check udd stunnel cert
[mirror/dsa-nagios.git] / config / nagios-master.cfg
index 586be17..d5546fe 100644 (file)
@@ -173,7 +173,7 @@ servers:
   samosa:
     address: 192.25.206.57
     parents: spohr
-    hostgroups: computers, service, dl380, lenny, hassrvfs, hasbootfs, acpid-hosts, ulogd-hosts, nfs-client
+    hostgroups: computers, service, dl380, lenny, hassrvfs, hasbootfs, acpid-hosts, ulogd-hosts, nfs-client, postgres84-hosts
   raff:
     address: 192.25.206.59
     parents: spohr
@@ -196,12 +196,12 @@ servers:
   peri:
     address: 192.25.206.15
     parents: spohr
-    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny
+    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny, single-cpu
     contacts: dannf
   penalosa:
     address: 192.25.206.68
     parents: spohr
-    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny
+    hostgroups: computers, buildd, sw-raid, hasbootfs, lenny, single-cpu
     contacts: dannf
   mundy:
     address: 192.25.206.62
@@ -274,7 +274,7 @@ servers:
   byrd:
     address: 82.195.75.101
     parents: unger
-    hostgroups: computers, service, lenny, hasbootfs, hassrvfs
+    hostgroups: computers, service, lenny, hasbootfs, hassrvfs, postgres84-hosts
 
   master:
     address: 70.103.162.29
@@ -423,11 +423,15 @@ servers:
   chopin:
     address: 195.20.242.124
     parents: schumann
-    hostgroups: computers, ulogd-hosts, lenny, hassrvfs
+    hostgroups: computers, ulogd-hosts, lenny, hassrvfs, hasbootfs
   geo3:
     address: 195.20.242.125
     parents: schumann
     hostgroups: computers, service, lenny, hasbootfs, single-cpu, bind9-hosts
+  soler:
+    address: 195.20.242.126
+    parents: schumann
+    hostgroups: computers, service, lenny, hasbootfs, hassrvfs
 
   caballero:
     address: 193.201.200.200
@@ -475,10 +479,14 @@ servers:
   ravel:
     address: 137.82.84.66
     parents: gw-ubc
-    hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, ftpd-hosts, hasbootfs, lenny, nfs-server, rsyncd-hosts
+    hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, ftpd-hosts, hasbootfs, lenny, nfs-server, rsyncd-hosts, bind9-hosts
   dijkstra:
     address: 137.82.84.70
     parents: gw-ubc
+    hostgroups: computers, bl460, acpid-hosts, lenny, ulogd-hosts
+  luchesi:
+    address: 137.82.84.78
+    parents: gw-ubc
     hostgroups: computers, bl460, acpid-hosts, lenny
   wolkenstein:
     address: 137.82.84.89
@@ -511,10 +519,22 @@ servers:
   stabile:
     address: 137.82.84.72
     parents: gw-ubc
-    hostgroups: computers, lenny, hashomefs, sw-raid, rsyncd-hosts
+    hostgroups: computers, lenny, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts
   cimarosa:
     address: 137.82.84.80
     parents: gw-ubc
+    hostgroups: computers, lenny, hasbootfs, aacraid, hassrvfs, nfs-client
+  paganini:
+    address: 137.82.84.82
+    parents: gw-ubc
+    hostgroups: computers, lenny, hasbootfs, aacraid, hassrvfs
+  respighi:
+    address: 137.82.84.83
+    parents: gw-ubc
+    hostgroups: computers, lenny, hasbootfs, aacraid, hassrvfs
+  vivaldi:
+    address: 137.82.84.84
+    parents: gw-ubc
     hostgroups: computers, lenny, hasbootfs, aacraid, hassrvfs
   # MSA 2000 (2012i)
   giustini:
@@ -696,6 +716,9 @@ hostgroups:
   postgres83-hosts:
     alias: hosts running postgres83
     private: 1
+  postgres84-hosts:
+    alias: hosts running postgres84
+    private: 1
   mysql-hosts:
     alias: hosts running mysql
     private: 1
@@ -1610,14 +1633,14 @@ services:
   -
     name: network service - http keyserver
     check: dsa_check_http_port!11371
-    hosts: raff
+    hosts: kaufmann
     depends: process - apache2 - master
 
   # https on various hosts
   -
     name: network service - https
     check: check_https
-    hosts: ries, klecker, draghi, liszt, spohr, tartini
+    hosts: ries, klecker, draghi, liszt, spohr, widor
     depends: "process - apache2 - master"
     normal_check_interval: 120
   -
@@ -1630,7 +1653,7 @@ services:
     # draghi           db.debian.org
     # merkel2          nm.debian.org
     # liszt            lists.debian.org
-    hosts: ries, klecker, spohr, spohr2, draghi, merkel2, liszt, tartini
+    hosts: ries, klecker, spohr, spohr2, draghi, merkel2, liszt, widor
     depends: network service - https
     normal_check_interval: 60
 
@@ -1724,6 +1747,10 @@ services:
   #  hostgroups: postgres81-hosts
   #  depends: process - postresql81 - master
  ####
+  -
+    name: process - postresql84 - master
+    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.4/bin/postgres'"
+    hostgroups: postgres84-hosts
   -
     name: process - postresql83 - master
     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/8.3/bin/postgres -D /var/lib/postgresql/8.3/main -c config_file=/etc/postgresql/8.3/main/postgresql.conf'"
@@ -1762,6 +1789,12 @@ services:
     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/postgres-udd.conf'"
     hosts: merkel, master
 
+  -
+    name: udd stunnel - master cert
+    nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 8080 -S -C 14 -t 45"
+    hosts: samosa
+
+  -
  ####
   #-
   #  name: process - xenconsoled
@@ -1884,6 +1917,22 @@ services:
     name: DNS SOA sync - alioth.debian.org
     check: "dsa_check_soas_add!alioth.debian.org!alioth.debian.org"
     hosts: global
+  -
+    name: DNS SOA sync - 2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa
+    check: "dsa_check_soas!2.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
+    hosts: global
+  -
+    name: DNS SOA sync - a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa
+    check: "dsa_check_soas!a.5.1.1.8.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
+    hosts: global
+  -
+    name: DNS SOA sync - 2.1.0.0.0.0.0.2.8.8.8.0.1.0.0.2.ip6.arpa
+    check: "dsa_check_soas!2.1.0.0.0.0.0.2.8.8.8.0.1.0.0.2.ip6.arpa"
+    hosts: global
+  -
+    name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa
+    check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
+    hosts: global
  ############
   -
     name: ping alive check