# Non comment lines are YAML
#
# Strings ought to be in double quotes, but it works in most cases if they aren't :)
#
# vim:set syntax=yaml:

# TODO
#  - *: check munin stats collection works
#  - *: check backups are successful
#  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)

---
#############################
# hosts
#############################
servers:
  # {{{ gateways
  global:
    hostgroups: notacomputer
    pingable: false
    check_command: dsa_check_always_ok
  gw-1und1:
    parents: gw-ubcece
    hostgroups: notacomputer
    pingable: false
    check_command: dsa_check_always_ok
  gw-1und1-sec:
    parents: gw-ubcece
    hostgroups: notacomputer
    pingable: false
    check_command: dsa_check_always_ok
  gw-accumu:
    address: 130.239.18.97
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-aql:
    address: 141.170.2.17
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-bytemark:
    address: 89.16.160.116
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-c3sl:
    address: 200.17.202.254
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-cecsit:
    address: 150.203.164.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-arm:
    address: 213.104.121.213
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-brown:
    address: 138.16.160.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-carnet:
    address: 161.53.160.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-conova:
    address: 217.196.149.238
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-csail:
    address: 128.31.0.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-dgi:
    address: 93.94.131.13
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-freenet:
    address: 62.104.23.249
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-gatech:
    address: 128.61.240.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-grnet:
    address: 194.177.211.193
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-isc:
    address: 149.20.20.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-karlsruhe:
    address: 129.143.57.177
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-leaseweb:
    address: 185.17.185.190
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-linaro:
    address: 64.28.108.36
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-man-da:
    address: 82.195.75.126
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-marist:
    address: 148.100.88.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-osuosl:
    address: 140.211.166.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-rapidswitch:
    address: 193.201.200.129
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-sakura:
    address: 133.242.99.65
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-sanger:
    address: 193.62.202.20
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
    contacts: tjrc1, dave
  gw-scanplus-lobos:
    address: 212.211.132.249
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-scanplus-villa:
    address: 212.211.132.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-sil:
    address: 86.59.118.145
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-ubcece:
    address: 206.12.19.254
    hostgroups: layer3-infrastructure
    contacts: lfilipoz
  gw-umn:
    address: 128.101.240.222
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-unicamp:
    address: 177.220.10.129
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-utwente:
    address: 130.89.149.1
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-ynic:
    # really janet, because ynic is stupid about firewalling
    address: 146.97.71.46
    parents: gw-ubcece
    hostgroups: layer3-infrastructure
  gw-zivit:
    parents: gw-ubcece
    hostgroups: notacomputer
    pingable: false
    check_command: dsa_check_always_ok
  # }}}
  # {{{ servers
  # {{{ gw-1und1
  powell:
    address: 87.106.64.223
    parents: gw-1und1
    hostgroups: computers, service, jessie
  pkgmirror-1and1:
    address: 213.165.95.4
    parents: powell
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, no-bacula, apache-https
  babin:
    address: 213.165.95.6
    parents: powell
    hostgroups: computers, buildd, hassrvfs, kvmdomains, jessie
  piu-slave-1und1-01:
    address: 213.165.95.7
    parents: powell
    hostgroups: computers, service, kvmdomains, jessie
    contacts: holger
  # }}}
  # {{{ gw-1und1-sec
  schumann:
    address: 212.227.126.54
    parents: gw-1und1-sec
    hostgroups: computers, service, jessie
  wieck:
    address: 195.20.242.89
    parents: gw-1und1-sec
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, jessie, security_mirror, hasvarlogfs, no-bacula
  # }}}
  # {{{ gw-accumu
  pettersson:
    address: 130.239.18.123
    parents: gw-accumu
    hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, jessie, autofs, sw-raid
  praetorius:
    address: 130.239.18.121
    parents: gw-accumu
    hostgroups: computers, buildd, hassrvfs, jessie
  # }}}
  # {{{ gw-aql
  etler:
    address: 141.170.6.156
    parents: gw-aql
    hostgroups: computers, porterbox, jessie, hassrvfs, hasbootfs, sw-raid
  mips-aql-01:
    address: 141.170.6.149
    parents: gw-aql
    hostgroups: computers, buildd, jessie, nfs-client
  mips-aql-02:
    address: 141.170.6.150
    parents: gw-aql
    hostgroups: computers, buildd, jessie, nfs-client
  mips-aql-04:
    address: 141.170.6.154
    parents: gw-aql
    hostgroups: computers, buildd, jessie, nfs-client
  mips-aql-05:
    address: 141.170.6.155
    parents: gw-aql
    hostgroups: computers, buildd, jessie, nfs-client
  mips-aql-06:
    address: 141.170.6.157
    parents: gw-aql
    hostgroups: computers, buildd, jessie, hassrvfs
  minkus:
    address: 141.170.6.151
    parents: gw-aql
    hostgroups: computers, porterbox, jessie, nfs-client
  mipsel-aql-01:
    address: 141.170.6.152
    parents: gw-aql
    hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
  mipsel-aql-02:
    address: 141.170.6.153
    parents: gw-aql
    hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
  # }}}
  # {{{ gw-arm
  abel:
    address: 217.140.96.56
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, porterbox, jessie, broken_mq
  arnold:
    address: 217.140.96.57
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
  arm-arm-01:
    address: 217.140.96.58
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
  arm-arm-02:
    address: 217.140.96.59
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
  arm-arm-03:
    address: 217.140.96.60
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
  harris:
    address: 217.140.96.66
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, jessie, armhf, porterbox, broken_mq
  hartmann:
    address: 217.140.96.67
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, jessie, armhf, buildd, broken_mq
  hoiby:
    address: 217.140.96.71
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, armhf, jessie, buildd, broken_mq
  ia64-arm-01:
    address: 217.140.96.61
    parents: gw-arm
    hostgroups: computers, hasbootfs, hassrvfs, wheezy, buildd, broken_mq, sw-raid, acpid-hosts
  # }}}
  # {{{ gw-brown
  franck:
    address: 138.16.160.12
    parents: gw-brown
    hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres94-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, jessie
  # }}}
  # {{{ gw-bytemark
  bm-bl1:
    address: 5.153.231.241
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl2:
    address: 5.153.231.242
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl3:
    address: 5.153.231.243
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl4:
    address: 5.153.231.244
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl5:
    address: 5.153.231.245
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl6:
    address: 5.153.231.246
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl7:
    address: 5.153.231.247
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl8:
    address: 5.153.231.248
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl9:
    address: 5.153.231.249
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl10:
    address: 5.153.231.250
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl11:
    address: 5.153.231.251
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl12:
    address: 5.153.231.252
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl13:
    address: 5.153.231.253
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie
  bm-bl14:
    address: 5.153.231.254
    parents: gw-bytemark
    hostgroups: computers, bm-bl, service, jessie

  milanollo:
    address: 5.153.231.2
    parents: gw-bytemark
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-server, xinetd-hosts
  milanollo2:
    address: 5.153.231.9
    parents: milanollo
    hostgroups: secondary-IPs
  picconi:
    address: 5.153.231.3
    parents: gw-bytemark
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
  senfter:
    address: 5.153.231.4
    parents: gw-bytemark
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, no-bacula, apache-https
  adayevskaya:
    address: 5.153.231.5
    parents: gw-bytemark
    hostgroups: computers, service, kvmdomains, jessie
  pejacevic:
    address: 5.153.231.6
    parents: gw-bytemark
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, nfs-client, autofs, apache-https
    contacts: holger
  piu-slave-bm-a:
    address: 5.153.231.7
    parents: gw-bytemark
    hostgroups: computers, service, kvmdomains, jessie, nfs-client, autofs
    contacts: holger
  binet:
    address: 5.153.231.8
    parents: gw-bytemark
    hostgroups: computers, buildd, hassrvfs, kvmdomains, jessie
  bmdb1:
    address: 5.153.231.10
    parents: gw-bytemark
    hostgroups: computers, hassrvfs, kvmdomains, jessie, postgres94-hosts
  ganeti-bytemark:
    address: 82.195.75.111
    parents: gw-bytemark
    hostgroups: notacomputer
  coccia:
    address: 5.153.231.11
    parents: ganeti-bytemark
    hostgroups: computers, hassrvfs, kvmdomains, jessie, autofs, nfs-client, uploadqueue, xinetd-hosts, apache-https, apache2-hosts
  backuphost:
    address: 5.153.231.12
    parents: ganeti-bytemark
    hostgroups: computers, hassrvfs, kvmdomains, jessie
  philp:
    address: 5.153.231.13
    parents: ganeti-bytemark
    hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https
  rainier:
    address: 5.153.231.16
    parents: ganeti-bytemark
    hostgroups: computers, kvmdomains, jessie
  rapoport:
    address: 5.153.231.15
    parents: ganeti-bytemark
    hostgroups: computers, kvmdomains, jessie
  delfin:
    address: 5.153.231.17
    parents: ganeti-bytemark
    hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs
  wuiet:
    address: 5.153.231.18
    parents: ganeti-bytemark
    hostgroups: computers, general, kvmdomains, jessie, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
  dinis:
    address: 5.153.231.19
    parents: ganeti-bytemark
    hostgroups: computers, general, kvmdomains, jessie, hassrvfs
  donizetti:
    address: 5.153.231.20
    parents: ganeti-bytemark
    hostgroups: computers, general, kvmdomains, jessie, nfs-client, autofs
  moszumanska:
    address: 5.153.231.21
    parents: ganeti-bytemark
    contact_groups: alioth-admins
    hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
    no-servicegroups: true
  dillon:
    address: 5.153.231.22
    parents: ganeti-bytemark
    hostgroups: computers, general, kvmdomains, jessie, nfs-client, autofs, hassrvfs
  ticharich:
    address: 5.153.231.23
    parents: ganeti-bytemark
    hostgroups: computers, general, kvmdomains, jessie, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
  petrova:
    address: 5.153.231.25
    parents: ganeti-bytemark
    hostgroups: computers, kvmdomains, jessie, apache2-hosts, apache-https
  oyens:
    address: 5.153.231.26
    parents: ganeti-bytemark
    hostgroups: computers, kvmdomains, jessie, openstack-controller, broken_mq, apache2-hosts # apache-https
  barriere:
    address: 5.153.231.27
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, porterbox
  quantz:
    address: 5.153.231.28
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
  paradis:
    address: 5.153.231.30
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, apache-https
  x86-bm-01:
    address: 5.153.231.32
    parents: ganeti-bytemark
    hostgroups: computers, kvmdomains, jessie, no-bacula
  tate:
    address: 5.153.231.33
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https
  gideon:
    address: 5.153.231.34
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs
  httpredir-bm-01:
    address: 5.153.231.35
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts
  lindsay:
    address: 5.153.231.36
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client
  fede:
    address: 5.153.231.37
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs
  sor:
    address: 5.153.231.38
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, autofs, nfs-client
  jerea:
    address: 5.153.231.39
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, apache-https
  mekeel:
    address: 5.153.231.40
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, autofs
  pinel:
    address: 5.153.231.42
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
  rusca:
    address: 5.153.231.43
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs
  manziarly:
    address: 5.153.231.44
    parents: ganeti-bytemark
    hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https
  # }}}
  # {{{ gw-c3sl
  santoro:
    address: 200.17.202.197
    parents: gw-c3sl
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, jessie, high-RTT, security_mirror, no-bacula, apache-https
    contacts: faw
  # }}}
  # {{{ gw-carnet
  lebrun:
    address: 193.198.184.10
    parents: gw-carnet
    hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
  schroeder:
    address: 193.198.184.11
    parents: gw-carnet
    hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
  # }}}
  # {{{ gw-cecsit
  gluck:
    address: 150.203.164.38
    parents: gw-cecsit
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, xinetd-hosts, jessie, security_mirror, no-bacula, apache-https
  mirror-anu:
    address: 150.203.164.39
    parents: gw-cecsit
    hostgroups: computers, service, apache2-hosts, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror, apache-https
  mirror-anu2:
    address: 150.203.164.60
    parents: mirror-anu
    hostgroups: secondary-IPs
  mirror-anu3:
    address: 150.203.164.61
    parents: mirror-anu
    hostgroups: secondary-IPs
  mirror-anu4:
    address: 150.203.164.62
    parents: mirror-anu
    hostgroups: secondary-IPs
  # }}}
  # {{{ gw-conova
  sompek:
    address: 217.196.149.225
    parents: gw-conova
    hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
  stadler:
    address: 217.196.149.226
    parents: gw-conova
    hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
  # }}}
  # {{{ gw-csail
  steffani:
    address: 128.31.0.36
    parents: gw-csail
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula

  csail-node01:
    address: 128.31.0.16
    parents: gw-csail
    hostgroups: computers, service, dl360, jessie, drbd-hosts
  csail-node02:
    address: 128.31.0.46
    parents: gw-csail
    hostgroups: computers, service, dl360, jessie, drbd-hosts
  ganeti-csail:
    address: 128.31.0.49
    parents: gw-bytemark
    hostgroups: notacomputer

  falla:
    address: 128.31.0.65
    parents: ganeti-csail
    hostgroups: computers, freebsd, hassrvfs, porterbox, jessie, jessie-freebsd
  fischer:
    address: 128.31.0.35
    parents: ganeti-csail
    hostgroups: computers, freebsd, hassrvfs, porterbox, jessie
  mirror-csail:
    address: 128.31.0.62
    parents: ganeti-csail
    hostgroups: computers, service, hassrvfs, kvmdomains, jessie, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
  x86-csail-01:
    address: 128.31.0.50
    parents: ganeti-csail
    hostgroups: computers, buildd, hassrvfs, kvmdomains, jessie
  x86-csail-02:
    address: 128.31.0.68
    parents: ganeti-csail
    hostgroups: computers, buildd, hassrvfs, kvmdomains, jessie
  httpredir-csail-01:
    address: 128.31.0.66
    parents: ganeti-csail
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts
  soriano:
    address: 128.31.0.67
    parents: ganeti-csail
    hostgroups: computers, service, kvmdomains, hassrvfs, jessie, apache2-hosts, apache-https
  # }}}
  # {{{ gw-dgi
  storace:
    address: 93.94.130.161
    parents: gw-dgi
    hostgroups: computers, jessie, dl380, nfs-client, hassrvfs
  # }}}
  # {{{ gw-gatech
  sechter:
    address: 128.61.240.73
    parents: gw-gatech
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, xinetd-hosts, jessie, security_mirror
  # }}}
  # {{{ gw-grnet
  ganeti-grnet:
    address: 194.177.211.194
    parents: gw-grnet
    hostgroups: notacomputer
  grnet-node01:
    address: 194.177.211.195
    parents: gw-grnet
    hostgroups: computers, service, dl380, jessie, drbd-hosts
  grnet-node02:
    address: 194.177.211.196
    parents: gw-grnet
    hostgroups: computers, service, dl380, jessie, drbd-hosts
  rautavaara:
    address: 194.177.211.199
    parents: gw-grnet
    hostgroups: computers, megaraid, service, jessie
  loghost-grnet-01:
    address: 194.177.211.200
    parents: gw-grnet
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs
  geo3:
    address: 194.177.211.201
    parents: gw-grnet
    hostgroups: computers, service, bind9-hosts, kvmdomains, jessie
  cgi-grnet-01:
    address: 194.177.211.202
    parents: gw-grnet
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, apache-https, xinetd-hosts
  x86-grnet-01:
    address: 194.177.211.203
    parents: ganeti-grnet
    hostgroups: computers, buildd, hassrvfs, kvmdomains, jessie
  gigault:
    address: 194.177.211.204
    parents: ganeti-grnet
    hostgroups: computers, service, hassrvfs, kvmdomains, jessie
  vittoria:
    address: 194.177.211.205
    parents: ganeti-grnet
    hostgroups: computers, service, hassrvfs, kvmdomains, jessie, postgres94-hosts, apache2-hosts, apache-https
  boott:
    address: 194.177.211.206
    parents: ganeti-grnet
    hostgroups: computers, service, hassrvfs, kvmdomains, jessie
  # }}}
  # {{{ gw-isc
  schein:
    address: 149.20.20.6
    parents: gw-isc
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hasorgfs, xinetd-hosts, jessie, security_mirror, no-bacula
  mirror-isc:
    address: 149.20.20.7
    parents: gw-isc
    hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror
  mirror-isc2:
    address: 149.20.20.19
    parents: mirror-isc
    hostgroups: secondary-IPs
  mirror-isc3:
    address: 149.20.20.22
    parents: mirror-isc
    hostgroups: secondary-IPs
  mirror-isc-syncproxy:
    address: 149.20.20.21
    parents: mirror-isc
    hostgroups: secondary-IPs
  # }}}
  # {{{ gw-leaseweb
  lw01:
    address: 185.17.185.177
    parents: gw-leaseweb
    hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts, xinetd-hosts
  lw02:
    address: 185.17.185.178
    parents: gw-leaseweb
    hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts, xinetd-hosts
  lw03:
    address: 185.17.185.179
    parents: gw-leaseweb
    hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts, xinetd-hosts
  lw04:
    address: 185.17.185.180
    parents: gw-leaseweb
    hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts, xinetd-hosts
  lw07:
    address: 185.17.185.187
    parents: gw-leaseweb
    hostgroups: computers,  service, jessie, dl180, nfs-client, autofs, hassrvfs, postgres94-hosts, apache2-hosts
  lw08:
    address: 185.17.185.189
    parents: gw-leaseweb
    hostgroups: computers,  service, jessie, dl180, nfs-client, autofs, hassrvfs, apache2-hosts
  # }}}
  # {{{ gw-linaro
  arm-linaro-01:
    address: 64.28.108.83
    parents: gw-linaro
    hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
  arm-linaro-03:
    address: 64.28.108.85
    parents: gw-linaro
    hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie, broken_mq
  asachi:
    address: 64.28.108.84
    parents: gw-linaro
    hostgroups: computers, hasbootfs, hassrvfs, porterbox, jessie, broken_mq
  # }}}
  # {{{ gw-karlsruhe
  zemlinsky:
    address: 129.143.160.6
    parents: gw-karlsruhe
    hostgroups: computers, buildd, jessie
    contacts: pkern
  # }}}
  # {{{ gw-man-da
  czerny:
    address: 82.195.75.109
    parents: gw-man-da
    hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts
  clementi:
    address: 82.195.75.103
    parents: gw-man-da
    hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts
  bendel:
    address: 82.195.75.100
    parents: ganeti3
    hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, jessie, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
  master:
    address: 82.195.75.110
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, spamd, heavy-exim, highload
  fils:
    address: 82.195.75.89
    parents: ganeti3
    hostgroups: computers, freebsd, jessie, buildd, hassrvfs
    contacts: christoph
  fayrfax:
    address: 82.195.75.82
    parents: ganeti3
    hostgroups: computers, freebsd, jessie, buildd, hassrvfs
    contacts: christoph
  vento:
    address: 82.195.75.98
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, apache-https, heavy-exim
  lully:
    address: 82.195.75.99
    parents: ganeti3
    hostgroups: computers, service, hasbootfs, kvmdomains, jessie, hasvarlogfs
  draghi:
    address: 82.195.75.106
    parents: ganeti3
    hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, jessie
  geo1:
    address: 82.195.75.105
    parents: ganeti3
    hostgroups: computers, service, bind9-hosts, kvmdomains, jessie
  handel:
    address: 82.195.75.104
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, apache2-hosts, jessie
  kaufmann:
    address: 82.195.75.107
    parents: ganeti3
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, jessie
  stockhausen:
    address: 82.195.75.108
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, jessie
  ganeti3:
    address: 82.195.75.111
    parents: gw-man-da
    hostgroups: notacomputer
  wilder:
    address: 82.195.75.112
    parents: ganeti3
    hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, jessie, apache-https, rsyncd-hosts, xinetd-hosts
  mailly:
    address: 82.195.75.114
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, jessie, spamd, heavy-exim, mail-relay
  denis:
    address: 82.195.75.91
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, jessie, bind9-hosts
  vogler:
    address: 82.195.75.92
    parents: ganeti3
    hostgroups: computers, service, kvmdomains, jessie
  wolkenstein:
    address: 82.195.75.65
    parents: ganeti3
    hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, jessie, apache-https
  mipsel-manda-01:
    address: 82.195.75.72
    parents: gw-man-da
    hostgroups: computers, buildd, jessie, hassrvfs, sw-raid, hasbootfs
  mipsel-manda-02:
    address: 82.195.75.74
    parents: gw-man-da
    hostgroups: computers, buildd, jessie, hassrvfs, sw-raid, hasbootfs
  seger:
    address: 82.195.75.93
    parents: ganeti3
    hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres94-hosts, jessie
  # }}}
  # {{{ gw-marist
  zani:
    address: 148.100.88.22
    parents: gw-marist
    hostgroups: computers, buildd, hassrvfs, jessie, incomingmailrelayed
  # }}}
  # {{{ gw-osuosl
  busoni:
    address: 140.211.15.34
    parents: gw-osuosl
    hostgroups: computers, service, dl360, hassrvfs, jessie, hasvarlogfs, apache2-hosts, no-bacula, apache-https

  byrd:
    address: 140.211.166.200
    parents: gw-osuosl
    hostgroups: computers, service, dl380, jessie
  beach:
    address: 140.211.166.201
    parents: byrd
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, xinetd-hosts, hassrvfs, rsyncd-hosts, apache-https

  pieta:
    address: 140.211.166.195
    parents: gw-osuosl
    hostgroups: computers, jessie, service
  ppc64el-osuosl-01:
    address: 140.211.166.196
    parents: pieta
    hostgroups: computers, hassrvfs, buildd, jessie
  powerpc-osuosl-01:
    address: 140.211.166.197
    parents: pieta
    hostgroups: computers, hassrvfs, buildd, jessie
  pizzetti:
    address: 140.211.166.198
    parents: pieta
    hostgroups: computers, jessie, hassrvfs, porterbox
  merulo:
    address: 140.211.166.46
    parents: gw-osuosl
    hostgroups: computers, porterbox, hasusrfs, wheezy
  partch:
    address: 140.211.15.152
    parents: gw-osuosl
    hostgroups: computers, jessie, hassrvfs, porterbox, sw-raid
  rietz:
    address: 140.211.166.43
    parents: gw-osuosl
    hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, xinetd-hosts, jessie
    #, bosserver
  rietz2:
    address: 140.211.166.44
    parents: rietz
    hostgroups: secondary-IPs
  # }}}
  # {{{ gs-rapidswitch
  caballero:
    address: 193.201.200.200
    parents: gw-rapidswitch
    hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
  # }}}
  # {{{ gw-sanger
  sibelius:
    address: 193.62.202.28
    parents: gw-sanger
    hostgroups: computers, postgres94-hosts, service, apache2-hosts, sw-raid, jessie, rsyncd-hosts, xinetd-hosts, hasvarlogfs
    contacts: tjrc1, dave
  smetana:
    address: 193.62.202.29
    parents: gw-sanger
    hostgroups: computers, porterbox, sw-raid, sparc, wheezy
    contacts: tjrc1, dave
  # }}}
  # {{{ gw-scanplus
  lobos:
    address: 212.211.132.250
    parents: gw-scanplus-lobos
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, xinetd-hosts, jessie, security_mirror
  villa:
    address: 212.211.132.32
    parents: gw-scanplus-villa
    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, xinetd-hosts, jessie, security_mirror
  # }}}
  # {{{ gw-sil
  eberlin:
    address: 86.59.118.155
    parents: gw-sil
    hostgroups: computers, buildd, jessie, sw-raid
  # }}}
  # {{{ gw-ubcece
  sw-ubcece:
    hostgroups: layer2-infrastructure
    contacts: lfilipoz
    pingable: false
    check_command: dsa_check_always_ok
  sw-ubcece-mcld:
    hostgroups: layer2-infrastructure
    parents: sw-ubcece
    contacts: lfilipoz
    pingable: false
    check_command: dsa_check_always_ok
  sw-ubcece-kais:
    hostgroups: layer2-infrastructure
    parents: sw-ubcece
    contacts: lfilipoz
    pingable: false
    check_command: dsa_check_always_ok
  spontini:
    address: 206.12.19.14
    parents: sw-ubcece-mcld
    hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
    contacts: lfilipoz
  ubc-bl7:
    address: 206.12.19.217
    parents: sw-ubcece-kais
    hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts
  ubc-bl6:
    address: 206.12.19.216
    parents: sw-ubcece-kais
    hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts
  ubc-bl2:
    address: 206.12.19.212
    parents: sw-ubcece-kais
    hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts
  ubc-bl3:
    address: 206.12.19.213
    parents: sw-ubcece-kais
    hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts
  ubc-bl4:
    address: 206.12.19.214
    parents: sw-ubcece-kais
    hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts
  ubc-bl8:
    address: 206.12.19.218
    parents: sw-ubcece-kais
    hostgroups: computers, bl460, acpid-hosts, service, jessie, drbd-hosts
  ganeti2:
    address: 206.12.19.23
    parents: sw-ubcece-kais
    hostgroups: notacomputer
  tchaikovsky:
    address: 206.12.19.118
    parents: ganeti2
    hostgroups: computers, general, apache2-hosts, kvmdomains, apache-https, jessie
  geo2:
    address: 206.12.19.113
    parents: ganeti2
    hostgroups: computers, service, bind9-hosts, kvmdomains, jessie
  # MSA 2000 (2012i)
  giustini:
    address: 192.168.2.6
    parents: sw-ubcece-kais
    hostgroups: notacomputer
    # unless we implement runfrom for host alive checks
    pingable: false
    check_command: dsa_check_always_ok
  fano:
    address: 206.12.19.110
    parents: ganeti2
    hostgroups: computers, freebsd, jessie, buildd, hassrvfs
    contacts: christoph
  finzi:
    address: 206.12.19.111
    parents: ganeti2
    hostgroups: computers, freebsd, jessie, buildd, hassrvfs
    contacts: christoph
  lucatelli:
    address: 206.12.19.15
    parents: sw-ubcece-kais
    hostgroups: computers, buildd, jessie
  traetta:
    address: 206.12.19.21
    parents: sw-ubcece-kais
    hostgroups: computers, dl585, service, jessie
#  locke:
#    address: 206.12.19.120
#    parents: sw-ubcece-kais
#    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
  lotti:
    address: 206.12.19.121
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs
  nono:
    address: 206.12.19.123
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs
  reger:
    address: 206.12.19.124
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, heavy-exim
  danzi:
    address: 206.12.19.125
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, postgres94-hosts, xinetd-hosts
  glinka:
    address: 206.12.19.126
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, nfs-client, autofs, xinetd-hosts
  tye:
    address: 206.12.19.129
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs
  elgar:
    address: 206.12.19.130
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie
  gombert:
    address: 206.12.19.132
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https
  jenko:
    address: 206.12.19.133
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie
  diabelli:
    address: 206.12.19.136
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, apache-https, broken_https_default_vhost
  ullmann:
    address: 206.12.19.141
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, postgres94-hosts, nfs-client, apache2-hosts, autofs, apache-https
  sonntag:
    address: 206.12.19.142
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, nfs-client, autofs
  menotti:
    address: 206.12.19.143
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, apache-https
  muffat:
    address: 206.12.19.146
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, spamd, heavy-exim, mail-relay
  buxtehude:
    address: 206.12.19.147
    parents: ganeti2
    hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, heavy-exim, postgres94-hosts, hasvarlogfs, apache-https, spamd, nfs-server
  # }}}
  # {{{ gw-umn
  #saens:
  #  address: 128.101.240.212
  #  parents: gw-umn
  #  hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
  mirror-umn:
    address: 128.101.240.212
    parents: gw-umn
    hostgroups: computers, service, apache2-hosts, apache-https, dl360, hpnewraid, hassrvfs, xinetd-hosts, jessie, security_mirror
  mirror-umn2:
    address: 128.101.240.215
    parents: mirror-umn
    hostgroups: secondary-IPs
  mirror-umn3:
    address: 128.101.240.216
    parents: mirror-umn
    hostgroups: secondary-IPs
  mirror-umn4:
    address: 128.101.240.217
    parents: mirror-umn
    hostgroups: secondary-IPs
  # }}}
  # {{{ gw-unicamp
  prokofiev:
    address: 177.220.10.140
    parents: gw-unicamp
    hostgroups: computers, jessie, service
  powerpc-unicamp-01:
    address: 177.220.10.141
    parents: prokofiev
    hostgroups: computers, hassrvfs, buildd, jessie
  ppc64el-unicamp-01:
    address: 177.220.10.142
    parents: prokofiev
    hostgroups: computers, hassrvfs, buildd, jessie
  plummer:
    address: 177.220.10.143
    parents: prokofiev
    hostgroups: computers, porterbox, hassrvfs, jessie
  # }}}
  # {{{ gw-utwente
  klecker:
    address: 130.89.148.10
    parents: gw-utwente
    hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, xinetd-hosts, jessie, incomingmailrelayed2025, hassrvfs
  klecker-ftp:
    address: 130.89.148.12
    parents: klecker
    hostgroups: secondary-IPs
  klecker-archive:
    address: 130.89.148.13
    parents: klecker
    hostgroups: secondary-IPs
  klecker-static:
    address: 130.89.148.14
    parents: klecker
    hostgroups: secondary-IPs
  # }}}
  # {{{ gw-ynic
  henze:
    address: 144.32.168.74
    parents: gw-ynic
    hostgroups: computers, hasbootfs, hassrvfs, armhf, jessie, buildd
  hasse:
    address: 144.32.168.75
    parents: gw-ynic
    hostgroups: computers, hasbootfs, hassrvfs, armhf, jessie, buildd
  antheil:
    address: 144.32.168.76
    parents: gw-ynic
    hostgroups: computers, hasbootfs, hassrvfs, armhf, jessie, buildd
  porpora:
    address: 144.32.168.78
    parents: gw-ynic
    hostgroups: computers, buildd, sw-raid, hassrvfs, jessie
  poulenc:
    address: 144.32.168.77
    parents: gw-ynic
    hostgroups: computers, buildd, sw-raid, hassrvfs, jessie
  #antheil:
  #  address: 217.140.96.60
  #  parents: gw-arm
  #  hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
  #hasse:
  #  address: 217.140.96.68
  #  parents: gw-arm
  #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
  #henze:
  #  address: 217.140.96.70
  #  parents: gw-arm
  #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
  # }}}
  # {{{ gw-zivit
  zandonai:
    address: 80.245.147.46
    parents: gw-zivit
    hostgroups: computers, buildd, hassrvfs, jessie
  zelenka:
    address: 80.245.147.40
    parents: gw-zivit
    hostgroups: computers, porterbox, hassrvfs, jessie
  # }}}
  # {{{ gw-sakura
  setoguchi:
    address: 133.242.99.74
    parents: gw-sakura
    hostgroups: computers, service, jessie, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, security_mirror
  # }}}

# {{{ ############################# host groups #############################
hostgroups:
  computers:
    alias: computers
    private: 1
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: https://db.debian.org/machines.cgi?host=%s
  layer2-infrastructure:
    alias: Layer 2 Devices
    extinfo-icon_image: base/switch40.png
    extinfo-icon_image_alt: switch
  layer3-infrastructure:
    alias: Layer 3 Devices
    extinfo-icon_image: base/switch40.png
    extinfo-icon_image_alt: router
  notacomputer:
    alias: Systems that are not really systems.  Yeah :)
    private: 1
  freebsd:
    alias: freebsd
    private: 1
    extinfo-icon_image_alt: Debian GNU/kFreeBSD
  armhf:
    alias: armhf
    private: 1
  sparc:
    alias: sparc
    private: 1

  porterbox:
    alias: developer accessible porter machines
  service:
    alias: machines running services
  buildd:
    alias: buildd systems
  general:
    alias: general purpose developer accessible machines

  hpnewraid:
    alias: new (2015+) machines where we need hpssacli instead of hpacucli
    private: 1
  dl380:
    alias: HP DL380 hosts
    private: 1
  dl385:
    alias: HP DL385 hosts
    private: 1
  dl360:
    alias: HP DL360 hosts
    private: 1
  bl460:
    alias: HP BL460 blades
    private: 1
  bm-bl:
    alias: HP blades at bytemark
    private: 1
  dl585:
    alias: HP DL385 hosts
    private: 1
  dl180:
    alias: HP DL180
    private: 1
  dl120:
    alias: HP DL120
    private: 1
  sw-raid:
    alias: Hosts with Linux software raid
    private: 1
  aacraid:
    alias: Hosts with Adaptec AACraid
    private: 1
  megaraid:
    alias: Hosts with LSI Logic MegaRAID
    private: 1

  wheezy:
    alias: Hosts running wheezy
  jessie:
    alias: Hosts running jessie
  jessie-freebsd:
    alias: kFreebsd hosts running jessie

  kvmdomains:
    alias: Hosts that are KVM domains
    private: 1

  drbd-hosts:
    alias: hosts running drbd
  postfix-hosts:
    alias: hosts running postfix instead of exim
    private: 1
  heavy-exim:
    alias: "hosts running the full mail stuff, including clamav and postgrey"
    private: 1
  mail-relay:
    alias: "relays usually are hosts with more exim processes"
    private: 1
  spamd:
    alias: "hosts running spamassassin as daemon"
    private: 1
  heavy-postfix:
    alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
    private: 1
  apache2-hosts:
    alias: hosts running apache2
    private: 1
  bind9-hosts:
    alias: hosts running bind9
    private: 1
  # once every host runs unbound, do away with this group and check "computers" instead
  amavis-hosts:
    alias: hosts running amavis
    private: 1
  rsyncd-hosts:
    alias: hosts providing rsync services via xinetd
    private: 1
  xinetd-hosts:
    alias: hosts providing services via xinetd
    private: 1
  postgres91-hosts:
    alias: hosts running postgres91
    private: 1
  postgres94-hosts:
    alias: hosts running postgres94
    private: 1
  no-ulogd:
    alias: hosts not running ulogd
    private: 1
  acpid-hosts:
    alias: hosts running acpid
    private: 1
  uploadqueue:
    alias: hosts that are an anonymous ftp uploadqueue
    private: 1
  bosserver:
    alias: hosts running bosserver
    private: 1
  apache-https:
    alias: hosts with https services
    private: 1
  broken_https_default_vhost:
    alias: https default vhost does not say 200 OK
    private: 1

  no-bacula:
    alias: hosts which are not being backed up with bacula
    private: 1

  nfs-client:
    alias: hosts mounting filesystems using NFS
    private: 1
  nfs-server:
    alias: hosts serving filesystems using NFS
    private: 1
  autofs:
    alias: hosts running the automounter
    private: 1

  highload:
    alias: "hosts on which high load is normal"
    private: 1

  secondary-IPs:
    alias: secondary IP addresses
    private: 1

  hasbootfs:
    alias: hosts with a /boot filesystem
    private: 1
  hassrvfs:
    alias: hosts with a /srv filesystem
    private: 1
  hasorgfs:
    alias: hosts with a /org filesystem
    private: 1
  hasvarlogfs:
    alias: hosts with a /var/log filesystem
    private: 1
  hasusrfs:
    alias: hosts with a /usr filesystem
    private: 1

  incomingmailrelayed:
    alias: incoming mail needs to go through a mail relay
    # i.e. no port 25
    private: 1
  incomingmailrelayed2025:
    alias: incoming mail needs to go through a mail relay
    # i.e. no port 25
    private: 1

  brokensamhain:
    alias: machines that can not run samhain
    private: 1
  high-RTT:
    alias: machines with high round trip times
    private: 1
  alioth:
    alias: machines that just are just awkward
    private: 1
  #openstack-compute:
  #  alias: nodes that run OpenStack compute
  #  private: 1
  openstack-controller:
    alias: nodes that run OpenStack controller
    private: 1

  security_mirror:
    alias: hosts that are security mirrors
    private: 1

  broken_mq:
    alias: hosts whose MQ is broken
    private: 1
# }}}
# {{{ ############################# servicegroups #############################
servicegroups:
  diskspace:
    alias: diskusage checks
  buildd:
    alias: buildd checks
  raid:
    alias: raid checks
  backup:
    alias: backup checks
  kernel:
    alias: kernel checks
  apt:
    alias: apt upgrade status
  samhain:
    alias: samhain integrity status
  time:
    alias: time stuff
  security:
    alias: security
    servicegroup_members: apt, kernel, samhain
  MQ:
    alias: rabbitMQ stuff
# }}}
# {{{ ############################# services #############################
services:
  # {{{ ### basic networking
  -
    name: PING
    check: "check_ping!350.0,20%!600.0,40%"
    hostgroups: pingable
    excludehostgroups: layer3-infrastructure, high-RTT
    check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  -
    name: PING
    check: "check_ping!600.0,20%!900.0,40%"
    hostgroups: high-RTT
    check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  -
    name: PING
    check: "check_ping!2000.0,60%!3000.0,80%"
    hostgroups: layer3-infrastructure
    check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  # }}}
  # {{{ ### disk usage
  -
    name: disk usage - all
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
    hostgroups: computers
    excludehosts: sibelius, rietz
  -
    name: disk usage - all
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
    hosts: sibelius
  -
    name: disk usage - all
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv -x /home 95 98"
    hosts: rietz

  -
    name: disk usage on /
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
    hostgroups: computers
  -
    name: disk usage on /boot
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
    hostgroups: hasbootfs
  -
    name: disk usage on /org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
    hostgroups: hasorgfs
  -
    name: disk usage on /srv
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
    hostgroups: hassrvfs
  -
    name: disk usage on /usr
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
    hostgroups: hasusrfs
  -
    name: disk usage on /var/lib/postgresql
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
    hosts: sibelius, busoni, buxtehude, lw07
  -
    name: disk usage on /var/log
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
    hostgroups: hasvarlogfs
  -
    name: disk usage on /var/spool/postfix
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
    hosts: bendel
  -
    name: disk usage on /srv/mirrors
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
    hosts: sibelius
  -
    name: disk usage on /srv/snapshot.debian.org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-1
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-1"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-2
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-3
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-3"
    hosts: sibelius
  -
    name: disk usage on /srv/farm-snapshot/farm-4
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-4"
    hosts: sibelius
  -
    name: disk usage on /var/lib/postgresql/9.4
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.4"
    hosts: franck
  -
    name: disk usage on /srv/ftp-master.debian.org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 93 96 /srv/ftp-master.debian.org"
    hosts: franck
  -
    name: disk usage on /storage/snapshot-farm-1
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
    hosts: lw01
  -
    name: disk usage on /storage/snapshot-farm-2
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
    hosts: lw02
  -
    name: disk usage on /storage/snapshot-farm-3
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
    hosts: lw03
  -
    name: disk usage on /storage/snapshot-farm-4
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
    hosts: lw04
  -
    name: disk usage on /srv/morgue.debian.org/
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
    hosts: lw03
  # }}}
  # {{{ ### system
  # {{{ setup
  -
    name: setup - dsa config
    nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
    hostgroups: computers
    check_interval: 60
    excludehostgroups: alioth
  -
    name: setup - local hostname etc-hosts
    nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
    hostgroups: computers
    check_interval: 60
  # }}}
  # {{{ os health
  ####
  -
    name: users
    nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
    hostgroups: computers
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
    hostgroups: computers
    excludehostgroups: highload
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
    hostgroups: highload
  -
    name: uptime check
    nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
    hostgroups: computers
  -
    name: processes - total
    nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
    hostgroups: computers
    excludehosts: prokofiev, pieta
  -
    name: processes - total
    nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
    hosts: prokofiev, pieta
  -
    name: swap usage - percent
    nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
    hostgroups: computers
  -
    name: swap usage - mb
    nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
    hostgroups: computers
  -
    name: process - getty
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
    hostgroups: computers
    excludehosts: zelenka, zandonai
    excludehostgroups: jessie
  -
    name: process - getty
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/getty"
    hostgroups: jessie-freebsd
  -
    name: process - getty
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
    hostgroups: jessie
    excludehostgroups: freebsd

  -
    name: processes - zombies
    nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
    hostgroups: computers
  -
    name: system - available entropy
    nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
    event_handler: dsa_event_handler_restart_ekey
    hostgroups: computers
    excludehostgroups: freebsd
  -
    name: system - filesystem check
    nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
    check_interval:  60
    retry_check_interval: 15
    hostgroups: computers
  # }}}
  # {{{ backup
  -
    name: backup
    servicegroups: backup
    nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
    hostgroups: computers
    excludehosts: backuphost, storace, backuphost
    check_interval: 60
    max_check_attempts: 2
    retry_check_interval: 5
  -
    name: backup server config
    servicegroups: backup
    nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
    hosts: storace
    check_interval: 60
    max_check_attempts: 2
    retry_check_interval: 5
  -
    name: backup - bacula - last backup
    servicegroups: backup
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
    runfrom: dinis
    hostgroups: computers
    excludehostgroups: buildd, porterbox, no-bacula
    check_interval:  60
    retry_check_interval: 15
  -
    name: backup - bacula - last full backup
    servicegroups: backup
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
    runfrom: dinis
    hostgroups: computers
    excludehostgroups: buildd, porterbox, no-bacula
    check_interval:  60
    retry_check_interval: 15
  -
    name: process - bacula-dir
    servicegroups: backup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -c /etc/bacula/bacula-dir.conf'"
    hosts: dinis
  -
    name: process - bacula-fd
    servicegroups: backup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
    hostgroups: computers
    excludehostgroups: freebsd, alioth
  -
    name: process - bacula-fd
    servicegroups: backup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
    hostgroups: freebsd

  ####
  -
    name: process - acc.umu.se backup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
    hosts: sibelius
  # }}}
  # {{{ security
  -
    name: running kernel
    servicegroups: kernel
    nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
    hostgroups: computers
    check_interval: 60
    retry_check_interval: 5
  -
    name: apt - security updates
    servicegroups: apt
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
    hostgroups: computers
    check_interval:  60
    retry_check_interval: 15
  -
    name: unexpected file - apt sources.list
    servicegroups: apt
    nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /etc/apt/sources.list"
    hostgroups: computers
  -
    name: upgraded libraries
    servicegroups: security
    nrpe: "sudo /usr/local/sbin/dsa-check-libs"
    #nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs"
    hostgroups: computers
    excludehostgroups: freebsd
    check_interval:  60
    retry_check_interval: 15
    notification_interval: 10080
  -
    name: installed firewall
    nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
    hostgroups: computers
    excludehostgroups: freebsd
  -
    name: puppetized firewall
    nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
    hostgroups: computers
    excludehostgroups: freebsd
  -
    name: process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
    hostgroups: computers
    excludehostgroups: freebsd, sparc, jessie
  -
    name: process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
    hostgroups: jessie
    excludehostgroups: freebsd
  -
    name: unexpected process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
    hostgroups: freebsd, sparc
  ####
  -
    name: process - samhain
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
    hostgroups: computers
    excludehostgroups: brokensamhain
  -
    name: samhain
    servicegroups: samhain
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
    hostgroups: computers
    depends: process - samhain
    check_interval: 60
    retry_check_interval: 5
    excludehostgroups: brokensamhain
  -
    name: processes - samhain zombies
    nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
    event_handler: dsa_event_handler_restart_samhain
    hostgroups: computers
    excludehostgroups: brokensamhain
  # }}}
  # {{{ logging
  -
    name: process - syslog-ng
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
    hostgroups: computers
    excludehostgroups: freebsd, jessie
  -
    name: process - syslog-ng
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
    hostgroups: freebsd
  -
    name: process - syslog-ng
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -F'"
    hostgroups: jessie
    excludehostgroups: freebsd

  -
    name: remote logging on lotti
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
    runfrom: lotti
    hostgroups: computers
    excludehostgroups: alioth
  -
    name: remote logging on lully
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
    runfrom: lully
    hostgroups: computers
    excludehostgroups: alioth
  -
    name: remote logging on loghost-grnet-01
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
    runfrom: loghost-grnet-01
    hostgroups: computers
    excludehostgroups: alioth
  # }}}
  # {{{ base service
  -
    name: process - sshd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
    hostgroups: computers
  -
    name: "network service - sshd"
    check: dsa_check_ssh
    hostgroups: computers
    depends: process - sshd
    check_interval:  60
    notification_interval: 1440
  ####
  -
    name: network service - nrpe
    check: check_tcp!5666
    hostgroups: computers
    max_check_attempts: -2
    notification_interval: 1440
  -
    name: process - nrpe
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
    hostgroups: computers
    max_check_attempts: -1
    depends: network service - nrpe
  ###
  -
    name: process - munin-node
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
    hostgroups: computers
    excludehostgroups: freebsd
  -
    name: process - munin-node
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
    hostgroups: freebsd
  -
    name: network service - munin-node
    check: check_tcp!4949
    hostgroups: computers
    depends: process - munin-node
  ###
  -
    name: process - ntpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
    hostgroups: computers
    servicegroups: time
  -
    name: network service - ntp
    check: dsa_check_ntp
    hostgroups: computers
    depends: process - ntpd
    servicegroups: time
  ###
  -
    name: process - atd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
    hostgroups: computers
  ###
  -
    name: process - cron
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
    hostgroups: computers
  ###
  -
    name: process - ud-replicated
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
    hostgroups: computers
    excludehostgroups: freebsd, alioth
  -
    name: process - ud-replicated
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
    hostgroups: freebsd
  ###
  -
    name: process - monit
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
    hostgroups: computers
    excludehostgroups: alioth, jessie
  ###
  -
    name: MQ connection on rainier
    servicegroups: MQ
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
    runfrom: rainier
    hostgroups: computers
    check_interval:  60
    retry_check_interval: 15
    excludehostgroups: alioth, broken_mq
  -
    name: MQ connection on rapoport
    servicegroups: MQ
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
    runfrom: rapoport
    hostgroups: computers
    check_interval:  60
    retry_check_interval: 15
    excludehostgroups: alioth, broken_mq
  ###
  -
    name: local resolver
    nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
    hostgroups: computers
    check_interval: 60
  -
    name: process - unbound
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
    hostgroups: computers
    excludehostgroups: alioth
  ###
  -
    name: process - uptimed
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
    hostgroups: computers
  ###
  -
    name: process - udevd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
    hostgroups: computers
    excludehostgroups: freebsd, jessie
  -
    name: process - udevd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
    hostgroups: jessie
    excludehostgroups: freebsd
  -
    name: unexpected process - udev
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
    hostgroups: freebsd
  ###
  -
    name: process - acpid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
    hostgroups: acpid-hosts
    excludehostgroups: jessie
  -
    name: unexpected process - acpid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
    hostgroups: computers
    excludehostgroups: acpid-hosts, kvmdomains
  ###
  -
    name: process - xinetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
    hostgroups: xinetd-hosts
  -
    name: unwanted process - xinetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
    hostgroups: computers
    excludehostgroups: xinetd-hosts
  ###
  -
    name: process - stunnel4 - puppet-ekeyd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
    hostgroups: wheezy, jessie
    excludehostgroups: freebsd, alioth
  -
    name: process - stunnel4 - puppet-ekeyd is crazy
    nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-stunnel-sanity"
    hostgroups: computers
    excludehostgroups: freebsd, alioth
    excludehosts: czerny, grnet-node01, storace, ubc-bl2
  # }}}
  # {{{ anti-services
  -
    name: ganeti - job watcher paused
    nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
    hostgroups: computers
  -
    name: unwanted process - irqbalance
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
    hostgroups: computers
  -
    name: unwanted process - openvpn
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
    hostgroups: computers
    check_interval: 120
  -
    name: unwanted process - gkrellmd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
    hostgroups: computers
  -
    name: unwanted process - rpc.statd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
    hostgroups: computers
    excludehostgroups: nfs-client, nfs-server
  -
    name: unwanted process - inetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
    hostgroups: computers
    excludehosts: abel
  -
    name: unwanted process - snmpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
    hostgroups: computers
  # }}}
  # {{{ ssl certs
  -
    name: "host SSL cert"
    nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
    hostgroups: computers
  -
    name: "host SSL cert - debian server"
    nrpe: "if [ -e /etc/ssl/debian/certs/thishost-server.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost-server.crt; else echo 'No thishost-server.crt on this host.'; fi"
    hostgroups: computers
  -
    name: "host SSL cert - debian client"
    nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
    hostgroups: computers
  -
    name: "sso CRL"
    nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
    hostgroups: computers
  -
    name: SSL certs - puppet
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
    runfrom: handel
  -
    name: SSL certs - LE
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/from-letsencrypt"
    runfrom: handel
  # }}}
  # {{{ HW health/raid
  -
    name: process - mdadm monitor
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
    hostgroups: sw-raid
    excludehostgroups: jessie
  -
    name: process - mdadm monitor
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
    hostgroups: sw-raid
    excludehostgroups: wheezy
  -
    name: RAID - sw raid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
    hostgroups: sw-raid
  -
    name: RAID - unexpected sw raid
    servicegroups: raid
    nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
    hostgroups: computers
    excludehostgroups: sw-raid
  ###
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
    check_interval: 120
    hostgroups: dl385, dl380, dl360, bl460, dl180
    excludehosts: schein, rietz
    excludehostgroups: hpnewraid
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
    check_interval: 120
    hostgroups: bm-bl
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
    check_interval: 120
    hosts: schein, rietz
  -
    name: HW - hpacucli enclosure status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
    check_interval: 120
    hosts: franck
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
    check_interval: 120
    hostgroups: dl585
  -
    name: HW - hpssacli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpssacli"
    check_interval: 120
    hostgroups: hpnewraid
  ###
#  -
#    name: HW - edac status
#    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
#    check_interval: 120
    #hostgroups: computers
    #excludehosts: villa, lobos, schein
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
    check_interval: 120
    hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
    excludehosts: villa, lobos, schein, storace, mirror-anu
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
    check_interval: 120
    hosts: villa
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
    check_interval: 120
    hosts: lobos
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
    check_interval: 120
    hosts: schein
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
    check_interval: 120
    hosts: storace
  -
    name: HW - hpasmcli status
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present --ps-no-redundant --ignore-failed='PS1'"
    check_interval: 120
    hosts: mirror-anu
  ###
  -
    name: RAID - 3ware
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
    hosts: powell
  ###
  -
    name: RAID - aacraid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
    hostgroups: aacraid
  ###
  -
    name: RAID - megaraid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
    hostgroups: megaraid
  ###
  -
    name: RAID - DRBD
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
    hostgroups: drbd-hosts
    excludehosts: ubc-bl8
  -
    name: RAID - DRBD
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All --ok-no-devices"
    hosts: ubc-bl8
  # }}}
  # }}}
  # {{{ ### mail stuff
  # {{{ exim processes and mailq
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
    hostgroups: computers
    excludehostgroups: postfix-hosts, mail-relay
    excludehosts: master, busoni, quantz, buxtehude
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
    hostgroups: mail-relay
  -
    name: process - exim - total
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
    hostgroups: computers
    excludehostgroups: postfix-hosts
    excludehosts: master, busoni, quantz, buxtehude
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
    hosts: master, busoni, quantz, buxtehude
  -
    name: mail queue
    nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
    hostgroups: heavy-exim
  # }}}
  # {{{ clamav
  -
    name: process - clamav - clamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
    hostgroups: heavy-exim, heavy-postfix
  -
    name: service - clamav
    nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
    hostgroups: heavy-exim, heavy-postfix
    depends: process - clamav - clamd
  -
    name: process - clamav - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
    hostgroups: heavy-exim, heavy-postfix
    excludehostgroups: jessie
  -
    name: process - clamav - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --foreground=true'"
    hostgroups: heavy-exim, heavy-postfix
    excludehostgroups: wheezy
  -
    name: unwanted process - clamav
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
  -
    name: unwanted process - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
  # }}}
  # {{{ anti-spam
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
    hostgroups: spamd
    excludehosts: picconi
    excludehostgroups: jessie
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamassassin.pid --create-prefs --max-children 5 --helper-home-dir'"
    hostgroups: spamd
    excludehosts: picconi
    excludehostgroups: wheezy
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamassassin.pid --create-prefs --max-children 20 --min-spare=5 --helper-home-dir'"
    hosts: picconi
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamassassin.pid --create-prefs --max-children 10 --helper-home-dir'"
    hosts: bendel
  -
    name: process - spamd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
    hosts: bendel
    hostgroups: spamd
    depends: process - spamd - master
  #
  -
    name: unwanted process - spamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
    hostgroups: computers
    excludehostgroups: spamd
    excludehosts: bendel, busoni

  -
    name: unwanted process - greylistd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
    hostgroups: computers

  ###
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
    hostgroups: heavy-exim
    excludehostgroups: jessie
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
    hostgroups: heavy-exim
    excludehostgroups: wheezy
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
    hostgroups: heavy-postfix
  #
  -
    name: unwanted process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
    hostgroups: computers
    excludehostgroups: heavy-postfix, heavy-exim
  ###
  -
    name: process - amavis - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
    hostgroups: amavis-hosts
  -
    name: process - amavis - all
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
    hostgroups: amavis-hosts
    depends: process - amavis - master
  #
  -
    name: unwanted process - amavis
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
    hostgroups: computers
    excludehostgroups: amavis-hosts
  ###
  -
    name: process - weightd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
    hostgroups: heavy-postfix, alioth
  -
    name: process - weightd - cache
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
    hostgroups: heavy-postfix, alioth
    depends: process - weightd - master
  -
    name: process - weightd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
    hostgroups: heavy-postfix, alioth
    depends: process - weightd - master
  ###
  -
    name: unwanted process - policyd-weight
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
    hostgroups: computers
    excludehostgroups: heavy-postfix, alioth
  # }}}
  # {{{ postfix
  ###
  -
    name: process - postfix - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
    hostgroups: postfix-hosts
  -
    name: process - postfix - qmgr
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - pickup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - anvil
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master

  -
    name: process - postfix - trivial-rewrite
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - proxymap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - cleanup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - local
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
    hostgroups: postfix-hosts
    depends: process - postfix - master

  -
    name: network service local - smtps cert
    nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
    hostgroups: postfix-hosts
    depends: process - postfix - master
    check_interval: 120
  # }}}
  # {{{ mail - network service
  -
    name: network service - smtp
    check: dsa_check_smtp
    hostgroups: computers
    excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
    depends: process - exim

  -
    name: network service - smtp
    check: dsa_check_smtp
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: network service - submission
    check: dsa_check_smtp_port!587
    hostgroups: incomingmailrelayed
    depends: process - exim
  -
    name: network service - smtp 2025
    check: dsa_check_smtp_port!2025
    hostgroups: incomingmailrelayed2025
    depends: process - exim
  # }}}
  # }}}
  # {{{ ### host specific services
  # {{{ HTTP
  -
    name: process - apache2 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
    hostgroups: apache2-hosts
  -
    name: process - apache2 - worker
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
    hostgroups: apache2-hosts
    depends: process - apache2 - master
    excludehosts: klecker
  -
    name: process - apache2 - worker
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
    hosts: klecker
    depends: process - apache2 - master
  -
    name: unwanted process - apache2
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
    hostgroups: computers
    excludehostgroups: apache2-hosts

  -
    name: network service - http
    check: check_http
    hostgroups: apache2-hosts
    excludehosts: klecker, oyens
    depends: process - apache2 - master
  -
    name: network service - http
    check: check_http
    depends: klecker:process - apache2 - master
    hosts: klecker-ftp

  # keyserver on kaufmann
  -
    name: network service - http keyserver
    check: dsa_check_http_port!11371
    hosts: kaufmann
    depends: process - apache2 - master

  # https on various hosts
  -
    name: network service - https
    check: check_https
    hostgroups: apache-https
    excludehosts: menotti
    excludehostgroups: broken_https_default_vhost
    depends: "process - apache2 - master"
    check_interval: 120
  -
    name: network service - https
    check: dsa_check_https_want_auth
    hosts: menotti
    depends: "process - apache2 - master"
    check_interval: 120
  -
    name: network service - https
    check: dsa_check_https_any_status
    hostgroups: broken_https_default_vhost
    depends: "process - apache2 - master"
    check_interval: 120
  -
    name: network service - https cert
    check: dsa_check_cert!443
    hostgroups: apache-https
    depends: network service - https
    check_interval: 60
  -
    name: unwanted network service - https
    check: dsa_check_port_closed!443
    hostgroups: apache2-hosts
    excludehostgroups: apache-https
    check_interval: 60
  # }}}
  # {{{ FTP
  -
    name: network service - ftp
    check: check_ftp
    hostgroups: uploadqueue, security_mirror
    excludehosts: klecker
  -
    name: network service - ftp
    check: check_ftp
    hosts: klecker-ftp
    depends: klecker:process - xinetd
  # }}}
  # {{{ postgres
  -
    name: unwanted process - postgresql
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
    hostgroups: computers
    excludehostgroups: postgres91-hosts, postgres94-hosts
  -
    name: unwanted process - postgresql 9.0
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
    hostgroups: computers
  -
    name: process - postgresql91 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
    hostgroups: postgres91-hosts
  -
    name: process - postgresql94 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.4/bin/postgres'"
    hostgroups: postgres94-hosts
  -
    name: postgresql backups
    nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
    hosts: storace, backuphost
  # }}}
  # {{{ power
#  -
#    name: process - UPS - nut usbhid-ups - ups1
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
#    hosts: franck
#  -
#    name: process - UPS - nut upsd
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
#    hosts: franck
#  -
#    name: process - UPS - nut upsmon master
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
#    hosts: franck
#  -
#    name: process - UPS - nut upsmon worker
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
#    hosts: franck
#    depends: process - UPS - nut upsmon master
#  -
#    name: UPS - on line power
#    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
#    hosts: franck
#    depends: process - UPS - nut upsd
  # }}}
  # {{{ buildd
  -
    name: process - buildd
    servicegroups: buildd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
    hosts: fano, finzi, fils, fayrfax
    contact_groups: buildd
  -
    name: process - buildd
    servicegroups: buildd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
    hostgroups: buildd
    excludehosts: fano, finzi, fils, fayrfax
    contact_groups: buildd
  -
    name: processes - zombie schroot
    nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
    hostgroups: buildd
    contact_groups: +buildd
    check_interval: 5
    max_check_attempts: 24
    retry_check_interval: 5
  -
    name: processes - lvcreate
    nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
    hostgroups: buildd
    contact_groups: +buildd
  # }}}
  # {{{ NFS Stuff
  -
    name: process - statd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
    hostgroups: nfs-client, nfs-server
  -
    name: process - nfsd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
    hostgroups: nfs-server
  -
    name: process - lockd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
    hostgroups: nfs-server
  -
    name: process - mountd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
    hostgroups: nfs-server
  #
  -
    name: process - automount
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
    hostgroups: autofs
  -
    name: unwanted process - automount
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
    hostgroups: computers
    excludehostgroups: autofs
  # }}}
  # {{{ mirroring
  -
    name: mirror sync - bugs
    check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
    hosts: global
  -
    name: mirror sync - security
    check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
    hosts: global
  -
    name: mirror sync - packages
    check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
    hosts: global
    check_interval: 15
    max_check_attempts: 5
    retry_check_interval: 5
  -
    name: mirror sync - snapshot
    check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
    hosts: global
    check_interval: 15
    max_check_attempts: 5
    retry_check_interval: 5
  # }}}
  # {{{ DNS
  -
    name: process - named
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
    hostgroups: bind9-hosts
  -
    name: network service - dns
    check: check_dns
    hostgroups: bind9-hosts
    depends: process - named
  -
    name: unwanted process - named
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
    hostgroups: computers
    excludehostgroups: bind9-hosts
  ###
  -
    name: DNS SOA sync - debian.org
    check: "dsa_check_soas_add!denis.debian.org!debian.org"
    hosts: global
  -
    name: DNS SOA sync - debian.net
    check: "dsa_check_soas_add!denis.debian.org!debian.net"
    hosts: global
  -
    name: DNS SOA sync - debian.com
    check: "dsa_check_soas_add!denis.debian.org!debian.com"
    hosts: global
  -
    name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
    check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
    hosts: global
  -
    name: DNS SOA sync - alioth.debian.org
    check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
    hosts: global
  -
    name: DNS SOA sync - debconf.net
    check: "dsa_check_soas_add!denis.debian.org!debconf.net"
    hosts: global
  -
    name: DNS SOA sync - debconf.org
    check: "dsa_check_soas_add!denis.debian.org!debconf.org"
    hosts: global
  -
    name: DNS SOA sync - debianday.org
    check: "dsa_check_soas_add!denis.debian.org!debianday.org"
    hosts: global
  -
    name: DNS SOA sync - dpkg.org
    check: "dsa_check_soas_add!denis.debian.org!dpkg.org"
    hosts: global
  -
    name: DNS - delegation and signature expiry
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
    runfrom: denis
  -
    name: DNS - security delegations
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
    runfrom: denis
  -
    name: DNS - key coverage
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
    runfrom: denis
  -
    name: DNS - DS expiry
    hosts: global
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
    runfrom: denis
  # }}}
  # {{{ storage
  -
    name: ping alive check
    remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
    runfrom: ubc-bl8
    hosts: giustini
    check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  -
    name: Overall Unit Status
    remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
    runfrom: ubc-bl8
    hosts: giustini
  -
    name: event log
    remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=11298 $HOSTADDRESS$ public"
    runfrom: ubc-bl8
    hosts: giustini
  # }}}
  # {{{ porterbox
  -
    name: current chroots
    nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
    hostgroups: porterbox
    check_interval:  60
    retry_check_interval: 15
  # }}}
  # {{{ openstack
#  -
#    name: process - openstack - memcached
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - glance-registry
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - nova-api
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - nova-compute
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
#    hostgroups: openstack-compute
#  -
#    name: process - openstack - nova-cert
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - nova-conductor
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - nova-consoleauth
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - nova-scheduler
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - nova-spicehtml5proxy
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
#    hostgroups: openstack-controller
#  -
#    name: process - openstack - neutron-server
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
#    hostgroups: openstack-controller
  # }}}
  # {{{ misc
  -
    name: system - all services running
    nrpe: "/usr/bin/sudo /bin/systemctl is-system-running"
    hostgroups: jessie
    excludehostgroups: freebsd
  ###
  -
    name: process - rngd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
    hostgroups: dl385
  ###
  -
    name: process - slapd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
    hosts: draghi
  -
    name: network service - ldaps cert
    check: dsa_check_cert!636
    depends: process - slapd
    check_interval: 60
    hosts: draghi
  ###
  -
    name: network service - finger
    check: check_tcp!79
    hosts: draghi
    depends: process - xinetd
  ###
  -
    name: network service - rsync
    check: check_tcp!873
    hostgroups: rsyncd-hosts
    depends: process - xinetd
    excludehosts: rietz
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: rietz2
    depends: rietz:process - xinetd
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: milanollo2
    depends: milanollo:process - xinetd
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: mirror-isc2, mirror-isc-syncproxy
    depends: mirror-isc:process - xinetd
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: mirror-umn2, mirror-umn3
    depends: mirror-umn:process - xinetd
  -
    name: network service - rsync
    check: check_tcp!873
    hosts: mirror-anu2, mirror-anu3
    depends: mirror-anu:process - xinetd
  ###
  -
    name: process - icinga
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:60 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
    hosts: tchaikovsky
  ###
  -
    name: process - debianqueued
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
    hostgroups: uploadqueue
  ####
  -
    name: network service - gobby
    check: check_tcp!6523
    hosts: gombert
    contact_groups: gobby
  ####
  -
    name: network service - sip-tls cert - 443
    check: dsa_check_cert!443
    check_interval: 60
    hosts: vogler
  -
    name: network service - sip-tls cert - 5061
    check: dsa_check_cert!5061
    check_interval: 60
    hosts: vogler
  ####
  -
    name: puppetmaster cert
    nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
    hosts: handel
    check_interval: 60
    max_check_attempts: 2
    retry_check_interval: 5
  # }}}
# }}}

# vim: set ts=2 sw=2 et ai si fdm=marker: