# Non comment lines are YAML # # Strings ought to be in double quotes, but it works in most cases if they aren't :) # # vim:set syntax=yaml: # TODO # - spohr: hpasmd # - *: mailq # - *: check munin stats collection works # - *: check backups are successful # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some) # - mundy: salinfo_decode # down: # - sarti # - leisner --- ############################# # hosts ############################# servers: # {{{ gateways global: hostgroups: notacomputer pingable: false check_command: dsa_check_always_ok gw-1und1: address: 195.20.247.54 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: joerg # gw-1und1-sec: # address: 212.227.126.33 # parents: gw-ubcece hostgroups: layer3-infrastructure gw-accumu: address: 130.239.18.97 parents: gw-ubcece hostgroups: layer3-infrastructure gw-c3sl: address: 200.17.202.254 parents: gw-ubcece hostgroups: layer3-infrastructure gw-cecsit: address: 150.203.164.38 parents: gw-ubcece hostgroups: layer3-infrastructure gw-arm: address: 82.44.141.46 parents: gw-ubcece hostgroups: layer3-infrastructure gw-brainfood: address: 70.103.162.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-brown: address: 128.148.34.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-carnet: address: 161.53.160.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-conova: address: 217.196.149.238 parents: gw-ubcece hostgroups: layer3-infrastructure gw-csail: address: 128.31.0.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-dgi: address: 93.94.132.102 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: bzed gw-freenet: address: 62.104.23.249 parents: gw-ubcece hostgroups: layer3-infrastructure gw-ftcollins: address: 192.25.206.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-grnet: address: 194.177.211.193 parents: gw-ubcece hostgroups: layer3-infrastructure gw-helsinki: address: 128.214.173.25 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: holger gw-isc: address: 149.20.20.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-karlsruhe: address: 129.143.166.229 parents: gw-ubcece hostgroups: layer3-infrastructure gw-man-da: address: 82.195.75.126 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: joerg, bzed gw-marist: address: 148.100.96.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-osuosl: address: 140.211.166.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-rapidswitch: address: 193.201.200.129 parents: gw-ubcece hostgroups: layer3-infrastructure gw-sanger: address: 193.62.202.20 parents: gw-ubcece hostgroups: layer3-infrastructure contacts: tjrc1, dave gw-scanplus-lobos: address: 212.211.132.249 parents: gw-ubcece hostgroups: layer3-infrastructure gw-scanplus-villa: address: 212.211.132.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-sil: address: 86.59.118.145 parents: gw-ubcece hostgroups: layer3-infrastructure gw-telegraaf2: address: 217.196.40.15 parents: gw-ubcece hostgroups: layer3-infrastructure contact_groups: +alioth-admins no-servicegroups: true gw-ubcece: address: 206.12.19.254 hostgroups: layer3-infrastructure contacts: lfilipoz gw-ugent: address: 193.191.17.50 parents: gw-ubcece hostgroups: layer3-infrastructure gw-umn: address: 128.101.240.222 parents: gw-ubcece hostgroups: layer3-infrastructure gw-utwente: address: 130.89.149.1 parents: gw-ubcece hostgroups: layer3-infrastructure gw-ynic: # really janet, because ynic is stupid about firewalling address: 146.97.42.26 parents: gw-ubcece hostgroups: layer3-infrastructure gw-zivit: address: 80.245.144.3 parents: gw-ubcece hostgroups: layer3-infrastructure # }}} # {{{ servers # {{{ gw-1und1 powell: address: 87.106.64.223 parents: gw-1und1 hostgroups: computers, service, spamd, heavy-exim, rsyncd-hosts, acpid-hosts, hassrvfs, hasvarfs, hasusrfs, xinetd-hosts, apache2-hosts, squeeze contacts: joerg # }}} # {{{ gw-1und1-sec schumann: address: 212.227.126.54 parents: gw-ubcece #parents: gw-1und1-sec hostgroups: computers, acpid-hosts, service, squeeze, bacula-client chopin: address: 195.20.242.124 parents: schumann hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, heavy-exim, xinetd-hosts, apache-https, postgres91-hosts, squeeze geo3: address: 195.20.242.125 parents: schumann hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze, bacula-client soler: address: 195.20.242.126 parents: schumann hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, squeeze, apache-https, bacula-client wieck: address: 195.20.242.89 parents: gw-ubcece #parents: gw-1und1-sec hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze, security_mirror, hasvarlogfs # }}} # {{{ gw-accumu pettersson: address: 130.239.18.123 parents: gw-accumu hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, squeeze, autofs praetorius: address: 130.239.18.121 parents: gw-accumu hostgroups: computers, buildd, hassrvfs, squeeze # }}} # {{{ gw-arm abel: address: 217.140.96.56 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, porterbox, squeeze, deadslow alain: address: 217.140.96.58 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze, deadslow alwyn: address: 217.140.96.59 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze, deadslow antheil: address: 217.140.96.60 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze, deadslow arne: address: 217.140.96.61 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, squeeze, deadslow arnold: address: 217.140.96.57 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, buildd, squeeze, deadslow harris: address: 217.140.96.66 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, deadslow hasse: address: 217.140.96.68 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, deadslow henze: address: 217.140.96.70 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, deadslow hoiby: address: 217.140.96.71 parents: gw-arm hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, deadslow # }}} # {{{ gw-brainfood old-master: address: 97.107.116.29 parents: gw-brainfood hostgroups: computers, general, apache2-hosts, spamd, heavy-exim, highload, xinetd-hosts, mptraid, squeeze, bacula-client murphy: address: 97.107.116.31 parents: gw-brainfood hostgroups: computers, general, dl380, acpid-hosts, buildd, hasbootfs, hassrvfs, squeeze # }}} # {{{ gw-brown franck: address: 128.148.34.3 parents: gw-brown hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, heavy-exim, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, squeeze ries: address: 128.148.34.103 parents: gw-brown hostgroups: computers, service, dl385, acpid-hosts, xinetd-hosts, hassrvfs, squeeze, postgres91-hosts # }}} # {{{ gw-c3sl santoro: address: 200.17.202.197 parents: gw-c3sl hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze, high-RTT, security_mirror contacts: faw # }}} # {{{ gw-carnet lebrun: address: 193.198.184.10 parents: gw-carnet hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, squeeze schroeder: address: 193.198.184.11 parents: gw-carnet hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, squeeze # }}} # {{{ gw-cecsit gluck: address: 150.203.164.38 parents: gw-cecsit hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-conova sompek: address: 217.196.149.225 parents: gw-conova hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc stadler: address: 217.196.149.226 parents: gw-conova hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc # }}} # {{{ gw-csail senfl: address: 128.31.0.51 parents: gw-csail hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, bind9-hosts, xinetd-hosts, squeeze steffani: address: 128.31.0.36 parents: gw-csail hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-dgi argento: address: 93.94.130.160 parents: gw-dgi hostgroups: computers, sw-raid, hassrvfs, wheezy contacts: bzed # }}} # {{{ gw-ftcollins alkman: address: 192.25.206.63 parents: gw-ftcollins hostgroups: computers, buildd, acpid-hosts, squeeze merulo: address: 192.25.206.58 parents: gw-ftcollins hostgroups: computers, porterbox, hasusrfs, squeeze mundy: address: 192.25.206.62 parents: gw-ftcollins hostgroups: computers, buildd, hassrvfs, sw-raid, acpid-hosts, squeeze spohr: address: 192.25.206.33 parents: gw-ftcollins hostgroups: computers, service, dl380, apache2-hosts, nfs-server, spamd, heavy-exim, squeeze, apache-https # }}} # {{{ gw-freenet pergolesi: address: 62.104.23.252 parents: gw-freenet hostgroups: computers, porterbox, sw-raid, hasusrfs, hasorgfs, squeeze # }}} # {{{ gw-grnet barber: address: 194.177.211.203 parents: gw-grnet hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, squeeze biber: address: 194.177.211.204 parents: gw-grnet hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, squeeze, bacula-client cilea: address: 194.177.211.205 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, hassrvfs, service, squeeze fasch: address: 194.177.211.201 parents: rautavaara hostgroups: computers, freebsd, squeeze, buildd, hassrvfs #, mptraid grieg: address: 194.177.211.200 parents: gw-grnet hostgroups: computers, apache2-hosts, acpid-hosts, megaraid, heavy-exim, postgres84-hosts, service, apache-https, squeeze holter: address: 194.177.211.202 parents: gw-grnet hostgroups: computers, acpid-hosts, hassrvfs, apache2-hosts, mptraid, service, squeeze krenek: address: 194.177.211.207 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, buildd, squeeze orff: address: 194.177.211.209 parents: gw-grnet hostgroups: computers, acpid-hosts, bind9-hosts, mptraid, service, hassrvfs, apache2-hosts, squeeze rautavaara: address: 194.177.211.199 parents: gw-grnet hostgroups: computers, acpid-hosts, megaraid, service, squeeze vitry: address: 194.177.211.206 parents: gw-grnet hostgroups: computers, acpid-hosts, mptraid, buildd, squeeze # }}} # {{{ gw-helsinki piatti: address: 193.167.161.225 parents: gw-helsinki hostgroups: computers, dl385, acpid-hosts, apache2-hosts, hasbootfs, incomingmailrelayed2025, hasorgfs, service, squeeze contacts: holger # }}} # {{{ gw-isc schein: address: 149.20.20.6 parents: gw-isc hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-karlsruhe zemlinsky: address: 129.143.160.6 parents: gw-karlsruhe hostgroups: computers, buildd, hassrvfs, squeeze # }}} # {{{ gw-man-da agricola: address: 82.195.75.86 parents: gw-man-da hostgroups: computers, porterbox, sw-raid, hassrvfs, squeeze contacts: bzed arcadelt: address: 82.195.75.87 parents: gw-man-da hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze contacts: bzed ball: address: 82.195.75.70 parents: gw-man-da hostgroups: computers, buildd, hasbootfs, squeeze # bartok TODO czerny: address: 82.195.75.109 parents: gw-man-da hostgroups: computers, service, dl380, acpid-hosts, squeeze, drbd-hosts clementi: address: 82.195.75.103 parents: gw-man-da hostgroups: computers, service, dl380, acpid-hosts, squeeze, drbd-hosts bendel: address: 82.195.75.100 parents: czerny hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs master: address: 82.195.75.110 parents: czerny hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, bacula-client, spamd, heavy-exim, highload fils: address: 82.195.75.89 parents: czerny hostgroups: computers, freebsd, squeeze, buildd, hassrvfs vento: address: 82.195.75.98 parents: czerny hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, heavy-exim lully: address: 82.195.75.99 parents: czerny hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvarlogfs, bacula-client rem: address: 82.195.75.68 parents: gw-man-da hostgroups: computers, buildd, hasbootfs, hassrvfs, squeeze unger: address: 82.195.75.102 parents: gw-man-da hostgroups: computers, service, dl360, acpid-hosts, squeeze diamond: address: 82.195.75.108 parents: ganeti3 hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, bind9-hosts draghi: address: 82.195.75.106 parents: ganeti3 hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, squeeze, bacula-client geo1: address: 82.195.75.105 parents: ganeti3 hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze handel: address: 82.195.75.104 parents: ganeti3 hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze, apache-https, hasvarfs kaufmann: address: 82.195.75.107 parents: ganeti3 hostgroups: computers, service, hasbootfs, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, squeeze ganeti3: address: 82.195.75.111 parents: gw-man-da hostgroups: notacomputer wilder: address: 82.195.75.112 parents: ganeti3 hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache2-hosts, apache-https, bacula-client vieuxtemps: address: 82.195.75.113 parents: ganeti3 hostgroups: computers, service, kvmdomains, wheezy, varnish-hosts mailly: address: 82.195.75.114 parents: ganeti3 hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay # }}} # {{{ gw-marist zappa: address: 148.100.96.103 parents: gw-marist hostgroups: computers, buildd, hassrvfs, squeeze, incomingmailrelayed # }}} # {{{ gw-osuosl busoni: address: 140.211.15.34 parents: gw-osuosl hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, heavy-exim, squeeze, hasvarlogfs byrd: address: 140.211.166.20 parents: gw-osuosl hostgroups: computers, service, dl380, acpid-hosts, squeeze buxtehude: address: 140.211.166.26 parents: byrd hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, squeeze, hasvarlogfs # malo TODO mayer: address: 140.211.166.78 parents: gw-osuosl hostgroups: computers, buildd, hasbootfs, squeeze # mayr: # address: 140.211.166.58 # parents: gw-osuosl # hostgroups: computers, buildd, hasbootfs parry: address: 140.211.15.153 parents: gw-osuosl hostgroups: computers, squeeze, buildd, hassrvfs partch: address: 140.211.15.152 parents: gw-osuosl hostgroups: computers, squeeze, hassrvfs piston: address: 140.211.15.154 parents: gw-osuosl hostgroups: computers, squeeze, hassrvfs rietz: address: 140.211.166.43 parents: gw-osuosl hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, squeeze, apache2-hosts, bind9-hosts #, bosserver rietz2: address: 140.211.166.44 parents: rietz hostgroups: secondary-IPs # zee TODO # }}} # {{{ gs-rapidswitch caballero: address: 193.201.200.200 parents: gw-rapidswitch hostgroups: computers, buildd, sw-raid, squeeze # }}} # {{{ gw-sanger sibelius: address: 193.62.202.28 parents: gw-sanger hostgroups: computers, acpid-hosts, postgres90-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts, hasvarlogfs contacts: tjrc1, dave smetana: address: 193.62.202.29 parents: gw-sanger hostgroups: computers, porterbox, sw-raid, sparc, squeeze contacts: tjrc1, dave # }}} # {{{ gw-scanplus lobos: address: 212.211.132.250 parents: gw-scanplus-lobos hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror villa: address: 212.211.132.32 parents: gw-scanplus-villa hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-sil beethoven: address: 86.59.118.146 parents: gw-sil hostgroups: computers, hasbootfs, aacraid, nfs-server, service, acpid-hosts, squeeze, bacula-client eder: address: 86.59.118.151 parents: gw-sil hostgroups: computers, porterbox, squeeze, hassrvfs englund: address: 86.59.118.148 parents: gw-sil hostgroups: computers, acpid-hosts, service, apache2-hosts, squeeze, hassrvfs, megactl # which raid? eysler: address: 86.59.118.152 parents: gw-sil hostgroups: computers, buildd, squeeze lindberg: address: 86.59.118.149 parents: gw-sil hostgroups: computers, acpid-hosts, service, squeeze, megactl # which raid? merikanto: address: 86.59.118.147 parents: gw-sil hostgroups: computers, dl360, acpid-hosts, spamd, heavy-exim, nfs-client, rsyncd-hosts, xinetd-hosts, service, mail-relay, squeeze, autofs, apache2-hosts merikanto2: address: 86.59.118.150 parents: merikanto hostgroups: secondary-IPs # }}} # {{{ gw-telegraaf2 vasks: address: 217.196.43.140 parents: gw-telegraaf2 hostgroups: computers, nfs-server, postgres84-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain contact_groups: alioth-admins no-servicegroups: true wagner: address: 217.196.43.132 parents: gw-telegraaf2 hostgroups: computers, bind9-hosts, apache2-hosts, nfs-client, xinetd-hosts, postgres91-hosts, apache-https, dl385, brokensamhain contact_groups: alioth-admins no-servicegroups: true # }}} # {{{ gw-ubcece sw-ubcece: hostgroups: layer2-infrastructure contacts: lfilipoz pingable: false check_command: dsa_check_always_ok sw-ubcece-mcld: hostgroups: layer2-infrastructure parents: sw-ubcece contacts: lfilipoz pingable: false check_command: dsa_check_always_ok sw-ubcece-kais: hostgroups: layer2-infrastructure parents: sw-ubcece contacts: lfilipoz pingable: false check_command: dsa_check_always_ok spontini: address: 206.12.19.14 parents: sw-ubcece-mcld hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, squeeze contacts: lfilipoz ravel: address: 206.12.19.5 parents: sw-ubcece-kais hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze, autofs dijkstra: address: 206.12.19.218 parents: sw-ubcece-kais hostgroups: computers, bl460, acpid-hosts, service, squeeze pasquini: address: 206.12.19.217 parents: sw-ubcece-kais hostgroups: computers, bl460, acpid-hosts, service, squeeze, drbd-hosts luchesi: address: 206.12.19.214 parents: sw-ubcece-kais hostgroups: computers, bl460, acpid-hosts, service, squeeze tristano: address: 206.12.19.213 parents: sw-ubcece-kais hostgroups: computers, bl460, acpid-hosts, service, squeeze, drbd-hosts boito: address: 206.12.19.216 parents: sw-ubcece-kais hostgroups: computers, bl460, acpid-hosts, service, squeeze, drbd-hosts bertali: address: 206.12.19.212 parents: sw-ubcece-kais hostgroups: computers, bl460, acpid-hosts, service, squeeze, drbd-hosts ganeti2: address: 206.12.19.23 parents: sw-ubcece-kais hostgroups: notacomputer tchaikovsky: address: 206.12.19.118 parents: luchesi hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, squeeze dinis: address: 206.12.19.139 parents: ganeti2 hostgroups: computers, general, kvmdomains, squeeze, bacula-client wolkenstein: address: 206.12.19.116 parents: dijkstra hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy, bacula-client brahms: address: 206.12.19.115 parents: dijkstra hostgroups: computers, buildd, hasbootfs, hassrvfs, kvmdomains, squeeze geo2: address: 206.12.19.113 parents: dijkstra hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, squeeze morricone: address: 206.12.19.9 parents: sw-ubcece-kais hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze, uploadqueue stabile: address: 206.12.19.13 parents: sw-ubcece-kais hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs paganini: address: 206.12.19.10 parents: sw-ubcece-kais hostgroups: computers, hasbootfs, aacraid, hassrvfs, xinetd-hosts, nfs-client, service, apache2-hosts, squeeze, autofs respighi: address: 206.12.19.11 parents: sw-ubcece-kais hostgroups: computers, hasbootfs, aacraid, hassrvfs, service, apache2-hosts, squeeze # MSA 2000 (2012i) giustini: address: 192.168.2.6 parents: dijkstra hostgroups: notacomputer # unless we implement runfrom for host alive checks pingable: false check_command: dsa_check_always_ok falla: address: 206.12.19.117 parents: luchesi hostgroups: computers, freebsd, hassrvfs, porterbox, squeeze fano: address: 206.12.19.110 parents: luchesi hostgroups: computers, freebsd, squeeze, buildd, hassrvfs finzi: address: 206.12.19.111 parents: luchesi hostgroups: computers, freebsd, squeeze, buildd, hassrvfs fischer: address: 206.12.19.112 parents: luchesi hostgroups: computers, freebsd, hassrvfs, porterbox, squeeze gabrielli: address: 206.12.19.17 parents: sw-ubcece-kais hostgroups: computers, porterbox, wheezy corelli: address: 206.12.19.16 parents: sw-ubcece-kais hostgroups: computers, buildd, squeeze lucatelli: address: 206.12.19.15 parents: sw-ubcece-kais hostgroups: computers, buildd, squeeze, deadslow rossini: address: 206.12.19.19 parents: sw-ubcece-kais hostgroups: computers, dl585, acpid-hosts, service, squeeze salieri: address: 206.12.19.20 parents: sw-ubcece-kais hostgroups: computers, dl585, acpid-hosts, service, squeeze traetta: address: 206.12.19.21 parents: sw-ubcece-kais hostgroups: computers, dl585, acpid-hosts, service, squeeze # locke: # address: 206.12.19.120 # parents: sw-ubcece-kais # hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa lotti: address: 206.12.19.121 parents: sw-ubcece-kais hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs quantz: address: 206.12.19.122 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, postgres84-hosts, apache2-hosts, autofs nono: address: 206.12.19.123 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, heavy-exim, postgres84-hosts, xinetd-hosts, apache2-hosts, apache-https reger: address: 206.12.19.124 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, apache-https, heavy-exim danzi: address: 206.12.19.125 parents: luchesi hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, postgres84-hosts, xinetd-hosts glinka: address: 206.12.19.126 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs dukas: address: 206.12.19.128 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs, apache-https tye: address: 206.12.19.129 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs elgar: address: 206.12.19.130 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs berlioz: address: 206.12.19.131 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs, apache-https, bacula-client gombert: address: 206.12.19.132 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, heavy-exim, apache2-hosts jenkins: address: 206.12.19.133 parents: salieri hostgroups: computers, service, hasbootfs, kvmdomains, squeeze blavet: address: 206.12.19.134 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, xinetd-hosts, nfs-client, autofs barriere: address: 206.12.19.135 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs diabelli: address: 206.12.19.136 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, apache-https, bacula-client bizet: address: 206.12.19.137 parents: traetta hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs lilburn: address: 206.12.19.138 parents: dijkstra hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, apache2-hosts, nfs-client, autofs popov: address: 206.12.19.119 parents: luchesi hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim beach: address: 206.12.19.140 parents: ganeti2 hostgroups: computers, service, kvmdomains, squeeze, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts ullmann: address: 206.12.19.141 parents: ganeti2 hostgroups: computers, service, kvmdomains, squeeze, postgres91-hosts, nfs-client, apache2-hosts, autofs sonntag: address: 206.12.19.142 parents: ganeti2 hostgroups: computers, service, kvmdomains, squeeze, nfs-client, autofs, hassrvfs menotti: address: 206.12.19.143 parents: ganeti2 hostgroups: computers, service, kvmdomains, squeeze, hassrvfs, apache2-hosts #, apache-https coincy: address: 206.12.19.144 parents: ganeti2 hostgroups: computers, service, kvmdomains, squeeze, hassrvfs stanley: address: 206.12.19.145 parents: ganeti2 hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts muffat: address: 206.12.19.146 parents: ganeti2 hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay # }}} # {{{ gw-ugent ancina: address: 157.193.39.13 parents: gw-ugent hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, squeeze contacts: luk # }}} # {{{ gw-umn saens: address: 128.101.240.212 parents: gw-umn hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror # }}} # {{{ gw-utwente klecker: address: 130.89.148.10 parents: gw-utwente hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed2025, hassrvfs klecker-ftp: address: 130.89.148.12 parents: klecker hostgroups: secondary-IPs # }}} # {{{ gw-ynic hildegard: address: 144.32.168.74 parents: gw-ynic hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, deadslow howells: address: 144.32.168.75 parents: gw-ynic hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, deadslow hummel: address: 144.32.168.76 parents: gw-ynic hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, deadslow porpora: address: 144.32.168.78 parents: gw-ynic hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze poulenc: address: 144.32.168.77 parents: gw-ynic hostgroups: computers, buildd, sw-raid, hassrvfs, squeeze # }}} # {{{ gw-zivit zandonai: address: 80.245.147.46 parents: gw-zivit hostgroups: computers, buildd, hassrvfs, squeeze zelenka: address: 80.245.147.40 parents: gw-zivit hostgroups: computers, porterbox, hassrvfs, squeeze # }}} # }}} ############################# # host groups # # hostgroups ircd and all are automatically defined # ############################# hostgroups: computers: alias: computers private: 1 layer2-infrastructure: alias: Layer 2 Devices extinfo-icon_image: base/switch40.png extinfo-icon_image_alt: switch layer3-infrastructure: alias: Layer 3 Devices extinfo-icon_image: base/switch40.png extinfo-icon_image_alt: router notacomputer: alias: Systems that are not really systems. Yeah :) private: 1 deadslow: alias: Systems too slow to run any real checks freebsd: alias: freebsd private: 1 armhf: alias: armhf private: 1 sparc: alias: sparc private: 1 porterbox: alias: developer accessible porter machines extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s service: alias: machines running services extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s buildd: alias: buildd systems extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s general: alias: general purpose developer accessible machines extinfo-icon_image: base/debian.png extinfo-icon_image_alt: Debian GNU/Linux extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s dl380: alias: HP DL380 hosts private: 1 dl385: alias: HP DL385 hosts private: 1 dl360: alias: HP DL360 hosts private: 1 bl460: alias: HP BL460 blades private: 1 dl585: alias: HP DL385 hosts private: 1 sw-raid: alias: Hosts with Linux software raid private: 1 aacraid: alias: Hosts with Adaptec AACraid private: 1 megactl: alias: Hosts with LSI Logic MegaRAID, but not usable with megaraid check private: 1 megaraid: alias: Hosts with LSI Logic MegaRAID private: 1 mptraid: alias: Hosts with LSI Logic Fusion-MPT private: 1 squeeze: alias: Hosts running squeeze wheezy: alias: Hosts running wheezy kvmdomains: alias: Hosts that are KVM domains private: 1 drbd-hosts: alias: hosts running drbd postfix-hosts: alias: hosts running postfix instead of exim private: 1 heavy-exim: alias: "hosts running the full mail stuff, including clamav and postgrey" private: 1 mail-relay: alias: "relays usually are hosts with more exim processes" private: 1 spamd: alias: "hosts running spamassassin as daemon" private: 1 heavy-postfix: alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight" private: 1 apache2-hosts: alias: hosts running apache2 private: 1 varnish-hosts: alias: hosts running varnish private: 1 bind9-hosts: alias: hosts running bind9 private: 1 # once every host runs unbound, do away with this group and check "computers" instead unbound-hosts: alias: hosts running unbound private: 1 amavis-hosts: alias: hosts running amavis private: 1 #tftpd-hosts: # alias: hosts running a tftpd (tftpd-hpa as a daemon) # private: 1 rsyncd-hosts: alias: hosts providing rsync services via xinetd private: 1 xinetd-hosts: alias: hosts providing services via xinetd private: 1 #postgres81-hosts: # alias: hosts running postgres81 # private: 1 postgres84-hosts: alias: hosts running postgres84 private: 1 postgres90-hosts: alias: hosts running postgres90 private: 1 postgres91-hosts: alias: hosts running postgres91 private: 1 no-ulogd: alias: hosts not running ulogd private: 1 acpid-hosts: alias: hosts running acpid private: 1 uploadqueue: alias: hosts that are an anonymous ftp uploadqueue private: 1 bosserver: alias: hosts running bosserver private: 1 apache-https: alias: hosts with https services private: 1 bacula-client: alias: hosts which are backuped with bacula private: 1 nfs-client: alias: hosts mounting filesystems using NFS private: 1 nfs-server: alias: hosts serving filesystems using NFS private: 1 autofs: alias: hosts running the automounter private: 1 highload: alias: "hosts on which high load is normal" private: 1 secondary-IPs: alias: secondary IP addresses private: 1 hasbootfs: alias: hosts with a /boot filesystem private: 1 hassrvfs: alias: hosts with a /srv filesystem private: 1 hasorgfs: alias: hosts with a /org filesystem private: 1 hashomefs: alias: hosts with a /home filesystem private: 1 hasvarfs: alias: hosts with a /var filesystem private: 1 hasvarlogfs: alias: hosts with a /var/log filesystem private: 1 hasusrfs: alias: hosts with a /usr filesystem private: 1 # hasvicepa: # alias: hosts with a /vicepa # private: 1 incomingmailrelayed: alias: incoming mail needs to go through a mail relay # i.e. no port 25 private: 1 incomingmailrelayed2025: alias: incoming mail needs to go through a mail relay # i.e. no port 25 private: 1 ntpsuckers: alias: "hosts who's ntp offset is often unknown" private: 1 brokensamhain: alias: machines that can not run samhain private: 1 high-RTT: alias: machines with hight round trip times private: 1 security_mirror: alias: hosts that are security mirrors private: 1 ############################# # servicegroups ############################# servicegroups: diskspace: alias: diskusage checks buildd: alias: buildd checks raid: alias: raid checks kernel: alias: kernel checks weaksshkeys: alias: weak ssh keys apt: alias: apt upgrade status samhain: alias: samhain integrity status time: alias: time stuff security: alias: security servicegroup_members: apt, weaksshkeys, kernel, samhain ############################# # services ############################# services: - name: PING check: "check_ping!300.0,20%!600.0,40%" hostgroups: pingable excludehostgroups: layer3-infrastructure, high-RTT normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 - name: PING check: "check_ping!600.0,20%!900.0,40%" hostgroups: high-RTT normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 - name: PING check: "check_ping!2000.0,60%!3000.0,80%" hostgroups: layer3-infrastructure normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 ############ Services ############ ### ############ Disk Usage ############ #### - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -w 10% -c 5% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/home/buildd/build-trees" hostgroups: computers excludehosts: sibelius,stabile - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -w 10% -c 5% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/srv/snapshot.debian.org" hosts: stabile - name: disk usage - all servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98" hosts: sibelius - name: disk usage on / servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /" hostgroups: computers excludehosts: spohr - name: disk usage on / servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 93 /" hosts: spohr - name: disk usage on /boot servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot" hostgroups: hasbootfs - name: disk usage on /var servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var" hostgroups: hasvarfs - name: disk usage on /org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org" hostgroups: hasorgfs - name: disk usage on /srv servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv" hostgroups: hassrvfs excludehosts: stabile, beach - name: disk usage on /srv servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv" hosts: stabile, beach - name: disk usage on /tmp servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp" hosts: saens, powell, piatti - name: disk usage on /usr servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr" hostgroups: hasusrfs - name: disk usage on /home servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home" hostgroups: hashomefs - name: disk usage on /x servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /x" hosts: caballero - name: disk usage on /var/lib/postgresql servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql" hosts: stabile, sibelius, busoni, buxtehude - name: disk usage on /var/log servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log" hostgroups: hasvarlogfs - name: disk usage on /var/spool/postfix servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix" hosts: bendel #- # name: disk usage on /srv/morgue.debian.org # servicegroups: diskspace # nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org" # hosts: stabile - name: disk usage on /srv/mirrors servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/mirrors" hosts: beethoven, sibelius - name: disk usage on /srv/snapshot.debian.org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 94 98 /srv/snapshot.debian.org" hosts: stabile - name: disk usage on /srv/snapshot.debian.org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org" hosts: sibelius - name: disk usage on /srv/farm-snapshot/farm-misc servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/farm-snapshot/farm-misc" hosts: sibelius - name: disk usage on /var/lib/postgresql/9.1/dak servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1/dak" hosts: franck - name: disk usage on /srv/ftp-master.debian.org servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org" hosts: franck - name: disk usage on /srv/pgbackup servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /srv/pgbackup" hosts: franck - name: disk usage on /srv/pgbackup servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/pgbackup" hosts: beethoven - name: disk usage on /srv/git-backup servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/git-backup" hosts: beethoven - name: disk usage on /srv/da-backup servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/da-backup" hosts: beethoven - name: disk usage on /srv/bacula servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/bacula" hosts: beethoven ############ All Computers ############ #### - name: apt - security updates servicegroups: apt nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt" hostgroups: computers excludehostgroups: wheezy normal_check_interval: 60 retry_check_interval: 15 #### - name: backup nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup" hostgroups: computers normal_check_interval: 60 max_check_attempts: 2 retry_check_interval: 5 - name: backup server config nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server" hosts: beethoven normal_check_interval: 60 max_check_attempts: 2 retry_check_interval: 5 - name: backup - bacula remotecheck: "sudo /usr/lib/nagios/plugins/dsa-check-bacula -H $HOSTNAME$" runfrom: dinis hostgroups: bacula-client - name: process - bacula-fd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'" hostgroups: computers excludehostgroups: freebsd excludehosts: wagner, vasks - name: process - bacula-fd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'" hostgroups: freebsd #### - name: running kernel servicegroups: kernel nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel" hostgroups: computers normal_check_interval: 60 retry_check_interval: 5 #### # - name: afs - space # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-space -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 # # - name: afs - bos # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-bos -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 # # - name: afs - waiting connections # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-rxdebug -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 # #- name: afs - udebug # hostgroups: bosserver # nrpe: "/usr/lib/nagios/plugins/dsa-check-afs-udebug -H localhost" # normal_check_interval: 60 # max_check_attempts: 2 # retry_check_interval: 5 #### - name: puppet nrpe: "/usr/lib/nagios/plugins/dsa-check-file_age -i 540 -f /var/lib/puppet/state/state.yaml" hostgroups: computers excludehosts: wagner, vasks #### - name: installed firewall nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf" hostgroups: computers excludehostgroups: freebsd excludehosts: vasks, wagner - name: puppetized firewall nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf" hostgroups: computers excludehostgroups: freebsd excludehosts: vasks, wagner #### - name: process - samhain nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'" hostgroups: computers excludehostgroups: brokensamhain - name: samhain servicegroups: samhain nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain" hostgroups: computers depends: process - samhain normal_check_interval: 60 retry_check_interval: 5 excludehostgroups: brokensamhain #### - name: users nrpe: "/usr/lib/nagios/plugins/check_users 30 35" hostgroups: computers #### - name: load nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50" hostgroups: computers excludehostgroups: highload - name: load nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200" hostgroups: highload #### - name: uptime check nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime" hostgroups: computers #### - name: processes - zombies nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z" hostgroups: computers #### - name: processes - total nrpe: "/usr/lib/nagios/plugins/check_procs 620 700" hostgroups: computers #### - name: swap usage - percent nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%" hostgroups: computers #### - name: swap usage - mb nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000" hostgroups: computers #### - name: process - getty nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty" hostgroups: computers excludehosts: zelenka, zandonai #### - name: process - sshd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'" hostgroups: computers - name: "network service - sshd" check: dsa_check_ssh hostgroups: computers depends: process - sshd normal_check_interval: 60 notification_interval: 1440 - name: ssh - weak keys servicegroups: weaksshkeys nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/weak-ssh-keys" hostgroups: computers excludehosts: wagner, vasks normal_check_interval: 60 #### - name: network service - nrpe check: check_tcp!5666 hostgroups: computers max_check_attempts: -2 notification_interval: 1440 - name: process - nrpe nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'" hostgroups: computers max_check_attempts: -1 depends: network service - nrpe ### - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'" hostgroups: computers excludehostgroups: freebsd, armhf excludehosts: vasks, wagner - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'" hostgroups: freebsd - name: process - munin-node nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'" hostgroups: wheezy - name: network service - munin-node check: check_tcp!4949 hostgroups: computers depends: process - munin-node excludehosts: vasks, wagner ### - name: process - ntpd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'" hostgroups: computers servicegroups: time - name: network service - ntp check: dsa_check_ntp hostgroups: computers depends: process - ntpd excludehosts: ancina excludehostgroups: ntpsuckers, deadslow servicegroups: time # - name: network service - time check: dsa_check_time hosts: ancina depends: process - xinetd servicegroups: time ### - name: process - atd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd" hostgroups: computers ### - name: process - cron nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron" hostgroups: computers ### - name: process - syslog-ng nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'" hostgroups: computers excludehostgroups: freebsd excludehosts: vasks, wagner - name: process - syslog-ng nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'" hostgroups: freebsd - name: remote logging on lotti remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" runfrom: lotti hostgroups: computers excludehosts: vasks, wagner - name: remote logging on lully remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$" runfrom: lully hostgroups: computers excludehosts: vasks, wagner ### MAIL STUFF ### - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'" hostgroups: computers excludehostgroups: postfix-hosts, mail-relay excludehosts: master, busoni, quantz, buxtehude - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'" hostgroups: mail-relay - name: process - exim - total nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4" hostgroups: computers excludehostgroups: postfix-hosts excludehosts: master, busoni, quantz, buxtehude - name: process - exim nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'" hosts: master, busoni, quantz, buxtehude - name: mail queue nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000" hostgroups: heavy-exim ### - name: process - clamav - clamd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'" hostgroups: heavy-exim, heavy-postfix hosts: wagner - name: service - clamav nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl" hostgroups: heavy-exim, heavy-postfix hosts: wagner depends: process - clamav - clamd - name: process - clamav - freshclam nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'" hosts: wagner hostgroups: heavy-exim, heavy-postfix - name: unwanted process - clamav nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix, deadslow excludehosts: wagner - name: unwanted process - freshclam nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix, deadslow excludehosts: wagner - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hostgroups: spamd excludehosts: powell, wagner excludehostgroups: deadslow - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hosts: powell, wagner - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'" hosts: bendel - name: process - spamd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'" hosts: wagner, bendel hostgroups: spamd depends: process - spamd - master # - name: process - spamd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '" hosts: buxtehude - name: process - spamd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'" hosts: buxtehude # - name: unwanted process - spamd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd" hostgroups: computers excludehostgroups: spamd, deadslow excludehosts: bendel, busoni, wagner, buxtehude ### #- # name: process - greylistd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u greylist -C greylistd -a '/usr/bin/python /usr/sbin/greylistd'" # hostgroups: heavy-exim # - name: unwanted process - greylistd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd" hostgroups: computers excludehostgroups: deadslow ### - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'" hostgroups: heavy-exim excludehostgroups: wheezy - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'" hostgroups: heavy-exim excludehostgroups: squeeze - name: process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'" hostgroups: heavy-postfix # - name: unwanted process - postgrey nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey" hostgroups: computers excludehostgroups: heavy-postfix, heavy-exim, deadslow ### - name: process - amavis - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd-new (master)'" hostgroups: amavis-hosts - name: process - amavis - all nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd-new '" hostgroups: amavis-hosts depends: process - amavis - master # - name: unwanted process - amavis nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new" hostgroups: computers excludehostgroups: amavis-hosts, deadslow ### - name: process - weightd - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'" hostgroups: heavy-postfix - name: process - weightd - cache nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'" hostgroups: heavy-postfix depends: process - weightd - master - name: process - weightd - child nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'" hostgroups: heavy-postfix depends: process - weightd - master # - name: unwanted process - policyd-weight nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight" hostgroups: computers excludehostgroups: heavy-postfix, deadslow ### - name: process - postfix - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'" hostgroups: postfix-hosts - name: process - postfix - qmgr nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'" hostgroups: postfix-hosts depends: process - postfix - master #- # name: process - postfix - tlsmgr # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C tlsmgr -a 'tlsmgr -l -t fifo -u'" # hostgroups: postfix-hosts # depends: process - postfix - master - name: process - postfix - pickup nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - anvil nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - trivial-rewrite nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - proxymap nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - cleanup nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'" hostgroups: postfix-hosts depends: process - postfix - master - name: process - postfix - local nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'" hostgroups: postfix-hosts depends: process - postfix - master ### - name: network service - smtp check: dsa_check_smtp hostgroups: computers excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025 depends: process - exim - name: network service - smtp check: dsa_check_smtp hostgroups: postfix-hosts depends: process - postfix - master - name: network service - submission check: dsa_check_smtp_port!587 hostgroups: incomingmailrelayed depends: process - exim - name: network service - smtp 2025 check: dsa_check_smtp_port!2025 hostgroups: incomingmailrelayed2025 depends: process - exim - name: network service local - smtps cert nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45" hostgroups: postfix-hosts depends: process - postfix - master normal_check_interval: 120 - name: setup - dsa config nrpe: "/usr/lib/nagios/plugins/dsa-check-config" hostgroups: computers excludehosts: wagner, vasks normal_check_interval: 60 - name: setup - ud-ldap freshness nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness" excludehosts: wagner, vasks hostgroups: computers - name: system - available entropy nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy" event_handler: dsa_event_handler_restart_ekey hostgroups: computers excludehosts: vasks, wagner excludehostgroups: freebsd - name: system - filesystem check nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems" normal_check_interval: 60 retry_check_interval: 15 excludehosts: wagner, vasks hostgroups: computers ### - name: local resolver nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com" hostgroups: computers excludehosts: vasks, wagner normal_check_interval: 60 - name: process - unbound nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'" excludehosts: vasks, wagner hostgroups: unbound-hosts, squeeze, wheezy ### - name: process - uptimed nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'" hostgroups: computers excludehosts: vasks, wagner ### - name: unwanted process - irqbalance nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance" hostgroups: computers excludehostgroups: deadslow #### ### #- # name: unwanted process - system-tools-backends # nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C system-tools-ba" # hostgroups: computers #- # name: unwanted process - dbus-daemon # nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C dbus-daemon" # hostgroups: computers - name: unwanted process - gkrellmd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd" hostgroups: computers excludehostgroups: deadslow - name: unwanted process - portmap nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C portmap" hostgroups: computers excludehostgroups: nfs-client, nfs-server, deadslow - name: unwanted process - rpc.statd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd" hostgroups: computers excludehostgroups: nfs-client, nfs-server, deadslow - name: unwanted process - inetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd" hostgroups: computers excludehosts: grieg, abel, alwyn, vasks excludehostgroups: deadslow - name: unwanted process - snmpd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd" hostgroups: computers excludehostgroups: deadslow #### - name: "host SSL cert" nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi" hostgroups: computers - name: "pg SSL cert" nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/pg-ubcece.debian.org-chained.pem" hosts: danzi ############ Processes/Services that only run on some computers ############ #### ### - name: process - rngd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd -a '/usr/sbin/rngd -r /dev/hwrng'" hostgroups: dl385 ### - name: process - mdadm monitor servicegroups: raid nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'" hostgroups: sw-raid excludehosts: argento - # wheezy: name: process - mdadm monitor servicegroups: raid nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'" hosts: argento - name: RAID - sw raid servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw" hostgroups: sw-raid ### - name: process - monit nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'" hostgroups: computers excludehosts: vasks, wagner excludehostgroups: armhf - name: process - monit nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'" hostgroups: wheezy - name: RAID - arrayprobe servicegroups: raid nrpe: "sudo /usr/bin/arrayprobe" hostgroups: dl385, dl380, dl360, bl460, dl585 excludehosts: franck - name: RAID - arrayprobe servicegroups: raid nrpe: "sudo /usr/bin/arrayprobe -f /dev/cciss/c1d0" hosts: franck - name: HW - hpacucli status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli" normal_check_interval: 120 hostgroups: dl385, dl380, dl360, bl460 excludehosts: schein - name: HW - hpacucli status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery" normal_check_interval: 120 hosts: schein - name: HW - hpacucli enclosure status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1" normal_check_interval: 120 hosts: franck - name: HW - hpacucli status servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2" normal_check_interval: 120 hostgroups: dl585 ### - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm" normal_check_interval: 120 hostgroups: dl385, dl380, dl360, bl460, dl585 excludehosts: villa, lobos, senfl, schein - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant" normal_check_interval: 120 hosts: villa, lobos - name: HW - hpasmcli status nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant" normal_check_interval: 120 hosts: senfl, schein ### - name: RAID - areca servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-areca" hosts: powell ### - name: RAID - aacraid servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid" hostgroups: aacraid ### - name: RAID - megaraid servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid" hostgroups: megaraid ### #- # name: RAID - 3ware # servicegroups: raid # nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware" # hosts: puccini ### - name: RAID - MPT servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt" hostgroups: mptraid ### - name: RAID - megactl servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megactl" hostgroups: megactl ### - name: RAID - DRBD servicegroups: raid nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All" hostgroups: drbd-hosts ### - name: process - slapd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'" hosts: draghi - name: network service - ldaps cert check: dsa_check_cert!636 depends: process - slapd normal_check_interval: 60 hosts: draghi ### - name: process - ulogd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'" hostgroups: computers excludehostgroups: freebsd, sparc excludehosts: vasks, wagner - name: unexpected process - ulogd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd" hostgroups: freebsd, sparc ### - name: process - udevd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'" hostgroups: computers excludehostgroups: freebsd - name: unexpected process - udev nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd" hostgroups: freebsd ### - name: process - acpid nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'" hostgroups: acpid-hosts - name: unexpected process - acpid nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid" hostgroups: computers excludehostgroups: acpid-hosts, kvmdomains ### # - # name: process - bosserver # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C bosserver -a '/usr/sbin/bosserver'" # hostgroups: bosserver # ### - name: process - inetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C inetd -a '/usr/sbin/inetd'" hosts: grieg, vasks ### - name: process - xinetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'" hostgroups: xinetd-hosts - name: unwanted process - xinetd nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd" hostgroups: computers excludehostgroups: xinetd-hosts, deadslow ### - name: network service - finger check: check_tcp!79 hosts: draghi depends: process - xinetd ### - name: network service - rsync check: check_tcp!873 hostgroups: rsyncd-hosts depends: process - xinetd excludehosts: merikanto, rietz - name: network service - rsync check: check_tcp!873 hosts: rietz2 depends: rietz:process - xinetd - name: network service - rsync check: check_tcp!873 hosts: merikanto2 depends: merikanto:process - xinetd ### - name: process - icinga # there is always one extra process per check currently running.. nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'" hosts: tchaikovsky ### - name: process - apache2 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache2 -a /usr/sbin/apache2" hostgroups: apache2-hosts - name: process - apache2 - worker nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -C apache2 -a /usr/sbin/apache2" hostgroups: apache2-hosts depends: process - apache2 - master - name: unwanted process - apache2 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2" hostgroups: computers excludehostgroups: apache2-hosts, deadslow - name: network service - http check: check_http hostgroups: apache2-hosts excludehosts: klecker depends: process - apache2 - master - name: network service - http check: check_http depends: klecker:process - apache2 - master hosts: klecker-ftp # keyserver on kaufmann - name: network service - http keyserver check: dsa_check_http_port!11371 hosts: kaufmann depends: process - apache2 - master # https on various hosts - name: network service - https check: check_https hostgroups: apache-https excludehosts: handel depends: "process - apache2 - master" normal_check_interval: 120 - name: network service - https check: dsa_check_https_want_auth hosts: handel depends: "process - apache2 - master" normal_check_interval: 120 - name: network service - https cert check: dsa_check_cert!443 hostgroups: apache-https depends: network service - https normal_check_interval: 60 - name: unwanted network service - https check: dsa_check_port_closed!443 hostgroups: apache2-hosts excludehostgroups: apache-https, deadslow # ravel does ssh on port 443 excludehosts: ravel normal_check_interval: 60 ### - name: process - varnish - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C varnishd -a '/usr/sbin/varnishd -P /var/run/varnishd.pid -a :80 -T localhost:6082 -f /etc/varnish/default.vcl'" hostgroups: varnish-hosts - name: process - varnish - worker nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u nobody -C varnishd -a '/usr/sbin/varnishd -P /var/run/varnishd.pid -a :80 -T localhost:6082 -f /etc/varnish/default.vcl'" hostgroups: varnish-hosts depends: process - varnish - master - name: network service - http check: check_http hostgroups: varnish-hosts depends: process - varnish - master ### #### - name: process - named nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'" hostgroups: bind9-hosts - name: network service - dns check: check_dns hostgroups: bind9-hosts depends: process - named - name: unwanted process - named nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named" hostgroups: computers excludehostgroups: bind9-hosts, deadslow #### - name: network service - ftp check: check_ftp hostgroups: uploadqueue, security_mirror excludehosts: klecker - name: network service - ftp check: check_ftp hosts: klecker-ftp depends: klecker:process - xinetd #### #- # name: process - debianqueued # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak -C debianqueued" - name: process - debianqueued nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued" hostgroups: uploadqueue ### #- # name: process - postresql81 - master # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a '/usr/lib/postgresql/8.1/bin/postmaster -D /var/lib/postgresql/8.1/main -c config_file=/etc/postgresql/8.1/main/postgresql.conf'" # hostgroups: postgres81-hosts #- # name: process - postresql81 - writer # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: writer process'" # hostgroups: postgres81-hosts # depends: process - postresql81 - master #- # name: process - postresql81 - buffer # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats buffer process'" # hostgroups: postgres81-hosts # depends: process - postresql81 - master #- # name: process - postresql81 - collector # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats collector process'" # hostgroups: postgres81-hosts # depends: process - postresql81 - master #### - name: unwanted process - postresql nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres" hostgroups: computers excludehostgroups: postgres90-hosts, postgres84-hosts, postgres91-hosts, deadslow - name: process - postresql91 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'" hostgroups: postgres91-hosts - name: process - postresql90 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.0/bin/postgres'" hostgroups: postgres90-hosts - name: process - postresql84 - master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'" hostgroups: postgres84-hosts - name: postgresql backups nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg" hosts: beethoven #### #### - name: process - stunnel4 - puppet-ekeyd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'" hostgroups: squeeze, wheezy excludehostgroups: freebsd #### - name: process - UPS - nut usbhid-ups - ups1 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups -a '/lib/nut/usbhid-ups -a ups1'" hosts: franck - name: process - UPS - nut upsd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd -a '/sbin/upsd'" hosts: franck - name: process - UPS - nut upsmon master nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon -a '/sbin/upsmon'" hosts: franck - name: process - UPS - nut upsmon worker nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon -a '/sbin/upsmon'" hosts: franck depends: process - UPS - nut upsmon master - name: UPS - on line power nrpe: "/usr/lib/nagios/plugins/dsa-check-ups" hosts: franck depends: process - UPS - nut upsd - name: process - pglistener nrpe: "/usr/lib/nagios/plugins/check_procs -u pglisten -C python -a '/usr/bin/python /usr/share/pglistener/starter.py /etc/pglistener/pglistener.cfg /etc/pglistener/conf.d' -w 1: -c 1:" hosts: wagner, vasks #### #- # name: process - xenconsoled # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenconsoled -a 'xenconsoled'" # hosts: piatti #- # name: process - xenstored # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenstored -a '/usr/lib/xen-3.0.3-1/bin/xenstored --pid-file /var/run/xenstore.pid'" # hosts: piatti #- # name: process - xend # nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C python -a 'python /usr/lib/xen-3.0.3-1/bin/xend start'" # hosts: piatti # #### - name: process - libvirtd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C libvirtd -a '/usr/sbin/libvirtd -d'" hosts: unger ### - name: process - buildd servicegroups: buildd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'" hosts: fano, fasch, finzi, fils contact_groups: buildd - name: process - buildd servicegroups: buildd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'" hostgroups: buildd excludehosts: fano, fasch, finzi, fils contact_groups: buildd #### - name: network service - gobby check: check_tcp!6523 hosts: gombert contact_groups: gobby ### #- # name: process - tftpd # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'" # hostgroups: tftpd-hosts ### ############ NFS Stuff ############ #### - name: process - portmap nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C portmap -a '/sbin/portmap'" hostgroups: nfs-client, nfs-server - name: process - statd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'" hostgroups: nfs-client, nfs-server - name: process - nfsd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'" hostgroups: nfs-server - name: process - lockd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'" hostgroups: nfs-server - name: process - mountd nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'" hostgroups: nfs-server - name: nfs server stabile reachable nrpe: "/usr/lib/nagios/plugins/check_ping -H 192.168.2.13 -w 50,10% -c 200,30%" hosts: quantz # - name: process - automount nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'" hostgroups: autofs - name: unwanted process - automount nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount" hostgroups: computers excludehostgroups: autofs, deadslow ############ MISC OTHER Stuff ############ ##### - name: mirror sync - bugs check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600" hosts: global - name: mirror sync - security check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600" hosts: global - name: mirror sync - packages check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600" hosts: global normal_check_interval: 15 max_check_attempts: 5 retry_check_interval: 5 - name: mirror sync - snapshot check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800" hosts: global normal_check_interval: 15 max_check_attempts: 5 retry_check_interval: 5 - name: DNS SOA sync - debian.org check: "dsa_check_soas_add!draghi.debian.org!debian.org" hosts: global - name: DNS SOA sync - debian.net check: "dsa_check_soas_add!draghi.debian.org!debian.net" hosts: global - name: DNS SOA sync - debian.com check: "dsa_check_soas_add!draghi.debian.org!debian.com" hosts: global - name: DNS SOA sync - mirror.debian.net check: "dsa_check_soas_add!draghi.debian.org!mirror.debian.net" hosts: global - name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa check: "dsa_check_soas_add!draghi.debian.org!144-28.118.59.86.in-addr.arpa" hosts: global - name: DNS SOA sync - alioth.debian.org check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org" hosts: global - name: DNS SOA sync - 2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa" hosts: global - name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa" hosts: global - name: DNS SEC - signature expiry hosts: global remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/geo/zones /srv/dns.debian.org/var/gitdns/domains" runfrom: orff - name: DNS SEC - delegations hosts: global remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/var/gitdns/domains --dir /srv/dns.debian.org/geo/zones check-header" runfrom: orff ############ - name: ping alive check remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%" runfrom: dijkstra hosts: giustini normal_check_interval: 5 max_check_attempts: 4 retry_check_interval: 1 - name: Overall Unit Status remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3" runfrom: dijkstra hosts: giustini - name: event log remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=7634 $HOSTADDRESS$ public" runfrom: dijkstra hosts: giustini # vim: set ts=2 sw=2 et ai si fdm=marker: