config/nagios-master.cfg

   1 # Non comment lines are YAML
   2 #
   3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
   4 #
   5 # vim:set syntax=yaml:
   6
   7 # TODO
   8 #  - *: check munin stats collection works
   9 #  - *: check backups are successful
  10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
  11
  12 ---
  13 #############################
  14 # hosts
  15 #############################
  16 servers:
  17   # {{{ gateways
  18   global:
  19     hostgroups: notacomputer
  20     pingable: false
  21     check_command: dsa_check_always_ok
  22   gw-1und1:
  23     parents: gw-ubcece
  24     hostgroups: notacomputer
  25     pingable: false
  26     check_command: dsa_check_always_ok
  27   gw-1und1-sec:
  28     parents: gw-ubcece
  29     hostgroups: notacomputer
  30     pingable: false
  31     check_command: dsa_check_always_ok
  32   gw-accumu:
  33     address: 130.239.18.97
  34     parents: gw-ubcece
  35     hostgroups: layer3-infrastructure
  36   gw-aql:
  37     address: 141.170.2.17
  38     parents: gw-ubcece
  39     hostgroups: layer3-infrastructure
  40   gw-bytemark:
  41     address: 89.16.160.116
  42     parents: gw-ubcece
  43     hostgroups: layer3-infrastructure
  44   gw-c3sl:
  45     address: 200.17.202.254
  46     parents: gw-ubcece
  47     hostgroups: layer3-infrastructure
  48   gw-cecsit:
  49     address: 150.203.164.38
  50     parents: gw-ubcece
  51     hostgroups: layer3-infrastructure
  52   gw-arm:
  53     address: 213.104.121.213
  54     parents: gw-ubcece
  55     hostgroups: layer3-infrastructure
  56   gw-brown:
  57     address: 138.16.160.1
  58     parents: gw-ubcece
  59     hostgroups: layer3-infrastructure
  60   gw-carnet:
  61     address: 161.53.160.1
  62     parents: gw-ubcece
  63     hostgroups: layer3-infrastructure
  64   gw-conova:
  65     address: 217.196.149.238
  66     parents: gw-ubcece
  67     hostgroups: layer3-infrastructure
  68   gw-csail:
  69     address: 128.31.0.1
  70     parents: gw-ubcece
  71     hostgroups: layer3-infrastructure
  72   gw-dgi:
  73     address: 93.94.132.102
  74     parents: gw-ubcece
  75     hostgroups: layer3-infrastructure
  76     contacts: bzed
  77   gw-freenet:
  78     address: 62.104.23.249
  79     parents: gw-ubcece
  80     hostgroups: layer3-infrastructure
  81   gw-gatech:
  82     address: 128.61.240.1
  83     parents: gw-ubcece
  84     hostgroups: layer3-infrastructure
  85   gw-grnet:
  86     address: 194.177.211.193
  87     parents: gw-ubcece
  88     hostgroups: layer3-infrastructure
  89   gw-isc:
  90     address: 149.20.20.1
  91     parents: gw-ubcece
  92     hostgroups: layer3-infrastructure
  93   gw-karlsruhe:
  94     address: 129.143.57.177
  95     parents: gw-ubcece
  96     hostgroups: layer3-infrastructure
  97   gw-leaseweb:
  98     address: 185.17.185.190
  99     parents: gw-ubcece
 100     hostgroups: layer3-infrastructure
 101   gw-linaro:
 102     address: 64.28.108.36
 103     parents: gw-ubcece
 104     hostgroups: layer3-infrastructure
 105   gw-man-da:
 106     address: 82.195.75.126
 107     parents: gw-ubcece
 108     hostgroups: layer3-infrastructure
 109   gw-marist:
 110     address: 148.100.88.1
 111     parents: gw-ubcece
 112     hostgroups: layer3-infrastructure
 113   gw-osuosl:
 114     address: 140.211.166.1
 115     parents: gw-ubcece
 116     hostgroups: layer3-infrastructure
 117   gw-rapidswitch:
 118     address: 193.201.200.129
 119     parents: gw-ubcece
 120     hostgroups: layer3-infrastructure
 121   gw-sakura:
 122     address: 133.242.99.65
 123     parents: gw-ubcece
 124     hostgroups: layer3-infrastructure
 125   gw-sanger:
 126     address: 193.62.202.20
 127     parents: gw-ubcece
 128     hostgroups: layer3-infrastructure
 129     contacts: tjrc1, dave
 130   gw-scanplus-lobos:
 131     address: 212.211.132.249
 132     parents: gw-ubcece
 133     hostgroups: layer3-infrastructure
 134   gw-scanplus-villa:
 135     address: 212.211.132.1
 136     parents: gw-ubcece
 137     hostgroups: layer3-infrastructure
 138   gw-sil:
 139     address: 86.59.118.145
 140     parents: gw-ubcece
 141     hostgroups: layer3-infrastructure
 142   gw-ubcece:
 143     address: 206.12.19.254
 144     hostgroups: layer3-infrastructure
 145     contacts: lfilipoz
 146   gw-ugent:
 147     address: 193.191.17.50
 148     parents: gw-ubcece
 149     hostgroups: layer3-infrastructure
 150   gw-umn:
 151     address: 128.101.240.222
 152     parents: gw-ubcece
 153     hostgroups: layer3-infrastructure
 154   gw-unicamp:
 155     address: 143.106.167.234
 156     parents: gw-ubcece
 157     hostgroups: layer3-infrastructure
 158   gw-utwente:
 159     address: 130.89.149.1
 160     parents: gw-ubcece
 161     hostgroups: layer3-infrastructure
 162   gw-ynic:
 163     # really janet, because ynic is stupid about firewalling
 164     #address: 146.97.42.26
 165     address: 146.97.41.66
 166     parents: gw-ubcece
 167     hostgroups: layer3-infrastructure
 168   gw-zivit:
 169     address: 80.245.144.3
 170     parents: gw-ubcece
 171     hostgroups: layer3-infrastructure
 172   # }}}
 173   # {{{ servers
 174   # {{{ gw-1und1
 175   powell:
 176     address: 87.106.64.223
 177     parents: gw-1und1
 178     hostgroups: computers, service, acpid-hosts, wheezy
 179   pkgmirror-1and1:
 180     address: 213.165.95.4
 181     parents: powell
 182     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
 183   babin:
 184     address: 213.165.95.6
 185     parents: powell
 186     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 187   piu-slave-1und1-01:
 188     address: 213.165.95.7
 189     parents: powell
 190     hostgroups: computers, service, kvmdomains, wheezy
 191     contacts: holger
 192   # }}}
 193   # {{{ gw-1und1-sec
 194   schumann:
 195     address: 212.227.126.54
 196     parents: gw-1und1-sec
 197     hostgroups: computers, acpid-hosts, service, wheezy
 198   chopin:
 199     address: 195.20.242.124
 200     parents: schumann
 201     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
 202   geo3:
 203     address: 195.20.242.125
 204     parents: schumann
 205     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
 206   soler:
 207     address: 195.20.242.126
 208     parents: schumann
 209     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
 210   wieck:
 211     address: 195.20.242.89
 212     parents: gw-1und1-sec
 213     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
 214   # }}}
 215   # {{{ gw-accumu
 216   pettersson:
 217     address: 130.239.18.123
 218     parents: gw-accumu
 219     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
 220   praetorius:
 221     address: 130.239.18.121
 222     parents: gw-accumu
 223     hostgroups: computers, buildd, hassrvfs, wheezy
 224   # }}}
 225   # {{{ gw-aql
 226   mips-aql-01:
 227     address: 141.170.6.149
 228     parents: gw-aql
 229     hostgroups: computers, buildd, wheezy
 230   mips-aql-02:
 231     address: 141.170.6.150
 232     parents: gw-aql
 233     hostgroups: computers, buildd, wheezy
 234   mipsel-aql-01:
 235     address: 141.170.6.152
 236     parents: gw-aql
 237     hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
 238   mipsel-aql-02:
 239     address: 141.170.6.153
 240     parents: gw-aql
 241     hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
 242   # }}}
 243   # {{{ gw-arm
 244   abel:
 245     address: 217.140.96.56
 246     parents: gw-arm
 247     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
 248   arnold:
 249     address: 217.140.96.57
 250     parents: gw-arm
 251     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 252   arm-arm-01:
 253     address: 217.140.96.58
 254     parents: gw-arm
 255     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 256   arm-arm-02:
 257     address: 217.140.96.59
 258     parents: gw-arm
 259     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 260   harris:
 261     address: 217.140.96.66
 262     parents: gw-arm
 263     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
 264   hartmann:
 265     address: 217.140.96.67
 266     parents: gw-arm
 267     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 268   hoiby:
 269     address: 217.140.96.71
 270     parents: gw-arm
 271     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
 272   ia64-arm-01:
 273     address: 217.140.96.61
 274     parents: gw-arm
 275     hostgroups: computers, hasbootfs, hassrvfs, wheezy, buildd, broken_mq, sw-raid, acpid-hosts
 276   # }}}
 277   # {{{ gw-brown
 278   franck:
 279     address: 138.16.160.12
 280     parents: gw-brown
 281     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
 282   # }}}
 283   # {{{ gw-bytemark
 284   bm-bl1:
 285     address: 5.153.231.241
 286     parents: gw-bytemark
 287     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 288   bm-bl2:
 289     address: 5.153.231.242
 290     parents: gw-bytemark
 291     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 292   bm-bl3:
 293     address: 5.153.231.243
 294     parents: gw-bytemark
 295     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 296   bm-bl4:
 297     address: 5.153.231.244
 298     parents: gw-bytemark
 299     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 300   bm-bl5:
 301     address: 5.153.231.245
 302     parents: gw-bytemark
 303     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 304   bm-bl6:
 305     address: 5.153.231.246
 306     parents: gw-bytemark
 307     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 308   bm-bl7:
 309     address: 5.153.231.247
 310     parents: gw-bytemark
 311     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 312   bm-bl8:
 313     address: 5.153.231.248
 314     parents: gw-bytemark
 315     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 316   bm-bl9:
 317     address: 5.153.231.249
 318     parents: gw-bytemark
 319     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 320   bm-bl10:
 321     address: 5.153.231.250
 322     parents: gw-bytemark
 323     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 324   bm-bl11:
 325     address: 5.153.231.251
 326     parents: gw-bytemark
 327     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 328   bm-bl12:
 329     address: 5.153.231.252
 330     parents: gw-bytemark
 331     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 332
 333   milanollo:
 334     address: 5.153.231.2
 335     parents: gw-bytemark
 336     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
 337   milanollo2:
 338     address: 5.153.231.9
 339     parents: milanollo
 340     hostgroups: secondary-IPs
 341   picconi:
 342     address: 5.153.231.3
 343     parents: gw-bytemark
 344     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
 345   senfter:
 346     address: 5.153.231.4
 347     parents: gw-bytemark
 348     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
 349   adayevskaya:
 350     address: 5.153.231.5
 351     parents: gw-bytemark
 352     hostgroups: computers, service, kvmdomains, wheezy
 353   pejacevic:
 354     address: 5.153.231.6
 355     parents: gw-bytemark
 356     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
 357     contacts: holger
 358   piu-slave-bm-a:
 359     address: 5.153.231.7
 360     parents: gw-bytemark
 361     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
 362     contacts: holger
 363   binet:
 364     address: 5.153.231.8
 365     parents: gw-bytemark
 366     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 367   bmdb1:
 368     address: 5.153.231.10
 369     parents: gw-bytemark
 370     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
 371   ganeti-bytemark:
 372     address: 82.195.75.111
 373     parents: gw-bytemark
 374     hostgroups: notacomputer
 375   coccia:
 376     address: 5.153.231.11
 377     parents: ganeti-bytemark
 378     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts, apache-https, apache2-hosts
 379   philp:
 380     address: 5.153.231.13
 381     parents: ganeti-bytemark
 382     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
 383   couper:
 384     address: 5.153.231.14
 385     parents: ganeti-bytemark
 386     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
 387   rainier:
 388     address: 5.153.231.16
 389     parents: ganeti-bytemark
 390     hostgroups: computers, kvmdomains, wheezy, no-bacula
 391   rapoport:
 392     address: 5.153.231.15
 393     parents: ganeti-bytemark
 394     hostgroups: computers, kvmdomains, wheezy, no-bacula
 395   delfin:
 396     address: 5.153.231.17
 397     parents: ganeti-bytemark
 398     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
 399   wuiet:
 400     address: 5.153.231.18
 401     parents: ganeti-bytemark
 402     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
 403   dinis:
 404     address: 5.153.231.19
 405     parents: ganeti-bytemark
 406     hostgroups: computers, general, kvmdomains, wheezy
 407   donizetti:
 408     address: 5.153.231.20
 409     parents: ganeti-bytemark
 410     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
 411   moszumanska:
 412     address: 5.153.231.21
 413     parents: ganeti-bytemark
 414     contact_groups: alioth-admins
 415     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
 416     no-servicegroups: true
 417   dillon:
 418     address: 5.153.231.22
 419     parents: ganeti-bytemark
 420     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
 421   ticharich:
 422     address: 5.153.231.23
 423     parents: ganeti-bytemark
 424     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
 425   petrova:
 426     address: 5.153.231.25
 427     parents: ganeti-bytemark
 428     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
 429   oyens:
 430     address: 5.153.231.26
 431     parents: ganeti-bytemark
 432     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
 433   barriere:
 434     address: 5.153.231.27
 435     parents: ganeti-bytemark
 436     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
 437   quantz:
 438     address: 5.153.231.28
 439     parents: ganeti-bytemark
 440     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
 441   portman:
 442     address: 5.153.231.29
 443     parents: ganeti-bytemark
 444     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
 445   paradis:
 446     address: 5.153.231.30
 447     parents: ganeti-bytemark
 448     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 449   x86-bm-01:
 450     address: 5.153.231.32
 451     parents: ganeti-bytemark
 452     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
 453   gideon:
 454     address: 5.153.231.34
 455     parents: ganeti-bytemark
 456     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 457   httpredir-bm-01:
 458     address: 5.153.231.35
 459     parents: ganeti-bytemark
 460     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
 461   lindsay:
 462     address: 5.153.231.36
 463     parents: ganeti-bytemark
 464     hostgroups: computers, service, kvmdomains, jessie
 465   # }}}
 466   # {{{ gw-c3sl
 467   santoro:
 468     address: 200.17.202.197
 469     parents: gw-c3sl
 470     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
 471     contacts: faw
 472   # }}}
 473   # {{{ gw-carnet
 474   lebrun:
 475     address: 193.198.184.10
 476     parents: gw-carnet
 477     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
 478   schroeder:
 479     address: 193.198.184.11
 480     parents: gw-carnet
 481     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
 482   # }}}
 483   # {{{ gw-cecsit
 484   gluck:
 485     address: 150.203.164.38
 486     parents: gw-cecsit
 487     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
 488   # }}}
 489   # {{{ gw-conova
 490   sompek:
 491     address: 217.196.149.225
 492     parents: gw-conova
 493     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
 494   stadler:
 495     address: 217.196.149.226
 496     parents: gw-conova
 497     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
 498   # }}}
 499   # {{{ gw-csail
 500   senfl:
 501     address: 128.31.0.51
 502     parents: gw-csail
 503     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
 504   steffani:
 505     address: 128.31.0.36
 506     parents: gw-csail
 507     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 508
 509   csail-node01:
 510     address: 128.31.0.16
 511     parents: gw-csail
 512     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
 513   csail-node02:
 514     address: 128.31.0.46
 515     parents: gw-csail
 516     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
 517   ganeti-csail:
 518     address: 128.31.0.49
 519     parents: gw-bytemark
 520     hostgroups: notacomputer
 521
 522   falla:
 523     address: 128.31.0.65
 524     parents: ganeti-csail
 525     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
 526   fischer:
 527     address: 128.31.0.35
 528     parents: ganeti-csail
 529     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
 530   mirror-csail:
 531     address: 128.31.0.62
 532     parents: ganeti-csail
 533     hostgroups: computers, service, hassrvfs, kvmdomains, wheezy, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
 534   x86-csail-01:
 535     address: 128.31.0.50
 536     parents: ganeti-csail
 537     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 538   # }}}
 539   # {{{ gw-dgi
 540   storace:
 541     address: 93.94.130.161
 542     parents: gw-dgi
 543     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
 544   # }}}
 545   # {{{ gw-gatech
 546   sechter:
 547     address: 128.61.240.73
 548     parents: gw-gatech
 549     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
 550   # }}}
 551   # {{{ gw-grnet
 552   ganeti-grnet:
 553     address: 194.177.211.194
 554     parents: gw-grnet
 555     hostgroups: notacomputer
 556   grnet-node01:
 557     address: 194.177.211.195
 558     parents: gw-grnet
 559     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 560   grnet-node02:
 561     address: 194.177.211.196
 562     parents: gw-grnet
 563     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 564   rautavaara:
 565     address: 194.177.211.199
 566     parents: gw-grnet
 567     hostgroups: computers, acpid-hosts, megaraid, service, wheezy
 568   loghost-grnet-01:
 569     address: 194.177.211.200
 570     parents: gw-grnet
 571     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
 572   # }}}
 573   # {{{ gw-isc
 574   schein:
 575     address: 149.20.20.6
 576     parents: gw-isc
 577     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 578   # }}}
 579   # {{{ gw-leaseweb
 580   lw01:
 581     address: 185.17.185.177
 582     parents: gw-leaseweb
 583     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 584   lw02:
 585     address: 185.17.185.178
 586     parents: gw-leaseweb
 587     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 588   lw03:
 589     address: 185.17.185.179
 590     parents: gw-leaseweb
 591     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 592   lw04:
 593     address: 185.17.185.180
 594     parents: gw-leaseweb
 595     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 596   lw07:
 597     address: 185.17.185.187
 598     parents: gw-leaseweb
 599     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
 600   lw08:
 601     address: 185.17.185.189
 602     parents: gw-leaseweb
 603     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
 604   #, apache2-hosts
 605   # }}}
 606   # {{{ gw-linaro
 607   arm-linaro-01:
 608     address: 64.28.108.83
 609     parents: gw-linaro
 610     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 611   arm-linaro-03:
 612     address: 64.28.108.85
 613     parents: gw-linaro
 614     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 615   asachi:
 616     address: 64.28.108.84
 617     parents: gw-linaro
 618     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
 619   # }}}
 620   # {{{ gw-karlsruhe
 621   zemlinsky:
 622     address: 129.143.160.6
 623     parents: gw-karlsruhe
 624     hostgroups: computers, buildd, wheezy
 625     contacts: pkern
 626   # }}}
 627   # {{{ gw-man-da
 628   ball:
 629     address: 82.195.75.70
 630     parents: gw-man-da
 631     hostgroups: computers, buildd, hasbootfs, wheezy
 632   # bartok TODO
 633   czerny:
 634     address: 82.195.75.109
 635     parents: gw-man-da
 636     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 637   clementi:
 638     address: 82.195.75.103
 639     parents: gw-man-da
 640     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 641   bendel:
 642     address: 82.195.75.100
 643     parents: ganeti3
 644     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
 645   master:
 646     address: 82.195.75.110
 647     parents: ganeti3
 648     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
 649   mipsel-manda-01:
 650     address: 82.195.75.72
 651     parents: gw-man-da
 652     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 653   mipsel-manda-02:
 654     address: 82.195.75.74
 655     parents: gw-man-da
 656     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 657   fils:
 658     address: 82.195.75.89
 659     parents: ganeti3
 660     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 661     contacts: christoph
 662   fayrfax:
 663     address: 82.195.75.82
 664     parents: ganeti3
 665     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 666     contacts: christoph
 667   vento:
 668     address: 82.195.75.98
 669     parents: ganeti3
 670     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
 671   lully:
 672     address: 82.195.75.99
 673     parents: ganeti3
 674     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
 675   draghi:
 676     address: 82.195.75.106
 677     parents: ganeti3
 678     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
 679   geo1:
 680     address: 82.195.75.105
 681     parents: ganeti3
 682     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
 683   handel:
 684     address: 82.195.75.104
 685     parents: ganeti3
 686     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
 687   kaufmann:
 688     address: 82.195.75.107
 689     parents: ganeti3
 690     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
 691   stockhausen:
 692     address: 82.195.75.108
 693     parents: ganeti3
 694     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
 695   ganeti3:
 696     address: 82.195.75.111
 697     parents: gw-man-da
 698     hostgroups: notacomputer
 699   wilder:
 700     address: 82.195.75.112
 701     parents: ganeti3
 702     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
 703   mailly:
 704     address: 82.195.75.114
 705     parents: ganeti3
 706     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
 707   denis:
 708     address: 82.195.75.91
 709     parents: ganeti3
 710     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
 711   vogler:
 712     address: 82.195.75.92
 713     parents: ganeti3
 714     hostgroups: computers, service, kvmdomains, wheezy
 715   wolkenstein:
 716     address: 82.195.75.65
 717     parents: ganeti3
 718     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
 719   mipsel-manda-01:
 720     address: 82.195.75.72
 721     parents: gw-man-da
 722     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
 723   mipsel-manda-02:
 724     address: 82.195.75.74
 725     parents: gw-man-da
 726     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
 727   # }}}
 728   # {{{ gw-marist
 729   zani:
 730     address: 148.100.88.22
 731     parents: gw-marist
 732     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
 733   # }}}
 734   # {{{ gw-osuosl
 735   busoni:
 736     address: 140.211.15.34
 737     parents: gw-osuosl
 738     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
 739   byrd:
 740     address: 140.211.166.20
 741     parents: gw-osuosl
 742     hostgroups: computers, service, dl380, acpid-hosts, wheezy
 743   buxtehude:
 744     address: 140.211.166.26
 745     parents: byrd
 746     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
 747   # malo TODO
 748   mayer:
 749     address: 140.211.166.78
 750     parents: gw-osuosl
 751     hostgroups: computers, buildd, hasbootfs, wheezy
 752 #  mayr:
 753 #    address: 140.211.166.58
 754 #    parents: gw-osuosl
 755 #    hostgroups: computers, buildd, hasbootfs
 756   merulo:
 757     address: 140.211.166.46
 758     parents: gw-osuosl
 759     hostgroups: computers, porterbox, hasusrfs, wheezy
 760   parry:
 761     address: 140.211.15.153
 762     parents: gw-osuosl
 763     hostgroups: computers, wheezy, buildd, hassrvfs
 764   partch:
 765     address: 140.211.15.152
 766     parents: gw-osuosl
 767     hostgroups: computers, wheezy, hassrvfs, porterbox
 768   rietz:
 769     address: 140.211.166.43
 770     parents: gw-osuosl
 771     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
 772     #, bosserver
 773   rietz2:
 774     address: 140.211.166.44
 775     parents: rietz
 776     hostgroups: secondary-IPs
 777   # zee TODO
 778   # }}}
 779   # {{{ gs-rapidswitch
 780   caballero:
 781     address: 193.201.200.200
 782     parents: gw-rapidswitch
 783     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
 784   # }}}
 785   # {{{ gw-sanger
 786   sibelius:
 787     address: 193.62.202.28
 788     parents: gw-sanger
 789     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, wheezy, rsyncd-hosts, xinetd-hosts, hasvarlogfs
 790     contacts: tjrc1, dave
 791   smetana:
 792     address: 193.62.202.29
 793     parents: gw-sanger
 794     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
 795     contacts: tjrc1, dave
 796   # }}}
 797   # {{{ gw-scanplus
 798   lobos:
 799     address: 212.211.132.250
 800     parents: gw-scanplus-lobos
 801     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 802   villa:
 803     address: 212.211.132.32
 804     parents: gw-scanplus-villa
 805     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 806   # }}}
 807   # {{{ gw-sil
 808   eder:
 809     address: 86.59.118.151
 810     parents: gw-sil
 811     hostgroups: computers, porterbox, wheezy, hassrvfs
 812   eysler:
 813     address: 86.59.118.152
 814     parents: gw-sil
 815     hostgroups: computers, buildd, wheezy
 816   eberlin:
 817     address: 86.59.118.155
 818     parents: gw-sil
 819     hostgroups: computers, buildd, wheezy
 820   # }}}
 821   # {{{ gw-ubcece
 822   sw-ubcece:
 823     hostgroups: layer2-infrastructure
 824     contacts: lfilipoz
 825     pingable: false
 826     check_command: dsa_check_always_ok
 827   sw-ubcece-mcld:
 828     hostgroups: layer2-infrastructure
 829     parents: sw-ubcece
 830     contacts: lfilipoz
 831     pingable: false
 832     check_command: dsa_check_always_ok
 833   sw-ubcece-kais:
 834     hostgroups: layer2-infrastructure
 835     parents: sw-ubcece
 836     contacts: lfilipoz
 837     pingable: false
 838     check_command: dsa_check_always_ok
 839   spontini:
 840     address: 206.12.19.14
 841     parents: sw-ubcece-mcld
 842     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
 843     contacts: lfilipoz
 844   ravel:
 845     address: 206.12.19.5
 846     parents: sw-ubcece-kais
 847     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
 848   dijkstra:
 849     address: 206.12.19.218
 850     parents: sw-ubcece-kais
 851     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 852   pasquini:
 853     address: 206.12.19.217
 854     parents: sw-ubcece-kais
 855     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 856   luchesi:
 857     address: 206.12.19.214
 858     parents: sw-ubcece-kais
 859     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 860   tristano:
 861     address: 206.12.19.213
 862     parents: sw-ubcece-kais
 863     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 864   boito:
 865     address: 206.12.19.216
 866     parents: sw-ubcece-kais
 867     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 868   bertali:
 869     address: 206.12.19.212
 870     parents: sw-ubcece-kais
 871     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 872   ganeti2:
 873     address: 206.12.19.23
 874     parents: sw-ubcece-kais
 875     hostgroups: notacomputer
 876   tchaikovsky:
 877     address: 206.12.19.118
 878     parents: ganeti2
 879     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
 880   brahms:
 881     address: 206.12.19.115
 882     parents: ganeti2
 883     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 884   geo2:
 885     address: 206.12.19.113
 886     parents: ganeti2
 887     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
 888   # MSA 2000 (2012i)
 889   giustini:
 890     address: 192.168.2.6
 891     parents: dijkstra
 892     hostgroups: notacomputer
 893     # unless we implement runfrom for host alive checks
 894     pingable: false
 895     check_command: dsa_check_always_ok
 896   fano:
 897     address: 206.12.19.110
 898     parents: ganeti2
 899     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 900     contacts: christoph
 901   finzi:
 902     address: 206.12.19.111
 903     parents: ganeti2
 904     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 905     contacts: christoph
 906   gabrielli:
 907     address: 206.12.19.17
 908     parents: sw-ubcece-kais
 909     hostgroups: computers, porterbox, wheezy
 910   corelli:
 911     address: 206.12.19.16
 912     parents: sw-ubcece-kais
 913     hostgroups: computers, buildd, wheezy
 914   lucatelli:
 915     address: 206.12.19.15
 916     parents: sw-ubcece-kais
 917     hostgroups: computers, buildd, wheezy
 918   rossini:
 919     address: 206.12.19.19
 920     parents: sw-ubcece-kais
 921     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 922   salieri:
 923     address: 206.12.19.20
 924     parents: sw-ubcece-kais
 925     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 926   traetta:
 927     address: 206.12.19.21
 928     parents: sw-ubcece-kais
 929     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 930 #  locke:
 931 #    address: 206.12.19.120
 932 #    parents: sw-ubcece-kais
 933 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
 934   lotti:
 935     address: 206.12.19.121
 936     parents: sw-ubcece-kais
 937     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
 938   nono:
 939     address: 206.12.19.123
 940     parents: traetta
 941     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
 942   reger:
 943     address: 206.12.19.124
 944     parents: ganeti2
 945     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
 946   danzi:
 947     address: 206.12.19.125
 948     parents: ganeti2
 949     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
 950   glinka:
 951     address: 206.12.19.126
 952     parents: traetta
 953     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
 954   tye:
 955     address: 206.12.19.129
 956     parents: ganeti2
 957     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
 958   elgar:
 959     address: 206.12.19.130
 960     parents: salieri
 961     hostgroups: computers, service, kvmdomains, wheezy
 962   gombert:
 963     address: 206.12.19.132
 964     parents: ganeti2
 965     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
 966   jenkins:
 967     address: 206.12.19.133
 968     parents: salieri
 969     hostgroups: computers, service, kvmdomains, wheezy
 970   blavet:
 971     address: 206.12.19.134
 972     parents: ganeti2
 973     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
 974   diabelli:
 975     address: 206.12.19.136
 976     parents: traetta
 977     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
 978   bizet:
 979     address: 206.12.19.137
 980     parents: ganeti2
 981     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
 982   lilburn:
 983     address: 206.12.19.138
 984     parents: ganeti2
 985     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
 986   popov:
 987     address: 206.12.19.119
 988     parents: ganeti2
 989     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
 990   beach:
 991     address: 206.12.19.140
 992     parents: ganeti2
 993     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
 994   ullmann:
 995     address: 206.12.19.141
 996     parents: ganeti2
 997     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
 998   sonntag:
 999     address: 206.12.19.142
1000     parents: ganeti2
1001     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
1002   menotti:
1003     address: 206.12.19.143
1004     parents: ganeti2
1005     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
1006   muffat:
1007     address: 206.12.19.146
1008     parents: ganeti2
1009     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
1010   # }}}
1011   # {{{ gw-ugent
1012   # }}}
1013   # {{{ gw-umn
1014   saens:
1015     address: 128.101.240.212
1016     parents: gw-umn
1017     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1018   # }}}
1019   # {{{ gw-unicamp
1020   asgard:
1021     address: 143.106.167.145
1022     parents: gw-unicamp
1023     hostgroups: layer3-infrastructure
1024   prokofiev:
1025     address: 143.106.167.147
1026     parents: gw-unicamp
1027     hostgroups: computers, jessie, service
1028   powerpc-unicamp-01:
1029     address: 143.106.167.149
1030     parents: prokofiev
1031     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
1032   ppc64el-unicamp-01:
1033     address: 143.106.167.135
1034     parents: prokofiev
1035     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
1036   # }}}
1037   # {{{ gw-utwente
1038   klecker:
1039     address: 130.89.148.10
1040     parents: gw-utwente
1041     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
1042   klecker-ftp:
1043     address: 130.89.148.12
1044     parents: klecker
1045     hostgroups: secondary-IPs
1046   klecker-archive:
1047     address: 130.89.148.13
1048     parents: klecker
1049     hostgroups: secondary-IPs
1050   klecker-static:
1051     address: 130.89.148.14
1052     parents: klecker
1053     hostgroups: secondary-IPs
1054   # }}}
1055   # {{{ gw-ynic
1056   henze:
1057     address: 144.32.168.74
1058     parents: gw-ynic
1059     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1060   hasse:
1061     address: 144.32.168.75
1062     parents: gw-ynic
1063     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1064   antheil:
1065     address: 144.32.168.76
1066     parents: gw-ynic
1067     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1068   porpora:
1069     address: 144.32.168.78
1070     parents: gw-ynic
1071     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1072   poulenc:
1073     address: 144.32.168.77
1074     parents: gw-ynic
1075     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1076   #antheil:
1077   #  address: 217.140.96.60
1078   #  parents: gw-arm
1079   #  hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
1080   #hasse:
1081   #  address: 217.140.96.68
1082   #  parents: gw-arm
1083   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1084   #henze:
1085   #  address: 217.140.96.70
1086   #  parents: gw-arm
1087   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1088   # }}}
1089   # {{{ gw-zivit
1090   zandonai:
1091     address: 80.245.147.46
1092     parents: gw-zivit
1093     hostgroups: computers, buildd, hassrvfs, wheezy
1094   zelenka:
1095     address: 80.245.147.40
1096     parents: gw-zivit
1097     hostgroups: computers, porterbox, hassrvfs, wheezy
1098   # }}}
1099   # {{{ gw-sakura
1100   setoguchi:
1101     address: 133.242.99.74
1102     parents: gw-sakura
1103     hostgroups: computers, service, wheezy, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, security_mirror, acpid-hosts
1104   # }}}
1105
1106 # {{{ ############################# host groups #############################
1107 hostgroups:
1108   computers:
1109     alias: computers
1110     private: 1
1111   layer2-infrastructure:
1112     alias: Layer 2 Devices
1113     extinfo-icon_image: base/switch40.png
1114     extinfo-icon_image_alt: switch
1115   layer3-infrastructure:
1116     alias: Layer 3 Devices
1117     extinfo-icon_image: base/switch40.png
1118     extinfo-icon_image_alt: router
1119   notacomputer:
1120     alias: Systems that are not really systems.  Yeah :)
1121     private: 1
1122   freebsd:
1123     alias: freebsd
1124     private: 1
1125   armhf:
1126     alias: armhf
1127     private: 1
1128   sparc:
1129     alias: sparc
1130     private: 1
1131
1132   porterbox:
1133     alias: developer accessible porter machines
1134     extinfo-icon_image: base/debian.png
1135     extinfo-icon_image_alt: Debian GNU/Linux
1136     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1137   service:
1138     alias: machines running services
1139     extinfo-icon_image: base/debian.png
1140     extinfo-icon_image_alt: Debian GNU/Linux
1141     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1142   buildd:
1143     alias: buildd systems
1144     extinfo-icon_image: base/debian.png
1145     extinfo-icon_image_alt: Debian GNU/Linux
1146     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1147   general:
1148     alias: general purpose developer accessible machines
1149     extinfo-icon_image: base/debian.png
1150     extinfo-icon_image_alt: Debian GNU/Linux
1151     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1152
1153   dl380:
1154     alias: HP DL380 hosts
1155     private: 1
1156   dl385:
1157     alias: HP DL385 hosts
1158     private: 1
1159   dl360:
1160     alias: HP DL360 hosts
1161     private: 1
1162   bl460:
1163     alias: HP BL460 blades
1164     private: 1
1165   bm-bl:
1166     alias: HP blades at bytemark
1167     private: 1
1168   dl585:
1169     alias: HP DL385 hosts
1170     private: 1
1171   dl180:
1172     alias: HP DL180
1173     private: 1
1174   dl120:
1175     alias: HP DL120
1176     private: 1
1177   sw-raid:
1178     alias: Hosts with Linux software raid
1179     private: 1
1180   aacraid:
1181     alias: Hosts with Adaptec AACraid
1182     private: 1
1183   megaraid:
1184     alias: Hosts with LSI Logic MegaRAID
1185     private: 1
1186
1187   squeeze:
1188     alias: Hosts running squeeze
1189   wheezy:
1190     alias: Hosts running wheezy
1191   jessie:
1192     alias: Hosts running jessie
1193
1194   kvmdomains:
1195     alias: Hosts that are KVM domains
1196     private: 1
1197
1198   drbd-hosts:
1199     alias: hosts running drbd
1200   postfix-hosts:
1201     alias: hosts running postfix instead of exim
1202     private: 1
1203   heavy-exim:
1204     alias: "hosts running the full mail stuff, including clamav and postgrey"
1205     private: 1
1206   mail-relay:
1207     alias: "relays usually are hosts with more exim processes"
1208     private: 1
1209   spamd:
1210     alias: "hosts running spamassassin as daemon"
1211     private: 1
1212   heavy-postfix:
1213     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1214     private: 1
1215   apache2-hosts:
1216     alias: hosts running apache2
1217     private: 1
1218   jetty-hosts:
1219     alias: hosts running jetty
1220     private: 1
1221   bind9-hosts:
1222     alias: hosts running bind9
1223     private: 1
1224   # once every host runs unbound, do away with this group and check "computers" instead
1225   amavis-hosts:
1226     alias: hosts running amavis
1227     private: 1
1228   rsyncd-hosts:
1229     alias: hosts providing rsync services via xinetd
1230     private: 1
1231   xinetd-hosts:
1232     alias: hosts providing services via xinetd
1233     private: 1
1234   postgres91-hosts:
1235     alias: hosts running postgres91
1236     private: 1
1237   no-ulogd:
1238     alias: hosts not running ulogd
1239     private: 1
1240   acpid-hosts:
1241     alias: hosts running acpid
1242     private: 1
1243   uploadqueue:
1244     alias: hosts that are an anonymous ftp uploadqueue
1245     private: 1
1246   bosserver:
1247     alias: hosts running bosserver
1248     private: 1
1249   apache-https:
1250     alias: hosts with https services
1251     private: 1
1252   broken_https_default_vhost:
1253     alias: https default vhost does not say 200 OK
1254     private: 1
1255
1256   no-bacula:
1257     alias: hosts which are not being backed up with bacula
1258     private: 1
1259
1260   nfs-client:
1261     alias: hosts mounting filesystems using NFS
1262     private: 1
1263   nfs-server:
1264     alias: hosts serving filesystems using NFS
1265     private: 1
1266   autofs:
1267     alias: hosts running the automounter
1268     private: 1
1269
1270   highload:
1271     alias: "hosts on which high load is normal"
1272     private: 1
1273
1274   secondary-IPs:
1275     alias: secondary IP addresses
1276     private: 1
1277
1278   hasbootfs:
1279     alias: hosts with a /boot filesystem
1280     private: 1
1281   hassrvfs:
1282     alias: hosts with a /srv filesystem
1283     private: 1
1284   hasorgfs:
1285     alias: hosts with a /org filesystem
1286     private: 1
1287   hasvarfs:
1288     alias: hosts with a /var filesystem
1289     private: 1
1290   hasvarlogfs:
1291     alias: hosts with a /var/log filesystem
1292     private: 1
1293   hasusrfs:
1294     alias: hosts with a /usr filesystem
1295     private: 1
1296
1297   incomingmailrelayed:
1298     alias: incoming mail needs to go through a mail relay
1299     # i.e. no port 25
1300     private: 1
1301   incomingmailrelayed2025:
1302     alias: incoming mail needs to go through a mail relay
1303     # i.e. no port 25
1304     private: 1
1305
1306   brokensamhain:
1307     alias: machines that can not run samhain
1308     private: 1
1309   high-RTT:
1310     alias: machines with high round trip times
1311     private: 1
1312   ping-suckers:
1313     alias: machines that just suck at icmp
1314     private: 1
1315   alioth:
1316     alias: machines that just are just awkward
1317     private: 1
1318   openstack-compute:
1319     alias: nodes that run OpenStack compute
1320     private: 1
1321   openstack-controller:
1322     alias: nodes that run OpenStack controller
1323     private: 1
1324
1325   security_mirror:
1326     alias: hosts that are security mirrors
1327     private: 1
1328
1329   broken_mq:
1330     alias: hosts whose MQ is broken
1331     private: 1
1332 # }}}
1333 # {{{ ############################# servicegroups #############################
1334 servicegroups:
1335   diskspace:
1336     alias: diskusage checks
1337   buildd:
1338     alias: buildd checks
1339   raid:
1340     alias: raid checks
1341   backup:
1342     alias: backup checks
1343   kernel:
1344     alias: kernel checks
1345   apt:
1346     alias: apt upgrade status
1347   samhain:
1348     alias: samhain integrity status
1349   time:
1350     alias: time stuff
1351   security:
1352     alias: security
1353     servicegroup_members: apt, kernel, samhain
1354   MQ:
1355     alias: rabbitMQ stuff
1356 # }}}
1357 # {{{ ############################# services #############################
1358 services:
1359   # {{{ ### basic networking
1360   -
1361     name: PING
1362     check: "check_ping!350.0,20%!600.0,40%"
1363     hostgroups: pingable
1364     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1365     normal_check_interval: 5
1366     max_check_attempts: 4
1367     retry_check_interval: 1
1368   -
1369     name: PING
1370     check: "check_ping!600.0,20%!900.0,40%"
1371     hostgroups: high-RTT
1372     normal_check_interval: 5
1373     max_check_attempts: 4
1374     retry_check_interval: 1
1375   -
1376     name: PING
1377     check: "check_ping!600.0,90%!900.0,95%"
1378     hostgroups: ping-suckers
1379     normal_check_interval: 5
1380     max_check_attempts: 4
1381     retry_check_interval: 1
1382   -
1383     name: PING
1384     check: "check_ping!2000.0,60%!3000.0,80%"
1385     hostgroups: layer3-infrastructure
1386     normal_check_interval: 5
1387     max_check_attempts: 4
1388     retry_check_interval: 1
1389   # }}}
1390   # {{{ ### disk usage
1391   -
1392     name: disk usage - all
1393     servicegroups: diskspace
1394     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1395     hostgroups: computers
1396     excludehosts: sibelius
1397   -
1398     name: disk usage - all
1399     servicegroups: diskspace
1400     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x /srv/farm-snapshot/farm-misc 95 98"
1401     hosts: sibelius
1402
1403   -
1404     name: disk usage on /
1405     servicegroups: diskspace
1406     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1407     hostgroups: computers
1408   -
1409     name: disk usage on /boot
1410     servicegroups: diskspace
1411     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1412     hostgroups: hasbootfs
1413   -
1414     name: disk usage on /var
1415     servicegroups: diskspace
1416     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1417     hostgroups: hasvarfs
1418   -
1419     name: disk usage on /org
1420     servicegroups: diskspace
1421     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1422     hostgroups: hasorgfs
1423   -
1424     name: disk usage on /srv
1425     servicegroups: diskspace
1426     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1427     hostgroups: hassrvfs
1428   -
1429     name: disk usage on /tmp
1430     servicegroups: diskspace
1431     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1432     hosts: saens
1433   -
1434     name: disk usage on /usr
1435     servicegroups: diskspace
1436     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1437     hostgroups: hasusrfs
1438   -
1439     name: disk usage on /var/lib/postgresql
1440     servicegroups: diskspace
1441     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1442     hosts: sibelius, busoni, buxtehude, lw07
1443   -
1444     name: disk usage on /var/log
1445     servicegroups: diskspace
1446     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1447     hostgroups: hasvarlogfs
1448   -
1449     name: disk usage on /var/spool/postfix
1450     servicegroups: diskspace
1451     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1452     hosts: bendel
1453   -
1454     name: disk usage on /srv/mirrors
1455     servicegroups: diskspace
1456     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1457     hosts: sibelius
1458   -
1459     name: disk usage on /srv/snapshot.debian.org
1460     servicegroups: diskspace
1461     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1462     hosts: sibelius
1463   -
1464     name: disk usage on /srv/farm-snapshot/farm-1
1465     servicegroups: diskspace
1466     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-1"
1467     hosts: sibelius
1468   -
1469     name: disk usage on /srv/farm-snapshot/farm-2
1470     servicegroups: diskspace
1471     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2"
1472     hosts: sibelius
1473   -
1474     name: disk usage on /srv/farm-snapshot/farm-3
1475     servicegroups: diskspace
1476     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-3"
1477     hosts: sibelius
1478   -
1479     name: disk usage on /srv/farm-snapshot/farm-4
1480     servicegroups: diskspace
1481     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-4"
1482     hosts: sibelius
1483   -
1484     name: disk usage on /var/lib/postgresql/9.1
1485     servicegroups: diskspace
1486     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1487     hosts: franck
1488   -
1489     name: disk usage on /srv/ftp-master.debian.org
1490     servicegroups: diskspace
1491     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1492     hosts: franck
1493   -
1494     name: disk usage on /storage/snapshot-farm-1
1495     servicegroups: diskspace
1496     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1497     hosts: lw01
1498   -
1499     name: disk usage on /storage/snapshot-farm-2
1500     servicegroups: diskspace
1501     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1502     hosts: lw02
1503   -
1504     name: disk usage on /storage/snapshot-farm-3
1505     servicegroups: diskspace
1506     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1507     hosts: lw03
1508   -
1509     name: disk usage on /storage/snapshot-farm-4
1510     servicegroups: diskspace
1511     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1512     hosts: lw04
1513   -
1514     name: disk usage on /srv/morgue.debian.org/
1515     servicegroups: diskspace
1516     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1517     hosts: lw03
1518   # }}}
1519   # {{{ ### system
1520   # {{{ setup
1521   -
1522     name: setup - dsa config
1523     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1524     hostgroups: computers
1525     normal_check_interval: 60
1526     excludehostgroups: alioth
1527   -
1528     name: setup - local hostname etc-hosts
1529     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1530     hostgroups: computers
1531     normal_check_interval: 60
1532   # }}}
1533   # {{{ os health
1534   ####
1535   -
1536     name: users
1537     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1538     hostgroups: computers
1539   -
1540     name: load
1541     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1542     hostgroups: computers
1543     excludehostgroups: highload
1544   -
1545     name: load
1546     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1547     hostgroups: highload
1548   -
1549     name: uptime check
1550     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1551     hostgroups: computers
1552   -
1553     name: processes - total
1554     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1555     hostgroups: computers
1556   -
1557     name: swap usage - percent
1558     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1559     hostgroups: computers
1560   -
1561     name: swap usage - mb
1562     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1563     hostgroups: computers
1564   -
1565     name: process - getty
1566     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1567     hostgroups: computers
1568     excludehosts: zelenka, zandonai
1569     excludehostgroups: jessie
1570   -
1571     name: process - getty
1572     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1573     hostgroups: computers
1574     hostgroups: jessie
1575   -
1576     name: processes - zombies
1577     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1578     hostgroups: computers
1579   -
1580     name: system - available entropy
1581     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1582     event_handler: dsa_event_handler_restart_ekey
1583     hostgroups: computers
1584     excludehostgroups: freebsd
1585   -
1586     name: system - filesystem check
1587     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1588     normal_check_interval:  60
1589     retry_check_interval: 15
1590     hostgroups: computers
1591   # }}}
1592   # {{{ backup
1593   -
1594     name: backup
1595     servicegroups: backup
1596     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1597     hostgroups: computers
1598     excludehosts: storace
1599     normal_check_interval: 60
1600     max_check_attempts: 2
1601     retry_check_interval: 5
1602   -
1603     name: backup server config
1604     servicegroups: backup
1605     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1606     hosts: storace
1607     normal_check_interval: 60
1608     max_check_attempts: 2
1609     retry_check_interval: 5
1610   -
1611     name: backup - bacula - last backup
1612     servicegroups: backup
1613     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1614     runfrom: dinis
1615     hostgroups: computers
1616     excludehostgroups: buildd, porterbox, no-bacula
1617     normal_check_interval:  60
1618     retry_check_interval: 15
1619   -
1620     name: backup - bacula - last full backup
1621     servicegroups: backup
1622     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1623     runfrom: dinis
1624     hostgroups: computers
1625     excludehostgroups: buildd, porterbox, no-bacula
1626     normal_check_interval:  60
1627     retry_check_interval: 15
1628   -
1629     name: process - bacula-fd
1630     servicegroups: backup
1631     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1632     hostgroups: computers
1633     excludehostgroups: freebsd, alioth
1634   -
1635     name: process - bacula-fd
1636     servicegroups: backup
1637     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1638     hostgroups: freebsd
1639
1640   ####
1641   -
1642     name: process - acc.umu.se backup
1643     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1644     hosts: sibelius
1645   # }}}
1646   # {{{ security
1647   -
1648     name: running kernel
1649     servicegroups: kernel
1650     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1651     hostgroups: computers
1652     normal_check_interval: 60
1653     retry_check_interval: 5
1654   -
1655     name: apt - security updates
1656     servicegroups: apt
1657     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1658     hostgroups: computers
1659     normal_check_interval:  60
1660     retry_check_interval: 15
1661   -
1662     name: installed firewall
1663     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1664     hostgroups: computers
1665     excludehostgroups: freebsd
1666   -
1667     name: puppetized firewall
1668     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1669     hostgroups: computers
1670     excludehostgroups: freebsd
1671   -
1672     name: process - ulogd
1673     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1674     hostgroups: computers
1675     excludehostgroups: freebsd, sparc, jessie
1676   -
1677     name: process - ulogd
1678     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1679     hostgroups: jessie
1680     excludehostgroups: freebsd
1681   -
1682     name: unexpected process - ulogd
1683     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1684     hostgroups: freebsd, sparc
1685   ####
1686   -
1687     name: process - samhain
1688     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1689     hostgroups: computers
1690     excludehostgroups: brokensamhain
1691   -
1692     name: samhain
1693     servicegroups: samhain
1694     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1695     hostgroups: computers
1696     depends: process - samhain
1697     normal_check_interval: 60
1698     retry_check_interval: 5
1699     excludehostgroups: brokensamhain
1700   -
1701     name: processes - samhain zombies
1702     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1703     event_handler: dsa_event_handler_restart_samhain
1704     hostgroups: computers
1705     excludehostgroups: brokensamhain
1706   # }}}
1707   # {{{ logging
1708   -
1709     name: process - syslog-ng
1710     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1711     hostgroups: computers
1712     excludehostgroups: freebsd
1713
1714   -
1715     name: process - syslog-ng
1716     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1717     hostgroups: freebsd
1718
1719   -
1720     name: remote logging on lotti
1721     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1722     runfrom: lotti
1723     hostgroups: computers
1724     excludehostgroups: alioth
1725   -
1726     name: remote logging on lully
1727     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1728     runfrom: lully
1729     hostgroups: computers
1730     excludehostgroups: alioth
1731   -
1732     name: remote logging on loghost-grnet-01
1733     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1734     runfrom: loghost-grnet-01
1735     hostgroups: computers
1736     excludehostgroups: alioth
1737   # }}}
1738   # {{{ base service
1739   -
1740     name: process - sshd
1741     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1742     hostgroups: computers
1743   -
1744     name: "network service - sshd"
1745     check: dsa_check_ssh
1746     hostgroups: computers
1747     depends: process - sshd
1748     normal_check_interval:  60
1749     notification_interval: 1440
1750   ####
1751   -
1752     name: network service - nrpe
1753     check: check_tcp!5666
1754     hostgroups: computers
1755     max_check_attempts: -2
1756     notification_interval: 1440
1757   -
1758     name: process - nrpe
1759     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1760     hostgroups: computers
1761     max_check_attempts: -1
1762     depends: network service - nrpe
1763   ###
1764   -
1765     name: process - munin-node
1766     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1767     hostgroups: computers
1768     excludehostgroups: freebsd, armhf
1769   -
1770     name: process - munin-node
1771     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1772     hostgroups: freebsd
1773   -
1774     name: process - munin-node
1775     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1776     hostgroups: wheezy, jessie
1777     excludehostgroups: freebsd
1778   -
1779     name: network service - munin-node
1780     check: check_tcp!4949
1781     hostgroups: computers
1782     depends: process - munin-node
1783   ###
1784   -
1785     name: process - ntpd
1786     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1787     hostgroups: computers
1788     servicegroups: time
1789   -
1790     name: network service - ntp
1791     check: dsa_check_ntp
1792     hostgroups: computers
1793     depends: process - ntpd
1794     servicegroups: time
1795   ###
1796   -
1797     name: process - atd
1798     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1799     hostgroups: computers
1800   ###
1801   -
1802     name: process - cron
1803     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1804     hostgroups: computers
1805   ###
1806   -
1807     name: process - ud-replicated
1808     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1809     hostgroups: computers
1810     excludehostgroups: squeeze, freebsd, alioth
1811   -
1812     name: process - ud-replicated
1813     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1814     hostgroups: freebsd
1815   ###
1816   -
1817     name: process - monit
1818     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1819     hostgroups: squeeze
1820   -
1821     name: process - monit
1822     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1823     hostgroups: computers
1824     excludehostgroups: squeeze, alioth, jessie
1825   ###
1826   -
1827     name: MQ connection on rainier
1828     servicegroups: MQ
1829     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1830     runfrom: rainier
1831     hostgroups: computers
1832     normal_check_interval:  60
1833     retry_check_interval: 15
1834     excludehostgroups: alioth, broken_mq
1835   -
1836     name: MQ connection on rapoport
1837     servicegroups: MQ
1838     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1839     runfrom: rapoport
1840     hostgroups: computers
1841     normal_check_interval:  60
1842     retry_check_interval: 15
1843     excludehostgroups: alioth, broken_mq
1844   ###
1845   -
1846     name: local resolver
1847     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1848     hostgroups: computers
1849     normal_check_interval: 60
1850   -
1851     name: process - unbound
1852     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1853     hostgroups: computers
1854     excludehostgroups: alioth
1855   ###
1856   -
1857     name: process - uptimed
1858     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1859     hostgroups: computers
1860   ###
1861   -
1862     name: process - udevd
1863     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1864     hostgroups: computers
1865     excludehostgroups: freebsd, jessie
1866   -
1867     name: process - udevd
1868     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1869     hostgroups: jessie
1870   -
1871     name: unexpected process - udev
1872     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1873     hostgroups: freebsd
1874   ###
1875   -
1876     name: process - acpid
1877     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1878     hostgroups: acpid-hosts
1879   -
1880     name: unexpected process - acpid
1881     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1882     hostgroups: computers
1883     excludehostgroups: acpid-hosts, kvmdomains
1884   ###
1885   -
1886     name: process - xinetd
1887     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1888     hostgroups: xinetd-hosts
1889   -
1890     name: unwanted process - xinetd
1891     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1892     hostgroups: computers
1893     excludehostgroups: xinetd-hosts
1894   ###
1895   -
1896     name: process - stunnel4 - puppet-ekeyd
1897     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1898     hostgroups: squeeze, wheezy, jessie
1899     excludehostgroups: freebsd, alioth
1900   # }}}
1901   # {{{ anti-services
1902   -
1903     name: ganeti - job watcher paused
1904     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1905     hostgroups: computers
1906   -
1907     name: unwanted process - irqbalance
1908     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1909     hostgroups: computers
1910   -
1911     name: unwanted process - openvpn
1912     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1913     hostgroups: computers
1914     normal_check_interval: 120
1915   -
1916     name: unwanted process - gkrellmd
1917     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1918     hostgroups: computers
1919   -
1920     name: unwanted process - rpc.statd
1921     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1922     hostgroups: computers
1923     excludehostgroups: nfs-client, nfs-server
1924   -
1925     name: unwanted process - inetd
1926     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1927     hostgroups: computers
1928     excludehosts: abel
1929   -
1930     name: unwanted process - snmpd
1931     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1932     hostgroups: computers
1933   # }}}
1934   # {{{ ssl certs
1935   -
1936     name: "host SSL cert"
1937     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1938     hostgroups: computers
1939   # }}}
1940   # {{{ HW health/raid
1941   -
1942     name: process - mdadm monitor
1943     servicegroups: raid
1944     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1945     hostgroups: sw-raid
1946     excludehostgroups: jessie
1947   -
1948     name: process - mdadm monitor
1949     servicegroups: raid
1950     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1951     hostgroups: sw-raid
1952     excludehostgroups: wheezy
1953   -
1954     name: RAID - sw raid
1955     servicegroups: raid
1956     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1957     hostgroups: sw-raid
1958   ###
1959   -
1960     name: HW - hpacucli status
1961     servicegroups: raid
1962     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1963     normal_check_interval: 120
1964     hostgroups: dl385, dl380, dl360, bl460, dl180
1965     excludehosts: schein, rietz
1966   -
1967     name: HW - hpacucli status
1968     servicegroups: raid
1969     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1970     normal_check_interval: 120
1971     hostgroups: bm-bl
1972   -
1973     name: HW - hpacucli status
1974     servicegroups: raid
1975     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1976     normal_check_interval: 120
1977     hosts: schein, rietz
1978   -
1979     name: HW - hpacucli enclosure status
1980     servicegroups: raid
1981     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1982     normal_check_interval: 120
1983     hosts: franck
1984   -
1985     name: HW - hpacucli status
1986     servicegroups: raid
1987     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1988     normal_check_interval: 120
1989     hostgroups: dl585
1990   ###
1991 #  -
1992 #    name: HW - edac status
1993 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1994 #    normal_check_interval: 120
1995     #hostgroups: computers
1996     #excludehosts: villa, lobos, senfl, schein
1997   -
1998     name: HW - hpasmcli status
1999     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2000     normal_check_interval: 120
2001     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
2002     excludehosts: villa, lobos, senfl, schein, storace
2003   -
2004     name: HW - hpasmcli status
2005     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2006     normal_check_interval: 120
2007     hosts: villa
2008   -
2009     name: HW - hpasmcli status
2010     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
2011     normal_check_interval: 120
2012     hosts: lobos
2013   -
2014     name: HW - hpasmcli status
2015     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2016     normal_check_interval: 120
2017     hosts: senfl, schein
2018   -
2019     name: HW - hpasmcli status
2020     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2021     normal_check_interval: 120
2022     hosts: storace
2023   ###
2024   -
2025     name: RAID - 3ware
2026     servicegroups: raid
2027     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
2028     hosts: powell
2029   ###
2030   -
2031     name: RAID - aacraid
2032     servicegroups: raid
2033     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2034     hostgroups: aacraid
2035   ###
2036   -
2037     name: RAID - megaraid
2038     servicegroups: raid
2039     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
2040     hostgroups: megaraid
2041   ###
2042   -
2043     name: RAID - DRBD
2044     servicegroups: raid
2045     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2046     hostgroups: drbd-hosts
2047   # }}}
2048   # }}}
2049   # {{{ ### mail stuff
2050   # {{{ exim processes and mailq
2051   -
2052     name: process - exim
2053     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2054     hostgroups: computers
2055     excludehostgroups: postfix-hosts, mail-relay
2056     excludehosts: master, busoni, quantz, buxtehude
2057   -
2058     name: process - exim
2059     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2060     hostgroups: mail-relay
2061   -
2062     name: process - exim - total
2063     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2064     hostgroups: computers
2065     excludehostgroups: postfix-hosts
2066     excludehosts: master, busoni, quantz, buxtehude
2067   -
2068     name: process - exim
2069     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2070     hosts: master, busoni, quantz, buxtehude
2071   -
2072     name: mail queue
2073     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2074     hostgroups: heavy-exim
2075   # }}}
2076   # {{{ clamav
2077   -
2078     name: process - clamav - clamd
2079     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2080     hostgroups: heavy-exim, heavy-postfix
2081   -
2082     name: service - clamav
2083     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2084     hostgroups: heavy-exim, heavy-postfix
2085     depends: process - clamav - clamd
2086   -
2087     name: process - clamav - freshclam
2088     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2089     hostgroups: heavy-exim, heavy-postfix
2090   -
2091     name: unwanted process - clamav
2092     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2093     hostgroups: computers
2094     excludehostgroups: heavy-exim, heavy-postfix
2095   -
2096     name: unwanted process - freshclam
2097     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2098     hostgroups: computers
2099     excludehostgroups: heavy-exim, heavy-postfix
2100   # }}}
2101   # {{{ anti-spam
2102   -
2103     name: process - spamd - master
2104     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2105     hostgroups: spamd
2106     excludehosts: picconi
2107   -
2108     name: process - spamd - master
2109     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2110     hosts: picconi
2111   -
2112     name: process - spamd - master
2113     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2114     hosts: bendel
2115   -
2116     name: process - spamd - child
2117     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2118     hosts: bendel
2119     hostgroups: spamd
2120     depends: process - spamd - master
2121   #
2122   -
2123     name: process - spamd - master
2124     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2125     hosts: buxtehude
2126   -
2127     name: process - spamd - child
2128     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2129     hosts: buxtehude
2130   #
2131   -
2132     name: unwanted process - spamd
2133     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2134     hostgroups: computers
2135     excludehostgroups: spamd
2136     excludehosts: bendel, busoni, buxtehude
2137
2138   -
2139     name: unwanted process - greylistd
2140     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2141     hostgroups: computers
2142
2143   ###
2144   -
2145     name: process - postgrey
2146     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2147     hostgroups: heavy-exim
2148   -
2149     name: process - postgrey
2150     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2151     hostgroups: heavy-postfix
2152   #
2153   -
2154     name: unwanted process - postgrey
2155     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2156     hostgroups: computers
2157     excludehostgroups: heavy-postfix, heavy-exim
2158   ###
2159   -
2160     name: process - amavis - master
2161     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2162     hostgroups: amavis-hosts
2163   -
2164     name: process - amavis - all
2165     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2166     hostgroups: amavis-hosts
2167     depends: process - amavis - master
2168   #
2169   -
2170     name: unwanted process - amavis
2171     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2172     hostgroups: computers
2173     excludehostgroups: amavis-hosts
2174   ###
2175   -
2176     name: process - weightd - master
2177     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2178     hostgroups: heavy-postfix, alioth
2179   -
2180     name: process - weightd - cache
2181     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2182     hostgroups: heavy-postfix, alioth
2183     depends: process - weightd - master
2184   -
2185     name: process - weightd - child
2186     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2187     hostgroups: heavy-postfix, alioth
2188     depends: process - weightd - master
2189   ###
2190   -
2191     name: unwanted process - policyd-weight
2192     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2193     hostgroups: computers
2194     excludehostgroups: heavy-postfix, alioth
2195   # }}}
2196   # {{{ postfix
2197   ###
2198   -
2199     name: process - postfix - master
2200     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2201     hostgroups: postfix-hosts
2202   -
2203     name: process - postfix - qmgr
2204     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2205     hostgroups: postfix-hosts
2206     depends: process - postfix - master
2207   -
2208     name: process - postfix - pickup
2209     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2210     hostgroups: postfix-hosts
2211     depends: process - postfix - master
2212   -
2213     name: process - postfix - anvil
2214     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2215     hostgroups: postfix-hosts
2216     depends: process - postfix - master
2217
2218   -
2219     name: process - postfix - trivial-rewrite
2220     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2221     hostgroups: postfix-hosts
2222     depends: process - postfix - master
2223   -
2224     name: process - postfix - proxymap
2225     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2226     hostgroups: postfix-hosts
2227     depends: process - postfix - master
2228   -
2229     name: process - postfix - cleanup
2230     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2231     hostgroups: postfix-hosts
2232     depends: process - postfix - master
2233   -
2234     name: process - postfix - local
2235     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2236     hostgroups: postfix-hosts
2237     depends: process - postfix - master
2238
2239   -
2240     name: network service local - smtps cert
2241     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2242     hostgroups: postfix-hosts
2243     depends: process - postfix - master
2244     normal_check_interval: 120
2245   # }}}
2246   # {{{ mail - network service
2247   -
2248     name: network service - smtp
2249     check: dsa_check_smtp
2250     hostgroups: computers
2251     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2252     depends: process - exim
2253
2254   -
2255     name: network service - smtp
2256     check: dsa_check_smtp
2257     hostgroups: postfix-hosts
2258     depends: process - postfix - master
2259   -
2260     name: network service - submission
2261     check: dsa_check_smtp_port!587
2262     hostgroups: incomingmailrelayed
2263     depends: process - exim
2264   -
2265     name: network service - smtp 2025
2266     check: dsa_check_smtp_port!2025
2267     hostgroups: incomingmailrelayed2025
2268     depends: process - exim
2269   # }}}
2270   # }}}
2271   # {{{ ### host specific services
2272   # {{{ HTTP
2273   -
2274     name: process - apache2 - master
2275     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2276     hostgroups: apache2-hosts
2277   -
2278     name: process - apache2 - worker
2279     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2280     hostgroups: apache2-hosts
2281     depends: process - apache2 - master
2282   -
2283     name: unwanted process - apache2
2284     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2285     hostgroups: computers
2286     excludehostgroups: apache2-hosts
2287
2288   -
2289     name: network service - http
2290     check: check_http
2291     hostgroups: apache2-hosts
2292     excludehosts: klecker
2293     depends: process - apache2 - master
2294   -
2295     name: network service - http
2296     check: check_http
2297     depends: klecker:process - apache2 - master
2298     hosts: klecker-ftp
2299
2300   # keyserver on kaufmann
2301   -
2302     name: network service - http keyserver
2303     check: dsa_check_http_port!11371
2304     hosts: kaufmann
2305     depends: process - apache2 - master
2306
2307   # https on various hosts
2308   -
2309     name: network service - https
2310     check: check_https
2311     hostgroups: apache-https
2312     excludehosts: handel,menotti
2313     excludehostgroups: broken_https_default_vhost
2314     depends: "process - apache2 - master"
2315     normal_check_interval: 120
2316   -
2317     name: network service - https
2318     check: dsa_check_https_want_auth
2319     hosts: handel,menotti
2320     depends: "process - apache2 - master"
2321     normal_check_interval: 120
2322   -
2323     name: network service - https
2324     check: dsa_check_https_any_status
2325     hostgroups: broken_https_default_vhost
2326     depends: "process - apache2 - master"
2327     normal_check_interval: 120
2328   -
2329     name: network service - https cert
2330     check: dsa_check_cert!443
2331     hostgroups: apache-https
2332     depends: network service - https
2333     normal_check_interval: 60
2334   -
2335     name: unwanted network service - https
2336     check: dsa_check_port_closed!443
2337     hostgroups: apache2-hosts
2338     excludehostgroups: apache-https
2339     # ravel does ssh on port 443
2340     excludehosts: ravel
2341     normal_check_interval: 60
2342   # }}}
2343   # {{{ FTP
2344   -
2345     name: network service - ftp
2346     check: check_ftp
2347     hostgroups: uploadqueue, security_mirror
2348     excludehosts: klecker
2349   -
2350     name: network service - ftp
2351     check: check_ftp
2352     hosts: klecker-ftp
2353     depends: klecker:process - xinetd
2354   # }}}
2355   # {{{ postgres
2356   -
2357     name: unwanted process - postgresql
2358     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2359     hostgroups: computers
2360     excludehostgroups: postgres91-hosts
2361   -
2362     name: unwanted process - postgresql 9.0
2363     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2364     hostgroups: computers
2365   -
2366     name: process - postgresql91 - master
2367     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2368     hostgroups: postgres91-hosts
2369   -
2370     name: postgresql backups
2371     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2372     hosts: storace
2373   # }}}
2374   # {{{ power
2375 #  -
2376 #    name: process - UPS - nut usbhid-ups - ups1
2377 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2378 #    hosts: franck
2379 #  -
2380 #    name: process - UPS - nut upsd
2381 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2382 #    hosts: franck
2383 #  -
2384 #    name: process - UPS - nut upsmon master
2385 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2386 #    hosts: franck
2387 #  -
2388 #    name: process - UPS - nut upsmon worker
2389 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2390 #    hosts: franck
2391 #    depends: process - UPS - nut upsmon master
2392 #  -
2393 #    name: UPS - on line power
2394 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2395 #    hosts: franck
2396 #    depends: process - UPS - nut upsd
2397   # }}}
2398   # {{{ buildd
2399   -
2400     name: process - buildd
2401     servicegroups: buildd
2402     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2403     hosts: fano, finzi, fils, fayrfax
2404     contact_groups: buildd
2405   -
2406     name: process - buildd
2407     servicegroups: buildd
2408     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2409     hostgroups: buildd
2410     excludehosts: fano, finzi, fils, fayrfax
2411     contact_groups: buildd
2412   -
2413     name: processes - zombie schroot
2414     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2415     hostgroups: buildd
2416     contact_groups: +buildd
2417     normal_check_interval: 5
2418     max_check_attempts: 24
2419     retry_check_interval: 5
2420   -
2421     name: processes - lvcreate
2422     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2423     hostgroups: buildd
2424     contact_groups: +buildd
2425   # }}}
2426   # {{{ NFS Stuff
2427   -
2428     name: process - statd
2429     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2430     hostgroups: nfs-client, nfs-server
2431   -
2432     name: process - nfsd
2433     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2434     hostgroups: nfs-server
2435   -
2436     name: process - lockd
2437     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2438     hostgroups: nfs-server
2439   -
2440     name: process - mountd
2441     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2442     hostgroups: nfs-server
2443   #
2444   -
2445     name: process - automount
2446     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2447     hostgroups: autofs
2448   -
2449     name: unwanted process - automount
2450     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2451     hostgroups: computers
2452     excludehostgroups: autofs
2453   # }}}
2454   # {{{ mirroring
2455   -
2456     name: mirror sync - bugs
2457     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2458     hosts: global
2459   -
2460     name: mirror sync - security
2461     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2462     hosts: global
2463   -
2464     name: mirror sync - packages
2465     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2466     hosts: global
2467     normal_check_interval: 15
2468     max_check_attempts: 5
2469     retry_check_interval: 5
2470   -
2471     name: mirror sync - snapshot
2472     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2473     hosts: global
2474     normal_check_interval: 15
2475     max_check_attempts: 5
2476     retry_check_interval: 5
2477   # }}}
2478   # {{{ DNS
2479   -
2480     name: process - named
2481     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2482     hostgroups: bind9-hosts
2483   -
2484     name: network service - dns
2485     check: check_dns
2486     hostgroups: bind9-hosts
2487     depends: process - named
2488   -
2489     name: unwanted process - named
2490     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2491     hostgroups: computers
2492     excludehostgroups: bind9-hosts
2493   ###
2494   -
2495     name: DNS SOA sync - debian.org
2496     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2497     hosts: global
2498   -
2499     name: DNS SOA sync - debian.net
2500     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2501     hosts: global
2502   -
2503     name: DNS SOA sync - debian.com
2504     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2505     hosts: global
2506   -
2507     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2508     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2509     hosts: global
2510   -
2511     name: DNS SOA sync - alioth.debian.org
2512     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2513     hosts: global
2514   -
2515     name: DNS - delegation and signature expiry
2516     hosts: global
2517     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2518     runfrom: denis
2519   -
2520     name: DNS - security delegations
2521     hosts: global
2522     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2523     runfrom: denis
2524   -
2525     name: DNS - key coverage
2526     hosts: global
2527     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2528     runfrom: denis
2529   -
2530     name: DNS - DS expiry
2531     hosts: global
2532     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2533     runfrom: denis
2534   # }}}
2535   # {{{ storage
2536   -
2537     name: ping alive check
2538     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2539     runfrom: dijkstra
2540     hosts: giustini
2541     normal_check_interval: 5
2542     max_check_attempts: 4
2543     retry_check_interval: 1
2544   -
2545     name: Overall Unit Status
2546     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2547     runfrom: dijkstra
2548     hosts: giustini
2549   -
2550     name: event log
2551     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2552     runfrom: dijkstra
2553     hosts: giustini
2554   # }}}
2555   # {{{ porterbox
2556   -
2557     name: current chroots
2558     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2559     hostgroups: porterbox
2560     normal_check_interval:  60
2561     retry_check_interval: 15
2562   # }}}
2563   # {{{ openstack
2564   -
2565     name: process - openstack - memcached
2566     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2567     hostgroups: openstack-controller
2568   -
2569     name: process - openstack - glance-registry
2570     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2571     hostgroups: openstack-controller
2572   -
2573     name: process - openstack - nova-api
2574     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2575     hostgroups: openstack-controller
2576   -
2577     name: process - openstack - nova-compute
2578     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2579     hostgroups: openstack-compute
2580   -
2581     name: process - openstack - nova-cert
2582     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2583     hostgroups: openstack-controller
2584   -
2585     name: process - openstack - nova-conductor
2586     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2587     hostgroups: openstack-controller
2588   -
2589     name: process - openstack - nova-consoleauth
2590     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2591     hostgroups: openstack-controller
2592   -
2593     name: process - openstack - nova-scheduler
2594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2595     hostgroups: openstack-controller
2596   -
2597     name: process - openstack - nova-spicehtml5proxy
2598     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2599     hostgroups: openstack-controller
2600   -
2601     name: process - openstack - neutron-server
2602     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2603     hostgroups: openstack-controller
2604   # }}}
2605   # {{{ misc
2606   -
2607     name: process - rngd
2608     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2609     hostgroups: dl385
2610   ###
2611   -
2612     name: process - slapd
2613     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2614     hosts: draghi
2615   -
2616     name: network service - ldaps cert
2617     check: dsa_check_cert!636
2618     depends: process - slapd
2619     normal_check_interval: 60
2620     hosts: draghi
2621   ###
2622   -
2623     name: network service - finger
2624     check: check_tcp!79
2625     hosts: draghi
2626     depends: process - xinetd
2627   ###
2628   -
2629     name: network service - rsync
2630     check: check_tcp!873
2631     hostgroups: rsyncd-hosts
2632     depends: process - xinetd
2633     excludehosts: rietz
2634   -
2635     name: network service - rsync
2636     check: check_tcp!873
2637     hosts: rietz2
2638     depends: rietz:process - xinetd
2639   -
2640     name: network service - rsync
2641     check: check_tcp!873
2642     hosts: milanollo2
2643     depends: milanollo:process - xinetd
2644   ###
2645   -
2646     name: process - icinga
2647     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2648     hosts: tchaikovsky
2649   ###
2650   -
2651     name: process - jetty - master
2652     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2653     hostgroups: jetty-hosts
2654   -
2655     name: process - jetty - worker
2656     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2657     hostgroups: jetty-hosts
2658     depends: process - jetty - master
2659   ###
2660   -
2661     name: process - debianqueued
2662     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2663     hostgroups: uploadqueue
2664   ####
2665   -
2666     name: network service - gobby
2667     check: check_tcp!6523
2668     hosts: gombert
2669     contact_groups: gobby
2670   ####
2671   -
2672     name: network service - sip-tls cert - 443
2673     check: dsa_check_cert!443
2674     normal_check_interval: 60
2675     hosts: vogler
2676   -
2677     name: network service - sip-tls cert - 5061
2678     check: dsa_check_cert!5061
2679     normal_check_interval: 60
2680     hosts: vogler
2681   ####
2682   -
2683     name: puppetmaster cert
2684     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2685     hosts: handel
2686     normal_check_interval: 60
2687     max_check_attempts: 2
2688     retry_check_interval: 5
2689   # }}}
2690 # }}}
2691
2692 # vim: set ts=2 sw=2 et ai si fdm=marker: