# Non comment lines are YAML
#
# Strings ought to be in double quotes, but it works in most cases if they aren't :)
#
# vim:set syntax=yaml:

# TODO
#  - spohr: hpasmd
#  - *: mailq
#  - *: check munin stats collection works
#  - *: check backups are successful
#  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
#  - mundy: salinfo_decode

# down:
#  - sarti
#  - leisner

---
#############################
# hosts
#############################
servers:
  gw-man-da:
    address: 82.195.75.126
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contacts: joerg, bzed
  gw-man-da2:
    address: 82.195.75.46
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contacts: joerg, bzed
  gw-HP-ftc:
    address: 192.25.206.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-brainfood:
    address: 70.103.162.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-brown.edu:
    address: 128.148.34.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-osuosl:
    address: 140.211.166.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-scanplus-villa:
    address: 212.211.132.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-scanplus-lobos:
    address: 212.211.132.249
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-mit-csail:
    address: 128.31.0.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-umn.edu:
    address: 128.101.240.222
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-dg-i.net:
    address: 93.94.132.102
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contacts: bzed
  gw-freenet:
    address: 62.104.23.249
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-sanger:
    address: 193.62.202.20
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contacts: tjrc1, dave
  gw-1und1:
    address: 195.20.247.54
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contacts: joerg
  gw-1und1-karlsruhe:
    address: 212.227.120.29
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-blackcat:
    address: 193.201.200.129
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-grnet:
    address: 194.177.211.193
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-utwente:
    address: 130.89.149.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  #gw-ughent:
  #  address: 157.193.39.254
  #  parents: gw-ubc
  #  hostgroups: routing-infrastructure
  gw-agnesi:
    address: 65.173.90.22
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-ubc:
    address: 206.12.19.254
    parents: tchaikovsky
    hostgroups: routing-infrastructure
    contacts: lfilipoz
  gw-carnet:
    address: 161.53.160.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-telegraaf:
    address: 82.94.249.153
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-telegraaf2:
    address: 217.196.40.15
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contact_groups: +alioth-admins
  gw-helsinki:
    address: 128.214.173.25
    parents: gw-ubc
    hostgroups: routing-infrastructure
    contacts: holger
  gw-cst:
    address: 213.157.2.23
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-isc:
    address: 149.20.20.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-aca:
    address: 130.239.18.97
    parents: gw-ubc
    hostgroups: routing-infrastructure
#  gw-esiee:
#    address: 195.220.83.13
#    parents: gw-ubc
#    hostgroups: routing-infrastructure
  gw-ghent:
    address: 193.191.17.50
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-anu:
    address: 150.203.164.38
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-sil:
    address: 86.59.118.145
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-arm:
    address: 82.44.141.46
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-ynic:
    # really janet, because ynic is stupid about firewalling
    address: 146.97.42.26
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-c3sl:
    address: 200.17.202.254
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-zivit:
    address: 80.245.144.3
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-karlsruhe:
    address: 129.143.166.229
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-marist:
    address: 148.100.96.1
    parents: gw-ubc
    hostgroups: routing-infrastructure
  gw-conova:
    address: 217.196.146.254
    parents: gw-ubc
    hostgroups: routing-infrastructure

  global:
    hostgroups: notacomputer
    pingable: false
    check_command: dsa_check_always_ok

  vasks:
    address: 217.196.43.140
    parents: gw-telegraaf2
    hostgroups: computers, nfs-server, postgres84-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain
    contact_groups: alioth-admins

  wagner:
    address: 217.196.43.132
    parents: gw-telegraaf2
    hostgroups: computers, bind9-hosts, apache2-hosts, nfs-client, xinetd-hosts, postgres90-hosts, apache-https, dl385, brokensamhain
    contact_groups: alioth-admins

  samosa:
    address: 192.25.206.57
    parents: gw-HP-ftc
    hostgroups: computers, service, dl380, hassrvfs, hasbootfs, acpid-hosts, nfs-client, postgres90-hosts, xinetd-hosts, apache2-hosts, squeeze
  raff:
    address: 192.25.206.59
    parents: gw-HP-ftc
    hostgroups: computers, service, dl380, hassrvfs, acpid-hosts, squeeze
  spohr:
    address: 192.25.206.33
    parents: gw-HP-ftc
    hostgroups: computers, service, dl380, apache2-hosts, nfs-server, spamd, heavy-exim, squeeze
  peri:
    address: 192.25.206.15
    parents: gw-HP-ftc
    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny
    contacts: dannf
  penalosa:
    address: 192.25.206.68
    parents: gw-HP-ftc
    hostgroups: computers, buildd, hasbootfs, lenny
    contacts: dannf
  mundy:
    address: 192.25.206.62
    parents: gw-HP-ftc
    hostgroups: computers, buildd, hassrvfs, sw-raid, acpid-hosts, squeeze
  paer:
    address: 192.25.206.11
    parents: gw-HP-ftc
    hostgroups: computers, porterbox, hasbootfs, hashomefs, lenny
  merulo:
    address: 192.25.206.58
    parents: gw-HP-ftc
    hostgroups: computers, porterbox, hasusrfs, squeeze
  alkman:
    address: 192.25.206.63
    parents: gw-HP-ftc
    hostgroups: computers, buildd, acpid-hosts, squeeze

  sperger:
    address: 82.195.75.34
    parents: gw-man-da2
    hostgroups: computers, porterbox, sw-raid, hasbootfs, hasorgfs, sparc, squeeze
    contacts: bzed
  agricola:
    address: 82.195.75.86
    parents: gw-man-da
    hostgroups: computers, porterbox, sw-raid, hassrvfs, squeeze
    contacts: bzed
  arcadelt:
    address: 82.195.75.87
    parents: gw-man-da
    hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze
    contacts: bzed
  liszt:
    address: 82.195.75.100
    parents: gw-man-da
    hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts, apache-https, lenny
    contacts: bzed
  bendel:
    address: 82.195.75.101
    parents: gw-man-da
    hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze
  heininen:
    address: 82.195.75.98
    parents: gw-man-da
    hostgroups: computers, acpid-hosts, service, squeeze, megactl
  nielsen:
    address: 82.195.75.99
    parents: gw-man-da
    hostgroups: computers, acpid-hosts, service, squeeze, megactl
  unger:
    address: 82.195.75.102
    parents: gw-man-da
    hostgroups: computers, service, dl360, acpid-hosts, squeeze
  handel:
    address: 82.195.75.104
    parents: unger
    hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze
  geo1:
    address: 82.195.75.105
    parents: unger
    hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze
  draghi:
    address: 82.195.75.106
    parents: unger
    hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, squeeze
  kaufmann:
    address: 82.195.75.107
    parents: unger
    hostgroups: computers, service, hasbootfs, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, squeeze
  diamond:
    address: 82.195.75.108
    parents: unger
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, bind9-hosts
  ball:
    address: 82.195.75.70
    parents: gw-man-da
    hostgroups: computers, buildd, hasbootfs, squeeze
  kokkonen:
    address: 82.195.75.97
    parents: gw-man-da
    hostgroups: computers, service, acpid-hosts, heavy-exim, mail-relay, apache2-hosts, squeeze
  byrd:
    address: 82.195.75.92
    parents: unger
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze
#  lamb:
#    address: 82.195.75.101
#    parents: unger
#    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa, bosserver
  czerny:
    address: 82.195.75.109
    parents: gw-man-da
    hostgroups: computers, service, dl380, acpid-hosts, squeeze
  new-master:
    address: 82.195.75.110
    parents: czerny
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs

  master:
    address: 70.103.162.29
    parents: gw-brainfood
    hostgroups: computers, general, apache2-hosts, spamd, heavy-exim, highload, xinetd-hosts, mptraid, squeeze
  murphy:
    address: 70.103.162.31
    parents: gw-brainfood
    hostgroups: computers, general, dl380, acpid-hosts, buildd, hasbootfs, hassrvfs, squeeze


  ries:
    address: 128.148.34.103
    parents: gw-brown.edu
    hostgroups: computers, service, dl385, acpid-hosts, xinetd-hosts, hassrvfs, squeeze, postgres90-hosts

  franck:
    address: 128.148.34.3
    parents: gw-brown.edu
    hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres90-hosts, spamd, heavy-exim, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, squeeze

  mayer:
    address: 140.211.166.78
    parents: gw-osuosl
    hostgroups: computers, buildd, hasbootfs, squeeze
#  mayr:
#    address: 140.211.166.58
#    parents: gw-osuosl
#    hostgroups: computers, buildd, hasbootfs
  rietz:
    address: 140.211.166.43
    parents: gw-osuosl
    hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, squeeze, apache2-hosts
    #, bosserver
  rietz2:
    address: 140.211.166.44
    parents: rietz
    hostgroups: secondary-IPs
  busoni:
    address: 140.211.15.34
    parents: gw-osuosl
    hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres84-hosts, squeeze
  zee:
    address: 140.211.166.16
    parents: gw-osuosl
    hostgroups: computers, porterbox, hassrvfs, hasbootfs, sparc, lenny
  parry:
    address: 140.211.15.153
    parents: gw-osuosl
    hostgroups: computers, hassrvfs, squeeze, buildd, hassrvfs
  partch:
    address: 140.211.15.152
    parents: gw-osuosl
    hostgroups: computers, hassrvfs, squeeze, hassrvfs
  piston:
    address: 140.211.15.154
    parents: gw-osuosl
    hostgroups: computers, hassrvfs, squeeze

  villa:
    address: 212.211.132.32
    parents: gw-scanplus-villa
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze
  lobos:
    address: 212.211.132.250
    parents: gw-scanplus-lobos
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze
  gluck:
    address: 150.203.164.38
    parents: gw-anu
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze

  steffani:
    address: 128.31.0.36
    parents: gw-mit-csail
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze
  #mahler:
  #  address: 128.31.0.46
  #  parents: gw-mit-csail
  #  hostgroups: computers, porterbox, hasorgfs
  rore:
    address: 128.31.0.49
    parents: gw-mit-csail
    hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, squeeze
  senfl:
    address: 128.31.0.51
    parents: gw-mit-csail
    hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, bind9-hosts, xinetd-hosts, squeeze
  #carver:
  #  address: 128.31.0.50
  #  parents: gw-mit-csail
  #  hostgroups: computers, service, dl380, acpid-hosts, hassrvfs

  saens:
    address: 128.101.240.212
    parents: gw-umn.edu
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze

  argento:
    address: 93.94.130.160
    parents: gw-dg-i.net
    hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze
    contacts: bzed

  widor:
    address: 93.94.130.161
    parents: gw-dg-i.net
    hostgroups: computers, apache2-hosts, sw-raid, acpid-hosts, hasorgfs, service, apache-https, squeeze
    contacts: bzed

  pergolesi:
    address: 62.104.23.252
    parents: gw-freenet
    hostgroups: computers, porterbox, sw-raid, hasusrfs, hasorgfs, squeeze

  albeniz:
    address: 193.62.202.27
    parents: gw-sanger
    # SMP kernel doesn't run stable
    hostgroups: computers, porterbox, sw-raid, hasbootfs, ntpsuckers, lenny
    contacts: tjrc1, dave
  goetz:
    address: 193.62.202.26
    parents: gw-sanger
    # SMP kernel doesn't run stable
    hostgroups: computers, buildd, sw-raid, hasbootfs, ntpsuckers, hassrvfs, lenny
    contacts: tjrc1, dave
  sibelius:
    address: 193.62.202.28
    parents: gw-sanger
    hostgroups: computers, acpid-hosts, postgres90-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts
    contacts: tjrc1, dave
  smetana:
    address: 193.62.202.29
    parents: gw-sanger
    hostgroups: computers, porterbox, sw-raid, sparc, squeeze
    contacts: tjrc1, dave

  powell:
    address: 87.106.64.223
    parents: gw-1und1
    hostgroups: computers, service, spamd, heavy-exim, rsyncd-hosts, acpid-hosts, hassrvfs, hasvarfs, hasusrfs, xinetd-hosts, apache2-hosts, squeeze
    contacts: joerg

  schumann:
    address: 212.227.126.54
    parents: gw-1und1-karlsruhe
    hostgroups: computers, acpid-hosts, service, squeeze
  wieck:
    address: 195.20.242.89
    parents: gw-1und1-karlsruhe
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze
  chopin:
    address: 195.20.242.124
    parents: schumann
    hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, heavy-exim, xinetd-hosts, apache-https, postgres90-hosts, squeeze
  geo3:
    address: 195.20.242.125
    parents: schumann
    hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze
  soler:
    address: 195.20.242.126
    parents: schumann
    hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, squeeze

  caballero:
    address: 193.201.200.200
    parents: gw-blackcat
    hostgroups: computers, buildd, sw-raid, squeeze

  kassia:
    address: 130.89.149.224
    parents: gw-utwente
    hostgroups: computers, service, dl360, acpid-hosts, incomingmailrelayed, xinetd-hosts, squeeze
  kassia-sec:
    address: 130.89.149.225
    parents: kassia
    hostgroups: secondary-IPs
  kassia-ftp:
    address: 130.89.149.226
    parents: kassia
    hostgroups: secondary-IPs
  kassia-volatile:
    address: 130.89.149.227
    parents: kassia
    hostgroups: secondary-IPs
  klecker:
    address: 130.89.148.10
    parents: gw-utwente
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed, hassrvfs
  klecker-ftp:
    address: 130.89.148.12
    parents: klecker
    hostgroups: secondary-IPs


  ancina:
    address: 157.193.39.13
    parents: gw-ghent
    hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, squeeze
    contacts: luk

  agnesi:
    address: 67.233.102.241
    parents: gw-agnesi
    hostgroups: deadslow, porterbox, lenny

  spontini:
    address: 206.12.19.14
    parents: gw-ubc
    hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, squeeze
    contacts: lfilipoz
  ravel:
    address: 206.12.19.5
    parents: tchaikovsky
    hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-server, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze
  dijkstra:
    address: 206.12.19.218
    parents: tchaikovsky
    hostgroups: computers, bl460, acpid-hosts, service, squeeze
  luchesi:
    address: 206.12.19.214
    parents: tchaikovsky
    hostgroups: computers, bl460, acpid-hosts, service, squeeze
  tchaikovsky:
    address: 206.12.19.118
    hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, squeeze
  wolkenstein:
    address: 206.12.19.116
    parents: dijkstra
    hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, squeeze
  brahms:
    address: 206.12.19.115
    parents: dijkstra
    hostgroups: computers, buildd, hasbootfs, hassrvfs, kvmdomains, squeeze
  geo2:
    address: 206.12.19.113
    parents: dijkstra
    hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze
  duarte:
    address: 206.12.19.114
    parents: dijkstra
    hostgroups: computers, hasbootfs, hassrvfs, apache2-hosts, kvmdomains, service, squeeze, nfs-server
  valente:
    address: 206.12.19.112
    parents: dijkstra
    hostgroups: computers, hasbootfs, hassrvfs, postgres83-hosts, ftpd-hosts, rsyncd-hosts, kvmdomains, heavy-exim, xinetd-hosts, service, lenny
  bellini:
    address: 206.12.19.7
    parents: gw-ubc
    hostgroups: computers, hasbootfs, nfs-client, hassrvfs, aacraid, heavy-exim, service, apache2-hosts, squeeze, autofs
  morricone:
    address: 206.12.19.9
    parents: tchaikovsky
    hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze
  stabile:
    address: 206.12.19.13
    parents: gw-ubc
    hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs
  paganini:
    address: 206.12.19.10
    parents: tchaikovsky
    hostgroups: computers, hasbootfs, aacraid, hassrvfs, xinetd-hosts, nfs-client, service, apache2-hosts, squeeze, autofs
  respighi:
    address: 206.12.19.11
    parents: gw-ubc
    hostgroups: computers, hasbootfs, aacraid, hassrvfs, service, apache2-hosts, squeeze
  vivaldi:
    address: 206.12.19.12
    parents: tchaikovsky
    hostgroups: computers, hasbootfs, aacraid, hassrvfs, apache2-hosts, postgres84-hosts, service, apache-https, squeeze, autofs
  # MSA 2000 (2012i)
  giustini:
    address: 192.168.2.6
    parents: dijkstra
    hostgroups: notacomputer
    # unless we implement runfrom for host alive checks
    pingable: false
    check_command: dsa_check_always_ok
  fano:
    address: 206.12.19.110
    parents: luchesi
    hostgroups: computers, freebsd, squeeze, buildd, hassrvfs
  finzi:
    address: 206.12.19.111
    parents: luchesi
    hostgroups: computers, freebsd, squeeze, buildd, hassrvfs
  gabrielli:
    address: 206.12.19.17
    parents: tchaikovsky
    hostgroups: computers, porterbox, squeeze
  corelli:
    address: 206.12.19.16
    parents: tchaikovsky
    hostgroups: computers, buildd, squeeze
  lucatelli:
    address: 206.12.19.15
    parents: tchaikovsky
    hostgroups: computers, buildd, squeeze
  rossini:
    address: 206.12.19.19
    parents: tchaikovsky
    hostgroups: computers, dl585, acpid-hosts, service, squeeze, apache2-hosts
  salieri:
    address: 206.12.19.20
    parents: tchaikovsky
    hostgroups: computers, dl585, acpid-hosts, service, squeeze
  traetta:
    address: 206.12.19.21
    parents: tchaikovsky
    hostgroups: computers, dl585, acpid-hosts, service, squeeze
  schuetz:
    address: 206.12.19.119
    parents: tchaikovsky
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze
#  locke:
#    address: 206.12.19.120
#    parents: tchaikovsky
#    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
  lotti:
    address: 206.12.19.121
    parents: tchaikovsky
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs
  quantz:
    address: 206.12.19.122
    parents: salieri
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, postgres84-hosts, apache2-hosts, autofs
  nono:
    address: 206.12.19.123
    parents: salieri
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, heavy-exim, postgres84-hosts, xinetd-hosts, apache2-hosts, apache-https
  reger:
    address: 206.12.19.124
    parents: salieri
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, apache-https, heavy-exim
  danzi:
    address: 206.12.19.125
    parents: luchesi
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, postgres84-hosts, xinetd-hosts
  glinka:
    address: 206.12.19.126
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, xinetd-hosts, autofs
  dukas:
    address: 206.12.19.128
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs
  tye:
    address: 206.12.19.129
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs, hassrvfs
  elgar:
    address: 206.12.19.130
    parents: salieri
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs
  berlioz:
    address: 206.12.19.131
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs, apache-https
  gombert:
    address: 206.12.19.132
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, heavy-exim
  jenkins:
    address: 206.12.19.133
    parents: salieri
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze
  blavet:
    address: 206.12.19.134
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, xinetd-hosts, nfs-client, autofs
  barriere:
    address: 206.12.19.135
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs
  diabelli:
    address: 206.12.19.136
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts
  bizet:
    address: 206.12.19.137
    parents: traetta
    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts

  lebrun:
    address: 193.198.184.10
    parents: gw-carnet
    hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, squeeze
  schroeder:
    address: 193.198.184.11
    parents: gw-carnet
    hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, squeeze

  tartini:
    address: 82.94.249.158
    parents: gw-telegraaf
    hostgroups: computers, sw-raid, apache2-hosts, mysql-hosts, hasbootfs, hassrvfs, hasvarfs, hasusrfs, service, lenny

  piatti:
    address: 193.167.161.225
    parents: gw-helsinki
    hostgroups: computers, dl385, acpid-hosts, apache2-hosts, hasbootfs, incomingmailrelayed2025, hasorgfs, service, squeeze
    contacts: holger

  rem:
    address: 82.195.75.68
    parents: gw-man-da
    hostgroups: computers, buildd, hasbootfs, hashomefs, squeeze

  zelenka:
    address: 80.245.147.40
    parents: gw-zivit
    hostgroups: computers, porterbox, hassrvfs, squeeze
  zandonai:
    address: 80.245.147.46
    parents: gw-zivit
    hostgroups: computers, buildd, hassrvfs, squeeze

  goedel:
    address: 213.188.99.214
    parents: gw-cst
    hostgroups: computers, hasbootfs, ntpsuckers, buildd, lenny

  schein:
    address: 149.20.20.6
    parents: gw-isc
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze

  praetorius:
    address: 130.239.18.121
    parents: gw-aca
    hostgroups: computers, buildd, hassrvfs, squeeze
  pettersson:
    address: 130.239.18.123
    parents: gw-aca
    hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, squeeze, autofs

#  lafayette:
#    address: 147.215.7.160
#    parents: gw-esiee
#    hostgroups: computers, buildd, sw-raid, hassrvfs, hasbootfs

  grieg:
    address: 194.177.211.200
    parents: gw-grnet
    hostgroups: computers, apache2-hosts, acpid-hosts, megaraid, heavy-exim, postgres84-hosts, service, apache-https, squeeze
  rautavaara:
    address: 194.177.211.199
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, megaraid, service, squeeze
  fasch:
    address: 194.177.211.201
    parents: rautavaara
    hostgroups: computers, freebsd, squeeze, buildd, hassrvfs
    #, mptraid
  holter:
    address: 194.177.211.202
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, hassrvfs, apache2-hosts, mptraid, service, squeeze
  barber:
    address: 194.177.211.203
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, squeeze
  biber:
    address: 194.177.211.204
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, squeeze
  cilea:
    address: 194.177.211.205
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, mptraid, hassrvfs, service, squeeze
  vitry:
    address: 194.177.211.206
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, mptraid, buildd, squeeze
  krenek:
    address: 194.177.211.207
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, mptraid, buildd, squeeze
  scelsi:
    address: 194.177.211.208
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, mptraid, service, squeeze
  orff:
    address: 194.177.211.209
    parents: gw-grnet
    hostgroups: computers, acpid-hosts, bind9-hosts, mptraid, service, hassrvfs, apache2-hosts, squeeze
  field:
    address: 194.177.211.210
    parents: rautavaara
    hostgroups: computers, freebsd, squeeze, buildd, hassrvfs
    #, mptraid

  beethoven:
    address: 86.59.118.146
    parents: gw-sil
    hostgroups: computers, hasbootfs, aacraid, nfs-server, service, acpid-hosts, squeeze
  merikanto:
    address: 86.59.118.147
    parents: gw-sil
    hostgroups: computers, dl360, acpid-hosts, spamd, heavy-exim, nfs-client, rsyncd-hosts, xinetd-hosts, service, mail-relay, squeeze, autofs, apache2-hosts
  merikanto2:
    address: 86.59.118.150
    parents: merikanto
    hostgroups: secondary-IPs
  englund:
    address: 86.59.118.148
    parents: gw-sil
    hostgroups: computers, acpid-hosts, service, apache2-hosts, squeeze, hassrvfs, megactl
    # which raid?
  lindberg:
    address: 86.59.118.149
    parents: gw-sil
    hostgroups: computers, acpid-hosts, service, apache2-hosts, squeeze, megactl
    # which raid?
  eder:
    address: 86.59.118.151
    parents: gw-sil
    hostgroups: computers, porterbox, squeeze, hassrvfs
  eysler:
    address: 86.59.118.152
    parents: gw-sil
    hostgroups: computers, buildd, squeeze

  abel:
    address: 217.140.96.56
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, porterbox, squeeze
  arnold:
    address: 217.140.96.57
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze
  alain:
    address: 217.140.96.58
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze
  alwyn:
    address: 217.140.96.59
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze
  antheil:
    address: 217.140.96.60
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze
  arne:
    address: 217.140.96.61
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, squeeze
  harris:
    address: 217.140.96.66
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox
  hartmann:
    address: 217.140.96.67
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd
  hasse:
    address: 217.140.96.68
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd
  hebden:
    address: 217.140.96.69
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd
  henze:
    address: 217.140.96.70
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd
  hoiby:
    address: 217.140.96.71
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy

  poulenc:
    address: 144.32.168.77
    parents: gw-ynic
    hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze
  porpora:
    address: 144.32.168.78
    parents: gw-ynic
    hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze
  hildegard:
    address: 144.32.168.74
    parents: gw-ynic
    hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy
  howells:
    address: 144.32.168.75
    parents: gw-ynic
    hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy
  hummel:
    address: 144.32.168.76
    parents: gw-ynic
    hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy

  santoro:
    address: 200.17.202.197
    parents: gw-c3sl
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze
    contacts: faw

  zemlinsky:
    address: 129.143.160.6
    parents: gw-karlsruhe
    hostgroups: computers, buildd, hassrvfs, squeeze

  zappa:
    address: 148.100.96.103
    parents: gw-marist
    hostgroups: computers, buildd, hassrvfs, squeeze, incomingmailrelayed

  sompek:
    address: 217.196.146.208
    parents: gw-conova
    hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc
  stadler:
    address: 217.196.146.209
    parents: gw-conova
    hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc

#############################
# host groups
#
# hostgroups ircd and all are automatically defined
#
#############################
hostgroups:
  computers:
    alias: computers
    private: 1
  routing-infrastructure:
    alias: Internet routers and friends
    extinfo-icon_image: base/switch40.png
    extinfo-icon_image_alt: router
  notacomputer:
    alias: Systems that are not really systems.  Yeah :)
    private: 1
  deadslow:
    alias: Systems too slow to run any real checks
  freebsd:
    alias: freebsd
    private: 1
  armhf:
    alias: armhf
    private: 1
  sparc:
    alias: sparc
    private: 1

  porterbox:
    alias: developer accessible porter machines
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  service:
    alias: machines running services
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  buildd:
    alias: buildd systems
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  general:
    alias: general purpose developer accessible machines
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s

  dl380:
    alias: HP DL380 hosts
    private: 1
  dl385:
    alias: HP DL385 hosts
    private: 1
  dl360:
    alias: HP DL360 hosts
    private: 1
  bl460:
    alias: HP BL460 blades
    private: 1
  dl585:
    alias: HP DL385 hosts
    private: 1
  sw-raid:
    alias: Hosts with Linux software raid
    private: 1
  aacraid:
    alias: Hosts with Adaptec AACraid
    private: 1
  megactl:
    alias: Hosts with LSI Logic MegaRAID, but not usable with megaraid check
    private: 1
  megaraid:
    alias: Hosts with LSI Logic MegaRAID
    private: 1
  mptraid:
    alias: Hosts with LSI Logic Fusion-MPT
    private: 1

  squeeze:
    alias: Hosts running squeeze
  wheezy:
    alias: Hosts running wheezy

  lenny:
    alias: Hosts running lenny

  kvmdomains:
    alias: Hosts that are KVM domains
    private: 1

  postfix-hosts:
    alias: hosts running postfix instead of exim
    private: 1
  heavy-exim:
    alias: "hosts running the full mail stuff, including clamav and postgrey"
    private: 1
  mail-relay:
    alias: "relays usually are hosts with more exim processes"
    private: 1
  spamd:
    alias: "hosts running spamassassin as daemon"
    private: 1
  heavy-postfix:
    alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
    private: 1
  apache2-hosts:
    alias: hosts running apache2
    private: 1
  bind9-hosts:
    alias: hosts running bind9
    private: 1
  # once every host runs unbound, do away with this group and check "computers" instead
  unbound-hosts:
    alias: hosts running unbound
    private: 1
  amavis-hosts:
    alias: hosts running amavis
    private: 1
  ftpd-hosts:
    alias: hosts running vsftpd
    private: 1
  #tftpd-hosts:
  #  alias: hosts running a tftpd (tftpd-hpa as a daemon)
  #  private: 1
  rsyncd-hosts:
    alias: hosts providing rsync services via xinetd
    private: 1
  xinetd-hosts:
    alias: hosts providing services via xinetd
    private: 1
  #postgres81-hosts:
  #  alias: hosts running postgres81
  #  private: 1
  postgres83-hosts:
    alias: hosts running postgres83
    private: 1
  postgres84-hosts:
    alias: hosts running postgres84
    private: 1
  postgres90-hosts:
    alias: hosts running postgres90
    private: 1
  mysql-hosts:
    alias: hosts running mysql
    private: 1
  no-ulogd:
    alias: hosts not running ulogd
    private: 1
  acpid-hosts:
    alias: hosts running acpid
    private: 1
  uploadqueue:
    alias: hosts that are an anonymous ftp uploadqueue
    private: 1
  bosserver:
    alias: hosts running bosserver
    private: 1
  apache-https:
    alias: hosts with https services
    private: 1

  nfs-client:
    alias: hosts mounting filesystems using NFS
    private: 1
  nfs-server:
    alias: hosts serving filesystems using NFS
    private: 1
  autofs:
    alias: hosts running the automounter
    private: 1

  highload:
    alias: "hosts on which high load is normal"
    private: 1

  secondary-IPs:
    alias: secondary IP addresses
    private: 1

  hasbootfs:
    alias: hosts with a /boot filesystem
    private: 1
  hassrvfs:
    alias: hosts with a /srv filesystem
    private: 1
  hasorgfs:
    alias: hosts with a /org filesystem
    private: 1
  hashomefs:
    alias: hosts with a /home filesystem
    private: 1
  hasvarfs:
    alias: hosts with a /var filesystem
    private: 1
  hasusrfs:
    alias: hosts with a /usr filesystem
    private: 1
#  hasvicepa:
#    alias: hosts with a /vicepa
#    private: 1

  incomingmailrelayed:
    alias: incoming mail needs to go through a mail relay
    # i.e. no port 25
    private: 1
  incomingmailrelayed2025:
    alias: incoming mail needs to go through a mail relay
    # i.e. no port 25
    private: 1

  ntpsuckers:
    alias: "hosts who's ntp offset is often unknown"
    private: 1

  brokensamhain:
    alias: machines that can not run samhain
    private: 1

#############################
# servicegroups
#############################
servicegroups:
  diskspace:
    alias: diskusage checks
  buildd:
    alias: buildd checks
  raid:
    alias: raid checks
  kernel:
    alias: kernel checks
  weaksshkeys:
    alias: weak ssh keys
  apt:
    alias: apt upgrade status
  samhain:
    alias: samhain integrity status
  security:
    alias: security
    servicegroup_members: apt, weaksshkeys, kernel, samhain

#############################
# services
#############################
services:
  -
    name: PING
    check: "check_ping!300.0,20%!600.0,40%"
    hostgroups: pingable
    excludehostgroups: routing-infrastructure
    normal_check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  -
    name: PING
    check: "check_ping!2000.0,60%!3000.0,80%"
    hostgroups: routing-infrastructure
    normal_check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1

 ############ Services ############
 ###

 ############ Disk Usage ############
 ####
  -
    name: disk usage - all
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 90 95"
    hostgroups: computers
    excludehosts: sibelius
  -
    name: disk usage - all
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98"
    hosts: sibelius

  -
    name: disk usage on /
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /"
    hostgroups: computers
    excludehosts: kassia, spohr, liszt
  -
    name: disk usage on /
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 93 /"
    hosts: kassia, spohr, liszt
  -
    name: disk usage on /boot
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
    hostgroups: hasbootfs
  -
    name: disk usage on /var
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
    hostgroups: hasvarfs
  -
    name: disk usage on /org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
    hostgroups: hasorgfs
  -
    name: disk usage on /srv
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv"
    hostgroups: hassrvfs
    excludehosts: ries
  -
    name: disk usage on /srv
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
    hosts: ries
  -
    name: disk usage on /tmp
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
    hosts: saens, tartini, powell, piatti
  -
    name: disk usage on /usr
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
    hostgroups: hasusrfs
  -
    name: disk usage on /home
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home"
    hostgroups: hashomefs
  -
    name: disk usage on /x
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /x"
    hosts: caballero
  -
    name: disk usage on /var/lib/postgresql
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
    hosts: samosa, stabile, sibelius, busoni

  -
    name: disk usage on /var/log
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
    hosts: busoni, wieck, heininen

  #-
  #  name: disk usage on /srv/morgue.debian.org
  #  servicegroups: diskspace
  #  nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org"
  #  hosts: stabile
  -
    name: disk usage on /srv/mirrors
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/mirrors"
    hosts: beethoven, sibelius
  -
    name: disk usage on /srv/snapshot.debian.org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
    hosts: stabile,sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-01
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-01"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-23
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-23"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-45
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-45"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-67
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-67"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-89
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-89"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-ab
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-ab"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-cd
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-cd"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-f
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 85 /srv/farm-snapshot/farm-f"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-e
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 85 /srv/farm-snapshot/farm-e"
    hosts: sibelius
  -
    name: disk usage on /srv/fossology.debian.net
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/fossology.debian.net"
    hosts: vivaldi
#  -
#    name: disk usage on /vicepa
#    servicegroups: diskspace
#    nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /vicepa"
#    hostgroups: hasvicepa
  -
    name: disk usage on /var/lib/postgresql/9.0/dak
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.0/dak"
    hosts: franck
  -
    name: disk usage on /srv/ftp-master.debian.org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
    hosts: franck
  -
    name: disk usage on /srv/pgbackup
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /srv/pgbackup"
    hosts: franck

 ############ All Computers ############
 ####
  -
    name: apt - security updates
    servicegroups: apt
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
    hostgroups: computers
    excludehostgroups: wheezy
    normal_check_interval:  60
    retry_check_interval: 15
 ####
  -
    name: backup
    nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
    hostgroups: computers
    normal_check_interval: 60
    max_check_attempts: 2
    retry_check_interval: 5
  -
    name: backup server config
    nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
    hosts: beethoven
    normal_check_interval: 60
    max_check_attempts: 2
    retry_check_interval: 5

 ####
  -
    name: running kernel
    servicegroups: kernel
    nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
    hostgroups: computers
    normal_check_interval: 60
    retry_check_interval: 5

 ####
#  - name: afs - space
#    hostgroups: bosserver
#    nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-space -H localhost"
#    normal_check_interval: 60
#    max_check_attempts: 2
#    retry_check_interval: 5
#
#  - name: afs - bos
#    hostgroups: bosserver
#    nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-bos -H localhost"
#    normal_check_interval: 60
#    max_check_attempts: 2
#    retry_check_interval: 5
#
#  - name: afs - waiting connections
#    hostgroups: bosserver
#    nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-rxdebug -H localhost"
#    normal_check_interval: 60
#    max_check_attempts: 2
#    retry_check_interval: 5
#
  #- name: afs - udebug
  #  hostgroups: bosserver
  #  nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-udebug -H localhost"
  #  normal_check_interval: 60
  #  max_check_attempts: 2
  #  retry_check_interval: 5

 ####
  -
    name: puppet
    nrpe: "/usr/lib/nagios/plugins/dsa-check-file_age -i 540 -f /var/lib/puppet/state/state.yaml"
    hostgroups: computers
    excludehosts: wagner, vasks

 ####
  -
    name: installed firewall
    nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
    hostgroups: computers
    excludehostgroups: freebsd
    excludehosts: vasks, wagner
  -
    name: puppetized firewall
    nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
    hostgroups: computers
    excludehostgroups: freebsd
    excludehosts: vasks, wagner

 ####
  -
    name: process - samhain
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
    hostgroups: computers
    excludehostgroups: brokensamhain
  -
    name: samhain
    servicegroups: samhain
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
    hostgroups: computers
    depends: process - samhain
    normal_check_interval: 60
    retry_check_interval: 5
    excludehostgroups: brokensamhain

 ####
  -
    name: users
    nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
    hostgroups: computers
 ####
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
    hostgroups: computers
    excludehostgroups: highload
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
    hostgroups: highload
 ####
  -
    name: uptime check
    nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
    hostgroups: computers
 ####
  -
    name: processes - zombies
    nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
    hostgroups: computers
 ####
  -
    name: processes - total
    nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
    hostgroups: computers
    excludehosts: liszt
  -
    name: processes - total
    nrpe: "/usr/lib/nagios/plugins/check_procs 800 1000"
    hosts: liszt
 ####
  -
    name: swap usage - percent
    nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
    hostgroups: computers
 ####
  -
    name: swap usage - mb
    nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
    hostgroups: computers
 ####
  -
    name: process - getty
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
    hostgroups: computers
    excludehosts: zelenka, zandonai
 ####
  -
    name: process - sshd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
    hostgroups: computers
  -
    name: "network service - sshd"
    check: dsa_check_ssh
    hostgroups: computers
    depends: process - sshd
    normal_check_interval:  60
    notification_interval: 1440

  -
    name: "network service - sshd - 2260"
    check: dsa_check_ssh_port!2260
    hosts: agnesi
    normal_check_interval:  180

  -
    name: ssh - weak keys
    servicegroups: weaksshkeys
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/weak-ssh-keys"
    hostgroups: computers
    excludehosts: wagner, vasks
    normal_check_interval:  60
 ####
  -
    name: network service - nrpe
    check: check_tcp!5666
    hostgroups: computers
    max_check_attempts: -2
    notification_interval: 1440
  -
    name: process - nrpe
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
    hostgroups: computers
    max_check_attempts: -1
    depends: network service - nrpe
 ###
  -
    name: process - munin-node
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
    hostgroups: computers
    excludehostgroups: freebsd, armhf
    excludehosts: vasks, wagner
  -
    name: process - munin-node
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
    hostgroups: freebsd
  -
    name: process - munin-node
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin -a '/usr/sbin/munin-node'"
    hostgroups: armhf
  -
    name: network service - munin-node
    check: check_tcp!4949
    hostgroups: computers
    depends: process - munin-node
    excludehosts: vasks, wagner
 ###
  -
    name: process - ntpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
    hostgroups: computers
  -
    name: network service - ntp
    check: dsa_check_ntp
    hostgroups: computers
    depends: process - ntpd
    excludehosts: ancina
    excludehostgroups: ntpsuckers
  #
  -
    name: network service - time
    check: dsa_check_time
    hosts: ancina
    depends: process - xinetd

 ###
  -
    name: process - atd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
    hostgroups: computers
 ###
  -
    name: process - cron
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C cron -a /usr/sbin/cron"
    hostgroups: computers

 ###
  -
    name: process - syslog-ng
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
    hostgroups: computers
    excludehostgroups: freebsd
    excludehosts: vasks, wagner

  -
    name: process - syslog-ng
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
    hostgroups: freebsd

  -
    name: remote logging
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
    runfrom: heininen
    hostgroups: computers
    excludehosts: vasks, wagner
 ### MAIL STUFF
 ###
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
    hostgroups: computers
    excludehostgroups: postfix-hosts, mail-relay
    excludehosts: master, busoni, quantz
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
    hostgroups: mail-relay
  -
    name: process - exim - total
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
    hostgroups: computers
    excludehostgroups: postfix-hosts
    excludehosts: master, busoni, quantz
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
    hosts: master, busoni, quantz
  -
    name: mail queue
    nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
    hostgroups: heavy-exim
 ###
  -
    name: process - clamav - clamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
    hostgroups: heavy-exim, heavy-postfix
    hosts: wagner
  -
    name: service - clamav
    nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
    hostgroups: heavy-exim, heavy-postfix
    hosts: wagner
    depends: process - clamav - clamd
  -
    name: process - clamav - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
    hosts: wagner
    hostgroups: heavy-exim, heavy-postfix
  -
    name: unwanted process - clamav
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
    excludehosts: wagner
  -
    name: unwanted process - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
    excludehosts: wagner
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
    hostgroups: spamd
    excludehosts: powell, wagner
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
    hosts: powell, wagner
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
    hosts: liszt
  -
    name: process - spamd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
    hosts: liszt, wagner
    hostgroups: spamd
    depends: process - spamd - master
  #
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
    hosts: busoni
  -
    name: process - spamd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
    hosts: busoni
  #
  -
    name: unwanted process - spamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
    hostgroups: computers
    excludehostgroups: spamd
    excludehosts: liszt, busoni, wagner

 ###
  #-
  #  name: process - greylistd
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u greylist -C greylistd -a '/usr/bin/python /usr/sbin/greylistd'"
  #  hostgroups: heavy-exim
  #
  -
    name: unwanted process - greylistd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
    hostgroups: computers

 ###
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
    hostgroups: heavy-exim
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
    hostgroups: heavy-postfix
  #
  -
    name: unwanted process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
    hostgroups: computers
    excludehostgroups: heavy-postfix, heavy-exim
 ###
  -
    name: process - amavis - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'"
    hostgroups: amavis-hosts
  -
    name: process - amavis - all
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '"
    hostgroups: amavis-hosts
    depends: process - amavis - master
  #
  -
    name: unwanted process - amavis
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
    hostgroups: computers
    excludehostgroups: amavis-hosts
 ###
  -
    name: process - weightd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'"
    hostgroups: heavy-postfix
  -
    name: process - weightd - cache
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'"
    hostgroups: heavy-postfix
    depends: process - weightd - master
  -
    name: process - weightd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'"
    hostgroups: heavy-postfix
    depends: process - weightd - master
  #
  -
    name: unwanted process - policyd-weight
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
    hostgroups: computers
    excludehostgroups: heavy-postfix



 ###
  -
    name: process - postfix - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
    hostgroups: postfix-hosts
  -
    name: process - postfix - qmgr
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  #-
  #  name: process - postfix - tlsmgr
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C tlsmgr -a 'tlsmgr -l -t fifo -u'"
  #  hostgroups: postfix-hosts
  #  depends: process - postfix - master
  -
    name: process - postfix - pickup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - anvil
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master

  -
    name: process - postfix - trivial-rewrite
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - proxymap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - cleanup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - local
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
    hostgroups: postfix-hosts
    depends: process - postfix - master

  -
    name: process - postfix - smtpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:150 -c 0:200 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'"
    hosts: liszt
    depends: process - postfix - master
  -
    name: process - postfix - smtp
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:350 -c 0:500 -u postfix -C smtp -a 'smtp -t unix -u -c'"
    hosts: liszt
    depends: process - postfix - master

 ###
  -
    name: network service - smtp
    check: dsa_check_smtp
    hostgroups: computers
    excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
    depends: process - exim

  -
    name: network service - smtp
    check: dsa_check_smtp
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: network service - submission
    check: dsa_check_smtp_port!587
    hostgroups: incomingmailrelayed
    depends: process - exim
  -
    name: network service - smtp 2025
    check: dsa_check_smtp_port!2025
    hostgroups: incomingmailrelayed2025
    depends: process - exim
  -
    name: network service local - smtps cert
    nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
    hostgroups: postfix-hosts
    depends: process - postfix - master
    normal_check_interval: 120

  -
    name: setup - dsa config
    nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
    hostgroups: computers
    excludehosts: wagner, vasks
    normal_check_interval: 60
  -
    name: setup - ud-ldap freshness
    nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness"
    excludehosts: wagner, vasks
    hostgroups: computers
  -
    name: system - available entropy
    nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
    event_handler: dsa_event_handler_restart_ekey
    hostgroups: computers
    excludehosts: vasks, wagner
    excludehostgroups: freebsd
 ###
  -
    name: local resolver
    nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
    hostgroups: computers
    excludehosts: vasks, wagner
    normal_check_interval: 60
  -
    name: process - unbound
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
    excludehosts: vasks, wagner
    hostgroups: unbound-hosts, squeeze, wheezy
 ###
  -
    name: process - uptimed
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
    hostgroups: computers
    excludehosts: vasks, wagner
 ###
  -
    name: unwanted process - irqbalance
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
    hostgroups: computers

 ####
 ###
  #-
  #  name: unwanted process - system-tools-backends
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C system-tools-ba"
  #  hostgroups: computers
  #-
  #  name: unwanted process - dbus-daemon
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C dbus-daemon"
  #  hostgroups: computers
  -
    name: unwanted process - gkrellmd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
    hostgroups: computers
  -
    name: unwanted process - portmap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C portmap"
    hostgroups: computers
    excludehostgroups: nfs-client, nfs-server
  -
    name: unwanted process - rpc.statd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
    hostgroups: computers
    excludehostgroups: nfs-client, nfs-server
  -
    name: unwanted process - inetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
    hostgroups: computers
    excludehosts: grieg, byrd, abel, alwyn, vasks
  -
    name: unwanted process - snmpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
    hostgroups: computers

 ####
  -
    name: "host SSL cert"
    nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
    hostgroups: computers

 ############ Processes/Services that only run on some computers ############
 ####
 ###
  -
    name: process - rngd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
    hostgroups: dl385
 ###
  -
    name: process - mdadm monitor
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
    hostgroups: sw-raid
  -
    name: RAID - sw raid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
    hostgroups: sw-raid

 ###
  -
    name: process - monit
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
    hostgroups: computers
    excludehosts: vasks, wagner
    excludehostgroups: armhf
  -
    name: process - monit
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
    hostgroups: armhf
  -
    name: RAID - arrayprobe
    servicegroups: raid
    nrpe: "sudo /usr/bin/arrayprobe"
    hostgroups: dl385, dl380, dl360, bl460, dl585
    excludehosts: franck
  -
    name: RAID - arrayprobe
    servicegroups: raid
    nrpe: "sudo /usr/bin/arrayprobe -f /dev/cciss/c1d0"
    hosts: franck
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
    normal_check_interval: 120
    hostgroups: dl385, dl380, dl360, bl460
    excludehosts: kassia
  -
    name: HW - hpacucli enclosure status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
    normal_check_interval: 120
    hosts: franck
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
    normal_check_interval: 120
    hostgroups: dl585
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:2 --ignore-transfer-speed=1I:1:3 --ignore-transfer-speed=1I:1:4 --ignore-transfer-speed=2I:1:5 --ignore-transfer-speed=2I:1:6"
    normal_check_interval: 120
    hosts: kassia
 ###
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
    normal_check_interval: 120
    hostgroups: dl385, dl380, dl360, bl460, dl585
    excludehosts: villa, lobos, liszt, senfl, schein, rore
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
    normal_check_interval: 120
    hosts: villa, lobos, liszt
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
    normal_check_interval: 120
    hosts: senfl, schein
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant --fan-high"
    normal_check_interval: 120
    hosts: rore
 ###
  -
    name: RAID - areca
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-areca"
    hosts: powell
 ###
  -
    name: RAID - aacraid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
    hostgroups: aacraid
 ###
  -
    name: RAID - megaraid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
    hostgroups: megaraid
 ###
  #-
  #  name: RAID - 3ware
  #  servicegroups: raid
  #  nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
  #  hosts: puccini
 ###
  -
    name: RAID - MPT
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt"
    hostgroups: mptraid

 ###
  -
    name: RAID - megactl
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megactl"
    hostgroups: megactl
 ###
  -
    name: process - slapd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
    hosts: draghi
  -
    name: network service - ldaps cert
    check: dsa_check_cert!636
    depends: process - slapd
    normal_check_interval: 60
    hosts: draghi
 ###
  -
    name: process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
    hostgroups: computers
    excludehostgroups: freebsd, sparc
    excludehosts: vasks, wagner
  -
    name: unexpected process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
    hostgroups: freebsd, sparc

 ###
  -
    name: process - udevd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
    hostgroups: computers
    excludehostgroups: freebsd
  -
    name: unexpected process - udev
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
    hostgroups: freebsd
 ###
  -
    name: process - acpid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
    hostgroups: acpid-hosts
  -
    name: unexpected process - acpid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
    hostgroups: computers
    excludehostgroups: acpid-hosts, kvmdomains
 ###
#  -
#    name: process - bosserver
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C bosserver -a '/usr/sbin/bosserver'"
#    hostgroups: bosserver
#
 ###
  -
    name: process - inetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C inetd -a '/usr/sbin/inetd'"
    hosts: grieg, byrd, vasks
 ###
  -
    name: process - xinetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
    hostgroups: xinetd-hosts
  -
    name: unwanted process - xinetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
    hostgroups: computers
    excludehostgroups: xinetd-hosts
 ###
  -
    name: network service - finger
    check: check_tcp!79
    hosts: draghi
    depends: process - xinetd
 ###
  -
    name: network service - rsync
    check: check_tcp!873
    hostgroups: rsyncd-hosts
    depends: process - xinetd
    excludehosts: merikanto, rietz
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: rietz2
    depends: rietz:process - xinetd
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: merikanto2
    depends: merikanto:process - xinetd
  #-
  #  name: network service - rsync
  #  check: check_tcp!873
  #  hosts: kassia-sec
  #  depends: kassia:process - xinetd
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: merikanto2
    depends: merikanto:process - xinetd

 ###
  -
    name: process - nagios3
    # there is always one extra process per check currently running..
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C nagios3 -a '/usr/sbin/nagios3 -d /etc/nagios3/nagios.cfg'"
    hosts: tchaikovsky

 ###
  -
    name: process - apache2 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache2 -a /usr/sbin/apache2"
    hostgroups: apache2-hosts
  -
    name: process - apache2 - worker
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -C apache2 -a /usr/sbin/apache2"
    hostgroups: apache2-hosts
    depends: process - apache2 - master
  -
    name: unwanted process - apache2
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
    hostgroups: computers
    excludehostgroups: apache2-hosts

  -
    name: network service - http
    check: check_http
    hostgroups: apache2-hosts
    excludehosts: klecker
    depends: process - apache2 - master
  -
    name: network service - http
    check: check_http
    depends: klecker:process - apache2 - master
    hosts: klecker-ftp

  # keyserver on kaufmann
  -
    name: network service - http keyserver
    check: dsa_check_http_port!11371
    hosts: kaufmann
    depends: process - apache2 - master

  # https on various hosts
  -
    name: network service - https
    check: check_https
    hostgroups: apache-https
    depends: "process - apache2 - master"
    normal_check_interval: 120
  -
    name: network service - https cert
    check: dsa_check_cert!443
    hostgroups: apache-https
    depends: network service - https
    normal_check_interval: 60
  -
    name: unwanted network service - https
    check: dsa_check_port_closed!443
    hostgroups: apache2-hosts
    excludehostgroups: apache-https
    # ravel does ssh on port 443
    excludehosts: ravel
    normal_check_interval: 60

 ####
  -
    name: process - named
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
    hostgroups: bind9-hosts
  -
    name: network service - dns
    check: check_dns
    hostgroups: bind9-hosts
    depends: process - named
  -
    name: unwanted process - named
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
    hostgroups: computers
    excludehostgroups: bind9-hosts

 ####
  -
    name: process - vsftp - listener
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C vsftpd -a 'vsftpd: LISTENER'"
    hostgroups: ftpd-hosts, uploadqueue
    excludehosts: klecker
  -
    name: process - vsftp - instance
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:80 -c 0:100 -u ftp -C vsftpd -a 'vsftpd: '"
    hostgroups: ftpd-hosts, uploadqueue
    excludehosts: klecker
  -
    name: network service - ftp
    check: check_ftp
    hostgroups: ftpd-hosts, uploadqueue
    excludehosts: klecker
    depends: process - vsftp - listener
  -
    name: network service - ftp
    check: check_ftp
    hosts: klecker-ftp
    depends: klecker:process - xinetd

 ####
  -
    name: process - debianqueued
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak -C debianqueued"
    hostgroups: uploadqueue

 ###
  #-
  #  name: process - postresql81 - master
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a '/usr/lib/postgresql/8.1/bin/postmaster -D /var/lib/postgresql/8.1/main -c config_file=/etc/postgresql/8.1/main/postgresql.conf'"
  #  hostgroups: postgres81-hosts
  #-
  #  name: process - postresql81 - writer
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: writer process'"
  #  hostgroups: postgres81-hosts
  #  depends: process - postresql81 - master
  #-
  #  name: process - postresql81 - buffer
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats buffer process'"
  #  hostgroups: postgres81-hosts
  #  depends: process - postresql81 - master
  #-
  #  name: process - postresql81 - collector
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats collector process'"
  #  hostgroups: postgres81-hosts
  #  depends: process - postresql81 - master
 ####
  -
    name: unwanted process - postresql
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
    hostgroups: computers
    excludehostgroups: postgres90-hosts, postgres84-hosts, postgres83-hosts
  -
    name: process - postresql90 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.0/bin/postgres'"
    hostgroups: postgres90-hosts
  -
    name: process - postresql84 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'"
    hostgroups: postgres84-hosts
  -
    name: process - postresql83 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres'"
    hostgroups: postgres83-hosts
  #-
  #  name: process - postresql83 - master udd
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/udd -c config_file=/etc/postgresql/8.3/udd/postgresql.conf'"
  #  hosts: piatti
  #-
  #  name: process - postresql83 - dak master
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak -c config_file=/etc/postgresql/8.3/dak/postgresql.conf'"
  #  hosts: chopin
  #-
  #  name: process - postresql84 - dak master
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres -D /var/lib/postgresql/8.4/dak -c config_file=/etc/postgresql/8.4/dak/postgresql.conf'"
  #  hosts: franck, chopin
  #-
  #  name: process - postresql84 - dak-dev master
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres -D /var/lib/postgresql/8.4/dak-dev -c config_file=/etc/postgresql/8.4/dak-dev/postgresql.conf'"
  #  hosts: franck
 # backups
  -
    name: postgresql backups
    nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
    hosts: beethoven
 ####
  -
    name: process - mysql - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C mysqld_safe -a '/bin/sh /usr/bin/mysqld_safe'"
    hostgroups: mysql-hosts
  -
    name: process - mysql - workers
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u mysql -C mysqld -a /usr/sbin/mysqld"
    hostgroups: mysql-hosts
    depends: process - mysql - master

 ####
  -
    name: process - stunnel4 - postgres-udd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd-server.conf'"
    hosts: samosa
  -
    name: udd stunnel - master cert
    nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 8080 -S -C 14 -t 45"
    hosts: samosa
 ####
 ####
  -
    name: process - stunnel4 - puppet-ekeyd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
    hostgroups: squeeze, wheezy
    excludehosts: fano, fasch, field, finzi
 ####
  -
    name: process - krb - kdc
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C kdc -a '/usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf'"
    hosts: schuetz, byrd
  -
    name: process - krb - iprop - slave
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ipropd-slave -a '/usr/sbin/ipropd-slave byrd.debian.org'"
    hosts: schuetz
  -
    name: process - krb - iprop - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ipropd-master -a '/usr/sbin/ipropd-master'"
    hosts: byrd
  -
    name: process - krb - kpasswdd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C kpasswdd -a '/usr/lib/heimdal-servers/kpasswdd'"
    hosts: byrd
 ###
  -
    name: process - UPS - nut usbhid-ups - ups1
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
    hosts: franck
  -
    name: process - UPS - nut upsd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
    hosts: franck
  -
    name: process - UPS - nut upsmon master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
    hosts: franck
  -
    name: process - UPS - nut upsmon worker
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
    hosts: franck
    depends: process - UPS - nut upsmon master
  -
    name: UPS - on line power
    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
    hosts: franck
    depends: process - UPS - nut upsd
  -
    name: process - pglistener
    nrpe: "/usr/lib/nagios/plugins/check_procs -u pglisten -C python -a '/usr/bin/python /usr/share/pglistener/starter.py /etc/pglistener/pglistener.cfg /etc/pglistener/conf.d' -w 1: -c 1:"
    hosts: wagner, vasks

 ####
  #-
  #  name: process - xenconsoled
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenconsoled -a 'xenconsoled'"
  #  hosts: piatti
  #-
  #  name: process - xenstored
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenstored -a '/usr/lib/xen-3.0.3-1/bin/xenstored --pid-file /var/run/xenstore.pid'"
  #  hosts: piatti
  #-
  #  name: process - xend
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C python -a 'python /usr/lib/xen-3.0.3-1/bin/xend start'"
  #  hosts: piatti
#
 ####
  -
    name: process - libvirtd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C libvirtd -a '/usr/sbin/libvirtd -d'"
    hosts: unger

 ###
  -
    name: process - buildd
    servicegroups: buildd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
    hosts: fano, fasch, field, finzi
    contact_groups: buildd
  -
    name: process - buildd
    servicegroups: buildd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
    hostgroups: buildd
    excludehosts: fano, fasch, field, finzi
    contact_groups: buildd
 ####
  -
    name: network service - gobby
    check: check_tcp!6523
    hosts: gombert
    contact_groups: gobby

 ###
  #-
  #  name: process - tftpd
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'"
  #  hostgroups: tftpd-hosts
 ###
#  -
#    name: process - dhcpd
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C dhcpd3 -a '/usr/sbin/dhcpd3 -q eth0'"
#    hosts: paer
 ###

 ############ NFS Stuff ############
 ####
  -
    name: process - portmap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C portmap -a '/sbin/portmap'"
    hostgroups: nfs-client, nfs-server
  -
    name: process - statd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
    hostgroups: nfs-client, nfs-server
  -
    name: process - nfsd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
    hostgroups: nfs-server
  -
    name: process - lockd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
    hostgroups: nfs-server
  -
    name: process - mountd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
    hostgroups: nfs-server
 # see if the nfs stuff works and doesn't hang.
  # the df check all script will also hang, but we don't appear to pay attention to that
  -
    name: nfs mount ftp archive
    nrpe: "/usr/lib/nagios/plugins/check_disk 100 100 /srv/ftp.debian.org/ftp"
    hosts: bellini

  -
    name: nfs server stabile reachable
    nrpe: "/usr/lib/nagios/plugins/check_ping -H 192.168.2.13 -w 50,10% -c 200,30%"
    hosts: quantz
  #
  -
    name: process - automount
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
    hostgroups: autofs
  -
    name: unwanted process - automount
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
    hostgroups: computers
    excludehostgroups: autofs

 ############ MISC OTHER Stuff ############
 #####
  -
    name: mirror sync - bugs
    check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
    hosts: global
  -
    name: mirror sync - security
    check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
    hosts: global
  -
    name: mirror sync - volatile
    check: "dsa_check_mirrorsync_skew!volatile.debian.org!debian-volatile/project/trace/volatile-master.debian.org!150:3600"
    hosts: global
  -
    name: mirror sync - packages
    check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
    hosts: global
    normal_check_interval: 15
    max_check_attempts: 5
    retry_check_interval: 5
  -
    name: mirror sync - snapshot
    check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
    hosts: global
    normal_check_interval: 15
    max_check_attempts: 5
    retry_check_interval: 5
  -
    name: DNS SOA sync - debian.org
    check: "dsa_check_soas_add!draghi.debian.org!debian.org"
    hosts: global
  -
    name: DNS SOA sync - debian.net
    check: "dsa_check_soas_add!draghi.debian.org!debian.net"
    hosts: global
  -
    name: DNS SOA sync - debian.com
    check: "dsa_check_soas_add!draghi.debian.org!debian.com"
    hosts: global
  -
    name: DNS SOA sync - mirror.debian.net
    check: "dsa_check_soas_add!draghi.debian.org!mirror.debian.net"
    hosts: global
  -
    name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
    check: "dsa_check_soas_add!draghi.debian.org!144-28.118.59.86.in-addr.arpa"
    hosts: global
  -
    name: DNS SOA sync - alioth.debian.org
    check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org"
    hosts: global
  -
    name: DNS SOA sync - 2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa
    check: "dsa_check_soas!2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
    hosts: global
  -
    name: DNS SOA sync - a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa
    check: "dsa_check_soas!a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
    hosts: global
  -
    name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa
    check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
    hosts: global
  -
    name: DNS SEC - signature expiry
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/geo/zones /srv/dns.debian.org/var/gitdns/domains"
    runfrom: orff
  -
    name: DNS SEC - delegations
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/var/gitdns/domains --dir /srv/dns.debian.org/geo/zones check-header"
    runfrom: orff

 ############
  -
    name: ping alive check
    remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
    runfrom: dijkstra
    hosts: giustini
    normal_check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  -
    name: Overall Unit Status
    remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
    runfrom: dijkstra
    hosts: giustini
  -
    name: event log
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=2041 $HOSTADDRESS$ public"
    runfrom: dijkstra
    hosts: giustini