projects / mirror / dsa-nagios.git / blobdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | inline | side by side
mirror-accumu on buster
[mirror/dsa-nagios.git] / config / nagios-master.cfg
diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg
index d2e9ce1..b47b778 100644 (file)
--- a/config/nagios-master.cfg
+++ b/config/nagios-master.cfg
@@ -161,11 +161,11 @@ servers:
   schumann:
     address: 212.227.126.54
     parents: gw-1und1-sec
-    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, buster, security_mirror, hassrvfs, pe1950, physical_x86_intel
+    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, buster, hassrvfs, pe1950, physical_x86_intel
   wieck:
     address: 195.20.242.89
     parents: gw-1und1-sec
-    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950, physical_x86_intel
+    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, hasvarlogfs, no-bacula, pe1950, physical_x86_intel
   # }}}
   # {{{ gw-accumu
   pettersson:
@@ -177,7 +177,7 @@ servers:
   mirror-accumu:
     address: 130.242.6.199
     parents: gw-accumu2
-    hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, physical_x86_intel
+    hostgroups: computers, service, buster, apache2-hosts, hassrvfs, rsyncd-hosts, physical_x86_intel
   # }}}
   # {{{ gw-aql
   eller:
@@ -335,11 +335,6 @@ servers:
     address: 5.153.231.4
     parents: gw-bytemark
     hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd
-  pejacevic:
-    address: 5.153.231.6
-    parents: gw-bytemark
-    hostgroups: computers, service, kvmdomains, buster, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
-    contacts: holger
   piu-slave-bm-a:
     address: 5.153.231.7
     parents: gw-bytemark
@@ -353,54 +348,22 @@ servers:
     address: 5.153.231.1
     parents: gw-bytemark
     hostgroups: notacomputer
-  coccia:
-    address: 5.153.231.11
-    parents: ganeti-bytemark
-    hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
   backuphost:
     address: 5.153.231.12
     parents: ganeti-bytemark
     hostgroups: computers, hassrvfs, kvmdomains, buster, systemd-timesyncd
-  delfin:
-    address: 5.153.231.17
-    parents: ganeti-bytemark
-    hostgroups: computers, hassrvfs, kvmdomains, buster, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
-  dillon:
-    address: 5.153.231.22
-    parents: ganeti-bytemark
-    hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
-  petrova:
-    address: 5.153.231.25
-    parents: ganeti-bytemark
-    hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
-  quantz:
-    address: 5.153.231.28
-    parents: ganeti-bytemark
-    hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
   respighi:
     address: 5.153.231.29
     parents: ganeti-bytemark
-    hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
-  paradis:
-    address: 5.153.231.30
-    parents: ganeti-bytemark
-    hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
+    hostgroups: computers, service, kvmdomains, buster, hassrvfs, nfs-client, autofs, systemd-timesyncd
   tate:
     address: 5.153.231.33
     parents: ganeti-bytemark
     hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
-  gideon:
-    address: 5.153.231.34
-    parents: ganeti-bytemark
-    hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
   sor:
     address: 5.153.231.38
     parents: ganeti-bytemark
     hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
-  mekeel:
-    address: 5.153.231.40
-    parents: ganeti-bytemark
-    hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
 
   casulana:
     address: 5.153.231.41
@@ -413,7 +376,7 @@ servers:
   santoro:
     address: 200.17.202.197
     parents: gw-c3sl
-    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https, physical_x86_intel
+    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, no-bacula, apache-https, physical_x86_intel
     contacts: faw
   # }}}
   # {{{ gw-cecsit
@@ -428,7 +391,7 @@ servers:
   mirror-anu3:
     address: 150.203.164.61
     parents: mirror-anu
-    hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
+    hostgroups: secondary-IPs, rsyncd-hosts
   mirror-anu4:
     address: 150.203.164.62
     parents: mirror-anu
@@ -471,7 +434,7 @@ servers:
     parents: schmelzer
   schmelzer-security:
     address: 217.196.149.233
-    hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
+    hostgroups: secondary-IPs, rsyncd-hosts
     parents: schmelzer
   schmelzer-archive:
     address: 217.196.149.234
@@ -527,7 +490,7 @@ servers:
   olin:
     address: 128.31.0.65
     parents: ganeti-csail
-    hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
+    hostgroups: computers, kvmdomains, buster, systemd-timesyncd
   # }}}
   # {{{ gw-dgi
   storace:
@@ -539,7 +502,7 @@ servers:
   sechter:
     address: 128.61.240.73
     parents: gw-gatech
-    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror, physical_x86_intel
+    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, physical_x86_intel
   # }}}
   # {{{ gw-grnet
   ganeti-grnet:
@@ -589,7 +552,7 @@ servers:
   melartin:
     address: 194.177.211.208
     parents: ganeti-grnet
-    hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs
+    hostgroups: computers, service, kvmdomains, buster, systemd-timesyncd, postgres11-hosts, hassrvfs
   static-master-grnet-01:
     address: 194.177.211.209
     parents: ganeti-grnet
@@ -603,7 +566,7 @@ servers:
   mirror-isc2:
     address: 149.20.4.14
     parents: mirror-isc
-    hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
+    hostgroups: secondary-IPs, rsyncd-hosts
   mirror-isc3:
     address: 149.20.4.15
     parents: mirror-isc
@@ -633,7 +596,7 @@ servers:
   lw07:
     address: 185.17.185.187
     parents: gw-leaseweb
-    hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, postgres96-hosts, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts, physical_x86_intel
+    hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts, physical_x86_intel
   lw07-2:
     address: 185.17.185.185
     parents: lw07
@@ -712,7 +675,7 @@ servers:
   denis:
     address: 82.195.75.91
     parents: ganeti-manda
-    hostgroups: computers, service, kvmdomains, stretch, bind9-hosts, systemd-timesyncd
+    hostgroups: computers, service, kvmdomains, buster, bind9-hosts, systemd-timesyncd
   vogler:
     address: 82.195.75.92
     parents: ganeti-manda
@@ -761,6 +724,10 @@ servers:
     address: 82.195.75.77
     parents: ganeti-manda
     hostgroups: computers, general, kvmdomains, buster, hassrvfs, systemd-timesyncd
+  gideon:
+    address: 82.195.75.78
+    parents: ganeti-manda
+    hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
   rainier:
     address: 82.195.75.94
     parents: ganeti-manda
@@ -769,6 +736,18 @@ servers:
     address: 82.195.75.95
     parents: ganeti-manda
     hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
+  petrova:
+    address: 82.195.75.96
+    parents: ganeti-manda
+    hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
+  static-master-manda-01:
+    address: 82.195.75.97
+    parents: ganeti-manda
+    hostgroups: computers, kvmdomains, buster, hassrvfs, systemd-timesyncd
+  dillon:
+    address: 82.195.75.99
+    parents: ganeti-manda
+    hostgroups: computers, general, kvmdomains, stretch, hassrvfs, systemd-timesyncd
   # }}}
   # {{{ gw-marist
   zani:
@@ -833,11 +812,11 @@ servers:
   lobos:
     address: 212.211.132.250
     parents: gw-scanplus-lobos
-    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror, physical_x86_intel
+    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, physical_x86_intel
   villa:
     address: 212.211.132.32
     parents: gw-scanplus-villa
-    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror, physical_x86_intel
+    hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, physical_x86_intel
   # }}}
   # {{{ gw-sil
   eberlin:
@@ -908,7 +887,7 @@ servers:
   nono:
     address: 209.87.16.26
     parents: ganeti2-ubc
-    hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
+    hostgroups: computers, service, kvmdomains, buster, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
   reger:
     address: 209.87.16.27
     parents: ganeti2-ubc
@@ -1022,6 +1001,35 @@ servers:
     address: 209.87.16.66
     parents: ganeti2-ubc
     hostgroups: computers, service, kvmdomains, buster, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
+  paradis:
+    address: 209.87.16.67
+    parents: ganeti2-ubc
+    hostgroups: computers, service, kvmdomains, buster, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
+  paradis2:
+    address: 209.87.16.68
+    parents: paradis
+    hostgroups: secondary-IPs
+  mekeel:
+    address: 209.87.16.69
+    parents: ganeti2-ubc
+    hostgroups: computers, service, kvmdomains, buster, hassrvfs, nfs-client, autofs, systemd-timesyncd
+  pejacevic:
+    address: 209.87.16.70
+    parents: ganeti2-ubc
+    hostgroups: computers, service, kvmdomains, buster, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
+    contacts: holger
+  delfin:
+    address: 209.87.16.71
+    parents: ganeti2-ubc
+    hostgroups: computers, hassrvfs, kvmdomains, buster, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
+  coccia:
+    address: 209.87.16.72
+    parents: ganeti2-ubc
+    hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
+  quantz:
+    address: 209.87.16.73
+    parents: ganeti2-ubc
+    hostgroups: computers, service, kvmdomains, buster, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
 
   ganeti3-ubc:
     address: 209.87.16.50
@@ -1067,10 +1075,6 @@ servers:
 
   # }}}
   # {{{ gw-umn
-  #saens:
-  #  address: 128.101.240.212
-  #  parents: gw-umn
-  #  hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
   mirror-umn:
     address: 128.101.240.212
     parents: gw-umn
@@ -1078,7 +1082,7 @@ servers:
   mirror-umn2:
     address: 128.101.240.215
     parents: mirror-umn
-    hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
+    hostgroups: secondary-IPs, rsyncd-hosts
   mirror-umn3:
     address: 128.101.240.216
     parents: mirror-umn
@@ -1106,14 +1110,14 @@ servers:
   klecker:
     address: 130.89.148.10
     parents: gw-utwente
-    hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs, physical_x86_intel
+    hostgroups: computers, service, dl380, stretch, incomingmailrelayed2025, hassrvfs, physical_x86_intel
   klecker-ftp:
     address: 130.89.148.12
     parents: new-klecker
     hostgroups: secondary-IPs
   klecker-archive:
     address: 130.89.148.13
-    parents: klecker
+    parents: new-klecker
     hostgroups: secondary-IPs
   new-klecker:
     address: 130.89.148.77
@@ -1122,7 +1126,7 @@ servers:
   smit:
     address: 130.89.148.78
     parents: gw-utwente
-    hostgroups: computers, service, buster, r540, manyprocesses, incomingmailrelayed2025, physical_x86_intel, apache2-hosts, apache-https, hassrvfs
+    hostgroups: computers, service, buster, r540, manyprocesses, incomingmailrelayed2025, physical_x86_intel, apache2-hosts, apache-https, hassrvfs, rsyncd-hosts
   mikrotik-utwente:
     address: 130.89.148.79
     parents: gw-utwente
@@ -1156,7 +1160,7 @@ servers:
   setoguchi:
     address: 133.242.99.74
     parents: gw-sakura
-    hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror, physical_x86_intel
+    hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, physical_x86_intel
   # }}}
 
 # {{{ ############################# host groups #############################
@@ -1366,10 +1370,6 @@ hostgroups:
     alias: nodes that run OpenStack controller
     private: 1
 
-  security_mirror:
-    alias: hosts that are security mirrors
-    private: 1
-
   broken_mq:
     alias: hosts whose MQ is broken
     private: 1
@@ -1459,11 +1459,17 @@ services:
     servicegroups: diskspace
     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
     hostgroups: hassrvfs
+    excludehosts: vittoria
+  -
+    name: disk usage on /srv
+    servicegroups: diskspace
+    nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
+    hosts: vittoria
   -
     name: disk usage on /var/lib/postgresql
     servicegroups: diskspace
     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
-    hosts: sibelius, buxtehude, lw07, fasolo
+    hosts: sibelius, buxtehude, fasolo
   -
     name: disk usage on /var/log
     servicegroups: diskspace
@@ -1647,7 +1653,7 @@ services:
   -
     name: processes - total
     hostgroups: manyprocesses
-    nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
+    nrpe: "/usr/lib/nagios/plugins/check_procs 1700 2000"
   -
     name: processes - total
     hostgroups: crazymanyprocesses
@@ -1682,23 +1688,6 @@ services:
     hostgroups: computers
   # }}}
   # {{{ backup
-  -
-    name: backup
-    servicegroups: backup
-    nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
-    hostgroups: computers
-    excludehosts: backuphost, storace
-    check_interval: 60
-    max_check_attempts: 2
-    retry_interval: 5
-  -
-    name: backup server config
-    servicegroups: backup
-    nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
-    hosts: storace
-    check_interval: 60
-    max_check_attempts: 2
-    retry_interval: 5
   -
     name: backup - bacula - last backup
     servicegroups: backup
@@ -2199,6 +2188,10 @@ services:
     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
     hostgroups: computers
     excludehostgroups: heavy-exim, heavy-postfix
+  -
+    name: signature freshness - clamav
+    nrpe: "/usr/lib/nagios/plugins/dsa-check-clamav-signatures"
+    hostgroups: heavy-exim, heavy-postfix
   # }}}
   # {{{ anti-spam
   -
@@ -2375,11 +2368,11 @@ services:
     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
     hostgroups: apache2-hosts
     depends: process - apache2 - master
-    excludehosts: klecker
+    excludehosts: new-klecker
   -
     name: process - apache2 - worker
     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
-    hosts: klecker
+    hosts: new-klecker
     depends: process - apache2 - master
   -
     name: unwanted process - apache2
@@ -2391,12 +2384,17 @@ services:
     name: network service - http
     check: check_http
     hostgroups: apache2-hosts
-    excludehosts: klecker, casulana
+    excludehosts: casulana
     depends: process - apache2 - master
   -
     name: network service - http
     check: check_http
-    depends: klecker:process - apache2 - master
+    depends: new-klecker:process - apache2 - master
+    hosts: klecker-archive
+  -
+    name: network service - http
+    check: check_http
+    depends: new-klecker:process - apache2 - master
     hosts: klecker-ftp
 
   # keyserver on kaufmann
@@ -2979,6 +2977,12 @@ services:
     hosts: gombert
     contact_groups: gobby
   ####
+  -
+    name: release - britney piuparts freshness
+    nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 1h /srv/release.debian.org/britney/state/piuparts-status.txt"
+    hosts: respighi
+    contacts: release-britney
+  ####
   -
     name: network service - sip-tls cert - 443
     check: dsa_check_cert!443
Unnamed repository; edit this file 'description' to name the repository.