pettersson:
address: 130.239.18.123
parents: gw-accumu
- hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, jessie, autofs, sw-raid
- ## No need to update to Stretch, casulana replaces it. It should eventually die.
+ hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, stretch, autofs, sw-raid
mirror-accumu:
address: 130.242.6.199
parents: gw-accumu2
milanollo2:
address: 5.153.231.9
parents: milanollo
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts
picconi:
address: 5.153.231.3
parents: gw-bytemark
- hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
senfter:
address: 5.153.231.4
parents: gw-bytemark
parents: gw-bytemark
hostgroups: computers, hassrvfs, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
ganeti-bytemark:
- address: 82.195.75.111
+ address: 5.153.231.1
parents: gw-bytemark
hostgroups: notacomputer
coccia:
philp:
address: 5.153.231.13
parents: ganeti-bytemark
- hostgroups: computers, hassrvfs, kvmdomains, jessie, apache2-hosts, apache-https, systemd-timesyncd
+ hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
rainier:
address: 5.153.231.16
parents: ganeti-bytemark
dillon:
address: 5.153.231.22
parents: ganeti-bytemark
- hostgroups: computers, general, kvmdomains, jessie, nfs-client, autofs, hassrvfs, systemd-timesyncd
+ hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
ticharich:
address: 5.153.231.23
parents: ganeti-bytemark
- hostgroups: computers, general, kvmdomains, jessie, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
+ hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
petrova:
address: 5.153.231.25
parents: ganeti-bytemark
quantz:
address: 5.153.231.28
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, jessie, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
respighi:
address: 5.153.231.29
parents: ganeti-bytemark
tate:
address: 5.153.231.33
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, jessie, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
gideon:
address: 5.153.231.34
parents: ganeti-bytemark
sor:
address: 5.153.231.38
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, autofs, nfs-client, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
jerea:
address: 5.153.231.39
parents: ganeti-bytemark
pinel:
address: 5.153.231.42
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, jessie, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd
rusca:
address: 5.153.231.43
parents: ganeti-bytemark
- hostgroups: computers, service, kvmdomains, jessie, hassrvfs, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
manziarly:
address: 5.153.231.44
parents: ganeti-bytemark
mirror-anu2:
address: 150.203.164.60
parents: mirror-anu
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts
mirror-anu3:
address: 150.203.164.61
parents: mirror-anu
- hostgroups: secondary-IPs, security_mirror
+ hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
mirror-anu4:
address: 150.203.164.62
parents: mirror-anu
mirror-conova:
address: 217.196.149.229
parents: gw-conova
- hostgroups: computers, stretch, service, apache2-hosts, apache-https
+ hostgroups: computers, stretch, service, apache2-hosts
mirror-conova-debian:
address: 217.196.149.232
hostgroups: secondary-IPs
parents: mirror-conova
mirror-conova-security:
address: 217.196.149.233
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
parents: mirror-conova
mirror-conova-archive:
address: 217.196.149.234
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts
parents: mirror-conova
mirror-conova-syncproxy4-eu:
address: 217.196.149.237
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts, https-service
parents: mirror-conova
arm-conova-01:
pkgmirror-csail:
address: 128.31.0.51
parents: ganeti-csail
- hostgroups: computers, service, kvmdomains, jessie, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd
usper:
address: 128.31.0.69
parents: ganeti-csail
mirror-isc:
address: 149.20.4.13
parents: gw-isc
- hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch, security_mirror
+ hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch
mirror-isc2:
address: 149.20.4.14
parents: mirror-isc
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
mirror-isc3:
address: 149.20.4.15
parents: mirror-isc
mirror-isc-syncproxy:
address: 149.20.4.16
parents: mirror-isc
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts
# }}}
# {{{ gw-leaseweb
lw01:
czerny:
address: 82.195.75.109
parents: gw-manda
- hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts
+ hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts
clementi:
address: 82.195.75.103
parents: gw-manda
- hostgroups: computers, service, dl380, acpid-hosts, jessie, drbd-hosts
+ hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts
bendel:
address: 82.195.75.100
parents: ganeti3
- hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, jessie, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
+ hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
master:
address: 82.195.75.110
parents: ganeti3
wilder:
address: 82.195.75.112
parents: ganeti3
- hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, jessie, apache-https, rsyncd-hosts
+ hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts
mailly:
address: 82.195.75.114
parents: ganeti3
seger:
address: 82.195.75.93
parents: ganeti3
- hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, apache-https, postgres94-hosts, jessie
+ hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch
suchon:
address: 82.195.75.68
parents: ganeti3
elgar:
address: 209.87.16.24
parents: ubc-gateway
- hostgroups: computers, service, kvmdomains, jessie, systemd-timesyncd
+ hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
gombert:
address: 209.87.16.25
parents: ubc-gateway
mirror-umn:
address: 128.101.240.212
parents: gw-umn
- hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch, security_mirror
+ hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch
mirror-umn2:
address: 128.101.240.215
parents: mirror-umn
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
mirror-umn3:
address: 128.101.240.216
parents: mirror-umn
- hostgroups: secondary-IPs
+ hostgroups: secondary-IPs, rsyncd-hosts
mirror-umn4:
address: 128.101.240.217
parents: mirror-umn
apache-https:
alias: hosts with https services
private: 1
+ https-service:
+ alias: https service for secondary addresses
+ private: 1
broken_https_default_vhost:
alias: https default vhost does not say 200 OK
private: 1
# }}}
# {{{ postfix
###
- -
- name: process - postfix - master
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
- hostgroups: postfix-hosts
- excludehostgroups: stretch
-
name: process - postfix - master
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/sbin/master'"
hostgroups: postfix-hosts
- excludehostgroups: jessie
- -
- name: process - postfix - qmgr
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
- hostgroups: postfix-hosts
- depends: process - postfix - master
- excludehostgroups: stretch
-
name: process - postfix - qmgr
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t unix -u'"
hostgroups: postfix-hosts
depends: process - postfix - master
- excludehostgroups: jessie
- -
- name: process - postfix - pickup
- nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
- hostgroups: postfix-hosts
- depends: process - postfix - master
- excludehostgroups: stretch
-
name: process - postfix - pickup
nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t unix -u -c'"
hostgroups: postfix-hosts
depends: process - postfix - master
- excludehostgroups: jessie
-
name: process - postfix - anvil
excludehostgroups: broken_https_default_vhost
depends: "process - apache2 - master"
check_interval: 120
+ -
+ name: network service - https
+ check: check_https
+ hostgroups: https-service
+ excludehostgroups: broken_https_default_vhost
+ check_interval: 120
-
name: network service - https
check: dsa_check_https_want_auth
-
name: network service - https cert
check: dsa_check_cert!443
- hostgroups: apache-https
+ hostgroups: apache-https, https-service
depends: network service - https
check_interval: 60
-
-
name: network service - ftp
check: check_ftp
- hostgroups: uploadqueue, security_mirror
- excludehosts: klecker, mirror-isc, mirror-umn
- -
- name: network service - ftp
- check: check_ftp
- hosts: klecker-ftp
- -
- name: network service - ftp
- check: check_ftp
- hosts: mirror-umn2
- -
- name: network service - ftp
- check: check_ftp
- hosts: mirror-isc2
+ hostgroups: uploadqueue
# }}}
# {{{ postgres
-
name: network service - rsync
check: check_tcp!873
hostgroups: rsyncd-hosts
- -
- name: network service - rsync
- check: check_tcp!873
- hosts: milanollo2
- -
- name: network service - rsync
- check: check_tcp!873
- hosts: mirror-isc2, mirror-isc-syncproxy
- -
- name: network service - rsync
- check: check_tcp!873
- hosts: mirror-umn2, mirror-umn3
- -
- name: network service - rsync
- check: check_tcp!873
- hosts: mirror-anu2, mirror-anu3
###
-
name: process - icinga