X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=0189860dcaa562cedb0f0e801adc0eeeccdd6450;hb=f24f1478082f4d96d2f6f5d5a6c2b64dd9ad06ce;hp=35a3ff94fe67014f89a4a5079bfd36e0e09a4d13;hpb=dd41ab051d7f471d4c9ee22818305072cfeef671;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 35a3ff9..0189860 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -154,7 +154,7 @@ servers: pkgmirror-1and1: address: 213.165.95.4 parents: powell - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts + hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula babin: address: 213.165.95.6 parents: powell @@ -165,7 +165,7 @@ servers: address: 212.227.126.54 parents: gw-ubcece #parents: gw-1und1-sec - hostgroups: computers, acpid-hosts, service, wheezy, bacula-client + hostgroups: computers, acpid-hosts, service, wheezy chopin: address: 195.20.242.124 parents: schumann @@ -173,16 +173,16 @@ servers: geo3: address: 195.20.242.125 parents: schumann - hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy, bacula-client + hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy soler: address: 195.20.242.126 parents: schumann - hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https, bacula-client + hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https wieck: address: 195.20.242.89 parents: gw-ubcece #parents: gw-1und1-sec - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula # }}} # {{{ gw-accumu pettersson: @@ -214,7 +214,7 @@ servers: arne: address: 217.140.96.61 parents: gw-arm - hostgroups: computers, hasbootfs, hassrvfs, wheezy, deadslow + hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, deadslow arnold: address: 217.140.96.57 parents: gw-arm @@ -295,7 +295,7 @@ servers: senfter: address: 5.153.231.4 parents: gw-bytemark - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts + hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula adayevskaya: address: 5.153.231.5 parents: gw-bytemark @@ -318,12 +318,24 @@ servers: address: 5.153.231.10 parents: gw-bytemark hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts + coccia: + address: 5.153.231.11 + parents: gw-bytemark + hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client + backuphost: + address: 5.153.231.12 + parents: gw-bytemark + hostgroups: computers, hassrvfs, kvmdomains, wheezy + philp: + address: 5.153.231.13 + parents: gw-bytemark + hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts # }}} # {{{ gw-c3sl santoro: address: 200.17.202.197 parents: gw-c3sl - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula contacts: faw # }}} # {{{ gw-carnet @@ -340,7 +352,7 @@ servers: gluck: address: 150.203.164.38 parents: gw-cecsit - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula # }}} # {{{ gw-conova sompek: @@ -360,7 +372,7 @@ servers: steffani: address: 128.31.0.36 parents: gw-csail - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula # }}} # {{{ gw-dgi argento: @@ -384,7 +396,7 @@ servers: spohr: address: 192.25.206.33 parents: gw-ftcollins - hostgroups: computers, service, dl380, apache2-hosts, wheezy + hostgroups: computers, service, dl380, apache2-hosts, wheezy, no-bacula # }}} # {{{ gw-grnet barber: @@ -414,13 +426,13 @@ servers: vitry: address: 194.177.211.206 parents: gw-grnet - hostgroups: computers, acpid-hosts, mptraid, buildd, wheezy + hostgroups: computers, acpid-hosts, mptraid, no-bacula, wheezy # }}} # {{{ gw-isc schein: address: 149.20.20.6 parents: gw-isc - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula # }}} # {{{ gw-karlsruhe zemlinsky: @@ -460,7 +472,7 @@ servers: master: address: 82.195.75.110 parents: ganeti3 - hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, bacula-client, spamd, heavy-exim, highload + hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload fils: address: 82.195.75.89 parents: ganeti3 @@ -478,7 +490,7 @@ servers: lully: address: 82.195.75.99 parents: ganeti3 - hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs, bacula-client + hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs rem: address: 82.195.75.68 parents: gw-man-da @@ -490,11 +502,11 @@ servers: diamond: address: 82.195.75.108 parents: ganeti3 - hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts + hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts, no-bacula draghi: address: 82.195.75.106 parents: ganeti3 - hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy, bacula-client + hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, bind9-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy geo1: address: 82.195.75.105 parents: ganeti3 @@ -514,7 +526,7 @@ servers: wilder: address: 82.195.75.112 parents: ganeti3 - hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache2-hosts, apache-https, bacula-client, rsyncd-hosts, xinetd-hosts + hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache2-hosts, apache-https, rsyncd-hosts, xinetd-hosts vieuxtemps: address: 82.195.75.113 parents: ganeti3 @@ -534,7 +546,7 @@ servers: busoni: address: 140.211.15.34 parents: gw-osuosl - hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts + hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula byrd: address: 140.211.166.20 parents: gw-osuosl @@ -559,7 +571,7 @@ servers: partch: address: 140.211.15.152 parents: gw-osuosl - hostgroups: computers, wheezy, hassrvfs + hostgroups: computers, wheezy, hassrvfs, porterbox rietz: address: 140.211.166.43 parents: gw-osuosl @@ -593,17 +605,17 @@ servers: lobos: address: 212.211.132.250 parents: gw-scanplus-lobos - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula villa: address: 212.211.132.32 parents: gw-scanplus-villa - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula # }}} # {{{ gw-sil beethoven: address: 86.59.118.146 parents: gw-sil - hostgroups: computers, hasbootfs, aacraid, nfs-server, service, acpid-hosts, wheezy, bacula-client + hostgroups: computers, hasbootfs, aacraid, service, acpid-hosts, wheezy eder: address: 86.59.118.151 parents: gw-sil @@ -612,14 +624,6 @@ servers: address: 86.59.118.152 parents: gw-sil hostgroups: computers, buildd, wheezy - merikanto: - address: 86.59.118.147 - parents: gw-sil - hostgroups: computers, dl360, acpid-hosts, nfs-client, rsyncd-hosts, xinetd-hosts, service, squeeze, autofs - merikanto2: - address: 86.59.118.150 - parents: merikanto - hostgroups: secondary-IPs # }}} # {{{ gw-telegraaf2 vasks: @@ -703,11 +707,11 @@ servers: dinis: address: 206.12.19.139 parents: ganeti2 - hostgroups: computers, general, kvmdomains, wheezy, bacula-client + hostgroups: computers, general, kvmdomains, wheezy wolkenstein: address: 206.12.19.116 parents: ganeti2 - hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy, bacula-client + hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy brahms: address: 206.12.19.115 parents: ganeti2 @@ -716,14 +720,10 @@ servers: address: 206.12.19.113 parents: ganeti2 hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy - morricone: - address: 206.12.19.9 - parents: sw-ubcece-kais - hostgroups: computers, hasbootfs, hasvarfs, hassrvfs, aacraid, rsyncd-hosts, heavy-exim, xinetd-hosts, apache2-hosts, service, squeeze, uploadqueue stabile: address: 206.12.19.13 parents: sw-ubcece-kais - hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, postgres84-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs + hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs paganini: address: 206.12.19.10 parents: sw-ubcece-kais @@ -797,7 +797,7 @@ servers: nono: address: 206.12.19.123 parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https + hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https reger: address: 206.12.19.124 parents: ganeti2 @@ -825,7 +825,7 @@ servers: berlioz: address: 206.12.19.131 parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs, apache-https, bacula-client + hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, apache2-hosts, hassrvfs, apache-https gombert: address: 206.12.19.132 parents: ganeti2 @@ -841,15 +841,15 @@ servers: barriere: address: 206.12.19.135 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, hassrvfs + hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox diabelli: address: 206.12.19.136 parents: traetta - hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, bacula-client + hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https bizet: address: 206.12.19.137 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, hassrvfs + hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula lilburn: address: 206.12.19.138 parents: ganeti2 @@ -861,7 +861,7 @@ servers: beach: address: 206.12.19.140 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts + hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula ullmann: address: 206.12.19.141 parents: ganeti2 @@ -877,11 +877,11 @@ servers: coincy: address: 206.12.19.144 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy + hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts stanley: address: 206.12.19.145 parents: ganeti2 - hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts + hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, no-bacula muffat: address: 206.12.19.146 parents: ganeti2 @@ -898,7 +898,7 @@ servers: saens: address: 128.101.240.212 parents: gw-umn - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula # }}} # {{{ gw-utwente klecker: @@ -1108,9 +1108,9 @@ hostgroups: apache-https: alias: hosts with https services private: 1 - - bacula-client: - alias: hosts which are backuped with bacula + + no-bacula: + alias: hosts which are not being backed up with bacula private: 1 nfs-client: @@ -1309,7 +1309,7 @@ services: name: disk usage on /var/lib/postgresql servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql" - hosts: stabile, sibelius, busoni, buxtehude + hosts: sibelius, busoni, buxtehude - name: disk usage on /var/log servicegroups: diskspace @@ -1320,12 +1320,6 @@ services: servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix" hosts: bendel - - #- - # name: disk usage on /srv/morgue.debian.org - # servicegroups: diskspace - # nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org" - # hosts: stabile - name: disk usage on /srv/mirrors servicegroups: diskspace @@ -1397,6 +1391,7 @@ services: servicegroups: backup nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup" hostgroups: computers + excludehosts: backuphost normal_check_interval: 60 max_check_attempts: 2 retry_check_interval: 5 @@ -1404,7 +1399,7 @@ services: name: backup server config servicegroups: backup nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server" - hosts: beethoven + hosts: beethoven, backuphost normal_check_interval: 60 max_check_attempts: 2 retry_check_interval: 5 @@ -1413,7 +1408,8 @@ services: servicegroups: backup remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org" runfrom: dinis - hostgroups: bacula-client + hostgroups: computers + excludehostgroups: buildd, porterbox, no-bacula normal_check_interval: 60 retry_check_interval: 15 - @@ -1421,7 +1417,8 @@ services: servicegroups: backup remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 840 -c 1560 $HOSTNAME$.debian.org F" runfrom: dinis - hostgroups: bacula-client + hostgroups: computers + excludehostgroups: buildd, porterbox, no-bacula normal_check_interval: 60 retry_check_interval: 15 - @@ -1882,6 +1879,12 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'" hostgroups: postfix-hosts depends: process - postfix - master + - + name: unwanted process - openvpn + nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn" + hostgroups: computers + normal_check_interval: 120 + ### - @@ -1919,6 +1922,12 @@ services: hostgroups: computers excludehosts: wagner, vasks normal_check_interval: 60 + - + name: setup - local hostname etc-hosts + nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi' + hostgroups: computers + excludehosts: wagner, vasks + normal_check_interval: 60 - name: setup - ud-ldap freshness nrpe: "/usr/lib/nagios/plugins/dsa-check-udldap-freshness" @@ -2210,17 +2219,12 @@ services: check: check_tcp!873 hostgroups: rsyncd-hosts depends: process - xinetd - excludehosts: merikanto, rietz + excludehosts: rietz - name: network service - rsync check: check_tcp!873 hosts: rietz2 depends: rietz:process - xinetd - - - name: network service - rsync - check: check_tcp!873 - hosts: merikanto2 - depends: merikanto:process - xinetd - name: network service - rsync check: check_tcp!873 @@ -2404,7 +2408,8 @@ services: - name: postgresql backups nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg" - hosts: beethoven + #hosts: beethoven + hosts: backuphost #### #### - @@ -2459,6 +2464,9 @@ services: nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0" hostgroups: buildd contact_groups: +buildd + normal_check_interval: 5 + max_check_attempts: 24 + retry_check_interval: 5 - name: processes - lvcreate nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"