X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=a4a3b8d1edba56753ce1a13ad862c0b9b9906943;hb=da208e6772c7a406e2019a222c84eece48d1dc31;hp=101cfb6d37a819e8217223bf74c2eb9ff9f3f06e;hpb=548f9b8a1cbeb6adf28a1e325c4a479cfb3a6576;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 101cfb6..a4a3b8d 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -171,7 +171,7 @@ servers: pettersson: address: 130.239.18.123 parents: gw-accumu - hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, buster, autofs, sw-raid, physical_x86_intel + hostgroups: computers, hasbootfs, aacraid, nfs-client, service, buster, autofs, sw-raid, physical_x86_intel contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa contact_groups: "" mirror-accumu: @@ -361,38 +361,14 @@ servers: address: 5.153.231.12 parents: ganeti-bytemark hostgroups: computers, hassrvfs, kvmdomains, buster, systemd-timesyncd - rainier: - address: 5.153.231.16 - parents: ganeti-bytemark - hostgroups: computers, kvmdomains, stretch, systemd-timesyncd - rapoport: - address: 5.153.231.15 - parents: ganeti-bytemark - hostgroups: computers, kvmdomains, stretch, systemd-timesyncd delfin: address: 5.153.231.17 parents: ganeti-bytemark hostgroups: computers, hassrvfs, kvmdomains, buster, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd - dinis: - address: 5.153.231.19 - parents: ganeti-bytemark - hostgroups: computers, general, kvmdomains, buster, hassrvfs, systemd-timesyncd - donizetti: - address: 5.153.231.20 - parents: ganeti-bytemark - hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd dillon: address: 5.153.231.22 parents: ganeti-bytemark hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd - ticharich: - address: 5.153.231.23 - parents: ganeti-bytemark - hostgroups: computers, general, kvmdomains, buster, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd - petrova: - address: 5.153.231.25 - parents: ganeti-bytemark - hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd quantz: address: 5.153.231.28 parents: ganeti-bytemark @@ -401,42 +377,18 @@ servers: address: 5.153.231.29 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd - paradis: - address: 5.153.231.30 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd tate: address: 5.153.231.33 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd - gideon: - address: 5.153.231.34 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd - lindsay: - address: 5.153.231.36 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, buster, autofs, nfs-client, systemd-timesyncd sor: address: 5.153.231.38 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd - jerea: - address: 5.153.231.39 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, buster, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd mekeel: address: 5.153.231.40 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd - pinel: - address: 5.153.231.42 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd - rusca: - address: 5.153.231.43 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd casulana: address: 5.153.231.41 @@ -784,17 +736,41 @@ servers: suchon: address: 82.195.75.68 parents: ganeti-manda - hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd + hostgroups: computers, service, kvmdomains, hassrvfs, stretch, uploadqueue, queued, systemd-timesyncd adayevskaya: address: 82.195.75.75 parents: ganeti-manda hostgroups: computers, service, kvmdomains, buster, systemd-timesyncd + postgresql-manda-01: + address: 82.195.75.76 + parents: ganeti-manda + hostgroups: computers, service, kvmdomains, hassrvfs, buster, systemd-timesyncd, postgres11-hosts + dinis: + address: 82.195.75.77 + parents: ganeti-manda + hostgroups: computers, general, kvmdomains, buster, hassrvfs, systemd-timesyncd + gideon: + address: 82.195.75.78 + parents: ganeti-manda + hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd + rainier: + address: 82.195.75.94 + parents: ganeti-manda + hostgroups: computers, kvmdomains, stretch, systemd-timesyncd + rapoport: + address: 82.195.75.95 + parents: ganeti-manda + hostgroups: computers, kvmdomains, stretch, systemd-timesyncd + petrova: + address: 82.195.75.96 + parents: ganeti-manda + hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd # }}} # {{{ gw-marist zani: address: 148.100.88.22 parents: gw-marist - hostgroups: computers, pybuildd, hassrvfs, buster, incomingmailrelayed + hostgroups: computers, pybuildd, hassrvfs, buster, incomingmailrelayed587 # }}} # {{{ gw-osuosl byrd: @@ -972,7 +948,7 @@ servers: tye: address: 209.87.16.37 parents: ganeti2-ubc - hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd + hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd ullmann: address: 209.87.16.38 parents: ganeti2-ubc @@ -1022,6 +998,34 @@ servers: address: 209.87.16.61 parents: ganeti2-ubc hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd, broken_https_default_vhost + lindsay: + address: 209.87.16.62 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, buster, autofs, nfs-client, systemd-timesyncd + pinel: + address: 209.87.16.63 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd + ticharich: + address: 209.87.16.64 + parents: ganeti2-ubc + hostgroups: computers, general, kvmdomains, buster, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd + donizetti: + address: 209.87.16.65 + parents: ganeti2-ubc + hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd + jerea: + address: 209.87.16.66 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, buster, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd + paradis: + address: 209.87.16.67 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd + paradis2: + address: 209.87.16.68 + parents: paradis + hostgroups: secondary-IPs ganeti3-ubc: address: 209.87.16.50 @@ -1106,18 +1110,14 @@ servers: klecker: address: 130.89.148.10 parents: gw-utwente - hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs, physical_x86_intel + hostgroups: computers, service, dl380, stretch, incomingmailrelayed2025, hassrvfs, physical_x86_intel klecker-ftp: address: 130.89.148.12 - parents: klecker + parents: new-klecker hostgroups: secondary-IPs klecker-archive: address: 130.89.148.13 - parents: klecker - hostgroups: secondary-IPs - klecker-static: - address: 130.89.148.14 - parents: klecker + parents: new-klecker hostgroups: secondary-IPs new-klecker: address: 130.89.148.77 @@ -1126,7 +1126,7 @@ servers: smit: address: 130.89.148.78 parents: gw-utwente - hostgroups: computers, service, buster, r540, manyprocesses, incomingmailrelayed2025, physical_x86_intel, apache2-hosts, apache-https, hassrvfs + hostgroups: computers, service, buster, r540, manyprocesses, incomingmailrelayed2025, physical_x86_intel, apache2-hosts, apache-https, hassrvfs, rsyncd-hosts mikrotik-utwente: address: 130.89.148.79 parents: gw-utwente @@ -1348,7 +1348,7 @@ hostgroups: alias: hosts with a /var/log filesystem private: 1 - incomingmailrelayed: + incomingmailrelayed587: alias: incoming mail needs to go through a mail relay # i.e. no port 25 private: 1 @@ -1861,7 +1861,7 @@ services: hostgroups: computers - name: network service - munin-node - check: check_tcp!4949 + nrpe: "/usr/lib/nagios/plugins/check_tcp -H localhost -p 4949" hostgroups: computers depends: process - munin-node ### @@ -2348,7 +2348,7 @@ services: name: network service - smtp check: dsa_check_smtp hostgroups: computers - excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025 + excludehostgroups: postfix-hosts, incomingmailrelayed587, incomingmailrelayed2025 depends: process - exim - @@ -2359,7 +2359,7 @@ services: - name: network service - submission check: dsa_check_smtp_port!587 - hostgroups: incomingmailrelayed + hostgroups: incomingmailrelayed587 depends: process - exim - name: network service - smtp 2025 @@ -2379,11 +2379,11 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2" hostgroups: apache2-hosts depends: process - apache2 - master - excludehosts: klecker + excludehosts: new-klecker - name: process - apache2 - worker nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2" - hosts: klecker + hosts: new-klecker depends: process - apache2 - master - name: unwanted process - apache2 @@ -2395,12 +2395,17 @@ services: name: network service - http check: check_http hostgroups: apache2-hosts - excludehosts: klecker, casulana + excludehosts: casulana depends: process - apache2 - master - name: network service - http check: check_http - depends: klecker:process - apache2 - master + depends: new-klecker:process - apache2 - master + hosts: klecker-archive + - + name: network service - http + check: check_http + depends: new-klecker:process - apache2 - master hosts: klecker-ftp # keyserver on kaufmann @@ -2801,8 +2806,18 @@ services: hostgroups: bind9-hosts - name: network service - dns - check: check_dns - hostgroups: bind9-hosts + check: check_dig!www.debian.org! + hosts: geo1, geo2, geo3 + depends: process - named + - + name: network service - dns + check: check_dig!_openpgpkey.debian.org!-A -t SOA + hosts: kaufmann + depends: process - named + - + name: network service - dns + check: check_dig!debian.org!-A -t SOA + hosts: denis depends: process - named - name: unwanted process - named