wieck:
address: 195.20.242.89
parents: gw-1und1-sec
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, squeeze, security_mirror
# }}}
# {{{ gw-accumu
pettersson:
address: 217.140.96.68
parents: gw-arm
hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd
- hebden:
- address: 217.140.96.69
- parents: gw-arm
- hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd
henze:
address: 217.140.96.70
parents: gw-arm
santoro:
address: 200.17.202.197
parents: gw-c3sl
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze, high-RTT
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, squeeze, high-RTT, security_mirror
contacts: faw
# }}}
# {{{ gw-carnet
gluck:
address: 150.203.164.38
parents: gw-cecsit
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, squeeze, security_mirror
# }}}
# {{{ gw-conova
sompek:
hostgroups: computers, buildd, hassrvfs, sw-raid, squeeze, sparc
# }}}
# {{{ gw-csail
- rore:
- address: 128.31.0.49
- parents: gw-csail
- hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, squeeze
senfl:
address: 128.31.0.51
parents: gw-csail
steffani:
address: 128.31.0.36
parents: gw-csail
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, squeeze, security_mirror
# }}}
# {{{ gw-dgi
argento:
schein:
address: 149.20.20.6
parents: gw-isc
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, squeeze, security_mirror
# }}}
# {{{ gw-karlsruhe
zemlinsky:
parents: gw-man-da
hostgroups: computers, service, dl380, acpid-hosts, squeeze
bendel:
- address: 82.195.75.101
+ address: 82.195.75.100
parents: czerny
- hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https
+ hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, squeeze, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts
new-master:
address: 82.195.75.110
parents: czerny
parents: gw-man-da
hostgroups: computers, service, acpid-hosts, heavy-exim, mail-relay, apache2-hosts, squeeze
liszt:
- address: 82.195.75.100
+ address: 82.195.75.101
parents: gw-man-da
- hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, amavis-hosts, dl385, acpid-hosts, apache-https, lenny
+ hostgroups: computers, service, apache2-hosts, bind9-hosts, postfix-hosts, heavy-postfix, dl385, acpid-hosts, apache-https, lenny
contacts: bzed
+ lully:
+ address: 82.195.75.99
+ parents: czerny
+ hostgroups: computers, service, hasbootfs, kvmdomains, squeeze
heininen:
address: 82.195.75.98
parents: gw-man-da
rem:
address: 82.195.75.68
parents: gw-man-da
- hostgroups: computers, buildd, hasbootfs, hashomefs, squeeze
+ hostgroups: computers, buildd, hasbootfs, hassrvfs, squeeze
sperger:
address: 82.195.75.34
parents: gw-man-da2
handel:
address: 82.195.75.104
parents: unger
- hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze
+ hostgroups: computers, service, hasbootfs, kvmdomains, apache2-hosts, squeeze, apache-https, hasvarfs
kaufmann:
address: 82.195.75.107
parents: unger
piston:
address: 140.211.15.154
parents: gw-osuosl
- hostgroups: computers, hassrvfs, squeeze
+ hostgroups: computers, hassrvfs, squeeze, hassrvfs
rietz:
address: 140.211.166.43
parents: gw-osuosl
lobos:
address: 212.211.132.250
parents: gw-scanplus-lobos
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror
villa:
address: 212.211.132.32
parents: gw-scanplus-villa
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror
# }}}
# {{{ gw-sil
beethoven:
ravel:
address: 206.12.19.5
parents: sw-ubcece-kais
- hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze, autofs
+ hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, bind9-hosts, uploadqueue, hasorgfs, heavy-exim, xinetd-hosts, squeeze, autofs, uploadqueue
dijkstra:
address: 206.12.19.218
parents: sw-ubcece-kais
hostgroups: computers, bl460, acpid-hosts, service, squeeze
+ pasquini:
+ address: 206.12.19.217
+ parents: sw-ubcece-kais
+ hostgroups: computers, bl460, acpid-hosts, service, squeeze
luchesi:
address: 206.12.19.214
parents: sw-ubcece-kais
hostgroups: computers, bl460, acpid-hosts, service, squeeze
+ tristano:
+ address: 206.12.19.213
+ parents: sw-ubcece-kais
+ hostgroups: computers, bl460, acpid-hosts, service, squeeze
tchaikovsky:
address: 206.12.19.118
parents: luchesi
address: 206.12.19.114
parents: dijkstra
hostgroups: computers, hasbootfs, hassrvfs, apache2-hosts, kvmdomains, service, squeeze, nfs-server
- valente:
- address: 206.12.19.112
- parents: dijkstra
- hostgroups: computers, hasbootfs, hassrvfs, postgres83-hosts, ftpd-hosts, rsyncd-hosts, kvmdomains, heavy-exim, xinetd-hosts, service, lenny
bellini:
address: 206.12.19.7
parents: sw-ubcece-kais
morricone:
address: 206.12.19.9
parents: sw-ubcece-kais
- hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze
+ hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, postgres90-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze, uploadqueue
stabile:
address: 206.12.19.13
parents: sw-ubcece-kais
address: 206.12.19.126
parents: traetta
hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, xinetd-hosts, autofs
- dukas:
- address: 206.12.19.128
- parents: traetta
- hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs
- tye:
- address: 206.12.19.129
- parents: traetta
- hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs, hassrvfs
+# dukas:
+# address: 206.12.19.128
+# parents: traetta
+# hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs
+# tye:
+# address: 206.12.19.129
+# parents: traetta
+# hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, nfs-client, autofs, hassrvfs
elgar:
address: 206.12.19.130
parents: salieri
bizet:
address: 206.12.19.137
parents: traetta
- hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, ftpd-hosts, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts
+ hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, uploadqueue
+ lilburn:
+ address: 206.12.19.138
+ parents: dijkstra
+ hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, apache2-hosts, nfs-client, autofs
+ popov:
+ address: 206.12.19.119
+ parents: luchesi
+ hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
# }}}
# {{{ gw-ugent
ancina:
saens:
address: 128.101.240.212
parents: gw-umn
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, squeeze, security_mirror
# }}}
# {{{ gw-utwente
kassia:
klecker:
address: 130.89.148.10
parents: gw-utwente
- hostgroups: computers, service, apache2-hosts, ftpd-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed, hassrvfs
+ hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, squeeze, incomingmailrelayed, hassrvfs
klecker-ftp:
address: 130.89.148.12
parents: klecker
amavis-hosts:
alias: hosts running amavis
private: 1
- ftpd-hosts:
- alias: hosts running vsftpd
- private: 1
#tftpd-hosts:
# alias: hosts running a tftpd (tftpd-hpa as a daemon)
# private: 1
#postgres81-hosts:
# alias: hosts running postgres81
# private: 1
- postgres83-hosts:
- alias: hosts running postgres83
- private: 1
postgres84-hosts:
alias: hosts running postgres84
private: 1
alias: machines with hight round trip times
private: 1
+ security_mirror:
+ alias: hosts that are security mirrors
+ private: 1
#############################
# servicegroups
#############################
-
name: disk usage - all
servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 90 95"
+ nrpe: "/usr/lib/nagios/plugins/check_disk -w 10% -c 5% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/home/buildd/build-trees"
hostgroups: computers
excludehosts: sibelius
-
nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
hosts: samosa, stabile, sibelius, busoni
+ -
+ name: disk usage on /var/log
+ servicegroups: diskspace
+ nrpe: "/usr/lib/nagios/plugins/check_disk 50 80 /var/log"
+ hosts: bendel
-
name: disk usage on /var/log
servicegroups: diskspace
nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
- hosts: busoni, wieck, heininen
+ hosts: busoni, wieck, heininen, lully
+ -
+ name: disk usage on /var/spool/postfix
+ servicegroups: diskspace
+ nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
+ hosts: bendel
#-
# name: disk usage on /srv/morgue.debian.org
nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
hosts: stabile,sibelius
-
- name: disk usage on /srv/farm-snapshot/farm-01
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-01"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-23
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-23"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-45
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-45"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-67
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-67"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-89
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-89"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-ab
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-ab"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-cd
+ name: disk usage on /srv/farm-snapshot/farm-misc
servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/farm-snapshot/farm-cd"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-f
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 85 /srv/farm-snapshot/farm-f"
- hosts: sibelius
- -
- name: disk usage on /srv/farm-snapshot/farm-e
- servicegroups: diskspace
- nrpe: "/usr/lib/nagios/plugins/check_disk 95 85 /srv/farm-snapshot/farm-e"
+ nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/farm-snapshot/farm-misc"
hosts: sibelius
-
name: disk usage on /srv/fossology.debian.net
hostgroups: freebsd
-
- name: remote logging
+ name: remote logging on lotti
remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
- runfrom: heininen
+ runfrom: lotti
+ hostgroups: computers
+ excludehosts: vasks, wagner
+ -
+ name: remote logging on lully
+ remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
+ runfrom: lully
hostgroups: computers
excludehosts: vasks, wagner
### MAIL STUFF
-
name: process - spamd - master
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
- hosts: liszt
+ hosts: liszt, bendel
-
name: process - spamd - child
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
- hosts: liszt, wagner
+ hosts: liszt, wagner, bendel
hostgroups: spamd
depends: process - spamd - master
#
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
hostgroups: computers
excludehostgroups: spamd
- excludehosts: liszt, busoni, wagner
+ excludehosts: liszt, bendel, busoni, wagner
###
#-
-
name: process - amavis - master
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd (master)'"
- hostgroups: amavis-hosts
+ hosts: liszt
-
name: process - amavis - all
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd '"
+ hosts: liszt
+ depends: process - amavis - master
+ -
+ name: process - amavis - master
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -C amavisd-new -a 'amavisd-new (master)'"
+ hostgroups: amavis-hosts
+ -
+ name: process - amavis - all
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -C amavisd-new -a 'amavisd-new '"
hostgroups: amavis-hosts
depends: process - amavis - master
#
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
hostgroups: computers
excludehostgroups: amavis-hosts
+ excludehosts: liszt
###
-
name: process - weightd - master
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (master)'"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
hostgroups: heavy-postfix
-
name: process - weightd - cache
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -C policyd-weight -a 'policyd-weight (cache)'"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
hostgroups: heavy-postfix
depends: process - weightd - master
-
name: process - weightd - child
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -C policyd-weight -a 'policyd-weight (child)'"
+ nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
hostgroups: heavy-postfix
depends: process - weightd - master
#
nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
normal_check_interval: 120
hostgroups: dl385, dl380, dl360, bl460, dl585
- excludehosts: villa, lobos, liszt, senfl, schein, rore
+ excludehosts: villa, lobos, liszt, senfl, schein
-
name: HW - hpasmcli status
nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
normal_check_interval: 120
hosts: senfl, schein
- -
- name: HW - hpasmcli status
- nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant --fan-high"
- normal_check_interval: 120
- hosts: rore
###
-
name: RAID - areca
name: network service - https
check: check_https
hostgroups: apache-https
+ excludehosts: handel
+ depends: "process - apache2 - master"
+ normal_check_interval: 120
+ -
+ name: network service - https
+ check: dsa_check_https_want_auth
+ hosts: handel
depends: "process - apache2 - master"
normal_check_interval: 120
-
excludehostgroups: bind9-hosts
####
- -
- name: process - vsftp - listener
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C vsftpd -a 'vsftpd: LISTENER'"
- hostgroups: ftpd-hosts, uploadqueue
- excludehosts: klecker
- -
- name: process - vsftp - instance
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:80 -c 0:100 -u ftp -C vsftpd -a 'vsftpd: '"
- hostgroups: ftpd-hosts, uploadqueue
- excludehosts: klecker
-
name: network service - ftp
check: check_ftp
- hostgroups: ftpd-hosts, uploadqueue
+ hostgroups: uploadqueue, security_mirror
excludehosts: klecker
- depends: process - vsftp - listener
-
name: network service - ftp
check: check_ftp
name: unwanted process - postresql
nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
hostgroups: computers
- excludehostgroups: postgres90-hosts, postgres84-hosts, postgres83-hosts
+ excludehostgroups: postgres90-hosts, postgres84-hosts
-
name: process - postresql90 - master
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.0/bin/postgres'"
name: process - postresql84 - master
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'"
hostgroups: postgres84-hosts
- -
- name: process - postresql83 - master
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:4 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres'"
- hostgroups: postgres83-hosts
#-
# name: process - postresql83 - master udd
# nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/udd -c config_file=/etc/postgresql/8.3/udd/postgresql.conf'"
name: mirror sync - security
check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
hosts: global
- -
- name: mirror sync - volatile
- check: "dsa_check_mirrorsync_skew!volatile.debian.org!debian-volatile/project/trace/volatile-master.debian.org!150:3600"
- hosts: global
-
name: mirror sync - packages
check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
name: DNS SOA sync - 2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa
check: "dsa_check_soas!2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
hosts: global
- -
- name: DNS SOA sync - a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa
- check: "dsa_check_soas!a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
- hosts: global
-
name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa
check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa"