1 # Non comment lines are YAML
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
8 # - *: check munin stats collection works
9 # - *: check backups are successful
10 # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
13 #############################
15 #############################
19 hostgroups: notacomputer
21 check_command: dsa_check_always_ok
24 hostgroups: notacomputer
26 check_command: dsa_check_always_ok
28 address: 130.239.18.97
30 hostgroups: layer3-infrastructure
32 address: 130.242.6.198
34 hostgroups: layer3-infrastructure
38 hostgroups: layer3-infrastructure
40 address: 89.16.160.116
42 hostgroups: layer3-infrastructure
44 address: 200.17.202.254
46 hostgroups: layer3-infrastructure
48 address: 150.203.164.1
50 hostgroups: layer3-infrastructure
52 address: 213.104.121.213
54 hostgroups: layer3-infrastructure
58 hostgroups: layer3-infrastructure
60 address: 217.196.149.238
62 hostgroups: layer3-infrastructure
66 hostgroups: layer3-infrastructure
68 address: 93.94.130.190
70 hostgroups: layer3-infrastructure
72 address: 62.104.23.249
74 hostgroups: layer3-infrastructure
78 hostgroups: layer3-infrastructure
80 address: 194.177.211.193
82 hostgroups: layer3-infrastructure
84 # really henet, because of something weird
87 hostgroups: layer3-infrastructure
89 address: 185.17.185.190
91 hostgroups: layer3-infrastructure
93 address: 82.195.78.118
95 hostgroups: layer3-infrastructure
99 hostgroups: layer3-infrastructure
101 address: 140.211.166.1
103 hostgroups: layer3-infrastructure
105 address: 133.242.99.65
107 hostgroups: layer3-infrastructure
109 address: 193.62.202.20
111 hostgroups: layer3-infrastructure
112 contacts: tjrc1, dave
114 address: 212.211.132.249
116 hostgroups: layer3-infrastructure
118 address: 212.211.132.1
120 hostgroups: layer3-infrastructure
122 address: 86.59.118.145
124 hostgroups: layer3-infrastructure
126 address: 154.57.0.249
128 hostgroups: layer3-infrastructure
130 address: 154.57.0.250
132 hostgroups: layer3-infrastructure
134 address: 206.12.19.254
135 hostgroups: layer3-infrastructure
138 address: 128.101.240.222
140 hostgroups: layer3-infrastructure
142 address: 143.106.167.113
144 hostgroups: layer3-infrastructure
146 address: 130.89.149.1
148 hostgroups: layer3-infrastructure
150 # really janet, because ynic is stupid about firewalling
151 address: 146.97.71.46
153 hostgroups: layer3-infrastructure
156 hostgroups: notacomputer
158 check_command: dsa_check_always_ok
160 address: 209.87.16.254
162 hostgroups: layer3-infrastructure
167 address: 212.227.126.54
168 parents: gw-1und1-sec
169 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hassrvfs, pe1950
171 address: 195.20.242.89
172 parents: gw-1und1-sec
173 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950
177 address: 130.239.18.123
179 hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, stretch, autofs, sw-raid
180 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
183 address: 130.242.6.199
185 hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts
189 address: 141.170.6.156
191 hostgroups: computers, porterbox, stretch, hassrvfs
193 address: 141.170.6.149
195 hostgroups: computers, buildd, stretch, nfs-client
197 address: 141.170.6.150
199 hostgroups: computers, buildd, stretch, nfs-client
201 address: 141.170.6.154
203 hostgroups: computers, buildd, stretch, nfs-client
205 address: 141.170.6.155
207 hostgroups: computers, buildd, stretch, nfs-client
209 address: 141.170.6.157
211 hostgroups: computers, buildd, stretch, hassrvfs
213 address: 141.170.6.151
215 hostgroups: computers, porterbox, stretch, nfs-client
217 address: 141.170.6.152
219 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
221 address: 141.170.6.153
223 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
225 address: 141.170.6.158
227 hostgroups: computers, buildd, stretch, hassrvfs
231 address: 217.140.96.56
233 hostgroups: computers, hasbootfs, hassrvfs, porterbox, stretch, broken_mq
235 address: 217.140.96.57
237 hostgroups: computers, hasbootfs, hassrvfs, buildd, stretch, broken_mq
239 address: 217.140.96.58
241 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq, sw-raid
243 address: 217.140.96.60
245 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq, sw-raid
247 address: 217.140.96.61
249 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq, sw-raid
251 address: 217.140.96.66
253 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, porterbox, broken_mq
255 address: 217.140.96.67
257 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, buildd, broken_mq
259 address: 217.140.96.71
261 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd, broken_mq
265 address: 138.16.160.17
267 hostgroups: computers, service, apache2-hosts, apache-https, dl380, rsyncd-hosts, stretch, hassrvfs, postgres96-hosts, manyprocesses
271 address: 5.153.231.241
273 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
275 address: 5.153.231.242
277 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
279 address: 5.153.231.243
281 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
283 address: 5.153.231.244
285 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
287 address: 5.153.231.245
289 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
291 address: 5.153.231.246
293 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
295 address: 5.153.231.247
297 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
299 address: 5.153.231.248
301 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
303 address: 5.153.231.249
305 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
307 address: 5.153.231.250
309 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
311 address: 5.153.231.251
313 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
315 address: 5.153.231.252
317 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
319 address: 5.153.231.253
321 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
323 address: 5.153.231.254
325 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
330 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, nfs-server, systemd-timesyncd
334 hostgroups: secondary-IPs, rsyncd-hosts
338 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
342 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd
346 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
350 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
355 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
360 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
362 address: 5.153.231.10
364 hostgroups: computers, hassrvfs, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
368 hostgroups: notacomputer
370 address: 5.153.231.11
371 parents: ganeti-bytemark
372 hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
374 address: 5.153.231.12
375 parents: ganeti-bytemark
376 hostgroups: computers, hassrvfs, kvmdomains, stretch, systemd-timesyncd
378 address: 5.153.231.13
379 parents: ganeti-bytemark
380 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd, broken_https_default_vhost
382 address: 5.153.231.16
383 parents: ganeti-bytemark
384 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
386 address: 5.153.231.15
387 parents: ganeti-bytemark
388 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
390 address: 5.153.231.17
391 parents: ganeti-bytemark
392 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
394 address: 5.153.231.18
395 parents: ganeti-bytemark
396 hostgroups: computers, general, kvmdomains, stretch, service, apache-https, apache2-hosts, heavy-exim, systemd-timesyncd
398 address: 5.153.231.19
399 parents: ganeti-bytemark
400 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, systemd-timesyncd
402 address: 5.153.231.20
403 parents: ganeti-bytemark
404 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
406 address: 5.153.231.21
407 parents: ganeti-bytemark
408 hostgroups: secondary-IPs
410 address: 5.153.231.22
411 parents: ganeti-bytemark
412 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
414 address: 5.153.231.23
415 parents: ganeti-bytemark
416 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
418 address: 5.153.231.25
419 parents: ganeti-bytemark
420 hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
422 address: 5.153.231.26
423 parents: ganeti-bytemark
424 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
426 address: 5.153.231.27
427 parents: ganeti-bytemark
428 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, porterbox, systemd-timesyncd
430 address: 5.153.231.28
431 parents: ganeti-bytemark
432 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
434 address: 5.153.231.29
435 parents: ganeti-bytemark
436 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
438 address: 5.153.231.30
439 parents: ganeti-bytemark
440 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
442 address: 5.153.231.32
443 parents: ganeti-bytemark
444 hostgroups: computers, pybuildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
446 address: 5.153.231.33
447 parents: ganeti-bytemark
448 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
450 address: 5.153.231.34
451 parents: ganeti-bytemark
452 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
454 address: 5.153.231.36
455 parents: ganeti-bytemark
456 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, systemd-timesyncd
458 address: 5.153.231.38
459 parents: ganeti-bytemark
460 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
462 address: 5.153.231.39
463 parents: ganeti-bytemark
464 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
466 address: 5.153.231.40
467 parents: ganeti-bytemark
468 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
470 address: 5.153.231.42
471 parents: ganeti-bytemark
472 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd
474 address: 5.153.231.43
475 parents: ganeti-bytemark
476 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
478 address: 5.153.231.44
479 parents: ganeti-bytemark
480 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
483 address: 5.153.231.41
485 hostgroups: computers, service, stretch, hassrvfs, dl380, manyprocesses, apache2-hosts
486 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
491 address: 200.17.202.197
493 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https
498 address: 150.203.164.39
500 hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, stretch, apache-https
502 address: 150.203.164.60
504 hostgroups: secondary-IPs, rsyncd-hosts
506 address: 150.203.164.61
508 hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
510 address: 150.203.164.62
512 hostgroups: secondary-IPs
516 address: 217.196.149.227
518 hostgroups: computers, stretch, service, sw-raid, drbd-hosts
520 address: 217.196.149.228
522 hostgroups: computers, stretch, service, sw-raid, drbd-hosts
524 address: 217.196.149.235
526 hostgroups: notacomputer
528 address: 217.196.149.229
530 hostgroups: computers, stretch, service, apache2-hosts
531 mirror-conova-debian:
532 address: 217.196.149.232
533 hostgroups: secondary-IPs
534 parents: mirror-conova
535 mirror-conova-security:
536 address: 217.196.149.233
537 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
538 parents: mirror-conova
539 mirror-conova-archive:
540 address: 217.196.149.234
541 hostgroups: secondary-IPs, rsyncd-hosts
542 parents: mirror-conova
543 mirror-conova-syncproxy4-eu:
544 address: 217.196.149.237
545 hostgroups: secondary-IPs, rsyncd-hosts, https-service
546 parents: mirror-conova
549 address: 217.196.149.230
550 parents: ganeti-conova
551 hostgroups: computers, hassrvfs, buildd, stretch
553 address: 217.196.149.231
554 parents: ganeti-conova
555 hostgroups: computers, hassrvfs, buildd, stretch
557 address: 217.196.149.236
558 parents: ganeti-conova
559 hostgroups: computers, hassrvfs, porterbox, stretch
565 hostgroups: computers, service, dl360, stretch, drbd-hosts
569 hostgroups: computers, service, dl360, stretch, drbd-hosts
573 hostgroups: notacomputer
577 parents: ganeti-csail
578 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, apache2-hosts, rsyncd-hosts, apache-https, systemd-timesyncd
581 parents: ganeti-csail
582 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
585 parents: ganeti-csail
586 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
589 parents: ganeti-csail
590 hostgroups: computers, service, kvmdomains, hassrvfs, stretch, apache2-hosts, apache-https, systemd-timesyncd
593 parents: ganeti-csail
594 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd, varnish-hosts
597 parents: ganeti-csail
598 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, uploadqueue, queued, systemd-timesyncd
602 address: 93.94.130.161
604 hostgroups: computers, stretch, dl380, nfs-client, hassrvfs
608 address: 128.61.240.73
610 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror
614 address: 194.177.211.194
616 hostgroups: notacomputer
618 address: 194.177.211.195
620 hostgroups: computers, service, dl380, stretch, drbd-hosts
622 address: 194.177.211.196
624 hostgroups: computers, service, dl380, stretch, drbd-hosts
626 address: 194.177.211.200
628 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
630 address: 194.177.211.201
632 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
634 address: 194.177.211.202
636 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, xinetd-hosts, systemd-timesyncd
638 address: 194.177.211.203
639 parents: ganeti-grnet
640 hostgroups: computers, pybuildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
642 address: 194.177.211.205
643 parents: ganeti-grnet
644 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, postgres96-hosts, apache2-hosts, apache-https, systemd-timesyncd
646 address: 194.177.211.206
647 parents: ganeti-grnet
648 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, systemd-timesyncd
650 address: 194.177.211.207
651 parents: ganeti-grnet
652 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, rsyncd-hosts, systemd-timesyncd
654 address: 194.177.211.208
655 parents: ganeti-grnet
656 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs
657 static-master-grnet-01:
658 address: 194.177.211.209
659 parents: ganeti-grnet
660 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, hassrvfs
666 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch
670 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
674 hostgroups: secondary-IPs
675 mirror-isc-syncproxy:
678 hostgroups: secondary-IPs, rsyncd-hosts
682 address: 185.17.185.177
684 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
686 address: 185.17.185.178
688 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
690 address: 185.17.185.179
692 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
694 address: 185.17.185.180
696 hostgroups: computers, service, stretch, dl180, nfs-server, rsyncd-hosts
698 address: 185.17.185.187
700 hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, postgres96-hosts, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts
702 address: 185.17.185.185
704 hostgroups: secondary-IPs, https-service
707 address: 185.17.185.189
709 hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, apache2-hosts
711 address: 185.17.185.181
713 hostgroups: computers, service, stretch, dl180
715 address: 185.17.185.182
717 hostgroups: computers, service, stretch, dl180
721 address: 82.195.75.109
723 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
725 address: 82.195.75.103
727 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
729 address: 82.195.75.69
731 hostgroups: computers, service, stretch, r540, drbd-hosts, manyprocesses
733 address: 82.195.75.70
735 hostgroups: computers, service, stretch, r540, drbd-hosts, manyprocesses
737 address: 82.195.75.100
739 hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
741 address: 82.195.75.110
743 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload
745 address: 82.195.75.98
747 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim
749 address: 82.195.75.99
751 hostgroups: computers, service, hasbootfs, kvmdomains, stretch, hasvarlogfs
753 address: 82.195.75.106
755 hostgroups: computers, service, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch
757 address: 82.195.75.105
759 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch
761 address: 82.195.75.104
763 hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts, hassrvfs
765 address: 82.195.75.107
767 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https
769 address: 82.195.75.111
771 hostgroups: notacomputer
773 address: 82.195.75.112
775 hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts
777 address: 82.195.75.114
779 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay
781 address: 82.195.75.91
783 hostgroups: computers, service, kvmdomains, stretch, bind9-hosts
785 address: 82.195.75.92
787 hostgroups: computers, service, kvmdomains, stretch
789 address: 82.195.75.65
791 hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https
793 address: 82.195.75.66
795 hostgroups: computers, buildd, stretch, hassrvfs
797 address: 82.195.75.72
799 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
801 address: 82.195.75.74
803 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
805 address: 82.195.75.67
807 hostgroups: computers, buildd, stretch, hassrvfs
809 address: 82.195.75.93
811 hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch
813 address: 82.195.75.68
815 hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd
819 address: 148.100.88.22
821 hostgroups: computers, pybuildd, hassrvfs, stretch, incomingmailrelayed
825 address: 140.211.166.200
827 hostgroups: computers, service, dl380, stretch
829 address: 140.211.166.201
831 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, apache-https
834 address: 140.211.166.194
836 hostgroups: computers, stretch, service, manyprocesses
838 address: 140.211.166.195
840 hostgroups: computers, stretch, service, manyprocesses
842 address: 140.211.166.196
844 hostgroups: computers, hassrvfs, buildd, stretch
848 address: 193.62.202.26
850 hostgroups: computers, service, stretch, dl380, nfs-client, autofs, postgres96-hosts, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts
852 address: 193.62.202.27
854 hostgroups: secondary-IPs, https-service
856 address: 193.62.202.28
858 hostgroups: computers, service, apache2-hosts, sw-raid, jessie, rsyncd-hosts, hasvarlogfs, multipath-hosts, nfs-server, varnish-hosts
859 contacts: tjrc1, dave
863 address: 212.211.132.250
864 parents: gw-scanplus-lobos
865 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror
867 address: 212.211.132.32
868 parents: gw-scanplus-villa
869 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror
873 address: 86.59.118.155
875 hostgroups: computers, buildd, stretch, sw-raid
877 address: 86.59.118.146
879 hostgroups: computers, buildd, stretch, hassrvfs
881 address: 86.59.118.147
883 hostgroups: computers, buildd, stretch, hassrvfs
887 address: 154.57.0.251
888 parents: gw-skroutz1, gw-skroutz2
889 hostgroups: computers, stretch, service, sw-raid, hassrvfs, apache2-hosts
895 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
899 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
903 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
905 address: 209.87.16.10
907 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
910 address: 209.87.16.20
912 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
914 address: 209.87.16.21
916 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
918 address: 209.87.16.24
920 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
922 address: 209.87.16.25
924 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
926 address: 209.87.16.26
928 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
930 address: 209.87.16.27
932 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
934 address: 209.87.16.28
936 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, broken_https_default_vhost, systemd-timesyncd
938 address: 209.87.16.29
940 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
942 address: 209.87.16.30
944 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
946 address: 209.87.16.31
948 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
950 address: 209.87.16.32
952 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
954 address: 209.87.16.33
956 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
958 address: 209.87.16.34
960 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
962 address: 209.87.16.35
964 hostgroups: computers, general, apache2-hosts, kvmdomains, apache-https, stretch, systemd-timesyncd
966 address: 209.87.16.36
968 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, nfs-server, apache2-hosts, xinetd-hosts, apache-https, systemd-timesyncd
970 address: 209.87.16.37
972 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd
974 address: 209.87.16.38
976 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, nfs-client, apache2-hosts, autofs, apache-https, systemd-timesyncd
978 address: 209.87.16.39
980 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, heavy-exim, postgres96-hosts, hasvarlogfs, apache-https, spamd, nfs-server, systemd-timesyncd
982 address: 209.87.16.42
984 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
987 address: 209.87.16.43
989 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
991 address: 209.87.16.44
993 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd, postfix-hosts, postgres96-hosts, crazymanyprocesses
995 address: 209.87.16.46
997 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https, broken_https_default_vhost
999 address: 209.87.16.47
1000 parents: ubc-gateway
1001 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts
1003 address: 209.87.16.48
1004 parents: ubc-gateway
1005 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https
1009 # address: 128.101.240.212
1011 # hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1013 address: 128.101.240.212
1015 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch
1017 address: 128.101.240.215
1019 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
1021 address: 128.101.240.216
1023 hostgroups: secondary-IPs, rsyncd-hosts
1025 address: 128.101.240.217
1027 hostgroups: secondary-IPs
1031 address: 143.106.167.124
1033 hostgroups: computers, stretch, service, manyprocesses
1035 address: 143.106.167.121
1037 hostgroups: computers, hassrvfs, buildd, stretch
1039 address: 143.106.167.122
1041 hostgroups: computers, porterbox, hassrvfs, stretch
1045 address: 130.89.148.10
1047 hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs
1049 address: 130.89.148.12
1051 hostgroups: secondary-IPs
1053 address: 130.89.148.13
1055 hostgroups: secondary-IPs
1057 address: 130.89.148.14
1059 hostgroups: secondary-IPs
1063 address: 144.32.168.74
1065 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1067 address: 144.32.168.75
1069 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1071 address: 144.32.168.76
1073 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1077 address: 80.245.147.46
1079 hostgroups: computers, buildd, hassrvfs, stretch
1081 address: 80.245.147.40
1083 hostgroups: computers, porterbox, hassrvfs, stretch
1087 address: 133.242.99.74
1089 hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror
1092 # {{{ ############################# host groups #############################
1097 layer3-infrastructure:
1098 alias: Layer 3 Devices
1100 alias: Systems that are not really systems. Yeah :)
1107 alias: developer accessible porter machines
1109 alias: machines running services
1111 alias: buildd systems
1113 alias: buildd systems running pybuildd
1115 alias: general purpose developer accessible machines
1118 alias: HP DL380 hosts
1121 alias: HP DL360 hosts
1124 alias: HP BL460 blades
1127 alias: HP BL460 Gen8 blades
1130 alias: HP blades at bytemark
1139 alias: Hosts with Linux software raid
1142 alias: Hosts with Adaptec AACraid
1145 alias: Dell PowerEdge 1950 hosts
1148 alias: Dell PowerEdge R540 hosts
1152 alias: Hosts running jessie
1154 alias: Hosts running stretch
1157 alias: Hosts that are KVM domains
1161 alias: hosts running drbd
1163 alias: hosts running multipathd
1165 alias: hosts running postfix instead of exim
1168 alias: "hosts running the full mail stuff, including clamav and postgrey"
1171 alias: "relays usually are hosts with more exim processes"
1174 alias: "hosts running spamassassin as daemon"
1177 alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1180 alias: hosts running apache2
1183 alias: hosts running bind9
1186 alias: hosts running amavis
1189 alias: hosts providing rsync services
1192 alias: hosts providing services via xinetd
1195 alias: hosts running postgres96
1198 alias: hosts not running ulogd
1201 alias: hosts running acpid
1204 alias: hosts that are an anonymous ftp uploadqueue
1207 alias: hosts running queued
1210 alias: hosts running bosserver
1213 alias: hosts with https services
1216 alias: https service for secondary addresses
1218 broken_https_default_vhost:
1219 alias: https default vhost does not say 200 OK
1222 alias: hosts with lots and lots of (kernel) processes
1224 alias: hosts with stupidly lots of processes
1226 alias: hosts running varnish
1229 alias: hosts running haproxy
1232 alias: "host providing https on the standard port via haproxy"
1236 alias: hosts which are not being backed up with bacula
1240 alias: hosts mounting filesystems using NFS
1243 alias: hosts serving filesystems using NFS
1246 alias: hosts running the automounter
1249 alias: Vms running systemd-timesyncd
1253 alias: "hosts on which high load is normal"
1257 alias: secondary IP addresses
1261 alias: hosts with a /boot filesystem
1264 alias: hosts with a /srv filesystem
1267 alias: hosts with a /var/log filesystem
1270 incomingmailrelayed:
1271 alias: incoming mail needs to go through a mail relay
1274 incomingmailrelayed2025:
1275 alias: incoming mail needs to go through a mail relay
1280 alias: machines that can not run samhain
1283 alias: machines with high round trip times
1286 # alias: nodes that run OpenStack compute
1288 openstack-controller:
1289 alias: nodes that run OpenStack controller
1293 alias: hosts that are security mirrors
1297 alias: hosts whose MQ is broken
1300 # {{{ ############################# servicegroups #############################
1303 alias: diskusage checks
1305 alias: buildd checks
1309 alias: backup checks
1311 alias: kernel checks
1313 alias: apt upgrade status
1315 alias: samhain integrity status
1320 servicegroup_members: apt, kernel, samhain
1324 alias: rabbitMQ stuff
1326 # {{{ ############################# services #############################
1328 # {{{ ### basic networking
1331 check: "check_ping!350.0,20%!600.0,40%"
1332 hostgroups: pingable
1333 excludehostgroups: layer3-infrastructure, high-RTT
1335 max_check_attempts: 4
1339 check: "check_ping!600.0,20%!900.0,40%"
1340 hostgroups: high-RTT
1342 max_check_attempts: 4
1346 check: "check_ping!2000.0,60%!3000.0,80%"
1347 hostgroups: layer3-infrastructure
1349 max_check_attempts: 4
1352 name: network - v6 gw
1353 nrpe: "/usr/lib/nagios/plugins/dsa-check-ipv6-default-gw"
1354 hostgroups: computers
1357 # {{{ ### disk usage
1359 name: disk usage - all
1360 servicegroups: diskspace
1361 nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
1362 hostgroups: computers
1363 excludehosts: sibelius
1365 name: disk usage - all
1366 servicegroups: diskspace
1367 nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
1371 name: disk usage on /
1372 servicegroups: diskspace
1373 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1374 hostgroups: computers
1376 name: disk usage on /boot
1377 servicegroups: diskspace
1378 nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1379 hostgroups: hasbootfs
1381 name: disk usage on /srv
1382 servicegroups: diskspace
1383 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
1384 hostgroups: hassrvfs
1386 name: disk usage on /var/lib/postgresql
1387 servicegroups: diskspace
1388 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1389 hosts: sibelius, buxtehude, lw07, fasolo
1391 name: disk usage on /var/log
1392 servicegroups: diskspace
1393 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1394 hostgroups: hasvarlogfs
1396 name: disk usage on /var/spool/postfix
1397 servicegroups: diskspace
1398 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1401 name: disk usage on /srv/mirrors
1402 servicegroups: diskspace
1403 nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1406 name: disk usage on /srv/snapshot.debian.org
1407 servicegroups: diskspace
1408 nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1411 name: disk usage on /srv/farm-snapshot/farm-2017-0
1412 servicegroups: diskspace
1413 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-0"
1416 name: disk usage on /srv/farm-snapshot/farm-2017-1
1417 servicegroups: diskspace
1418 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-1"
1421 name: disk usage on /srv/farm-snapshot/farm-2017-2
1422 servicegroups: diskspace
1423 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-2"
1426 name: disk usage on /srv/farm-snapshot/farm-2017-3
1427 servicegroups: diskspace
1428 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-3"
1431 name: disk usage on /srv/farm-snapshot/farm-2017-4
1432 servicegroups: diskspace
1433 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-4"
1436 name: disk usage on /srv/farm-snapshot/farm-2017-5
1437 servicegroups: diskspace
1438 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-5"
1441 name: disk usage on /srv/farm-snapshot/farm-2017-6
1442 servicegroups: diskspace
1443 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-6"
1446 name: disk usage on /srv/farm-snapshot/farm-2017-7
1447 servicegroups: diskspace
1448 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-7"
1451 name: disk usage on /srv/ftp-master.debian.org
1452 servicegroups: diskspace
1453 nrpe: "/usr/lib/nagios/plugins/check_disk 93 96 /srv/ftp-master.debian.org"
1456 name: disk usage on /storage/snapshot-farm-1
1457 servicegroups: diskspace
1458 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-1"
1461 name: disk usage on /storage/snapshot-farm-2
1462 servicegroups: diskspace
1463 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-2"
1466 name: disk usage on /storage/snapshot-farm-3
1467 servicegroups: diskspace
1468 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-3"
1471 name: disk usage on /storage/snapshot-farm-4
1472 servicegroups: diskspace
1473 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-4"
1476 name: disk usage on /storage/snapshot-farm-90
1477 servicegroups: diskspace
1478 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-09"
1481 name: disk usage on /storage/snapshot-farm-10
1482 servicegroups: diskspace
1483 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-10"
1487 name: disk usage on nfs farm 1
1488 servicegroups: diskspace
1489 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-1"
1492 name: disk usage on nfs farm 2
1493 servicegroups: diskspace
1494 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-2"
1497 name: disk usage on nfs farm 3
1498 servicegroups: diskspace
1499 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-3"
1502 name: disk usage on nfs farm 4
1503 servicegroups: diskspace
1504 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-4"
1507 name: disk usage on nfs farm 09
1508 servicegroups: diskspace
1509 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-09"
1512 name: disk usage on nfs farm 10
1513 servicegroups: diskspace
1514 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /auto.dsa/snapshot-10"
1518 name: disk usage on /srv/morgue.debian.org/
1519 servicegroups: diskspace
1520 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org"
1523 name: disk usage on /srv/QNAP-big/
1524 servicegroups: diskspace
1525 nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/QNAP-big"
1528 name: disk usage on /srv/QNAP-tiny
1529 servicegroups: diskspace
1530 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/QNAP-tiny"
1536 name: setup - dsa config
1537 nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1538 hostgroups: computers
1541 name: setup - local hostname etc-hosts
1542 nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1543 hostgroups: computers
1550 nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1551 hostgroups: computers
1554 nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1555 hostgroups: computers
1556 excludehostgroups: highload
1559 nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1560 hostgroups: highload
1563 nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1564 hostgroups: computers
1566 name: processes - total
1567 nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1568 hostgroups: computers
1569 excludehostgroups: manyprocesses, crazymanyprocesses
1571 name: processes - total
1572 hostgroups: manyprocesses
1573 nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
1575 name: processes - total
1576 hostgroups: crazymanyprocesses
1577 nrpe: "/usr/lib/nagios/plugins/check_procs 15000 25000"
1579 name: free memory - mb
1580 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m mb"
1581 hostgroups: computers
1583 name: free memory - percent
1584 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m pct"
1585 hostgroups: computers
1587 name: process - getty
1588 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1589 hostgroups: computers
1592 name: processes - zombies
1593 nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1594 hostgroups: computers
1596 name: system - available entropy
1597 nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1598 event_handler: dsa_event_handler_restart_ekey
1599 hostgroups: computers
1601 name: system - filesystem check
1602 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1605 hostgroups: computers
1610 servicegroups: backup
1611 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1612 hostgroups: computers
1613 excludehosts: backuphost, storace
1615 max_check_attempts: 2
1618 name: backup server config
1619 servicegroups: backup
1620 nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1623 max_check_attempts: 2
1626 name: backup - bacula - last backup
1627 servicegroups: backup
1628 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1630 hostgroups: computers
1631 excludehostgroups: buildd, pybuildd, porterbox, no-bacula
1635 name: backup - bacula - last full backup
1636 servicegroups: backup
1637 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1639 hostgroups: computers
1640 excludehostgroups: buildd, pybuildd, porterbox, no-bacula
1644 name: process - bacula-dir
1645 servicegroups: backup
1646 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -f -c /etc/bacula/bacula-dir.conf'"
1649 name: process - bacula-fd
1650 servicegroups: backup
1651 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1652 hostgroups: computers
1655 name: network backup status - draghi
1656 servicegroups: backup
1657 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 2h /home/debbackup/nagios-status"
1662 name: process - acc.umu.se backup
1663 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1668 name: running kernel
1669 servicegroups: kernel
1670 nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1671 hostgroups: computers
1675 name: apt - security updates
1677 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1678 hostgroups: computers
1682 name: unexpected file - apt sources.list
1684 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /etc/apt/sources.list"
1685 hostgroups: computers
1687 name: upgraded libraries
1688 servicegroups: security
1689 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h"
1690 hostgroups: computers
1693 notification_interval: 10080
1695 name: installed firewall
1696 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1697 hostgroups: computers
1699 name: puppetized firewall
1700 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1701 hostgroups: computers
1703 name: process - ulogd
1704 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1705 hostgroups: computers
1708 name: process - samhain
1709 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1710 hostgroups: computers
1711 excludehostgroups: brokensamhain
1714 servicegroups: samhain
1715 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1716 hostgroups: computers
1717 depends: process - samhain
1720 excludehostgroups: brokensamhain
1722 name: processes - samhain zombies
1723 nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1724 event_handler: dsa_event_handler_restart_samhain
1725 hostgroups: computers
1726 excludehostgroups: brokensamhain
1730 name: process - syslog-ng
1731 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -F'"
1732 hostgroups: computers
1735 name: remote logging on lotti
1736 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1738 hostgroups: computers
1740 name: remote logging on lully
1741 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1743 hostgroups: computers
1745 name: remote logging on loghost-grnet-01
1746 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1747 runfrom: loghost-grnet-01
1748 hostgroups: computers
1752 name: process - sshd
1753 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1754 hostgroups: computers
1756 name: "network service - sshd"
1757 check: dsa_check_ssh
1758 hostgroups: computers
1759 depends: process - sshd
1761 notification_interval: 1440
1764 name: network service - nrpe
1765 check: check_tcp!5666
1766 hostgroups: computers
1767 max_check_attempts: -2
1768 notification_interval: 1440
1770 name: process - nrpe
1771 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1772 hostgroups: computers
1773 excludehostgroups: stretch
1774 max_check_attempts: -1
1775 depends: network service - nrpe
1777 name: process - nrpe
1778 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -f'"
1780 max_check_attempts: -1
1781 depends: network service - nrpe
1784 name: process - munin-node
1785 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1786 hostgroups: computers
1788 name: network service - munin-node
1789 check: check_tcp!4949
1790 hostgroups: computers
1791 depends: process - munin-node
1794 name: process - ntpd
1795 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1796 hostgroups: computers
1797 excludehostgroups: systemd-timesyncd
1800 name: network service - ntp
1801 check: dsa_check_ntp
1802 hostgroups: computers
1803 excludehostgroups: systemd-timesyncd
1804 depends: process - ntpd
1807 name: system time synced
1808 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl -s"
1809 hostgroups: computers
1810 excludehostgroups: systemd-timesyncd
1813 name: system time synced
1814 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl"
1815 hostgroups: systemd-timesyncd
1820 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1821 hostgroups: computers
1824 name: process - irqbalance
1825 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
1826 hostgroups: computers
1827 excludehosts: harris
1830 name: process - cron
1831 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1832 hostgroups: computers
1835 name: process - ud-replicated
1836 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1837 hostgroups: computers
1840 name: MQ connection on rainier
1842 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1844 hostgroups: computers
1847 excludehostgroups: broken_mq
1849 name: MQ connection on rapoport
1851 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1853 hostgroups: computers
1856 excludehostgroups: broken_mq
1859 name: local resolver
1860 nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1861 hostgroups: computers
1864 name: process - unbound
1865 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1866 hostgroups: computers
1868 name: unbound trust anchors
1869 nrpe: "/usr/lib/nagios/plugins/dsa-check-unbound-anchors"
1870 hostgroups: computers
1874 name: process - uptimed
1875 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1876 hostgroups: computers
1878 name: process - udevd
1879 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1880 hostgroups: computers
1883 name: unexpected process - acpid
1884 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1885 hostgroups: computers
1886 excludehostgroups: acpid-hosts, kvmdomains
1889 name: process - xinetd
1890 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
1891 hostgroups: xinetd-hosts
1893 name: unwanted process - xinetd
1894 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1895 hostgroups: computers
1896 excludehostgroups: xinetd-hosts
1899 name: process - stunnel4 - puppet-ekeyd
1900 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1901 hostgroups: computers
1903 name: process - stunnel4 - puppet-ekeyd is crazy
1904 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-stunnel-sanity"
1905 hostgroups: computers
1906 excludehosts: czerny, grnet-node01, storace
1910 name: ganeti - job watcher paused
1911 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1912 hostgroups: computers
1914 name: unwanted process - openvpn
1915 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1916 hostgroups: computers
1919 name: unwanted process - gkrellmd
1920 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1921 hostgroups: computers
1923 name: unwanted process - rpc.statd
1924 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1925 hostgroups: computers
1926 excludehostgroups: nfs-client, nfs-server
1928 name: unwanted process - rpc.statd
1929 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1931 excludehosts: storace
1933 name: unwanted process - inetd
1934 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1935 hostgroups: computers
1938 name: unwanted process - snmpd
1939 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1940 hostgroups: computers
1944 name: "host SSL cert"
1945 nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1946 hostgroups: computers
1948 name: "host SSL cert - debian server"
1949 nrpe: "if [ -e /etc/ssl/debian/certs/thishost-server.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost-server.crt; else echo 'No thishost-server.crt on this host.'; fi"
1950 hostgroups: computers
1952 name: "host SSL cert - debian client"
1953 nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
1954 hostgroups: computers
1957 nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
1958 hostgroups: computers
1960 name: SSL certs - LE
1962 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /srv/puppet.debian.org/from-letsencrypt"
1965 # {{{ HW health/raid
1967 name: process - mdadm monitor
1969 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1972 name: RAID - sw raid
1974 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1977 name: RAID - unexpected sw raid
1979 nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
1980 hostgroups: computers
1981 excludehostgroups: sw-raid
1984 name: HW - HP raid status
1986 nrpe: "if [ -e /var/cache/dsa/nagios/dsa-check-hpssacli ] ; then /usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/dsa-check-hpssacli ; else /usr/lib/nagios/plugins/dsa-check-hpacucli; fi"
1988 hostgroups: dl380, dl360, bl460, bl460g8, dl180
1990 name: HW - hpacucli status
1992 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1997 # name: HW - edac status
1998 # nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1999 # check_interval: 120
2000 #hostgroups: computers
2001 #excludehosts: villa, lobos
2003 name: HW - hpasmcli status
2004 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2006 hostgroups: dl380, dl360, bl460, bm-bl
2007 excludehosts: villa, lobos, storace, mirror-anu, sallinen
2009 name: HW - hpasmcli status
2010 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2014 name: HW - hpasmcli status
2015 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant --ignore-failed='PS2'"
2019 name: HW - hpasmcli status
2020 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2022 hosts: storace, sallinen
2024 name: HW - hpasmcli status
2025 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present --ps-no-redundant --ignore-failed='PS1'"
2029 name: HW - hpasmcli status
2030 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2035 name: RAID - aacraid
2037 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2043 nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2044 hostgroups: drbd-hosts
2046 name: HW - OpenManage status
2047 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage"
2048 hostgroups: pe1950, r540
2049 excludehosts: wieck, schumann
2051 name: HW - OpenManage status
2052 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage -b bp=0"
2053 hosts: wieck, schumann
2056 # {{{ ### mail stuff
2057 # {{{ exim processes and mailq
2059 name: process - exim
2060 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2061 hostgroups: computers
2062 excludehostgroups: postfix-hosts, mail-relay
2063 excludehosts: master, quantz, buxtehude
2065 name: process - exim
2066 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2067 hostgroups: mail-relay
2069 name: process - exim - total
2070 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2071 hostgroups: computers
2072 excludehostgroups: postfix-hosts
2073 excludehosts: master, quantz, buxtehude
2075 name: process - exim
2076 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2077 hosts: master, quantz, buxtehude
2080 nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2081 hostgroups: heavy-exim
2083 name: process - fail2ban
2084 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -C fail2ban-server"
2085 hostgroups: heavy-exim, heavy-postfix
2087 name: unwanted process - fail2ban
2088 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C fail2ban-server"
2089 hostgroups: computers
2090 excludehostgroups: heavy-exim, heavy-postfix
2094 name: process - clamav - clamd
2095 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2096 hostgroups: heavy-exim, heavy-postfix
2098 name: service - clamav
2099 nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2100 hostgroups: heavy-exim, heavy-postfix
2101 depends: process - clamav - clamd
2103 name: process - clamav - freshclam
2104 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --foreground=true'"
2105 hostgroups: heavy-exim, heavy-postfix
2107 name: unwanted process - clamav
2108 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2109 hostgroups: computers
2110 excludehostgroups: heavy-exim, heavy-postfix
2112 name: unwanted process - freshclam
2113 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2114 hostgroups: computers
2115 excludehostgroups: heavy-exim, heavy-postfix
2119 name: process - spamd - master
2120 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 5 --helper-home-dir'"
2122 excludehosts: picconi
2124 name: process - spamd - master
2125 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 20 --min-spare=5 --helper-home-dir'"
2128 name: process - spamd - master
2129 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 10 --helper-home-dir'"
2132 name: process - spamd - child
2133 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2136 depends: process - spamd - master
2139 name: unwanted process - spamd
2140 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2141 hostgroups: computers
2142 excludehostgroups: spamd
2143 excludehosts: bendel
2146 name: unwanted process - greylistd
2147 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2148 hostgroups: computers
2152 name: process - postgrey
2153 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2154 hostgroups: heavy-exim
2156 name: process - postgrey
2157 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2158 hostgroups: heavy-postfix
2161 name: unwanted process - postgrey
2162 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2163 hostgroups: computers
2164 excludehostgroups: heavy-postfix, heavy-exim
2167 name: process - amavis - master
2168 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2169 hostgroups: amavis-hosts
2171 name: process - amavis - all
2172 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2173 hostgroups: amavis-hosts
2174 depends: process - amavis - master
2177 name: unwanted process - amavis
2178 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2179 hostgroups: computers
2180 excludehostgroups: amavis-hosts
2183 name: process - weightd - master
2184 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2185 hostgroups: heavy-postfix
2187 name: process - weightd - cache
2188 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2189 hostgroups: heavy-postfix
2190 depends: process - weightd - master
2192 name: process - weightd - child
2193 nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2194 hostgroups: heavy-postfix
2195 depends: process - weightd - master
2198 name: unwanted process - policyd-weight
2199 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2200 hostgroups: computers
2201 excludehostgroups: heavy-postfix
2206 name: process - postfix - master
2207 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/sbin/master'"
2208 hostgroups: postfix-hosts
2211 name: process - postfix - qmgr
2212 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t unix -u'"
2213 hostgroups: postfix-hosts
2214 depends: process - postfix - master
2217 name: process - postfix - pickup
2218 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t unix -u -c'"
2219 hostgroups: postfix-hosts
2220 depends: process - postfix - master
2223 name: process - postfix - anvil
2224 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2225 hostgroups: postfix-hosts
2226 depends: process - postfix - master
2229 name: process - postfix - trivial-rewrite
2230 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2231 hostgroups: postfix-hosts
2232 depends: process - postfix - master
2234 name: process - postfix - proxymap
2235 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2236 hostgroups: postfix-hosts
2237 depends: process - postfix - master
2239 name: process - postfix - cleanup
2240 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2241 hostgroups: postfix-hosts
2242 depends: process - postfix - master
2244 name: process - postfix - local
2245 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2246 hostgroups: postfix-hosts
2247 depends: process - postfix - master
2250 name: network service local - smtps cert
2251 nrpe: "/usr/lib/nagios/plugins/check_smtp -H localhost -S -D 14"
2252 hostgroups: postfix-hosts
2253 depends: process - postfix - master
2256 # {{{ mail - network service
2258 name: network service - smtp
2259 check: dsa_check_smtp
2260 hostgroups: computers
2261 excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2262 depends: process - exim
2265 name: network service - smtp
2266 check: dsa_check_smtp
2267 hostgroups: postfix-hosts
2268 depends: process - postfix - master
2270 name: network service - submission
2271 check: dsa_check_smtp_port!587
2272 hostgroups: incomingmailrelayed
2273 depends: process - exim
2275 name: network service - smtp 2025
2276 check: dsa_check_smtp_port!2025
2277 hostgroups: incomingmailrelayed2025
2278 depends: process - exim
2281 # {{{ ### host specific services
2284 name: process - apache2 - master
2285 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2286 hostgroups: apache2-hosts
2288 name: process - apache2 - worker
2289 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2290 hostgroups: apache2-hosts
2291 depends: process - apache2 - master
2292 excludehosts: klecker
2294 name: process - apache2 - worker
2295 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
2297 depends: process - apache2 - master
2299 name: unwanted process - apache2
2300 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2301 hostgroups: computers
2302 excludehostgroups: apache2-hosts
2305 name: network service - http
2307 hostgroups: apache2-hosts
2308 excludehosts: klecker, casulana
2309 depends: process - apache2 - master
2311 name: network service - http
2313 depends: klecker:process - apache2 - master
2316 # keyserver on kaufmann
2318 name: network service - http keyserver
2319 check: dsa_check_http_port!11371
2321 depends: process - apache2 - master
2323 # https on various hosts
2325 name: network service - https
2327 hostgroups: apache-https
2328 excludehosts: menotti
2329 excludehostgroups: broken_https_default_vhost
2330 depends: "process - apache2 - master"
2333 name: network service - https
2335 hostgroups: https-service
2336 excludehostgroups: broken_https_default_vhost
2339 name: network service - https
2340 check: dsa_check_https_want_auth
2342 depends: "process - apache2 - master"
2345 name: network service - https
2346 check: dsa_check_https_any_status
2347 hostgroups: broken_https_default_vhost
2348 depends: "process - apache2 - master"
2351 name: network service - https cert
2352 check: dsa_check_cert!443
2353 hostgroups: apache-https, https-service, haproxy-https-host
2354 depends: network service - https
2357 name: unwanted network service - https
2358 check: dsa_check_port_closed!443
2359 hostgroups: apache2-hosts
2360 excludehostgroups: apache-https, haproxy-https-host
2365 name: process - haproxy - master
2366 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a '/usr/sbin/haproxy-systemd-wrapper'"
2367 hostgroups: haproxy-hosts
2369 name: process - haproxy - worker
2370 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1:15 -u haproxy -a '/usr/sbin/haproxy '"
2371 hostgroups: haproxy-hosts
2372 depends: process - haproxy - master
2374 name: network service - https
2376 hostgroups: haproxy-https-host
2377 depends: "process - haproxy - master"
2381 name: unwanted process - haproxy
2382 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C haproxy"
2383 hostgroups: computers
2384 excludehostgroups: haproxy-hosts
2388 name: process - varnish
2389 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1:15 -u vcache -a '/usr/sbin/varnishd -j unix,user=vcache -F -a '"
2390 hostgroups: varnish-hosts
2391 excludehostgroups: jessie
2393 name: unwanted process - varnish
2394 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C varnishd"
2395 hostgroups: computers
2396 excludehostgroups: varnish-hosts
2402 name: network service - ftp
2404 hostgroups: uploadqueue
2408 name: unwanted process - postgresql
2409 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2410 hostgroups: computers
2411 excludehostgroups: postgres96-hosts
2413 name: unwanted process - postgresql 9.0
2414 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2415 hostgroups: computers
2417 name: process - postgresql96 - master
2418 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.6/bin/postgres'"
2419 hostgroups: postgres96-hosts
2421 name: postgresql backups
2422 nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2423 hosts: storace, backuphost
2427 name: process - buildd
2428 servicegroups: buildd
2429 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2431 contact_groups: buildd
2433 name: process - buildd
2434 servicegroups: buildd
2435 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C python3 -a 'buildd.py'"
2436 hostgroups: pybuildd
2437 contact_groups: buildd
2439 name: processes - zombie schroot
2440 nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2441 hostgroups: buildd, pybuildd
2442 contact_groups: +buildd
2444 max_check_attempts: 24
2449 name: process - statd
2450 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2451 hostgroups: nfs-client, nfs-server
2452 excludehostgroups: stretch
2454 name: process - nfsd
2455 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2456 hostgroups: nfs-server
2458 name: process - lockd
2459 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2460 hostgroups: nfs-server
2462 name: process - mountd
2463 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2464 hostgroups: nfs-server
2467 name: process - automount
2468 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2471 name: unwanted process - automount
2472 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2473 hostgroups: computers
2474 excludehostgroups: autofs
2478 name: mirror sync - bugs
2479 check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2481 servicegroups: mirror
2483 name: mirror sync - security
2484 check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2486 servicegroups: mirror
2488 name: mirror sync - packages
2489 check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2492 max_check_attempts: 5
2494 servicegroups: mirror
2496 name: mirror sync - snapshot
2497 check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2500 max_check_attempts: 5
2502 servicegroups: mirror
2504 name: mirror sync - debian archive backend
2505 check: "dsa_check_mirrorsync!debian.backend.mirrors.debian.org!debian/project/trace/master"
2508 max_check_attempts: 5
2510 servicegroups: mirror
2513 name: mirror static sync - bits
2514 check: "dsa_check_staticsync!bits.debian.org"
2516 servicegroups: mirror
2518 name: mirror static sync - network-test
2519 check: "dsa_check_staticsync_nossl!network-test.debian.org"
2521 servicegroups: mirror
2523 name: mirror static sync - appstream
2524 check: "dsa_check_staticsync!appstream.debian.org"
2526 servicegroups: mirror
2528 name: mirror static sync - blends
2529 check: "dsa_check_staticsync!blends.debian.org"
2531 servicegroups: mirror
2533 name: mirror static sync - d-i
2534 check: "dsa_check_staticsync!d-i.debian.org"
2536 servicegroups: mirror
2538 name: mirror static sync - debaday
2539 check: "dsa_check_staticsync!debaday.debian.net"
2541 servicegroups: mirror
2543 name: mirror static sync - debdeltas
2544 check: "dsa_check_staticsync_nossl!debdeltas.debian.net"
2546 servicegroups: mirror
2548 name: mirror static sync - dsa
2549 check: "dsa_check_staticsync!dsa.debian.org"
2551 servicegroups: mirror
2553 name: mirror static sync - lintian
2554 check: "dsa_check_staticsync!lintian.debian.org"
2556 servicegroups: mirror
2558 name: mirror static sync - mozilla
2559 check: "dsa_check_staticsync_nossl!mozilla.debian.net"
2561 servicegroups: mirror
2563 name: mirror static sync - news
2564 check: "dsa_check_staticsync!news.debian.net"
2566 servicegroups: mirror
2568 name: mirror static sync - incoming.ports
2569 check: "dsa_check_staticsync_nossl!incoming.ports.debian.org"
2571 servicegroups: mirror
2573 # name: mirror static sync - release
2574 # check: "dsa_check_staticsync!release.debian.org"
2576 # servicegroups: mirror
2578 name: mirror static sync - rtc
2579 check: "dsa_check_staticsync!rtc.debian.org"
2581 servicegroups: mirror
2583 name: mirror static sync - security-team
2584 check: "dsa_check_staticsync!security-team.debian.org"
2586 servicegroups: mirror
2588 name: mirror static sync - wnpp-by-tags
2589 check: "dsa_check_staticsync!wnpp-by-tags.debian.net"
2591 servicegroups: mirror
2593 name: mirror static sync - www.ports
2594 check: "dsa_check_staticsync!www.ports.debian.org"
2596 servicegroups: mirror
2598 name: mirror static sync - timeline
2599 check: "dsa_check_staticsync!timeline.debian.net"
2601 servicegroups: mirror
2603 name: mirror static sync - backports
2604 check: "dsa_check_staticsync!backports.debian.org"
2606 servicegroups: mirror
2608 name: mirror static sync - incoming
2609 check: "dsa_check_staticsync_nossl!incoming.debian.org"
2611 servicegroups: mirror
2613 name: mirror static sync - metadata.ftp-master
2614 check: "dsa_check_staticsync_nossl!metadata.ftp-master.debian.org"
2616 servicegroups: mirror
2618 name: mirror static sync - mirror-master
2619 check: "dsa_check_staticsync_nossl!mirror-master.debian.org"
2621 servicegroups: mirror
2623 name: mirror static sync - deb
2624 check: "dsa_check_staticsync_nossl!deb.debian.org"
2626 servicegroups: mirror
2628 name: mirror static sync - manpages
2629 check: "dsa_check_staticsync!manpages.debian.org"
2631 servicegroups: mirror
2634 name: mirror static sync - 10years
2635 check: "dsa_check_staticsync!10years.debconf.org"
2637 servicegroups: mirror
2639 name: mirror static sync - debconf0
2640 check: "dsa_check_staticsync!debconf0.debconf.org"
2642 servicegroups: mirror
2644 name: mirror static sync - debconf1
2645 check: "dsa_check_staticsync!debconf1.debconf.org"
2647 servicegroups: mirror
2649 name: mirror static sync - debconf2
2650 check: "dsa_check_staticsync!debconf2.debconf.org"
2652 servicegroups: mirror
2654 name: mirror static sync - debconf3
2655 check: "dsa_check_staticsync!debconf3.debconf.org"
2657 servicegroups: mirror
2659 name: mirror static sync - debconf4
2660 check: "dsa_check_staticsync!debconf4.debconf.org"
2662 servicegroups: mirror
2664 name: mirror static sync - debconf5
2665 check: "dsa_check_staticsync!debconf5.debconf.org"
2667 servicegroups: mirror
2669 name: mirror static sync - debconf6
2670 check: "dsa_check_staticsync!debconf6.debconf.org"
2672 servicegroups: mirror
2674 name: mirror static sync - debconf7
2675 check: "dsa_check_staticsync!debconf7.debconf.org"
2677 servicegroups: mirror
2679 name: mirror static sync - debconf16
2680 check: "dsa_check_staticsync!debconf16.debconf.org"
2682 servicegroups: mirror
2684 name: mirror static sync - es
2685 check: "dsa_check_staticsync!es.debconf.org"
2687 servicegroups: mirror
2689 name: mirror static sync - fr
2690 check: "dsa_check_staticsync!fr.debconf.org"
2692 servicegroups: mirror
2694 name: mirror static sync - miniconf10
2695 check: "dsa_check_staticsync!miniconf10.debconf.org"
2697 servicegroups: mirror
2701 name: process - named
2702 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
2703 hostgroups: bind9-hosts
2705 name: network service - dns
2707 hostgroups: bind9-hosts
2708 depends: process - named
2710 name: unwanted process - named
2711 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2712 hostgroups: computers
2713 excludehostgroups: bind9-hosts
2716 name: DNS SOA sync - debian.org
2717 check: "dsa_check_soas_add!denis.debian.org!debian.org"
2720 name: DNS SOA sync - debian.net
2721 check: "dsa_check_soas_add!denis.debian.org!debian.net"
2724 name: DNS SOA sync - debian.com
2725 check: "dsa_check_soas_add!denis.debian.org!debian.com"
2728 name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2729 check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2732 name: DNS SOA sync - debconf.net
2733 check: "dsa_check_soas_add!denis.debian.org!debconf.net"
2736 name: DNS SOA sync - debconf.org
2737 check: "dsa_check_soas_add!denis.debian.org!debconf.org"
2740 name: DNS SOA sync - debianday.org
2741 check: "dsa_check_soas_add!denis.debian.org!debianday.org"
2744 name: DNS SOA sync - dpkg.org
2745 check: "dsa_check_soas_add!denis.debian.org!dpkg.org"
2748 name: DNS - delegation and signature expiry
2750 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2753 name: DNS - security delegations
2755 remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2758 name: DNS - key coverage
2760 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2763 name: DNS - DS expiry
2765 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2768 name: DNS - zones signed properly
2770 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-signature-all"
2775 name: process - multipathd
2776 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u root -C multipathd -a '/sbin/multipathd'"
2777 hostgroups: multipath-hosts
2779 name: unwanted process - multipathd
2780 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C multipathd"
2781 hostgroups: computers
2782 excludehostgroups: multipath-hosts
2786 name: current chroots
2787 nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2788 hostgroups: porterbox
2794 # name: process - openstack - memcached
2795 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2796 # hostgroups: openstack-controller
2798 # name: process - openstack - glance-registry
2799 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2800 # hostgroups: openstack-controller
2802 # name: process - openstack - nova-api
2803 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2804 # hostgroups: openstack-controller
2806 # name: process - openstack - nova-compute
2807 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2808 # hostgroups: openstack-compute
2810 # name: process - openstack - nova-cert
2811 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2812 # hostgroups: openstack-controller
2814 # name: process - openstack - nova-conductor
2815 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2816 # hostgroups: openstack-controller
2818 # name: process - openstack - nova-consoleauth
2819 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2820 # hostgroups: openstack-controller
2822 # name: process - openstack - nova-scheduler
2823 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2824 # hostgroups: openstack-controller
2826 # name: process - openstack - nova-spicehtml5proxy
2827 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2828 # hostgroups: openstack-controller
2830 # name: process - openstack - neutron-server
2831 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2832 # hostgroups: openstack-controller
2836 name: system - all services running
2837 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-systemd-services"
2838 hostgroups: computers
2841 name: process - slapd
2842 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2845 name: network service - ldaps cert
2846 check: dsa_check_cert!636
2847 depends: process - slapd
2852 name: network service - finger
2855 depends: process - xinetd
2858 name: network service - rsync
2859 check: check_tcp!873
2860 hostgroups: rsyncd-hosts
2863 name: process - icinga
2864 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:90 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2868 name: process - debianqueued
2869 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2873 name: network service - gobby
2874 check: check_tcp!6523
2876 contact_groups: gobby
2879 name: network service - sip-tls cert - 443
2880 check: dsa_check_cert!443
2884 name: network service - sip-tls cert - 5061
2885 check: dsa_check_cert!5061
2889 name: freeradius process
2890 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u freerad -C freeradius -a '/usr/sbin/freeradius -xx'"
2895 name: puppetmaster cert
2896 nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2899 max_check_attempts: 2
2902 name: puppet - agent check
2903 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/puppet-agent"
2904 hostgroups: computers
2909 name: ping peer on mgmt network
2910 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.184.12 -w 50,10% -c 200,30%"
2911 hosts: conova-node01
2913 max_check_attempts: 4
2916 name: ping peer on mgmt network
2917 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.184.11 -w 50,10% -c 200,30%"
2918 hosts: conova-node02
2920 max_check_attempts: 4
2924 name: ping peer on mgmt network
2925 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.182.14 -w 50,10% -c 200,30%"
2928 max_check_attempts: 4
2931 name: ping peer on mgmt network
2932 nrpe: "/usr/lib/nagios/plugins/check_ping -H 172.29.182.13 -w 50,10% -c 200,30%"
2935 max_check_attempts: 4
2941 # vim: set ts=2 sw=2 et ai si fdm=marker: