X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=config%2Fnagios-master.cfg;h=b47b778a24da336306a084050cb1e5c0f0ba3dfc;hb=33f571057c11d7e943a7c6028c1ca79e96f12aa0;hp=0c10ad954b3650ea830ed9caafb62f375892175f;hpb=406e198f5baa03d1351bb9c8b89561ddfe018f90;p=mirror%2Fdsa-nagios.git diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg index 0c10ad9..b47b778 100644 --- a/config/nagios-master.cfg +++ b/config/nagios-master.cfg @@ -161,11 +161,11 @@ servers: schumann: address: 212.227.126.54 parents: gw-1und1-sec - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, buster, security_mirror, hassrvfs, pe1950, physical_x86_intel + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, buster, hassrvfs, pe1950, physical_x86_intel wieck: address: 195.20.242.89 parents: gw-1und1-sec - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950, physical_x86_intel + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, hasvarlogfs, no-bacula, pe1950, physical_x86_intel # }}} # {{{ gw-accumu pettersson: @@ -177,7 +177,7 @@ servers: mirror-accumu: address: 130.242.6.199 parents: gw-accumu2 - hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, physical_x86_intel + hostgroups: computers, service, buster, apache2-hosts, hassrvfs, rsyncd-hosts, physical_x86_intel # }}} # {{{ gw-aql eller: @@ -335,11 +335,6 @@ servers: address: 5.153.231.4 parents: gw-bytemark hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd - pejacevic: - address: 5.153.231.6 - parents: gw-bytemark - hostgroups: computers, service, kvmdomains, buster, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd - contacts: holger piu-slave-bm-a: address: 5.153.231.7 parents: gw-bytemark @@ -353,34 +348,14 @@ servers: address: 5.153.231.1 parents: gw-bytemark hostgroups: notacomputer - coccia: - address: 5.153.231.11 - parents: ganeti-bytemark - hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd backuphost: address: 5.153.231.12 parents: ganeti-bytemark hostgroups: computers, hassrvfs, kvmdomains, buster, systemd-timesyncd - delfin: - address: 5.153.231.17 - parents: ganeti-bytemark - hostgroups: computers, hassrvfs, kvmdomains, buster, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd - dillon: - address: 5.153.231.22 - parents: ganeti-bytemark - hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd - petrova: - address: 5.153.231.25 - parents: ganeti-bytemark - hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd - quantz: - address: 5.153.231.28 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd respighi: address: 5.153.231.29 parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd + hostgroups: computers, service, kvmdomains, buster, hassrvfs, nfs-client, autofs, systemd-timesyncd tate: address: 5.153.231.33 parents: ganeti-bytemark @@ -389,10 +364,6 @@ servers: address: 5.153.231.38 parents: ganeti-bytemark hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd - mekeel: - address: 5.153.231.40 - parents: ganeti-bytemark - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd casulana: address: 5.153.231.41 @@ -405,7 +376,7 @@ servers: santoro: address: 200.17.202.197 parents: gw-c3sl - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https, physical_x86_intel + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, no-bacula, apache-https, physical_x86_intel contacts: faw # }}} # {{{ gw-cecsit @@ -420,7 +391,7 @@ servers: mirror-anu3: address: 150.203.164.61 parents: mirror-anu - hostgroups: secondary-IPs, security_mirror, rsyncd-hosts + hostgroups: secondary-IPs, rsyncd-hosts mirror-anu4: address: 150.203.164.62 parents: mirror-anu @@ -463,7 +434,7 @@ servers: parents: schmelzer schmelzer-security: address: 217.196.149.233 - hostgroups: secondary-IPs, rsyncd-hosts, security_mirror + hostgroups: secondary-IPs, rsyncd-hosts parents: schmelzer schmelzer-archive: address: 217.196.149.234 @@ -519,7 +490,7 @@ servers: olin: address: 128.31.0.65 parents: ganeti-csail - hostgroups: computers, kvmdomains, stretch, systemd-timesyncd + hostgroups: computers, kvmdomains, buster, systemd-timesyncd # }}} # {{{ gw-dgi storace: @@ -531,7 +502,7 @@ servers: sechter: address: 128.61.240.73 parents: gw-gatech - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror, physical_x86_intel + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, physical_x86_intel # }}} # {{{ gw-grnet ganeti-grnet: @@ -581,7 +552,7 @@ servers: melartin: address: 194.177.211.208 parents: ganeti-grnet - hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs + hostgroups: computers, service, kvmdomains, buster, systemd-timesyncd, postgres11-hosts, hassrvfs static-master-grnet-01: address: 194.177.211.209 parents: ganeti-grnet @@ -595,7 +566,7 @@ servers: mirror-isc2: address: 149.20.4.14 parents: mirror-isc - hostgroups: secondary-IPs, rsyncd-hosts, security_mirror + hostgroups: secondary-IPs, rsyncd-hosts mirror-isc3: address: 149.20.4.15 parents: mirror-isc @@ -625,7 +596,7 @@ servers: lw07: address: 185.17.185.187 parents: gw-leaseweb - hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, postgres96-hosts, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts, physical_x86_intel + hostgroups: computers, service, stretch, dl180, nfs-client, autofs, hassrvfs, apache2-hosts, haproxy-hosts, haproxy-https-host, varnish-hosts, physical_x86_intel lw07-2: address: 185.17.185.185 parents: lw07 @@ -704,7 +675,7 @@ servers: denis: address: 82.195.75.91 parents: ganeti-manda - hostgroups: computers, service, kvmdomains, stretch, bind9-hosts, systemd-timesyncd + hostgroups: computers, service, kvmdomains, buster, bind9-hosts, systemd-timesyncd vogler: address: 82.195.75.92 parents: ganeti-manda @@ -765,6 +736,18 @@ servers: address: 82.195.75.95 parents: ganeti-manda hostgroups: computers, kvmdomains, stretch, systemd-timesyncd + petrova: + address: 82.195.75.96 + parents: ganeti-manda + hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd + static-master-manda-01: + address: 82.195.75.97 + parents: ganeti-manda + hostgroups: computers, kvmdomains, buster, hassrvfs, systemd-timesyncd + dillon: + address: 82.195.75.99 + parents: ganeti-manda + hostgroups: computers, general, kvmdomains, stretch, hassrvfs, systemd-timesyncd # }}} # {{{ gw-marist zani: @@ -829,11 +812,11 @@ servers: lobos: address: 212.211.132.250 parents: gw-scanplus-lobos - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror, physical_x86_intel + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, physical_x86_intel villa: address: 212.211.132.32 parents: gw-scanplus-villa - hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror, physical_x86_intel + hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, physical_x86_intel # }}} # {{{ gw-sil eberlin: @@ -904,7 +887,7 @@ servers: nono: address: 209.87.16.26 parents: ganeti2-ubc - hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd + hostgroups: computers, service, kvmdomains, buster, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd reger: address: 209.87.16.27 parents: ganeti2-ubc @@ -1021,11 +1004,32 @@ servers: paradis: address: 209.87.16.67 parents: ganeti2-ubc - hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd + hostgroups: computers, service, kvmdomains, buster, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd paradis2: address: 209.87.16.68 parents: paradis hostgroups: secondary-IPs + mekeel: + address: 209.87.16.69 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, buster, hassrvfs, nfs-client, autofs, systemd-timesyncd + pejacevic: + address: 209.87.16.70 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, buster, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd + contacts: holger + delfin: + address: 209.87.16.71 + parents: ganeti2-ubc + hostgroups: computers, hassrvfs, kvmdomains, buster, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd + coccia: + address: 209.87.16.72 + parents: ganeti2-ubc + hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd + quantz: + address: 209.87.16.73 + parents: ganeti2-ubc + hostgroups: computers, service, kvmdomains, buster, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd ganeti3-ubc: address: 209.87.16.50 @@ -1071,10 +1075,6 @@ servers: # }}} # {{{ gw-umn - #saens: - # address: 128.101.240.212 - # parents: gw-umn - # hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula mirror-umn: address: 128.101.240.212 parents: gw-umn @@ -1082,7 +1082,7 @@ servers: mirror-umn2: address: 128.101.240.215 parents: mirror-umn - hostgroups: secondary-IPs, rsyncd-hosts, security_mirror + hostgroups: secondary-IPs, rsyncd-hosts mirror-umn3: address: 128.101.240.216 parents: mirror-umn @@ -1110,7 +1110,7 @@ servers: klecker: address: 130.89.148.10 parents: gw-utwente - hostgroups: computers, service, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs, physical_x86_intel + hostgroups: computers, service, dl380, stretch, incomingmailrelayed2025, hassrvfs, physical_x86_intel klecker-ftp: address: 130.89.148.12 parents: new-klecker @@ -1126,7 +1126,7 @@ servers: smit: address: 130.89.148.78 parents: gw-utwente - hostgroups: computers, service, buster, r540, manyprocesses, incomingmailrelayed2025, physical_x86_intel, apache2-hosts, apache-https, hassrvfs + hostgroups: computers, service, buster, r540, manyprocesses, incomingmailrelayed2025, physical_x86_intel, apache2-hosts, apache-https, hassrvfs, rsyncd-hosts mikrotik-utwente: address: 130.89.148.79 parents: gw-utwente @@ -1160,7 +1160,7 @@ servers: setoguchi: address: 133.242.99.74 parents: gw-sakura - hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror, physical_x86_intel + hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, physical_x86_intel # }}} # {{{ ############################# host groups ############################# @@ -1370,10 +1370,6 @@ hostgroups: alias: nodes that run OpenStack controller private: 1 - security_mirror: - alias: hosts that are security mirrors - private: 1 - broken_mq: alias: hosts whose MQ is broken private: 1 @@ -1463,11 +1459,17 @@ services: servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv" hostgroups: hassrvfs + excludehosts: vittoria + - + name: disk usage on /srv + servicegroups: diskspace + nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv" + hosts: vittoria - name: disk usage on /var/lib/postgresql servicegroups: diskspace nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql" - hosts: sibelius, buxtehude, lw07, fasolo + hosts: sibelius, buxtehude, fasolo - name: disk usage on /var/log servicegroups: diskspace @@ -1651,7 +1653,7 @@ services: - name: processes - total hostgroups: manyprocesses - nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700" + nrpe: "/usr/lib/nagios/plugins/check_procs 1700 2000" - name: processes - total hostgroups: crazymanyprocesses @@ -1686,23 +1688,6 @@ services: hostgroups: computers # }}} # {{{ backup - - - name: backup - servicegroups: backup - nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup" - hostgroups: computers - excludehosts: backuphost, storace - check_interval: 60 - max_check_attempts: 2 - retry_interval: 5 - - - name: backup server config - servicegroups: backup - nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server" - hosts: storace - check_interval: 60 - max_check_attempts: 2 - retry_interval: 5 - name: backup - bacula - last backup servicegroups: backup @@ -2203,6 +2188,10 @@ services: nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam" hostgroups: computers excludehostgroups: heavy-exim, heavy-postfix + - + name: signature freshness - clamav + nrpe: "/usr/lib/nagios/plugins/dsa-check-clamav-signatures" + hostgroups: heavy-exim, heavy-postfix # }}} # {{{ anti-spam - @@ -2400,7 +2389,12 @@ services: - name: network service - http check: check_http - depends: klecker:process - apache2 - master + depends: new-klecker:process - apache2 - master + hosts: klecker-archive + - + name: network service - http + check: check_http + depends: new-klecker:process - apache2 - master hosts: klecker-ftp # keyserver on kaufmann @@ -2983,6 +2977,12 @@ services: hosts: gombert contact_groups: gobby #### + - + name: release - britney piuparts freshness + nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 1h /srv/release.debian.org/britney/state/piuparts-status.txt" + hosts: respighi + contacts: release-britney + #### - name: network service - sip-tls cert - 443 check: dsa_check_cert!443