config/nagios-master.cfg

   1 # Non comment lines are YAML
   2 #
   3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
   4 #
   5 # vim:set syntax=yaml:
   6
   7 # TODO
   8 #  - *: check munin stats collection works
   9 #  - *: check backups are successful
  10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
  11
  12 ---
  13 #############################
  14 # hosts
  15 #############################
  16 servers:
  17   # {{{ gateways
  18   global:
  19     hostgroups: notacomputer
  20     pingable: false
  21     check_command: dsa_check_always_ok
  22   gw-1und1:
  23     parents: gw-ubcece
  24     hostgroups: notacomputer
  25     pingable: false
  26     check_command: dsa_check_always_ok
  27   gw-1und1-sec:
  28     parents: gw-ubcece
  29     hostgroups: notacomputer
  30     pingable: false
  31     check_command: dsa_check_always_ok
  32   gw-accumu:
  33     address: 130.239.18.97
  34     parents: gw-ubcece
  35     hostgroups: layer3-infrastructure
  36   gw-bytemark:
  37     address: 89.16.160.116
  38     parents: gw-ubcece
  39     hostgroups: layer3-infrastructure
  40   gw-c3sl:
  41     address: 200.17.202.254
  42     parents: gw-ubcece
  43     hostgroups: layer3-infrastructure
  44   gw-cecsit:
  45     address: 150.203.164.38
  46     parents: gw-ubcece
  47     hostgroups: layer3-infrastructure
  48   gw-arm:
  49     address: 213.104.121.213
  50     parents: gw-ubcece
  51     hostgroups: layer3-infrastructure
  52   gw-brown:
  53     address: 138.16.160.1
  54     parents: gw-ubcece
  55     hostgroups: layer3-infrastructure
  56   gw-carnet:
  57     address: 161.53.160.1
  58     parents: gw-ubcece
  59     hostgroups: layer3-infrastructure
  60   gw-conova:
  61     address: 217.196.149.238
  62     parents: gw-ubcece
  63     hostgroups: layer3-infrastructure
  64   gw-csail:
  65     address: 128.31.0.1
  66     parents: gw-ubcece
  67     hostgroups: layer3-infrastructure
  68   gw-dgi:
  69     address: 93.94.132.102
  70     parents: gw-ubcece
  71     hostgroups: layer3-infrastructure
  72     contacts: bzed
  73   gw-freenet:
  74     address: 62.104.23.249
  75     parents: gw-ubcece
  76     hostgroups: layer3-infrastructure
  77   gw-gatech:
  78     address: 128.61.240.1
  79     parents: gw-ubcece
  80     hostgroups: layer3-infrastructure
  81   gw-grnet:
  82     address: 194.177.211.193
  83     parents: gw-ubcece
  84     hostgroups: layer3-infrastructure
  85   gw-isc:
  86     address: 149.20.20.1
  87     parents: gw-ubcece
  88     hostgroups: layer3-infrastructure
  89   gw-karlsruhe:
  90     address: 129.143.57.177
  91     parents: gw-ubcece
  92     hostgroups: layer3-infrastructure
  93   gw-leaseweb:
  94     address: 185.17.185.190
  95     parents: gw-ubcece
  96     hostgroups: layer3-infrastructure
  97   gw-man-da:
  98     address: 82.195.75.126
  99     parents: gw-ubcece
 100     hostgroups: layer3-infrastructure
 101   gw-marist:
 102     address: 148.100.88.1
 103     parents: gw-ubcece
 104     hostgroups: layer3-infrastructure
 105   gw-osuosl:
 106     address: 140.211.166.1
 107     parents: gw-ubcece
 108     hostgroups: layer3-infrastructure
 109   gw-rapidswitch:
 110     address: 193.201.200.129
 111     parents: gw-ubcece
 112     hostgroups: layer3-infrastructure
 113   gw-sanger:
 114     address: 193.62.202.20
 115     parents: gw-ubcece
 116     hostgroups: layer3-infrastructure
 117     contacts: tjrc1, dave
 118   gw-scanplus-lobos:
 119     address: 212.211.132.249
 120     parents: gw-ubcece
 121     hostgroups: layer3-infrastructure
 122   gw-scanplus-villa:
 123     address: 212.211.132.1
 124     parents: gw-ubcece
 125     hostgroups: layer3-infrastructure
 126   gw-sil:
 127     address: 86.59.118.145
 128     parents: gw-ubcece
 129     hostgroups: layer3-infrastructure
 130   gw-ubcece:
 131     address: 206.12.19.254
 132     hostgroups: layer3-infrastructure
 133     contacts: lfilipoz
 134   gw-ugent:
 135     address: 193.191.17.50
 136     parents: gw-ubcece
 137     hostgroups: layer3-infrastructure
 138   gw-umn:
 139     address: 128.101.240.222
 140     parents: gw-ubcece
 141     hostgroups: layer3-infrastructure
 142   gw-unicamp:
 143     address: 143.106.167.234
 144     parents: gw-ubcece
 145     hostgroups: layer3-infrastructure
 146   gw-utwente:
 147     address: 130.89.149.1
 148     parents: gw-ubcece
 149     hostgroups: layer3-infrastructure
 150   gw-ynic:
 151     # really janet, because ynic is stupid about firewalling
 152     #address: 146.97.42.26
 153     address: 146.97.41.66
 154     parents: gw-ubcece
 155     hostgroups: layer3-infrastructure
 156   gw-zivit:
 157     address: 80.245.144.3
 158     parents: gw-ubcece
 159     hostgroups: layer3-infrastructure
 160   # }}}
 161   # {{{ servers
 162   # {{{ gw-1und1
 163   powell:
 164     address: 87.106.64.223
 165     parents: gw-1und1
 166     hostgroups: computers, service, acpid-hosts, wheezy
 167   pkgmirror-1and1:
 168     address: 213.165.95.4
 169     parents: powell
 170     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
 171   babin:
 172     address: 213.165.95.6
 173     parents: powell
 174     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 175   piu-slave-1und1-01:
 176     address: 213.165.95.7
 177     parents: powell
 178     hostgroups: computers, service, kvmdomains, wheezy
 179     contacts: holger
 180   # }}}
 181   # {{{ gw-1und1-sec
 182   schumann:
 183     address: 212.227.126.54
 184     parents: gw-1und1-sec
 185     hostgroups: computers, acpid-hosts, service, wheezy
 186   chopin:
 187     address: 195.20.242.124
 188     parents: schumann
 189     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
 190   geo3:
 191     address: 195.20.242.125
 192     parents: schumann
 193     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
 194   soler:
 195     address: 195.20.242.126
 196     parents: schumann
 197     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
 198   wieck:
 199     address: 195.20.242.89
 200     parents: gw-1und1-sec
 201     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
 202   # }}}
 203   # {{{ gw-accumu
 204   pettersson:
 205     address: 130.239.18.123
 206     parents: gw-accumu
 207     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
 208   praetorius:
 209     address: 130.239.18.121
 210     parents: gw-accumu
 211     hostgroups: computers, buildd, hassrvfs, wheezy
 212   # }}}
 213   # {{{ gw-arm
 214   abel:
 215     address: 217.140.96.56
 216     parents: gw-arm
 217     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
 218   antheil:
 219     address: 217.140.96.60
 220     parents: gw-arm
 221     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 222   arnold:
 223     address: 217.140.96.57
 224     parents: gw-arm
 225     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 226   arm-arm-01:
 227     address: 217.140.96.58
 228     parents: gw-arm
 229     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 230   arm-arm-02:
 231     address: 217.140.96.59
 232     parents: gw-arm
 233     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
 234   harris:
 235     address: 217.140.96.66
 236     parents: gw-arm
 237     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
 238   hartmann:
 239     address: 217.140.96.67
 240     parents: gw-arm
 241     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 242   hasse:
 243     address: 217.140.96.68
 244     parents: gw-arm
 245     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 246   henze:
 247     address: 217.140.96.70
 248     parents: gw-arm
 249     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
 250   hoiby:
 251     address: 217.140.96.71
 252     parents: gw-arm
 253     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
 254   # }}}
 255   # {{{ gw-brown
 256   franck:
 257     address: 138.16.160.12
 258     parents: gw-brown
 259     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
 260   # }}}
 261   # {{{ gw-bytemark
 262   bm-bl1:
 263     address: 5.153.231.241
 264     parents: gw-bytemark
 265     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 266   bm-bl2:
 267     address: 5.153.231.242
 268     parents: gw-bytemark
 269     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 270   bm-bl3:
 271     address: 5.153.231.243
 272     parents: gw-bytemark
 273     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 274   bm-bl4:
 275     address: 5.153.231.244
 276     parents: gw-bytemark
 277     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 278   bm-bl5:
 279     address: 5.153.231.245
 280     parents: gw-bytemark
 281     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 282   bm-bl6:
 283     address: 5.153.231.246
 284     parents: gw-bytemark
 285     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 286   bm-bl7:
 287     address: 5.153.231.247
 288     parents: gw-bytemark
 289     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 290   bm-bl8:
 291     address: 5.153.231.248
 292     parents: gw-bytemark
 293     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
 294   bm-bl9:
 295     address: 5.153.231.249
 296     parents: gw-bytemark
 297     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 298   bm-bl10:
 299     address: 5.153.231.250
 300     parents: gw-bytemark
 301     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 302   bm-bl11:
 303     address: 5.153.231.251
 304     parents: gw-bytemark
 305     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 306   bm-bl12:
 307     address: 5.153.231.252
 308     parents: gw-bytemark
 309     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
 310
 311   milanollo:
 312     address: 5.153.231.2
 313     parents: gw-bytemark
 314     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
 315   milanollo2:
 316     address: 5.153.231.9
 317     parents: milanollo
 318     hostgroups: secondary-IPs
 319   picconi:
 320     address: 5.153.231.3
 321     parents: gw-bytemark
 322     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
 323   senfter:
 324     address: 5.153.231.4
 325     parents: gw-bytemark
 326     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
 327   adayevskaya:
 328     address: 5.153.231.5
 329     parents: gw-bytemark
 330     hostgroups: computers, service, kvmdomains, wheezy
 331   pejacevic:
 332     address: 5.153.231.6
 333     parents: gw-bytemark
 334     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
 335     contacts: holger
 336   piu-slave-bm-a:
 337     address: 5.153.231.7
 338     parents: gw-bytemark
 339     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
 340     contacts: holger
 341   binet:
 342     address: 5.153.231.8
 343     parents: gw-bytemark
 344     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 345   bmdb1:
 346     address: 5.153.231.10
 347     parents: gw-bytemark
 348     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
 349   ganeti-bytemark:
 350     address: 82.195.75.111
 351     parents: gw-bytemark
 352     hostgroups: notacomputer
 353   coccia:
 354     address: 5.153.231.11
 355     parents: ganeti-bytemark
 356     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts
 357   backuphost:
 358     address: 5.153.231.12
 359     parents: ganeti-bytemark
 360     hostgroups: computers, hassrvfs, kvmdomains, wheezy
 361   philp:
 362     address: 5.153.231.13
 363     parents: ganeti-bytemark
 364     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
 365   couper:
 366     address: 5.153.231.14
 367     parents: ganeti-bytemark
 368     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
 369   rainier:
 370     address: 5.153.231.16
 371     parents: ganeti-bytemark
 372     hostgroups: computers, kvmdomains, wheezy, no-bacula
 373   rapoport:
 374     address: 5.153.231.15
 375     parents: ganeti-bytemark
 376     hostgroups: computers, kvmdomains, wheezy, no-bacula
 377   delfin:
 378     address: 5.153.231.17
 379     parents: ganeti-bytemark
 380     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
 381   wuiet:
 382     address: 5.153.231.18
 383     parents: ganeti-bytemark
 384     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
 385   dinis:
 386     address: 5.153.231.19
 387     parents: ganeti-bytemark
 388     hostgroups: computers, general, kvmdomains, wheezy
 389   donizetti:
 390     address: 5.153.231.20
 391     parents: ganeti-bytemark
 392     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
 393   moszumanska:
 394     address: 5.153.231.21
 395     parents: ganeti-bytemark
 396     contact_groups: alioth-admins
 397     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
 398     no-servicegroups: true
 399   dillon:
 400     address: 5.153.231.22
 401     parents: ganeti-bytemark
 402     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
 403   ticharich:
 404     address: 5.153.231.23
 405     parents: ganeti-bytemark
 406     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
 407   petrova:
 408     address: 5.153.231.25
 409     parents: ganeti-bytemark
 410     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
 411   oyens:
 412     address: 5.153.231.26
 413     parents: ganeti-bytemark
 414     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
 415   barriere:
 416     address: 5.153.231.27
 417     parents: ganeti-bytemark
 418     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
 419   quantz:
 420     address: 5.153.231.28
 421     parents: ganeti-bytemark
 422     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
 423   portman:
 424     address: 5.153.231.29
 425     parents: ganeti-bytemark
 426     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
 427   paradis:
 428     address: 5.153.231.30
 429     parents: ganeti-bytemark
 430     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 431   x86-bm-01:
 432     address: 5.153.231.32
 433     parents: ganeti-bytemark
 434     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
 435   gideon:
 436     address: 5.153.231.34
 437     parents: ganeti-bytemark
 438     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 439   httpredir-bm-01:
 440     address: 5.153.231.35
 441     parents: ganeti-bytemark
 442     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
 443   # }}}
 444   # {{{ gw-c3sl
 445   santoro:
 446     address: 200.17.202.197
 447     parents: gw-c3sl
 448     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
 449     contacts: faw
 450   # }}}
 451   # {{{ gw-carnet
 452   lebrun:
 453     address: 193.198.184.10
 454     parents: gw-carnet
 455     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
 456   schroeder:
 457     address: 193.198.184.11
 458     parents: gw-carnet
 459     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
 460   # }}}
 461   # {{{ gw-cecsit
 462   gluck:
 463     address: 150.203.164.38
 464     parents: gw-cecsit
 465     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
 466   # }}}
 467   # {{{ gw-conova
 468   sompek:
 469     address: 217.196.149.225
 470     parents: gw-conova
 471     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
 472   stadler:
 473     address: 217.196.149.226
 474     parents: gw-conova
 475     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
 476   # }}}
 477   # {{{ gw-csail
 478   senfl:
 479     address: 128.31.0.51
 480     parents: gw-csail
 481     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
 482   steffani:
 483     address: 128.31.0.36
 484     parents: gw-csail
 485     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 486
 487   csail-node01:
 488     address: 128.31.0.16
 489     parents: gw-csail
 490     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
 491   csail-node02:
 492     address: 128.31.0.46
 493     parents: gw-csail
 494     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
 495   ganeti-csail:
 496     address: 128.31.0.49
 497     parents: gw-bytemark
 498     hostgroups: notacomputer
 499
 500   falla:
 501     address: 128.31.0.65
 502     parents: ganeti-csail
 503     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
 504   fischer:
 505     address: 128.31.0.35
 506     parents: ganeti-csail
 507     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
 508   mirror-csail:
 509     address: 128.31.0.62
 510     parents: ganeti-csail
 511     hostgroups: computers, service, hassrvfs, kvmdomains, wheezy, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
 512   x86-csail-01:
 513     address: 128.31.0.50
 514     parents: ganeti-csail
 515     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 516   # }}}
 517   # {{{ gw-dgi
 518   storace:
 519     address: 93.94.130.161
 520     parents: gw-dgi
 521     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
 522   # }}}
 523   # {{{ gw-gatech
 524   sechter:
 525     address: 128.61.240.73
 526     parents: gw-gatech
 527     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
 528   # }}}
 529   # {{{ gw-grnet
 530   ganeti-grnet:
 531     address: 194.177.211.194
 532     parents: gw-grnet
 533     hostgroups: notacomputer
 534   grnet-node01:
 535     address: 194.177.211.195
 536     parents: gw-grnet
 537     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 538   grnet-node02:
 539     address: 194.177.211.196
 540     parents: gw-grnet
 541     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 542   rautavaara:
 543     address: 194.177.211.199
 544     parents: gw-grnet
 545     hostgroups: computers, acpid-hosts, megaraid, service, squeeze, nfs-server
 546   loghost-grnet-01:
 547     address: 194.177.211.200
 548     parents: gw-grnet
 549     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
 550   # }}}
 551   # {{{ gw-isc
 552   schein:
 553     address: 149.20.20.6
 554     parents: gw-isc
 555     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 556   # }}}
 557   # {{{ gw-leaseweb
 558   lw01:
 559     address: 185.17.185.177
 560     parents: gw-leaseweb
 561     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 562   lw02:
 563     address: 185.17.185.178
 564     parents: gw-leaseweb
 565     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 566   lw03:
 567     address: 185.17.185.179
 568     parents: gw-leaseweb
 569     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 570   lw04:
 571     address: 185.17.185.180
 572     parents: gw-leaseweb
 573     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
 574   lw07:
 575     address: 185.17.185.187
 576     parents: gw-leaseweb
 577     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
 578   lw08:
 579     address: 185.17.185.189
 580     parents: gw-leaseweb
 581     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
 582   #, apache2-hosts
 583   # }}}
 584   # {{{ gw-karlsruhe
 585   zemlinsky:
 586     address: 129.143.160.6
 587     parents: gw-karlsruhe
 588     hostgroups: computers, buildd, wheezy
 589     contacts: pkern
 590   # }}}
 591   # {{{ gw-man-da
 592   ball:
 593     address: 82.195.75.70
 594     parents: gw-man-da
 595     hostgroups: computers, buildd, hasbootfs, wheezy
 596   # bartok TODO
 597   czerny:
 598     address: 82.195.75.109
 599     parents: gw-man-da
 600     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 601   clementi:
 602     address: 82.195.75.103
 603     parents: gw-man-da
 604     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
 605   bendel:
 606     address: 82.195.75.100
 607     parents: ganeti3
 608     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
 609   master:
 610     address: 82.195.75.110
 611     parents: ganeti3
 612     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
 613   mipsel-manda-01:
 614     address: 82.195.75.72
 615     parents: gw-arm
 616     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 617   mipsel-manda-02:
 618     address: 82.195.75.74
 619     parents: gw-arm
 620     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 621   fils:
 622     address: 82.195.75.89
 623     parents: ganeti3
 624     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 625     contacts: christoph
 626   fayrfax:
 627     address: 82.195.75.82
 628     parents: ganeti3
 629     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 630     contacts: christoph
 631   vento:
 632     address: 82.195.75.98
 633     parents: ganeti3
 634     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
 635   lully:
 636     address: 82.195.75.99
 637     parents: ganeti3
 638     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
 639   rem:
 640     address: 82.195.75.68
 641     parents: gw-man-da
 642     hostgroups: computers, hasbootfs, hassrvfs, wheezy, no-bacula
 643   draghi:
 644     address: 82.195.75.106
 645     parents: ganeti3
 646     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
 647   geo1:
 648     address: 82.195.75.105
 649     parents: ganeti3
 650     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
 651   handel:
 652     address: 82.195.75.104
 653     parents: ganeti3
 654     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
 655   kaufmann:
 656     address: 82.195.75.107
 657     parents: ganeti3
 658     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
 659   stockhausen:
 660     address: 82.195.75.108
 661     parents: ganeti3
 662     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
 663   ganeti3:
 664     address: 82.195.75.111
 665     parents: gw-man-da
 666     hostgroups: notacomputer
 667   wilder:
 668     address: 82.195.75.112
 669     parents: ganeti3
 670     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
 671   mailly:
 672     address: 82.195.75.114
 673     parents: ganeti3
 674     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
 675   denis:
 676     address: 82.195.75.91
 677     parents: ganeti3
 678     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
 679   vogler:
 680     address: 82.195.75.92
 681     parents: ganeti3
 682     hostgroups: computers, service, kvmdomains, wheezy
 683   mipsel-manda-01:
 684     address: 82.195.75.72
 685     parents: gw-man-da
 686     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
 687   mipsel-manda-02:
 688     address: 82.195.75.74
 689     parents: gw-man-da
 690     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
 691   # }}}
 692   # {{{ gw-marist
 693   zani:
 694     address: 148.100.88.22
 695     parents: gw-marist
 696     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
 697   # }}}
 698   # {{{ gw-osuosl
 699   busoni:
 700     address: 140.211.15.34
 701     parents: gw-osuosl
 702     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
 703   byrd:
 704     address: 140.211.166.20
 705     parents: gw-osuosl
 706     hostgroups: computers, service, dl380, acpid-hosts, wheezy
 707   buxtehude:
 708     address: 140.211.166.26
 709     parents: byrd
 710     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
 711   # malo TODO
 712   mayer:
 713     address: 140.211.166.78
 714     parents: gw-osuosl
 715     hostgroups: computers, buildd, hasbootfs, wheezy
 716 #  mayr:
 717 #    address: 140.211.166.58
 718 #    parents: gw-osuosl
 719 #    hostgroups: computers, buildd, hasbootfs
 720   merulo:
 721     address: 140.211.166.46
 722     parents: gw-osuosl
 723     hostgroups: computers, porterbox, hasusrfs, wheezy
 724   parry:
 725     address: 140.211.15.153
 726     parents: gw-osuosl
 727     hostgroups: computers, wheezy, buildd, hassrvfs
 728   partch:
 729     address: 140.211.15.152
 730     parents: gw-osuosl
 731     hostgroups: computers, wheezy, hassrvfs, porterbox
 732   rietz:
 733     address: 140.211.166.43
 734     parents: gw-osuosl
 735     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
 736     #, bosserver
 737   rietz2:
 738     address: 140.211.166.44
 739     parents: rietz
 740     hostgroups: secondary-IPs
 741   # zee TODO
 742   # }}}
 743   # {{{ gs-rapidswitch
 744   caballero:
 745     address: 193.201.200.200
 746     parents: gw-rapidswitch
 747     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
 748   # }}}
 749   # {{{ gw-sanger
 750   sibelius:
 751     address: 193.62.202.28
 752     parents: gw-sanger
 753     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts, hasvarlogfs
 754     contacts: tjrc1, dave
 755   smetana:
 756     address: 193.62.202.29
 757     parents: gw-sanger
 758     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
 759     contacts: tjrc1, dave
 760   # }}}
 761   # {{{ gw-scanplus
 762   lobos:
 763     address: 212.211.132.250
 764     parents: gw-scanplus-lobos
 765     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 766   villa:
 767     address: 212.211.132.32
 768     parents: gw-scanplus-villa
 769     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 770   # }}}
 771   # {{{ gw-sil
 772   eder:
 773     address: 86.59.118.151
 774     parents: gw-sil
 775     hostgroups: computers, porterbox, wheezy, hassrvfs
 776   eysler:
 777     address: 86.59.118.152
 778     parents: gw-sil
 779     hostgroups: computers, buildd, wheezy
 780   eberlin:
 781     address: 86.59.118.155
 782     parents: gw-sil
 783     hostgroups: computers, buildd, wheezy
 784   # }}}
 785   # {{{ gw-ubcece
 786   sw-ubcece:
 787     hostgroups: layer2-infrastructure
 788     contacts: lfilipoz
 789     pingable: false
 790     check_command: dsa_check_always_ok
 791   sw-ubcece-mcld:
 792     hostgroups: layer2-infrastructure
 793     parents: sw-ubcece
 794     contacts: lfilipoz
 795     pingable: false
 796     check_command: dsa_check_always_ok
 797   sw-ubcece-kais:
 798     hostgroups: layer2-infrastructure
 799     parents: sw-ubcece
 800     contacts: lfilipoz
 801     pingable: false
 802     check_command: dsa_check_always_ok
 803   spontini:
 804     address: 206.12.19.14
 805     parents: sw-ubcece-mcld
 806     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
 807     contacts: lfilipoz
 808   ravel:
 809     address: 206.12.19.5
 810     parents: sw-ubcece-kais
 811     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
 812   dijkstra:
 813     address: 206.12.19.218
 814     parents: sw-ubcece-kais
 815     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 816   pasquini:
 817     address: 206.12.19.217
 818     parents: sw-ubcece-kais
 819     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 820   luchesi:
 821     address: 206.12.19.214
 822     parents: sw-ubcece-kais
 823     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 824   tristano:
 825     address: 206.12.19.213
 826     parents: sw-ubcece-kais
 827     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 828   boito:
 829     address: 206.12.19.216
 830     parents: sw-ubcece-kais
 831     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 832   bertali:
 833     address: 206.12.19.212
 834     parents: sw-ubcece-kais
 835     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
 836   ganeti2:
 837     address: 206.12.19.23
 838     parents: sw-ubcece-kais
 839     hostgroups: notacomputer
 840   tchaikovsky:
 841     address: 206.12.19.118
 842     parents: ganeti2
 843     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
 844   wolkenstein:
 845     address: 206.12.19.116
 846     parents: ganeti2
 847     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
 848   brahms:
 849     address: 206.12.19.115
 850     parents: ganeti2
 851     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
 852   geo2:
 853     address: 206.12.19.113
 854     parents: ganeti2
 855     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
 856   # MSA 2000 (2012i)
 857   giustini:
 858     address: 192.168.2.6
 859     parents: dijkstra
 860     hostgroups: notacomputer
 861     # unless we implement runfrom for host alive checks
 862     pingable: false
 863     check_command: dsa_check_always_ok
 864   fano:
 865     address: 206.12.19.110
 866     parents: ganeti2
 867     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 868     contacts: christoph
 869   finzi:
 870     address: 206.12.19.111
 871     parents: ganeti2
 872     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
 873     contacts: christoph
 874   gabrielli:
 875     address: 206.12.19.17
 876     parents: sw-ubcece-kais
 877     hostgroups: computers, porterbox, wheezy
 878   corelli:
 879     address: 206.12.19.16
 880     parents: sw-ubcece-kais
 881     hostgroups: computers, buildd, wheezy
 882   lucatelli:
 883     address: 206.12.19.15
 884     parents: sw-ubcece-kais
 885     hostgroups: computers, buildd, wheezy
 886   rossini:
 887     address: 206.12.19.19
 888     parents: sw-ubcece-kais
 889     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 890   salieri:
 891     address: 206.12.19.20
 892     parents: sw-ubcece-kais
 893     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 894   traetta:
 895     address: 206.12.19.21
 896     parents: sw-ubcece-kais
 897     hostgroups: computers, dl585, acpid-hosts, service, wheezy
 898 #  locke:
 899 #    address: 206.12.19.120
 900 #    parents: sw-ubcece-kais
 901 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
 902   lotti:
 903     address: 206.12.19.121
 904     parents: sw-ubcece-kais
 905     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
 906   nono:
 907     address: 206.12.19.123
 908     parents: traetta
 909     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
 910   reger:
 911     address: 206.12.19.124
 912     parents: ganeti2
 913     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
 914   danzi:
 915     address: 206.12.19.125
 916     parents: ganeti2
 917     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
 918   glinka:
 919     address: 206.12.19.126
 920     parents: traetta
 921     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
 922   tye:
 923     address: 206.12.19.129
 924     parents: ganeti2
 925     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
 926   elgar:
 927     address: 206.12.19.130
 928     parents: salieri
 929     hostgroups: computers, service, kvmdomains, wheezy
 930   gombert:
 931     address: 206.12.19.132
 932     parents: ganeti2
 933     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
 934   jenkins:
 935     address: 206.12.19.133
 936     parents: salieri
 937     hostgroups: computers, service, kvmdomains, wheezy
 938   blavet:
 939     address: 206.12.19.134
 940     parents: ganeti2
 941     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
 942   diabelli:
 943     address: 206.12.19.136
 944     parents: traetta
 945     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
 946   bizet:
 947     address: 206.12.19.137
 948     parents: ganeti2
 949     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
 950   lilburn:
 951     address: 206.12.19.138
 952     parents: ganeti2
 953     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
 954   popov:
 955     address: 206.12.19.119
 956     parents: ganeti2
 957     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
 958   beach:
 959     address: 206.12.19.140
 960     parents: ganeti2
 961     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
 962   ullmann:
 963     address: 206.12.19.141
 964     parents: ganeti2
 965     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
 966   sonntag:
 967     address: 206.12.19.142
 968     parents: ganeti2
 969     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
 970   menotti:
 971     address: 206.12.19.143
 972     parents: ganeti2
 973     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
 974   muffat:
 975     address: 206.12.19.146
 976     parents: ganeti2
 977     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
 978   # }}}
 979   # {{{ gw-ugent
 980   # }}}
 981   # {{{ gw-umn
 982   saens:
 983     address: 128.101.240.212
 984     parents: gw-umn
 985     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
 986   # }}}
 987   # {{{ gw-unicamp
 988   asgard:
 989     address: 143.106.167.145
 990     parents: gw-unicamp
 991     hostgroups: layer3-infrastructure
 992   powerpc-unicamp-01:
 993     address: 143.106.167.149
 994     parents: asgard
 995     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
 996   # }}}
 997   # {{{ gw-utwente
 998   klecker:
 999     address: 130.89.148.10
1000     parents: gw-utwente
1001     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
1002   klecker-ftp:
1003     address: 130.89.148.12
1004     parents: klecker
1005     hostgroups: secondary-IPs
1006   klecker-archive:
1007     address: 130.89.148.13
1008     parents: klecker
1009     hostgroups: secondary-IPs
1010   klecker-static:
1011     address: 130.89.148.14
1012     parents: klecker
1013     hostgroups: secondary-IPs
1014   # }}}
1015   # {{{ gw-ynic
1016   howells:
1017     address: 144.32.168.75
1018     parents: gw-ynic
1019     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1020   hummel:
1021     address: 144.32.168.76
1022     parents: gw-ynic
1023     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1024   porpora:
1025     address: 144.32.168.78
1026     parents: gw-ynic
1027     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1028   poulenc:
1029     address: 144.32.168.77
1030     parents: gw-ynic
1031     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1032   # }}}
1033   # {{{ gw-zivit
1034   zandonai:
1035     address: 80.245.147.46
1036     parents: gw-zivit
1037     hostgroups: computers, buildd, hassrvfs, wheezy
1038   zelenka:
1039     address: 80.245.147.40
1040     parents: gw-zivit
1041     hostgroups: computers, porterbox, hassrvfs, wheezy
1042   # }}}
1043   # }}}
1044
1045 # {{{ ############################# host groups #############################
1046 hostgroups:
1047   computers:
1048     alias: computers
1049     private: 1
1050   layer2-infrastructure:
1051     alias: Layer 2 Devices
1052     extinfo-icon_image: base/switch40.png
1053     extinfo-icon_image_alt: switch
1054   layer3-infrastructure:
1055     alias: Layer 3 Devices
1056     extinfo-icon_image: base/switch40.png
1057     extinfo-icon_image_alt: router
1058   notacomputer:
1059     alias: Systems that are not really systems.  Yeah :)
1060     private: 1
1061   freebsd:
1062     alias: freebsd
1063     private: 1
1064   armhf:
1065     alias: armhf
1066     private: 1
1067   sparc:
1068     alias: sparc
1069     private: 1
1070
1071   porterbox:
1072     alias: developer accessible porter machines
1073     extinfo-icon_image: base/debian.png
1074     extinfo-icon_image_alt: Debian GNU/Linux
1075     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1076   service:
1077     alias: machines running services
1078     extinfo-icon_image: base/debian.png
1079     extinfo-icon_image_alt: Debian GNU/Linux
1080     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1081   buildd:
1082     alias: buildd systems
1083     extinfo-icon_image: base/debian.png
1084     extinfo-icon_image_alt: Debian GNU/Linux
1085     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1086   general:
1087     alias: general purpose developer accessible machines
1088     extinfo-icon_image: base/debian.png
1089     extinfo-icon_image_alt: Debian GNU/Linux
1090     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1091
1092   dl380:
1093     alias: HP DL380 hosts
1094     private: 1
1095   dl385:
1096     alias: HP DL385 hosts
1097     private: 1
1098   dl360:
1099     alias: HP DL360 hosts
1100     private: 1
1101   bl460:
1102     alias: HP BL460 blades
1103     private: 1
1104   bm-bl:
1105     alias: HP blades at bytemark
1106     private: 1
1107   dl585:
1108     alias: HP DL385 hosts
1109     private: 1
1110   dl180:
1111     alias: HP DL180
1112     private: 1
1113   dl120:
1114     alias: HP DL120
1115     private: 1
1116   sw-raid:
1117     alias: Hosts with Linux software raid
1118     private: 1
1119   aacraid:
1120     alias: Hosts with Adaptec AACraid
1121     private: 1
1122   megaraid:
1123     alias: Hosts with LSI Logic MegaRAID
1124     private: 1
1125
1126   squeeze:
1127     alias: Hosts running squeeze
1128   wheezy:
1129     alias: Hosts running wheezy
1130
1131   kvmdomains:
1132     alias: Hosts that are KVM domains
1133     private: 1
1134
1135   drbd-hosts:
1136     alias: hosts running drbd
1137   postfix-hosts:
1138     alias: hosts running postfix instead of exim
1139     private: 1
1140   heavy-exim:
1141     alias: "hosts running the full mail stuff, including clamav and postgrey"
1142     private: 1
1143   mail-relay:
1144     alias: "relays usually are hosts with more exim processes"
1145     private: 1
1146   spamd:
1147     alias: "hosts running spamassassin as daemon"
1148     private: 1
1149   heavy-postfix:
1150     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1151     private: 1
1152   apache2-hosts:
1153     alias: hosts running apache2
1154     private: 1
1155   jetty-hosts:
1156     alias: hosts running jetty
1157     private: 1
1158   bind9-hosts:
1159     alias: hosts running bind9
1160     private: 1
1161   # once every host runs unbound, do away with this group and check "computers" instead
1162   amavis-hosts:
1163     alias: hosts running amavis
1164     private: 1
1165   rsyncd-hosts:
1166     alias: hosts providing rsync services via xinetd
1167     private: 1
1168   xinetd-hosts:
1169     alias: hosts providing services via xinetd
1170     private: 1
1171   postgres91-hosts:
1172     alias: hosts running postgres91
1173     private: 1
1174   no-ulogd:
1175     alias: hosts not running ulogd
1176     private: 1
1177   acpid-hosts:
1178     alias: hosts running acpid
1179     private: 1
1180   uploadqueue:
1181     alias: hosts that are an anonymous ftp uploadqueue
1182     private: 1
1183   bosserver:
1184     alias: hosts running bosserver
1185     private: 1
1186   apache-https:
1187     alias: hosts with https services
1188     private: 1
1189   broken_https_default_vhost:
1190     alias: https default vhost does not say 200 OK
1191     private: 1
1192
1193   no-bacula:
1194     alias: hosts which are not being backed up with bacula
1195     private: 1
1196
1197   nfs-client:
1198     alias: hosts mounting filesystems using NFS
1199     private: 1
1200   nfs-server:
1201     alias: hosts serving filesystems using NFS
1202     private: 1
1203   autofs:
1204     alias: hosts running the automounter
1205     private: 1
1206
1207   highload:
1208     alias: "hosts on which high load is normal"
1209     private: 1
1210
1211   secondary-IPs:
1212     alias: secondary IP addresses
1213     private: 1
1214
1215   hasbootfs:
1216     alias: hosts with a /boot filesystem
1217     private: 1
1218   hassrvfs:
1219     alias: hosts with a /srv filesystem
1220     private: 1
1221   hasorgfs:
1222     alias: hosts with a /org filesystem
1223     private: 1
1224   hasvarfs:
1225     alias: hosts with a /var filesystem
1226     private: 1
1227   hasvarlogfs:
1228     alias: hosts with a /var/log filesystem
1229     private: 1
1230   hasusrfs:
1231     alias: hosts with a /usr filesystem
1232     private: 1
1233
1234   incomingmailrelayed:
1235     alias: incoming mail needs to go through a mail relay
1236     # i.e. no port 25
1237     private: 1
1238   incomingmailrelayed2025:
1239     alias: incoming mail needs to go through a mail relay
1240     # i.e. no port 25
1241     private: 1
1242
1243   brokensamhain:
1244     alias: machines that can not run samhain
1245     private: 1
1246   high-RTT:
1247     alias: machines with high round trip times
1248     private: 1
1249   ping-suckers:
1250     alias: machines that just suck at icmp
1251     private: 1
1252   alioth:
1253     alias: machines that just are just awkward
1254     private: 1
1255   openstack-compute:
1256     alias: nodes that run OpenStack compute
1257     private: 1
1258   openstack-controller:
1259     alias: nodes that run OpenStack controller
1260     private: 1
1261
1262   security_mirror:
1263     alias: hosts that are security mirrors
1264     private: 1
1265
1266   broken_mq:
1267     alias: hosts whose MQ is broken
1268     private: 1
1269 # }}}
1270 # {{{ ############################# servicegroups #############################
1271 servicegroups:
1272   diskspace:
1273     alias: diskusage checks
1274   buildd:
1275     alias: buildd checks
1276   raid:
1277     alias: raid checks
1278   backup:
1279     alias: backup checks
1280   kernel:
1281     alias: kernel checks
1282   apt:
1283     alias: apt upgrade status
1284   samhain:
1285     alias: samhain integrity status
1286   time:
1287     alias: time stuff
1288   security:
1289     alias: security
1290     servicegroup_members: apt, kernel, samhain
1291   MQ:
1292     alias: rabbitMQ stuff
1293 # }}}
1294 # {{{ ############################# services #############################
1295 services:
1296   # {{{ ### basic networking
1297   -
1298     name: PING
1299     check: "check_ping!350.0,20%!600.0,40%"
1300     hostgroups: pingable
1301     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1302     normal_check_interval: 5
1303     max_check_attempts: 4
1304     retry_check_interval: 1
1305   -
1306     name: PING
1307     check: "check_ping!600.0,20%!900.0,40%"
1308     hostgroups: high-RTT
1309     normal_check_interval: 5
1310     max_check_attempts: 4
1311     retry_check_interval: 1
1312   -
1313     name: PING
1314     check: "check_ping!600.0,90%!900.0,95%"
1315     hostgroups: ping-suckers
1316     normal_check_interval: 5
1317     max_check_attempts: 4
1318     retry_check_interval: 1
1319   -
1320     name: PING
1321     check: "check_ping!2000.0,60%!3000.0,80%"
1322     hostgroups: layer3-infrastructure
1323     normal_check_interval: 5
1324     max_check_attempts: 4
1325     retry_check_interval: 1
1326   # }}}
1327   # {{{ ### disk usage
1328   -
1329     name: disk usage - all
1330     servicegroups: diskspace
1331     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1332     hostgroups: computers
1333     excludehosts: sibelius
1334   -
1335     name: disk usage - all
1336     servicegroups: diskspace
1337     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98"
1338     hosts: sibelius
1339
1340   -
1341     name: disk usage on /
1342     servicegroups: diskspace
1343     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1344     hostgroups: computers
1345   -
1346     name: disk usage on /boot
1347     servicegroups: diskspace
1348     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1349     hostgroups: hasbootfs
1350   -
1351     name: disk usage on /var
1352     servicegroups: diskspace
1353     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1354     hostgroups: hasvarfs
1355   -
1356     name: disk usage on /org
1357     servicegroups: diskspace
1358     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1359     hostgroups: hasorgfs
1360   -
1361     name: disk usage on /srv
1362     servicegroups: diskspace
1363     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1364     hostgroups: hassrvfs
1365   -
1366     name: disk usage on /tmp
1367     servicegroups: diskspace
1368     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1369     hosts: saens
1370   -
1371     name: disk usage on /usr
1372     servicegroups: diskspace
1373     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1374     hostgroups: hasusrfs
1375   -
1376     name: disk usage on /var/lib/postgresql
1377     servicegroups: diskspace
1378     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1379     hosts: sibelius, busoni, buxtehude, lw07
1380   -
1381     name: disk usage on /var/log
1382     servicegroups: diskspace
1383     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1384     hostgroups: hasvarlogfs
1385   -
1386     name: disk usage on /var/spool/postfix
1387     servicegroups: diskspace
1388     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1389     hosts: bendel
1390   -
1391     name: disk usage on /srv/mirrors
1392     servicegroups: diskspace
1393     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1394     hosts: sibelius
1395   -
1396     name: disk usage on /srv/snapshot.debian.org
1397     servicegroups: diskspace
1398     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1399     hosts: sibelius
1400   -
1401     name: disk usage on /srv/farm-snapshot/farm-misc
1402     servicegroups: diskspace
1403     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-misc"
1404     hosts: sibelius
1405   -
1406     name: disk usage on /var/lib/postgresql/9.1
1407     servicegroups: diskspace
1408     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1409     hosts: franck
1410   -
1411     name: disk usage on /srv/ftp-master.debian.org
1412     servicegroups: diskspace
1413     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1414     hosts: franck
1415   -
1416     name: disk usage on /storage/snapshot-farm-1
1417     servicegroups: diskspace
1418     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1419     hosts: lw01
1420   -
1421     name: disk usage on /storage/snapshot-farm-2
1422     servicegroups: diskspace
1423     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1424     hosts: lw02
1425   -
1426     name: disk usage on /storage/snapshot-farm-3
1427     servicegroups: diskspace
1428     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1429     hosts: lw03
1430   -
1431     name: disk usage on /storage/snapshot-farm-4
1432     servicegroups: diskspace
1433     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1434     hosts: lw04
1435   -
1436     name: disk usage on /srv/morgue.debian.org/
1437     servicegroups: diskspace
1438     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1439     hosts: lw03
1440   # }}}
1441   # {{{ ### system
1442   # {{{ setup
1443   -
1444     name: setup - dsa config
1445     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1446     hostgroups: computers
1447     normal_check_interval: 60
1448     excludehostgroups: alioth
1449   -
1450     name: setup - local hostname etc-hosts
1451     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1452     hostgroups: computers
1453     normal_check_interval: 60
1454   # }}}
1455   # {{{ os health
1456   ####
1457   -
1458     name: users
1459     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1460     hostgroups: computers
1461   -
1462     name: load
1463     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1464     hostgroups: computers
1465     excludehostgroups: highload
1466   -
1467     name: load
1468     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1469     hostgroups: highload
1470   -
1471     name: uptime check
1472     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1473     hostgroups: computers
1474   -
1475     name: processes - total
1476     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1477     hostgroups: computers
1478   -
1479     name: swap usage - percent
1480     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1481     hostgroups: computers
1482   -
1483     name: swap usage - mb
1484     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1485     hostgroups: computers
1486   -
1487     name: process - getty
1488     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1489     hostgroups: computers
1490     excludehosts: zelenka, zandonai
1491   -
1492     name: processes - zombies
1493     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1494     hostgroups: computers
1495   -
1496     name: system - available entropy
1497     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1498     event_handler: dsa_event_handler_restart_ekey
1499     hostgroups: computers
1500     excludehostgroups: freebsd
1501   -
1502     name: system - filesystem check
1503     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1504     normal_check_interval:  60
1505     retry_check_interval: 15
1506     hostgroups: computers
1507   # }}}
1508   # {{{ backup
1509   -
1510     name: backup
1511     servicegroups: backup
1512     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1513     hostgroups: computers
1514     excludehosts: backuphost
1515     normal_check_interval: 60
1516     max_check_attempts: 2
1517     retry_check_interval: 5
1518   -
1519     name: backup server config
1520     servicegroups: backup
1521     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1522     hosts: backuphost
1523     normal_check_interval: 60
1524     max_check_attempts: 2
1525     retry_check_interval: 5
1526   -
1527     name: backup - bacula - last backup
1528     servicegroups: backup
1529     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1530     runfrom: dinis
1531     hostgroups: computers
1532     excludehostgroups: buildd, porterbox, no-bacula
1533     normal_check_interval:  60
1534     retry_check_interval: 15
1535   -
1536     name: backup - bacula - last full backup
1537     servicegroups: backup
1538     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1539     runfrom: dinis
1540     hostgroups: computers
1541     excludehostgroups: buildd, porterbox, no-bacula
1542     normal_check_interval:  60
1543     retry_check_interval: 15
1544   -
1545     name: process - bacula-fd
1546     servicegroups: backup
1547     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1548     hostgroups: computers
1549     excludehostgroups: freebsd, alioth
1550   -
1551     name: process - bacula-fd
1552     servicegroups: backup
1553     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1554     hostgroups: freebsd
1555
1556   ####
1557   -
1558     name: process - acc.umu.se backup
1559     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1560     hosts: sibelius
1561   # }}}
1562   # {{{ security
1563   -
1564     name: running kernel
1565     servicegroups: kernel
1566     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1567     hostgroups: computers
1568     normal_check_interval: 60
1569     retry_check_interval: 5
1570   -
1571     name: apt - security updates
1572     servicegroups: apt
1573     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1574     hostgroups: computers
1575     normal_check_interval:  60
1576     retry_check_interval: 15
1577   -
1578     name: installed firewall
1579     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1580     hostgroups: computers
1581     excludehostgroups: freebsd
1582   -
1583     name: puppetized firewall
1584     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1585     hostgroups: computers
1586     excludehostgroups: freebsd
1587   -
1588     name: process - ulogd
1589     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1590     hostgroups: computers
1591     excludehostgroups: freebsd, sparc
1592   -
1593     name: unexpected process - ulogd
1594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1595     hostgroups: freebsd, sparc
1596   ####
1597   -
1598     name: process - samhain
1599     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1600     hostgroups: computers
1601     excludehostgroups: brokensamhain
1602   -
1603     name: samhain
1604     servicegroups: samhain
1605     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1606     hostgroups: computers
1607     depends: process - samhain
1608     normal_check_interval: 60
1609     retry_check_interval: 5
1610     excludehostgroups: brokensamhain
1611   -
1612     name: processes - samhain zombies
1613     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1614     event_handler: dsa_event_handler_restart_samhain
1615     hostgroups: computers
1616     excludehostgroups: brokensamhain
1617   # }}}
1618   # {{{ logging
1619   -
1620     name: process - syslog-ng
1621     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1622     hostgroups: computers
1623     excludehostgroups: freebsd
1624
1625   -
1626     name: process - syslog-ng
1627     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1628     hostgroups: freebsd
1629
1630   -
1631     name: remote logging on lotti
1632     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1633     runfrom: lotti
1634     hostgroups: computers
1635     excludehostgroups: alioth
1636   -
1637     name: remote logging on lully
1638     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1639     runfrom: lully
1640     hostgroups: computers
1641     excludehostgroups: alioth
1642   -
1643     name: remote logging on loghost-grnet-01
1644     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1645     runfrom: loghost-grnet-01
1646     hostgroups: computers
1647     excludehostgroups: alioth
1648   # }}}
1649   # {{{ base service
1650   -
1651     name: process - sshd
1652     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1653     hostgroups: computers
1654   -
1655     name: "network service - sshd"
1656     check: dsa_check_ssh
1657     hostgroups: computers
1658     depends: process - sshd
1659     normal_check_interval:  60
1660     notification_interval: 1440
1661   ####
1662   -
1663     name: network service - nrpe
1664     check: check_tcp!5666
1665     hostgroups: computers
1666     max_check_attempts: -2
1667     notification_interval: 1440
1668   -
1669     name: process - nrpe
1670     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1671     hostgroups: computers
1672     max_check_attempts: -1
1673     depends: network service - nrpe
1674   ###
1675   -
1676     name: process - munin-node
1677     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1678     hostgroups: computers
1679     excludehostgroups: freebsd, armhf
1680   -
1681     name: process - munin-node
1682     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1683     hostgroups: freebsd
1684   -
1685     name: process - munin-node
1686     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1687     hostgroups: wheezy
1688     excludehostgroups: freebsd
1689   -
1690     name: network service - munin-node
1691     check: check_tcp!4949
1692     hostgroups: computers
1693     depends: process - munin-node
1694   ###
1695   -
1696     name: process - ntpd
1697     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1698     hostgroups: computers
1699     servicegroups: time
1700   -
1701     name: network service - ntp
1702     check: dsa_check_ntp
1703     hostgroups: computers
1704     depends: process - ntpd
1705     servicegroups: time
1706   ###
1707   -
1708     name: process - atd
1709     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1710     hostgroups: computers
1711   ###
1712   -
1713     name: process - cron
1714     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1715     hostgroups: computers
1716   ###
1717   -
1718     name: process - ud-replicated
1719     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1720     hostgroups: computers
1721     excludehostgroups: squeeze, freebsd, alioth
1722   -
1723     name: process - ud-replicated
1724     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1725     hostgroups: freebsd
1726   ###
1727   -
1728     name: process - monit
1729     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1730     hostgroups: squeeze
1731   -
1732     name: process - monit
1733     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1734     hostgroups: computers
1735     excludehostgroups: squeeze, alioth
1736   ###
1737   -
1738     name: MQ connection on rainier
1739     servicegroups: MQ
1740     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1741     runfrom: rainier
1742     hostgroups: computers
1743     normal_check_interval:  60
1744     retry_check_interval: 15
1745     excludehostgroups: alioth, broken_mq
1746   -
1747     name: MQ connection on rapoport
1748     servicegroups: MQ
1749     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1750     runfrom: rapoport
1751     hostgroups: computers
1752     normal_check_interval:  60
1753     retry_check_interval: 15
1754     excludehostgroups: alioth, broken_mq
1755   ###
1756   -
1757     name: local resolver
1758     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1759     hostgroups: computers
1760     normal_check_interval: 60
1761   -
1762     name: process - unbound
1763     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1764     hostgroups: computers
1765     excludehostgroups: alioth
1766   ###
1767   -
1768     name: process - uptimed
1769     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1770     hostgroups: computers
1771   ###
1772   -
1773     name: process - udevd
1774     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1775     hostgroups: computers
1776     excludehostgroups: freebsd
1777   -
1778     name: unexpected process - udev
1779     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1780     hostgroups: freebsd
1781   ###
1782   -
1783     name: process - acpid
1784     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1785     hostgroups: acpid-hosts
1786   -
1787     name: unexpected process - acpid
1788     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1789     hostgroups: computers
1790     excludehostgroups: acpid-hosts, kvmdomains
1791   ###
1792   -
1793     name: process - xinetd
1794     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1795     hostgroups: xinetd-hosts
1796   -
1797     name: unwanted process - xinetd
1798     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1799     hostgroups: computers
1800     excludehostgroups: xinetd-hosts
1801   ###
1802   -
1803     name: process - stunnel4 - puppet-ekeyd
1804     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1805     hostgroups: squeeze, wheezy
1806     excludehostgroups: freebsd, alioth
1807   # }}}
1808   # {{{ anti-services
1809   -
1810     name: ganeti - job watcher paused
1811     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1812     hostgroups: computers
1813   -
1814     name: unwanted process - irqbalance
1815     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1816     hostgroups: computers
1817   -
1818     name: unwanted process - openvpn
1819     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1820     hostgroups: computers
1821     normal_check_interval: 120
1822   -
1823     name: unwanted process - gkrellmd
1824     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1825     hostgroups: computers
1826   -
1827     name: unwanted process - rpc.statd
1828     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1829     hostgroups: computers
1830     excludehostgroups: nfs-client, nfs-server
1831   -
1832     name: unwanted process - inetd
1833     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1834     hostgroups: computers
1835     excludehosts: abel
1836   -
1837     name: unwanted process - snmpd
1838     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1839     hostgroups: computers
1840   # }}}
1841   # {{{ ssl certs
1842   -
1843     name: "host SSL cert"
1844     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1845     hostgroups: computers
1846   # }}}
1847   # {{{ HW health/raid
1848   -
1849     name: process - mdadm monitor
1850     servicegroups: raid
1851     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
1852     hostgroups: sw-raid
1853     excludehostgroups: wheezy
1854   -
1855     # wheezy:
1856     name: process - mdadm monitor
1857     servicegroups: raid
1858     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1859     hostgroups: sw-raid
1860     excludehostgroups: squeeze
1861   -
1862     name: RAID - sw raid
1863     servicegroups: raid
1864     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1865     hostgroups: sw-raid
1866   ###
1867   -
1868     name: HW - hpacucli status
1869     servicegroups: raid
1870     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1871     normal_check_interval: 120
1872     hostgroups: dl385, dl380, dl360, bl460, dl180
1873     excludehosts: schein, rietz
1874   -
1875     name: HW - hpacucli status
1876     servicegroups: raid
1877     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1878     normal_check_interval: 120
1879     hostgroups: bm-bl
1880   -
1881     name: HW - hpacucli status
1882     servicegroups: raid
1883     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1884     normal_check_interval: 120
1885     hosts: schein, rietz
1886   -
1887     name: HW - hpacucli enclosure status
1888     servicegroups: raid
1889     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1890     normal_check_interval: 120
1891     hosts: franck
1892   -
1893     name: HW - hpacucli status
1894     servicegroups: raid
1895     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1896     normal_check_interval: 120
1897     hostgroups: dl585
1898   ###
1899 #  -
1900 #    name: HW - edac status
1901 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1902 #    normal_check_interval: 120
1903     #hostgroups: computers
1904     #excludehosts: villa, lobos, senfl, schein
1905   -
1906     name: HW - hpasmcli status
1907     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1908     normal_check_interval: 120
1909     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1910     excludehosts: villa, lobos, senfl, schein, storace
1911   -
1912     name: HW - hpasmcli status
1913     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1914     normal_check_interval: 120
1915     hosts: villa
1916   -
1917     name: HW - hpasmcli status
1918     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1919     normal_check_interval: 120
1920     hosts: lobos
1921   -
1922     name: HW - hpasmcli status
1923     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1924     normal_check_interval: 120
1925     hosts: senfl, schein
1926   -
1927     name: HW - hpasmcli status
1928     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1929     normal_check_interval: 120
1930     hosts: storace
1931   ###
1932   -
1933     name: RAID - 3ware
1934     servicegroups: raid
1935     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1936     hosts: powell
1937   ###
1938   -
1939     name: RAID - aacraid
1940     servicegroups: raid
1941     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1942     hostgroups: aacraid
1943   ###
1944   -
1945     name: RAID - megaraid
1946     servicegroups: raid
1947     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1948     hostgroups: megaraid
1949   ###
1950   -
1951     name: RAID - DRBD
1952     servicegroups: raid
1953     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1954     hostgroups: drbd-hosts
1955   # }}}
1956   # }}}
1957   # {{{ ### mail stuff
1958   # {{{ exim processes and mailq
1959   -
1960     name: process - exim
1961     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1962     hostgroups: computers
1963     excludehostgroups: postfix-hosts, mail-relay
1964     excludehosts: master, busoni, quantz, buxtehude
1965   -
1966     name: process - exim
1967     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1968     hostgroups: mail-relay
1969   -
1970     name: process - exim - total
1971     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
1972     hostgroups: computers
1973     excludehostgroups: postfix-hosts
1974     excludehosts: master, busoni, quantz, buxtehude
1975   -
1976     name: process - exim
1977     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
1978     hosts: master, busoni, quantz, buxtehude
1979   -
1980     name: mail queue
1981     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
1982     hostgroups: heavy-exim
1983   # }}}
1984   # {{{ clamav
1985   -
1986     name: process - clamav - clamd
1987     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
1988     hostgroups: heavy-exim, heavy-postfix
1989   -
1990     name: service - clamav
1991     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
1992     hostgroups: heavy-exim, heavy-postfix
1993     depends: process - clamav - clamd
1994   -
1995     name: process - clamav - freshclam
1996     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
1997     hostgroups: heavy-exim, heavy-postfix
1998   -
1999     name: unwanted process - clamav
2000     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2001     hostgroups: computers
2002     excludehostgroups: heavy-exim, heavy-postfix
2003   -
2004     name: unwanted process - freshclam
2005     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2006     hostgroups: computers
2007     excludehostgroups: heavy-exim, heavy-postfix
2008   # }}}
2009   # {{{ anti-spam
2010   -
2011     name: process - spamd - master
2012     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2013     hostgroups: spamd
2014     excludehosts: picconi
2015   -
2016     name: process - spamd - master
2017     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2018     hosts: picconi
2019   -
2020     name: process - spamd - master
2021     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2022     hosts: bendel
2023   -
2024     name: process - spamd - child
2025     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2026     hosts: bendel
2027     hostgroups: spamd
2028     depends: process - spamd - master
2029   #
2030   -
2031     name: process - spamd - master
2032     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2033     hosts: buxtehude
2034   -
2035     name: process - spamd - child
2036     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2037     hosts: buxtehude
2038   #
2039   -
2040     name: unwanted process - spamd
2041     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2042     hostgroups: computers
2043     excludehostgroups: spamd
2044     excludehosts: bendel, busoni, buxtehude
2045
2046   -
2047     name: unwanted process - greylistd
2048     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2049     hostgroups: computers
2050
2051   ###
2052   -
2053     name: process - postgrey
2054     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2055     hostgroups: heavy-exim
2056   -
2057     name: process - postgrey
2058     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2059     hostgroups: heavy-postfix
2060   #
2061   -
2062     name: unwanted process - postgrey
2063     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2064     hostgroups: computers
2065     excludehostgroups: heavy-postfix, heavy-exim
2066   ###
2067   -
2068     name: process - amavis - master
2069     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2070     hostgroups: amavis-hosts
2071   -
2072     name: process - amavis - all
2073     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2074     hostgroups: amavis-hosts
2075     depends: process - amavis - master
2076   #
2077   -
2078     name: unwanted process - amavis
2079     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2080     hostgroups: computers
2081     excludehostgroups: amavis-hosts
2082   ###
2083   -
2084     name: process - weightd - master
2085     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2086     hostgroups: heavy-postfix, alioth
2087   -
2088     name: process - weightd - cache
2089     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2090     hostgroups: heavy-postfix, alioth
2091     depends: process - weightd - master
2092   -
2093     name: process - weightd - child
2094     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2095     hostgroups: heavy-postfix, alioth
2096     depends: process - weightd - master
2097   ###
2098   -
2099     name: unwanted process - policyd-weight
2100     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2101     hostgroups: computers
2102     excludehostgroups: heavy-postfix, alioth
2103   # }}}
2104   # {{{ postfix
2105   ###
2106   -
2107     name: process - postfix - master
2108     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2109     hostgroups: postfix-hosts
2110   -
2111     name: process - postfix - qmgr
2112     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2113     hostgroups: postfix-hosts
2114     depends: process - postfix - master
2115   -
2116     name: process - postfix - pickup
2117     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2118     hostgroups: postfix-hosts
2119     depends: process - postfix - master
2120   -
2121     name: process - postfix - anvil
2122     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2123     hostgroups: postfix-hosts
2124     depends: process - postfix - master
2125
2126   -
2127     name: process - postfix - trivial-rewrite
2128     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2129     hostgroups: postfix-hosts
2130     depends: process - postfix - master
2131   -
2132     name: process - postfix - proxymap
2133     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2134     hostgroups: postfix-hosts
2135     depends: process - postfix - master
2136   -
2137     name: process - postfix - cleanup
2138     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2139     hostgroups: postfix-hosts
2140     depends: process - postfix - master
2141   -
2142     name: process - postfix - local
2143     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2144     hostgroups: postfix-hosts
2145     depends: process - postfix - master
2146
2147   -
2148     name: network service local - smtps cert
2149     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2150     hostgroups: postfix-hosts
2151     depends: process - postfix - master
2152     normal_check_interval: 120
2153   # }}}
2154   # {{{ mail - network service
2155   -
2156     name: network service - smtp
2157     check: dsa_check_smtp
2158     hostgroups: computers
2159     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2160     depends: process - exim
2161
2162   -
2163     name: network service - smtp
2164     check: dsa_check_smtp
2165     hostgroups: postfix-hosts
2166     depends: process - postfix - master
2167   -
2168     name: network service - submission
2169     check: dsa_check_smtp_port!587
2170     hostgroups: incomingmailrelayed
2171     depends: process - exim
2172   -
2173     name: network service - smtp 2025
2174     check: dsa_check_smtp_port!2025
2175     hostgroups: incomingmailrelayed2025
2176     depends: process - exim
2177   # }}}
2178   # }}}
2179   # {{{ ### host specific services
2180   # {{{ HTTP
2181   -
2182     name: process - apache2 - master
2183     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2184     hostgroups: apache2-hosts
2185   -
2186     name: process - apache2 - worker
2187     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2188     hostgroups: apache2-hosts
2189     depends: process - apache2 - master
2190   -
2191     name: unwanted process - apache2
2192     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2193     hostgroups: computers
2194     excludehostgroups: apache2-hosts
2195
2196   -
2197     name: network service - http
2198     check: check_http
2199     hostgroups: apache2-hosts
2200     excludehosts: klecker
2201     depends: process - apache2 - master
2202   -
2203     name: network service - http
2204     check: check_http
2205     depends: klecker:process - apache2 - master
2206     hosts: klecker-ftp
2207
2208   # keyserver on kaufmann
2209   -
2210     name: network service - http keyserver
2211     check: dsa_check_http_port!11371
2212     hosts: kaufmann
2213     depends: process - apache2 - master
2214
2215   # https on various hosts
2216   -
2217     name: network service - https
2218     check: check_https
2219     hostgroups: apache-https
2220     excludehosts: handel,menotti
2221     excludehostgroups: broken_https_default_vhost
2222     depends: "process - apache2 - master"
2223     normal_check_interval: 120
2224   -
2225     name: network service - https
2226     check: dsa_check_https_want_auth
2227     hosts: handel,menotti
2228     depends: "process - apache2 - master"
2229     normal_check_interval: 120
2230   -
2231     name: network service - https
2232     check: dsa_check_https_any_status
2233     hostgroups: broken_https_default_vhost
2234     depends: "process - apache2 - master"
2235     normal_check_interval: 120
2236   -
2237     name: network service - https cert
2238     check: dsa_check_cert!443
2239     hostgroups: apache-https
2240     depends: network service - https
2241     normal_check_interval: 60
2242   -
2243     name: unwanted network service - https
2244     check: dsa_check_port_closed!443
2245     hostgroups: apache2-hosts
2246     excludehostgroups: apache-https
2247     # ravel does ssh on port 443
2248     excludehosts: ravel
2249     normal_check_interval: 60
2250   # }}}
2251   # {{{ FTP
2252   -
2253     name: network service - ftp
2254     check: check_ftp
2255     hostgroups: uploadqueue, security_mirror
2256     excludehosts: klecker
2257   -
2258     name: network service - ftp
2259     check: check_ftp
2260     hosts: klecker-ftp
2261     depends: klecker:process - xinetd
2262   # }}}
2263   # {{{ postgres
2264   -
2265     name: unwanted process - postgresql
2266     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2267     hostgroups: computers
2268     excludehostgroups: postgres91-hosts
2269   -
2270     name: unwanted process - postgresql 9.0
2271     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2272     hostgroups: computers
2273   -
2274     name: process - postgresql91 - master
2275     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2276     hostgroups: postgres91-hosts
2277   -
2278     name: postgresql backups
2279     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2280     hosts: backuphost
2281   # }}}
2282   # {{{ power
2283 #  -
2284 #    name: process - UPS - nut usbhid-ups - ups1
2285 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2286 #    hosts: franck
2287 #  -
2288 #    name: process - UPS - nut upsd
2289 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2290 #    hosts: franck
2291 #  -
2292 #    name: process - UPS - nut upsmon master
2293 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2294 #    hosts: franck
2295 #  -
2296 #    name: process - UPS - nut upsmon worker
2297 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2298 #    hosts: franck
2299 #    depends: process - UPS - nut upsmon master
2300 #  -
2301 #    name: UPS - on line power
2302 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2303 #    hosts: franck
2304 #    depends: process - UPS - nut upsd
2305   # }}}
2306   # {{{ buildd
2307   -
2308     name: process - buildd
2309     servicegroups: buildd
2310     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2311     hosts: fano, finzi, fils, fayrfax
2312     contact_groups: buildd
2313   -
2314     name: process - buildd
2315     servicegroups: buildd
2316     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2317     hostgroups: buildd
2318     excludehosts: fano, finzi, fils, fayrfax
2319     contact_groups: buildd
2320   -
2321     name: processes - zombie schroot
2322     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2323     hostgroups: buildd
2324     contact_groups: +buildd
2325     normal_check_interval: 5
2326     max_check_attempts: 24
2327     retry_check_interval: 5
2328   -
2329     name: processes - lvcreate
2330     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2331     hostgroups: buildd
2332     contact_groups: +buildd
2333   # }}}
2334   # {{{ NFS Stuff
2335   -
2336     name: process - statd
2337     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2338     hostgroups: nfs-client, nfs-server
2339   -
2340     name: process - nfsd
2341     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2342     hostgroups: nfs-server
2343   -
2344     name: process - lockd
2345     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2346     hostgroups: nfs-server
2347   -
2348     name: process - mountd
2349     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2350     hostgroups: nfs-server
2351   #
2352   -
2353     name: process - automount
2354     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2355     hostgroups: autofs
2356   -
2357     name: unwanted process - automount
2358     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2359     hostgroups: computers
2360     excludehostgroups: autofs
2361   # }}}
2362   # {{{ mirroring
2363   -
2364     name: mirror sync - bugs
2365     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2366     hosts: global
2367   -
2368     name: mirror sync - security
2369     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2370     hosts: global
2371   -
2372     name: mirror sync - packages
2373     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2374     hosts: global
2375     normal_check_interval: 15
2376     max_check_attempts: 5
2377     retry_check_interval: 5
2378   -
2379     name: mirror sync - snapshot
2380     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2381     hosts: global
2382     normal_check_interval: 15
2383     max_check_attempts: 5
2384     retry_check_interval: 5
2385   # }}}
2386   # {{{ DNS
2387   -
2388     name: process - named
2389     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2390     hostgroups: bind9-hosts
2391   -
2392     name: network service - dns
2393     check: check_dns
2394     hostgroups: bind9-hosts
2395     depends: process - named
2396   -
2397     name: unwanted process - named
2398     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2399     hostgroups: computers
2400     excludehostgroups: bind9-hosts
2401   ###
2402   -
2403     name: DNS SOA sync - debian.org
2404     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2405     hosts: global
2406   -
2407     name: DNS SOA sync - debian.net
2408     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2409     hosts: global
2410   -
2411     name: DNS SOA sync - debian.com
2412     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2413     hosts: global
2414   -
2415     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2416     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2417     hosts: global
2418   -
2419     name: DNS SOA sync - alioth.debian.org
2420     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2421     hosts: global
2422   -
2423     name: DNS - delegation and signature expiry
2424     hosts: global
2425     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2426     runfrom: denis
2427   -
2428     name: DNS - security delegations
2429     hosts: global
2430     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2431     runfrom: denis
2432   -
2433     name: DNS - key coverage
2434     hosts: global
2435     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2436     runfrom: denis
2437   -
2438     name: DNS - DS expiry
2439     hosts: global
2440     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2441     runfrom: denis
2442   # }}}
2443   # {{{ storage
2444   -
2445     name: ping alive check
2446     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2447     runfrom: dijkstra
2448     hosts: giustini
2449     normal_check_interval: 5
2450     max_check_attempts: 4
2451     retry_check_interval: 1
2452   -
2453     name: Overall Unit Status
2454     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2455     runfrom: dijkstra
2456     hosts: giustini
2457   -
2458     name: event log
2459     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2460     runfrom: dijkstra
2461     hosts: giustini
2462   # }}}
2463   # {{{ porterbox
2464   -
2465     name: current chroots
2466     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2467     hostgroups: porterbox
2468     normal_check_interval:  60
2469     retry_check_interval: 15
2470   # }}}
2471   # {{{ openstack
2472   -
2473     name: process - openstack - memcached
2474     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2475     hostgroups: openstack-controller
2476   -
2477     name: process - openstack - glance-registry
2478     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2479     hostgroups: openstack-controller
2480   -
2481     name: process - openstack - nova-api
2482     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2483     hostgroups: openstack-controller
2484   -
2485     name: process - openstack - nova-compute
2486     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2487     hostgroups: openstack-compute
2488   -
2489     name: process - openstack - nova-cert
2490     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2491     hostgroups: openstack-controller
2492   -
2493     name: process - openstack - nova-conductor
2494     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2495     hostgroups: openstack-controller
2496   -
2497     name: process - openstack - nova-consoleauth
2498     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2499     hostgroups: openstack-controller
2500   -
2501     name: process - openstack - nova-scheduler
2502     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2503     hostgroups: openstack-controller
2504   -
2505     name: process - openstack - nova-spicehtml5proxy
2506     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2507     hostgroups: openstack-controller
2508   -
2509     name: process - openstack - neutron-server
2510     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2511     hostgroups: openstack-controller
2512   # }}}
2513   # {{{ misc
2514   -
2515     name: process - rngd
2516     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2517     hostgroups: dl385
2518   ###
2519   -
2520     name: process - slapd
2521     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2522     hosts: draghi
2523   -
2524     name: network service - ldaps cert
2525     check: dsa_check_cert!636
2526     depends: process - slapd
2527     normal_check_interval: 60
2528     hosts: draghi
2529   ###
2530   -
2531     name: network service - finger
2532     check: check_tcp!79
2533     hosts: draghi
2534     depends: process - xinetd
2535   ###
2536   -
2537     name: network service - rsync
2538     check: check_tcp!873
2539     hostgroups: rsyncd-hosts
2540     depends: process - xinetd
2541     excludehosts: rietz
2542   -
2543     name: network service - rsync
2544     check: check_tcp!873
2545     hosts: rietz2
2546     depends: rietz:process - xinetd
2547   -
2548     name: network service - rsync
2549     check: check_tcp!873
2550     hosts: milanollo2
2551     depends: milanollo:process - xinetd
2552   ###
2553   -
2554     name: process - icinga
2555     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2556     hosts: tchaikovsky
2557   ###
2558   -
2559     name: process - jetty - master
2560     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2561     hostgroups: jetty-hosts
2562   -
2563     name: process - jetty - worker
2564     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2565     hostgroups: jetty-hosts
2566     depends: process - jetty - master
2567   ###
2568   -
2569     name: process - debianqueued
2570     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2571     hostgroups: uploadqueue
2572   ####
2573   -
2574     name: network service - gobby
2575     check: check_tcp!6523
2576     hosts: gombert
2577     contact_groups: gobby
2578   ####
2579   -
2580     name: puppetmaster cert
2581     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2582     hosts: handel
2583     normal_check_interval: 60
2584     max_check_attempts: 2
2585     retry_check_interval: 5
2586   # }}}
2587 # }}}
2588
2589 # vim: set ts=2 sw=2 et ai si fdm=marker: