rautavaara on wheezy; no longer has an nfs-server
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-aql:
37     address: 141.170.2.17
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-bytemark:
41     address: 89.16.160.116
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-c3sl:
45     address: 200.17.202.254
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-cecsit:
49     address: 150.203.164.38
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-arm:
53     address: 213.104.121.213
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-brown:
57     address: 138.16.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-carnet:
61     address: 161.53.160.1
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-conova:
65     address: 217.196.149.238
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-csail:
69     address: 128.31.0.1
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72   gw-dgi:
73     address: 93.94.132.102
74     parents: gw-ubcece
75     hostgroups: layer3-infrastructure
76     contacts: bzed
77   gw-freenet:
78     address: 62.104.23.249
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-linaro:
102     address: 64.28.108.36
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-man-da:
106     address: 82.195.75.126
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-marist:
110     address: 148.100.88.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-osuosl:
114     address: 140.211.166.1
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-rapidswitch:
118     address: 193.201.200.129
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121   gw-sanger:
122     address: 193.62.202.20
123     parents: gw-ubcece
124     hostgroups: layer3-infrastructure
125     contacts: tjrc1, dave
126   gw-scanplus-lobos:
127     address: 212.211.132.249
128     parents: gw-ubcece
129     hostgroups: layer3-infrastructure
130   gw-scanplus-villa:
131     address: 212.211.132.1
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-sil:
135     address: 86.59.118.145
136     parents: gw-ubcece
137     hostgroups: layer3-infrastructure
138   gw-ubcece:
139     address: 206.12.19.254
140     hostgroups: layer3-infrastructure
141     contacts: lfilipoz
142   gw-ugent:
143     address: 193.191.17.50
144     parents: gw-ubcece
145     hostgroups: layer3-infrastructure
146   gw-umn:
147     address: 128.101.240.222
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-unicamp:
151     address: 143.106.167.234
152     parents: gw-ubcece
153     hostgroups: layer3-infrastructure
154   gw-utwente:
155     address: 130.89.149.1
156     parents: gw-ubcece
157     hostgroups: layer3-infrastructure
158   gw-ynic:
159     # really janet, because ynic is stupid about firewalling
160     #address: 146.97.42.26
161     address: 146.97.41.66
162     parents: gw-ubcece
163     hostgroups: layer3-infrastructure
164   gw-zivit:
165     address: 80.245.144.3
166     parents: gw-ubcece
167     hostgroups: layer3-infrastructure
168   # }}}
169   # {{{ servers
170   # {{{ gw-1und1
171   powell:
172     address: 87.106.64.223
173     parents: gw-1und1
174     hostgroups: computers, service, acpid-hosts, wheezy
175   pkgmirror-1and1:
176     address: 213.165.95.4
177     parents: powell
178     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
179   babin:
180     address: 213.165.95.6
181     parents: powell
182     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
183   piu-slave-1und1-01:
184     address: 213.165.95.7
185     parents: powell
186     hostgroups: computers, service, kvmdomains, wheezy
187     contacts: holger
188   # }}}
189   # {{{ gw-1und1-sec
190   schumann:
191     address: 212.227.126.54
192     parents: gw-1und1-sec
193     hostgroups: computers, acpid-hosts, service, wheezy
194   chopin:
195     address: 195.20.242.124
196     parents: schumann
197     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
198   geo3:
199     address: 195.20.242.125
200     parents: schumann
201     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
202   soler:
203     address: 195.20.242.126
204     parents: schumann
205     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
206   wieck:
207     address: 195.20.242.89
208     parents: gw-1und1-sec
209     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
210   # }}}
211   # {{{ gw-accumu
212   pettersson:
213     address: 130.239.18.123
214     parents: gw-accumu
215     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
216   praetorius:
217     address: 130.239.18.121
218     parents: gw-accumu
219     hostgroups: computers, buildd, hassrvfs, wheezy
220   # }}}
221   # {{{ gw-aql
222   mips-aql-02:
223     address: 141.170.6.150
224     parents: gw-aql
225     hostgroups: computers, buildd, wheezy
226   # }}}
227   # {{{ gw-arm
228   abel:
229     address: 217.140.96.56
230     parents: gw-arm
231     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
232   arnold:
233     address: 217.140.96.57
234     parents: gw-arm
235     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
236   arm-arm-01:
237     address: 217.140.96.58
238     parents: gw-arm
239     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
240   arm-arm-02:
241     address: 217.140.96.59
242     parents: gw-arm
243     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
244   harris:
245     address: 217.140.96.66
246     parents: gw-arm
247     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
248   hartmann:
249     address: 217.140.96.67
250     parents: gw-arm
251     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
252   hoiby:
253     address: 217.140.96.71
254     parents: gw-arm
255     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
256   # }}}
257   # {{{ gw-brown
258   franck:
259     address: 138.16.160.12
260     parents: gw-brown
261     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
262   # }}}
263   # {{{ gw-bytemark
264   bm-bl1:
265     address: 5.153.231.241
266     parents: gw-bytemark
267     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
268   bm-bl2:
269     address: 5.153.231.242
270     parents: gw-bytemark
271     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
272   bm-bl3:
273     address: 5.153.231.243
274     parents: gw-bytemark
275     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
276   bm-bl4:
277     address: 5.153.231.244
278     parents: gw-bytemark
279     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
280   bm-bl5:
281     address: 5.153.231.245
282     parents: gw-bytemark
283     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
284   bm-bl6:
285     address: 5.153.231.246
286     parents: gw-bytemark
287     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
288   bm-bl7:
289     address: 5.153.231.247
290     parents: gw-bytemark
291     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
292   bm-bl8:
293     address: 5.153.231.248
294     parents: gw-bytemark
295     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
296   bm-bl9:
297     address: 5.153.231.249
298     parents: gw-bytemark
299     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
300   bm-bl10:
301     address: 5.153.231.250
302     parents: gw-bytemark
303     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
304   bm-bl11:
305     address: 5.153.231.251
306     parents: gw-bytemark
307     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
308   bm-bl12:
309     address: 5.153.231.252
310     parents: gw-bytemark
311     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
312
313   milanollo:
314     address: 5.153.231.2
315     parents: gw-bytemark
316     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
317   milanollo2:
318     address: 5.153.231.9
319     parents: milanollo
320     hostgroups: secondary-IPs
321   picconi:
322     address: 5.153.231.3
323     parents: gw-bytemark
324     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
325   senfter:
326     address: 5.153.231.4
327     parents: gw-bytemark
328     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
329   adayevskaya:
330     address: 5.153.231.5
331     parents: gw-bytemark
332     hostgroups: computers, service, kvmdomains, wheezy
333   pejacevic:
334     address: 5.153.231.6
335     parents: gw-bytemark
336     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
337     contacts: holger
338   piu-slave-bm-a:
339     address: 5.153.231.7
340     parents: gw-bytemark
341     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
342     contacts: holger
343   binet:
344     address: 5.153.231.8
345     parents: gw-bytemark
346     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
347   bmdb1:
348     address: 5.153.231.10
349     parents: gw-bytemark
350     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
351   ganeti-bytemark:
352     address: 82.195.75.111
353     parents: gw-bytemark
354     hostgroups: notacomputer
355   coccia:
356     address: 5.153.231.11
357     parents: ganeti-bytemark
358     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts
359   backuphost:
360     address: 5.153.231.12
361     parents: ganeti-bytemark
362     hostgroups: computers, hassrvfs, kvmdomains, wheezy
363   philp:
364     address: 5.153.231.13
365     parents: ganeti-bytemark
366     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
367   couper:
368     address: 5.153.231.14
369     parents: ganeti-bytemark
370     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
371   rainier:
372     address: 5.153.231.16
373     parents: ganeti-bytemark
374     hostgroups: computers, kvmdomains, wheezy, no-bacula
375   rapoport:
376     address: 5.153.231.15
377     parents: ganeti-bytemark
378     hostgroups: computers, kvmdomains, wheezy, no-bacula
379   delfin:
380     address: 5.153.231.17
381     parents: ganeti-bytemark
382     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
383   wuiet:
384     address: 5.153.231.18
385     parents: ganeti-bytemark
386     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
387   dinis:
388     address: 5.153.231.19
389     parents: ganeti-bytemark
390     hostgroups: computers, general, kvmdomains, wheezy
391   donizetti:
392     address: 5.153.231.20
393     parents: ganeti-bytemark
394     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
395   moszumanska:
396     address: 5.153.231.21
397     parents: ganeti-bytemark
398     contact_groups: alioth-admins
399     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
400     no-servicegroups: true
401   dillon:
402     address: 5.153.231.22
403     parents: ganeti-bytemark
404     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
405   ticharich:
406     address: 5.153.231.23
407     parents: ganeti-bytemark
408     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
409   petrova:
410     address: 5.153.231.25
411     parents: ganeti-bytemark
412     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
413   oyens:
414     address: 5.153.231.26
415     parents: ganeti-bytemark
416     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
417   barriere:
418     address: 5.153.231.27
419     parents: ganeti-bytemark
420     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
421   quantz:
422     address: 5.153.231.28
423     parents: ganeti-bytemark
424     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
425   portman:
426     address: 5.153.231.29
427     parents: ganeti-bytemark
428     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
429   paradis:
430     address: 5.153.231.30
431     parents: ganeti-bytemark
432     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
433   x86-bm-01:
434     address: 5.153.231.32
435     parents: ganeti-bytemark
436     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
437   gideon:
438     address: 5.153.231.34
439     parents: ganeti-bytemark
440     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
441   httpredir-bm-01:
442     address: 5.153.231.35
443     parents: ganeti-bytemark
444     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
445   # }}}
446   # {{{ gw-c3sl
447   santoro:
448     address: 200.17.202.197
449     parents: gw-c3sl
450     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
451     contacts: faw
452   # }}}
453   # {{{ gw-carnet
454   lebrun:
455     address: 193.198.184.10
456     parents: gw-carnet
457     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
458   schroeder:
459     address: 193.198.184.11
460     parents: gw-carnet
461     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
462   # }}}
463   # {{{ gw-cecsit
464   gluck:
465     address: 150.203.164.38
466     parents: gw-cecsit
467     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
468   # }}}
469   # {{{ gw-conova
470   sompek:
471     address: 217.196.149.225
472     parents: gw-conova
473     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
474   stadler:
475     address: 217.196.149.226
476     parents: gw-conova
477     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
478   # }}}
479   # {{{ gw-csail
480   senfl:
481     address: 128.31.0.51
482     parents: gw-csail
483     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
484   steffani:
485     address: 128.31.0.36
486     parents: gw-csail
487     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
488
489   csail-node01:
490     address: 128.31.0.16
491     parents: gw-csail
492     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
493   csail-node02:
494     address: 128.31.0.46
495     parents: gw-csail
496     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
497   ganeti-csail:
498     address: 128.31.0.49
499     parents: gw-bytemark
500     hostgroups: notacomputer
501
502   falla:
503     address: 128.31.0.65
504     parents: ganeti-csail
505     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
506   fischer:
507     address: 128.31.0.35
508     parents: ganeti-csail
509     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
510   mirror-csail:
511     address: 128.31.0.62
512     parents: ganeti-csail
513     hostgroups: computers, service, hassrvfs, kvmdomains, wheezy, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
514   x86-csail-01:
515     address: 128.31.0.50
516     parents: ganeti-csail
517     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
518   # }}}
519   # {{{ gw-dgi
520   storace:
521     address: 93.94.130.161
522     parents: gw-dgi
523     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
524   # }}}
525   # {{{ gw-gatech
526   sechter:
527     address: 128.61.240.73
528     parents: gw-gatech
529     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
530   # }}}
531   # {{{ gw-grnet
532   ganeti-grnet:
533     address: 194.177.211.194
534     parents: gw-grnet
535     hostgroups: notacomputer
536   grnet-node01:
537     address: 194.177.211.195
538     parents: gw-grnet
539     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
540   grnet-node02:
541     address: 194.177.211.196
542     parents: gw-grnet
543     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
544   rautavaara:
545     address: 194.177.211.199
546     parents: gw-grnet
547     hostgroups: computers, acpid-hosts, megaraid, service, wheezy
548   loghost-grnet-01:
549     address: 194.177.211.200
550     parents: gw-grnet
551     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
552   # }}}
553   # {{{ gw-isc
554   schein:
555     address: 149.20.20.6
556     parents: gw-isc
557     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
558   # }}}
559   # {{{ gw-leaseweb
560   lw01:
561     address: 185.17.185.177
562     parents: gw-leaseweb
563     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
564   lw02:
565     address: 185.17.185.178
566     parents: gw-leaseweb
567     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
568   lw03:
569     address: 185.17.185.179
570     parents: gw-leaseweb
571     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
572   lw04:
573     address: 185.17.185.180
574     parents: gw-leaseweb
575     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
576   lw07:
577     address: 185.17.185.187
578     parents: gw-leaseweb
579     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
580   lw08:
581     address: 185.17.185.189
582     parents: gw-leaseweb
583     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
584   #, apache2-hosts
585   # }}}
586   # {{{ gw-linaro
587   arm-linaro-01:
588     address: 64.28.108.83
589     parents: gw-linaro
590     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
591   arm-linaro-03:
592     address: 64.28.108.85
593     parents: gw-linaro
594     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
595   asachi:
596     address: 64.28.108.84
597     parents: gw-linaro
598     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
599   # }}}
600   # {{{ gw-karlsruhe
601   zemlinsky:
602     address: 129.143.160.6
603     parents: gw-karlsruhe
604     hostgroups: computers, buildd, wheezy
605     contacts: pkern
606   # }}}
607   # {{{ gw-man-da
608   ball:
609     address: 82.195.75.70
610     parents: gw-man-da
611     hostgroups: computers, buildd, hasbootfs, wheezy
612   # bartok TODO
613   czerny:
614     address: 82.195.75.109
615     parents: gw-man-da
616     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
617   clementi:
618     address: 82.195.75.103
619     parents: gw-man-da
620     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
621   bendel:
622     address: 82.195.75.100
623     parents: ganeti3
624     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
625   master:
626     address: 82.195.75.110
627     parents: ganeti3
628     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
629   mipsel-manda-01:
630     address: 82.195.75.72
631     parents: gw-man-da
632     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
633   mipsel-manda-02:
634     address: 82.195.75.74
635     parents: gw-man-da
636     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
637   fils:
638     address: 82.195.75.89
639     parents: ganeti3
640     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
641     contacts: christoph
642   fayrfax:
643     address: 82.195.75.82
644     parents: ganeti3
645     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
646     contacts: christoph
647   vento:
648     address: 82.195.75.98
649     parents: ganeti3
650     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
651   lully:
652     address: 82.195.75.99
653     parents: ganeti3
654     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
655   rem:
656     address: 82.195.75.68
657     parents: gw-man-da
658     hostgroups: computers, hasbootfs, hassrvfs, wheezy, no-bacula
659   draghi:
660     address: 82.195.75.106
661     parents: ganeti3
662     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
663   geo1:
664     address: 82.195.75.105
665     parents: ganeti3
666     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
667   handel:
668     address: 82.195.75.104
669     parents: ganeti3
670     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
671   kaufmann:
672     address: 82.195.75.107
673     parents: ganeti3
674     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
675   stockhausen:
676     address: 82.195.75.108
677     parents: ganeti3
678     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
679   ganeti3:
680     address: 82.195.75.111
681     parents: gw-man-da
682     hostgroups: notacomputer
683   wilder:
684     address: 82.195.75.112
685     parents: ganeti3
686     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
687   mailly:
688     address: 82.195.75.114
689     parents: ganeti3
690     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
691   denis:
692     address: 82.195.75.91
693     parents: ganeti3
694     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
695   vogler:
696     address: 82.195.75.92
697     parents: ganeti3
698     hostgroups: computers, service, kvmdomains, wheezy
699   mipsel-manda-01:
700     address: 82.195.75.72
701     parents: gw-man-da
702     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
703   mipsel-manda-02:
704     address: 82.195.75.74
705     parents: gw-man-da
706     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
707   # }}}
708   # {{{ gw-marist
709   zani:
710     address: 148.100.88.22
711     parents: gw-marist
712     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
713   # }}}
714   # {{{ gw-osuosl
715   busoni:
716     address: 140.211.15.34
717     parents: gw-osuosl
718     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
719   byrd:
720     address: 140.211.166.20
721     parents: gw-osuosl
722     hostgroups: computers, service, dl380, acpid-hosts, wheezy
723   buxtehude:
724     address: 140.211.166.26
725     parents: byrd
726     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
727   # malo TODO
728   mayer:
729     address: 140.211.166.78
730     parents: gw-osuosl
731     hostgroups: computers, buildd, hasbootfs, wheezy
732 #  mayr:
733 #    address: 140.211.166.58
734 #    parents: gw-osuosl
735 #    hostgroups: computers, buildd, hasbootfs
736   merulo:
737     address: 140.211.166.46
738     parents: gw-osuosl
739     hostgroups: computers, porterbox, hasusrfs, wheezy
740   parry:
741     address: 140.211.15.153
742     parents: gw-osuosl
743     hostgroups: computers, wheezy, buildd, hassrvfs
744   partch:
745     address: 140.211.15.152
746     parents: gw-osuosl
747     hostgroups: computers, wheezy, hassrvfs, porterbox
748   rietz:
749     address: 140.211.166.43
750     parents: gw-osuosl
751     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
752     #, bosserver
753   rietz2:
754     address: 140.211.166.44
755     parents: rietz
756     hostgroups: secondary-IPs
757   # zee TODO
758   # }}}
759   # {{{ gs-rapidswitch
760   caballero:
761     address: 193.201.200.200
762     parents: gw-rapidswitch
763     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
764   # }}}
765   # {{{ gw-sanger
766   sibelius:
767     address: 193.62.202.28
768     parents: gw-sanger
769     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, wheezy, rsyncd-hosts, xinetd-hosts, hasvarlogfs
770     contacts: tjrc1, dave
771   smetana:
772     address: 193.62.202.29
773     parents: gw-sanger
774     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
775     contacts: tjrc1, dave
776   # }}}
777   # {{{ gw-scanplus
778   lobos:
779     address: 212.211.132.250
780     parents: gw-scanplus-lobos
781     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
782   villa:
783     address: 212.211.132.32
784     parents: gw-scanplus-villa
785     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
786   # }}}
787   # {{{ gw-sil
788   eder:
789     address: 86.59.118.151
790     parents: gw-sil
791     hostgroups: computers, porterbox, wheezy, hassrvfs
792   eysler:
793     address: 86.59.118.152
794     parents: gw-sil
795     hostgroups: computers, buildd, wheezy
796   eberlin:
797     address: 86.59.118.155
798     parents: gw-sil
799     hostgroups: computers, buildd, wheezy
800   # }}}
801   # {{{ gw-ubcece
802   sw-ubcece:
803     hostgroups: layer2-infrastructure
804     contacts: lfilipoz
805     pingable: false
806     check_command: dsa_check_always_ok
807   sw-ubcece-mcld:
808     hostgroups: layer2-infrastructure
809     parents: sw-ubcece
810     contacts: lfilipoz
811     pingable: false
812     check_command: dsa_check_always_ok
813   sw-ubcece-kais:
814     hostgroups: layer2-infrastructure
815     parents: sw-ubcece
816     contacts: lfilipoz
817     pingable: false
818     check_command: dsa_check_always_ok
819   spontini:
820     address: 206.12.19.14
821     parents: sw-ubcece-mcld
822     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
823     contacts: lfilipoz
824   ravel:
825     address: 206.12.19.5
826     parents: sw-ubcece-kais
827     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
828   dijkstra:
829     address: 206.12.19.218
830     parents: sw-ubcece-kais
831     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
832   pasquini:
833     address: 206.12.19.217
834     parents: sw-ubcece-kais
835     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
836   luchesi:
837     address: 206.12.19.214
838     parents: sw-ubcece-kais
839     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
840   tristano:
841     address: 206.12.19.213
842     parents: sw-ubcece-kais
843     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
844   boito:
845     address: 206.12.19.216
846     parents: sw-ubcece-kais
847     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
848   bertali:
849     address: 206.12.19.212
850     parents: sw-ubcece-kais
851     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
852   ganeti2:
853     address: 206.12.19.23
854     parents: sw-ubcece-kais
855     hostgroups: notacomputer
856   tchaikovsky:
857     address: 206.12.19.118
858     parents: ganeti2
859     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
860   wolkenstein:
861     address: 206.12.19.116
862     parents: ganeti2
863     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
864   brahms:
865     address: 206.12.19.115
866     parents: ganeti2
867     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
868   geo2:
869     address: 206.12.19.113
870     parents: ganeti2
871     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
872   # MSA 2000 (2012i)
873   giustini:
874     address: 192.168.2.6
875     parents: dijkstra
876     hostgroups: notacomputer
877     # unless we implement runfrom for host alive checks
878     pingable: false
879     check_command: dsa_check_always_ok
880   fano:
881     address: 206.12.19.110
882     parents: ganeti2
883     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
884     contacts: christoph
885   finzi:
886     address: 206.12.19.111
887     parents: ganeti2
888     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
889     contacts: christoph
890   gabrielli:
891     address: 206.12.19.17
892     parents: sw-ubcece-kais
893     hostgroups: computers, porterbox, wheezy
894   corelli:
895     address: 206.12.19.16
896     parents: sw-ubcece-kais
897     hostgroups: computers, buildd, wheezy
898   lucatelli:
899     address: 206.12.19.15
900     parents: sw-ubcece-kais
901     hostgroups: computers, buildd, wheezy
902   rossini:
903     address: 206.12.19.19
904     parents: sw-ubcece-kais
905     hostgroups: computers, dl585, acpid-hosts, service, wheezy
906   salieri:
907     address: 206.12.19.20
908     parents: sw-ubcece-kais
909     hostgroups: computers, dl585, acpid-hosts, service, wheezy
910   traetta:
911     address: 206.12.19.21
912     parents: sw-ubcece-kais
913     hostgroups: computers, dl585, acpid-hosts, service, wheezy
914 #  locke:
915 #    address: 206.12.19.120
916 #    parents: sw-ubcece-kais
917 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
918   lotti:
919     address: 206.12.19.121
920     parents: sw-ubcece-kais
921     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
922   nono:
923     address: 206.12.19.123
924     parents: traetta
925     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
926   reger:
927     address: 206.12.19.124
928     parents: ganeti2
929     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
930   danzi:
931     address: 206.12.19.125
932     parents: ganeti2
933     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
934   glinka:
935     address: 206.12.19.126
936     parents: traetta
937     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
938   tye:
939     address: 206.12.19.129
940     parents: ganeti2
941     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
942   elgar:
943     address: 206.12.19.130
944     parents: salieri
945     hostgroups: computers, service, kvmdomains, wheezy
946   gombert:
947     address: 206.12.19.132
948     parents: ganeti2
949     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
950   jenkins:
951     address: 206.12.19.133
952     parents: salieri
953     hostgroups: computers, service, kvmdomains, wheezy
954   blavet:
955     address: 206.12.19.134
956     parents: ganeti2
957     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
958   diabelli:
959     address: 206.12.19.136
960     parents: traetta
961     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
962   bizet:
963     address: 206.12.19.137
964     parents: ganeti2
965     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
966   lilburn:
967     address: 206.12.19.138
968     parents: ganeti2
969     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
970   popov:
971     address: 206.12.19.119
972     parents: ganeti2
973     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
974   beach:
975     address: 206.12.19.140
976     parents: ganeti2
977     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
978   ullmann:
979     address: 206.12.19.141
980     parents: ganeti2
981     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
982   sonntag:
983     address: 206.12.19.142
984     parents: ganeti2
985     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
986   menotti:
987     address: 206.12.19.143
988     parents: ganeti2
989     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
990   muffat:
991     address: 206.12.19.146
992     parents: ganeti2
993     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
994   # }}}
995   # {{{ gw-ugent
996   # }}}
997   # {{{ gw-umn
998   saens:
999     address: 128.101.240.212
1000     parents: gw-umn
1001     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1002   # }}}
1003   # {{{ gw-unicamp
1004   asgard:
1005     address: 143.106.167.145
1006     parents: gw-unicamp
1007     hostgroups: layer3-infrastructure
1008   powerpc-unicamp-01:
1009     address: 143.106.167.149
1010     parents: asgard
1011     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
1012   # }}}
1013   # {{{ gw-utwente
1014   klecker:
1015     address: 130.89.148.10
1016     parents: gw-utwente
1017     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
1018   klecker-ftp:
1019     address: 130.89.148.12
1020     parents: klecker
1021     hostgroups: secondary-IPs
1022   klecker-archive:
1023     address: 130.89.148.13
1024     parents: klecker
1025     hostgroups: secondary-IPs
1026   klecker-static:
1027     address: 130.89.148.14
1028     parents: klecker
1029     hostgroups: secondary-IPs
1030   # }}}
1031   # {{{ gw-ynic
1032   henze:
1033     address: 144.32.168.74
1034     parents: gw-ynic
1035     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1036   hasse:
1037     address: 144.32.168.75
1038     parents: gw-ynic
1039     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1040   antheil:
1041     address: 144.32.168.76
1042     parents: gw-ynic
1043     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1044   porpora:
1045     address: 144.32.168.78
1046     parents: gw-ynic
1047     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1048   poulenc:
1049     address: 144.32.168.77
1050     parents: gw-ynic
1051     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1052   #antheil:
1053   #  address: 217.140.96.60
1054   #  parents: gw-arm
1055   #  hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
1056   #hasse:
1057   #  address: 217.140.96.68
1058   #  parents: gw-arm
1059   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1060   #henze:
1061   #  address: 217.140.96.70
1062   #  parents: gw-arm
1063   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1064   # }}}
1065   # {{{ gw-zivit
1066   zandonai:
1067     address: 80.245.147.46
1068     parents: gw-zivit
1069     hostgroups: computers, buildd, hassrvfs, wheezy
1070   zelenka:
1071     address: 80.245.147.40
1072     parents: gw-zivit
1073     hostgroups: computers, porterbox, hassrvfs, wheezy
1074   # }}}
1075   # }}}
1076
1077 # {{{ ############################# host groups #############################
1078 hostgroups:
1079   computers:
1080     alias: computers
1081     private: 1
1082   layer2-infrastructure:
1083     alias: Layer 2 Devices
1084     extinfo-icon_image: base/switch40.png
1085     extinfo-icon_image_alt: switch
1086   layer3-infrastructure:
1087     alias: Layer 3 Devices
1088     extinfo-icon_image: base/switch40.png
1089     extinfo-icon_image_alt: router
1090   notacomputer:
1091     alias: Systems that are not really systems.  Yeah :)
1092     private: 1
1093   freebsd:
1094     alias: freebsd
1095     private: 1
1096   armhf:
1097     alias: armhf
1098     private: 1
1099   sparc:
1100     alias: sparc
1101     private: 1
1102
1103   porterbox:
1104     alias: developer accessible porter machines
1105     extinfo-icon_image: base/debian.png
1106     extinfo-icon_image_alt: Debian GNU/Linux
1107     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1108   service:
1109     alias: machines running services
1110     extinfo-icon_image: base/debian.png
1111     extinfo-icon_image_alt: Debian GNU/Linux
1112     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1113   buildd:
1114     alias: buildd systems
1115     extinfo-icon_image: base/debian.png
1116     extinfo-icon_image_alt: Debian GNU/Linux
1117     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1118   general:
1119     alias: general purpose developer accessible machines
1120     extinfo-icon_image: base/debian.png
1121     extinfo-icon_image_alt: Debian GNU/Linux
1122     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1123
1124   dl380:
1125     alias: HP DL380 hosts
1126     private: 1
1127   dl385:
1128     alias: HP DL385 hosts
1129     private: 1
1130   dl360:
1131     alias: HP DL360 hosts
1132     private: 1
1133   bl460:
1134     alias: HP BL460 blades
1135     private: 1
1136   bm-bl:
1137     alias: HP blades at bytemark
1138     private: 1
1139   dl585:
1140     alias: HP DL385 hosts
1141     private: 1
1142   dl180:
1143     alias: HP DL180
1144     private: 1
1145   dl120:
1146     alias: HP DL120
1147     private: 1
1148   sw-raid:
1149     alias: Hosts with Linux software raid
1150     private: 1
1151   aacraid:
1152     alias: Hosts with Adaptec AACraid
1153     private: 1
1154   megaraid:
1155     alias: Hosts with LSI Logic MegaRAID
1156     private: 1
1157
1158   squeeze:
1159     alias: Hosts running squeeze
1160   wheezy:
1161     alias: Hosts running wheezy
1162
1163   kvmdomains:
1164     alias: Hosts that are KVM domains
1165     private: 1
1166
1167   drbd-hosts:
1168     alias: hosts running drbd
1169   postfix-hosts:
1170     alias: hosts running postfix instead of exim
1171     private: 1
1172   heavy-exim:
1173     alias: "hosts running the full mail stuff, including clamav and postgrey"
1174     private: 1
1175   mail-relay:
1176     alias: "relays usually are hosts with more exim processes"
1177     private: 1
1178   spamd:
1179     alias: "hosts running spamassassin as daemon"
1180     private: 1
1181   heavy-postfix:
1182     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1183     private: 1
1184   apache2-hosts:
1185     alias: hosts running apache2
1186     private: 1
1187   jetty-hosts:
1188     alias: hosts running jetty
1189     private: 1
1190   bind9-hosts:
1191     alias: hosts running bind9
1192     private: 1
1193   # once every host runs unbound, do away with this group and check "computers" instead
1194   amavis-hosts:
1195     alias: hosts running amavis
1196     private: 1
1197   rsyncd-hosts:
1198     alias: hosts providing rsync services via xinetd
1199     private: 1
1200   xinetd-hosts:
1201     alias: hosts providing services via xinetd
1202     private: 1
1203   postgres91-hosts:
1204     alias: hosts running postgres91
1205     private: 1
1206   no-ulogd:
1207     alias: hosts not running ulogd
1208     private: 1
1209   acpid-hosts:
1210     alias: hosts running acpid
1211     private: 1
1212   uploadqueue:
1213     alias: hosts that are an anonymous ftp uploadqueue
1214     private: 1
1215   bosserver:
1216     alias: hosts running bosserver
1217     private: 1
1218   apache-https:
1219     alias: hosts with https services
1220     private: 1
1221   broken_https_default_vhost:
1222     alias: https default vhost does not say 200 OK
1223     private: 1
1224
1225   no-bacula:
1226     alias: hosts which are not being backed up with bacula
1227     private: 1
1228
1229   nfs-client:
1230     alias: hosts mounting filesystems using NFS
1231     private: 1
1232   nfs-server:
1233     alias: hosts serving filesystems using NFS
1234     private: 1
1235   autofs:
1236     alias: hosts running the automounter
1237     private: 1
1238
1239   highload:
1240     alias: "hosts on which high load is normal"
1241     private: 1
1242
1243   secondary-IPs:
1244     alias: secondary IP addresses
1245     private: 1
1246
1247   hasbootfs:
1248     alias: hosts with a /boot filesystem
1249     private: 1
1250   hassrvfs:
1251     alias: hosts with a /srv filesystem
1252     private: 1
1253   hasorgfs:
1254     alias: hosts with a /org filesystem
1255     private: 1
1256   hasvarfs:
1257     alias: hosts with a /var filesystem
1258     private: 1
1259   hasvarlogfs:
1260     alias: hosts with a /var/log filesystem
1261     private: 1
1262   hasusrfs:
1263     alias: hosts with a /usr filesystem
1264     private: 1
1265
1266   incomingmailrelayed:
1267     alias: incoming mail needs to go through a mail relay
1268     # i.e. no port 25
1269     private: 1
1270   incomingmailrelayed2025:
1271     alias: incoming mail needs to go through a mail relay
1272     # i.e. no port 25
1273     private: 1
1274
1275   brokensamhain:
1276     alias: machines that can not run samhain
1277     private: 1
1278   high-RTT:
1279     alias: machines with high round trip times
1280     private: 1
1281   ping-suckers:
1282     alias: machines that just suck at icmp
1283     private: 1
1284   alioth:
1285     alias: machines that just are just awkward
1286     private: 1
1287   openstack-compute:
1288     alias: nodes that run OpenStack compute
1289     private: 1
1290   openstack-controller:
1291     alias: nodes that run OpenStack controller
1292     private: 1
1293
1294   security_mirror:
1295     alias: hosts that are security mirrors
1296     private: 1
1297
1298   broken_mq:
1299     alias: hosts whose MQ is broken
1300     private: 1
1301 # }}}
1302 # {{{ ############################# servicegroups #############################
1303 servicegroups:
1304   diskspace:
1305     alias: diskusage checks
1306   buildd:
1307     alias: buildd checks
1308   raid:
1309     alias: raid checks
1310   backup:
1311     alias: backup checks
1312   kernel:
1313     alias: kernel checks
1314   apt:
1315     alias: apt upgrade status
1316   samhain:
1317     alias: samhain integrity status
1318   time:
1319     alias: time stuff
1320   security:
1321     alias: security
1322     servicegroup_members: apt, kernel, samhain
1323   MQ:
1324     alias: rabbitMQ stuff
1325 # }}}
1326 # {{{ ############################# services #############################
1327 services:
1328   # {{{ ### basic networking
1329   -
1330     name: PING
1331     check: "check_ping!350.0,20%!600.0,40%"
1332     hostgroups: pingable
1333     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1334     normal_check_interval: 5
1335     max_check_attempts: 4
1336     retry_check_interval: 1
1337   -
1338     name: PING
1339     check: "check_ping!600.0,20%!900.0,40%"
1340     hostgroups: high-RTT
1341     normal_check_interval: 5
1342     max_check_attempts: 4
1343     retry_check_interval: 1
1344   -
1345     name: PING
1346     check: "check_ping!600.0,90%!900.0,95%"
1347     hostgroups: ping-suckers
1348     normal_check_interval: 5
1349     max_check_attempts: 4
1350     retry_check_interval: 1
1351   -
1352     name: PING
1353     check: "check_ping!2000.0,60%!3000.0,80%"
1354     hostgroups: layer3-infrastructure
1355     normal_check_interval: 5
1356     max_check_attempts: 4
1357     retry_check_interval: 1
1358   # }}}
1359   # {{{ ### disk usage
1360   -
1361     name: disk usage - all
1362     servicegroups: diskspace
1363     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1364     hostgroups: computers
1365     excludehosts: sibelius
1366   -
1367     name: disk usage - all
1368     servicegroups: diskspace
1369     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x /srv/farm-snapshot/farm-misc 95 98"
1370     hosts: sibelius
1371
1372   -
1373     name: disk usage on /
1374     servicegroups: diskspace
1375     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1376     hostgroups: computers
1377   -
1378     name: disk usage on /boot
1379     servicegroups: diskspace
1380     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1381     hostgroups: hasbootfs
1382   -
1383     name: disk usage on /var
1384     servicegroups: diskspace
1385     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1386     hostgroups: hasvarfs
1387   -
1388     name: disk usage on /org
1389     servicegroups: diskspace
1390     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1391     hostgroups: hasorgfs
1392   -
1393     name: disk usage on /srv
1394     servicegroups: diskspace
1395     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1396     hostgroups: hassrvfs
1397   -
1398     name: disk usage on /tmp
1399     servicegroups: diskspace
1400     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1401     hosts: saens
1402   -
1403     name: disk usage on /usr
1404     servicegroups: diskspace
1405     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1406     hostgroups: hasusrfs
1407   -
1408     name: disk usage on /var/lib/postgresql
1409     servicegroups: diskspace
1410     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1411     hosts: sibelius, busoni, buxtehude, lw07
1412   -
1413     name: disk usage on /var/log
1414     servicegroups: diskspace
1415     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1416     hostgroups: hasvarlogfs
1417   -
1418     name: disk usage on /var/spool/postfix
1419     servicegroups: diskspace
1420     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1421     hosts: bendel
1422   -
1423     name: disk usage on /srv/mirrors
1424     servicegroups: diskspace
1425     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1426     hosts: sibelius
1427   -
1428     name: disk usage on /srv/snapshot.debian.org
1429     servicegroups: diskspace
1430     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1431     hosts: sibelius
1432   -
1433     name: disk usage on /srv/farm-snapshot/farm-1
1434     servicegroups: diskspace
1435     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-1"
1436     hosts: sibelius
1437   -
1438     name: disk usage on /srv/farm-snapshot/farm-2
1439     servicegroups: diskspace
1440     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2"
1441     hosts: sibelius
1442   -
1443     name: disk usage on /srv/farm-snapshot/farm-3
1444     servicegroups: diskspace
1445     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-3"
1446     hosts: sibelius
1447   -
1448     name: disk usage on /srv/farm-snapshot/farm-4
1449     servicegroups: diskspace
1450     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-4"
1451     hosts: sibelius
1452   -
1453     name: disk usage on /var/lib/postgresql/9.1
1454     servicegroups: diskspace
1455     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1456     hosts: franck
1457   -
1458     name: disk usage on /srv/ftp-master.debian.org
1459     servicegroups: diskspace
1460     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1461     hosts: franck
1462   -
1463     name: disk usage on /storage/snapshot-farm-1
1464     servicegroups: diskspace
1465     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1466     hosts: lw01
1467   -
1468     name: disk usage on /storage/snapshot-farm-2
1469     servicegroups: diskspace
1470     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1471     hosts: lw02
1472   -
1473     name: disk usage on /storage/snapshot-farm-3
1474     servicegroups: diskspace
1475     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1476     hosts: lw03
1477   -
1478     name: disk usage on /storage/snapshot-farm-4
1479     servicegroups: diskspace
1480     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1481     hosts: lw04
1482   -
1483     name: disk usage on /srv/morgue.debian.org/
1484     servicegroups: diskspace
1485     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1486     hosts: lw03
1487   # }}}
1488   # {{{ ### system
1489   # {{{ setup
1490   -
1491     name: setup - dsa config
1492     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1493     hostgroups: computers
1494     normal_check_interval: 60
1495     excludehostgroups: alioth
1496   -
1497     name: setup - local hostname etc-hosts
1498     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1499     hostgroups: computers
1500     normal_check_interval: 60
1501   # }}}
1502   # {{{ os health
1503   ####
1504   -
1505     name: users
1506     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1507     hostgroups: computers
1508   -
1509     name: load
1510     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1511     hostgroups: computers
1512     excludehostgroups: highload
1513   -
1514     name: load
1515     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1516     hostgroups: highload
1517   -
1518     name: uptime check
1519     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1520     hostgroups: computers
1521   -
1522     name: processes - total
1523     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1524     hostgroups: computers
1525   -
1526     name: swap usage - percent
1527     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1528     hostgroups: computers
1529   -
1530     name: swap usage - mb
1531     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1532     hostgroups: computers
1533   -
1534     name: process - getty
1535     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1536     hostgroups: computers
1537     excludehosts: zelenka, zandonai
1538   -
1539     name: processes - zombies
1540     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1541     hostgroups: computers
1542   -
1543     name: system - available entropy
1544     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1545     event_handler: dsa_event_handler_restart_ekey
1546     hostgroups: computers
1547     excludehostgroups: freebsd
1548   -
1549     name: system - filesystem check
1550     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1551     normal_check_interval:  60
1552     retry_check_interval: 15
1553     hostgroups: computers
1554   # }}}
1555   # {{{ backup
1556   -
1557     name: backup
1558     servicegroups: backup
1559     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1560     hostgroups: computers
1561     excludehosts: backuphost, storace
1562     normal_check_interval: 60
1563     max_check_attempts: 2
1564     retry_check_interval: 5
1565   -
1566     name: backup server config
1567     servicegroups: backup
1568     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1569     hosts: backuphost, storace
1570     normal_check_interval: 60
1571     max_check_attempts: 2
1572     retry_check_interval: 5
1573   -
1574     name: backup - bacula - last backup
1575     servicegroups: backup
1576     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1577     runfrom: dinis
1578     hostgroups: computers
1579     excludehostgroups: buildd, porterbox, no-bacula
1580     normal_check_interval:  60
1581     retry_check_interval: 15
1582   -
1583     name: backup - bacula - last full backup
1584     servicegroups: backup
1585     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1586     runfrom: dinis
1587     hostgroups: computers
1588     excludehostgroups: buildd, porterbox, no-bacula
1589     normal_check_interval:  60
1590     retry_check_interval: 15
1591   -
1592     name: process - bacula-fd
1593     servicegroups: backup
1594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1595     hostgroups: computers
1596     excludehostgroups: freebsd, alioth
1597   -
1598     name: process - bacula-fd
1599     servicegroups: backup
1600     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1601     hostgroups: freebsd
1602
1603   ####
1604   -
1605     name: process - acc.umu.se backup
1606     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1607     hosts: sibelius
1608   # }}}
1609   # {{{ security
1610   -
1611     name: running kernel
1612     servicegroups: kernel
1613     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1614     hostgroups: computers
1615     normal_check_interval: 60
1616     retry_check_interval: 5
1617   -
1618     name: apt - security updates
1619     servicegroups: apt
1620     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1621     hostgroups: computers
1622     normal_check_interval:  60
1623     retry_check_interval: 15
1624   -
1625     name: installed firewall
1626     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1627     hostgroups: computers
1628     excludehostgroups: freebsd
1629   -
1630     name: puppetized firewall
1631     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1632     hostgroups: computers
1633     excludehostgroups: freebsd
1634   -
1635     name: process - ulogd
1636     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1637     hostgroups: computers
1638     excludehostgroups: freebsd, sparc
1639   -
1640     name: unexpected process - ulogd
1641     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1642     hostgroups: freebsd, sparc
1643   ####
1644   -
1645     name: process - samhain
1646     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1647     hostgroups: computers
1648     excludehostgroups: brokensamhain
1649   -
1650     name: samhain
1651     servicegroups: samhain
1652     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1653     hostgroups: computers
1654     depends: process - samhain
1655     normal_check_interval: 60
1656     retry_check_interval: 5
1657     excludehostgroups: brokensamhain
1658   -
1659     name: processes - samhain zombies
1660     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1661     event_handler: dsa_event_handler_restart_samhain
1662     hostgroups: computers
1663     excludehostgroups: brokensamhain
1664   # }}}
1665   # {{{ logging
1666   -
1667     name: process - syslog-ng
1668     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1669     hostgroups: computers
1670     excludehostgroups: freebsd
1671
1672   -
1673     name: process - syslog-ng
1674     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1675     hostgroups: freebsd
1676
1677   -
1678     name: remote logging on lotti
1679     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1680     runfrom: lotti
1681     hostgroups: computers
1682     excludehostgroups: alioth
1683   -
1684     name: remote logging on lully
1685     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1686     runfrom: lully
1687     hostgroups: computers
1688     excludehostgroups: alioth
1689   -
1690     name: remote logging on loghost-grnet-01
1691     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1692     runfrom: loghost-grnet-01
1693     hostgroups: computers
1694     excludehostgroups: alioth
1695   # }}}
1696   # {{{ base service
1697   -
1698     name: process - sshd
1699     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1700     hostgroups: computers
1701   -
1702     name: "network service - sshd"
1703     check: dsa_check_ssh
1704     hostgroups: computers
1705     depends: process - sshd
1706     normal_check_interval:  60
1707     notification_interval: 1440
1708   ####
1709   -
1710     name: network service - nrpe
1711     check: check_tcp!5666
1712     hostgroups: computers
1713     max_check_attempts: -2
1714     notification_interval: 1440
1715   -
1716     name: process - nrpe
1717     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1718     hostgroups: computers
1719     max_check_attempts: -1
1720     depends: network service - nrpe
1721   ###
1722   -
1723     name: process - munin-node
1724     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1725     hostgroups: computers
1726     excludehostgroups: freebsd, armhf
1727   -
1728     name: process - munin-node
1729     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1730     hostgroups: freebsd
1731   -
1732     name: process - munin-node
1733     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1734     hostgroups: wheezy
1735     excludehostgroups: freebsd
1736   -
1737     name: network service - munin-node
1738     check: check_tcp!4949
1739     hostgroups: computers
1740     depends: process - munin-node
1741   ###
1742   -
1743     name: process - ntpd
1744     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1745     hostgroups: computers
1746     servicegroups: time
1747   -
1748     name: network service - ntp
1749     check: dsa_check_ntp
1750     hostgroups: computers
1751     depends: process - ntpd
1752     servicegroups: time
1753   ###
1754   -
1755     name: process - atd
1756     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1757     hostgroups: computers
1758   ###
1759   -
1760     name: process - cron
1761     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1762     hostgroups: computers
1763   ###
1764   -
1765     name: process - ud-replicated
1766     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1767     hostgroups: computers
1768     excludehostgroups: squeeze, freebsd, alioth
1769   -
1770     name: process - ud-replicated
1771     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1772     hostgroups: freebsd
1773   ###
1774   -
1775     name: process - monit
1776     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1777     hostgroups: squeeze
1778   -
1779     name: process - monit
1780     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1781     hostgroups: computers
1782     excludehostgroups: squeeze, alioth
1783   ###
1784   -
1785     name: MQ connection on rainier
1786     servicegroups: MQ
1787     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1788     runfrom: rainier
1789     hostgroups: computers
1790     normal_check_interval:  60
1791     retry_check_interval: 15
1792     excludehostgroups: alioth, broken_mq
1793   -
1794     name: MQ connection on rapoport
1795     servicegroups: MQ
1796     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1797     runfrom: rapoport
1798     hostgroups: computers
1799     normal_check_interval:  60
1800     retry_check_interval: 15
1801     excludehostgroups: alioth, broken_mq
1802   ###
1803   -
1804     name: local resolver
1805     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1806     hostgroups: computers
1807     normal_check_interval: 60
1808   -
1809     name: process - unbound
1810     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1811     hostgroups: computers
1812     excludehostgroups: alioth
1813   ###
1814   -
1815     name: process - uptimed
1816     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1817     hostgroups: computers
1818   ###
1819   -
1820     name: process - udevd
1821     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1822     hostgroups: computers
1823     excludehostgroups: freebsd
1824   -
1825     name: unexpected process - udev
1826     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1827     hostgroups: freebsd
1828   ###
1829   -
1830     name: process - acpid
1831     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1832     hostgroups: acpid-hosts
1833   -
1834     name: unexpected process - acpid
1835     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1836     hostgroups: computers
1837     excludehostgroups: acpid-hosts, kvmdomains
1838   ###
1839   -
1840     name: process - xinetd
1841     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1842     hostgroups: xinetd-hosts
1843   -
1844     name: unwanted process - xinetd
1845     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1846     hostgroups: computers
1847     excludehostgroups: xinetd-hosts
1848   ###
1849   -
1850     name: process - stunnel4 - puppet-ekeyd
1851     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1852     hostgroups: squeeze, wheezy
1853     excludehostgroups: freebsd, alioth
1854   # }}}
1855   # {{{ anti-services
1856   -
1857     name: ganeti - job watcher paused
1858     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1859     hostgroups: computers
1860   -
1861     name: unwanted process - irqbalance
1862     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1863     hostgroups: computers
1864   -
1865     name: unwanted process - openvpn
1866     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1867     hostgroups: computers
1868     normal_check_interval: 120
1869   -
1870     name: unwanted process - gkrellmd
1871     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1872     hostgroups: computers
1873   -
1874     name: unwanted process - rpc.statd
1875     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1876     hostgroups: computers
1877     excludehostgroups: nfs-client, nfs-server
1878   -
1879     name: unwanted process - inetd
1880     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1881     hostgroups: computers
1882     excludehosts: abel
1883   -
1884     name: unwanted process - snmpd
1885     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1886     hostgroups: computers
1887   # }}}
1888   # {{{ ssl certs
1889   -
1890     name: "host SSL cert"
1891     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1892     hostgroups: computers
1893   # }}}
1894   # {{{ HW health/raid
1895   -
1896     name: process - mdadm monitor
1897     servicegroups: raid
1898     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1899     hostgroups: sw-raid
1900   -
1901     name: RAID - sw raid
1902     servicegroups: raid
1903     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1904     hostgroups: sw-raid
1905   ###
1906   -
1907     name: HW - hpacucli status
1908     servicegroups: raid
1909     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1910     normal_check_interval: 120
1911     hostgroups: dl385, dl380, dl360, bl460, dl180
1912     excludehosts: schein, rietz
1913   -
1914     name: HW - hpacucli status
1915     servicegroups: raid
1916     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1917     normal_check_interval: 120
1918     hostgroups: bm-bl
1919   -
1920     name: HW - hpacucli status
1921     servicegroups: raid
1922     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1923     normal_check_interval: 120
1924     hosts: schein, rietz
1925   -
1926     name: HW - hpacucli enclosure status
1927     servicegroups: raid
1928     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1929     normal_check_interval: 120
1930     hosts: franck
1931   -
1932     name: HW - hpacucli status
1933     servicegroups: raid
1934     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1935     normal_check_interval: 120
1936     hostgroups: dl585
1937   ###
1938 #  -
1939 #    name: HW - edac status
1940 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1941 #    normal_check_interval: 120
1942     #hostgroups: computers
1943     #excludehosts: villa, lobos, senfl, schein
1944   -
1945     name: HW - hpasmcli status
1946     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1947     normal_check_interval: 120
1948     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1949     excludehosts: villa, lobos, senfl, schein, storace
1950   -
1951     name: HW - hpasmcli status
1952     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1953     normal_check_interval: 120
1954     hosts: villa
1955   -
1956     name: HW - hpasmcli status
1957     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1958     normal_check_interval: 120
1959     hosts: lobos
1960   -
1961     name: HW - hpasmcli status
1962     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1963     normal_check_interval: 120
1964     hosts: senfl, schein
1965   -
1966     name: HW - hpasmcli status
1967     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1968     normal_check_interval: 120
1969     hosts: storace
1970   ###
1971   -
1972     name: RAID - 3ware
1973     servicegroups: raid
1974     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1975     hosts: powell
1976   ###
1977   -
1978     name: RAID - aacraid
1979     servicegroups: raid
1980     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1981     hostgroups: aacraid
1982   ###
1983   -
1984     name: RAID - megaraid
1985     servicegroups: raid
1986     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1987     hostgroups: megaraid
1988   ###
1989   -
1990     name: RAID - DRBD
1991     servicegroups: raid
1992     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1993     hostgroups: drbd-hosts
1994   # }}}
1995   # }}}
1996   # {{{ ### mail stuff
1997   # {{{ exim processes and mailq
1998   -
1999     name: process - exim
2000     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2001     hostgroups: computers
2002     excludehostgroups: postfix-hosts, mail-relay
2003     excludehosts: master, busoni, quantz, buxtehude
2004   -
2005     name: process - exim
2006     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2007     hostgroups: mail-relay
2008   -
2009     name: process - exim - total
2010     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2011     hostgroups: computers
2012     excludehostgroups: postfix-hosts
2013     excludehosts: master, busoni, quantz, buxtehude
2014   -
2015     name: process - exim
2016     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2017     hosts: master, busoni, quantz, buxtehude
2018   -
2019     name: mail queue
2020     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2021     hostgroups: heavy-exim
2022   # }}}
2023   # {{{ clamav
2024   -
2025     name: process - clamav - clamd
2026     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2027     hostgroups: heavy-exim, heavy-postfix
2028   -
2029     name: service - clamav
2030     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2031     hostgroups: heavy-exim, heavy-postfix
2032     depends: process - clamav - clamd
2033   -
2034     name: process - clamav - freshclam
2035     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2036     hostgroups: heavy-exim, heavy-postfix
2037   -
2038     name: unwanted process - clamav
2039     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2040     hostgroups: computers
2041     excludehostgroups: heavy-exim, heavy-postfix
2042   -
2043     name: unwanted process - freshclam
2044     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2045     hostgroups: computers
2046     excludehostgroups: heavy-exim, heavy-postfix
2047   # }}}
2048   # {{{ anti-spam
2049   -
2050     name: process - spamd - master
2051     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2052     hostgroups: spamd
2053     excludehosts: picconi
2054   -
2055     name: process - spamd - master
2056     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2057     hosts: picconi
2058   -
2059     name: process - spamd - master
2060     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2061     hosts: bendel
2062   -
2063     name: process - spamd - child
2064     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2065     hosts: bendel
2066     hostgroups: spamd
2067     depends: process - spamd - master
2068   #
2069   -
2070     name: process - spamd - master
2071     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2072     hosts: buxtehude
2073   -
2074     name: process - spamd - child
2075     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2076     hosts: buxtehude
2077   #
2078   -
2079     name: unwanted process - spamd
2080     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2081     hostgroups: computers
2082     excludehostgroups: spamd
2083     excludehosts: bendel, busoni, buxtehude
2084
2085   -
2086     name: unwanted process - greylistd
2087     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2088     hostgroups: computers
2089
2090   ###
2091   -
2092     name: process - postgrey
2093     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2094     hostgroups: heavy-exim
2095   -
2096     name: process - postgrey
2097     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2098     hostgroups: heavy-postfix
2099   #
2100   -
2101     name: unwanted process - postgrey
2102     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2103     hostgroups: computers
2104     excludehostgroups: heavy-postfix, heavy-exim
2105   ###
2106   -
2107     name: process - amavis - master
2108     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2109     hostgroups: amavis-hosts
2110   -
2111     name: process - amavis - all
2112     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2113     hostgroups: amavis-hosts
2114     depends: process - amavis - master
2115   #
2116   -
2117     name: unwanted process - amavis
2118     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2119     hostgroups: computers
2120     excludehostgroups: amavis-hosts
2121   ###
2122   -
2123     name: process - weightd - master
2124     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2125     hostgroups: heavy-postfix, alioth
2126   -
2127     name: process - weightd - cache
2128     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2129     hostgroups: heavy-postfix, alioth
2130     depends: process - weightd - master
2131   -
2132     name: process - weightd - child
2133     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2134     hostgroups: heavy-postfix, alioth
2135     depends: process - weightd - master
2136   ###
2137   -
2138     name: unwanted process - policyd-weight
2139     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2140     hostgroups: computers
2141     excludehostgroups: heavy-postfix, alioth
2142   # }}}
2143   # {{{ postfix
2144   ###
2145   -
2146     name: process - postfix - master
2147     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2148     hostgroups: postfix-hosts
2149   -
2150     name: process - postfix - qmgr
2151     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2152     hostgroups: postfix-hosts
2153     depends: process - postfix - master
2154   -
2155     name: process - postfix - pickup
2156     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2157     hostgroups: postfix-hosts
2158     depends: process - postfix - master
2159   -
2160     name: process - postfix - anvil
2161     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2162     hostgroups: postfix-hosts
2163     depends: process - postfix - master
2164
2165   -
2166     name: process - postfix - trivial-rewrite
2167     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2168     hostgroups: postfix-hosts
2169     depends: process - postfix - master
2170   -
2171     name: process - postfix - proxymap
2172     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2173     hostgroups: postfix-hosts
2174     depends: process - postfix - master
2175   -
2176     name: process - postfix - cleanup
2177     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2178     hostgroups: postfix-hosts
2179     depends: process - postfix - master
2180   -
2181     name: process - postfix - local
2182     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2183     hostgroups: postfix-hosts
2184     depends: process - postfix - master
2185
2186   -
2187     name: network service local - smtps cert
2188     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2189     hostgroups: postfix-hosts
2190     depends: process - postfix - master
2191     normal_check_interval: 120
2192   # }}}
2193   # {{{ mail - network service
2194   -
2195     name: network service - smtp
2196     check: dsa_check_smtp
2197     hostgroups: computers
2198     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2199     depends: process - exim
2200
2201   -
2202     name: network service - smtp
2203     check: dsa_check_smtp
2204     hostgroups: postfix-hosts
2205     depends: process - postfix - master
2206   -
2207     name: network service - submission
2208     check: dsa_check_smtp_port!587
2209     hostgroups: incomingmailrelayed
2210     depends: process - exim
2211   -
2212     name: network service - smtp 2025
2213     check: dsa_check_smtp_port!2025
2214     hostgroups: incomingmailrelayed2025
2215     depends: process - exim
2216   # }}}
2217   # }}}
2218   # {{{ ### host specific services
2219   # {{{ HTTP
2220   -
2221     name: process - apache2 - master
2222     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2223     hostgroups: apache2-hosts
2224   -
2225     name: process - apache2 - worker
2226     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2227     hostgroups: apache2-hosts
2228     depends: process - apache2 - master
2229   -
2230     name: unwanted process - apache2
2231     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2232     hostgroups: computers
2233     excludehostgroups: apache2-hosts
2234
2235   -
2236     name: network service - http
2237     check: check_http
2238     hostgroups: apache2-hosts
2239     excludehosts: klecker
2240     depends: process - apache2 - master
2241   -
2242     name: network service - http
2243     check: check_http
2244     depends: klecker:process - apache2 - master
2245     hosts: klecker-ftp
2246
2247   # keyserver on kaufmann
2248   -
2249     name: network service - http keyserver
2250     check: dsa_check_http_port!11371
2251     hosts: kaufmann
2252     depends: process - apache2 - master
2253
2254   # https on various hosts
2255   -
2256     name: network service - https
2257     check: check_https
2258     hostgroups: apache-https
2259     excludehosts: handel,menotti
2260     excludehostgroups: broken_https_default_vhost
2261     depends: "process - apache2 - master"
2262     normal_check_interval: 120
2263   -
2264     name: network service - https
2265     check: dsa_check_https_want_auth
2266     hosts: handel,menotti
2267     depends: "process - apache2 - master"
2268     normal_check_interval: 120
2269   -
2270     name: network service - https
2271     check: dsa_check_https_any_status
2272     hostgroups: broken_https_default_vhost
2273     depends: "process - apache2 - master"
2274     normal_check_interval: 120
2275   -
2276     name: network service - https cert
2277     check: dsa_check_cert!443
2278     hostgroups: apache-https
2279     depends: network service - https
2280     normal_check_interval: 60
2281   -
2282     name: unwanted network service - https
2283     check: dsa_check_port_closed!443
2284     hostgroups: apache2-hosts
2285     excludehostgroups: apache-https
2286     # ravel does ssh on port 443
2287     excludehosts: ravel
2288     normal_check_interval: 60
2289   # }}}
2290   # {{{ FTP
2291   -
2292     name: network service - ftp
2293     check: check_ftp
2294     hostgroups: uploadqueue, security_mirror
2295     excludehosts: klecker
2296   -
2297     name: network service - ftp
2298     check: check_ftp
2299     hosts: klecker-ftp
2300     depends: klecker:process - xinetd
2301   # }}}
2302   # {{{ postgres
2303   -
2304     name: unwanted process - postgresql
2305     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2306     hostgroups: computers
2307     excludehostgroups: postgres91-hosts
2308   -
2309     name: unwanted process - postgresql 9.0
2310     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2311     hostgroups: computers
2312   -
2313     name: process - postgresql91 - master
2314     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2315     hostgroups: postgres91-hosts
2316   -
2317     name: postgresql backups
2318     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2319     hosts: storace
2320   # }}}
2321   # {{{ power
2322 #  -
2323 #    name: process - UPS - nut usbhid-ups - ups1
2324 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2325 #    hosts: franck
2326 #  -
2327 #    name: process - UPS - nut upsd
2328 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2329 #    hosts: franck
2330 #  -
2331 #    name: process - UPS - nut upsmon master
2332 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2333 #    hosts: franck
2334 #  -
2335 #    name: process - UPS - nut upsmon worker
2336 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2337 #    hosts: franck
2338 #    depends: process - UPS - nut upsmon master
2339 #  -
2340 #    name: UPS - on line power
2341 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2342 #    hosts: franck
2343 #    depends: process - UPS - nut upsd
2344   # }}}
2345   # {{{ buildd
2346   -
2347     name: process - buildd
2348     servicegroups: buildd
2349     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2350     hosts: fano, finzi, fils, fayrfax
2351     contact_groups: buildd
2352   -
2353     name: process - buildd
2354     servicegroups: buildd
2355     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2356     hostgroups: buildd
2357     excludehosts: fano, finzi, fils, fayrfax
2358     contact_groups: buildd
2359   -
2360     name: processes - zombie schroot
2361     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2362     hostgroups: buildd
2363     contact_groups: +buildd
2364     normal_check_interval: 5
2365     max_check_attempts: 24
2366     retry_check_interval: 5
2367   -
2368     name: processes - lvcreate
2369     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2370     hostgroups: buildd
2371     contact_groups: +buildd
2372   # }}}
2373   # {{{ NFS Stuff
2374   -
2375     name: process - statd
2376     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2377     hostgroups: nfs-client, nfs-server
2378   -
2379     name: process - nfsd
2380     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2381     hostgroups: nfs-server
2382   -
2383     name: process - lockd
2384     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2385     hostgroups: nfs-server
2386   -
2387     name: process - mountd
2388     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2389     hostgroups: nfs-server
2390   #
2391   -
2392     name: process - automount
2393     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2394     hostgroups: autofs
2395   -
2396     name: unwanted process - automount
2397     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2398     hostgroups: computers
2399     excludehostgroups: autofs
2400   # }}}
2401   # {{{ mirroring
2402   -
2403     name: mirror sync - bugs
2404     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2405     hosts: global
2406   -
2407     name: mirror sync - security
2408     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2409     hosts: global
2410   -
2411     name: mirror sync - packages
2412     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2413     hosts: global
2414     normal_check_interval: 15
2415     max_check_attempts: 5
2416     retry_check_interval: 5
2417   -
2418     name: mirror sync - snapshot
2419     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2420     hosts: global
2421     normal_check_interval: 15
2422     max_check_attempts: 5
2423     retry_check_interval: 5
2424   # }}}
2425   # {{{ DNS
2426   -
2427     name: process - named
2428     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2429     hostgroups: bind9-hosts
2430   -
2431     name: network service - dns
2432     check: check_dns
2433     hostgroups: bind9-hosts
2434     depends: process - named
2435   -
2436     name: unwanted process - named
2437     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2438     hostgroups: computers
2439     excludehostgroups: bind9-hosts
2440   ###
2441   -
2442     name: DNS SOA sync - debian.org
2443     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2444     hosts: global
2445   -
2446     name: DNS SOA sync - debian.net
2447     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2448     hosts: global
2449   -
2450     name: DNS SOA sync - debian.com
2451     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2452     hosts: global
2453   -
2454     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2455     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2456     hosts: global
2457   -
2458     name: DNS SOA sync - alioth.debian.org
2459     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2460     hosts: global
2461   -
2462     name: DNS - delegation and signature expiry
2463     hosts: global
2464     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2465     runfrom: denis
2466   -
2467     name: DNS - security delegations
2468     hosts: global
2469     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2470     runfrom: denis
2471   -
2472     name: DNS - key coverage
2473     hosts: global
2474     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2475     runfrom: denis
2476   -
2477     name: DNS - DS expiry
2478     hosts: global
2479     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2480     runfrom: denis
2481   # }}}
2482   # {{{ storage
2483   -
2484     name: ping alive check
2485     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2486     runfrom: dijkstra
2487     hosts: giustini
2488     normal_check_interval: 5
2489     max_check_attempts: 4
2490     retry_check_interval: 1
2491   -
2492     name: Overall Unit Status
2493     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2494     runfrom: dijkstra
2495     hosts: giustini
2496   -
2497     name: event log
2498     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2499     runfrom: dijkstra
2500     hosts: giustini
2501   # }}}
2502   # {{{ porterbox
2503   -
2504     name: current chroots
2505     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2506     hostgroups: porterbox
2507     normal_check_interval:  60
2508     retry_check_interval: 15
2509   # }}}
2510   # {{{ openstack
2511   -
2512     name: process - openstack - memcached
2513     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2514     hostgroups: openstack-controller
2515   -
2516     name: process - openstack - glance-registry
2517     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2518     hostgroups: openstack-controller
2519   -
2520     name: process - openstack - nova-api
2521     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2522     hostgroups: openstack-controller
2523   -
2524     name: process - openstack - nova-compute
2525     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2526     hostgroups: openstack-compute
2527   -
2528     name: process - openstack - nova-cert
2529     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2530     hostgroups: openstack-controller
2531   -
2532     name: process - openstack - nova-conductor
2533     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2534     hostgroups: openstack-controller
2535   -
2536     name: process - openstack - nova-consoleauth
2537     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2538     hostgroups: openstack-controller
2539   -
2540     name: process - openstack - nova-scheduler
2541     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2542     hostgroups: openstack-controller
2543   -
2544     name: process - openstack - nova-spicehtml5proxy
2545     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2546     hostgroups: openstack-controller
2547   -
2548     name: process - openstack - neutron-server
2549     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2550     hostgroups: openstack-controller
2551   # }}}
2552   # {{{ misc
2553   -
2554     name: process - rngd
2555     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2556     hostgroups: dl385
2557   ###
2558   -
2559     name: process - slapd
2560     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2561     hosts: draghi
2562   -
2563     name: network service - ldaps cert
2564     check: dsa_check_cert!636
2565     depends: process - slapd
2566     normal_check_interval: 60
2567     hosts: draghi
2568   ###
2569   -
2570     name: network service - finger
2571     check: check_tcp!79
2572     hosts: draghi
2573     depends: process - xinetd
2574   ###
2575   -
2576     name: network service - rsync
2577     check: check_tcp!873
2578     hostgroups: rsyncd-hosts
2579     depends: process - xinetd
2580     excludehosts: rietz
2581   -
2582     name: network service - rsync
2583     check: check_tcp!873
2584     hosts: rietz2
2585     depends: rietz:process - xinetd
2586   -
2587     name: network service - rsync
2588     check: check_tcp!873
2589     hosts: milanollo2
2590     depends: milanollo:process - xinetd
2591   ###
2592   -
2593     name: process - icinga
2594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2595     hosts: tchaikovsky
2596   ###
2597   -
2598     name: process - jetty - master
2599     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2600     hostgroups: jetty-hosts
2601   -
2602     name: process - jetty - worker
2603     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2604     hostgroups: jetty-hosts
2605     depends: process - jetty - master
2606   ###
2607   -
2608     name: process - debianqueued
2609     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2610     hostgroups: uploadqueue
2611   ####
2612   -
2613     name: network service - gobby
2614     check: check_tcp!6523
2615     hosts: gombert
2616     contact_groups: gobby
2617   ####
2618   -
2619     name: puppetmaster cert
2620     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2621     hosts: handel
2622     normal_check_interval: 60
2623     max_check_attempts: 2
2624     retry_check_interval: 5
2625   # }}}
2626 # }}}
2627
2628 # vim: set ts=2 sw=2 et ai si fdm=marker: