.231.246
295 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
297 address: 5.153.231.247
299 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
301 address: 5.153.231.248
303 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
305 address: 5.153.231.249
307 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
309 address: 5.153.231.250
311 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
313 address: 5.153.231.251
315 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
317 address: 5.153.231.252
319 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
321 address: 5.153.231.253
323 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
325 address: 5.153.231.254
327 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
332 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, nfs-server, systemd-timesyncd
336 hostgroups: secondary-IPs, rsyncd-hosts
340 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
344 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd
348 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
352 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
357 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
362 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
364 address: 5.153.231.10
366 hostgroups: computers, hassrvfs, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
370 hostgroups: notacomputer
372 address: 5.153.231.11
373 parents: ganeti-bytemark
374 hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
376 address: 5.153.231.12
377 parents: ganeti-bytemark
378 hostgroups: computers, hassrvfs, kvmdomains, stretch, systemd-timesyncd
380 address: 5.153.231.13
381 parents: ganeti-bytemark
382 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd, broken_https_default_vhost
384 address: 5.153.231.16
385 parents: ganeti-bytemark
386 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
388 address: 5.153.231.15
389 parents: ganeti-bytemark
390 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
392 address: 5.153.231.17
393 parents: ganeti-bytemark
394 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
396 address: 5.153.231.18
397 parents: ganeti-bytemark
398 hostgroups: computers, general, kvmdomains, stretch, service, apache-https, apache2-hosts, heavy-exim, systemd-timesyncd
400 address: 5.153.231.19
401 parents: ganeti-bytemark
402 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, systemd-timesyncd
404 address: 5.153.231.20
405 parents: ganeti-bytemark
406 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
408 address: 5.153.231.21
409 parents: ganeti-bytemark
410 contact_groups: alioth-admins
411 hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
412 no-servicegroups: true
414 address: 5.153.231.22
415 parents: ganeti-bytemark
416 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
418 address: 5.153.231.23
419 parents: ganeti-bytemark
420 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
422 address: 5.153.231.25
423 parents: ganeti-bytemark
424 hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
426 address: 5.153.231.26
427 parents: ganeti-bytemark
428 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
430 address: 5.153.231.27
431 parents: ganeti-bytemark
432 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, porterbox, systemd-timesyncd
434 address: 5.153.231.28
435 parents: ganeti-bytemark
436 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
438 address: 5.153.231.29
439 parents: ganeti-bytemark
440 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
442 address: 5.153.231.30
443 parents: ganeti-bytemark
444 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
446 address: 5.153.231.32
447 parents: ganeti-bytemark
448 hostgroups: computers, kvmdomains, stretch, no-bacula, systemd-timesyncd
450 address: 5.153.231.33
451 parents: ganeti-bytemark
452 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
454 address: 5.153.231.34
455 parents: ganeti-bytemark
456 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
458 address: 5.153.231.36
459 parents: ganeti-bytemark
460 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, systemd-timesyncd
462 address: 5.153.231.38
463 parents: ganeti-bytemark
464 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
466 address: 5.153.231.39
467 parents: ganeti-bytemark
468 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
470 address: 5.153.231.40
471 parents: ganeti-bytemark
472 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
474 address: 5.153.231.42
475 parents: ganeti-bytemark
476 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd
478 address: 5.153.231.43
479 parents: ganeti-bytemark
480 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
482 address: 5.153.231.44
483 parents: ganeti-bytemark
484 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
487 address: 5.153.231.41
489 hostgroups: computers, service, stretch, hassrvfs, dl380, manyprocesses, apache2-hosts
493 address: 200.17.202.197
495 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https
500 address: 150.203.164.39
502 hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, stretch, apache-https
504 address: 150.203.164.60
506 hostgroups: secondary-IPs, rsyncd-hosts
508 address: 150.203.164.61
510 hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
512 address: 150.203.164.62
514 hostgroups: secondary-IPs
518 address: 217.196.149.227
520 hostgroups: computers, stretch, service, sw-raid
522 address: 217.196.149.228
524 hostgroups: computers, stretch, service, sw-raid
526 address: 217.196.149.235
528 hostgroups: notacomputer
530 address: 217.196.149.229
532 hostgroups: computers, stretch, service, apache2-hosts
533 mirror-conova-debian:
534 address: 217.196.149.232
535 hostgroups: secondary-IPs
536 parents: mirror-conova
537 mirror-conova-security:
538 address: 217.196.149.233
539 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
540 parents: mirror-conova
541 mirror-conova-archive:
542 address: 217.196.149.234
543 hostgroups: secondary-IPs, rsyncd-hosts
544 parents: mirror-conova
545 mirror-conova-syncproxy4-eu:
546 address: 217.196.149.237
547 hostgroups: secondary-IPs, rsyncd-hosts, https-service
548 parents: mirror-conova
551 address: 217.196.149.230
552 parents: ganeti-conova
553 hostgroups: computers, hassrvfs, buildd, stretch
555 address: 217.196.149.231
556 parents: ganeti-conova
557 hostgroups: computers, hassrvfs, buildd, stretch
559 address: 217.196.149.236
560 parents: ganeti-conova
561 hostgroups: computers, hassrvfs, porterbox, stretch
567 hostgroups: computers, service, dl360, stretch, drbd-hosts
571 hostgroups: computers, service, dl360, stretch, drbd-hosts
575 hostgroups: notacomputer
579 parents: ganeti-csail
580 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, apache2-hosts, rsyncd-hosts, apache-https, systemd-timesyncd
583 parents: ganeti-csail
584 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
587 parents: ganeti-csail
588 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
591 parents: ganeti-csail
592 hostgroups: computers, service, kvmdomains, hassrvfs, stretch, apache2-hosts, apache-https, systemd-timesyncd
595 parents: ganeti-csail
596 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd
599 parents: ganeti-csail
600 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, uploadqueue, queued, systemd-timesyncd
604 address: 93.94.130.161
606 hostgroups: computers, stretch, dl380, nfs-client, hassrvfs
610 address: 128.61.240.73
612 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror
616 address: 194.177.211.194
618 hostgroups: notacomputer
620 address: 194.177.211.195
622 hostgroups: computers, service, dl380, stretch, drbd-hosts
624 address: 194.177.211.196
626 hostgroups: computers, service, dl380, stretch, drbd-hosts
628 address: 194.177.211.200
630 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
632 address: 194.177.211.201
634 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
636 address: 194.177.211.202
638 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, xinetd-hosts, systemd-timesyncd
640 address: 194.177.211.203
641 parents: ganeti-grnet
642 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
644 address: 194.177.211.205
645 parents: ganeti-grnet
646 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, postgres96-hosts, apache2-hosts, apache-https, systemd-timesyncd
648 address: 194.177.211.206
649 parents: ganeti-grnet
650 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, systemd-timesyncd
652 address: 194.177.211.207
653 parents: ganeti-grnet
654 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, rsyncd-hosts, systemd-timesyncd
656 address: 194.177.211.208
657 parents: ganeti-grnet
658 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs
659 static-master-grnet-01:
660 address: 194.177.211.209
661 parents: ganeti-grnet
662 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, hassrvfs
668 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch
672 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
676 hostgroups: secondary-IPs
677 mirror-isc-syncproxy:
680 hostgroups: secondary-IPs, rsyncd-hosts
684 address: 185.17.185.177
686 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
688 address: 185.17.185.178
690 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
692 address: 185.17.185.179
694 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
696 address: 185.17.185.180
698 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
700 address: 185.17.185.187
702 hostgroups: computers, service, jessie, dl180, nfs-client, autofs, hassrvfs, postgres94-hosts, apache2-hosts
704 address: 185.17.185.189
706 hostgroups: computers, service, jessie, dl180, nfs-client, autofs, hassrvfs, apache2-hosts
708 address: 185.17.185.181
710 hostgroups: computers, service, stretch, dl180
712 address: 185.17.185.182
714 hostgroups: computers, service, stretch, dl180
718 address: 129.143.160.6
719 parents: gw-karlsruhe
720 hostgroups: computers, buildd, stretch
725 address: 82.195.75.109
727 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
729 address: 82.195.75.103
731 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
733 address: 82.195.75.100
735 hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
737 address: 82.195.75.110
739 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload
741 address: 82.195.75.98
743 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim
745 address: 82.195.75.99
747 hostgroups: computers, service, hasbootfs, kvmdomains, stretch, hasvarlogfs
749 address: 82.195.75.106
751 hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch
753 address: 82.195.75.105
755 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch
757 address: 82.195.75.104
759 hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts
761 address: 82.195.75.107
763 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https
765 address: 82.195.75.111
767 hostgroups: notacomputer
769 address: 82.195.75.112
771 hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts
773 address: 82.195.75.114
775 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay
777 address: 82.195.75.91
779 hostgroups: computers, service, kvmdomains, stretch, bind9-hosts
781 address: 82.195.75.92
783 hostgroups: computers, service, kvmdomains, stretch
785 address: 82.195.75.65
787 hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https
789 address: 82.195.75.66
791 hostgroups: computers, buildd, stretch, hassrvfs
793 address: 82.195.75.72
795 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
797 address: 82.195.75.74
799 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
801 address: 82.195.75.67
803 hostgroups: computers, buildd, stretch, hassrvfs
805 address: 82.195.75.93
807 hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch
809 address: 82.195.75.68
811 hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd
815 address: 148.100.88.22
817 hostgroups: computers, buildd, hassrvfs, stretch, incomingmailrelayed
821 address: 140.211.166.200
823 hostgroups: computers, service, dl380, stretch
825 address: 140.211.166.201
827 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, apache-https
830 address: 140.211.166.195
832 hostgroups: computers, stretch, service, manyprocesses
834 address: 140.211.166.196
836 hostgroups: computers, hassrvfs, buildd, stretch
838 address: 140.211.166.197
840 hostgroups: computers, hassrvfs, buildd, jessie
842 address: 140.211.15.152
844 hostgroups: computers, jessie, hassrvfs, porterbox, sw-raid
848 address: 193.62.202.26
850 hostgroups: computers, service, stretch, dl380, nfs-client, autofs, postgres96-hosts
852 address: 193.62.202.28
854 hostgroups: computers, postgres94-hosts, service, apache2-hosts, sw-raid, jessie, rsyncd-hosts, hasvarlogfs, multipath-hosts, nfs-server
855 contacts: tjrc1, dave
857 address: 193.62.202.29
859 hostgroups: computers, sw-raid, sparc, wheezy, no-bacula
860 contacts: tjrc1, dave
864 address: 212.211.132.250
865 parents: gw-scanplus-lobos
866 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror
868 address: 212.211.132.32
869 parents: gw-scanplus-villa
870 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror
874 address: 86.59.118.155
876 hostgroups: computers, buildd, stretch, sw-raid
878 address: 86.59.118.146
880 hostgroups: computers, buildd, stretch, hassrvfs
882 address: 86.59.118.147
884 hostgroups: computers, buildd, stretch, hassrvfs
888 address: 154.57.0.251
889 parents: gw-skroutz1, gw-skroutz2
890 hostgroups: computers, stretch, service, sw-raid, hassrvfs, apache2-hosts
896 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
900 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
904 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
906 address: 209.87.16.10
908 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
911 address: 209.87.16.20
913 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
915 address: 209.87.16.21
917 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
919 address: 209.87.16.24
921 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
923 address: 209.87.16.25
925 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
927 address: 209.87.16.26
929 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
931 address: 209.87.16.27
933 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
935 address: 209.87.16.28
937 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, broken_https_default_vhost, systemd-timesyncd
939 address: 209.87.16.29
941 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
943 address: 209.87.16.30
945 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
947 address: 209.87.16.31
949 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
951 address: 209.87.16.32
953 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
955 address: 209.87.16.33
957 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
959 address: 209.87.16.34
961 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
963 address: 209.87.16.35
965 hostgroups: computers, general, apache2-hosts, kvmdomains, apache-https, stretch, systemd-timesyncd
967 address: 209.87.16.36
969 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, nfs-server, apache2-hosts, xinetd-hosts, apache-https, systemd-timesyncd
971 address: 209.87.16.37
973 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd
975 address: 209.87.16.38
977 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, nfs-client, apache2-hosts, autofs, apache-https, systemd-timesyncd
979 address: 209.87.16.39
981 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, heavy-exim, postgres96-hosts, hasvarlogfs, apache-https, spamd, nfs-server, systemd-timesyncd
983 address: 209.87.16.42
985 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
988 address: 209.87.16.43
990 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
992 address: 209.87.16.44
994 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd, postfix-hosts, postgres96-hosts, manyprocesses
996 address: 209.87.16.46
998 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https, broken_https_default_vhost
1002 # address: 128.101.240.212
1004 # hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1006 address: 128.101.240.212
1008 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch
1010 address: 128.101.240.215
1012 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
1014 address: 128.101.240.216
1016 hostgroups: secondary-IPs, rsyncd-hosts
1018 address: 128.101.240.217
1020 hostgroups: secondary-IPs
1024 address: 177.220.10.140
1026 hostgroups: computers, stretch, service, manyprocesses
1028 address: 177.220.10.141
1030 hostgroups: computers, hassrvfs, buildd, jessie
1032 address: 177.220.10.142
1034 hostgroups: computers, hassrvfs, buildd, stretch
1036 address: 177.220.10.143
1038 hostgroups: computers, porterbox, hassrvfs, stretch
1042 address: 130.89.148.10
1044 hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs
1046 address: 130.89.148.12
1048 hostgroups: secondary-IPs
1050 address: 130.89.148.13
1052 hostgroups: secondary-IPs
1054 address: 130.89.148.14
1056 hostgroups: secondary-IPs
1060 address: 144.32.168.74
1062 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1064 address: 144.32.168.75
1066 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1068 address: 144.32.168.76
1070 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1074 address: 80.245.147.46
1076 hostgroups: computers, buildd, hassrvfs, stretch
1078 address: 80.245.147.40
1080 hostgroups: computers, porterbox, hassrvfs, stretch
1084 address: 133.242.99.74
1086 hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror
1089 # {{{ ############################# host groups #############################
1094 extinfo-icon_image: base/debian.png
1095 extinfo-icon_image_alt: Debian GNU/Linux
1096 extinfo-notes_url: https://db.debian.org/machines.cgi?host=%s
1097 layer3-infrastructure:
1098 alias: Layer 3 Devices
1099 extinfo-icon_image: base/switch40.png
1100 extinfo-icon_image_alt: router
1102 alias: Systems that are not really systems. Yeah :)
1112 alias: developer accessible porter machines
1114 alias: machines running services
1116 alias: buildd systems
1118 alias: general purpose developer accessible machines
1121 alias: HP DL380 hosts
1124 alias: HP DL360 hosts
1127 alias: HP BL460 blades
1130 alias: HP BL460 Gen8 blades
1133 alias: HP blades at bytemark
1142 alias: Hosts with Linux software raid
1145 alias: Hosts with Adaptec AACraid
1148 alias: Dell PowerEdge 1950 hosts
1152 alias: Hosts running wheezy
1154 alias: Hosts running jessie
1156 alias: Hosts running stretch
1159 alias: Hosts that are KVM domains
1163 alias: hosts running drbd
1165 alias: hosts running multipathd
1167 alias: hosts running postfix instead of exim
1170 alias: "hosts running the full mail stuff, including clamav and postgrey"
1173 alias: "relays usually are hosts with more exim processes"
1176 alias: "hosts running spamassassin as daemon"
1179 alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1182 alias: hosts running apache2
1185 alias: hosts running bind9
1188 alias: hosts running amavis
1191 alias: hosts providing rsync services
1194 alias: hosts providing services via xinetd
1197 alias: hosts running postgres91
1200 alias: hosts running postgres94
1203 alias: hosts running postgres96
1206 alias: hosts not running ulogd
1209 alias: hosts running acpid
1212 alias: hosts that are an anonymous ftp uploadqueue
1215 alias: hosts running queued
1218 alias: hosts running bosserver
1221 alias: hosts with https services
1224 alias: https service for secondary addresses
1226 broken_https_default_vhost:
1227 alias: https default vhost does not say 200 OK
1230 alias: hosts with lots and lots of (kernel) processes
1233 alias: hosts which are not being backed up with bacula
1237 alias: hosts mounting filesystems using NFS
1240 alias: hosts serving filesystems using NFS
1243 alias: hosts running the automounter
1246 alias: Vms running systemd-timesyncd
1250 alias: "hosts on which high load is normal"
1254 alias: secondary IP addresses
1258 alias: hosts with a /boot filesystem
1261 alias: hosts with a /srv filesystem
1264 alias: hosts with a /var/log filesystem
1267 incomingmailrelayed:
1268 alias: incoming mail needs to go through a mail relay
1271 incomingmailrelayed2025:
1272 alias: incoming mail needs to go through a mail relay
1277 alias: machines that can not run samhain
1280 alias: machines with high round trip times
1283 alias: machines that just are just awkward
1286 # alias: nodes that run OpenStack compute
1288 openstack-controller:
1289 alias: nodes that run OpenStack controller
1293 alias: hosts that are security mirrors
1297 alias: hosts whose MQ is broken
1300 # {{{ ############################# servicegroups #############################
1303 alias: diskusage checks
1305 alias: buildd checks
1309 alias: backup checks
1311 alias: kernel checks
1313 alias: apt upgrade status
1315 alias: samhain integrity status
1320 servicegroup_members: apt, kernel, samhain
1324 alias: rabbitMQ stuff
1326 # {{{ ############################# services #############################
1328 # {{{ ### basic networking
1331 check: "check_ping!350.0,20%!600.0,40%"
1332 hostgroups: pingable
1333 excludehostgroups: layer3-infrastructure, high-RTT
1335 max_check_attempts: 4
1339 check: "check_ping!600.0,20%!900.0,40%"
1340 hostgroups: high-RTT
1342 max_check_attempts: 4
1346 check: "check_ping!2000.0,60%!3000.0,80%"
1347 hostgroups: layer3-infrastructure
1349 max_check_attempts: 4
1352 # {{{ ### disk usage
1354 name: disk usage - all
1355 servicegroups: diskspace
1356 nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
1357 hostgroups: computers
1358 excludehosts: sibelius
1360 name: disk usage - all
1361 servicegroups: diskspace
1362 nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
1366 name: disk usage on /
1367 servicegroups: diskspace
1368 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1369 hostgroups: computers
1371 name: disk usage on /boot
1372 servicegroups: diskspace
1373 nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1374 hostgroups: hasbootfs
1376 name: disk usage on /srv
1377 servicegroups: diskspace
1378 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
1379 hostgroups: hassrvfs
1381 name: disk usage on /var/lib/postgresql
1382 servicegroups: diskspace
1383 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1384 hosts: sibelius, buxtehude, lw07, fasolo
1386 name: disk usage on /var/log
1387 servicegroups: diskspace
1388 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1389 hostgroups: hasvarlogfs
1391 name: disk usage on /var/spool/postfix
1392 servicegroups: diskspace
1393 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1396 name: disk usage on /srv/mirrors
1397 servicegroups: diskspace
1398 nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1401 name: disk usage on /srv/snapshot.debian.org
1402 servicegroups: diskspace
1403 nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1406 name: disk usage on /srv/farm-snapshot/farm-2017-0
1407 servicegroups: diskspace
1408 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-0"
1411 name: disk usage on /srv/farm-snapshot/farm-2017-1
1412 servicegroups: diskspace
1413 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-1"
1416 name: disk usage on /srv/farm-snapshot/farm-2017-2
1417 servicegroups: diskspace
1418 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-2"
1421 name: disk usage on /srv/farm-snapshot/farm-2017-3
1422 servicegroups: diskspace
1423 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-3"
1426 name: disk usage on /srv/farm-snapshot/farm-2017-4
1427 servicegroups: diskspace
1428 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-4"
1431 name: disk usage on /srv/farm-snapshot/farm-2017-5
1432 servicegroups: diskspace
1433 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-5"
1436 name: disk usage on /srv/farm-snapshot/farm-2017-6
1437 servicegroups: diskspace
1438 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-6"
1441 name: disk usage on /srv/farm-snapshot/farm-2017-7
1442 servicegroups: diskspace
1443 nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2017-7"
1446 name: disk usage on /srv/ftp-master.debian.org
1447 servicegroups: diskspace
1448 nrpe: "/usr/lib/nagios/plugins/check_disk 93 96 /srv/ftp-master.debian.org"
1451 name: disk usage on /storage/snapshot-farm-1
1452 servicegroups: diskspace
1453 nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1456 name: disk usage on /storage/snapshot-farm-2
1457 servicegroups: diskspace
1458 nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1461 name: disk usage on /storage/snapshot-farm-3
1462 servicegroups: diskspace
1463 nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1466 name: disk usage on /storage/snapshot-farm-4
1467 servicegroups: diskspace
1468 nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1471 name: disk usage on /srv/morgue.debian.org/
1472 servicegroups: diskspace
1473 nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1476 name: disk usage on /srv/QNAP-big/
1477 servicegroups: diskspace
1478 nrpe: "/usr/lib/nagios/plugins/check_disk 90 80 /srv/QNAP-big"
1481 name: disk usage on /srv/QNAP-tiny
1482 servicegroups: diskspace
1483 nrpe: "/usr/lib/nagios/plugins/check_disk 90 80 /srv/QNAP-tiny"
1489 name: setup - dsa config
1490 nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1491 hostgroups: computers
1493 excludehostgroups: alioth
1495 name: setup - local hostname etc-hosts
1496 nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1497 hostgroups: computers
1504 nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1505 hostgroups: computers
1508 nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1509 hostgroups: computers
1510 excludehostgroups: highload
1513 nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1514 hostgroups: highload
1517 nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1518 hostgroups: computers
1520 name: processes - total
1521 nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1522 hostgroups: computers
1523 excludehostgroups: manyprocesses
1525 name: processes - total
1526 hostgroups: manyprocesses
1527 nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
1529 name: free memory - mb
1530 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m mb"
1531 hostgroups: computers
1533 name: free memory - percent
1534 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m pct"
1535 hostgroups: computers
1537 name: process - getty
1538 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1539 hostgroups: computers
1540 excludehosts: zelenka, zandonai
1541 excludehostgroups: jessie, stretch
1543 name: process - getty
1544 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1545 hostgroups: jessie, stretch
1548 name: processes - zombies
1549 nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1550 hostgroups: computers
1552 name: system - available entropy
1553 nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1554 event_handler: dsa_event_handler_restart_ekey
1555 hostgroups: computers
1557 name: system - filesystem check
1558 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1561 hostgroups: computers
1566 servicegroups: backup
1567 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1568 hostgroups: computers
1569 excludehosts: backuphost, storace
1571 max_check_attempts: 2
1574 name: backup server config
1575 servicegroups: backup
1576 nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1579 max_check_attempts: 2
1582 name: backup - bacula - last backup
1583 servicegroups: backup
1584 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1586 hostgroups: computers
1587 excludehostgroups: buildd, porterbox, no-bacula
1591 name: backup - bacula - last full backup
1592 servicegroups: backup
1593 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1595 hostgroups: computers
1596 excludehostgroups: buildd, porterbox, no-bacula
1600 name: process - bacula-dir
1601 servicegroups: backup
1602 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -f -c /etc/bacula/bacula-dir.conf'"
1605 name: process - bacula-fd
1606 servicegroups: backup
1607 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1608 hostgroups: computers
1609 excludehostgroups: alioth
1612 name: network backup status - draghi
1613 servicegroups: backup
1614 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 2h /home/debbackup/nagios-status"
1619 name: process - acc.umu.se backup
1620 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1625 name: running kernel
1626 servicegroups: kernel
1627 nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1628 hostgroups: computers
1632 name: apt - security updates
1634 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1635 hostgroups: computers
1639 name: unexpected file - apt sources.list
1641 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /etc/apt/sources.list"
1642 hostgroups: computers
1644 name: upgraded libraries
1645 servicegroups: security
1646 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h"
1647 hostgroups: computers
1650 notification_interval: 10080
1652 name: installed firewall
1653 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1654 hostgroups: computers
1656 name: puppetized firewall
1657 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1658 hostgroups: computers
1660 name: process - ulogd
1661 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1662 hostgroups: computers
1663 excludehostgroups: sparc, jessie, stretch
1665 name: process - ulogd
1666 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1667 hostgroups: jessie, stretch
1669 name: unexpected process - ulogd
1670 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1674 name: process - samhain
1675 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1676 hostgroups: computers
1677 excludehostgroups: brokensamhain
1680 servicegroups: samhain
1681 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1682 hostgroups: computers
1683 depends: process - samhain
1686 excludehostgroups: brokensamhain
1688 name: processes - samhain zombies
1689 nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1690 event_handler: dsa_event_handler_restart_samhain
1691 hostgroups: computers
1692 excludehostgroups: brokensamhain
1696 name: process - syslog-ng
1697 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1698 hostgroups: computers
1699 excludehostgroups: jessie, stretch
1701 name: process - syslog-ng
1702 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -F'"
1703 hostgroups: jessie, stretch
1706 name: remote logging on lotti
1707 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1709 hostgroups: computers
1710 excludehostgroups: alioth
1712 name: remote logging on lully
1713 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1715 hostgroups: computers
1716 excludehostgroups: alioth
1718 name: remote logging on loghost-grnet-01
1719 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1720 runfrom: loghost-grnet-01
1721 hostgroups: computers
1722 excludehostgroups: alioth
1726 name: process - sshd
1727 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1728 hostgroups: computers
1730 name: "network service - sshd"
1731 check: dsa_check_ssh
1732 hostgroups: computers
1733 depends: process - sshd
1735 notification_interval: 1440
1738 name: network service - nrpe
1739 check: check_tcp!5666
1740 hostgroups: computers
1741 max_check_attempts: -2
1742 notification_interval: 1440
1744 name: process - nrpe
1745 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1746 hostgroups: computers
1747 excludehostgroups: stretch
1748 max_check_attempts: -1
1749 depends: network service - nrpe
1751 name: process - nrpe
1752 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -f'"
1754 max_check_attempts: -1
1755 depends: network service - nrpe
1758 name: process - munin-node
1759 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1760 hostgroups: computers
1762 name: network service - munin-node
1763 check: check_tcp!4949
1764 hostgroups: computers
1765 depends: process - munin-node
1768 name: process - ntpd
1769 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1770 hostgroups: computers
1771 excludehostgroups: systemd-timesyncd
1774 name: network service - ntp
1775 check: dsa_check_ntp
1776 hostgroups: computers
1777 excludehostgroups: systemd-timesyncd
1778 depends: process - ntpd
1781 name: system time synced
1782 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl -s"
1783 hostgroups: computers
1784 excludehostgroups: systemd-timesyncd, wheezy
1787 name: system time synced
1788 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl"
1789 hostgroups: systemd-timesyncd
1794 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1795 hostgroups: computers
1798 name: process - irqbalance
1799 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
1800 hostgroups: computers
1801 excludehosts: harris, smetana
1804 name: process - cron
1805 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1806 hostgroups: computers
1809 name: process - ud-replicated
1810 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1811 hostgroups: computers
1812 excludehostgroups: alioth
1815 name: process - monit
1816 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1817 hostgroups: computers
1818 excludehostgroups: alioth, jessie, stretch
1821 name: MQ connection on rainier
1823 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1825 hostgroups: computers
1828 excludehostgroups: alioth, broken_mq
1830 name: MQ connection on rapoport
1832 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1834 hostgroups: computers
1837 excludehostgroups: alioth, broken_mq
1840 name: local resolver
1841 nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1842 hostgroups: computers
1845 name: process - unbound
1846 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1847 hostgroups: computers
1848 excludehostgroups: alioth
1851 name: process - uptimed
1852 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1853 hostgroups: computers
1856 name: process - udevd
1857 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1858 hostgroups: computers
1859 excludehostgroups: jessie, stretch
1861 name: process - udevd
1862 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1863 hostgroups: jessie, stretch
1866 name: process - acpid
1867 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1868 hostgroups: acpid-hosts
1869 excludehostgroups: jessie, stretch
1871 name: unexpected process - acpid
1872 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1873 hostgroups: computers
1874 excludehostgroups: acpid-hosts, kvmdomains
1877 name: process - xinetd
1878 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
1879 hostgroups: xinetd-hosts
1881 name: unwanted process - xinetd
1882 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1883 hostgroups: computers
1884 excludehostgroups: xinetd-hosts
1887 name: process - stunnel4 - puppet-ekeyd
1888 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1889 hostgroups: wheezy, jessie, stretch
1890 excludehostgroups: alioth
1892 name: process - stunnel4 - puppet-ekeyd is crazy
1893 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-stunnel-sanity"
1894 hostgroups: computers
1895 excludehostgroups: alioth
1896 excludehosts: czerny, grnet-node01, storace
1900 name: ganeti - job watcher paused
1901 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1902 hostgroups: computers
1904 name: unwanted process - openvpn
1905 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1906 hostgroups: computers
1909 name: unwanted process - gkrellmd
1910 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1911 hostgroups: computers
1913 name: unwanted process - rpc.statd
1914 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1915 hostgroups: computers
1916 excludehostgroups: nfs-client, nfs-server
1918 name: unwanted process - rpc.statd
1919 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1921 excludehosts: storace
1923 name: unwanted process - inetd
1924 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1925 hostgroups: computers
1928 name: unwanted process - snmpd
1929 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1930 hostgroups: computers
1934 name: "host SSL cert"
1935 nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1936 hostgroups: computers
1938 name: "host SSL cert - debian server"
1939 nrpe: "if [ -e /etc/ssl/debian/certs/thishost-server.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost-server.crt; else echo 'No thishost-server.crt on this host.'; fi"
1940 hostgroups: computers
1942 name: "host SSL cert - debian client"
1943 nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
1944 hostgroups: computers
1947 nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
1948 hostgroups: computers
1950 name: SSL certs - puppet
1952 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
1955 name: SSL certs - LE
1957 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /srv/puppet.debian.org/from-letsencrypt"
1960 # {{{ HW health/raid
1962 name: process - mdadm monitor
1964 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1966 excludehostgroups: jessie, stretch
1968 name: process - mdadm monitor
1970 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1972 excludehostgroups: wheezy
1974 name: RAID - sw raid
1976 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1979 name: RAID - unexpected sw raid
1981 nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
1982 hostgroups: computers
1983 excludehostgroups: sw-raid
1986 name: HW - HP raid status
1988 nrpe: "if [ -e /var/cache/dsa/nagios/dsa-check-hpssacli ] ; then /usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/dsa-check-hpssacli ; else /usr/lib/nagios/plugins/dsa-check-hpacucli; fi"
1990 hostgroups: dl380, dl360, bl460, bl460g8, dl180
1992 name: HW - hpacucli status
1994 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1999 # name: HW - edac status
2000 # nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
2001 # check_interval: 120
2002 #hostgroups: computers
2003 #excludehosts: villa, lobos
2005 name: HW - hpasmcli status
2006 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2008 hostgroups: dl380, dl360, bl460, bm-bl
2009 excludehosts: villa, lobos, storace, mirror-anu, sallinen
2011 name: HW - hpasmcli status
2012 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2016 name: HW - hpasmcli status
2017 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant --ignore-failed='PS2'"
2021 name: HW - hpasmcli status
2022 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2024 hosts: storace, sallinen
2026 name: HW - hpasmcli status
2027 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present --ps-no-redundant --ignore-failed='PS1'"
2031 name: HW - hpasmcli status
2032 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2037 name: RAID - aacraid
2039 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2045 nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2046 hostgroups: drbd-hosts
2048 name: HW - OpenManage status
2049 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage"
2053 # {{{ ### mail stuff
2054 # {{{ exim processes and mailq
2056 name: process - exim
2057 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2058 hostgroups: computers
2059 excludehostgroups: postfix-hosts, mail-relay
2060 excludehosts: master, quantz, buxtehude
2062 name: process - exim
2063 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2064 hostgroups: mail-relay
2066 name: process - exim - total
2067 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2068 hostgroups: computers
2069 excludehostgroups: postfix-hosts
2070 excludehosts: master, quantz, buxtehude
2072 name: process - exim
2073 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2074 hosts: master, quantz, buxtehude
2077 nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2078 hostgroups: heavy-exim
2082 name: process - clamav - clamd
2083 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2084 hostgroups: heavy-exim, heavy-postfix
2086 name: service - clamav
2087 nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2088 hostgroups: heavy-exim, heavy-postfix
2089 depends: process - clamav - clamd
2091 name: process - clamav - freshclam
2092 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2093 hostgroups: heavy-exim, heavy-postfix
2094 excludehostgroups: jessie, stretch
2096 name: process - clamav - freshclam
2097 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --foreground=true'"
2098 hostgroups: heavy-exim, heavy-postfix
2099 excludehostgroups: wheezy
2101 name: unwanted process - clamav
2102 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2103 hostgroups: computers
2104 excludehostgroups: heavy-exim, heavy-postfix
2106 name: unwanted process - freshclam
2107 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2108 hostgroups: computers
2109 excludehostgroups: heavy-exim, heavy-postfix
2113 name: process - spamd - master
2114 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2116 excludehosts: picconi
2117 excludehostgroups: jessie, stretch
2119 name: process - spamd - master
2120 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 5 --helper-home-dir'"
2122 excludehosts: picconi
2123 excludehostgroups: wheezy
2125 name: process - spamd - master
2126 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 20 --min-spare=5 --helper-home-dir'"
2129 name: process - spamd - master
2130 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 10 --helper-home-dir'"
2133 name: process - spamd - child
2134 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2137 depends: process - spamd - master
2140 name: unwanted process - spamd
2141 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2142 hostgroups: computers
2143 excludehostgroups: spamd
2144 excludehosts: bendel
2147 name: unwanted process - greylistd
2148 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2149 hostgroups: computers
2153 name: process - postgrey
2154 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2155 hostgroups: heavy-exim
2156 excludehostgroups: jessie, stretch
2158 name: process - postgrey
2159 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2160 hostgroups: heavy-exim
2161 excludehostgroups: wheezy
2163 name: process - postgrey
2164 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2165 hostgroups: heavy-postfix
2168 name: unwanted process - postgrey
2169 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2170 hostgroups: computers
2171 excludehostgroups: heavy-postfix, heavy-exim
2174 name: process - amavis - master
2175 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2176 hostgroups: amavis-hosts
2178 name: process - amavis - all
2179 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2180 hostgroups: amavis-hosts
2181 depends: process - amavis - master
2184 name: unwanted process - amavis
2185 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2186 hostgroups: computers
2187 excludehostgroups: amavis-hosts
2190 name: process - weightd - master
2191 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2192 hostgroups: heavy-postfix, alioth
2194 name: process - weightd - cache
2195 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2196 hostgroups: heavy-postfix, alioth
2197 depends: process - weightd - master
2199 name: process - weightd - child
2200 nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2201 hostgroups: heavy-postfix, alioth
2202 depends: process - weightd - master
2205 name: unwanted process - policyd-weight
2206 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2207 hostgroups: computers
2208 excludehostgroups: heavy-postfix, alioth
2213 name: process - postfix - master
2214 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/sbin/master'"
2215 hostgroups: postfix-hosts
2218 name: process - postfix - qmgr
2219 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t unix -u'"
2220 hostgroups: postfix-hosts
2221 depends: process - postfix - master
2224 name: process - postfix - pickup
2225 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t unix -u -c'"
2226 hostgroups: postfix-hosts
2227 depends: process - postfix - master
2230 name: process - postfix - anvil
2231 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2232 hostgroups: postfix-hosts
2233 depends: process - postfix - master
2236 name: process - postfix - trivial-rewrite
2237 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2238 hostgroups: postfix-hosts
2239 depends: process - postfix - master
2241 name: process - postfix - proxymap
2242 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2243 hostgroups: postfix-hosts
2244 depends: process - postfix - master
2246 name: process - postfix - cleanup
2247 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2248 hostgroups: postfix-hosts
2249 depends: process - postfix - master
2251 name: process - postfix - local
2252 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2253 hostgroups: postfix-hosts
2254 depends: process - postfix - master
2257 name: network service local - smtps cert
2258 nrpe: "/usr/lib/nagios/plugins/check_smtp -H localhost -S -D 14"
2259 hostgroups: postfix-hosts
2260 depends: process - postfix - master
2263 # {{{ mail - network service
2265 name: network service - smtp
2266 check: dsa_check_smtp
2267 hostgroups: computers
2268 excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2269 depends: process - exim
2272 name: network service - smtp
2273 check: dsa_check_smtp
2274 hostgroups: postfix-hosts
2275 depends: process - postfix - master
2277 name: network service - submission
2278 check: dsa_check_smtp_port!587
2279 hostgroups: incomingmailrelayed
2280 depends: process - exim
2282 name: network service - smtp 2025
2283 check: dsa_check_smtp_port!2025
2284 hostgroups: incomingmailrelayed2025
2285 depends: process - exim
2288 # {{{ ### host specific services
2291 name: process - apache2 - master
2292 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2293 hostgroups: apache2-hosts
2295 name: process - apache2 - worker
2296 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2297 hostgroups: apache2-hosts
2298 depends: process - apache2 - master
2299 excludehosts: klecker
2301 name: process - apache2 - worker
2302 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
2304 depends: process - apache2 - master
2306 name: unwanted process - apache2
2307 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2308 hostgroups: computers
2309 excludehostgroups: apache2-hosts
2312 name: network service - http
2314 hostgroups: apache2-hosts
2315 excludehosts: klecker, casulana
2316 depends: process - apache2 - master
2318 name: network service - http
2320 depends: klecker:process - apache2 - master
2323 # keyserver on kaufmann
2325 name: network service - http keyserver
2326 check: dsa_check_http_port!11371
2328 depends: process - apache2 - master
2330 # https on various hosts
2332 name: network service - https
2334 hostgroups: apache-https
2335 excludehosts: menotti
2336 excludehostgroups: broken_https_default_vhost
2337 depends: "process - apache2 - master"
2340 name: network service - https
2342 hostgroups: https-service
2343 excludehostgroups: broken_https_default_vhost
2346 name: network service - https
2347 check: dsa_check_https_want_auth
2349 depends: "process - apache2 - master"
2352 name: network service - https
2353 check: dsa_check_https_any_status
2354 hostgroups: broken_https_default_vhost
2355 depends: "process - apache2 - master"
2358 name: network service - https cert
2359 check: dsa_check_cert!443
2360 hostgroups: apache-https, https-service
2361 depends: network service - https
2364 name: unwanted network service - https
2365 check: dsa_check_port_closed!443
2366 hostgroups: apache2-hosts
2367 excludehostgroups: apache-https
2372 name: network service - ftp
2374 hostgroups: uploadqueue
2378 name: unwanted process - postgresql
2379 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2380 hostgroups: computers
2381 excludehostgroups: postgres91-hosts, postgres94-hosts, postgres96-hosts
2383 name: unwanted process - postgresql 9.0
2384 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2385 hostgroups: computers
2387 name: process - postgresql91 - master
2388 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2389 hostgroups: postgres91-hosts
2391 name: process - postgresql94 - master
2392 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.4/bin/postgres'"
2393 hostgroups: postgres94-hosts
2395 name: process - postgresql96 - master
2396 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.6/bin/postgres'"
2397 hostgroups: postgres96-hosts
2399 name: postgresql backups
2400 nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2401 hosts: storace, backuphost
2405 name: process - buildd
2406 servicegroups: buildd
2407 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2409 contact_groups: buildd
2411 name: processes - zombie schroot
2412 nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2414 contact_groups: +buildd
2416 max_check_attempts: 24
2419 name: processes - lvcreate
2420 nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2422 contact_groups: +buildd
2426 name: process - statd
2427 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2428 hostgroups: nfs-client, nfs-server
2429 excludehostgroups: stretch
2431 name: process - nfsd
2432 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2433 hostgroups: nfs-server
2435 name: process - lockd
2436 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2437 hostgroups: nfs-server
2439 name: process - mountd
2440 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2441 hostgroups: nfs-server
2444 name: process - automount
2445 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2448 name: unwanted process - automount
2449 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2450 hostgroups: computers
2451 excludehostgroups: autofs
2455 name: mirror sync - bugs
2456 check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2458 servicegroups: mirror
2460 name: mirror sync - security
2461 check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2463 servicegroups: mirror
2465 name: mirror sync - packages
2466 check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2469 max_check_attempts: 5
2471 servicegroups: mirror
2473 name: mirror sync - snapshot
2474 check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2477 max_check_attempts: 5
2479 servicegroups: mirror
2481 name: mirror sync - debian archive backend
2482 check: "dsa_check_mirrorsync!debian.backend.mirrors.debian.org!debian/project/trace/master"
2485 max_check_attempts: 5
2487 servicegroups: mirror
2490 name: mirror static sync - bits
2491 check: "dsa_check_staticsync!bits.debian.org"
2493 servicegroups: mirror
2495 name: mirror static sync - network-test
2496 check: "dsa_check_staticsync_nossl!network-test.debian.org"
2498 servicegroups: mirror
2500 name: mirror static sync - appstream
2501 check: "dsa_check_staticsync!appstream.debian.org"
2503 servicegroups: mirror
2505 name: mirror static sync - blends
2506 check: "dsa_check_staticsync!blends.debian.org"
2508 servicegroups: mirror
2510 name: mirror static sync - d-i
2511 check: "dsa_check_staticsync!d-i.debian.org"
2513 servicegroups: mirror
2515 name: mirror static sync - debaday
2516 check: "dsa_check_staticsync!debaday.debian.net"
2518 servicegroups: mirror
2520 name: mirror static sync - debdeltas
2521 check: "dsa_check_staticsync_nossl!debdeltas.debian.net"
2523 servicegroups: mirror
2525 name: mirror static sync - dsa
2526 check: "dsa_check_staticsync!dsa.debian.org"
2528 servicegroups: mirror
2530 name: mirror static sync - lintian
2531 check: "dsa_check_staticsync!lintian.debian.org"
2533 servicegroups: mirror
2535 name: mirror static sync - mozilla
2536 check: "dsa_check_staticsync_nossl!mozilla.debian.net"
2538 servicegroups: mirror
2540 name: mirror static sync - news
2541 check: "dsa_check_staticsync!news.debian.net"
2543 servicegroups: mirror
2545 name: mirror static sync - incoming.ports
2546 check: "dsa_check_staticsync_nossl!incoming.ports.debian.org"
2548 servicegroups: mirror
2550 # name: mirror static sync - release
2551 # check: "dsa_check_staticsync!release.debian.org"
2553 # servicegroups: mirror
2555 name: mirror static sync - rtc
2556 check: "dsa_check_staticsync!rtc.debian.org"
2558 servicegroups: mirror
2560 name: mirror static sync - security-team
2561 check: "dsa_check_staticsync!security-team.debian.org"
2563 servicegroups: mirror
2565 name: mirror static sync - wnpp-by-tags
2566 check: "dsa_check_staticsync!wnpp-by-tags.debian.net"
2568 servicegroups: mirror
2570 name: mirror static sync - www.ports
2571 check: "dsa_check_staticsync!www.ports.debian.org"
2573 servicegroups: mirror
2575 name: mirror static sync - timeline
2576 check: "dsa_check_staticsync!timeline.debian.net"
2578 servicegroups: mirror
2580 name: mirror static sync - backports
2581 check: "dsa_check_staticsync!backports.debian.org"
2583 servicegroups: mirror
2585 name: mirror static sync - incoming
2586 check: "dsa_check_staticsync_nossl!incoming.debian.org"
2588 servicegroups: mirror
2590 name: mirror static sync - metadata.ftp-master
2591 check: "dsa_check_staticsync_nossl!metadata.ftp-master.debian.org"
2593 servicegroups: mirror
2595 name: mirror static sync - mirror-master
2596 check: "dsa_check_staticsync_nossl!mirror-master.debian.org"
2598 servicegroups: mirror
2600 name: mirror static sync - deb
2601 check: "dsa_check_staticsync_nossl!deb.debian.org"
2603 servicegroups: mirror
2605 name: mirror static sync - manpages
2606 check: "dsa_check_staticsync!manpages.debian.org"
2608 servicegroups: mirror
2611 name: mirror static sync - 10years
2612 check: "dsa_check_staticsync!10years.debconf.org"
2614 servicegroups: mirror
2616 name: mirror static sync - debconf0
2617 check: "dsa_check_staticsync!debconf0.debconf.org"
2619 servicegroups: mirror
2621 name: mirror static sync - debconf1
2622 check: "dsa_check_staticsync!debconf1.debconf.org"
2624 servicegroups: mirror
2626 name: mirror static sync - debconf2
2627 check: "dsa_check_staticsync!debconf2.debconf.org"
2629 servicegroups: mirror
2631 name: mirror static sync - debconf3
2632 check: "dsa_check_staticsync!debconf3.debconf.org"
2634 servicegroups: mirror
2636 name: mirror static sync - debconf4
2637 check: "dsa_check_staticsync!debconf4.debconf.org"
2639 servicegroups: mirror
2641 name: mirror static sync - debconf5
2642 check: "dsa_check_staticsync!debconf5.debconf.org"
2644 servicegroups: mirror
2646 name: mirror static sync - debconf6
2647 check: "dsa_check_staticsync!debconf6.debconf.org"
2649 servicegroups: mirror
2651 name: mirror static sync - debconf7
2652 check: "dsa_check_staticsync!debconf7.debconf.org"
2654 servicegroups: mirror
2656 name: mirror static sync - debconf16
2657 check: "dsa_check_staticsync!debconf16.debconf.org"
2659 servicegroups: mirror
2661 name: mirror static sync - es
2662 check: "dsa_check_staticsync!es.debconf.org"
2664 servicegroups: mirror
2666 name: mirror static sync - fr
2667 check: "dsa_check_staticsync!fr.debconf.org"
2669 servicegroups: mirror
2671 name: mirror static sync - miniconf10
2672 check: "dsa_check_staticsync!miniconf10.debconf.org"
2674 servicegroups: mirror
2678 name: process - named
2679 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
2680 hostgroups: bind9-hosts
2682 name: network service - dns
2684 hostgroups: bind9-hosts
2685 depends: process - named
2687 name: unwanted process - named
2688 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2689 hostgroups: computers
2690 excludehostgroups: bind9-hosts
2693 name: DNS SOA sync - debian.org
2694 check: "dsa_check_soas_add!denis.debian.org!debian.org"
2697 name: DNS SOA sync - debian.net
2698 check: "dsa_check_soas_add!denis.debian.org!debian.net"
2701 name: DNS SOA sync - debian.com
2702 check: "dsa_check_soas_add!denis.debian.org!debian.com"
2705 name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2706 check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2709 name: DNS SOA sync - alioth.debian.org
2710 check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2713 name: DNS SOA sync - debconf.net
2714 check: "dsa_check_soas_add!denis.debian.org!debconf.net"
2717 name: DNS SOA sync - debconf.org
2718 check: "dsa_check_soas_add!denis.debian.org!debconf.org"
2721 name: DNS SOA sync - debianday.org
2722 check: "dsa_check_soas_add!denis.debian.org!debianday.org"
2725 name: DNS SOA sync - dpkg.org
2726 check: "dsa_check_soas_add!denis.debian.org!dpkg.org"
2729 name: DNS - delegation and signature expiry
2731 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2734 name: DNS - security delegations
2736 remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2739 name: DNS - key coverage
2741 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2744 name: DNS - DS expiry
2746 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2749 name: DNS - zones signed properly
2751 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-signature-all"
2756 name: process - multipathd
2757 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u root -C multipathd -a '/sbin/multipathd'"
2758 hostgroups: multipath-hosts
2760 name: unwanted process - multipathd
2761 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C multipathd"
2762 hostgroups: computers
2763 excludehostgroups: multipath-hosts
2767 name: current chroots
2768 nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2769 hostgroups: porterbox
2775 # name: process - openstack - memcached
2776 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2777 # hostgroups: openstack-controller
2779 # name: process - openstack - glance-registry
2780 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2781 # hostgroups: openstack-controller
2783 # name: process - openstack - nova-api
2784 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2785 # hostgroups: openstack-controller
2787 # name: process - openstack - nova-compute
2788 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2789 # hostgroups: openstack-compute
2791 # name: process - openstack - nova-cert
2792 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2793 # hostgroups: openstack-controller
2795 # name: process - openstack - nova-conductor
2796 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2797 # hostgroups: openstack-controller
2799 # name: process - openstack - nova-consoleauth
2800 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2801 # hostgroups: openstack-controller
2803 # name: process - openstack - nova-scheduler
2804 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2805 # hostgroups: openstack-controller
2807 # name: process - openstack - nova-spicehtml5proxy
2808 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2809 # hostgroups: openstack-controller
2811 # name: process - openstack - neutron-server
2812 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2813 # hostgroups: openstack-controller
2817 name: system - all services running
2818 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-systemd-services"
2819 hostgroups: jessie, stretch
2822 name: process - slapd
2823 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2826 name: network service - ldaps cert
2827 check: dsa_check_cert!636
2828 depends: process - slapd
2833 name: network service - finger
2836 depends: process - xinetd
2839 name: network service - rsync
2840 check: check_tcp!873
2841 hostgroups: rsyncd-hosts
2844 name: process - icinga
2845 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:90 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2849 name: process - debianqueued
2850 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2854 name: network service - gobby
2855 check: check_tcp!6523
2857 contact_groups: gobby
2860 name: network service - sip-tls cert - 443
2861 check: dsa_check_cert!443
2865 name: network service - sip-tls cert - 5061
2866 check: dsa_check_cert!5061
2870 name: freeradius process
2871 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u freerad -C freeradius -a '/usr/sbin/freeradius -xx'"
2876 name: puppetmaster cert
2877 nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2880 max_check_attempts: 2
2883 name: puppet - agent check
2884 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/puppet-agent"
2885 hostgroups: computers
2886 excludehosts: moszumanska
2892 # vim: set ts=2 sw=2 et ai si fdm=marker: