Check dnssec signature expiry

diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg
index 855cfcb..63b20e5 100644 (file)
--- a/config/nagios-master.cfg
+++ b/config/nagios-master.cfg
@@ -2004,6 +2004,13 @@ services:
     name: DNS SOA sync - 2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa
     check: "dsa_check_soas!2.6.a.0.4.6.5.6.1.0.0.0.2.0.0.0.8.d.8.0.1.0.0.2.ip6.arpa"
     hosts: global
+  -
+    name: DNS SEC - signature expiry
+    check: "dsa_check_dnssec"
+    hosts: global
+    remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d /var/cache/bind/git/domains"
+    runfrom: draghi
+
  ############
   -
     name: ping alive check