From 692ddc207c7286b49dab0e64a4756d4660393a09 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Tue, 2 Feb 2016 08:01:25 +0100
Subject: [PATCH] Check certs on the puppet host

---
 config/nagios-master.cfg | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg
index cb9c73c..9961342 100644
--- a/config/nagios-master.cfg
+++ b/config/nagios-master.cfg
@@ -2022,10 +2022,15 @@ services:
     nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
     hostgroups: computers
   -
-    name: letsencrypt SSL certs
+    name: SSL certs - puppet
     hosts: global
-    remotecheck: "/srv/letsencrypt.debian.org/bin/check-cert-expire"
-    runfrom: denis
+    remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
+    runfrom: handel
+  -
+    name: SSL certs - LE
+    hosts: global
+    remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/from-letsencrypt"
+    runfrom: handel
   # }}}
   # {{{ HW health/raid
   -
-- 
2.20.1