b6d76f8789953065f4b3d9f9b758517e266e2c05
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-aql:
37     address: 141.170.2.17
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-bytemark:
41     address: 89.16.160.116
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-c3sl:
45     address: 200.17.202.254
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-cecsit:
49     address: 150.203.164.38
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-arm:
53     address: 213.104.121.213
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-brown:
57     address: 138.16.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-carnet:
61     address: 161.53.160.1
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-conova:
65     address: 217.196.149.238
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-csail:
69     address: 128.31.0.1
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72   gw-dgi:
73     address: 93.94.132.102
74     parents: gw-ubcece
75     hostgroups: layer3-infrastructure
76     contacts: bzed
77   gw-freenet:
78     address: 62.104.23.249
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-linaro:
102     address: 64.28.108.36
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-man-da:
106     address: 82.195.75.126
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-marist:
110     address: 148.100.88.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-osuosl:
114     address: 140.211.166.1
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-rapidswitch:
118     address: 193.201.200.129
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121   gw-sakura:
122     address: 133.242.99.65
123     parents: gw-ubcece
124     hostgroups: layer3-infrastructure
125   gw-sanger:
126     address: 193.62.202.20
127     parents: gw-ubcece
128     hostgroups: layer3-infrastructure
129     contacts: tjrc1, dave
130   gw-scanplus-lobos:
131     address: 212.211.132.249
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-scanplus-villa:
135     address: 212.211.132.1
136     parents: gw-ubcece
137     hostgroups: layer3-infrastructure
138   gw-sil:
139     address: 86.59.118.145
140     parents: gw-ubcece
141     hostgroups: layer3-infrastructure
142   gw-ubcece:
143     address: 206.12.19.254
144     hostgroups: layer3-infrastructure
145     contacts: lfilipoz
146   gw-ugent:
147     address: 193.191.17.50
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-umn:
151     address: 128.101.240.222
152     parents: gw-ubcece
153     hostgroups: layer3-infrastructure
154   gw-unicamp:
155     address: 143.106.167.234
156     parents: gw-ubcece
157     hostgroups: layer3-infrastructure
158   gw-utwente:
159     address: 130.89.149.1
160     parents: gw-ubcece
161     hostgroups: layer3-infrastructure
162   gw-ynic:
163     # really janet, because ynic is stupid about firewalling
164     #address: 146.97.42.26
165     address: 146.97.41.66
166     parents: gw-ubcece
167     hostgroups: layer3-infrastructure
168   gw-zivit:
169     address: 80.245.144.3
170     parents: gw-ubcece
171     hostgroups: layer3-infrastructure
172   # }}}
173   # {{{ servers
174   # {{{ gw-1und1
175   powell:
176     address: 87.106.64.223
177     parents: gw-1und1
178     hostgroups: computers, service, acpid-hosts, wheezy
179   pkgmirror-1and1:
180     address: 213.165.95.4
181     parents: powell
182     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
183   babin:
184     address: 213.165.95.6
185     parents: powell
186     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
187   piu-slave-1und1-01:
188     address: 213.165.95.7
189     parents: powell
190     hostgroups: computers, service, kvmdomains, wheezy
191     contacts: holger
192   # }}}
193   # {{{ gw-1und1-sec
194   schumann:
195     address: 212.227.126.54
196     parents: gw-1und1-sec
197     hostgroups: computers, acpid-hosts, service, wheezy
198   chopin:
199     address: 195.20.242.124
200     parents: schumann
201     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
202   geo3:
203     address: 195.20.242.125
204     parents: schumann
205     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
206   soler:
207     address: 195.20.242.126
208     parents: schumann
209     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
210   wieck:
211     address: 195.20.242.89
212     parents: gw-1und1-sec
213     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
214   # }}}
215   # {{{ gw-accumu
216   pettersson:
217     address: 130.239.18.123
218     parents: gw-accumu
219     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
220   praetorius:
221     address: 130.239.18.121
222     parents: gw-accumu
223     hostgroups: computers, buildd, hassrvfs, wheezy
224   # }}}
225   # {{{ gw-aql
226   mips-aql-01:
227     address: 141.170.6.149
228     parents: gw-aql
229     hostgroups: computers, buildd, wheezy
230   mips-aql-02:
231     address: 141.170.6.150
232     parents: gw-aql
233     hostgroups: computers, buildd, wheezy
234   mipsel-aql-01:
235     address: 141.170.6.152
236     parents: gw-aql
237     hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
238   mipsel-aql-02:
239     address: 141.170.6.153
240     parents: gw-aql
241     hostgroups: computers, buildd, jessie, hassrvfs, hasbootfs, sw-raid
242   # }}}
243   # {{{ gw-arm
244   abel:
245     address: 217.140.96.56
246     parents: gw-arm
247     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
248   arnold:
249     address: 217.140.96.57
250     parents: gw-arm
251     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
252   arm-arm-01:
253     address: 217.140.96.58
254     parents: gw-arm
255     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
256   arm-arm-02:
257     address: 217.140.96.59
258     parents: gw-arm
259     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
260   harris:
261     address: 217.140.96.66
262     parents: gw-arm
263     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
264   hartmann:
265     address: 217.140.96.67
266     parents: gw-arm
267     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
268   hoiby:
269     address: 217.140.96.71
270     parents: gw-arm
271     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
272   ia64-arm-01:
273     address: 217.140.96.61
274     parents: gw-arm
275     hostgroups: computers, hasbootfs, hassrvfs, wheezy, buildd, broken_mq, sw-raid, acpid-hosts
276   # }}}
277   # {{{ gw-brown
278   franck:
279     address: 138.16.160.12
280     parents: gw-brown
281     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
282   # }}}
283   # {{{ gw-bytemark
284   bm-bl1:
285     address: 5.153.231.241
286     parents: gw-bytemark
287     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
288   bm-bl2:
289     address: 5.153.231.242
290     parents: gw-bytemark
291     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
292   bm-bl3:
293     address: 5.153.231.243
294     parents: gw-bytemark
295     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
296   bm-bl4:
297     address: 5.153.231.244
298     parents: gw-bytemark
299     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
300   bm-bl5:
301     address: 5.153.231.245
302     parents: gw-bytemark
303     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
304   bm-bl6:
305     address: 5.153.231.246
306     parents: gw-bytemark
307     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
308   bm-bl7:
309     address: 5.153.231.247
310     parents: gw-bytemark
311     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
312   bm-bl8:
313     address: 5.153.231.248
314     parents: gw-bytemark
315     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
316   bm-bl9:
317     address: 5.153.231.249
318     parents: gw-bytemark
319     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
320   bm-bl10:
321     address: 5.153.231.250
322     parents: gw-bytemark
323     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
324   bm-bl11:
325     address: 5.153.231.251
326     parents: gw-bytemark
327     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
328   bm-bl12:
329     address: 5.153.231.252
330     parents: gw-bytemark
331     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
332
333   milanollo:
334     address: 5.153.231.2
335     parents: gw-bytemark
336     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
337   milanollo2:
338     address: 5.153.231.9
339     parents: milanollo
340     hostgroups: secondary-IPs
341   picconi:
342     address: 5.153.231.3
343     parents: gw-bytemark
344     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
345   senfter:
346     address: 5.153.231.4
347     parents: gw-bytemark
348     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
349   adayevskaya:
350     address: 5.153.231.5
351     parents: gw-bytemark
352     hostgroups: computers, service, kvmdomains, wheezy
353   pejacevic:
354     address: 5.153.231.6
355     parents: gw-bytemark
356     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
357     contacts: holger
358   piu-slave-bm-a:
359     address: 5.153.231.7
360     parents: gw-bytemark
361     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
362     contacts: holger
363   binet:
364     address: 5.153.231.8
365     parents: gw-bytemark
366     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
367   bmdb1:
368     address: 5.153.231.10
369     parents: gw-bytemark
370     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
371   ganeti-bytemark:
372     address: 82.195.75.111
373     parents: gw-bytemark
374     hostgroups: notacomputer
375   coccia:
376     address: 5.153.231.11
377     parents: ganeti-bytemark
378     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts, apache-https, apache2-hosts
379   philp:
380     address: 5.153.231.13
381     parents: ganeti-bytemark
382     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
383   couper:
384     address: 5.153.231.14
385     parents: ganeti-bytemark
386     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
387   rainier:
388     address: 5.153.231.16
389     parents: ganeti-bytemark
390     hostgroups: computers, kvmdomains, wheezy, no-bacula
391   rapoport:
392     address: 5.153.231.15
393     parents: ganeti-bytemark
394     hostgroups: computers, kvmdomains, wheezy, no-bacula
395   delfin:
396     address: 5.153.231.17
397     parents: ganeti-bytemark
398     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
399   wuiet:
400     address: 5.153.231.18
401     parents: ganeti-bytemark
402     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
403   dinis:
404     address: 5.153.231.19
405     parents: ganeti-bytemark
406     hostgroups: computers, general, kvmdomains, wheezy
407   donizetti:
408     address: 5.153.231.20
409     parents: ganeti-bytemark
410     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
411   moszumanska:
412     address: 5.153.231.21
413     parents: ganeti-bytemark
414     contact_groups: alioth-admins
415     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
416     no-servicegroups: true
417   dillon:
418     address: 5.153.231.22
419     parents: ganeti-bytemark
420     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
421   ticharich:
422     address: 5.153.231.23
423     parents: ganeti-bytemark
424     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost
425   petrova:
426     address: 5.153.231.25
427     parents: ganeti-bytemark
428     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
429   oyens:
430     address: 5.153.231.26
431     parents: ganeti-bytemark
432     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
433   barriere:
434     address: 5.153.231.27
435     parents: ganeti-bytemark
436     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
437   quantz:
438     address: 5.153.231.28
439     parents: ganeti-bytemark
440     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
441   portman:
442     address: 5.153.231.29
443     parents: ganeti-bytemark
444     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
445   paradis:
446     address: 5.153.231.30
447     parents: ganeti-bytemark
448     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
449   x86-bm-01:
450     address: 5.153.231.32
451     parents: ganeti-bytemark
452     hostgroups: computers, kvmdomains, wheezy, acpid-hosts, no-bacula
453   gideon:
454     address: 5.153.231.34
455     parents: ganeti-bytemark
456     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
457   httpredir-bm-01:
458     address: 5.153.231.35
459     parents: ganeti-bytemark
460     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
461   lindsay:
462     address: 5.153.231.36
463     parents: ganeti-bytemark
464     hostgroups: computers, service, kvmdomains, jessie
465   # }}}
466   # {{{ gw-c3sl
467   santoro:
468     address: 200.17.202.197
469     parents: gw-c3sl
470     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
471     contacts: faw
472   # }}}
473   # {{{ gw-carnet
474   lebrun:
475     address: 193.198.184.10
476     parents: gw-carnet
477     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
478   schroeder:
479     address: 193.198.184.11
480     parents: gw-carnet
481     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
482   # }}}
483   # {{{ gw-cecsit
484   gluck:
485     address: 150.203.164.38
486     parents: gw-cecsit
487     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
488   # }}}
489   # {{{ gw-conova
490   sompek:
491     address: 217.196.149.225
492     parents: gw-conova
493     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
494   stadler:
495     address: 217.196.149.226
496     parents: gw-conova
497     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
498   # }}}
499   # {{{ gw-csail
500   senfl:
501     address: 128.31.0.51
502     parents: gw-csail
503     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
504   steffani:
505     address: 128.31.0.36
506     parents: gw-csail
507     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
508
509   csail-node01:
510     address: 128.31.0.16
511     parents: gw-csail
512     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
513   csail-node02:
514     address: 128.31.0.46
515     parents: gw-csail
516     hostgroups: computers, service, dl360, acpid-hosts, wheezy, drbd-hosts
517   ganeti-csail:
518     address: 128.31.0.49
519     parents: gw-bytemark
520     hostgroups: notacomputer
521
522   falla:
523     address: 128.31.0.65
524     parents: ganeti-csail
525     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
526   fischer:
527     address: 128.31.0.35
528     parents: ganeti-csail
529     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
530   mirror-csail:
531     address: 128.31.0.62
532     parents: ganeti-csail
533     hostgroups: computers, service, hassrvfs, kvmdomains, wheezy, apache2-hosts, rsyncd-hosts, xinetd-hosts, apache-https
534   x86-csail-01:
535     address: 128.31.0.50
536     parents: ganeti-csail
537     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
538   # }}}
539   # {{{ gw-dgi
540   storace:
541     address: 93.94.130.161
542     parents: gw-dgi
543     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
544   # }}}
545   # {{{ gw-gatech
546   sechter:
547     address: 128.61.240.73
548     parents: gw-gatech
549     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
550   # }}}
551   # {{{ gw-grnet
552   ganeti-grnet:
553     address: 194.177.211.194
554     parents: gw-grnet
555     hostgroups: notacomputer
556   grnet-node01:
557     address: 194.177.211.195
558     parents: gw-grnet
559     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
560   grnet-node02:
561     address: 194.177.211.196
562     parents: gw-grnet
563     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
564   rautavaara:
565     address: 194.177.211.199
566     parents: gw-grnet
567     hostgroups: computers, acpid-hosts, megaraid, service, wheezy
568   loghost-grnet-01:
569     address: 194.177.211.200
570     parents: gw-grnet
571     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs
572   # }}}
573   # {{{ gw-isc
574   schein:
575     address: 149.20.20.6
576     parents: gw-isc
577     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
578   # }}}
579   # {{{ gw-leaseweb
580   lw01:
581     address: 185.17.185.177
582     parents: gw-leaseweb
583     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
584   lw02:
585     address: 185.17.185.178
586     parents: gw-leaseweb
587     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
588   lw03:
589     address: 185.17.185.179
590     parents: gw-leaseweb
591     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
592   lw04:
593     address: 185.17.185.180
594     parents: gw-leaseweb
595     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
596   lw07:
597     address: 185.17.185.187
598     parents: gw-leaseweb
599     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
600   lw08:
601     address: 185.17.185.189
602     parents: gw-leaseweb
603     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
604   #, apache2-hosts
605   # }}}
606   # {{{ gw-linaro
607   arm-linaro-01:
608     address: 64.28.108.83
609     parents: gw-linaro
610     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
611   arm-linaro-03:
612     address: 64.28.108.85
613     parents: gw-linaro
614     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
615   asachi:
616     address: 64.28.108.84
617     parents: gw-linaro
618     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
619   # }}}
620   # {{{ gw-karlsruhe
621   zemlinsky:
622     address: 129.143.160.6
623     parents: gw-karlsruhe
624     hostgroups: computers, buildd, wheezy
625     contacts: pkern
626   # }}}
627   # {{{ gw-man-da
628   ball:
629     address: 82.195.75.70
630     parents: gw-man-da
631     hostgroups: computers, buildd, hasbootfs, wheezy
632   # bartok TODO
633   czerny:
634     address: 82.195.75.109
635     parents: gw-man-da
636     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
637   clementi:
638     address: 82.195.75.103
639     parents: gw-man-da
640     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
641   bendel:
642     address: 82.195.75.100
643     parents: ganeti3
644     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
645   master:
646     address: 82.195.75.110
647     parents: ganeti3
648     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
649   mipsel-manda-01:
650     address: 82.195.75.72
651     parents: gw-man-da
652     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
653   mipsel-manda-02:
654     address: 82.195.75.74
655     parents: gw-man-da
656     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
657   fils:
658     address: 82.195.75.89
659     parents: ganeti3
660     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
661     contacts: christoph
662   fayrfax:
663     address: 82.195.75.82
664     parents: ganeti3
665     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
666     contacts: christoph
667   vento:
668     address: 82.195.75.98
669     parents: ganeti3
670     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
671   lully:
672     address: 82.195.75.99
673     parents: ganeti3
674     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
675   draghi:
676     address: 82.195.75.106
677     parents: ganeti3
678     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
679   geo1:
680     address: 82.195.75.105
681     parents: ganeti3
682     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
683   handel:
684     address: 82.195.75.104
685     parents: ganeti3
686     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
687   kaufmann:
688     address: 82.195.75.107
689     parents: ganeti3
690     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
691   stockhausen:
692     address: 82.195.75.108
693     parents: ganeti3
694     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
695   ganeti3:
696     address: 82.195.75.111
697     parents: gw-man-da
698     hostgroups: notacomputer
699   wilder:
700     address: 82.195.75.112
701     parents: ganeti3
702     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
703   mailly:
704     address: 82.195.75.114
705     parents: ganeti3
706     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
707   denis:
708     address: 82.195.75.91
709     parents: ganeti3
710     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
711   vogler:
712     address: 82.195.75.92
713     parents: ganeti3
714     hostgroups: computers, service, kvmdomains, wheezy
715   wolkenstein:
716     address: 82.195.75.65
717     parents: ganeti3
718     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
719   mipsel-manda-01:
720     address: 82.195.75.72
721     parents: gw-man-da
722     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
723   mipsel-manda-02:
724     address: 82.195.75.74
725     parents: gw-man-da
726     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
727   # }}}
728   # {{{ gw-marist
729   zani:
730     address: 148.100.88.22
731     parents: gw-marist
732     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
733   # }}}
734   # {{{ gw-osuosl
735   busoni:
736     address: 140.211.15.34
737     parents: gw-osuosl
738     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
739   byrd:
740     address: 140.211.166.20
741     parents: gw-osuosl
742     hostgroups: computers, service, dl380, acpid-hosts, wheezy
743   buxtehude:
744     address: 140.211.166.26
745     parents: byrd
746     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
747   # malo TODO
748   mayer:
749     address: 140.211.166.78
750     parents: gw-osuosl
751     hostgroups: computers, buildd, hasbootfs, wheezy
752 #  mayr:
753 #    address: 140.211.166.58
754 #    parents: gw-osuosl
755 #    hostgroups: computers, buildd, hasbootfs
756   merulo:
757     address: 140.211.166.46
758     parents: gw-osuosl
759     hostgroups: computers, porterbox, hasusrfs, wheezy
760   parry:
761     address: 140.211.15.153
762     parents: gw-osuosl
763     hostgroups: computers, wheezy, buildd, hassrvfs
764   partch:
765     address: 140.211.15.152
766     parents: gw-osuosl
767     hostgroups: computers, wheezy, hassrvfs, porterbox
768   rietz:
769     address: 140.211.166.43
770     parents: gw-osuosl
771     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
772     #, bosserver
773   rietz2:
774     address: 140.211.166.44
775     parents: rietz
776     hostgroups: secondary-IPs
777   # zee TODO
778   # }}}
779   # {{{ gs-rapidswitch
780   caballero:
781     address: 193.201.200.200
782     parents: gw-rapidswitch
783     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
784   # }}}
785   # {{{ gw-sanger
786   sibelius:
787     address: 193.62.202.28
788     parents: gw-sanger
789     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, wheezy, rsyncd-hosts, xinetd-hosts, hasvarlogfs
790     contacts: tjrc1, dave
791   smetana:
792     address: 193.62.202.29
793     parents: gw-sanger
794     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
795     contacts: tjrc1, dave
796   # }}}
797   # {{{ gw-scanplus
798   lobos:
799     address: 212.211.132.250
800     parents: gw-scanplus-lobos
801     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
802   villa:
803     address: 212.211.132.32
804     parents: gw-scanplus-villa
805     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
806   # }}}
807   # {{{ gw-sil
808   eder:
809     address: 86.59.118.151
810     parents: gw-sil
811     hostgroups: computers, porterbox, wheezy, hassrvfs
812   eysler:
813     address: 86.59.118.152
814     parents: gw-sil
815     hostgroups: computers, buildd, wheezy
816   eberlin:
817     address: 86.59.118.155
818     parents: gw-sil
819     hostgroups: computers, buildd, wheezy
820   # }}}
821   # {{{ gw-ubcece
822   sw-ubcece:
823     hostgroups: layer2-infrastructure
824     contacts: lfilipoz
825     pingable: false
826     check_command: dsa_check_always_ok
827   sw-ubcece-mcld:
828     hostgroups: layer2-infrastructure
829     parents: sw-ubcece
830     contacts: lfilipoz
831     pingable: false
832     check_command: dsa_check_always_ok
833   sw-ubcece-kais:
834     hostgroups: layer2-infrastructure
835     parents: sw-ubcece
836     contacts: lfilipoz
837     pingable: false
838     check_command: dsa_check_always_ok
839   spontini:
840     address: 206.12.19.14
841     parents: sw-ubcece-mcld
842     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
843     contacts: lfilipoz
844   ravel:
845     address: 206.12.19.5
846     parents: sw-ubcece-kais
847     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
848   dijkstra:
849     address: 206.12.19.218
850     parents: sw-ubcece-kais
851     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
852   pasquini:
853     address: 206.12.19.217
854     parents: sw-ubcece-kais
855     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
856   luchesi:
857     address: 206.12.19.214
858     parents: sw-ubcece-kais
859     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
860   tristano:
861     address: 206.12.19.213
862     parents: sw-ubcece-kais
863     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
864   boito:
865     address: 206.12.19.216
866     parents: sw-ubcece-kais
867     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
868   bertali:
869     address: 206.12.19.212
870     parents: sw-ubcece-kais
871     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
872   ganeti2:
873     address: 206.12.19.23
874     parents: sw-ubcece-kais
875     hostgroups: notacomputer
876   tchaikovsky:
877     address: 206.12.19.118
878     parents: ganeti2
879     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
880   brahms:
881     address: 206.12.19.115
882     parents: ganeti2
883     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
884   geo2:
885     address: 206.12.19.113
886     parents: ganeti2
887     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
888   # MSA 2000 (2012i)
889   giustini:
890     address: 192.168.2.6
891     parents: dijkstra
892     hostgroups: notacomputer
893     # unless we implement runfrom for host alive checks
894     pingable: false
895     check_command: dsa_check_always_ok
896   fano:
897     address: 206.12.19.110
898     parents: ganeti2
899     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
900     contacts: christoph
901   finzi:
902     address: 206.12.19.111
903     parents: ganeti2
904     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
905     contacts: christoph
906   gabrielli:
907     address: 206.12.19.17
908     parents: sw-ubcece-kais
909     hostgroups: computers, porterbox, wheezy
910   corelli:
911     address: 206.12.19.16
912     parents: sw-ubcece-kais
913     hostgroups: computers, buildd, wheezy
914   lucatelli:
915     address: 206.12.19.15
916     parents: sw-ubcece-kais
917     hostgroups: computers, buildd, wheezy
918   rossini:
919     address: 206.12.19.19
920     parents: sw-ubcece-kais
921     hostgroups: computers, dl585, acpid-hosts, service, wheezy
922   salieri:
923     address: 206.12.19.20
924     parents: sw-ubcece-kais
925     hostgroups: computers, dl585, acpid-hosts, service, wheezy
926   traetta:
927     address: 206.12.19.21
928     parents: sw-ubcece-kais
929     hostgroups: computers, dl585, acpid-hosts, service, wheezy
930 #  locke:
931 #    address: 206.12.19.120
932 #    parents: sw-ubcece-kais
933 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
934   lotti:
935     address: 206.12.19.121
936     parents: sw-ubcece-kais
937     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
938   nono:
939     address: 206.12.19.123
940     parents: traetta
941     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
942   reger:
943     address: 206.12.19.124
944     parents: ganeti2
945     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
946   danzi:
947     address: 206.12.19.125
948     parents: ganeti2
949     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
950   glinka:
951     address: 206.12.19.126
952     parents: traetta
953     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
954   tye:
955     address: 206.12.19.129
956     parents: ganeti2
957     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
958   elgar:
959     address: 206.12.19.130
960     parents: salieri
961     hostgroups: computers, service, kvmdomains, wheezy
962   gombert:
963     address: 206.12.19.132
964     parents: ganeti2
965     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
966   jenkins:
967     address: 206.12.19.133
968     parents: salieri
969     hostgroups: computers, service, kvmdomains, wheezy
970   blavet:
971     address: 206.12.19.134
972     parents: ganeti2
973     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
974   diabelli:
975     address: 206.12.19.136
976     parents: traetta
977     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
978   bizet:
979     address: 206.12.19.137
980     parents: ganeti2
981     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
982   lilburn:
983     address: 206.12.19.138
984     parents: ganeti2
985     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
986   popov:
987     address: 206.12.19.119
988     parents: ganeti2
989     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
990   beach:
991     address: 206.12.19.140
992     parents: ganeti2
993     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
994   ullmann:
995     address: 206.12.19.141
996     parents: ganeti2
997     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
998   sonntag:
999     address: 206.12.19.142
1000     parents: ganeti2
1001     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
1002   menotti:
1003     address: 206.12.19.143
1004     parents: ganeti2
1005     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
1006   muffat:
1007     address: 206.12.19.146
1008     parents: ganeti2
1009     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
1010   # }}}
1011   # {{{ gw-ugent
1012   # }}}
1013   # {{{ gw-umn
1014   saens:
1015     address: 128.101.240.212
1016     parents: gw-umn
1017     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1018   # }}}
1019   # {{{ gw-unicamp
1020   asgard:
1021     address: 143.106.167.145
1022     parents: gw-unicamp
1023     hostgroups: layer3-infrastructure
1024   prokofiev:
1025     address: 143.106.167.147
1026     parents: gw-unicamp
1027     hostgroups: computers, jessie, service
1028   powerpc-unicamp-01:
1029     address: 143.106.167.149
1030     parents: prokofiev
1031     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
1032   ppc64el-unicamp-01:
1033     address: 143.106.167.135
1034     parents: prokofiev
1035     hostgroups: computers, hasbootfs, hassrvfs, buildd, jessie
1036   # }}}
1037   # {{{ gw-utwente
1038   klecker:
1039     address: 130.89.148.10
1040     parents: gw-utwente
1041     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
1042   klecker-ftp:
1043     address: 130.89.148.12
1044     parents: klecker
1045     hostgroups: secondary-IPs
1046   klecker-archive:
1047     address: 130.89.148.13
1048     parents: klecker
1049     hostgroups: secondary-IPs
1050   klecker-static:
1051     address: 130.89.148.14
1052     parents: klecker
1053     hostgroups: secondary-IPs
1054   # }}}
1055   # {{{ gw-ynic
1056   henze:
1057     address: 144.32.168.74
1058     parents: gw-ynic
1059     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1060   hasse:
1061     address: 144.32.168.75
1062     parents: gw-ynic
1063     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1064   antheil:
1065     address: 144.32.168.76
1066     parents: gw-ynic
1067     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1068   porpora:
1069     address: 144.32.168.78
1070     parents: gw-ynic
1071     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1072   poulenc:
1073     address: 144.32.168.77
1074     parents: gw-ynic
1075     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1076   #antheil:
1077   #  address: 217.140.96.60
1078   #  parents: gw-arm
1079   #  hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
1080   #hasse:
1081   #  address: 217.140.96.68
1082   #  parents: gw-arm
1083   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1084   #henze:
1085   #  address: 217.140.96.70
1086   #  parents: gw-arm
1087   #  hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
1088   # }}}
1089   # {{{ gw-zivit
1090   zandonai:
1091     address: 80.245.147.46
1092     parents: gw-zivit
1093     hostgroups: computers, buildd, hassrvfs, wheezy
1094   zelenka:
1095     address: 80.245.147.40
1096     parents: gw-zivit
1097     hostgroups: computers, porterbox, hassrvfs, wheezy
1098   # }}}
1099   # {{{ gw-sakura
1100   setoguchi:
1101     address: 133.242.99.74
1102     parents: gw-sakura
1103     hostgroups: computers, service, wheezy, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, security_mirror, acpid-hosts
1104   # }}}
1105
1106 # {{{ ############################# host groups #############################
1107 hostgroups:
1108   computers:
1109     alias: computers
1110     private: 1
1111   layer2-infrastructure:
1112     alias: Layer 2 Devices
1113     extinfo-icon_image: base/switch40.png
1114     extinfo-icon_image_alt: switch
1115   layer3-infrastructure:
1116     alias: Layer 3 Devices
1117     extinfo-icon_image: base/switch40.png
1118     extinfo-icon_image_alt: router
1119   notacomputer:
1120     alias: Systems that are not really systems.  Yeah :)
1121     private: 1
1122   freebsd:
1123     alias: freebsd
1124     private: 1
1125   armhf:
1126     alias: armhf
1127     private: 1
1128   sparc:
1129     alias: sparc
1130     private: 1
1131
1132   porterbox:
1133     alias: developer accessible porter machines
1134     extinfo-icon_image: base/debian.png
1135     extinfo-icon_image_alt: Debian GNU/Linux
1136     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1137   service:
1138     alias: machines running services
1139     extinfo-icon_image: base/debian.png
1140     extinfo-icon_image_alt: Debian GNU/Linux
1141     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1142   buildd:
1143     alias: buildd systems
1144     extinfo-icon_image: base/debian.png
1145     extinfo-icon_image_alt: Debian GNU/Linux
1146     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1147   general:
1148     alias: general purpose developer accessible machines
1149     extinfo-icon_image: base/debian.png
1150     extinfo-icon_image_alt: Debian GNU/Linux
1151     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1152
1153   dl380:
1154     alias: HP DL380 hosts
1155     private: 1
1156   dl385:
1157     alias: HP DL385 hosts
1158     private: 1
1159   dl360:
1160     alias: HP DL360 hosts
1161     private: 1
1162   bl460:
1163     alias: HP BL460 blades
1164     private: 1
1165   bm-bl:
1166     alias: HP blades at bytemark
1167     private: 1
1168   dl585:
1169     alias: HP DL385 hosts
1170     private: 1
1171   dl180:
1172     alias: HP DL180
1173     private: 1
1174   dl120:
1175     alias: HP DL120
1176     private: 1
1177   sw-raid:
1178     alias: Hosts with Linux software raid
1179     private: 1
1180   aacraid:
1181     alias: Hosts with Adaptec AACraid
1182     private: 1
1183   megaraid:
1184     alias: Hosts with LSI Logic MegaRAID
1185     private: 1
1186
1187   squeeze:
1188     alias: Hosts running squeeze
1189   wheezy:
1190     alias: Hosts running wheezy
1191   jessie:
1192     alias: Hosts running jessie
1193
1194   kvmdomains:
1195     alias: Hosts that are KVM domains
1196     private: 1
1197
1198   drbd-hosts:
1199     alias: hosts running drbd
1200   postfix-hosts:
1201     alias: hosts running postfix instead of exim
1202     private: 1
1203   heavy-exim:
1204     alias: "hosts running the full mail stuff, including clamav and postgrey"
1205     private: 1
1206   mail-relay:
1207     alias: "relays usually are hosts with more exim processes"
1208     private: 1
1209   spamd:
1210     alias: "hosts running spamassassin as daemon"
1211     private: 1
1212   heavy-postfix:
1213     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1214     private: 1
1215   apache2-hosts:
1216     alias: hosts running apache2
1217     private: 1
1218   jetty-hosts:
1219     alias: hosts running jetty
1220     private: 1
1221   bind9-hosts:
1222     alias: hosts running bind9
1223     private: 1
1224   # once every host runs unbound, do away with this group and check "computers" instead
1225   amavis-hosts:
1226     alias: hosts running amavis
1227     private: 1
1228   rsyncd-hosts:
1229     alias: hosts providing rsync services via xinetd
1230     private: 1
1231   xinetd-hosts:
1232     alias: hosts providing services via xinetd
1233     private: 1
1234   postgres91-hosts:
1235     alias: hosts running postgres91
1236     private: 1
1237   no-ulogd:
1238     alias: hosts not running ulogd
1239     private: 1
1240   acpid-hosts:
1241     alias: hosts running acpid
1242     private: 1
1243   uploadqueue:
1244     alias: hosts that are an anonymous ftp uploadqueue
1245     private: 1
1246   bosserver:
1247     alias: hosts running bosserver
1248     private: 1
1249   apache-https:
1250     alias: hosts with https services
1251     private: 1
1252   broken_https_default_vhost:
1253     alias: https default vhost does not say 200 OK
1254     private: 1
1255
1256   no-bacula:
1257     alias: hosts which are not being backed up with bacula
1258     private: 1
1259
1260   nfs-client:
1261     alias: hosts mounting filesystems using NFS
1262     private: 1
1263   nfs-server:
1264     alias: hosts serving filesystems using NFS
1265     private: 1
1266   autofs:
1267     alias: hosts running the automounter
1268     private: 1
1269
1270   highload:
1271     alias: "hosts on which high load is normal"
1272     private: 1
1273
1274   secondary-IPs:
1275     alias: secondary IP addresses
1276     private: 1
1277
1278   hasbootfs:
1279     alias: hosts with a /boot filesystem
1280     private: 1
1281   hassrvfs:
1282     alias: hosts with a /srv filesystem
1283     private: 1
1284   hasorgfs:
1285     alias: hosts with a /org filesystem
1286     private: 1
1287   hasvarfs:
1288     alias: hosts with a /var filesystem
1289     private: 1
1290   hasvarlogfs:
1291     alias: hosts with a /var/log filesystem
1292     private: 1
1293   hasusrfs:
1294     alias: hosts with a /usr filesystem
1295     private: 1
1296
1297   incomingmailrelayed:
1298     alias: incoming mail needs to go through a mail relay
1299     # i.e. no port 25
1300     private: 1
1301   incomingmailrelayed2025:
1302     alias: incoming mail needs to go through a mail relay
1303     # i.e. no port 25
1304     private: 1
1305
1306   brokensamhain:
1307     alias: machines that can not run samhain
1308     private: 1
1309   high-RTT:
1310     alias: machines with high round trip times
1311     private: 1
1312   ping-suckers:
1313     alias: machines that just suck at icmp
1314     private: 1
1315   alioth:
1316     alias: machines that just are just awkward
1317     private: 1
1318   openstack-compute:
1319     alias: nodes that run OpenStack compute
1320     private: 1
1321   openstack-controller:
1322     alias: nodes that run OpenStack controller
1323     private: 1
1324
1325   security_mirror:
1326     alias: hosts that are security mirrors
1327     private: 1
1328
1329   broken_mq:
1330     alias: hosts whose MQ is broken
1331     private: 1
1332 # }}}
1333 # {{{ ############################# servicegroups #############################
1334 servicegroups:
1335   diskspace:
1336     alias: diskusage checks
1337   buildd:
1338     alias: buildd checks
1339   raid:
1340     alias: raid checks
1341   backup:
1342     alias: backup checks
1343   kernel:
1344     alias: kernel checks
1345   apt:
1346     alias: apt upgrade status
1347   samhain:
1348     alias: samhain integrity status
1349   time:
1350     alias: time stuff
1351   security:
1352     alias: security
1353     servicegroup_members: apt, kernel, samhain
1354   MQ:
1355     alias: rabbitMQ stuff
1356 # }}}
1357 # {{{ ############################# services #############################
1358 services:
1359   # {{{ ### basic networking
1360   -
1361     name: PING
1362     check: "check_ping!350.0,20%!600.0,40%"
1363     hostgroups: pingable
1364     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1365     normal_check_interval: 5
1366     max_check_attempts: 4
1367     retry_check_interval: 1
1368   -
1369     name: PING
1370     check: "check_ping!600.0,20%!900.0,40%"
1371     hostgroups: high-RTT
1372     normal_check_interval: 5
1373     max_check_attempts: 4
1374     retry_check_interval: 1
1375   -
1376     name: PING
1377     check: "check_ping!600.0,90%!900.0,95%"
1378     hostgroups: ping-suckers
1379     normal_check_interval: 5
1380     max_check_attempts: 4
1381     retry_check_interval: 1
1382   -
1383     name: PING
1384     check: "check_ping!2000.0,60%!3000.0,80%"
1385     hostgroups: layer3-infrastructure
1386     normal_check_interval: 5
1387     max_check_attempts: 4
1388     retry_check_interval: 1
1389   # }}}
1390   # {{{ ### disk usage
1391   -
1392     name: disk usage - all
1393     servicegroups: diskspace
1394     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1395     hostgroups: computers
1396     excludehosts: sibelius
1397   -
1398     name: disk usage - all
1399     servicegroups: diskspace
1400     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x /srv/farm-snapshot/farm-misc 95 98"
1401     hosts: sibelius
1402
1403   -
1404     name: disk usage on /
1405     servicegroups: diskspace
1406     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1407     hostgroups: computers
1408   -
1409     name: disk usage on /boot
1410     servicegroups: diskspace
1411     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1412     hostgroups: hasbootfs
1413   -
1414     name: disk usage on /var
1415     servicegroups: diskspace
1416     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1417     hostgroups: hasvarfs
1418   -
1419     name: disk usage on /org
1420     servicegroups: diskspace
1421     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1422     hostgroups: hasorgfs
1423   -
1424     name: disk usage on /srv
1425     servicegroups: diskspace
1426     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1427     hostgroups: hassrvfs
1428   -
1429     name: disk usage on /tmp
1430     servicegroups: diskspace
1431     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1432     hosts: saens
1433   -
1434     name: disk usage on /usr
1435     servicegroups: diskspace
1436     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1437     hostgroups: hasusrfs
1438   -
1439     name: disk usage on /var/lib/postgresql
1440     servicegroups: diskspace
1441     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1442     hosts: sibelius, busoni, buxtehude, lw07
1443   -
1444     name: disk usage on /var/log
1445     servicegroups: diskspace
1446     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1447     hostgroups: hasvarlogfs
1448   -
1449     name: disk usage on /var/spool/postfix
1450     servicegroups: diskspace
1451     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1452     hosts: bendel
1453   -
1454     name: disk usage on /srv/mirrors
1455     servicegroups: diskspace
1456     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1457     hosts: sibelius
1458   -
1459     name: disk usage on /srv/snapshot.debian.org
1460     servicegroups: diskspace
1461     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1462     hosts: sibelius
1463   -
1464     name: disk usage on /srv/farm-snapshot/farm-1
1465     servicegroups: diskspace
1466     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-1"
1467     hosts: sibelius
1468   -
1469     name: disk usage on /srv/farm-snapshot/farm-2
1470     servicegroups: diskspace
1471     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-2"
1472     hosts: sibelius
1473   -
1474     name: disk usage on /srv/farm-snapshot/farm-3
1475     servicegroups: diskspace
1476     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-3"
1477     hosts: sibelius
1478   -
1479     name: disk usage on /srv/farm-snapshot/farm-4
1480     servicegroups: diskspace
1481     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-4"
1482     hosts: sibelius
1483   -
1484     name: disk usage on /var/lib/postgresql/9.1
1485     servicegroups: diskspace
1486     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1487     hosts: franck
1488   -
1489     name: disk usage on /srv/ftp-master.debian.org
1490     servicegroups: diskspace
1491     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1492     hosts: franck
1493   -
1494     name: disk usage on /storage/snapshot-farm-1
1495     servicegroups: diskspace
1496     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1497     hosts: lw01
1498   -
1499     name: disk usage on /storage/snapshot-farm-2
1500     servicegroups: diskspace
1501     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1502     hosts: lw02
1503   -
1504     name: disk usage on /storage/snapshot-farm-3
1505     servicegroups: diskspace
1506     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1507     hosts: lw03
1508   -
1509     name: disk usage on /storage/snapshot-farm-4
1510     servicegroups: diskspace
1511     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1512     hosts: lw04
1513   -
1514     name: disk usage on /srv/morgue.debian.org/
1515     servicegroups: diskspace
1516     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1517     hosts: lw03
1518   # }}}
1519   # {{{ ### system
1520   # {{{ setup
1521   -
1522     name: setup - dsa config
1523     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1524     hostgroups: computers
1525     normal_check_interval: 60
1526     excludehostgroups: alioth
1527   -
1528     name: setup - local hostname etc-hosts
1529     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1530     hostgroups: computers
1531     normal_check_interval: 60
1532   # }}}
1533   # {{{ os health
1534   ####
1535   -
1536     name: users
1537     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1538     hostgroups: computers
1539   -
1540     name: load
1541     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1542     hostgroups: computers
1543     excludehostgroups: highload
1544   -
1545     name: load
1546     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1547     hostgroups: highload
1548   -
1549     name: uptime check
1550     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1551     hostgroups: computers
1552   -
1553     name: processes - total
1554     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1555     hostgroups: computers
1556   -
1557     name: swap usage - percent
1558     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1559     hostgroups: computers
1560   -
1561     name: swap usage - mb
1562     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1563     hostgroups: computers
1564   -
1565     name: process - getty
1566     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1567     hostgroups: computers
1568     excludehosts: zelenka, zandonai
1569     excludehostgroups: jessie
1570   -
1571     name: process - getty
1572     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1573     hostgroups: computers
1574     hostgroups: jessie
1575   -
1576     name: processes - zombies
1577     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1578     hostgroups: computers
1579   -
1580     name: system - available entropy
1581     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1582     event_handler: dsa_event_handler_restart_ekey
1583     hostgroups: computers
1584     excludehostgroups: freebsd
1585   -
1586     name: system - filesystem check
1587     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1588     normal_check_interval:  60
1589     retry_check_interval: 15
1590     hostgroups: computers
1591   # }}}
1592   # {{{ backup
1593   -
1594     name: backup
1595     servicegroups: backup
1596     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1597     hostgroups: computers
1598     excludehosts: storace
1599     normal_check_interval: 60
1600     max_check_attempts: 2
1601     retry_check_interval: 5
1602   -
1603     name: backup server config
1604     servicegroups: backup
1605     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1606     hosts: storace
1607     normal_check_interval: 60
1608     max_check_attempts: 2
1609     retry_check_interval: 5
1610   -
1611     name: backup - bacula - last backup
1612     servicegroups: backup
1613     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1614     runfrom: dinis
1615     hostgroups: computers
1616     excludehostgroups: buildd, porterbox, no-bacula
1617     normal_check_interval:  60
1618     retry_check_interval: 15
1619   -
1620     name: backup - bacula - last full backup
1621     servicegroups: backup
1622     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1623     runfrom: dinis
1624     hostgroups: computers
1625     excludehostgroups: buildd, porterbox, no-bacula
1626     normal_check_interval:  60
1627     retry_check_interval: 15
1628   -
1629     name: process - bacula-fd
1630     servicegroups: backup
1631     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1632     hostgroups: computers
1633     excludehostgroups: freebsd, alioth
1634   -
1635     name: process - bacula-fd
1636     servicegroups: backup
1637     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1638     hostgroups: freebsd
1639
1640   ####
1641   -
1642     name: process - acc.umu.se backup
1643     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1644     hosts: sibelius
1645   # }}}
1646   # {{{ security
1647   -
1648     name: running kernel
1649     servicegroups: kernel
1650     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1651     hostgroups: computers
1652     normal_check_interval: 60
1653     retry_check_interval: 5
1654   -
1655     name: apt - security updates
1656     servicegroups: apt
1657     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1658     hostgroups: computers
1659     normal_check_interval:  60
1660     retry_check_interval: 15
1661   -
1662     name: installed firewall
1663     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1664     hostgroups: computers
1665     excludehostgroups: freebsd
1666   -
1667     name: puppetized firewall
1668     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1669     hostgroups: computers
1670     excludehostgroups: freebsd
1671   -
1672     name: process - ulogd
1673     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1674     hostgroups: computers
1675     excludehostgroups: freebsd, sparc, jessie
1676   -
1677     name: process - ulogd
1678     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1679     hostgroups: jessie
1680     excludehostgroups: freebsd
1681   -
1682     name: unexpected process - ulogd
1683     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1684     hostgroups: freebsd, sparc
1685   ####
1686   -
1687     name: process - samhain
1688     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1689     hostgroups: computers
1690     excludehostgroups: brokensamhain
1691   -
1692     name: samhain
1693     servicegroups: samhain
1694     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1695     hostgroups: computers
1696     depends: process - samhain
1697     normal_check_interval: 60
1698     retry_check_interval: 5
1699     excludehostgroups: brokensamhain
1700   -
1701     name: processes - samhain zombies
1702     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1703     event_handler: dsa_event_handler_restart_samhain
1704     hostgroups: computers
1705     excludehostgroups: brokensamhain
1706   # }}}
1707   # {{{ logging
1708   -
1709     name: process - syslog-ng
1710     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1711     hostgroups: computers
1712     excludehostgroups: freebsd, jessie
1713
1714   -
1715     name: process - syslog-ng
1716     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1717     hostgroups: freebsd
1718   -
1719     name: process - syslog-ng
1720     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -F'"
1721     hostgroups: jessie
1722
1723   -
1724     name: remote logging on lotti
1725     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1726     runfrom: lotti
1727     hostgroups: computers
1728     excludehostgroups: alioth
1729   -
1730     name: remote logging on lully
1731     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1732     runfrom: lully
1733     hostgroups: computers
1734     excludehostgroups: alioth
1735   -
1736     name: remote logging on loghost-grnet-01
1737     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1738     runfrom: loghost-grnet-01
1739     hostgroups: computers
1740     excludehostgroups: alioth
1741   # }}}
1742   # {{{ base service
1743   -
1744     name: process - sshd
1745     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1746     hostgroups: computers
1747   -
1748     name: "network service - sshd"
1749     check: dsa_check_ssh
1750     hostgroups: computers
1751     depends: process - sshd
1752     normal_check_interval:  60
1753     notification_interval: 1440
1754   ####
1755   -
1756     name: network service - nrpe
1757     check: check_tcp!5666
1758     hostgroups: computers
1759     max_check_attempts: -2
1760     notification_interval: 1440
1761   -
1762     name: process - nrpe
1763     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1764     hostgroups: computers
1765     max_check_attempts: -1
1766     depends: network service - nrpe
1767   ###
1768   -
1769     name: process - munin-node
1770     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1771     hostgroups: computers
1772     excludehostgroups: freebsd, armhf
1773   -
1774     name: process - munin-node
1775     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1776     hostgroups: freebsd
1777   -
1778     name: process - munin-node
1779     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1780     hostgroups: wheezy, jessie
1781     excludehostgroups: freebsd
1782   -
1783     name: network service - munin-node
1784     check: check_tcp!4949
1785     hostgroups: computers
1786     depends: process - munin-node
1787   ###
1788   -
1789     name: process - ntpd
1790     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1791     hostgroups: computers
1792     servicegroups: time
1793   -
1794     name: network service - ntp
1795     check: dsa_check_ntp
1796     hostgroups: computers
1797     depends: process - ntpd
1798     servicegroups: time
1799   ###
1800   -
1801     name: process - atd
1802     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1803     hostgroups: computers
1804   ###
1805   -
1806     name: process - cron
1807     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1808     hostgroups: computers
1809   ###
1810   -
1811     name: process - ud-replicated
1812     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1813     hostgroups: computers
1814     excludehostgroups: squeeze, freebsd, alioth
1815   -
1816     name: process - ud-replicated
1817     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1818     hostgroups: freebsd
1819   ###
1820   -
1821     name: process - monit
1822     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1823     hostgroups: squeeze
1824   -
1825     name: process - monit
1826     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1827     hostgroups: computers
1828     excludehostgroups: squeeze, alioth, jessie
1829   ###
1830   -
1831     name: MQ connection on rainier
1832     servicegroups: MQ
1833     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1834     runfrom: rainier
1835     hostgroups: computers
1836     normal_check_interval:  60
1837     retry_check_interval: 15
1838     excludehostgroups: alioth, broken_mq
1839   -
1840     name: MQ connection on rapoport
1841     servicegroups: MQ
1842     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1843     runfrom: rapoport
1844     hostgroups: computers
1845     normal_check_interval:  60
1846     retry_check_interval: 15
1847     excludehostgroups: alioth, broken_mq
1848   ###
1849   -
1850     name: local resolver
1851     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1852     hostgroups: computers
1853     normal_check_interval: 60
1854   -
1855     name: process - unbound
1856     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1857     hostgroups: computers
1858     excludehostgroups: alioth
1859   ###
1860   -
1861     name: process - uptimed
1862     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1863     hostgroups: computers
1864   ###
1865   -
1866     name: process - udevd
1867     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1868     hostgroups: computers
1869     excludehostgroups: freebsd, jessie
1870   -
1871     name: process - udevd
1872     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1873     hostgroups: jessie
1874   -
1875     name: unexpected process - udev
1876     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1877     hostgroups: freebsd
1878   ###
1879   -
1880     name: process - acpid
1881     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1882     hostgroups: acpid-hosts
1883   -
1884     name: unexpected process - acpid
1885     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1886     hostgroups: computers
1887     excludehostgroups: acpid-hosts, kvmdomains
1888   ###
1889   -
1890     name: process - xinetd
1891     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1892     hostgroups: xinetd-hosts
1893   -
1894     name: unwanted process - xinetd
1895     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1896     hostgroups: computers
1897     excludehostgroups: xinetd-hosts
1898   ###
1899   -
1900     name: process - stunnel4 - puppet-ekeyd
1901     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1902     hostgroups: squeeze, wheezy, jessie
1903     excludehostgroups: freebsd, alioth
1904   # }}}
1905   # {{{ anti-services
1906   -
1907     name: ganeti - job watcher paused
1908     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1909     hostgroups: computers
1910   -
1911     name: unwanted process - irqbalance
1912     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1913     hostgroups: computers
1914   -
1915     name: unwanted process - openvpn
1916     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1917     hostgroups: computers
1918     normal_check_interval: 120
1919   -
1920     name: unwanted process - gkrellmd
1921     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1922     hostgroups: computers
1923   -
1924     name: unwanted process - rpc.statd
1925     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1926     hostgroups: computers
1927     excludehostgroups: nfs-client, nfs-server
1928   -
1929     name: unwanted process - inetd
1930     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1931     hostgroups: computers
1932     excludehosts: abel
1933   -
1934     name: unwanted process - snmpd
1935     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1936     hostgroups: computers
1937   # }}}
1938   # {{{ ssl certs
1939   -
1940     name: "host SSL cert"
1941     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1942     hostgroups: computers
1943   # }}}
1944   # {{{ HW health/raid
1945   -
1946     name: process - mdadm monitor
1947     servicegroups: raid
1948     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1949     hostgroups: sw-raid
1950     excludehostgroups: jessie
1951   -
1952     name: process - mdadm monitor
1953     servicegroups: raid
1954     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1955     hostgroups: sw-raid
1956     excludehostgroups: wheezy
1957   -
1958     name: RAID - sw raid
1959     servicegroups: raid
1960     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1961     hostgroups: sw-raid
1962   ###
1963   -
1964     name: HW - hpacucli status
1965     servicegroups: raid
1966     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1967     normal_check_interval: 120
1968     hostgroups: dl385, dl380, dl360, bl460, dl180
1969     excludehosts: schein, rietz
1970   -
1971     name: HW - hpacucli status
1972     servicegroups: raid
1973     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1974     normal_check_interval: 120
1975     hostgroups: bm-bl
1976   -
1977     name: HW - hpacucli status
1978     servicegroups: raid
1979     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1980     normal_check_interval: 120
1981     hosts: schein, rietz
1982   -
1983     name: HW - hpacucli enclosure status
1984     servicegroups: raid
1985     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1986     normal_check_interval: 120
1987     hosts: franck
1988   -
1989     name: HW - hpacucli status
1990     servicegroups: raid
1991     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1992     normal_check_interval: 120
1993     hostgroups: dl585
1994   ###
1995 #  -
1996 #    name: HW - edac status
1997 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1998 #    normal_check_interval: 120
1999     #hostgroups: computers
2000     #excludehosts: villa, lobos, senfl, schein
2001   -
2002     name: HW - hpasmcli status
2003     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2004     normal_check_interval: 120
2005     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
2006     excludehosts: villa, lobos, senfl, schein, storace
2007   -
2008     name: HW - hpasmcli status
2009     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2010     normal_check_interval: 120
2011     hosts: villa
2012   -
2013     name: HW - hpasmcli status
2014     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
2015     normal_check_interval: 120
2016     hosts: lobos
2017   -
2018     name: HW - hpasmcli status
2019     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2020     normal_check_interval: 120
2021     hosts: senfl, schein
2022   -
2023     name: HW - hpasmcli status
2024     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2025     normal_check_interval: 120
2026     hosts: storace
2027   ###
2028   -
2029     name: RAID - 3ware
2030     servicegroups: raid
2031     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
2032     hosts: powell
2033   ###
2034   -
2035     name: RAID - aacraid
2036     servicegroups: raid
2037     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2038     hostgroups: aacraid
2039   ###
2040   -
2041     name: RAID - megaraid
2042     servicegroups: raid
2043     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
2044     hostgroups: megaraid
2045   ###
2046   -
2047     name: RAID - DRBD
2048     servicegroups: raid
2049     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2050     hostgroups: drbd-hosts
2051   # }}}
2052   # }}}
2053   # {{{ ### mail stuff
2054   # {{{ exim processes and mailq
2055   -
2056     name: process - exim
2057     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2058     hostgroups: computers
2059     excludehostgroups: postfix-hosts, mail-relay
2060     excludehosts: master, busoni, quantz, buxtehude
2061   -
2062     name: process - exim
2063     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2064     hostgroups: mail-relay
2065   -
2066     name: process - exim - total
2067     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2068     hostgroups: computers
2069     excludehostgroups: postfix-hosts
2070     excludehosts: master, busoni, quantz, buxtehude
2071   -
2072     name: process - exim
2073     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2074     hosts: master, busoni, quantz, buxtehude
2075   -
2076     name: mail queue
2077     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2078     hostgroups: heavy-exim
2079   # }}}
2080   # {{{ clamav
2081   -
2082     name: process - clamav - clamd
2083     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2084     hostgroups: heavy-exim, heavy-postfix
2085   -
2086     name: service - clamav
2087     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2088     hostgroups: heavy-exim, heavy-postfix
2089     depends: process - clamav - clamd
2090   -
2091     name: process - clamav - freshclam
2092     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2093     hostgroups: heavy-exim, heavy-postfix
2094   -
2095     name: unwanted process - clamav
2096     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2097     hostgroups: computers
2098     excludehostgroups: heavy-exim, heavy-postfix
2099   -
2100     name: unwanted process - freshclam
2101     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2102     hostgroups: computers
2103     excludehostgroups: heavy-exim, heavy-postfix
2104   # }}}
2105   # {{{ anti-spam
2106   -
2107     name: process - spamd - master
2108     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2109     hostgroups: spamd
2110     excludehosts: picconi
2111   -
2112     name: process - spamd - master
2113     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2114     hosts: picconi
2115   -
2116     name: process - spamd - master
2117     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2118     hosts: bendel
2119   -
2120     name: process - spamd - child
2121     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2122     hosts: bendel
2123     hostgroups: spamd
2124     depends: process - spamd - master
2125   #
2126   -
2127     name: process - spamd - master
2128     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2129     hosts: buxtehude
2130   -
2131     name: process - spamd - child
2132     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2133     hosts: buxtehude
2134   #
2135   -
2136     name: unwanted process - spamd
2137     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2138     hostgroups: computers
2139     excludehostgroups: spamd
2140     excludehosts: bendel, busoni, buxtehude
2141
2142   -
2143     name: unwanted process - greylistd
2144     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2145     hostgroups: computers
2146
2147   ###
2148   -
2149     name: process - postgrey
2150     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2151     hostgroups: heavy-exim
2152   -
2153     name: process - postgrey
2154     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2155     hostgroups: heavy-postfix
2156   #
2157   -
2158     name: unwanted process - postgrey
2159     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2160     hostgroups: computers
2161     excludehostgroups: heavy-postfix, heavy-exim
2162   ###
2163   -
2164     name: process - amavis - master
2165     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2166     hostgroups: amavis-hosts
2167   -
2168     name: process - amavis - all
2169     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2170     hostgroups: amavis-hosts
2171     depends: process - amavis - master
2172   #
2173   -
2174     name: unwanted process - amavis
2175     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2176     hostgroups: computers
2177     excludehostgroups: amavis-hosts
2178   ###
2179   -
2180     name: process - weightd - master
2181     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2182     hostgroups: heavy-postfix, alioth
2183   -
2184     name: process - weightd - cache
2185     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2186     hostgroups: heavy-postfix, alioth
2187     depends: process - weightd - master
2188   -
2189     name: process - weightd - child
2190     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2191     hostgroups: heavy-postfix, alioth
2192     depends: process - weightd - master
2193   ###
2194   -
2195     name: unwanted process - policyd-weight
2196     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2197     hostgroups: computers
2198     excludehostgroups: heavy-postfix, alioth
2199   # }}}
2200   # {{{ postfix
2201   ###
2202   -
2203     name: process - postfix - master
2204     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2205     hostgroups: postfix-hosts
2206   -
2207     name: process - postfix - qmgr
2208     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2209     hostgroups: postfix-hosts
2210     depends: process - postfix - master
2211   -
2212     name: process - postfix - pickup
2213     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2214     hostgroups: postfix-hosts
2215     depends: process - postfix - master
2216   -
2217     name: process - postfix - anvil
2218     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2219     hostgroups: postfix-hosts
2220     depends: process - postfix - master
2221
2222   -
2223     name: process - postfix - trivial-rewrite
2224     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2225     hostgroups: postfix-hosts
2226     depends: process - postfix - master
2227   -
2228     name: process - postfix - proxymap
2229     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2230     hostgroups: postfix-hosts
2231     depends: process - postfix - master
2232   -
2233     name: process - postfix - cleanup
2234     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2235     hostgroups: postfix-hosts
2236     depends: process - postfix - master
2237   -
2238     name: process - postfix - local
2239     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2240     hostgroups: postfix-hosts
2241     depends: process - postfix - master
2242
2243   -
2244     name: network service local - smtps cert
2245     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2246     hostgroups: postfix-hosts
2247     depends: process - postfix - master
2248     normal_check_interval: 120
2249   # }}}
2250   # {{{ mail - network service
2251   -
2252     name: network service - smtp
2253     check: dsa_check_smtp
2254     hostgroups: computers
2255     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2256     depends: process - exim
2257
2258   -
2259     name: network service - smtp
2260     check: dsa_check_smtp
2261     hostgroups: postfix-hosts
2262     depends: process - postfix - master
2263   -
2264     name: network service - submission
2265     check: dsa_check_smtp_port!587
2266     hostgroups: incomingmailrelayed
2267     depends: process - exim
2268   -
2269     name: network service - smtp 2025
2270     check: dsa_check_smtp_port!2025
2271     hostgroups: incomingmailrelayed2025
2272     depends: process - exim
2273   # }}}
2274   # }}}
2275   # {{{ ### host specific services
2276   # {{{ HTTP
2277   -
2278     name: process - apache2 - master
2279     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2280     hostgroups: apache2-hosts
2281   -
2282     name: process - apache2 - worker
2283     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2284     hostgroups: apache2-hosts
2285     depends: process - apache2 - master
2286   -
2287     name: unwanted process - apache2
2288     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2289     hostgroups: computers
2290     excludehostgroups: apache2-hosts
2291
2292   -
2293     name: network service - http
2294     check: check_http
2295     hostgroups: apache2-hosts
2296     excludehosts: klecker
2297     depends: process - apache2 - master
2298   -
2299     name: network service - http
2300     check: check_http
2301     depends: klecker:process - apache2 - master
2302     hosts: klecker-ftp
2303
2304   # keyserver on kaufmann
2305   -
2306     name: network service - http keyserver
2307     check: dsa_check_http_port!11371
2308     hosts: kaufmann
2309     depends: process - apache2 - master
2310
2311   # https on various hosts
2312   -
2313     name: network service - https
2314     check: check_https
2315     hostgroups: apache-https
2316     excludehosts: handel,menotti
2317     excludehostgroups: broken_https_default_vhost
2318     depends: "process - apache2 - master"
2319     normal_check_interval: 120
2320   -
2321     name: network service - https
2322     check: dsa_check_https_want_auth
2323     hosts: handel,menotti
2324     depends: "process - apache2 - master"
2325     normal_check_interval: 120
2326   -
2327     name: network service - https
2328     check: dsa_check_https_any_status
2329     hostgroups: broken_https_default_vhost
2330     depends: "process - apache2 - master"
2331     normal_check_interval: 120
2332   -
2333     name: network service - https cert
2334     check: dsa_check_cert!443
2335     hostgroups: apache-https
2336     depends: network service - https
2337     normal_check_interval: 60
2338   -
2339     name: unwanted network service - https
2340     check: dsa_check_port_closed!443
2341     hostgroups: apache2-hosts
2342     excludehostgroups: apache-https
2343     # ravel does ssh on port 443
2344     excludehosts: ravel
2345     normal_check_interval: 60
2346   # }}}
2347   # {{{ FTP
2348   -
2349     name: network service - ftp
2350     check: check_ftp
2351     hostgroups: uploadqueue, security_mirror
2352     excludehosts: klecker
2353   -
2354     name: network service - ftp
2355     check: check_ftp
2356     hosts: klecker-ftp
2357     depends: klecker:process - xinetd
2358   # }}}
2359   # {{{ postgres
2360   -
2361     name: unwanted process - postgresql
2362     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2363     hostgroups: computers
2364     excludehostgroups: postgres91-hosts
2365   -
2366     name: unwanted process - postgresql 9.0
2367     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2368     hostgroups: computers
2369   -
2370     name: process - postgresql91 - master
2371     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2372     hostgroups: postgres91-hosts
2373   -
2374     name: postgresql backups
2375     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2376     hosts: storace
2377   # }}}
2378   # {{{ power
2379 #  -
2380 #    name: process - UPS - nut usbhid-ups - ups1
2381 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2382 #    hosts: franck
2383 #  -
2384 #    name: process - UPS - nut upsd
2385 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2386 #    hosts: franck
2387 #  -
2388 #    name: process - UPS - nut upsmon master
2389 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2390 #    hosts: franck
2391 #  -
2392 #    name: process - UPS - nut upsmon worker
2393 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2394 #    hosts: franck
2395 #    depends: process - UPS - nut upsmon master
2396 #  -
2397 #    name: UPS - on line power
2398 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2399 #    hosts: franck
2400 #    depends: process - UPS - nut upsd
2401   # }}}
2402   # {{{ buildd
2403   -
2404     name: process - buildd
2405     servicegroups: buildd
2406     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2407     hosts: fano, finzi, fils, fayrfax
2408     contact_groups: buildd
2409   -
2410     name: process - buildd
2411     servicegroups: buildd
2412     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2413     hostgroups: buildd
2414     excludehosts: fano, finzi, fils, fayrfax
2415     contact_groups: buildd
2416   -
2417     name: processes - zombie schroot
2418     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2419     hostgroups: buildd
2420     contact_groups: +buildd
2421     normal_check_interval: 5
2422     max_check_attempts: 24
2423     retry_check_interval: 5
2424   -
2425     name: processes - lvcreate
2426     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2427     hostgroups: buildd
2428     contact_groups: +buildd
2429   # }}}
2430   # {{{ NFS Stuff
2431   -
2432     name: process - statd
2433     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2434     hostgroups: nfs-client, nfs-server
2435   -
2436     name: process - nfsd
2437     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2438     hostgroups: nfs-server
2439   -
2440     name: process - lockd
2441     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2442     hostgroups: nfs-server
2443   -
2444     name: process - mountd
2445     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2446     hostgroups: nfs-server
2447   #
2448   -
2449     name: process - automount
2450     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2451     hostgroups: autofs
2452   -
2453     name: unwanted process - automount
2454     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2455     hostgroups: computers
2456     excludehostgroups: autofs
2457   # }}}
2458   # {{{ mirroring
2459   -
2460     name: mirror sync - bugs
2461     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2462     hosts: global
2463   -
2464     name: mirror sync - security
2465     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2466     hosts: global
2467   -
2468     name: mirror sync - packages
2469     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2470     hosts: global
2471     normal_check_interval: 15
2472     max_check_attempts: 5
2473     retry_check_interval: 5
2474   -
2475     name: mirror sync - snapshot
2476     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2477     hosts: global
2478     normal_check_interval: 15
2479     max_check_attempts: 5
2480     retry_check_interval: 5
2481   # }}}
2482   # {{{ DNS
2483   -
2484     name: process - named
2485     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2486     hostgroups: bind9-hosts
2487   -
2488     name: network service - dns
2489     check: check_dns
2490     hostgroups: bind9-hosts
2491     depends: process - named
2492   -
2493     name: unwanted process - named
2494     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2495     hostgroups: computers
2496     excludehostgroups: bind9-hosts
2497   ###
2498   -
2499     name: DNS SOA sync - debian.org
2500     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2501     hosts: global
2502   -
2503     name: DNS SOA sync - debian.net
2504     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2505     hosts: global
2506   -
2507     name: DNS SOA sync - debian.com
2508     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2509     hosts: global
2510   -
2511     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2512     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2513     hosts: global
2514   -
2515     name: DNS SOA sync - alioth.debian.org
2516     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2517     hosts: global
2518   -
2519     name: DNS - delegation and signature expiry
2520     hosts: global
2521     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2522     runfrom: denis
2523   -
2524     name: DNS - security delegations
2525     hosts: global
2526     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2527     runfrom: denis
2528   -
2529     name: DNS - key coverage
2530     hosts: global
2531     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2532     runfrom: denis
2533   -
2534     name: DNS - DS expiry
2535     hosts: global
2536     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2537     runfrom: denis
2538   # }}}
2539   # {{{ storage
2540   -
2541     name: ping alive check
2542     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2543     runfrom: dijkstra
2544     hosts: giustini
2545     normal_check_interval: 5
2546     max_check_attempts: 4
2547     retry_check_interval: 1
2548   -
2549     name: Overall Unit Status
2550     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2551     runfrom: dijkstra
2552     hosts: giustini
2553   -
2554     name: event log
2555     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2556     runfrom: dijkstra
2557     hosts: giustini
2558   # }}}
2559   # {{{ porterbox
2560   -
2561     name: current chroots
2562     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2563     hostgroups: porterbox
2564     normal_check_interval:  60
2565     retry_check_interval: 15
2566   # }}}
2567   # {{{ openstack
2568   -
2569     name: process - openstack - memcached
2570     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2571     hostgroups: openstack-controller
2572   -
2573     name: process - openstack - glance-registry
2574     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2575     hostgroups: openstack-controller
2576   -
2577     name: process - openstack - nova-api
2578     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2579     hostgroups: openstack-controller
2580   -
2581     name: process - openstack - nova-compute
2582     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2583     hostgroups: openstack-compute
2584   -
2585     name: process - openstack - nova-cert
2586     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2587     hostgroups: openstack-controller
2588   -
2589     name: process - openstack - nova-conductor
2590     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2591     hostgroups: openstack-controller
2592   -
2593     name: process - openstack - nova-consoleauth
2594     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2595     hostgroups: openstack-controller
2596   -
2597     name: process - openstack - nova-scheduler
2598     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2599     hostgroups: openstack-controller
2600   -
2601     name: process - openstack - nova-spicehtml5proxy
2602     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2603     hostgroups: openstack-controller
2604   -
2605     name: process - openstack - neutron-server
2606     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2607     hostgroups: openstack-controller
2608   # }}}
2609   # {{{ misc
2610   -
2611     name: process - rngd
2612     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2613     hostgroups: dl385
2614   ###
2615   -
2616     name: process - slapd
2617     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2618     hosts: draghi
2619   -
2620     name: network service - ldaps cert
2621     check: dsa_check_cert!636
2622     depends: process - slapd
2623     normal_check_interval: 60
2624     hosts: draghi
2625   ###
2626   -
2627     name: network service - finger
2628     check: check_tcp!79
2629     hosts: draghi
2630     depends: process - xinetd
2631   ###
2632   -
2633     name: network service - rsync
2634     check: check_tcp!873
2635     hostgroups: rsyncd-hosts
2636     depends: process - xinetd
2637     excludehosts: rietz
2638   -
2639     name: network service - rsync
2640     check: check_tcp!873
2641     hosts: rietz2
2642     depends: rietz:process - xinetd
2643   -
2644     name: network service - rsync
2645     check: check_tcp!873
2646     hosts: milanollo2
2647     depends: milanollo:process - xinetd
2648   ###
2649   -
2650     name: process - icinga
2651     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2652     hosts: tchaikovsky
2653   ###
2654   -
2655     name: process - jetty - master
2656     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2657     hostgroups: jetty-hosts
2658   -
2659     name: process - jetty - worker
2660     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2661     hostgroups: jetty-hosts
2662     depends: process - jetty - master
2663   ###
2664   -
2665     name: process - debianqueued
2666     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2667     hostgroups: uploadqueue
2668   ####
2669   -
2670     name: network service - gobby
2671     check: check_tcp!6523
2672     hosts: gombert
2673     contact_groups: gobby
2674   ####
2675   -
2676     name: network service - sip-tls cert - 443
2677     check: dsa_check_cert!443
2678     normal_check_interval: 60
2679     hosts: vogler
2680   -
2681     name: network service - sip-tls cert - 5061
2682     check: dsa_check_cert!5061
2683     normal_check_interval: 60
2684     hosts: vogler
2685   ####
2686   -
2687     name: puppetmaster cert
2688     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2689     hosts: handel
2690     normal_check_interval: 60
2691     max_check_attempts: 2
2692     retry_check_interval: 5
2693   # }}}
2694 # }}}
2695
2696 # vim: set ts=2 sw=2 et ai si fdm=marker: