1 # Non comment lines are YAML
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
8 # - *: check munin stats collection works
9 # - *: check backups are successful
10 # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
13 #############################
15 #############################
19 hostgroups: notacomputer
21 check_command: dsa_check_always_ok
24 hostgroups: notacomputer
26 check_command: dsa_check_always_ok
28 address: 130.239.18.97
30 hostgroups: layer3-infrastructure
32 address: 130.242.6.198
34 hostgroups: layer3-infrastructure
38 hostgroups: layer3-infrastructure
40 address: 89.16.160.116
42 hostgroups: layer3-infrastructure
44 address: 200.17.202.254
46 hostgroups: layer3-infrastructure
48 address: 150.203.164.1
50 hostgroups: layer3-infrastructure
52 address: 213.104.121.213
54 hostgroups: layer3-infrastructure
58 hostgroups: layer3-infrastructure
60 address: 217.196.149.238
62 hostgroups: layer3-infrastructure
66 hostgroups: layer3-infrastructure
68 address: 93.94.130.190
70 hostgroups: layer3-infrastructure
72 address: 62.104.23.249
74 hostgroups: layer3-infrastructure
78 hostgroups: layer3-infrastructure
80 address: 194.177.211.193
82 hostgroups: layer3-infrastructure
84 # really henet, because of something weird
87 hostgroups: layer3-infrastructure
89 address: 129.143.59.214
91 hostgroups: layer3-infrastructure
93 address: 185.17.185.190
95 hostgroups: layer3-infrastructure
97 address: 82.195.78.118
99 hostgroups: layer3-infrastructure
101 address: 148.100.88.1
103 hostgroups: layer3-infrastructure
105 address: 140.211.166.1
107 hostgroups: layer3-infrastructure
109 address: 133.242.99.65
111 hostgroups: layer3-infrastructure
113 address: 193.62.202.20
115 hostgroups: layer3-infrastructure
116 contacts: tjrc1, dave
118 address: 212.211.132.249
120 hostgroups: layer3-infrastructure
122 address: 212.211.132.1
124 hostgroups: layer3-infrastructure
126 address: 86.59.118.145
128 hostgroups: layer3-infrastructure
130 address: 154.57.0.249
132 hostgroups: layer3-infrastructure
134 address: 154.57.0.250
136 hostgroups: layer3-infrastructure
138 address: 206.12.19.254
139 hostgroups: layer3-infrastructure
142 address: 128.101.240.222
144 hostgroups: layer3-infrastructure
146 address: 177.220.10.129
148 hostgroups: layer3-infrastructure
150 address: 130.89.149.1
152 hostgroups: layer3-infrastructure
154 # really janet, because ynic is stupid about firewalling
155 address: 146.97.71.46
157 hostgroups: layer3-infrastructure
160 hostgroups: notacomputer
162 check_command: dsa_check_always_ok
164 address: 209.87.16.254
166 hostgroups: layer3-infrastructure
171 address: 212.227.126.54
172 parents: gw-1und1-sec
173 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hassrvfs, pe1950
175 address: 195.20.242.89
176 parents: gw-1und1-sec
177 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950
181 address: 130.239.18.123
183 hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, stretch, autofs, sw-raid
184 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
187 address: 130.242.6.199
189 hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts
193 address: 141.170.6.156
195 hostgroups: computers, porterbox, stretch, hassrvfs
197 address: 141.170.6.149
199 hostgroups: computers, buildd, stretch, nfs-client
201 address: 141.170.6.150
203 hostgroups: computers, buildd, stretch, nfs-client
205 address: 141.170.6.154
207 hostgroups: computers, buildd, stretch, nfs-client
209 address: 141.170.6.155
211 hostgroups: computers, buildd, stretch, nfs-client
213 address: 141.170.6.157
215 hostgroups: computers, buildd, stretch, hassrvfs
217 address: 141.170.6.151
219 hostgroups: computers, porterbox, stretch, nfs-client
221 address: 141.170.6.152
223 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
225 address: 141.170.6.153
227 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
229 address: 141.170.6.158
231 hostgroups: computers, buildd, stretch, hassrvfs
235 address: 217.140.96.56
237 hostgroups: computers, hasbootfs, hassrvfs, porterbox, stretch, broken_mq
239 address: 217.140.96.57
241 hostgroups: computers, hasbootfs, hassrvfs, buildd, stretch, broken_mq
243 address: 217.140.96.58
245 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
247 address: 217.140.96.60
249 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
251 address: 217.140.96.61
253 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
255 address: 217.140.96.66
257 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, porterbox, broken_mq
259 address: 217.140.96.67
261 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, buildd, broken_mq
263 address: 217.140.96.71
265 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd, broken_mq
269 address: 138.16.160.17
271 hostgroups: computers, service, apache2-hosts, apache-https, dl380, rsyncd-hosts, stretch, hassrvfs, postgres96-hosts, manyprocesses
275 address: 5.153.231.241
277 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
279 address: 5.153.231.242
281 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
283 address: 5.153.231.243
285 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
287 address: 5.153.231.244
289 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
291 address: 5.153.231.245
293 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
295 address: 5.153.231.246
297 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
299 address: 5.153.231.247
301 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
303 address: 5.153.231.248
305 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
307 address: 5.153.231.249
309 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
311 address: 5.153.231.250
313 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
315 address: 5.153.231.251
317 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
319 address: 5.153.231.252
321 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
323 address: 5.153.231.253
325 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
327 address: 5.153.231.254
329 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
334 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, nfs-server, systemd-timesyncd
338 hostgroups: secondary-IPs, rsyncd-hosts
342 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
346 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd
350 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
354 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
359 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
364 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
366 address: 5.153.231.10
368 hostgroups: computers, hassrvfs, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
372 hostgroups: notacomputer
374 address: 5.153.231.11
375 parents: ganeti-bytemark
376 hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
378 address: 5.153.231.12
379 parents: ganeti-bytemark
380 hostgroups: computers, hassrvfs, kvmdomains, stretch, systemd-timesyncd
382 address: 5.153.231.13
383 parents: ganeti-bytemark
384 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd, broken_https_default_vhost
386 address: 5.153.231.16
387 parents: ganeti-bytemark
388 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
390 address: 5.153.231.15
391 parents: ganeti-bytemark
392 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
394 address: 5.153.231.17
395 parents: ganeti-bytemark
396 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
398 address: 5.153.231.18
399 parents: ganeti-bytemark
400 hostgroups: computers, general, kvmdomains, stretch, service, apache-https, apache2-hosts, heavy-exim, systemd-timesyncd
402 address: 5.153.231.19
403 parents: ganeti-bytemark
404 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, systemd-timesyncd
406 address: 5.153.231.20
407 parents: ganeti-bytemark
408 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
410 address: 5.153.231.21
411 parents: ganeti-bytemark
412 contact_groups: alioth-admins
413 hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
414 no-servicegroups: true
416 address: 5.153.231.22
417 parents: ganeti-bytemark
418 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
420 address: 5.153.231.23
421 parents: ganeti-bytemark
422 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
424 address: 5.153.231.25
425 parents: ganeti-bytemark
426 hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
428 address: 5.153.231.26
429 parents: ganeti-bytemark
430 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
432 address: 5.153.231.27
433 parents: ganeti-bytemark
434 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, porterbox, systemd-timesyncd
436 address: 5.153.231.28
437 parents: ganeti-bytemark
438 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
440 address: 5.153.231.29
441 parents: ganeti-bytemark
442 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
444 address: 5.153.231.30
445 parents: ganeti-bytemark
446 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
448 address: 5.153.231.32
449 parents: ganeti-bytemark
450 hostgroups: computers, kvmdomains, stretch, no-bacula, systemd-timesyncd
452 address: 5.153.231.33
453 parents: ganeti-bytemark
454 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
456 address: 5.153.231.34
457 parents: ganeti-bytemark
458 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
460 address: 5.153.231.36
461 parents: ganeti-bytemark
462 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, systemd-timesyncd
464 address: 5.153.231.38
465 parents: ganeti-bytemark
466 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
468 address: 5.153.231.39
469 parents: ganeti-bytemark
470 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
472 address: 5.153.231.40
473 parents: ganeti-bytemark
474 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
476 address: 5.153.231.42
477 parents: ganeti-bytemark
478 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd
480 address: 5.153.231.43
481 parents: ganeti-bytemark
482 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
484 address: 5.153.231.44
485 parents: ganeti-bytemark
486 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
489 address: 5.153.231.41
491 hostgroups: computers, service, stretch, hassrvfs, dl380, manyprocesses, apache2-hosts
492 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
497 address: 200.17.202.197
499 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https
504 address: 150.203.164.39
506 hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, stretch, apache-https
508 address: 150.203.164.60
510 hostgroups: secondary-IPs, rsyncd-hosts
512 address: 150.203.164.61
514 hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
516 address: 150.203.164.62
518 hostgroups: secondary-IPs
522 address: 217.196.149.227
524 hostgroups: computers, stretch, service, sw-raid
526 address: 217.196.149.228
528 hostgroups: computers, stretch, service, sw-raid
530 address: 217.196.149.235
532 hostgroups: notacomputer
534 address: 217.196.149.229
536 hostgroups: computers, stretch, service, apache2-hosts
537 mirror-conova-debian:
538 address: 217.196.149.232
539 hostgroups: secondary-IPs
540 parents: mirror-conova
541 mirror-conova-security:
542 address: 217.196.149.233
543 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
544 parents: mirror-conova
545 mirror-conova-archive:
546 address: 217.196.149.234
547 hostgroups: secondary-IPs, rsyncd-hosts
548 parents: mirror-conova
549 mirror-conova-syncproxy4-eu:
550 address: 217.196.149.237
551 hostgroups: secondary-IPs, rsyncd-hosts, https-service
552 parents: mirror-conova
555 address: 217.196.149.230
556 parents: ganeti-conova
557 hostgroups: computers, hassrvfs, buildd, stretch
559 address: 217.196.149.231
560 parents: ganeti-conova
561 hostgroups: computers, hassrvfs, buildd, stretch
563 address: 217.196.149.236
564 parents: ganeti-conova
565 hostgroups: computers, hassrvfs, porterbox, stretch
571 hostgroups: computers, service, dl360, stretch, drbd-hosts
575 hostgroups: computers, service, dl360, stretch, drbd-hosts
579 hostgroups: notacomputer
583 parents: ganeti-csail
584 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, apache2-hosts, rsyncd-hosts, apache-https, systemd-timesyncd
587 parents: ganeti-csail
588 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
591 parents: ganeti-csail
592 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
595 parents: ganeti-csail
596 hostgroups: computers, service, kvmdomains, hassrvfs, stretch, apache2-hosts, apache-https, systemd-timesyncd
599 parents: ganeti-csail
600 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd
603 parents: ganeti-csail
604 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, uploadqueue, queued, systemd-timesyncd
608 address: 93.94.130.161
610 hostgroups: computers, stretch, dl380, nfs-client, hassrvfs
614 address: 128.61.240.73
616 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror
620 address: 194.177.211.194
622 hostgroups: notacomputer
624 address: 194.177.211.195
626 hostgroups: computers, service, dl380, stretch, drbd-hosts
628 address: 194.177.211.196
630 hostgroups: computers, service, dl380, stretch, drbd-hosts
632 address: 194.177.211.200
634 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
636 address: 194.177.211.201
638 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
640 address: 194.177.211.202
642 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, xinetd-hosts, systemd-timesyncd
644 address: 194.177.211.203
645 parents: ganeti-grnet
646 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
648 address: 194.177.211.205
649 parents: ganeti-grnet
650 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, postgres96-hosts, apache2-hosts, apache-https, systemd-timesyncd
652 address: 194.177.211.206
653 parents: ganeti-grnet
654 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, systemd-timesyncd
656 address: 194.177.211.207
657 parents: ganeti-grnet
658 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, rsyncd-hosts, systemd-timesyncd
660 address: 194.177.211.208
661 parents: ganeti-grnet
662 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs
663 static-master-grnet-01:
664 address: 194.177.211.209
665 parents: ganeti-grnet
666 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, hassrvfs
672 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch
676 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
680 hostgroups: secondary-IPs
681 mirror-isc-syncproxy:
684 hostgroups: secondary-IPs, rsyncd-hosts
688 address: 185.17.185.177
690 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
692 address: 185.17.185.178
694 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
696 address: 185.17.185.179
698 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
700 address: 185.17.185.180
702 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
704 address: 185.17.185.187
706 hostgroups: computers, service, jessie, dl180, nfs-client, autofs, hassrvfs, postgres94-hosts, apache2-hosts
708 address: 185.17.185.189
710 hostgroups: computers, service, jessie, dl180, nfs-client, autofs, hassrvfs, apache2-hosts
712 address: 185.17.185.181
714 hostgroups: computers, service, stretch, dl180
716 address: 185.17.185.182
718 hostgroups: computers, service, stretch, dl180
722 address: 129.143.160.6
723 parents: gw-karlsruhe
724 hostgroups: computers, buildd, stretch
729 address: 82.195.75.109
731 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
733 address: 82.195.75.103
735 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
737 address: 82.195.75.100
739 hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
741 address: 82.195.75.110
743 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload
745 address: 82.195.75.98
747 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim
749 address: 82.195.75.99
751 hostgroups: computers, service, hasbootfs, kvmdomains, stretch, hasvarlogfs
753 address: 82.195.75.106
755 hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch
757 address: 82.195.75.105
759 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch
761 address: 82.195.75.104
763 hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts
765 address: 82.195.75.107
767 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https
769 address: 82.195.75.111
771 hostgroups: notacomputer
773 address: 82.195.75.112
775 hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts
777 address: 82.195.75.114
779 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay
781 address: 82.195.75.91
783 hostgroups: computers, service, kvmdomains, stretch, bind9-hosts
785 address: 82.195.75.92
787 hostgroups: computers, service, kvmdomains, stretch
789 address: 82.195.75.65
791 hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https
793 address: 82.195.75.66
795 hostgroups: computers, buildd, stretch, hassrvfs
797 address: 82.195.75.72
799 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
801 address: 82.195.75.74
803 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
805 address: 82.195.75.67
807 hostgroups: computers, buildd, stretch, hassrvfs
809 address: 82.195.75.93
811 hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch
813 address: 82.195.75.68
815 hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd
819 address: 148.100.88.22
821 hostgroups: computers, buildd, hassrvfs, stretch, incomingmailrelayed
825 address: 140.211.166.200
827 hostgroups: computers, service, dl380, stretch
829 address: 140.211.166.201
831 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, apache-https
834 address: 140.211.166.195
836 hostgroups: computers, stretch, service, manyprocesses
838 address: 140.211.166.196
840 hostgroups: computers, hassrvfs, buildd, stretch
842 address: 140.211.166.197
844 hostgroups: computers, hassrvfs, buildd, jessie
846 address: 140.211.15.152
848 hostgroups: computers, jessie, hassrvfs, porterbox, sw-raid
852 address: 193.62.202.26
854 hostgroups: computers, service, stretch, dl380, nfs-client, autofs, postgres96-hosts
856 address: 193.62.202.28
858 hostgroups: computers, postgres94-hosts, service, apache2-hosts, sw-raid, jessie, rsyncd-hosts, hasvarlogfs, multipath-hosts, nfs-server
859 contacts: tjrc1, dave
861 address: 193.62.202.29
863 hostgroups: computers, sw-raid, sparc, wheezy, no-bacula
864 contacts: tjrc1, dave
868 address: 212.211.132.250
869 parents: gw-scanplus-lobos
870 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror
872 address: 212.211.132.32
873 parents: gw-scanplus-villa
874 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror
878 address: 86.59.118.155
880 hostgroups: computers, buildd, stretch, sw-raid
882 address: 86.59.118.146
884 hostgroups: computers, buildd, stretch, hassrvfs
886 address: 86.59.118.147
888 hostgroups: computers, buildd, stretch, hassrvfs
892 address: 154.57.0.251
893 parents: gw-skroutz1, gw-skroutz2
894 hostgroups: computers, stretch, service, sw-raid, hassrvfs, apache2-hosts
900 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
904 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
908 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
910 address: 209.87.16.10
912 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
915 address: 209.87.16.20
917 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
919 address: 209.87.16.21
921 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
923 address: 209.87.16.24
925 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
927 address: 209.87.16.25
929 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
931 address: 209.87.16.26
933 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
935 address: 209.87.16.27
937 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
939 address: 209.87.16.28
941 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, broken_https_default_vhost, systemd-timesyncd
943 address: 209.87.16.29
945 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
947 address: 209.87.16.30
949 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
951 address: 209.87.16.31
953 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
955 address: 209.87.16.32
957 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
959 address: 209.87.16.33
961 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
963 address: 209.87.16.34
965 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
967 address: 209.87.16.35
969 hostgroups: computers, general, apache2-hosts, kvmdomains, apache-https, stretch, systemd-timesyncd
971 address: 209.87.16.36
973 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, nfs-server, apache2-hosts, xinetd-hosts, apache-https, systemd-timesyncd
975 address: 209.87.16.37
977 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd
979 address: 209.87.16.38
981 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, nfs-client, apache2-hosts, autofs, apache-https, systemd-timesyncd
983 address: 209.87.16.39
985 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, heavy-exim, postgres96-hosts, hasvarlogfs, apache-https, spamd, nfs-server, systemd-timesyncd
987 address: 209.87.16.42
989 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
992 address: 209.87.16.43
994 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
996 address: 209.87.16.44
998 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd, postfix-hosts, postgres96-hosts, manyprocesses
1000 address: 209.87.16.46
1001 parents: ubc-gateway
1002 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https, broken_https_default_vhost
1006 # address: 128.101.240.212
1008 # hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1010 address: 128.101.240.212
1012 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch
1014 address: 128.101.240.215
1016 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
1018 address: 128.101.240.216
1020 hostgroups: secondary-IPs, rsyncd-hosts
1022 address: 128.101.240.217
1024 hostgroups: secondary-IPs
1028 address: 177.220.10.140
1030 hostgroups: computers, stretch, service, manyprocesses
1032 address: 177.220.10.141
1034 hostgroups: computers, hassrvfs, buildd, jessie
1036 address: 177.220.10.142
1038 hostgroups: computers, hassrvfs, buildd, stretch
1040 address: 177.220.10.143
1042 hostgroups: computers, porterbox, hassrvfs, stretch
1046 address: 130.89.148.10
1048 hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs
1050 address: 130.89.148.12
1052 hostgroups: secondary-IPs
1054 address: 130.89.148.13
1056 hostgroups: secondary-IPs
1058 address: 130.89.148.14
1060 hostgroups: secondary-IPs
1064 address: 144.32.168.74
1066 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1068 address: 144.32.168.75
1070 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1072 address: 144.32.168.76
1074 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1078 address: 80.245.147.46
1080 hostgroups: computers, buildd, hassrvfs, stretch
1082 address: 80.245.147.40
1084 hostgroups: computers, porterbox, hassrvfs, stretch
1088 address: 133.242.99.74
1090 hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror
1093 # {{{ ############################# host groups #############################
1098 layer3-infrastructure:
1099 alias: Layer 3 Devices
1101 alias: Systems that are not really systems. Yeah :)
1111 alias: developer accessible porter machines
1113 alias: machines running services
1115 alias: buildd systems
1117 alias: general purpose developer accessible machines
1120 alias: HP DL380 hosts
1123 alias: HP DL360 hosts
1126 alias: HP BL460 blades
1129 alias: HP BL460 Gen8 blades
1132 alias: HP blades at bytemark
1141 alias: Hosts with Linux software raid
1144 alias: Hosts with Adaptec AACraid
1147 alias: Dell PowerEdge 1950 hosts
1151 alias: Hosts running wheezy
1153 alias: Hosts running jessie
1155 alias: Hosts running stretch
1158 alias: Hosts that are KVM domains
1162 alias: hosts running drbd
1164 alias: hosts running multipathd
1166 alias: hosts running postfix instead of exim
1169 alias: "hosts running the full mail stuff, including clamav and postgrey"
1172 alias: "relays usually are hosts with more exim processes"
1175 alias: "hosts running spamassassin as daemon"
1178 alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1181 alias: hosts running apache2
1184 alias: hosts running bind9
1187 alias: hosts running amavis
1190 alias: hosts providing rsync services
1193 alias: hosts providing services via xinetd
1196 alias: hosts running postgres91
1199 alias: hosts running postgres94
1202 alias: hosts running postgres96
1205 alias: hosts not running ulogd
1208 alias: hosts running acpid
1211 alias: hosts that are an anonymous ftp uploadqueue
1214 alias: hosts running queued
1217 alias: hosts running bosserver
1220 alias: hosts with https services
1223 alias: https service for secondary addresses
1225 broken_https_default_vhost:
1226 alias: https default vhost does not say 200 OK
1229 alias: hosts with lots and lots of (kernel) processes
1232 alias: hosts which are not being backed up with bacula
1236 alias: hosts mounting filesystems using NFS
1239 alias: hosts serving filesystems using NFS
1242 alias: hosts running the automounter
1245 alias: Vms running systemd-timesyncd
1249 alias: "hosts on which high load is normal"
1253 alias: secondary IP addresses
1257 alias: hosts with a /boot filesystem
1260 alias: hosts with a /srv filesystem
1263 alias: hosts with a /var/log filesystem
1266 incomingmailrelayed:
1267 alias: incoming mail needs to go through a mail relay
1270 incomingmailrelayed2025:
1271 alias: incoming mail needs to go through a mail relay
1276 alias: machines that can not run samhain
1279 alias: machines with high round trip times
1282 alias: machines that just are just awkward
1285 # alias: nodes that run OpenStack compute
1287 openstack-controller:
1288 alias: nodes that run OpenStack controller
1292 alias: hosts that are security mirrors
1296 alias: hosts whose MQ is broken
1299 # {{{ ############################# servicegroups #############################
1302 alias: diskusage checks
1304 alias: buildd checks
1308 alias: backup checks
1310 alias: kernel checks
1312 alias: apt upgrade status
1314 alias: samhain integrity status
1319 servicegroup_members: apt, kernel, samhain
1323 alias: rabbitMQ stuff
1325 # {{{ ############################# services #############################
1327 # {{{ ### basic networking
1330 check: "check_ping!350.0,20%!600.0,40%"
1331 hostgroups: pingable
1332 excludehostgroups: layer3-infrastructure, high-RTT
1334 max_check_attempts: 4
1338 check: "check_ping!600.0,20%!900.0,40%"
1339 hostgroups: high-RTT
1341 max_check_attempts: 4
1345 check: "check_ping!2000.0,60%!3000.0,80%"
1346 hostgroups: layer3-infrastructure
1348 max_check_attempts: 4
1351 name: network - v6 gw
1352 nrpe: "/usr/lib/nagios/plugins/dsa-check-ipv6-default-gw"
1353 hostgroups: computers
1355 excludehostgroups: alioth
1357 # {{{ ### disk usage
1359 name: disk usage - all
1360 servicegroups: diskspace
1361 nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
1362 hostgroups: computers
1363 excludehosts: sibelius
1365 name: disk usage - all
1366 servicegroups: diskspace
1367 nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
1371 name: disk usage on /
1372 servicegroups: diskspace
1373 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1374 hostgroups: computers
1376 name: disk usage on /boot
1377 servicegroups: diskspace
1378 nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1379 hostgroups: hasbootfs
1381 name: disk usage on /srv
1382 servicegroups: diskspace
1383 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
1384 hostgroups: hassrvfs
1386 name: disk usage on /var/lib/postgresql
1387 servicegroups: diskspace
1388 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1389 hosts: sibelius, buxtehude, lw07, fasolo
1391 name: disk usage on /var/log
1392 servicegroups: diskspace
1393 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1394 hostgroups: hasvarlogfs
1396 name: disk usage on /var/spool/postfix
1397 servicegroups: diskspace
1398 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1401 name: disk usage on /srv/mirrors
1402 servicegroups: diskspace
1403 nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1406 name: disk usage on /srv/snapshot.debian.org
1407 servicegroups: diskspace
1408 nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1411 name: disk usage on /srv/farm-snapshot/farm-2017-0
1412 servicegroups: diskspace
1413 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-0"
1416 name: disk usage on /srv/farm-snapshot/farm-2017-1
1417 servicegroups: diskspace
1418 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-1"
1421 name: disk usage on /srv/farm-snapshot/farm-2017-2
1422 servicegroups: diskspace
1423 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-2"
1426 name: disk usage on /srv/farm-snapshot/farm-2017-3
1427 servicegroups: diskspace
1428 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-3"
1431 name: disk usage on /srv/farm-snapshot/farm-2017-4
1432 servicegroups: diskspace
1433 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-4"
1436 name: disk usage on /srv/farm-snapshot/farm-2017-5
1437 servicegroups: diskspace
1438 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-5"
1441 name: disk usage on /srv/farm-snapshot/farm-2017-6
1442 servicegroups: diskspace
1443 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-6"
1446 name: disk usage on /srv/farm-snapshot/farm-2017-7
1447 servicegroups: diskspace
1448 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-7"
1451 name: disk usage on /srv/ftp-master.debian.org
1452 servicegroups: diskspace
1453 nrpe: "/usr/lib/nagios/plugins/check_disk 93 96 /srv/ftp-master.debian.org"
1456 name: disk usage on /storage/snapshot-farm-1
1457 servicegroups: diskspace
1458 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-1"
1461 name: disk usage on /storage/snapshot-farm-2
1462 servicegroups: diskspace
1463 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-2"
1466 name: disk usage on /storage/snapshot-farm-3
1467 servicegroups: diskspace
1468 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-3"
1471 name: disk usage on /storage/snapshot-farm-4
1472 servicegroups: diskspace
1473 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-4"
1476 name: disk usage on /storage/snapshot-farm-90
1477 servicegroups: diskspace
1478 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-09"
1481 name: disk usage on /storage/snapshot-farm-10
1482 servicegroups: diskspace
1483 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-10"
1486 name: disk usage on /srv/morgue.debian.org/
1487 servicegroups: diskspace
1488 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org"
1491 name: disk usage on /srv/QNAP-big/
1492 servicegroups: diskspace
1493 nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/QNAP-big"
1496 name: disk usage on /srv/QNAP-tiny
1497 servicegroups: diskspace
1498 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/QNAP-tiny"
1504 name: setup - dsa config
1505 nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1506 hostgroups: computers
1508 excludehostgroups: alioth
1510 name: setup - local hostname etc-hosts
1511 nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1512 hostgroups: computers
1519 nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1520 hostgroups: computers
1523 nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1524 hostgroups: computers
1525 excludehostgroups: highload
1528 nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1529 hostgroups: highload
1532 nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1533 hostgroups: computers
1535 name: processes - total
1536 nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1537 hostgroups: computers
1538 excludehostgroups: manyprocesses
1540 name: processes - total
1541 hostgroups: manyprocesses
1542 nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
1544 name: free memory - mb
1545 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m mb"
1546 hostgroups: computers
1548 name: free memory - percent
1549 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m pct"
1550 hostgroups: computers
1552 name: process - getty
1553 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1554 hostgroups: computers
1555 excludehosts: zelenka, zandonai
1556 excludehostgroups: jessie, stretch
1558 name: process - getty
1559 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1560 hostgroups: jessie, stretch
1563 name: processes - zombies
1564 nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1565 hostgroups: computers
1567 name: system - available entropy
1568 nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1569 event_handler: dsa_event_handler_restart_ekey
1570 hostgroups: computers
1572 name: system - filesystem check
1573 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1576 hostgroups: computers
1581 servicegroups: backup
1582 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1583 hostgroups: computers
1584 excludehosts: backuphost, storace
1586 max_check_attempts: 2
1589 name: backup server config
1590 servicegroups: backup
1591 nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1594 max_check_attempts: 2
1597 name: backup - bacula - last backup
1598 servicegroups: backup
1599 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1601 hostgroups: computers
1602 excludehostgroups: buildd, porterbox, no-bacula
1606 name: backup - bacula - last full backup
1607 servicegroups: backup
1608 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1610 hostgroups: computers
1611 excludehostgroups: buildd, porterbox, no-bacula
1615 name: process - bacula-dir
1616 servicegroups: backup
1617 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -f -c /etc/bacula/bacula-dir.conf'"
1620 name: process - bacula-fd
1621 servicegroups: backup
1622 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1623 hostgroups: computers
1624 excludehostgroups: alioth
1627 name: network backup status - draghi
1628 servicegroups: backup
1629 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 2h /home/debbackup/nagios-status"
1634 name: process - acc.umu.se backup
1635 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1640 name: running kernel
1641 servicegroups: kernel
1642 nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1643 hostgroups: computers
1647 name: apt - security updates
1649 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1650 hostgroups: computers
1654 name: unexpected file - apt sources.list
1656 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /etc/apt/sources.list"
1657 hostgroups: computers
1659 name: upgraded libraries
1660 servicegroups: security
1661 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h"
1662 hostgroups: computers
1665 notification_interval: 10080
1667 name: installed firewall
1668 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1669 hostgroups: computers
1671 name: puppetized firewall
1672 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1673 hostgroups: computers
1675 name: process - ulogd
1676 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1677 hostgroups: computers
1678 excludehostgroups: sparc, jessie, stretch
1680 name: process - ulogd
1681 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1682 hostgroups: jessie, stretch
1684 name: unexpected process - ulogd
1685 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1689 name: process - samhain
1690 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1691 hostgroups: computers
1692 excludehostgroups: brokensamhain
1695 servicegroups: samhain
1696 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1697 hostgroups: computers
1698 depends: process - samhain
1701 excludehostgroups: brokensamhain
1703 name: processes - samhain zombies
1704 nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1705 event_handler: dsa_event_handler_restart_samhain
1706 hostgroups: computers
1707 excludehostgroups: brokensamhain
1711 name: process - syslog-ng
1712 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1713 hostgroups: computers
1714 excludehostgroups: jessie, stretch
1716 name: process - syslog-ng
1717 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -F'"
1718 hostgroups: jessie, stretch
1721 name: remote logging on lotti
1722 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1724 hostgroups: computers
1725 excludehostgroups: alioth
1727 name: remote logging on lully
1728 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1730 hostgroups: computers
1731 excludehostgroups: alioth
1733 name: remote logging on loghost-grnet-01
1734 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1735 runfrom: loghost-grnet-01
1736 hostgroups: computers
1737 excludehostgroups: alioth
1741 name: process - sshd
1742 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1743 hostgroups: computers
1745 name: "network service - sshd"
1746 check: dsa_check_ssh
1747 hostgroups: computers
1748 depends: process - sshd
1750 notification_interval: 1440
1753 name: network service - nrpe
1754 check: check_tcp!5666
1755 hostgroups: computers
1756 max_check_attempts: -2
1757 notification_interval: 1440
1759 name: process - nrpe
1760 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1761 hostgroups: computers
1762 excludehostgroups: stretch
1763 max_check_attempts: -1
1764 depends: network service - nrpe
1766 name: process - nrpe
1767 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -f'"
1769 max_check_attempts: -1
1770 depends: network service - nrpe
1773 name: process - munin-node
1774 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1775 hostgroups: computers
1777 name: network service - munin-node
1778 check: check_tcp!4949
1779 hostgroups: computers
1780 depends: process - munin-node
1783 name: process - ntpd
1784 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1785 hostgroups: computers
1786 excludehostgroups: systemd-timesyncd
1789 name: network service - ntp
1790 check: dsa_check_ntp
1791 hostgroups: computers
1792 excludehostgroups: systemd-timesyncd
1793 depends: process - ntpd
1796 name: system time synced
1797 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl -s"
1798 hostgroups: computers
1799 excludehostgroups: systemd-timesyncd, wheezy
1802 name: system time synced
1803 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl"
1804 hostgroups: systemd-timesyncd
1809 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1810 hostgroups: computers
1813 name: process - irqbalance
1814 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
1815 hostgroups: computers
1816 excludehosts: harris, smetana
1819 name: process - cron
1820 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1821 hostgroups: computers
1824 name: process - ud-replicated
1825 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1826 hostgroups: computers
1827 excludehostgroups: alioth
1830 name: process - monit
1831 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1832 hostgroups: computers
1833 excludehostgroups: alioth, jessie, stretch
1836 name: MQ connection on rainier
1838 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1840 hostgroups: computers
1843 excludehostgroups: alioth, broken_mq
1845 name: MQ connection on rapoport
1847 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1849 hostgroups: computers
1852 excludehostgroups: alioth, broken_mq
1855 name: local resolver
1856 nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1857 hostgroups: computers
1860 name: process - unbound
1861 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1862 hostgroups: computers
1863 excludehostgroups: alioth
1866 name: process - uptimed
1867 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1868 hostgroups: computers
1871 name: process - udevd
1872 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1873 hostgroups: computers
1874 excludehostgroups: jessie, stretch
1876 name: process - udevd
1877 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1878 hostgroups: jessie, stretch
1881 name: process - acpid
1882 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1883 hostgroups: acpid-hosts
1884 excludehostgroups: jessie, stretch
1886 name: unexpected process - acpid
1887 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1888 hostgroups: computers
1889 excludehostgroups: acpid-hosts, kvmdomains
1892 name: process - xinetd
1893 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
1894 hostgroups: xinetd-hosts
1896 name: unwanted process - xinetd
1897 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1898 hostgroups: computers
1899 excludehostgroups: xinetd-hosts
1902 name: process - stunnel4 - puppet-ekeyd
1903 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1904 hostgroups: wheezy, jessie, stretch
1905 excludehostgroups: alioth
1907 name: process - stunnel4 - puppet-ekeyd is crazy
1908 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-stunnel-sanity"
1909 hostgroups: computers
1910 excludehostgroups: alioth
1911 excludehosts: czerny, grnet-node01, storace
1915 name: ganeti - job watcher paused
1916 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1917 hostgroups: computers
1919 name: unwanted process - openvpn
1920 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1921 hostgroups: computers
1924 name: unwanted process - gkrellmd
1925 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1926 hostgroups: computers
1928 name: unwanted process - rpc.statd
1929 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1930 hostgroups: computers
1931 excludehostgroups: nfs-client, nfs-server
1933 name: unwanted process - rpc.statd
1934 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1936 excludehosts: storace
1938 name: unwanted process - inetd
1939 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1940 hostgroups: computers
1943 name: unwanted process - snmpd
1944 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1945 hostgroups: computers
1949 name: "host SSL cert"
1950 nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1951 hostgroups: computers
1953 name: "host SSL cert - debian server"
1954 nrpe: "if [ -e /etc/ssl/debian/certs/thishost-server.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost-server.crt; else echo 'No thishost-server.crt on this host.'; fi"
1955 hostgroups: computers
1957 name: "host SSL cert - debian client"
1958 nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
1959 hostgroups: computers
1962 nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
1963 hostgroups: computers
1965 name: SSL certs - puppet
1967 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
1970 name: SSL certs - LE
1972 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /srv/puppet.debian.org/from-letsencrypt"
1975 # {{{ HW health/raid
1977 name: process - mdadm monitor
1979 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1981 excludehostgroups: jessie, stretch
1983 name: process - mdadm monitor
1985 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1987 excludehostgroups: wheezy
1989 name: RAID - sw raid
1991 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1994 name: RAID - unexpected sw raid
1996 nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
1997 hostgroups: computers
1998 excludehostgroups: sw-raid
2001 name: HW - HP raid status
2003 nrpe: "if [ -e /var/cache/dsa/nagios/dsa-check-hpssacli ] ; then /usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/dsa-check-hpssacli ; else /usr/lib/nagios/plugins/dsa-check-hpacucli; fi"
2005 hostgroups: dl380, dl360, bl460, bl460g8, dl180
2007 name: HW - hpacucli status
2009 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
2014 # name: HW - edac status
2015 # nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
2016 # check_interval: 120
2017 #hostgroups: computers
2018 #excludehosts: villa, lobos
2020 name: HW - hpasmcli status
2021 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2023 hostgroups: dl380, dl360, bl460, bm-bl
2024 excludehosts: villa, lobos, storace, mirror-anu, sallinen
2026 name: HW - hpasmcli status
2027 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2031 name: HW - hpasmcli status
2032 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant --ignore-failed='PS2'"
2036 name: HW - hpasmcli status
2037 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2039 hosts: storace, sallinen
2041 name: HW - hpasmcli status
2042 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present --ps-no-redundant --ignore-failed='PS1'"
2046 name: HW - hpasmcli status
2047 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2052 name: RAID - aacraid
2054 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2060 nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2061 hostgroups: drbd-hosts
2063 name: HW - OpenManage status
2064 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage"
2068 # {{{ ### mail stuff
2069 # {{{ exim processes and mailq
2071 name: process - exim
2072 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2073 hostgroups: computers
2074 excludehostgroups: postfix-hosts, mail-relay
2075 excludehosts: master, quantz, buxtehude
2077 name: process - exim
2078 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2079 hostgroups: mail-relay
2081 name: process - exim - total
2082 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2083 hostgroups: computers
2084 excludehostgroups: postfix-hosts
2085 excludehosts: master, quantz, buxtehude
2087 name: process - exim
2088 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2089 hosts: master, quantz, buxtehude
2092 nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2093 hostgroups: heavy-exim
2097 name: process - clamav - clamd
2098 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2099 hostgroups: heavy-exim, heavy-postfix
2101 name: service - clamav
2102 nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2103 hostgroups: heavy-exim, heavy-postfix
2104 depends: process - clamav - clamd
2106 name: process - clamav - freshclam
2107 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2108 hostgroups: heavy-exim, heavy-postfix
2109 excludehostgroups: jessie, stretch
2111 name: process - clamav - freshclam
2112 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --foreground=true'"
2113 hostgroups: heavy-exim, heavy-postfix
2114 excludehostgroups: wheezy
2116 name: unwanted process - clamav
2117 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2118 hostgroups: computers
2119 excludehostgroups: heavy-exim, heavy-postfix
2121 name: unwanted process - freshclam
2122 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2123 hostgroups: computers
2124 excludehostgroups: heavy-exim, heavy-postfix
2128 name: process - spamd - master
2129 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2131 excludehosts: picconi
2132 excludehostgroups: jessie, stretch
2134 name: process - spamd - master
2135 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 5 --helper-home-dir'"
2137 excludehosts: picconi
2138 excludehostgroups: wheezy
2140 name: process - spamd - master
2141 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 20 --min-spare=5 --helper-home-dir'"
2144 name: process - spamd - master
2145 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 10 --helper-home-dir'"
2148 name: process - spamd - child
2149 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2152 depends: process - spamd - master
2155 name: unwanted process - spamd
2156 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2157 hostgroups: computers
2158 excludehostgroups: spamd
2159 excludehosts: bendel
2162 name: unwanted process - greylistd
2163 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2164 hostgroups: computers
2168 name: process - postgrey
2169 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2170 hostgroups: heavy-exim
2171 excludehostgroups: jessie, stretch
2173 name: process - postgrey
2174 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2175 hostgroups: heavy-exim
2176 excludehostgroups: wheezy
2178 name: process - postgrey
2179 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2180 hostgroups: heavy-postfix
2183 name: unwanted process - postgrey
2184 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2185 hostgroups: computers
2186 excludehostgroups: heavy-postfix, heavy-exim
2189 name: process - amavis - master
2190 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2191 hostgroups: amavis-hosts
2193 name: process - amavis - all
2194 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2195 hostgroups: amavis-hosts
2196 depends: process - amavis - master
2199 name: unwanted process - amavis
2200 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2201 hostgroups: computers
2202 excludehostgroups: amavis-hosts
2205 name: process - weightd - master
2206 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2207 hostgroups: heavy-postfix, alioth
2209 name: process - weightd - cache
2210 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2211 hostgroups: heavy-postfix, alioth
2212 depends: process - weightd - master
2214 name: process - weightd - child
2215 nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2216 hostgroups: heavy-postfix, alioth
2217 depends: process - weightd - master
2220 name: unwanted process - policyd-weight
2221 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2222 hostgroups: computers
2223 excludehostgroups: heavy-postfix, alioth
2228 name: process - postfix - master
2229 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/sbin/master'"
2230 hostgroups: postfix-hosts
2233 name: process - postfix - qmgr
2234 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t unix -u'"
2235 hostgroups: postfix-hosts
2236 depends: process - postfix - master
2239 name: process - postfix - pickup
2240 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t unix -u -c'"
2241 hostgroups: postfix-hosts
2242 depends: process - postfix - master
2245 name: process - postfix - anvil
2246 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2247 hostgroups: postfix-hosts
2248 depends: process - postfix - master
2251 name: process - postfix - trivial-rewrite
2252 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2253 hostgroups: postfix-hosts
2254 depends: process - postfix - master
2256 name: process - postfix - proxymap
2257 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2258 hostgroups: postfix-hosts
2259 depends: process - postfix - master
2261 name: process - postfix - cleanup
2262 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2263 hostgroups: postfix-hosts
2264 depends: process - postfix - master
2266 name: process - postfix - local
2267 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2268 hostgroups: postfix-hosts
2269 depends: process - postfix - master
2272 name: network service local - smtps cert
2273 nrpe: "/usr/lib/nagios/plugins/check_smtp -H localhost -S -D 14"
2274 hostgroups: postfix-hosts
2275 depends: process - postfix - master
2278 # {{{ mail - network service
2280 name: network service - smtp
2281 check: dsa_check_smtp
2282 hostgroups: computers
2283 excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2284 depends: process - exim
2287 name: network service - smtp
2288 check: dsa_check_smtp
2289 hostgroups: postfix-hosts
2290 depends: process - postfix - master
2292 name: network service - submission
2293 check: dsa_check_smtp_port!587
2294 hostgroups: incomingmailrelayed
2295 depends: process - exim
2297 name: network service - smtp 2025
2298 check: dsa_check_smtp_port!2025
2299 hostgroups: incomingmailrelayed2025
2300 depends: process - exim
2303 # {{{ ### host specific services
2306 name: process - apache2 - master
2307 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2308 hostgroups: apache2-hosts
2310 name: process - apache2 - worker
2311 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2312 hostgroups: apache2-hosts
2313 depends: process - apache2 - master
2314 excludehosts: klecker
2316 name: process - apache2 - worker
2317 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
2319 depends: process - apache2 - master
2321 name: unwanted process - apache2
2322 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2323 hostgroups: computers
2324 excludehostgroups: apache2-hosts
2327 name: network service - http
2329 hostgroups: apache2-hosts
2330 excludehosts: klecker, casulana
2331 depends: process - apache2 - master
2333 name: network service - http
2335 depends: klecker:process - apache2 - master
2338 # keyserver on kaufmann
2340 name: network service - http keyserver
2341 check: dsa_check_http_port!11371
2343 depends: process - apache2 - master
2345 # https on various hosts
2347 name: network service - https
2349 hostgroups: apache-https
2350 excludehosts: menotti
2351 excludehostgroups: broken_https_default_vhost
2352 depends: "process - apache2 - master"
2355 name: network service - https
2357 hostgroups: https-service
2358 excludehostgroups: broken_https_default_vhost
2361 name: network service - https
2362 check: dsa_check_https_want_auth
2364 depends: "process - apache2 - master"
2367 name: network service - https
2368 check: dsa_check_https_any_status
2369 hostgroups: broken_https_default_vhost
2370 depends: "process - apache2 - master"
2373 name: network service - https cert
2374 check: dsa_check_cert!443
2375 hostgroups: apache-https, https-service
2376 depends: network service - https
2379 name: unwanted network service - https
2380 check: dsa_check_port_closed!443
2381 hostgroups: apache2-hosts
2382 excludehostgroups: apache-https
2387 name: network service - ftp
2389 hostgroups: uploadqueue
2393 name: unwanted process - postgresql
2394 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2395 hostgroups: computers
2396 excludehostgroups: postgres91-hosts, postgres94-hosts, postgres96-hosts
2398 name: unwanted process - postgresql 9.0
2399 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2400 hostgroups: computers
2402 name: process - postgresql91 - master
2403 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2404 hostgroups: postgres91-hosts
2406 name: process - postgresql94 - master
2407 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.4/bin/postgres'"
2408 hostgroups: postgres94-hosts
2410 name: process - postgresql96 - master
2411 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.6/bin/postgres'"
2412 hostgroups: postgres96-hosts
2414 name: postgresql backups
2415 nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2416 hosts: storace, backuphost
2420 name: process - buildd
2421 servicegroups: buildd
2422 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2424 contact_groups: buildd
2426 name: processes - zombie schroot
2427 nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2429 contact_groups: +buildd
2431 max_check_attempts: 24
2434 name: processes - lvcreate
2435 nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2437 contact_groups: +buildd
2441 name: process - statd
2442 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2443 hostgroups: nfs-client, nfs-server
2444 excludehostgroups: stretch
2446 name: process - nfsd
2447 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2448 hostgroups: nfs-server
2450 name: process - lockd
2451 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2452 hostgroups: nfs-server
2454 name: process - mountd
2455 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2456 hostgroups: nfs-server
2459 name: process - automount
2460 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2463 name: unwanted process - automount
2464 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2465 hostgroups: computers
2466 excludehostgroups: autofs
2470 name: mirror sync - bugs
2471 check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2473 servicegroups: mirror
2475 name: mirror sync - security
2476 check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2478 servicegroups: mirror
2480 name: mirror sync - packages
2481 check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2484 max_check_attempts: 5
2486 servicegroups: mirror
2488 name: mirror sync - snapshot
2489 check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2492 max_check_attempts: 5
2494 servicegroups: mirror
2496 name: mirror sync - debian archive backend
2497 check: "dsa_check_mirrorsync!debian.backend.mirrors.debian.org!debian/project/trace/master"
2500 max_check_attempts: 5
2502 servicegroups: mirror
2505 name: mirror static sync - bits
2506 check: "dsa_check_staticsync!bits.debian.org"
2508 servicegroups: mirror
2510 name: mirror static sync - network-test
2511 check: "dsa_check_staticsync_nossl!network-test.debian.org"
2513 servicegroups: mirror
2515 name: mirror static sync - appstream
2516 check: "dsa_check_staticsync!appstream.debian.org"
2518 servicegroups: mirror
2520 name: mirror static sync - blends
2521 check: "dsa_check_staticsync!blends.debian.org"
2523 servicegroups: mirror
2525 name: mirror static sync - d-i
2526 check: "dsa_check_staticsync!d-i.debian.org"
2528 servicegroups: mirror
2530 name: mirror static sync - debaday
2531 check: "dsa_check_staticsync!debaday.debian.net"
2533 servicegroups: mirror
2535 name: mirror static sync - debdeltas
2536 check: "dsa_check_staticsync_nossl!debdeltas.debian.net"
2538 servicegroups: mirror
2540 name: mirror static sync - dsa
2541 check: "dsa_check_staticsync!dsa.debian.org"
2543 servicegroups: mirror
2545 name: mirror static sync - lintian
2546 check: "dsa_check_staticsync!lintian.debian.org"
2548 servicegroups: mirror
2550 name: mirror static sync - mozilla
2551 check: "dsa_check_staticsync_nossl!mozilla.debian.net"
2553 servicegroups: mirror
2555 name: mirror static sync - news
2556 check: "dsa_check_staticsync!news.debian.net"
2558 servicegroups: mirror
2560 name: mirror static sync - incoming.ports
2561 check: "dsa_check_staticsync_nossl!incoming.ports.debian.org"
2563 servicegroups: mirror
2565 # name: mirror static sync - release
2566 # check: "dsa_check_staticsync!release.debian.org"
2568 # servicegroups: mirror
2570 name: mirror static sync - rtc
2571 check: "dsa_check_staticsync!rtc.debian.org"
2573 servicegroups: mirror
2575 name: mirror static sync - security-team
2576 check: "dsa_check_staticsync!security-team.debian.org"
2578 servicegroups: mirror
2580 name: mirror static sync - wnpp-by-tags
2581 check: "dsa_check_staticsync!wnpp-by-tags.debian.net"
2583 servicegroups: mirror
2585 name: mirror static sync - www.ports
2586 check: "dsa_check_staticsync!www.ports.debian.org"
2588 servicegroups: mirror
2590 name: mirror static sync - timeline
2591 check: "dsa_check_staticsync!timeline.debian.net"
2593 servicegroups: mirror
2595 name: mirror static sync - backports
2596 check: "dsa_check_staticsync!backports.debian.org"
2598 servicegroups: mirror
2600 name: mirror static sync - incoming
2601 check: "dsa_check_staticsync_nossl!incoming.debian.org"
2603 servicegroups: mirror
2605 name: mirror static sync - metadata.ftp-master
2606 check: "dsa_check_staticsync_nossl!metadata.ftp-master.debian.org"
2608 servicegroups: mirror
2610 name: mirror static sync - mirror-master
2611 check: "dsa_check_staticsync_nossl!mirror-master.debian.org"
2613 servicegroups: mirror
2615 name: mirror static sync - deb
2616 check: "dsa_check_staticsync_nossl!deb.debian.org"
2618 servicegroups: mirror
2620 name: mirror static sync - manpages
2621 check: "dsa_check_staticsync!manpages.debian.org"
2623 servicegroups: mirror
2626 name: mirror static sync - 10years
2627 check: "dsa_check_staticsync!10years.debconf.org"
2629 servicegroups: mirror
2631 name: mirror static sync - debconf0
2632 check: "dsa_check_staticsync!debconf0.debconf.org"
2634 servicegroups: mirror
2636 name: mirror static sync - debconf1
2637 check: "dsa_check_staticsync!debconf1.debconf.org"
2639 servicegroups: mirror
2641 name: mirror static sync - debconf2
2642 check: "dsa_check_staticsync!debconf2.debconf.org"
2644 servicegroups: mirror
2646 name: mirror static sync - debconf3
2647 check: "dsa_check_staticsync!debconf3.debconf.org"
2649 servicegroups: mirror
2651 name: mirror static sync - debconf4
2652 check: "dsa_check_staticsync!debconf4.debconf.org"
2654 servicegroups: mirror
2656 name: mirror static sync - debconf5
2657 check: "dsa_check_staticsync!debconf5.debconf.org"
2659 servicegroups: mirror
2661 name: mirror static sync - debconf6
2662 check: "dsa_check_staticsync!debconf6.debconf.org"
2664 servicegroups: mirror
2666 name: mirror static sync - debconf7
2667 check: "dsa_check_staticsync!debconf7.debconf.org"
2669 servicegroups: mirror
2671 name: mirror static sync - debconf16
2672 check: "dsa_check_staticsync!debconf16.debconf.org"
2674 servicegroups: mirror
2676 name: mirror static sync - es
2677 check: "dsa_check_staticsync!es.debconf.org"
2679 servicegroups: mirror
2681 name: mirror static sync - fr
2682 check: "dsa_check_staticsync!fr.debconf.org"
2684 servicegroups: mirror
2686 name: mirror static sync - miniconf10
2687 check: "dsa_check_staticsync!miniconf10.debconf.org"
2689 servicegroups: mirror
2693 name: process - named
2694 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
2695 hostgroups: bind9-hosts
2697 name: network service - dns
2699 hostgroups: bind9-hosts
2700 depends: process - named
2702 name: unwanted process - named
2703 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2704 hostgroups: computers
2705 excludehostgroups: bind9-hosts
2708 name: DNS SOA sync - debian.org
2709 check: "dsa_check_soas_add!denis.debian.org!debian.org"
2712 name: DNS SOA sync - debian.net
2713 check: "dsa_check_soas_add!denis.debian.org!debian.net"
2716 name: DNS SOA sync - debian.com
2717 check: "dsa_check_soas_add!denis.debian.org!debian.com"
2720 name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2721 check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2724 name: DNS SOA sync - debconf.net
2725 check: "dsa_check_soas_add!denis.debian.org!debconf.net"
2728 name: DNS SOA sync - debconf.org
2729 check: "dsa_check_soas_add!denis.debian.org!debconf.org"
2732 name: DNS SOA sync - debianday.org
2733 check: "dsa_check_soas_add!denis.debian.org!debianday.org"
2736 name: DNS SOA sync - dpkg.org
2737 check: "dsa_check_soas_add!denis.debian.org!dpkg.org"
2740 name: DNS - delegation and signature expiry
2742 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2745 name: DNS - security delegations
2747 remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2750 name: DNS - key coverage
2752 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2755 name: DNS - DS expiry
2757 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2760 name: DNS - zones signed properly
2762 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-signature-all"
2767 name: process - multipathd
2768 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u root -C multipathd -a '/sbin/multipathd'"
2769 hostgroups: multipath-hosts
2771 name: unwanted process - multipathd
2772 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C multipathd"
2773 hostgroups: computers
2774 excludehostgroups: multipath-hosts
2778 name: current chroots
2779 nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2780 hostgroups: porterbox
2786 # name: process - openstack - memcached
2787 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2788 # hostgroups: openstack-controller
2790 # name: process - openstack - glance-registry
2791 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2792 # hostgroups: openstack-controller
2794 # name: process - openstack - nova-api
2795 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2796 # hostgroups: openstack-controller
2798 # name: process - openstack - nova-compute
2799 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2800 # hostgroups: openstack-compute
2802 # name: process - openstack - nova-cert
2803 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2804 # hostgroups: openstack-controller
2806 # name: process - openstack - nova-conductor
2807 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2808 # hostgroups: openstack-controller
2810 # name: process - openstack - nova-consoleauth
2811 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2812 # hostgroups: openstack-controller
2814 # name: process - openstack - nova-scheduler
2815 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2816 # hostgroups: openstack-controller
2818 # name: process - openstack - nova-spicehtml5proxy
2819 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2820 # hostgroups: openstack-controller
2822 # name: process - openstack - neutron-server
2823 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2824 # hostgroups: openstack-controller
2828 name: system - all services running
2829 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-systemd-services"
2830 hostgroups: jessie, stretch
2833 name: process - slapd
2834 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2837 name: network service - ldaps cert
2838 check: dsa_check_cert!636
2839 depends: process - slapd
2844 name: network service - finger
2847 depends: process - xinetd
2850 name: network service - rsync
2851 check: check_tcp!873
2852 hostgroups: rsyncd-hosts
2855 name: process - icinga
2856 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:90 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2860 name: process - debianqueued
2861 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2865 name: network service - gobby
2866 check: check_tcp!6523
2868 contact_groups: gobby
2871 name: network service - sip-tls cert - 443
2872 check: dsa_check_cert!443
2876 name: network service - sip-tls cert - 5061
2877 check: dsa_check_cert!5061
2881 name: freeradius process
2882 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u freerad -C freeradius -a '/usr/sbin/freeradius -xx'"
2887 name: puppetmaster cert
2888 nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2891 max_check_attempts: 2
2894 name: puppet - agent check
2895 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/puppet-agent"
2896 hostgroups: computers
2897 excludehosts: moszumanska
2903 # vim: set ts=2 sw=2 et ai si fdm=marker: