argento: decomissioned (rt#4571)
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-bytemark:
37     address: 89.16.160.116
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-c3sl:
41     address: 200.17.202.254
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-cecsit:
45     address: 150.203.164.38
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-arm:
49     address: 213.104.121.213
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-brown:
53     address: 138.16.160.1
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-carnet:
57     address: 161.53.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-conova:
61     address: 217.196.149.238
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-csail:
65     address: 128.31.0.1
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-dgi:
69     address: 93.94.132.102
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72     contacts: bzed
73   gw-freenet:
74     address: 62.104.23.249
75     parents: gw-ubcece
76     hostgroups: layer3-infrastructure
77   gw-ftcollins:
78     address: 192.25.206.1
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-man-da:
102     address: 82.195.75.126
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-marist:
106     address: 148.100.88.1
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-osuosl:
110     address: 140.211.166.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-rapidswitch:
114     address: 193.201.200.129
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-sanger:
118     address: 193.62.202.20
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121     contacts: tjrc1, dave
122   gw-scanplus-lobos:
123     address: 212.211.132.249
124     parents: gw-ubcece
125     hostgroups: layer3-infrastructure
126   gw-scanplus-villa:
127     address: 212.211.132.1
128     parents: gw-ubcece
129     hostgroups: layer3-infrastructure
130   gw-sil:
131     address: 86.59.118.145
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-ubcece:
135     address: 206.12.19.254
136     hostgroups: layer3-infrastructure
137     contacts: lfilipoz
138   gw-ugent:
139     address: 193.191.17.50
140     parents: gw-ubcece
141     hostgroups: layer3-infrastructure
142   gw-umn:
143     address: 128.101.240.222
144     parents: gw-ubcece
145     hostgroups: layer3-infrastructure
146   gw-utwente:
147     address: 130.89.149.1
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-ynic:
151     # really janet, because ynic is stupid about firewalling
152     #address: 146.97.42.26
153     address: 146.97.41.66
154     parents: gw-ubcece
155     hostgroups: layer3-infrastructure
156   gw-zivit:
157     address: 80.245.144.3
158     parents: gw-ubcece
159     hostgroups: layer3-infrastructure
160   # }}}
161   # {{{ servers
162   # {{{ gw-1und1
163   powell:
164     address: 87.106.64.223
165     parents: gw-1und1
166     hostgroups: computers, service, acpid-hosts, wheezy
167   pkgmirror-1and1:
168     address: 213.165.95.4
169     parents: powell
170     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
171   babin:
172     address: 213.165.95.6
173     parents: powell
174     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
175   # }}}
176   # {{{ gw-1und1-sec
177   schumann:
178     address: 212.227.126.54
179     parents: gw-1und1-sec
180     hostgroups: computers, acpid-hosts, service, wheezy
181   chopin:
182     address: 195.20.242.124
183     parents: schumann
184     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
185   geo3:
186     address: 195.20.242.125
187     parents: schumann
188     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
189   soler:
190     address: 195.20.242.126
191     parents: schumann
192     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
193   wieck:
194     address: 195.20.242.89
195     parents: gw-1und1-sec
196     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
197   # }}}
198   # {{{ gw-accumu
199   pettersson:
200     address: 130.239.18.123
201     parents: gw-accumu
202     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
203   praetorius:
204     address: 130.239.18.121
205     parents: gw-accumu
206     hostgroups: computers, buildd, hassrvfs, wheezy
207   # }}}
208   # {{{ gw-arm
209   abel:
210     address: 217.140.96.56
211     parents: gw-arm
212     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
213   antheil:
214     address: 217.140.96.60
215     parents: gw-arm
216     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
217   arnold:
218     address: 217.140.96.57
219     parents: gw-arm
220     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
221   harris:
222     address: 217.140.96.66
223     parents: gw-arm
224     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
225   hartmann:
226     address: 217.140.96.67
227     parents: gw-arm
228     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
229   hasse:
230     address: 217.140.96.68
231     parents: gw-arm
232     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
233   henze:
234     address: 217.140.96.70
235     parents: gw-arm
236     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
237   hoiby:
238     address: 217.140.96.71
239     parents: gw-arm
240     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
241   # }}}
242   # {{{ gw-brown
243   franck:
244     address: 138.16.160.12
245     parents: gw-brown
246     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
247   # }}}
248   # {{{ gw-bytemark
249   bm-bl1:
250     address: 5.153.231.241
251     parents: gw-bytemark
252     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
253   bm-bl2:
254     address: 5.153.231.242
255     parents: gw-bytemark
256     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
257   bm-bl3:
258     address: 5.153.231.243
259     parents: gw-bytemark
260     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
261   bm-bl4:
262     address: 5.153.231.244
263     parents: gw-bytemark
264     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
265   bm-bl5:
266     address: 5.153.231.245
267     parents: gw-bytemark
268     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
269   bm-bl6:
270     address: 5.153.231.246
271     parents: gw-bytemark
272     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
273   bm-bl7:
274     address: 5.153.231.247
275     parents: gw-bytemark
276     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
277   bm-bl8:
278     address: 5.153.231.248
279     parents: gw-bytemark
280     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
281   bm-bl9:
282     address: 5.153.231.249
283     parents: gw-bytemark
284     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
285   bm-bl10:
286     address: 5.153.231.250
287     parents: gw-bytemark
288     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
289   bm-bl11:
290     address: 5.153.231.251
291     parents: gw-bytemark
292     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
293   bm-bl12:
294     address: 5.153.231.252
295     parents: gw-bytemark
296     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
297
298   milanollo:
299     address: 5.153.231.2
300     parents: gw-bytemark
301     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
302   milanollo2:
303     address: 5.153.231.9
304     parents: milanollo
305     hostgroups: secondary-IPs
306   picconi:
307     address: 5.153.231.3
308     parents: gw-bytemark
309     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
310   senfter:
311     address: 5.153.231.4
312     parents: gw-bytemark
313     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
314   adayevskaya:
315     address: 5.153.231.5
316     parents: gw-bytemark
317     hostgroups: computers, service, kvmdomains, wheezy
318   pejacevic:
319     address: 5.153.231.6
320     parents: gw-bytemark
321     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
322     contacts: holger
323   piu-slave-bm-a:
324     address: 5.153.231.7
325     parents: gw-bytemark
326     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
327     contacts: holger
328   binet:
329     address: 5.153.231.8
330     parents: gw-bytemark
331     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
332   bmdb1:
333     address: 5.153.231.10
334     parents: gw-bytemark
335     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
336   ganeti-bytemark:
337     address: 82.195.75.111
338     parents: gw-bytemark
339     hostgroups: notacomputer
340   coccia:
341     address: 5.153.231.11
342     parents: ganeti-bytemark
343     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client
344   backuphost:
345     address: 5.153.231.12
346     parents: ganeti-bytemark
347     hostgroups: computers, hassrvfs, kvmdomains, wheezy
348   philp:
349     address: 5.153.231.13
350     parents: ganeti-bytemark
351     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
352   couper:
353     address: 5.153.231.14
354     parents: ganeti-bytemark
355     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
356   rainier:
357     address: 5.153.231.16
358     parents: ganeti-bytemark
359     hostgroups: computers, kvmdomains, wheezy, no-bacula
360   rapoport:
361     address: 5.153.231.15
362     parents: ganeti-bytemark
363     hostgroups: computers, kvmdomains, wheezy, no-bacula
364   delfin:
365     address: 5.153.231.17
366     parents: ganeti-bytemark
367     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
368   wuiet:
369     address: 5.153.231.18
370     parents: ganeti-bytemark
371     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
372   dinis:
373     address: 5.153.231.19
374     parents: ganeti-bytemark
375     hostgroups: computers, general, kvmdomains, wheezy
376   donizetti:
377     address: 5.153.231.20
378     parents: ganeti-bytemark
379     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
380   moszumanska:
381     address: 5.153.231.21
382     parents: ganeti-bytemark
383     contact_groups: alioth-admins
384     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
385     no-servicegroups: true
386   dillon:
387     address: 5.153.231.22
388     parents: ganeti-bytemark
389     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
390   ticharich:
391     address: 5.153.231.23
392     parents: ganeti-bytemark
393     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service
394   petrova:
395     address: 5.153.231.25
396     parents: ganeti-bytemark
397     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
398   oyens:
399     address: 5.153.231.26
400     parents: ganeti-bytemark
401     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
402   barriere:
403     address: 5.153.231.27
404     parents: ganeti-bytemark
405     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
406   quantz:
407     address: 5.153.231.28
408     parents: ganeti-bytemark
409     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
410   portman:
411     address: 5.153.231.29
412     parents: ganeti-bytemark
413     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
414   paradis:
415     address: 5.153.231.30
416     parents: ganeti-bytemark
417     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
418   # }}}
419   # {{{ gw-c3sl
420   santoro:
421     address: 200.17.202.197
422     parents: gw-c3sl
423     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
424     contacts: faw
425   # }}}
426   # {{{ gw-carnet
427   lebrun:
428     address: 193.198.184.10
429     parents: gw-carnet
430     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
431   schroeder:
432     address: 193.198.184.11
433     parents: gw-carnet
434     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
435   # }}}
436   # {{{ gw-cecsit
437   gluck:
438     address: 150.203.164.38
439     parents: gw-cecsit
440     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
441   # }}}
442   # {{{ gw-conova
443   sompek:
444     address: 217.196.149.225
445     parents: gw-conova
446     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
447   stadler:
448     address: 217.196.149.226
449     parents: gw-conova
450     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
451   # }}}
452   # {{{ gw-csail
453   senfl:
454     address: 128.31.0.51
455     parents: gw-csail
456     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
457   steffani:
458     address: 128.31.0.36
459     parents: gw-csail
460     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
461   # }}}
462   # {{{ gw-dgi
463   storace:
464     address: 93.94.130.161
465     parents: gw-dgi
466     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
467   # }}}
468   # {{{ gw-ftcollins
469   #alkman:
470   #  address: 192.25.206.63
471   #  parents: gw-ftcollins
472   #  hostgroups: computers, buildd, acpid-hosts, wheezy
473   #mundy:
474   #  address: 192.25.206.62
475   #  parents: gw-ftcollins
476   #  hostgroups: computers, buildd, hassrvfs, sw-raid, acpid-hosts, wheezy
477   spohr:
478     address: 192.25.206.33
479     parents: gw-ftcollins
480     hostgroups: computers, service, dl380, apache2-hosts, wheezy, no-bacula
481   # }}}
482   # {{{ gw-gatech
483   sechter:
484     address: 128.61.240.73
485     parents: gw-gatech
486     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
487   # }}}
488   # {{{ gw-grnet
489   barber:
490     address: 194.177.211.203
491     parents: gw-grnet
492     hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, wheezy
493   biber:
494     address: 194.177.211.204
495     parents: gw-grnet
496     hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, wheezy
497   rautavaara:
498     address: 194.177.211.199
499     parents: gw-grnet
500     hostgroups: computers, acpid-hosts, megaraid, service, squeeze, nfs-server
501   vitry:
502     address: 194.177.211.206
503     parents: gw-grnet
504     hostgroups: computers, acpid-hosts, mptraid, no-bacula, wheezy
505   # }}}
506   # {{{ gw-isc
507   schein:
508     address: 149.20.20.6
509     parents: gw-isc
510     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
511   # }}}
512   # {{{ gw-leaseweb
513   lw01:
514     address: 185.17.185.177
515     parents: gw-leaseweb
516     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
517   lw02:
518     address: 185.17.185.178
519     parents: gw-leaseweb
520     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
521   lw03:
522     address: 185.17.185.179
523     parents: gw-leaseweb
524     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
525   lw04:
526     address: 185.17.185.180
527     parents: gw-leaseweb
528     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-server, postgres91-hosts
529   lw05:
530     address: 185.17.185.181
531     parents: gw-leaseweb
532     hostgroups: computers,  service, acpid-hosts, wheezy, dl120, sw-raid, nfs-client, autofs, hassrvfs, apache2-hosts
533   lw06:
534     address: 185.17.185.182
535     parents: gw-leaseweb
536     hostgroups: computers,  service, acpid-hosts, wheezy, dl120, sw-raid, nfs-client, autofs, hassrvfs, apache2-hosts
537   # }}}
538   # {{{ gw-karlsruhe
539   zemlinsky:
540     address: 129.143.160.6
541     parents: gw-karlsruhe
542     hostgroups: computers, buildd, wheezy
543     contacts: pkern
544   # }}}
545   # {{{ gw-man-da
546   ball:
547     address: 82.195.75.70
548     parents: gw-man-da
549     hostgroups: computers, buildd, hasbootfs, wheezy
550   # bartok TODO
551   czerny:
552     address: 82.195.75.109
553     parents: gw-man-da
554     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
555   clementi:
556     address: 82.195.75.103
557     parents: gw-man-da
558     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
559   bendel:
560     address: 82.195.75.100
561     parents: ganeti3
562     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
563   master:
564     address: 82.195.75.110
565     parents: ganeti3
566     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
567   fils:
568     address: 82.195.75.89
569     parents: ganeti3
570     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
571     contacts: christoph
572   fayrfax:
573     address: 82.195.75.82
574     parents: ganeti3
575     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
576     contacts: christoph
577   vento:
578     address: 82.195.75.98
579     parents: ganeti3
580     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
581   lully:
582     address: 82.195.75.99
583     parents: ganeti3
584     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
585   rem:
586     address: 82.195.75.68
587     parents: gw-man-da
588     hostgroups: computers, buildd, hasbootfs, hassrvfs, wheezy
589   unger:
590     address: 82.195.75.102
591     parents: gw-man-da
592     hostgroups: computers, service, dl360, acpid-hosts, wheezy
593   draghi:
594     address: 82.195.75.106
595     parents: ganeti3
596     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
597   geo1:
598     address: 82.195.75.105
599     parents: ganeti3
600     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
601   handel:
602     address: 82.195.75.104
603     parents: ganeti3
604     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
605   kaufmann:
606     address: 82.195.75.107
607     parents: ganeti3
608     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
609   stockhausen:
610     address: 82.195.75.108
611     parents: ganeti3
612     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
613   ganeti3:
614     address: 82.195.75.111
615     parents: gw-man-da
616     hostgroups: notacomputer
617   wilder:
618     address: 82.195.75.112
619     parents: ganeti3
620     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
621   mailly:
622     address: 82.195.75.114
623     parents: ganeti3
624     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
625   denis:
626     address: 82.195.75.91
627     parents: ganeti3
628     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
629   vogler:
630     address: 82.195.75.92
631     parents: ganeti3
632     hostgroups: computers, service, kvmdomains, wheezy
633   # }}}
634   # {{{ gw-marist
635   zani:
636     address: 148.100.88.22
637     parents: gw-marist
638     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
639   # }}}
640   # {{{ gw-osuosl
641   busoni:
642     address: 140.211.15.34
643     parents: gw-osuosl
644     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
645   byrd:
646     address: 140.211.166.20
647     parents: gw-osuosl
648     hostgroups: computers, service, dl380, acpid-hosts, wheezy
649   buxtehude:
650     address: 140.211.166.26
651     parents: byrd
652     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
653   # malo TODO
654   mayer:
655     address: 140.211.166.78
656     parents: gw-osuosl
657     hostgroups: computers, buildd, hasbootfs, wheezy
658 #  mayr:
659 #    address: 140.211.166.58
660 #    parents: gw-osuosl
661 #    hostgroups: computers, buildd, hasbootfs
662   merulo:
663     address: 140.211.166.46
664     parents: gw-osuosl
665     hostgroups: computers, porterbox, hasusrfs, wheezy
666   parry:
667     address: 140.211.15.153
668     parents: gw-osuosl
669     hostgroups: computers, wheezy, buildd, hassrvfs
670   partch:
671     address: 140.211.15.152
672     parents: gw-osuosl
673     hostgroups: computers, wheezy, hassrvfs, porterbox
674   rietz:
675     address: 140.211.166.43
676     parents: gw-osuosl
677     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
678     #, bosserver
679   rietz2:
680     address: 140.211.166.44
681     parents: rietz
682     hostgroups: secondary-IPs
683   # zee TODO
684   # }}}
685   # {{{ gs-rapidswitch
686   caballero:
687     address: 193.201.200.200
688     parents: gw-rapidswitch
689     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
690   # }}}
691   # {{{ gw-sanger
692   sibelius:
693     address: 193.62.202.28
694     parents: gw-sanger
695     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts, hasvarlogfs
696     contacts: tjrc1, dave
697   smetana:
698     address: 193.62.202.29
699     parents: gw-sanger
700     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
701     contacts: tjrc1, dave
702   # }}}
703   # {{{ gw-scanplus
704   lobos:
705     address: 212.211.132.250
706     parents: gw-scanplus-lobos
707     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
708   villa:
709     address: 212.211.132.32
710     parents: gw-scanplus-villa
711     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
712   # }}}
713   # {{{ gw-sil
714   beethoven:
715     address: 86.59.118.146
716     parents: gw-sil
717     hostgroups: computers, hasbootfs, aacraid, service, acpid-hosts, wheezy
718   eder:
719     address: 86.59.118.151
720     parents: gw-sil
721     hostgroups: computers, porterbox, wheezy, hassrvfs
722   eysler:
723     address: 86.59.118.152
724     parents: gw-sil
725     hostgroups: computers, buildd, wheezy
726   eberlin:
727     address: 86.59.118.155
728     parents: gw-sil
729     hostgroups: computers, buildd, wheezy
730   # }}}
731   # {{{ gw-ubcece
732   sw-ubcece:
733     hostgroups: layer2-infrastructure
734     contacts: lfilipoz
735     pingable: false
736     check_command: dsa_check_always_ok
737   sw-ubcece-mcld:
738     hostgroups: layer2-infrastructure
739     parents: sw-ubcece
740     contacts: lfilipoz
741     pingable: false
742     check_command: dsa_check_always_ok
743   sw-ubcece-kais:
744     hostgroups: layer2-infrastructure
745     parents: sw-ubcece
746     contacts: lfilipoz
747     pingable: false
748     check_command: dsa_check_always_ok
749   spontini:
750     address: 206.12.19.14
751     parents: sw-ubcece-mcld
752     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
753     contacts: lfilipoz
754   ravel:
755     address: 206.12.19.5
756     parents: sw-ubcece-kais
757     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, uploadqueue, hasorgfs, xinetd-hosts, wheezy, autofs
758   dijkstra:
759     address: 206.12.19.218
760     parents: sw-ubcece-kais
761     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
762   pasquini:
763     address: 206.12.19.217
764     parents: sw-ubcece-kais
765     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
766   luchesi:
767     address: 206.12.19.214
768     parents: sw-ubcece-kais
769     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
770   tristano:
771     address: 206.12.19.213
772     parents: sw-ubcece-kais
773     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
774   boito:
775     address: 206.12.19.216
776     parents: sw-ubcece-kais
777     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
778   bertali:
779     address: 206.12.19.212
780     parents: sw-ubcece-kais
781     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
782   ganeti2:
783     address: 206.12.19.23
784     parents: sw-ubcece-kais
785     hostgroups: notacomputer
786   tchaikovsky:
787     address: 206.12.19.118
788     parents: ganeti2
789     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
790   wolkenstein:
791     address: 206.12.19.116
792     parents: ganeti2
793     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
794   brahms:
795     address: 206.12.19.115
796     parents: ganeti2
797     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
798   geo2:
799     address: 206.12.19.113
800     parents: ganeti2
801     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
802   stabile:
803     address: 206.12.19.13
804     parents: sw-ubcece-kais
805     hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs
806   # MSA 2000 (2012i)
807   giustini:
808     address: 192.168.2.6
809     parents: dijkstra
810     hostgroups: notacomputer
811     # unless we implement runfrom for host alive checks
812     pingable: false
813     check_command: dsa_check_always_ok
814   falla:
815     address: 206.12.19.117
816     parents: ganeti2
817     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
818   fano:
819     address: 206.12.19.110
820     parents: ganeti2
821     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
822     contacts: christoph
823   finzi:
824     address: 206.12.19.111
825     parents: ganeti2
826     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
827     contacts: christoph
828   fischer:
829     address: 206.12.19.112
830     parents: ganeti2
831     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
832   gabrielli:
833     address: 206.12.19.17
834     parents: sw-ubcece-kais
835     hostgroups: computers, porterbox, wheezy
836   corelli:
837     address: 206.12.19.16
838     parents: sw-ubcece-kais
839     hostgroups: computers, buildd, wheezy
840   lucatelli:
841     address: 206.12.19.15
842     parents: sw-ubcece-kais
843     hostgroups: computers, buildd, wheezy
844   rossini:
845     address: 206.12.19.19
846     parents: sw-ubcece-kais
847     hostgroups: computers, dl585, acpid-hosts, service, wheezy
848   salieri:
849     address: 206.12.19.20
850     parents: sw-ubcece-kais
851     hostgroups: computers, dl585, acpid-hosts, service, wheezy
852   traetta:
853     address: 206.12.19.21
854     parents: sw-ubcece-kais
855     hostgroups: computers, dl585, acpid-hosts, service, wheezy
856 #  locke:
857 #    address: 206.12.19.120
858 #    parents: sw-ubcece-kais
859 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
860   lotti:
861     address: 206.12.19.121
862     parents: sw-ubcece-kais
863     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
864   nono:
865     address: 206.12.19.123
866     parents: traetta
867     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
868   reger:
869     address: 206.12.19.124
870     parents: ganeti2
871     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
872   danzi:
873     address: 206.12.19.125
874     parents: ganeti2
875     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
876   glinka:
877     address: 206.12.19.126
878     parents: traetta
879     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
880   tye:
881     address: 206.12.19.129
882     parents: ganeti2
883     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
884   elgar:
885     address: 206.12.19.130
886     parents: salieri
887     hostgroups: computers, service, kvmdomains, wheezy
888   gombert:
889     address: 206.12.19.132
890     parents: ganeti2
891     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
892   jenkins:
893     address: 206.12.19.133
894     parents: salieri
895     hostgroups: computers, service, kvmdomains, wheezy
896   blavet:
897     address: 206.12.19.134
898     parents: ganeti2
899     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
900   diabelli:
901     address: 206.12.19.136
902     parents: traetta
903     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
904   bizet:
905     address: 206.12.19.137
906     parents: ganeti2
907     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
908   lilburn:
909     address: 206.12.19.138
910     parents: ganeti2
911     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
912   popov:
913     address: 206.12.19.119
914     parents: ganeti2
915     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
916   beach:
917     address: 206.12.19.140
918     parents: ganeti2
919     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
920   ullmann:
921     address: 206.12.19.141
922     parents: ganeti2
923     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
924   sonntag:
925     address: 206.12.19.142
926     parents: ganeti2
927     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
928   menotti:
929     address: 206.12.19.143
930     parents: ganeti2
931     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
932   muffat:
933     address: 206.12.19.146
934     parents: ganeti2
935     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
936   # }}}
937   # {{{ gw-ugent
938   ancina:
939     address: 157.193.39.13
940     parents: gw-ugent
941     hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, wheezy
942     contacts: luk
943   # }}}
944   # {{{ gw-umn
945   saens:
946     address: 128.101.240.212
947     parents: gw-umn
948     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
949   # }}}
950   # {{{ gw-utwente
951   klecker:
952     address: 130.89.148.10
953     parents: gw-utwente
954     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
955   klecker-ftp:
956     address: 130.89.148.12
957     parents: klecker
958     hostgroups: secondary-IPs
959   klecker-archive:
960     address: 130.89.148.13
961     parents: klecker
962     hostgroups: secondary-IPs
963   klecker-static:
964     address: 130.89.148.14
965     parents: klecker
966     hostgroups: secondary-IPs
967   # }}}
968   # {{{ gw-ynic
969   howells:
970     address: 144.32.168.75
971     parents: gw-ynic
972     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
973   hummel:
974     address: 144.32.168.76
975     parents: gw-ynic
976     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
977   porpora:
978     address: 144.32.168.78
979     parents: gw-ynic
980     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
981   poulenc:
982     address: 144.32.168.77
983     parents: gw-ynic
984     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
985   # }}}
986   # {{{ gw-zivit
987   zandonai:
988     address: 80.245.147.46
989     parents: gw-zivit
990     hostgroups: computers, buildd, hassrvfs, wheezy
991   zelenka:
992     address: 80.245.147.40
993     parents: gw-zivit
994     hostgroups: computers, porterbox, hassrvfs, wheezy
995   # }}}
996   # }}}
997
998 # {{{ ############################# host groups #############################
999 hostgroups:
1000   computers:
1001     alias: computers
1002     private: 1
1003   layer2-infrastructure:
1004     alias: Layer 2 Devices
1005     extinfo-icon_image: base/switch40.png
1006     extinfo-icon_image_alt: switch
1007   layer3-infrastructure:
1008     alias: Layer 3 Devices
1009     extinfo-icon_image: base/switch40.png
1010     extinfo-icon_image_alt: router
1011   notacomputer:
1012     alias: Systems that are not really systems.  Yeah :)
1013     private: 1
1014   freebsd:
1015     alias: freebsd
1016     private: 1
1017   armhf:
1018     alias: armhf
1019     private: 1
1020   sparc:
1021     alias: sparc
1022     private: 1
1023
1024   porterbox:
1025     alias: developer accessible porter machines
1026     extinfo-icon_image: base/debian.png
1027     extinfo-icon_image_alt: Debian GNU/Linux
1028     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1029   service:
1030     alias: machines running services
1031     extinfo-icon_image: base/debian.png
1032     extinfo-icon_image_alt: Debian GNU/Linux
1033     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1034   buildd:
1035     alias: buildd systems
1036     extinfo-icon_image: base/debian.png
1037     extinfo-icon_image_alt: Debian GNU/Linux
1038     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1039   general:
1040     alias: general purpose developer accessible machines
1041     extinfo-icon_image: base/debian.png
1042     extinfo-icon_image_alt: Debian GNU/Linux
1043     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1044
1045   dl380:
1046     alias: HP DL380 hosts
1047     private: 1
1048   dl385:
1049     alias: HP DL385 hosts
1050     private: 1
1051   dl360:
1052     alias: HP DL360 hosts
1053     private: 1
1054   bl460:
1055     alias: HP BL460 blades
1056     private: 1
1057   bm-bl:
1058     alias: HP blades at bytemark
1059     private: 1
1060   dl585:
1061     alias: HP DL385 hosts
1062     private: 1
1063   dl180:
1064     alias: HP DL180
1065     private: 1
1066   dl120:
1067     alias: HP DL120
1068     private: 1
1069   sw-raid:
1070     alias: Hosts with Linux software raid
1071     private: 1
1072   aacraid:
1073     alias: Hosts with Adaptec AACraid
1074     private: 1
1075   megaraid:
1076     alias: Hosts with LSI Logic MegaRAID
1077     private: 1
1078   mptraid:
1079     alias: Hosts with LSI Logic Fusion-MPT
1080     private: 1
1081
1082   squeeze:
1083     alias: Hosts running squeeze
1084   wheezy:
1085     alias: Hosts running wheezy
1086
1087   kvmdomains:
1088     alias: Hosts that are KVM domains
1089     private: 1
1090
1091   drbd-hosts:
1092     alias: hosts running drbd
1093   postfix-hosts:
1094     alias: hosts running postfix instead of exim
1095     private: 1
1096   heavy-exim:
1097     alias: "hosts running the full mail stuff, including clamav and postgrey"
1098     private: 1
1099   mail-relay:
1100     alias: "relays usually are hosts with more exim processes"
1101     private: 1
1102   spamd:
1103     alias: "hosts running spamassassin as daemon"
1104     private: 1
1105   heavy-postfix:
1106     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1107     private: 1
1108   apache2-hosts:
1109     alias: hosts running apache2
1110     private: 1
1111   jetty-hosts:
1112     alias: hosts running jetty
1113     private: 1
1114   bind9-hosts:
1115     alias: hosts running bind9
1116     private: 1
1117   # once every host runs unbound, do away with this group and check "computers" instead
1118   amavis-hosts:
1119     alias: hosts running amavis
1120     private: 1
1121   rsyncd-hosts:
1122     alias: hosts providing rsync services via xinetd
1123     private: 1
1124   xinetd-hosts:
1125     alias: hosts providing services via xinetd
1126     private: 1
1127   postgres91-hosts:
1128     alias: hosts running postgres91
1129     private: 1
1130   no-ulogd:
1131     alias: hosts not running ulogd
1132     private: 1
1133   acpid-hosts:
1134     alias: hosts running acpid
1135     private: 1
1136   uploadqueue:
1137     alias: hosts that are an anonymous ftp uploadqueue
1138     private: 1
1139   bosserver:
1140     alias: hosts running bosserver
1141     private: 1
1142   apache-https:
1143     alias: hosts with https services
1144     private: 1
1145   broken_https_default_vhost:
1146     alias: https default vhost does not say 200 OK
1147     private: 1
1148
1149   no-bacula:
1150     alias: hosts which are not being backed up with bacula
1151     private: 1
1152
1153   nfs-client:
1154     alias: hosts mounting filesystems using NFS
1155     private: 1
1156   nfs-server:
1157     alias: hosts serving filesystems using NFS
1158     private: 1
1159   autofs:
1160     alias: hosts running the automounter
1161     private: 1
1162
1163   highload:
1164     alias: "hosts on which high load is normal"
1165     private: 1
1166
1167   secondary-IPs:
1168     alias: secondary IP addresses
1169     private: 1
1170
1171   hasbootfs:
1172     alias: hosts with a /boot filesystem
1173     private: 1
1174   hassrvfs:
1175     alias: hosts with a /srv filesystem
1176     private: 1
1177   hasorgfs:
1178     alias: hosts with a /org filesystem
1179     private: 1
1180   hashomefs:
1181     alias: hosts with a /home filesystem
1182     private: 1
1183   hasvarfs:
1184     alias: hosts with a /var filesystem
1185     private: 1
1186   hasvarlogfs:
1187     alias: hosts with a /var/log filesystem
1188     private: 1
1189   hasusrfs:
1190     alias: hosts with a /usr filesystem
1191     private: 1
1192
1193   incomingmailrelayed:
1194     alias: incoming mail needs to go through a mail relay
1195     # i.e. no port 25
1196     private: 1
1197   incomingmailrelayed2025:
1198     alias: incoming mail needs to go through a mail relay
1199     # i.e. no port 25
1200     private: 1
1201
1202   brokensamhain:
1203     alias: machines that can not run samhain
1204     private: 1
1205   high-RTT:
1206     alias: machines with high round trip times
1207     private: 1
1208   ping-suckers:
1209     alias: machines that just suck at icmp
1210     private: 1
1211   alioth:
1212     alias: machines that just are just awkward
1213     private: 1
1214   openstack-compute:
1215     alias: nodes that run OpenStack compute
1216     private: 1
1217   openstack-controller:
1218     alias: nodes that run OpenStack controller
1219     private: 1
1220
1221   security_mirror:
1222     alias: hosts that are security mirrors
1223     private: 1
1224
1225   broken_mq:
1226     alias: hosts whose MQ is broken
1227     private: 1
1228 # }}}
1229 # {{{ ############################# servicegroups #############################
1230 servicegroups:
1231   diskspace:
1232     alias: diskusage checks
1233   buildd:
1234     alias: buildd checks
1235   raid:
1236     alias: raid checks
1237   backup:
1238     alias: backup checks
1239   kernel:
1240     alias: kernel checks
1241   apt:
1242     alias: apt upgrade status
1243   samhain:
1244     alias: samhain integrity status
1245   time:
1246     alias: time stuff
1247   security:
1248     alias: security
1249     servicegroup_members: apt, kernel, samhain
1250   MQ:
1251     alias: rabbitMQ stuff
1252 # }}}
1253 # {{{ ############################# services #############################
1254 services:
1255   # {{{ ### basic networking
1256   -
1257     name: PING
1258     check: "check_ping!350.0,20%!600.0,40%"
1259     hostgroups: pingable
1260     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1261     normal_check_interval: 5
1262     max_check_attempts: 4
1263     retry_check_interval: 1
1264   -
1265     name: PING
1266     check: "check_ping!600.0,20%!900.0,40%"
1267     hostgroups: high-RTT
1268     normal_check_interval: 5
1269     max_check_attempts: 4
1270     retry_check_interval: 1
1271   -
1272     name: PING
1273     check: "check_ping!600.0,90%!900.0,95%"
1274     hostgroups: ping-suckers
1275     normal_check_interval: 5
1276     max_check_attempts: 4
1277     retry_check_interval: 1
1278   -
1279     name: PING
1280     check: "check_ping!2000.0,60%!3000.0,80%"
1281     hostgroups: layer3-infrastructure
1282     normal_check_interval: 5
1283     max_check_attempts: 4
1284     retry_check_interval: 1
1285   # }}}
1286   # {{{ ### disk usage
1287   -
1288     name: disk usage - all
1289     servicegroups: diskspace
1290     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1291     hostgroups: computers
1292     excludehosts: sibelius,stabile
1293   -
1294     name: disk usage - all
1295     servicegroups: diskspace
1296     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 3%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/srv/snapshot.debian.org"
1297     hosts: stabile
1298   -
1299     name: disk usage - all
1300     servicegroups: diskspace
1301     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98"
1302     hosts: sibelius
1303
1304   -
1305     name: disk usage on /
1306     servicegroups: diskspace
1307     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1308     hostgroups: computers
1309     excludehosts: spohr
1310   -
1311     name: disk usage on /
1312     servicegroups: diskspace
1313     nrpe: "/usr/lib/nagios/plugins/check_disk 90 93 /"
1314     hosts: spohr
1315   -
1316     name: disk usage on /boot
1317     servicegroups: diskspace
1318     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1319     hostgroups: hasbootfs
1320   -
1321     name: disk usage on /var
1322     servicegroups: diskspace
1323     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1324     hostgroups: hasvarfs
1325   -
1326     name: disk usage on /org
1327     servicegroups: diskspace
1328     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1329     hostgroups: hasorgfs
1330   -
1331     name: disk usage on /srv
1332     servicegroups: diskspace
1333     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1334     hostgroups: hassrvfs
1335   -
1336     name: disk usage on /tmp
1337     servicegroups: diskspace
1338     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1339     hosts: saens
1340   -
1341     name: disk usage on /usr
1342     servicegroups: diskspace
1343     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1344     hostgroups: hasusrfs
1345   -
1346     name: disk usage on /home
1347     servicegroups: diskspace
1348     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home"
1349     hostgroups: hashomefs
1350   -
1351     name: disk usage on /var/lib/postgresql
1352     servicegroups: diskspace
1353     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1354     hosts: sibelius, busoni, buxtehude, lw04
1355   -
1356     name: disk usage on /var/log
1357     servicegroups: diskspace
1358     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1359     hostgroups: hasvarlogfs
1360   -
1361     name: disk usage on /var/spool/postfix
1362     servicegroups: diskspace
1363     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1364     hosts: bendel
1365   -
1366     name: disk usage on /srv/mirrors
1367     servicegroups: diskspace
1368     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1369     hosts: beethoven, sibelius
1370   -
1371     name: disk usage on /srv/snapshot.debian.org
1372     servicegroups: diskspace
1373     nrpe: "/usr/lib/nagios/plugins/check_disk 98 99 /srv/snapshot.debian.org"
1374     hosts: stabile
1375   -
1376     name: disk usage on /srv/snapshot.debian.org
1377     servicegroups: diskspace
1378     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1379     hosts: sibelius
1380   -
1381     name: disk usage on /srv/farm-snapshot/farm-misc
1382     servicegroups: diskspace
1383     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-misc"
1384     hosts: sibelius
1385   -
1386     name: disk usage on /var/lib/postgresql/9.1
1387     servicegroups: diskspace
1388     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1389     hosts: franck
1390   -
1391     name: disk usage on /srv/ftp-master.debian.org
1392     servicegroups: diskspace
1393     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1394     hosts: franck
1395   -
1396     name: disk usage on /srv/pgbackup
1397     servicegroups: diskspace
1398     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/pgbackup"
1399     hosts: beethoven
1400   -
1401     name: disk usage on /srv/git-backup
1402     servicegroups: diskspace
1403     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/git-backup"
1404     hosts: beethoven
1405   -
1406     name: disk usage on /srv/da-backup
1407     servicegroups: diskspace
1408     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/da-backup"
1409     hosts: beethoven
1410   -
1411     name: disk usage on /srv/bacula
1412     servicegroups: diskspace
1413     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/bacula"
1414     hosts: beethoven
1415   -
1416     name: disk usage on /storage/snapshot-farm-1
1417     servicegroups: diskspace
1418     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1419     hosts: lw01
1420   -
1421     name: disk usage on /storage/snapshot-farm-2
1422     servicegroups: diskspace
1423     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1424     hosts: lw02
1425   -
1426     name: disk usage on /storage/snapshot-farm-3
1427     servicegroups: diskspace
1428     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1429     hosts: lw03
1430   -
1431     name: disk usage on /storage/snapshot-farm-4
1432     servicegroups: diskspace
1433     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1434     hosts: lw04
1435   -
1436     name: disk usage on /srv/morgue.debian.org/
1437     servicegroups: diskspace
1438     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1439     hosts: lw03
1440   # }}}
1441   # {{{ ### system
1442   # {{{ setup
1443   -
1444     name: setup - dsa config
1445     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1446     hostgroups: computers
1447     normal_check_interval: 60
1448     excludehostgroups: alioth
1449   -
1450     name: setup - local hostname etc-hosts
1451     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1452     hostgroups: computers
1453     normal_check_interval: 60
1454   # }}}
1455   # {{{ os health
1456   ####
1457   -
1458     name: users
1459     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1460     hostgroups: computers
1461   -
1462     name: load
1463     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1464     hostgroups: computers
1465     excludehostgroups: highload
1466   -
1467     name: load
1468     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1469     hostgroups: highload
1470   -
1471     name: uptime check
1472     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1473     hostgroups: computers
1474   -
1475     name: processes - total
1476     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1477     hostgroups: computers
1478   -
1479     name: swap usage - percent
1480     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1481     hostgroups: computers
1482   -
1483     name: swap usage - mb
1484     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1485     hostgroups: computers
1486   -
1487     name: process - getty
1488     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1489     hostgroups: computers
1490     excludehosts: zelenka, zandonai
1491   -
1492     name: processes - zombies
1493     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1494     hostgroups: computers
1495   -
1496     name: system - available entropy
1497     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1498     event_handler: dsa_event_handler_restart_ekey
1499     hostgroups: computers
1500     excludehostgroups: freebsd
1501   -
1502     name: system - filesystem check
1503     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1504     normal_check_interval:  60
1505     retry_check_interval: 15
1506     hostgroups: computers
1507   # }}}
1508   # {{{ backup
1509   -
1510     name: backup
1511     servicegroups: backup
1512     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1513     hostgroups: computers
1514     excludehosts: backuphost
1515     normal_check_interval: 60
1516     max_check_attempts: 2
1517     retry_check_interval: 5
1518   -
1519     name: backup server config
1520     servicegroups: backup
1521     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1522     hosts: beethoven, backuphost
1523     normal_check_interval: 60
1524     max_check_attempts: 2
1525     retry_check_interval: 5
1526   -
1527     name: backup - bacula - last backup
1528     servicegroups: backup
1529     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1530     runfrom: dinis
1531     hostgroups: computers
1532     excludehostgroups: buildd, porterbox, no-bacula
1533     normal_check_interval:  60
1534     retry_check_interval: 15
1535   -
1536     name: backup - bacula - last full backup
1537     servicegroups: backup
1538     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1539     runfrom: dinis
1540     hostgroups: computers
1541     excludehostgroups: buildd, porterbox, no-bacula
1542     normal_check_interval:  60
1543     retry_check_interval: 15
1544   -
1545     name: process - bacula-fd
1546     servicegroups: backup
1547     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1548     hostgroups: computers
1549     excludehostgroups: freebsd, alioth
1550   -
1551     name: process - bacula-fd
1552     servicegroups: backup
1553     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1554     hostgroups: freebsd
1555
1556   ####
1557   -
1558     name: process - acc.umu.se backup
1559     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1560     hosts: sibelius
1561   # }}}
1562   # {{{ security
1563   -
1564     name: running kernel
1565     servicegroups: kernel
1566     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1567     hostgroups: computers
1568     normal_check_interval: 60
1569     retry_check_interval: 5
1570   -
1571     name: apt - security updates
1572     servicegroups: apt
1573     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1574     hostgroups: computers
1575     normal_check_interval:  60
1576     retry_check_interval: 15
1577   -
1578     name: installed firewall
1579     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1580     hostgroups: computers
1581     excludehostgroups: freebsd
1582   -
1583     name: puppetized firewall
1584     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1585     hostgroups: computers
1586     excludehostgroups: freebsd
1587   -
1588     name: process - ulogd
1589     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1590     hostgroups: computers
1591     excludehostgroups: freebsd, sparc
1592   -
1593     name: unexpected process - ulogd
1594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1595     hostgroups: freebsd, sparc
1596   ####
1597   -
1598     name: process - samhain
1599     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1600     hostgroups: computers
1601     excludehostgroups: brokensamhain
1602   -
1603     name: samhain
1604     servicegroups: samhain
1605     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1606     hostgroups: computers
1607     depends: process - samhain
1608     normal_check_interval: 60
1609     retry_check_interval: 5
1610     excludehostgroups: brokensamhain
1611   -
1612     name: processes - samhain zombies
1613     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1614     event_handler: dsa_event_handler_restart_samhain
1615     hostgroups: computers
1616     excludehostgroups: brokensamhain
1617   # }}}
1618   # {{{ logging
1619   -
1620     name: process - syslog-ng
1621     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1622     hostgroups: computers
1623     excludehostgroups: freebsd
1624
1625   -
1626     name: process - syslog-ng
1627     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1628     hostgroups: freebsd
1629
1630   -
1631     name: remote logging on lotti
1632     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1633     runfrom: lotti
1634     hostgroups: computers
1635     excludehostgroups: alioth
1636   -
1637     name: remote logging on lully
1638     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1639     runfrom: lully
1640     hostgroups: computers
1641     excludehostgroups: alioth
1642   # }}}
1643   # {{{ base service
1644   -
1645     name: process - sshd
1646     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1647     hostgroups: computers
1648   -
1649     name: "network service - sshd"
1650     check: dsa_check_ssh
1651     hostgroups: computers
1652     depends: process - sshd
1653     normal_check_interval:  60
1654     notification_interval: 1440
1655   ####
1656   -
1657     name: network service - nrpe
1658     check: check_tcp!5666
1659     hostgroups: computers
1660     max_check_attempts: -2
1661     notification_interval: 1440
1662   -
1663     name: process - nrpe
1664     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1665     hostgroups: computers
1666     max_check_attempts: -1
1667     depends: network service - nrpe
1668   ###
1669   -
1670     name: process - munin-node
1671     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1672     hostgroups: computers
1673     excludehostgroups: freebsd, armhf
1674   -
1675     name: process - munin-node
1676     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1677     hostgroups: freebsd
1678   -
1679     name: process - munin-node
1680     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1681     hostgroups: wheezy
1682     excludehostgroups: freebsd
1683   -
1684     name: network service - munin-node
1685     check: check_tcp!4949
1686     hostgroups: computers
1687     depends: process - munin-node
1688   ###
1689   -
1690     name: process - ntpd
1691     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1692     hostgroups: computers
1693     servicegroups: time
1694   -
1695     name: network service - ntp
1696     check: dsa_check_ntp
1697     hostgroups: computers
1698     depends: process - ntpd
1699     excludehosts: ancina
1700     servicegroups: time
1701   ###
1702   -
1703     name: network service - time
1704     check: dsa_check_time
1705     hosts: ancina
1706     depends: process - xinetd
1707     servicegroups: time
1708   ###
1709   -
1710     name: process - atd
1711     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1712     hostgroups: computers
1713   ###
1714   -
1715     name: process - cron
1716     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1717     hostgroups: computers
1718   ###
1719   -
1720     name: process - ud-replicated
1721     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1722     hostgroups: computers
1723     excludehostgroups: squeeze, freebsd, alioth
1724   -
1725     name: process - ud-replicated
1726     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1727     hostgroups: freebsd
1728   ###
1729   -
1730     name: process - monit
1731     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1732     hostgroups: squeeze
1733   -
1734     name: process - monit
1735     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1736     hostgroups: computers
1737     excludehostgroups: squeeze, alioth
1738   ###
1739   -
1740     name: MQ connection on rainier
1741     servicegroups: MQ
1742     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1743     runfrom: rainier
1744     hostgroups: computers
1745     normal_check_interval:  60
1746     retry_check_interval: 15
1747     excludehostgroups: alioth, broken_mq
1748   -
1749     name: MQ connection on rapoport
1750     servicegroups: MQ
1751     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1752     runfrom: rapoport
1753     hostgroups: computers
1754     normal_check_interval:  60
1755     retry_check_interval: 15
1756     excludehostgroups: alioth, broken_mq
1757   ###
1758   -
1759     name: local resolver
1760     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1761     hostgroups: computers
1762     normal_check_interval: 60
1763   -
1764     name: process - unbound
1765     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1766     hostgroups: computers
1767     excludehostgroups: alioth
1768   ###
1769   -
1770     name: process - uptimed
1771     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1772     hostgroups: computers
1773   ###
1774   -
1775     name: process - udevd
1776     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1777     hostgroups: computers
1778     excludehostgroups: freebsd
1779   -
1780     name: unexpected process - udev
1781     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1782     hostgroups: freebsd
1783   ###
1784   -
1785     name: process - acpid
1786     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1787     hostgroups: acpid-hosts
1788   -
1789     name: unexpected process - acpid
1790     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1791     hostgroups: computers
1792     excludehostgroups: acpid-hosts, kvmdomains
1793   ###
1794   -
1795     name: process - xinetd
1796     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1797     hostgroups: xinetd-hosts
1798   -
1799     name: unwanted process - xinetd
1800     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1801     hostgroups: computers
1802     excludehostgroups: xinetd-hosts
1803   ###
1804   -
1805     name: process - stunnel4 - puppet-ekeyd
1806     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1807     hostgroups: squeeze, wheezy
1808     excludehostgroups: freebsd, alioth
1809   # }}}
1810   # {{{ anti-services
1811   -
1812     name: ganeti - job watcher paused
1813     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1814     hostgroups: computers
1815   -
1816     name: unwanted process - irqbalance
1817     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1818     hostgroups: computers
1819   -
1820     name: unwanted process - openvpn
1821     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1822     hostgroups: computers
1823     normal_check_interval: 120
1824   -
1825     name: unwanted process - gkrellmd
1826     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1827     hostgroups: computers
1828   -
1829     name: unwanted process - rpc.statd
1830     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1831     hostgroups: computers
1832     excludehostgroups: nfs-client, nfs-server
1833   -
1834     name: unwanted process - inetd
1835     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1836     hostgroups: computers
1837     excludehosts: abel
1838   -
1839     name: unwanted process - snmpd
1840     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1841     hostgroups: computers
1842   # }}}
1843   # {{{ ssl certs
1844   -
1845     name: "host SSL cert"
1846     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1847     hostgroups: computers
1848   # }}}
1849   # {{{ HW health/raid
1850   -
1851     name: process - mdadm monitor
1852     servicegroups: raid
1853     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
1854     hostgroups: sw-raid
1855     excludehostgroups: wheezy
1856   -
1857     # wheezy:
1858     name: process - mdadm monitor
1859     servicegroups: raid
1860     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1861     hostgroups: sw-raid
1862     excludehostgroups: squeeze
1863   -
1864     name: RAID - sw raid
1865     servicegroups: raid
1866     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1867     hostgroups: sw-raid
1868   ###
1869   -
1870     name: HW - hpacucli status
1871     servicegroups: raid
1872     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1873     normal_check_interval: 120
1874     hostgroups: dl385, dl380, dl360, bl460, dl180
1875     excludehosts: schein, rietz
1876   -
1877     name: HW - hpacucli status
1878     servicegroups: raid
1879     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1880     normal_check_interval: 120
1881     hostgroups: bm-bl
1882   -
1883     name: HW - hpacucli status
1884     servicegroups: raid
1885     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1886     normal_check_interval: 120
1887     hosts: schein, rietz
1888   -
1889     name: HW - hpacucli enclosure status
1890     servicegroups: raid
1891     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1892     normal_check_interval: 120
1893     hosts: franck
1894   -
1895     name: HW - hpacucli status
1896     servicegroups: raid
1897     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1898     normal_check_interval: 120
1899     hostgroups: dl585
1900   ###
1901   -
1902     name: HW - edac status
1903     nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1904     normal_check_interval: 120
1905     hosts: lw05, lw06
1906     #hostgroups: computers
1907     #excludehosts: villa, lobos, senfl, schein
1908   -
1909     name: HW - hpasmcli status
1910     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1911     normal_check_interval: 120
1912     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1913     excludehosts: villa, lobos, senfl, schein, storace
1914   -
1915     name: HW - hpasmcli status
1916     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1917     normal_check_interval: 120
1918     hosts: villa
1919   -
1920     name: HW - hpasmcli status
1921     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1922     normal_check_interval: 120
1923     hosts: lobos
1924   -
1925     name: HW - hpasmcli status
1926     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1927     normal_check_interval: 120
1928     hosts: senfl, schein
1929   -
1930     name: HW - hpasmcli status
1931     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1932     normal_check_interval: 120
1933     hosts: storace
1934   ###
1935   -
1936     name: RAID - 3ware
1937     servicegroups: raid
1938     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1939     hosts: powell
1940   ###
1941   -
1942     name: RAID - aacraid
1943     servicegroups: raid
1944     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1945     hostgroups: aacraid
1946   ###
1947   -
1948     name: RAID - megaraid
1949     servicegroups: raid
1950     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1951     hostgroups: megaraid
1952   ###
1953   -
1954     name: RAID - MPT
1955     servicegroups: raid
1956     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt"
1957     hostgroups: mptraid
1958   ###
1959   -
1960     name: RAID - DRBD
1961     servicegroups: raid
1962     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1963     hostgroups: drbd-hosts
1964   # }}}
1965   # }}}
1966   # {{{ ### mail stuff
1967   # {{{ exim processes and mailq
1968   -
1969     name: process - exim
1970     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1971     hostgroups: computers
1972     excludehostgroups: postfix-hosts, mail-relay
1973     excludehosts: master, busoni, quantz, buxtehude
1974   -
1975     name: process - exim
1976     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1977     hostgroups: mail-relay
1978   -
1979     name: process - exim - total
1980     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
1981     hostgroups: computers
1982     excludehostgroups: postfix-hosts
1983     excludehosts: master, busoni, quantz, buxtehude
1984   -
1985     name: process - exim
1986     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
1987     hosts: master, busoni, quantz, buxtehude
1988   -
1989     name: mail queue
1990     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
1991     hostgroups: heavy-exim
1992   # }}}
1993   # {{{ clamav
1994   -
1995     name: process - clamav - clamd
1996     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
1997     hostgroups: heavy-exim, heavy-postfix
1998   -
1999     name: service - clamav
2000     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2001     hostgroups: heavy-exim, heavy-postfix
2002     depends: process - clamav - clamd
2003   -
2004     name: process - clamav - freshclam
2005     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2006     hostgroups: heavy-exim, heavy-postfix
2007   -
2008     name: unwanted process - clamav
2009     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2010     hostgroups: computers
2011     excludehostgroups: heavy-exim, heavy-postfix
2012   -
2013     name: unwanted process - freshclam
2014     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2015     hostgroups: computers
2016     excludehostgroups: heavy-exim, heavy-postfix
2017   # }}}
2018   # {{{ anti-spam
2019   -
2020     name: process - spamd - master
2021     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2022     hostgroups: spamd
2023     excludehosts: picconi
2024   -
2025     name: process - spamd - master
2026     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2027     hosts: picconi
2028   -
2029     name: process - spamd - master
2030     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2031     hosts: bendel
2032   -
2033     name: process - spamd - child
2034     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2035     hosts: bendel
2036     hostgroups: spamd
2037     depends: process - spamd - master
2038   #
2039   -
2040     name: process - spamd - master
2041     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2042     hosts: buxtehude
2043   -
2044     name: process - spamd - child
2045     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2046     hosts: buxtehude
2047   #
2048   -
2049     name: unwanted process - spamd
2050     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2051     hostgroups: computers
2052     excludehostgroups: spamd
2053     excludehosts: bendel, busoni, buxtehude
2054
2055   -
2056     name: unwanted process - greylistd
2057     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2058     hostgroups: computers
2059
2060   ###
2061   -
2062     name: process - postgrey
2063     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2064     hostgroups: heavy-exim
2065   -
2066     name: process - postgrey
2067     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2068     hostgroups: heavy-postfix
2069   #
2070   -
2071     name: unwanted process - postgrey
2072     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2073     hostgroups: computers
2074     excludehostgroups: heavy-postfix, heavy-exim
2075   ###
2076   -
2077     name: process - amavis - master
2078     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2079     hostgroups: amavis-hosts
2080   -
2081     name: process - amavis - all
2082     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2083     hostgroups: amavis-hosts
2084     depends: process - amavis - master
2085   #
2086   -
2087     name: unwanted process - amavis
2088     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2089     hostgroups: computers
2090     excludehostgroups: amavis-hosts
2091   ###
2092   -
2093     name: process - weightd - master
2094     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2095     hostgroups: heavy-postfix, alioth
2096   -
2097     name: process - weightd - cache
2098     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2099     hostgroups: heavy-postfix, alioth
2100     depends: process - weightd - master
2101   -
2102     name: process - weightd - child
2103     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2104     hostgroups: heavy-postfix, alioth
2105     depends: process - weightd - master
2106   ###
2107   -
2108     name: unwanted process - policyd-weight
2109     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2110     hostgroups: computers
2111     excludehostgroups: heavy-postfix, alioth
2112   # }}}
2113   # {{{ postfix
2114   ###
2115   -
2116     name: process - postfix - master
2117     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2118     hostgroups: postfix-hosts
2119   -
2120     name: process - postfix - qmgr
2121     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2122     hostgroups: postfix-hosts
2123     depends: process - postfix - master
2124   -
2125     name: process - postfix - pickup
2126     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2127     hostgroups: postfix-hosts
2128     depends: process - postfix - master
2129   -
2130     name: process - postfix - anvil
2131     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2132     hostgroups: postfix-hosts
2133     depends: process - postfix - master
2134
2135   -
2136     name: process - postfix - trivial-rewrite
2137     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2138     hostgroups: postfix-hosts
2139     depends: process - postfix - master
2140   -
2141     name: process - postfix - proxymap
2142     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2143     hostgroups: postfix-hosts
2144     depends: process - postfix - master
2145   -
2146     name: process - postfix - cleanup
2147     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2148     hostgroups: postfix-hosts
2149     depends: process - postfix - master
2150   -
2151     name: process - postfix - local
2152     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2153     hostgroups: postfix-hosts
2154     depends: process - postfix - master
2155
2156   -
2157     name: network service local - smtps cert
2158     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2159     hostgroups: postfix-hosts
2160     depends: process - postfix - master
2161     normal_check_interval: 120
2162   # }}}
2163   # {{{ mail - network service
2164   -
2165     name: network service - smtp
2166     check: dsa_check_smtp
2167     hostgroups: computers
2168     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2169     depends: process - exim
2170
2171   -
2172     name: network service - smtp
2173     check: dsa_check_smtp
2174     hostgroups: postfix-hosts
2175     depends: process - postfix - master
2176   -
2177     name: network service - submission
2178     check: dsa_check_smtp_port!587
2179     hostgroups: incomingmailrelayed
2180     depends: process - exim
2181   -
2182     name: network service - smtp 2025
2183     check: dsa_check_smtp_port!2025
2184     hostgroups: incomingmailrelayed2025
2185     depends: process - exim
2186   # }}}
2187   # }}}
2188   # {{{ ### host specific services
2189   # {{{ HTTP
2190   -
2191     name: process - apache2 - master
2192     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2193     hostgroups: apache2-hosts
2194   -
2195     name: process - apache2 - worker
2196     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2197     hostgroups: apache2-hosts
2198     depends: process - apache2 - master
2199   -
2200     name: unwanted process - apache2
2201     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2202     hostgroups: computers
2203     excludehostgroups: apache2-hosts
2204
2205   -
2206     name: network service - http
2207     check: check_http
2208     hostgroups: apache2-hosts
2209     excludehosts: klecker
2210     depends: process - apache2 - master
2211   -
2212     name: network service - http
2213     check: check_http
2214     depends: klecker:process - apache2 - master
2215     hosts: klecker-ftp
2216
2217   # keyserver on kaufmann
2218   -
2219     name: network service - http keyserver
2220     check: dsa_check_http_port!11371
2221     hosts: kaufmann
2222     depends: process - apache2 - master
2223
2224   # https on various hosts
2225   -
2226     name: network service - https
2227     check: check_https
2228     hostgroups: apache-https
2229     excludehosts: handel,menotti
2230     excludehostgroups: broken_https_default_vhost
2231     depends: "process - apache2 - master"
2232     normal_check_interval: 120
2233   -
2234     name: network service - https
2235     check: dsa_check_https_want_auth
2236     hosts: handel,menotti
2237     depends: "process - apache2 - master"
2238     normal_check_interval: 120
2239   -
2240     name: network service - https
2241     check: dsa_check_https_any_status
2242     hostgroups: broken_https_default_vhost
2243     depends: "process - apache2 - master"
2244     normal_check_interval: 120
2245   -
2246     name: network service - https cert
2247     check: dsa_check_cert!443
2248     hostgroups: apache-https
2249     depends: network service - https
2250     normal_check_interval: 60
2251   -
2252     name: unwanted network service - https
2253     check: dsa_check_port_closed!443
2254     hostgroups: apache2-hosts
2255     excludehostgroups: apache-https
2256     # ravel does ssh on port 443
2257     excludehosts: ravel
2258     normal_check_interval: 60
2259   # }}}
2260   # {{{ FTP
2261   -
2262     name: network service - ftp
2263     check: check_ftp
2264     hostgroups: uploadqueue, security_mirror
2265     excludehosts: klecker
2266   -
2267     name: network service - ftp
2268     check: check_ftp
2269     hosts: klecker-ftp
2270     depends: klecker:process - xinetd
2271   # }}}
2272   # {{{ postgres
2273   -
2274     name: unwanted process - postgresql
2275     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2276     hostgroups: computers
2277     excludehostgroups: postgres91-hosts
2278   -
2279     name: unwanted process - postgresql 9.0
2280     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2281     hostgroups: computers
2282   -
2283     name: process - postgresql91 - master
2284     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2285     hostgroups: postgres91-hosts
2286   -
2287     name: postgresql backups
2288     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2289     hosts: backuphost
2290   # }}}
2291   # {{{ power
2292 #  -
2293 #    name: process - UPS - nut usbhid-ups - ups1
2294 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2295 #    hosts: franck
2296 #  -
2297 #    name: process - UPS - nut upsd
2298 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2299 #    hosts: franck
2300 #  -
2301 #    name: process - UPS - nut upsmon master
2302 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2303 #    hosts: franck
2304 #  -
2305 #    name: process - UPS - nut upsmon worker
2306 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2307 #    hosts: franck
2308 #    depends: process - UPS - nut upsmon master
2309 #  -
2310 #    name: UPS - on line power
2311 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2312 #    hosts: franck
2313 #    depends: process - UPS - nut upsd
2314   # }}}
2315   # {{{ buildd
2316   -
2317     name: process - buildd
2318     servicegroups: buildd
2319     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2320     hosts: fano, finzi, fils, fayrfax
2321     contact_groups: buildd
2322   -
2323     name: process - buildd
2324     servicegroups: buildd
2325     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2326     hostgroups: buildd
2327     excludehosts: fano, finzi, fils, fayrfax
2328     contact_groups: buildd
2329   -
2330     name: processes - zombie schroot
2331     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2332     hostgroups: buildd
2333     contact_groups: +buildd
2334     normal_check_interval: 5
2335     max_check_attempts: 24
2336     retry_check_interval: 5
2337   -
2338     name: processes - lvcreate
2339     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2340     hostgroups: buildd
2341     contact_groups: +buildd
2342   # }}}
2343   # {{{ NFS Stuff
2344   -
2345     name: process - statd
2346     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2347     hostgroups: nfs-client, nfs-server
2348   -
2349     name: process - nfsd
2350     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2351     hostgroups: nfs-server
2352   -
2353     name: process - lockd
2354     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2355     hostgroups: nfs-server
2356   -
2357     name: process - mountd
2358     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2359     hostgroups: nfs-server
2360   #
2361   -
2362     name: process - automount
2363     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2364     hostgroups: autofs
2365   -
2366     name: unwanted process - automount
2367     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2368     hostgroups: computers
2369     excludehostgroups: autofs
2370   # }}}
2371   # {{{ mirroring
2372   -
2373     name: mirror sync - bugs
2374     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2375     hosts: global
2376   -
2377     name: mirror sync - security
2378     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2379     hosts: global
2380   -
2381     name: mirror sync - packages
2382     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2383     hosts: global
2384     normal_check_interval: 15
2385     max_check_attempts: 5
2386     retry_check_interval: 5
2387   -
2388     name: mirror sync - snapshot
2389     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2390     hosts: global
2391     normal_check_interval: 15
2392     max_check_attempts: 5
2393     retry_check_interval: 5
2394   # }}}
2395   # {{{ DNS
2396   -
2397     name: process - named
2398     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2399     hostgroups: bind9-hosts
2400   -
2401     name: network service - dns
2402     check: check_dns
2403     hostgroups: bind9-hosts
2404     depends: process - named
2405   -
2406     name: unwanted process - named
2407     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2408     hostgroups: computers
2409     excludehostgroups: bind9-hosts
2410   ###
2411   -
2412     name: DNS SOA sync - debian.org
2413     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2414     hosts: global
2415   -
2416     name: DNS SOA sync - debian.net
2417     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2418     hosts: global
2419   -
2420     name: DNS SOA sync - debian.com
2421     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2422     hosts: global
2423   -
2424     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2425     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2426     hosts: global
2427   -
2428     name: DNS SOA sync - alioth.debian.org
2429     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2430     hosts: global
2431   -
2432     name: DNS - delegation and signature expiry
2433     hosts: global
2434     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2435     runfrom: denis
2436   -
2437     name: DNS - security delegations
2438     hosts: global
2439     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2440     runfrom: denis
2441   -
2442     name: DNS - key coverage
2443     hosts: global
2444     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2445     runfrom: denis
2446   -
2447     name: DNS - DS expiry
2448     hosts: global
2449     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2450     runfrom: denis
2451   # }}}
2452   # {{{ storage
2453   -
2454     name: ping alive check
2455     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2456     runfrom: dijkstra
2457     hosts: giustini
2458     normal_check_interval: 5
2459     max_check_attempts: 4
2460     retry_check_interval: 1
2461   -
2462     name: Overall Unit Status
2463     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2464     runfrom: dijkstra
2465     hosts: giustini
2466   -
2467     name: event log
2468     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2469     runfrom: dijkstra
2470     hosts: giustini
2471   # }}}
2472   # {{{ porterbox
2473   -
2474     name: current chroots
2475     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2476     hostgroups: porterbox
2477     normal_check_interval:  60
2478     retry_check_interval: 15
2479   # }}}
2480   # {{{ openstack
2481   -
2482     name: process - openstack - memcached
2483     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 64 -p 11211 -u nobody -l 127.0.0.1'"
2484     hostgroups: openstack-controller
2485   -
2486     name: process - openstack - glance-registry
2487     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2488     hostgroups: openstack-controller
2489   -
2490     name: process - openstack - nova-api
2491     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2492     hostgroups: openstack-controller
2493   -
2494     name: process - openstack - nova-compute
2495     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2496     hostgroups: openstack-compute
2497   -
2498     name: process - openstack - nova-cert
2499     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2500     hostgroups: openstack-controller
2501   -
2502     name: process - openstack - nova-conductor
2503     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2504     hostgroups: openstack-controller
2505   -
2506     name: process - openstack - nova-consoleauth
2507     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2508     hostgroups: openstack-controller
2509   -
2510     name: process - openstack - nova-scheduler
2511     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2512     hostgroups: openstack-controller
2513   -
2514     name: process - openstack - nova-spicehtml5proxy
2515     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2516     hostgroups: openstack-controller
2517   -
2518     name: process - openstack - neutron-server
2519     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2520     hostgroups: openstack-controller
2521   # }}}
2522   # {{{ misc
2523   -
2524     name: process - rngd
2525     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2526     hostgroups: dl385
2527   ###
2528   -
2529     name: process - slapd
2530     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2531     hosts: draghi
2532   -
2533     name: network service - ldaps cert
2534     check: dsa_check_cert!636
2535     depends: process - slapd
2536     normal_check_interval: 60
2537     hosts: draghi
2538   ###
2539   -
2540     name: network service - finger
2541     check: check_tcp!79
2542     hosts: draghi
2543     depends: process - xinetd
2544   ###
2545   -
2546     name: network service - rsync
2547     check: check_tcp!873
2548     hostgroups: rsyncd-hosts
2549     depends: process - xinetd
2550     excludehosts: rietz
2551   -
2552     name: network service - rsync
2553     check: check_tcp!873
2554     hosts: rietz2
2555     depends: rietz:process - xinetd
2556   -
2557     name: network service - rsync
2558     check: check_tcp!873
2559     hosts: milanollo2
2560     depends: milanollo:process - xinetd
2561   ###
2562   -
2563     name: process - icinga
2564     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2565     hosts: tchaikovsky
2566   ###
2567   -
2568     name: process - jetty - master
2569     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2570     hostgroups: jetty-hosts
2571   -
2572     name: process - jetty - worker
2573     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2574     hostgroups: jetty-hosts
2575     depends: process - jetty - master
2576   ###
2577   -
2578     name: process - debianqueued
2579     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2580     hostgroups: uploadqueue
2581   ####
2582   -
2583     name: network service - gobby
2584     check: check_tcp!6523
2585     hosts: gombert
2586     contact_groups: gobby
2587   ####
2588   -
2589     name: puppetmaster cert
2590     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2591     hosts: handel
2592     normal_check_interval: 60
2593     max_check_attempts: 2
2594     retry_check_interval: 5
2595   # }}}
2596 # }}}
2597
2598 # vim: set ts=2 sw=2 et ai si fdm=marker: