# Non comment lines are YAML
#
# Strings ought to be in double quotes, but it works in most cases if they aren't :)
#
# vim:set syntax=yaml:

# TODO
#  - spohr: hpasmd
#  - *: mailq
#  - *: check munin stats collection works
#  - *: check backups are successful
#  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
#  - verdi: pg upgrade, openvpn
#  - mundy: salinfo_decode

# down:
#  - sarti
#  - leisner

---
#############################
# hosts
#############################
servers:
  gw-man-da:
    address: 82.195.75.126
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
    contacts: joerg, bzed
  gw-HP-ftc:
    address: 192.25.206.1
    parents: samosa
    hostgroups: routing-infrastructure
  gw-brainfood:
    address: 70.103.162.1
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-brown.edu:
    address: 128.148.34.1
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-osuosl:
    address: 140.211.166.1
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-scanplus-villa:
    address: 212.211.132.1
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-scanplus-lobos:
    address: 212.211.132.249
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-mit-csail:
    address: 128.30.0.254
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-xs4all:
    address: 194.109.137.217
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-umn.edu:
    address: 128.101.240.222
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-dg-i.net:
    address: 195.49.152.190
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
    contacts: bzed
  gw-freenet:
    address: 62.104.23.249
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-topalis:
    address: 195.243.109.254
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-sanger:
    address: 193.62.202.18
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
    contacts: tjrc1
  gw-lrz:
    address: 129.187.0.150
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-frost:
    address: 130.81.242.195
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-1und1:
    address: 195.20.247.54
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
    contacts: joerg
  gw-1und1-karlsruhe:
    address: 212.227.120.29
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-blackcat:
    address: 193.201.200.129
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-xandros:
    address: 67.210.160.81
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-nmmn:
    address: 217.114.76.81
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-utwente:
    address: 130.89.149.1
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  #gw-ughent:
  #  address: 157.193.39.254
  #  parents: gw-HP-ftc
  #  hostgroups: routing-infrastructure
  gw-agnesi:
    address: 65.173.90.18
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-ubc:
    address: 137.82.84.94
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
    contacts: lfilipoz
  gw-carnet:
    address: 161.53.160.1
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-telegraaf:
    address: 82.94.249.153
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-helsinki:
    address: 128.214.173.25
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
    contacts: holger
  gw-telefonica:
    address: 195.71.99.193
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-ball:
    address: 78.32.9.209
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-cst:
    address: 213.188.99.215
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure
  gw-isc:
    address: 149.20.20.1 
    parents: gw-HP-ftc
    hostgroups: routing-infrastructure

  global:
    hostgroups: notacomputer
    pingable: false
    check_command: dsa_check_always_ok

  samosa:
    address: 192.25.206.57
    hostgroups: computers, no-udev, service, dl380, apache2-hosts, bind9-hosts, heavy-exim, lenny
  raff:
    address: 192.25.206.59
    parents: samosa
    hostgroups: computers, no-udev, service, dl380, apache2-hosts, bind9-hosts, rsyncd-hosts, heavy-exim, ulogd-hosts, nfs-client, lenny, puppet
  gluck:
    address: 192.25.206.10
    parents: samosa
    hostgroups: computers, no-udev, general, dl380, apache2-hosts, bind9-hosts, heavy-exim, highload, nfs-client, ulogd-hosts, lenny, puppet
  merkel:
    address: 192.25.206.16
    parents: samosa
    hostgroups: computers, general, apache1-hosts, apache2-hosts, bind9-hosts, rsyncd-hosts, sw-raid, postgres81-hosts, heavy-exim, nfs-client, ulogd-hosts, lenny, puppet
  spohr:
    address: 192.25.206.33
    parents: samosa
    hostgroups: computers, service, dl380, apache2-hosts, postgres83-hosts, ulogd-hosts, nfs-server, lenny, puppet
  peri:
    address: 192.25.206.15
    parents: samosa
    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny, puppet
    contacts: dannf
  penalosa:
    address: 192.25.206.68
    parents: samosa
    hostgroups: computers, buildd, sw-raid, single-cpu, hasbootfs, lenny, puppet
    contacts: dannf
  mundy:
    address: 192.25.206.62
    parents: samosa
    hostgroups: computers, buildd, lenny, puppet
  paer:
    address: 192.25.206.11
    parents: samosa
    hostgroups: computers, porterbox, lenny, hasbootfs, puppet
  merulo:
    address: 192.25.206.58
    parents: samosa
    hostgroups: computers, porterbox, lenny, puppet

  bartok:
    address: 82.195.75.91
    parents: gw-man-da
    hostgroups: computers, service, dl385, bind9-hosts, lenny, puppet
    contacts: joerg, bzed
  morales:
    address: 82.195.75.97
    parents: gw-man-da
    hostgroups: computers, porterbox, single-cpu, no-samhain, hasbootfs
    contacts: bzed
  sperger:
    address: 82.195.75.98
    parents: gw-man-da
    hostgroups: computers, porterbox, sw-raid, hasbootfs, lenny
    contacts: bzed
  agricola:
    address: 82.195.75.86
    parents: gw-man-da
    hostgroups: computers, porterbox, sw-raid, single-cpu, lenny, puppet
    contacts: bzed
  arcadelt:
    address: 82.195.75.87
    parents: gw-man-da
    hostgroups: computers, buildd, sw-raid, single-cpu, lenny, puppet
    contacts: bzed
  liszt:
    address: 82.195.75.100
    parents: gw-man-da
    hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts
    contacts: bzed
#  auber:
#    address: 82.195.75.101
#    parents: gw-man-da
#    hostgroups: computers, no-udev, buildd, sw-raid
#    contacts: bzed
  unger:
    address: 82.195.75.102
    parents: gw-man-da
    hostgroups: computers, service, dl360, rsyslog-hosts, acpid-hosts, lenny, puppet
  handel:
    address: 82.195.75.104
    parents: unger
    hostgroups: computers, service, rsyslog-hosts, acpid-hosts, lenny, hasbootfs, puppet

  master:
    address: 70.103.162.29
    parents: gw-brainfood
    hostgroups: computers, general, apache2-hosts, bind9-hosts, heavy-exim, highload, lenny, puppet
  murphy:
    address: 70.103.162.31
    parents: gw-brainfood
    hostgroups: computers, general, postfix-hosts, dl380, acpid-hosts, lenny

  ries:
    address: 128.148.34.103
    parents: gw-brown.edu
    hostgroups: computers, service, apache2-hosts, bind9-hosts, ftpd-hosts, dl385, rsyncd-hosts, postgres83-hosts, heavy-exim, acpid-hosts, lenny, puppet

  mayer:
    address: 140.211.166.78
    parents: gw-osuosl
    hostgroups: computers, no-udev, buildd, hasbootfs
  mayr:
    address: 140.211.166.58
    parents: gw-osuosl
    hostgroups: computers, no-udev, buildd, hasbootfs
  malo:
    address: 140.211.166.27
    parents: gw-osuosl
    hostgroups: computers, buildd, lenny
  rietz:
    address: 140.211.166.43
    parents: gw-osuosl
    hostgroups: computers, no-udev, service, apache2-hosts, bind9-hosts, rsyncd-hosts, dl385, heavy-exim, highload, hasbootfs
  rietz2:
    address: 140.211.166.44
    parents: rietz
    hostgroups: secondary-IPs

  villa:
    address: 212.211.132.32
    parents: gw-scanplus-villa
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, lenny, puppet
  lobos:
    address: 212.211.132.250
    parents: gw-scanplus-lobos
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, lenny, puppet

  steffani:
    address: 128.31.0.36
    parents: gw-mit-csail
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, sw-raid, bind9-hosts, acpid-hosts, hasbootfs, lenny, puppet
  mahler:
    address: 128.31.0.46
    parents: gw-mit-csail
    hostgroups: computers, single-cpu, lenny, porterbox, rsyslog-hosts, puppet

  klecker:
    address: 194.109.137.218
    parents: gw-xs4all
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, bind9-hosts, dl385, postgres83-hosts, heavy-exim

  saens:
    address: 128.101.240.212
    parents: gw-umn.edu
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, lenny, puppet

  argento:
    address: 93.94.130.160
    parents: gw-dg-i.net
    hostgroups: computers, buildd, sw-raid, single-cpu, lenny, puppet
    contacts: bzed

  widor:
    address: 93.94.130.161
    parents: gw-dg-i.net
    hostgroups: computers, apache2-hosts, sw-raid, single-cpu, lenny, puppet, rsyslog-hosts, acpid-hosts
    contacts: bzed

  pergolesi:
    address: 62.104.23.252
    parents: gw-freenet
    hostgroups: computers, no-udev, porterbox, sw-raid
  bruckner:
    address: 62.104.23.253
    parents: gw-freenet
    hostgroups: computers, no-udev, porterbox, single-cpu, no-samhain

  raptor:
    address: 195.243.109.162
    parents: gw-topalis
    hostgroups: computers, porterbox, postfix-hosts

  albeniz:
    address: 193.62.202.27
    parents: gw-sanger
    # SMP kernel doesn't run stable
    hostgroups: computers, porterbox, sw-raid, single-cpu, hasbootfs, lenny, puppet
    contacts: tjrc1
  goetz:
    address: 193.62.202.26
    parents: gw-sanger
    # SMP kernel doesn't run stable
    hostgroups: computers, buildd, sw-raid, single-cpu, hasbootfs, lenny, puppet
    contacts: tjrc1
  smetana:
    address: 193.62.202.29
    parents: gw-sanger
    hostgroups: computers, porterbox, sw-raid, lenny, puppet
    contacts: tjrc1

  verdi:
    address: 192.54.42.193
    parents: gw-lrz
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, postgres81-hosts, postfix-hosts

  voltaire:
    address: 72.66.115.54
    parents: gw-frost
    hostgroups: computers, buildd, puppet, lenny
    contacts: sfrost

  puccini:
    address: 87.106.4.56
    parents: gw-1und1
    hostgroups: computers, buildd, lenny, rsyslog-hosts, ulogd-hosts, puppet
    contacts: joerg
  powell:
    address: 87.106.64.223
    parents: gw-1und1
    hostgroups: computers, service, heavy-exim, rsyncd-hosts, ulogd-hosts, acpid-hosts, lenny, puppet
    contacts: joerg

  schumann:
    address: 212.227.126.54
    parents: gw-1und1-karlsruhe
    hostgroups: computers, acpid-hosts, ulogd-hosts, lenny
  wieck:
    address: 195.20.242.89
    parents: gw-1und1-karlsruhe
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, ulogd-hosts, lenny, puppet

  caballero:
    address: 193.201.200.200
    parents: gw-blackcat
    hostgroups: computers, no-udev, buildd, sw-raid, lenny, puppet

  elara:
    address: 67.210.160.90
    parents: gw-xandros
    hostgroups: deadslow
  europa:
    address: 67.210.160.89
    parents: gw-xandros
    hostgroups: deadslow

  kullervo:
    address: 217.114.76.82
    parents: gw-nmmn
    hostgroups: deadslow
    contacts: luk
  crest:
    address: 217.114.76.83
    parents: gw-nmmn
    hostgroups: deadslow
    contacts: luk
  pescetti:
    address: 217.114.76.85
    parents: gw-nmmn
    hostgroups: computers, porterbox, single-cpu, smart, lenny, puppet

  kassia:
    address: 130.89.149.224
    parents: gw-utwente
    hostgroups: computers, service, postfix-hosts, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl360, acpid-hosts, ulogd-hosts, lenny
  kassia-sec:
    address: 130.89.149.225
    parents: kassia
    hostgroups: secondary-IPs
  kassia-ftp:
    address: 130.89.149.226
    parents: kassia
    hostgroups: secondary-IPs
  kassia4:
    address: 130.89.149.227
    parents: kassia
    hostgroups: secondary-IPs

  allegri:
    address: 157.193.39.233
    parents: gw-HP-ftc
    hostgroups: computers, buildd, postfix-hosts, sw-raid, single-cpu, lenny
    contacts: luk

  agnesi:
    address: 65.173.90.83
    parents: gw-agnesi
    hostgroups: deadslow

  spontini:
    address: 137.82.84.65
    parents: gw-ubc
    hostgroups: computers, buildd, hasbootfs, lenny, puppet
    contacts: lfilipoz
  ravel:
    address: 137.82.84.66
    parents: gw-ubc
    hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, ftpd-hosts, hasbootfs, lenny, puppet

  lebrun:
    address: 193.198.184.10
    parents: gw-carnet
    hostgroups: computers, buildd
  schroeder:
    address: 193.198.184.11
    parents: gw-carnet
    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny, puppet

  tartini:
    address: 82.94.249.158
    parents: gw-telegraaf
    hostgroups: computers, sw-raid, apache2-hosts, mysql-hosts, hasbootfs

  piatti:
    address: 193.167.161.225
    parents: gw-helsinki
    hostgroups: computers, postfix-hosts, dl385, ulogd-hosts, acpid-hosts, apache2-hosts, postgres83-hosts, lenny, hasbootfs
    contacts: holger

  rem:
    address: 195.71.99.217
    parents: gw-telefonica
    hostgroups: computers, buildd, hasbootfs, lenny, puppet

  ball:
    address: 78.32.9.213
    parents: gw-ball
    hostgroups: computers, buildd, no-udev, dialup, hasbootfs, lenny, puppet

  zelenka:
    address: 80.245.147.40
    parents: gw-HP-ftc
    hostgroups: computers, porterbox, lenny, puppet

  escher:
    address: 213.188.99.215
    parents: gw-cst
    hostgroups: computers, single-cpu, hasbootfs
  goedel:
    address: 213.188.99.214
    parents: gw-cst
    hostgroups: computers, single-cpu, hasbootfs, lenny, puppet

  schein:
    address: 149.20.20.6
    parents: gw-isc
    hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, lenny, rsyslog-hosts, puppet, dl360

#############################
# host groups
#
# hostgroups ircd and all are automatically defined
#
#############################
hostgroups:
  computers:
    alias: computers
    private: 1
  routing-infrastructure:
    alias: Internet routers and friends
    extinfo-icon_image: base/switch40.png
    extinfo-icon_image_alt: router
  notacomputer:
    alias: Systems that are not really systems.  Yeah :)
    private: 1
  deadslow:
    alias: Systems too slow to run any real checks
  dialup:
    alias: Systems with slow network

  porterbox:
    alias: developer accessible porter machines
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  service:
    alias: machines running services
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  buildd:
    alias: buildd systems
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  general:
    alias: general purpose developer accessible machines
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
  puppet:
    alias: Hosts running puppet
    extinfo-icon_image: base/debian.png
    extinfo-icon_image_alt: Debian GNU/Linux
    extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s

  dl380:
    alias: HP DL380 hosts
    private: 1
  dl385:
    alias: HP DL385 hosts
    private: 1
  dl360:
    alias: HP DL360 hosts
    private: 1
  sw-raid:
    alias: Hosts with Linux software raid
    private: 1
  single-cpu:
    alias: Hosts with only one CPU
    private: 1

  lenny:
    alias: Hosts running lenny, not etch
    private: 1

  no-samhain:
    alias: hosts not running samhain properly
    private: 1

  #syslog-ng-hosts:
  #  alias: hosts running syslog-ng instead of sysklogd
  #  private: 1
  rsyslog-hosts:
    alias: hosts running rsyslogd instead of sysklogd
    private: 1
  postfix-hosts:
    alias: hosts running postfix instead of exim
    private: 1
  heavy-exim:
    alias: "hosts running the full mail stuff, including clamav, SA, and postgrey"
    private: 1
  heavy-postfix:
    alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
    private: 1
  apache2-hosts:
    alias: hosts running apache2
    private: 1
  apache1-hosts:
    alias: hosts running apache1
    private: 1
  bind9-hosts:
    alias: hosts running bind9
    private: 1
  amavis-hosts:
    alias: hosts running amavis
    private: 1
  ftpd-hosts:
    alias: hosts running vsftpd
    private: 1
  #tftpd-hosts:
  #  alias: hosts running a tftpd (tftpd-hpa as a daemon)
  #  private: 1
  rsyncd-hosts:
    alias: hosts providing rsync services via xinetd
    private: 1
  postgres81-hosts:
    alias: hosts running postgres81
    private: 1
  postgres83-hosts:
    alias: hosts running postgres83
    private: 1
  mysql-hosts:
    alias: hosts running mysql
    private: 1
  no-udev:
    alias: hosts not using udev
    private: 1
  ulogd-hosts:
    alias: hosts running ulogd
    private: 1
  acpid-hosts:
    alias: hosts running acpid
    private: 1

  nfs-client:
    alias: hosts mounting filesystems using NFS
    private: 1
  nfs-server:
    alias: hosts serving filesystems using NFS
    private: 1

  highload:
    alias: "hosts on which high load is normal"
    private: 1

  secondary-IPs:
    alias: secondary IP addresses
    private: 1

  smart:
    alias: hosts with smartd
    private: 1
  hasbootfs:
    alias: hosts with a /boot
    private: 1


#############################
# servicegroups
#############################
servicegroups:
  diskspace:
    alias: diskusage checks
  buildd:
    alias: buildd checks
  raid:
    alias: raid checks
  kernel:
    alias: kernel checks
  weaksshkeys:
    alias: weak ssh keys
  apt:
    alias: apt upgrade status
  samhain:
    alias: samhain integrity status
  security:
    alias: security
    servicegroup_members: apt, weaksshkeys, kernel, samhain

#############################
# services
#############################
services:
  -
    name: PING
    check: "check_ping!300.0,20%!600.0,40%"
    hostgroups: pingable
    excludehostgroups: routing-infrastructure, dialup
    normal_check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1
  -
    name: PING
    check: "check_ping!2000.0,60%!3000.0,80%"
    hostgroups: routing-infrastructure, dialup
    normal_check_interval: 5
    max_check_attempts: 4
    retry_check_interval: 1

 ############ Services ############
 ###

 ############ Disk Usage ############
 ####
  -
    name: disk usage - all
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc 90 95"
    hostgroups: computers
  -
    name: disk usage on /
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /"
    hostgroups: computers
    excludehosts: ries
  -
    name: disk usage on /
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
    hosts: ries
  -
    name: disk usage on /boot
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
    hostgroups: hasbootfs
  -
    name: disk usage on /var
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
    hosts: bartok, samosa, raff, lobos, villa, gluck, saens, voltaire, lebrun, tartini, morales, powell, escher
  -
    name: disk usage on /org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
    hosts: sperger, samosa, raff, lobos, villa, steffani, saens, pergolesi, verdi, spontini, ravel, mahler, schroeder, piatti, pescetti, widor, schein
  -
    name: disk usage on /org
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /org"
    hosts: merkel, bartok
  -
    name: disk usage on /srv
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv"
    hosts: agricola, arcadelt, argento, allegri, tartini, morales, powell, puccini, zelenka
  -
    name: disk usage on /org/scratch
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org/scratch"
    hosts: merkel
  -
    name: disk usage on /tmp
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
    hosts: samosa, raff, gluck, saens, puccini, merkel, tartini, powell, piatti, escher
  -
    name: disk usage on /usr
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
    hosts: samosa, raff, lobos, villa, gluck, saens, pergolesi, merulo, tartini, morales, powell
  -
    name: disk usage on /home
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home"
    hosts: raptor, voltaire, lebrun, rem, ball, paer, escher
  -
    name: disk usage on /home
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /home"
    hosts: gluck
  -
    name: disk usage on /chroot
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /chroot"
    hosts: raptor
  -
    name: disk usage on /mnt/hdc
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /mnt/hdc"
    hosts: voltaire
  -
    name: disk usage on /mnt/sdb1
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /mnt/sdb1"
    hosts: spontini
  -
    name: disk usage on /x
    servicegroups: diskspace
    nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /x"
    hosts: caballero

 ############ All Computers ############
 ####
  -
    name: apt - security updates
    servicegroups: apt
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
    hostgroups: computers
    normal_check_interval:  60
    retry_check_interval: 15
 ####
  -
    name: backup
    nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
    hostgroups: computers
    normal_check_interval: 180
    max_check_attempts: 2
    retry_check_interval: 5
  -
    name: backup server config
    nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
    hosts: bartok
    normal_check_interval: 180
    max_check_attempts: 2
    retry_check_interval: 5

 ####
  -
    name: running kernel
    servicegroups: kernel
    nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
    hostgroups: computers
    normal_check_interval: 180
    retry_check_interval: 5

 ####
  -
    name: process - puppet
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C ruby -a 'ruby /usr/sbin/puppetd -w 5 --factsync'"
    hostgroups: puppet

  -
    name: puppet
    nrpe: "/usr/lib/nagios/plugins/dsa-check-puppet"
    hostgroups: puppet

 ####
  -
    name: process - samhain
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
    hostgroups: computers
    excludehostgroups: no-samhain
  -
    name: samhain
    servicegroups: samhain
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
    hostgroups: computers
    excludehostgroups: no-samhain
    depends: process - samhain
    normal_check_interval: 240
    retry_check_interval: 5

 ####
  -
    name: users
    nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
    hostgroups: computers
 ####
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
    hostgroups: computers
    excludehostgroups: highload
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
    hostgroups: highload
    excludehosts: rietz
  -
    name: load
    nrpe: "/usr/lib/nagios/plugins/check_load -w 200,200,200 -c 350,350,350"
    hosts: rietz
 ####
  -
    name: processes - zombies
    nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
    hostgroups: computers
 ####
  -
    name: processes - total
    nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
    hostgroups: computers
 ####
  -
    name: swap usage - percent
    nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
    hostgroups: computers
 ####
  -
    name: swap usage - mb
    nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
    hostgroups: computers
 ####
  -
    name: process - getty
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
    hostgroups: computers
    excludehosts: zelenka
 ####
  -
    name: process - sshd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
    hostgroups: computers
  -
    name: "network service - sshd"
    check: dsa_check_ssh
    hostgroups: computers
    depends: process - sshd
    normal_check_interval:  60
    notification_interval: 1440

  -
    name: "network service - sshd"
    check: dsa_check_ssh
    hostgroups: deadslow
    excludehosts: agnesi
    normal_check_interval:  180
  -
    name: "network service - sshd - 2260"
    check: dsa_check_ssh_port!2260
    hosts: agnesi
    normal_check_interval:  180
  -
    name: "network service - sshd - 443"
    check: dsa_check_ssh_port!443
    hosts: gluck
    normal_check_interval:  180

  -
    name: "network service - sshd - version"
    check: "dsa_check_ssh_port_version!22!OpenSSH_4.3p2 Debian-9etch3"
    depends: network service - sshd
    hostgroups: computers, deadslow
    excludehosts: agnesi, crest, kullervo
    excludehostgroups: lenny
    normal_check_interval:  360
  -
    name: "network service - sshd - version"
    check: "dsa_check_ssh_port_version!22!OpenSSH_4.3p2 Debian-9etch2+m68k1"
    depends: network service - sshd
    hosts: crest, kullervo
    normal_check_interval:  360
  -
    name: "network service - sshd - version"
    check: "dsa_check_ssh_port_version!22!OpenSSH_5.1p1 Debian-5"
    depends: network service - sshd
    hostgroups: lenny
    normal_check_interval:  360
  -
    name: "network service - sshd - version - 2260"
    check: "dsa_check_ssh_port_version!2260!OpenSSH_4.3p2 Debian-9etch3"
    depends: network service - sshd - 2260
    hosts: agnesi
    normal_check_interval:  360
 #
  -
    name: ssh - weak keys
    servicegroups: weaksshkeys
    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/weak-ssh-keys"
    hostgroups: computers
    normal_check_interval:  360
 ####
  -
    name: network service - nrpe
    check: check_tcp!5666
    hostgroups: computers
    max_check_attempts: -2
    notification_interval: 1440
  -
    name: process - nrpe
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
    hostgroups: computers
    max_check_attempts: -1
    depends: network service - nrpe
 ###
  -
    name: process - munin-node
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
    hostgroups: computers
  -
    name: network service - munin-node
    check: check_tcp!4949
    hostgroups: computers
    depends: process - munin-node
 ###
  -
    name: process - ntpd
    # sarge: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
    # etch: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ntp -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
    hostgroups: computers
    excludehosts: raptor, zelenka
  -
    name: network service - ntp
    check: check_ntp
    hostgroups: computers
    depends: process - ntpd
    excludehosts: raptor, allegri, zelenka
  #
  -
    name: network service - time
    check: dsa_check_time
    hosts: raptor, allegri, zelenka
    depends: process - xinetd

 ###
  -
    name: process - atd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
    hostgroups: computers
 ###
  -
    name: process - cron
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C cron -a /usr/sbin/cron"
    hostgroups: computers

 ###
 # -
 #   name: process - syslog-ng
 #   nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
 #   hostgroups: syslog-ng-hosts
 ###
  -
    name: process - rsyslogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rsyslogd  -a '/usr/sbin/rsyslogd -c3'"
    hostgroups: rsyslog-hosts
 ###
  -
    name: process - syslogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslogd  -a '/sbin/syslogd'"
    hostgroups: computers
    excludehostgroups: rsyslog-hosts
  -
    name: process - klogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C klogd  -a '/sbin/klogd -x'"
    hostgroups: computers
    excludehostgroups: rsyslog-hosts

 ### MAIL STUFF
 ###
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
    hostgroups: computers
    excludehostgroups: postfix-hosts
    excludehosts: master, rietz, merkel, gluck
  -
    name: process - exim - total
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
    hostgroups: computers
    excludehostgroups: postfix-hosts
    excludehosts: master, rietz, merkel, gluck
  -
    name: process - exim
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
    hosts: master, rietz, merkel, gluck
 ###
  -
    name: process - clamav - clamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
    hostgroups: heavy-exim, heavy-postfix
  -
    name: service - clamav
    nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
    hostgroups: heavy-exim, heavy-postfix
    depends: process - clamav - clamd
  -
    name: process - clamav - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
    hostgroups: heavy-exim, heavy-postfix
  -
    name: process - clamav - getsigs
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C getclamsigs -a 'getclamsigs'"
    hostgroups: heavy-exim, heavy-postfix
  #
  -
    name: unwanted process - clamav
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
  -
    name: unwanted process - freshclam
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
  -
    name: unwanted process - clamav - getsigs
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C getclamsigs"
    hostgroups: computers
    excludehostgroups: heavy-exim, heavy-postfix
 ###
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
    hostgroups: heavy-exim
    excludehosts: rietz, merkel, raff
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
    hosts: liszt
  -
    name: process - spamd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
    hosts: liszt
    hostgroups: heavy-exim
    depends: process - spamd - master
    excludehosts: rietz, merkel, raff
  #
  -
    name: process - spamd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
    hosts: rietz
  -
    name: process - spamd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
    hosts: rietz
  #
  -
    name: unwanted process - spamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
    hostgroups: computers
    excludehostgroups: heavy-exim
    excludehosts: liszt
  -
    name: unwanted process - spamd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
    hosts: merkel, raff

 ###
  #-
  #  name: process - greylistd
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u greylist -C greylistd -a '/usr/bin/python /usr/sbin/greylistd'"
  #  hostgroups: heavy-exim
  #
  -
    name: unwanted process - greylistd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
    hostgroups: computers

 ###
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
    hostgroups: heavy-exim
  -
    name: process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -C postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
    hostgroups: heavy-postfix
  #
  -
    name: unwanted process - postgrey
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
    hostgroups: computers
    excludehostgroups: heavy-postfix, heavy-exim
 ###
  -
    name: process - amavis - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'"
    hostgroups: amavis-hosts
  -
    name: process - amavis - all
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '"
    hostgroups: amavis-hosts
    depends: process - amavis - master
  #
  -
    name: unwanted process - amavis
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
    hostgroups: computers
    excludehostgroups: amavis-hosts
 ###
  -
    name: process - weightd - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'"
    hostgroups: heavy-postfix
  -
    name: process - weightd - cache
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'"
    hostgroups: heavy-postfix
    depends: process - weightd - master
  -
    name: process - weightd - child
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'"
    hostgroups: heavy-postfix
    depends: process - weightd - master
  #
  -
    name: unwanted process - policyd-weight
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
    hostgroups: computers
    excludehostgroups: heavy-postfix



 ###
  -
    name: process - postfix - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
    hostgroups: postfix-hosts
  -
    name: process - postfix - qmgr
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  #-
  #  name: process - postfix - tlsmgr
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C tlsmgr -a 'tlsmgr -l -t fifo -u'"
  #  hostgroups: postfix-hosts
  #  depends: process - postfix - master
  -
    name: process - postfix - pickup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - anvil
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master

  -
    name: process - postfix - trivial-rewrite
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - proxymap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - cleanup
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
    hostgroups: postfix-hosts
    depends: process - postfix - master
  -
    name: process - postfix - local
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
    hostgroups: postfix-hosts
    depends: process - postfix - master

  -
    name: process - postfix - smtpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:40 -c 0:90 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'"
    hostgroups: postfix-hosts
    excludehosts: liszt
    depends: process - postfix - master
  -
    name: process - postfix - smtp
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C smtp -a 'smtp -t unix -u -c'"
    hostgroups: postfix-hosts
    excludehosts: liszt
    depends: process - postfix - master

  -
    name: process - postfix - smtpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:150 -c 0:200 -u postfix -C smtpd -a 'smtpd -n smtp -t inet -u -c'"
    hosts: liszt
    depends: process - postfix - master
  -
    name: process - postfix - smtp
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:350 -c 0:500 -u postfix -C smtp -a 'smtp -t unix -u -c'"
    hosts: liszt
    depends: process - postfix - master

 ###
  -
    name: network service - smtp
    check: dsa_check_smtp
    hostgroups: computers
    excludehostgroups: postfix-hosts
    depends: process - exim

  -
    name: network service - smtp
    check: dsa_check_smtp
    hostgroups: postfix-hosts
    excludehosts: verdi, kassia, allegri, raptor, piatti
    depends: process - postfix - master
  -
    name: network service - smtp - port 2025
    check: dsa_check_smtp_port!2025
    hosts: verdi, kassia, murphy, allegri, piatti
    depends: process - postfix - master
  -
    name: network service - smtp - port 8080
    check: dsa_check_smtp_port!8080
    hosts: murphy
    depends: process - postfix - master
  -
    name: network service - smtp - port 2025
    remotecheck: /usr/lib/nagios/plugins/check_smtp -t 40 -H $HOSTADDRESS$ -p 2025
    runfrom: murphy
    hosts: raptor
    depends: process - postfix - master

  -
    name: network service local - smtps cert
    nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
    hostgroups: postfix-hosts
    depends: process - postfix - master
    normal_check_interval: 120


  -
    name: setup - dsa config
    nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
    hostgroups: computers
    normal_check_interval: 120
  -
    name: setup - ud-ldap freshness
    nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness"
    hostgroups: computers
 ###
  -
    name: process - uptimed
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
    hostgroups: computers
 ###
  -
    name: process - irqbalance
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
    hostgroups: computers
    excludehostgroups: single-cpu
  -
    name: unwanted process - irqbalance
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
    hostgroups: single-cpu

 ####
 ###
  #-
  #  name: unwanted process - system-tools-backends
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C system-tools-ba"
  #  hostgroups: computers
  #-
  #  name: unwanted process - dbus-daemon
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C dbus-daemon"
  #  hostgroups: computers
  -
    name: unwanted process - gkrellmd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
    hostgroups: computers
  -
    name: unwanted process - portmap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C portmap"
    hostgroups: computers
    excludehostgroups: nfs-client, nfs-server
  -
    name: unwanted process - rpc.statd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
    hostgroups: computers
    excludehostgroups: nfs-client, nfs-server
  -
    name: unwanted process - inetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
    hostgroups: computers
  -
    name: unwanted process - snmpd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
    hostgroups: computers


 ############ Processes/Services that only run on some computers ############
 ####
 ###
  -
    name: process - rngd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
    hostgroups: dl385
 ###
  -
    name: process - mdadm monitor
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
    hostgroups: sw-raid
  -
    name: RAID - sw raid
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
    hostgroups: sw-raid

 ###
  -
    name: process - cpqarrayd
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C cpqarrayd -a '/usr/sbin/cpqarrayd'"
    hostgroups: dl385, dl380, dl360
  -
    name: RAID - arrayprobe
    servicegroups: raid
    nrpe: "sudo /usr/bin/arrayprobe"
    hostgroups: dl385, dl380, dl360
  -
    name: HW - hpacucli status
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
    normal_check_interval: 120
    hostgroups: dl385, dl380, dl360
 ###
  -
    name: RAID - areca
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-areca"
    hosts: powell
 ###
  -
    name: RAID - DAC960
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-dac960"
    hosts: verdi
 ###
  -
    name: RAID - 3ware
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
    hosts: puccini
 ###
  -
    name: RAID - MPT
    servicegroups: raid
    nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt"
    hosts: master

 ###
  -
    name: process - slapd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
    hosts: samosa
 ###
  -
    name: process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
    hostgroups: ulogd-hosts
  -
    name: unexpected process - ulogd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
    hostgroups: computers
    excludehostgroups: ulogd-hosts
 ###
  -
    name: process - udevd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C udevd -a 'udevd'"
    hostgroups: computers
    excludehostgroups: no-udev
  -
    name: unexpected process - udev
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
    hostgroups: no-udev
 ###
  -
    name: process - acpid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
    hostgroups: acpid-hosts
  -
    name: unexpected process - acpid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
    hostgroups: computers
    excludehostgroups: acpid-hosts

 ###
  -
    name: process - xinetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
    hosts: samosa, raptor, allegri, gluck, zelenka
    hostgroups: rsyncd-hosts
  -
    name: unwanted process - xinetd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
    hostgroups: computers
    excludehosts: samosa, raptor, allegri, gluck, zelenka
    excludehostgroups: rsyncd-hosts
 ###
  -
    name: network service - finger
    check: check_tcp!79
    hosts: samosa
    depends: process - xinetd
 ###
  -
    name: network service - rsync
    check: check_tcp!873
    hostgroups: rsyncd-hosts
    depends: process - xinetd

  -
    name: network service - rsync
    check: check_tcp!873
    hosts: rietz2
    depends: rietz:process - xinetd

  -
    name: network service - rsync
    check: check_tcp!873
    hosts: kassia-sec
    depends: kassia:process - xinetd

 ###
  -
    name: process - nagios3
    # there is always one extra process per check currently running..
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C nagios3 -a '/usr/sbin/nagios3 -d /etc/nagios3/nagios.cfg'"
    hosts: samosa

 ###
  -
    name: process - apache2 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache2 -a /usr/sbin/apache2"
    hostgroups: apache2-hosts
  -
    name: process - apache2 - worker
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -C apache2 -a /usr/sbin/apache2"
    hostgroups: apache2-hosts
    depends: process - apache2 - master
  -
    name: network service - http
    check: check_http
    hostgroups: apache2-hosts
    excludehosts: kassia
    depends: process - apache2 - master
  -
    name: network service - http
    check: check_http
    depends: kassia:process - apache2 - master
    hosts: kassia-sec, kassia-ftp


  -
    name: process - apache - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C apache -a /usr/sbin/apache"
    hostgroups: apache1-hosts
  -
    name: process - apache - worker
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:75 -c 1:150 -u www-data -C apache -a /usr/sbin/apache"
    hostgroups: apache1-hosts
    depends: process - apache - master
  -
    name: network service - http
    check: check_http
    hostgroups: apache1-hosts
    depends: process - apache - master

  -
    name: network service - http keyserver
    check: dsa_check_http_port!11371
    hosts: raff
    depends: process - apache2 - master

  -
    name: network service - https
    check: check_https
    hosts: samosa, ries
    depends: "process - apache2 - master"
    normal_check_interval: 120
  -
    name: network service - https cert
    check: dsa_check_cert!443
    hosts: samosa, ries
    depends: network service - https
    normal_check_interval: 240
 ####
  -
    name: process - named
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
    hostgroups: bind9-hosts
  -
    name: network service - dns
    check: check_dns
    hostgroups: bind9-hosts
    depends: process - named
  -
    name: unwanted process - named
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
    hostgroups: computers
    excludehostgroups: bind9-hosts

 ####
  -
    name: process - vsftp - listener
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C vsftpd -a 'vsftpd: LISTENER'"
    hostgroups: ftpd-hosts
    excludehosts: kassia
  -
    name: process - vsftp - instance
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:80 -c 0:100 -u ftp -C vsftpd -a 'vsftpd: '"
    hostgroups: ftpd-hosts
    excludehosts: kassia
  -
    name: network service - ftp
    check: check_ftp
    hostgroups: ftpd-hosts
    excludehosts: kassia
    depends: process - vsftp - listener
  -
    name: network service - ftp
    check: check_ftp
    hosts: kassia-sec, kassia-ftp
    depends: kassia:process - xinetd

 ####
  -
    name: process - debianqueued
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u dak -C debianqueued"
    hosts: ries, ravel, klecker

 ###
  -
    name: process - postresql81 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a '/usr/lib/postgresql/8.1/bin/postmaster -D /var/lib/postgresql/8.1/main -c config_file=/etc/postgresql/8.1/main/postgresql.conf'"
    hostgroups: postgres81-hosts
  -
    name: process - postresql81 - writer
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: writer process'"
    hostgroups: postgres81-hosts
    depends: process - postresql81 - master
  -
    name: process - postresql81 - buffer
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats buffer process'"
    hostgroups: postgres81-hosts
    depends: process - postresql81 - master
  -
    name: process - postresql81 - collector
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postmaster -a 'postgres: stats collector process'"
    hostgroups: postgres81-hosts
    depends: process - postresql81 - master
 ####
  -
    name: process - postresql83 - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/main -c config_file=/etc/postgresql/8.3/main/postgresql.conf'"
    hostgroups: postgres83-hosts
    excludehosts: piatti, klecker
  -
    name: process - postresql83 - master udd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/udd -c config_file=/etc/postgresql/8.3/udd/postgresql.conf'"
    hosts: piatti
  -
    name: process - postresql83 - dak master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak -c config_file=/etc/postgresql/8.3/dak/postgresql.conf'"
    hosts: ries, klecker
  -
    name: process - postresql83 - dak-dev master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/dak-dev -c config_file=/etc/postgresql/8.3/dak-dev/postgresql.conf'"
    hosts: ries
 ####
  -
    name: process - mysql - master
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u root -C mysqld_safe -a '/bin/sh /usr/bin/mysqld_safe'"
    hostgroups: mysql-hosts
  -
    name: process - mysql - workers
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u mysql -C mysqld -a /usr/sbin/mysqld"
    hostgroups: mysql-hosts
    depends: process - mysql - master

 ####
  -
    name: process - stunnel4 - postgres-udd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd-server.conf'"
    hosts: piatti
  -
    name: process - stunnel4 - postgres-udd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd.conf'"
    hosts: merkel, master

 ####
  #-
  #  name: process - xenconsoled
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenconsoled -a 'xenconsoled'"
  #  hosts: piatti
  #-
  #  name: process - xenstored
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xenstored -a '/usr/lib/xen-3.0.3-1/bin/xenstored --pid-file /var/run/xenstore.pid'"
  #  hosts: piatti
  #-
  #  name: process - xend
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C python -a 'python /usr/lib/xen-3.0.3-1/bin/xend start'"
  #  hosts: piatti
#
 ####
  -
    name: process - libvirtd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C libvirtd -a '/usr/sbin/libvirtd -d'"
    hosts: unger

 ###
  -
    name: process - buildd
    servicegroups: buildd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u buildd -C buildd '/usr/bin/perl /usr/bin/buildd'"
    hostgroups: buildd
    contacts: luk

 ###
  -
    name: process - iscsid
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 1: -u root -C iscsid '/usr/sbin/iscsid'"
    hosts: raptor

 ###
  #-
  #  name: process - tftpd
  #  nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C in.tftpd -a '/usr/sbin/in.tftpd -l -B 1450 -s /var/lib/tftpboot'"
  #  hostgroups: tftpd-hosts
 ###
#  -
#    name: process - dhcpd
#    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C dhcpd3 -a '/usr/sbin/dhcpd3 -q eth0'"
#    hosts: paer
 ###
  -
    name: process - smartd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C smartd -a '/usr/sbin/smartd --pidfile /var/run/smartd.pid --interval=1800'"
    hostgroups: smart

 ############ NFS Stuff ############
 ####
  -
    name: process - portmap
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C portmap -a '/sbin/portmap'"
    hostgroups: nfs-client, nfs-server
  -
    name: process - statd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
    hostgroups: nfs-client, nfs-server
  -
    name: process - nfsd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
    hostgroups: nfs-server
  -
    name: process - lockd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
    hostgroups: nfs-server
  -
    name: process - mountd
    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
    hostgroups: nfs-server
 # see if the nfs stuff works and doesn't hang.
  # the df check all script will also hang, but we don't appear to pay attention to that
  -
    name: nfs mount ftp archive
    nrpe: "/usr/lib/nagios/plugins/check_disk 100 100 /home/org/ftp.root/debian"
    hosts: gluck
  -
    name: nfs mount ftp archive
    nrpe: "/usr/lib/nagios/plugins/check_disk 100 100 /org/mirrors/ftp.debian.org/ftp"
    hosts: merkel, raff

 ############ MISC OTHER Stuff ############
 #####
  -
    name: mirror sync - security
    check: "dsa_check_mirrorsync!security.debian.org!project/trace/security-master.debian.org"
    hosts: global
  -
    name: mirror sync - security.eu
    check: "dsa_check_mirrorsync!security.eu.debian.org!project/trace/security-master.debian.org"
    hosts: global
  -
    name: mirror sync - security.us
    check: "dsa_check_mirrorsync!security.us.debian.org!project/trace/security-master.debian.org"
    hosts: global
  -
    name: DNS SOA sync - debprivate-ftcollins.debian.org
    check: "dsa_check_soas!debprivate-ftcollins.debian.org"
    hosts: global
  -
    name: DNS SOA sync - debian.org
    check: "dsa_check_soas_add!samosa.debian.org!debian.org"
    hosts: global
  -
    name: DNS SOA sync - debian.net
    check: "dsa_check_soas_add!samosa.debian.org!debian.net"
    hosts: global
  -
    name: DNS SOA sync - debian.com
    check: "dsa_check_soas_add!samosa.debian.org!debian.com"
    hosts: global
  -
    name: DNS SOA sync - mirror.debian.net
    check: "dsa_check_soas_add!samosa.debian.org!mirror.debian.net"
    hosts: global
  -
    name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
    check: "dsa_check_soas_add!samosa.debian.org!144-28.118.59.86.in-addr.arpa"
    hosts: global
  -
    name: DNS SOA sync - alioth.debian.org
    check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org"
    hosts: global