c5dbbc32fa803f819ee8098f2745e0d414191e4d
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-bytemark:
37     address: 89.16.160.116
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-c3sl:
41     address: 200.17.202.254
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-cecsit:
45     address: 150.203.164.38
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-arm:
49     address: 213.104.121.213
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-brown:
53     address: 138.16.160.1
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-carnet:
57     address: 161.53.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-conova:
61     address: 217.196.149.238
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-csail:
65     address: 128.31.0.1
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-dgi:
69     address: 93.94.132.102
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72     contacts: bzed
73   gw-freenet:
74     address: 62.104.23.249
75     parents: gw-ubcece
76     hostgroups: layer3-infrastructure
77   gw-ftcollins:
78     address: 192.25.206.1
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-man-da:
102     address: 82.195.75.126
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-marist:
106     address: 148.100.88.1
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-osuosl:
110     address: 140.211.166.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-rapidswitch:
114     address: 193.201.200.129
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-sanger:
118     address: 193.62.202.20
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121     contacts: tjrc1, dave
122   gw-scanplus-lobos:
123     address: 212.211.132.249
124     parents: gw-ubcece
125     hostgroups: layer3-infrastructure
126   gw-scanplus-villa:
127     address: 212.211.132.1
128     parents: gw-ubcece
129     hostgroups: layer3-infrastructure
130   gw-sil:
131     address: 86.59.118.145
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-ubcece:
135     address: 206.12.19.254
136     hostgroups: layer3-infrastructure
137     contacts: lfilipoz
138   gw-ugent:
139     address: 193.191.17.50
140     parents: gw-ubcece
141     hostgroups: layer3-infrastructure
142   gw-umn:
143     address: 128.101.240.222
144     parents: gw-ubcece
145     hostgroups: layer3-infrastructure
146   gw-utwente:
147     address: 130.89.149.1
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-ynic:
151     # really janet, because ynic is stupid about firewalling
152     #address: 146.97.42.26
153     address: 146.97.41.66
154     parents: gw-ubcece
155     hostgroups: layer3-infrastructure
156   gw-zivit:
157     address: 80.245.144.3
158     parents: gw-ubcece
159     hostgroups: layer3-infrastructure
160   # }}}
161   # {{{ servers
162   # {{{ gw-1und1
163   powell:
164     address: 87.106.64.223
165     parents: gw-1und1
166     hostgroups: computers, service, acpid-hosts, wheezy
167   pkgmirror-1and1:
168     address: 213.165.95.4
169     parents: powell
170     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
171   babin:
172     address: 213.165.95.6
173     parents: powell
174     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
175   # }}}
176   # {{{ gw-1und1-sec
177   schumann:
178     address: 212.227.126.54
179     parents: gw-1und1-sec
180     hostgroups: computers, acpid-hosts, service, wheezy
181   chopin:
182     address: 195.20.242.124
183     parents: schumann
184     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
185   geo3:
186     address: 195.20.242.125
187     parents: schumann
188     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
189   soler:
190     address: 195.20.242.126
191     parents: schumann
192     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
193   wieck:
194     address: 195.20.242.89
195     parents: gw-1und1-sec
196     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
197   # }}}
198   # {{{ gw-accumu
199   pettersson:
200     address: 130.239.18.123
201     parents: gw-accumu
202     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
203   praetorius:
204     address: 130.239.18.121
205     parents: gw-accumu
206     hostgroups: computers, buildd, hassrvfs, wheezy
207   # }}}
208   # {{{ gw-arm
209   abel:
210     address: 217.140.96.56
211     parents: gw-arm
212     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
213   antheil:
214     address: 217.140.96.60
215     parents: gw-arm
216     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
217   arnold:
218     address: 217.140.96.57
219     parents: gw-arm
220     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
221   arm-arm-01:
222     address: 217.140.96.58
223     parents: gw-arm
224     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
225   arm-arm-02:
226     address: 217.140.96.59
227     parents: gw-arm
228     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
229   harris:
230     address: 217.140.96.66
231     parents: gw-arm
232     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
233   hartmann:
234     address: 217.140.96.67
235     parents: gw-arm
236     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
237   hasse:
238     address: 217.140.96.68
239     parents: gw-arm
240     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
241   henze:
242     address: 217.140.96.70
243     parents: gw-arm
244     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
245   hoiby:
246     address: 217.140.96.71
247     parents: gw-arm
248     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
249   # }}}
250   # {{{ gw-brown
251   franck:
252     address: 138.16.160.12
253     parents: gw-brown
254     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
255   # }}}
256   # {{{ gw-bytemark
257   bm-bl1:
258     address: 5.153.231.241
259     parents: gw-bytemark
260     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
261   bm-bl2:
262     address: 5.153.231.242
263     parents: gw-bytemark
264     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
265   bm-bl3:
266     address: 5.153.231.243
267     parents: gw-bytemark
268     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
269   bm-bl4:
270     address: 5.153.231.244
271     parents: gw-bytemark
272     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
273   bm-bl5:
274     address: 5.153.231.245
275     parents: gw-bytemark
276     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
277   bm-bl6:
278     address: 5.153.231.246
279     parents: gw-bytemark
280     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
281   bm-bl7:
282     address: 5.153.231.247
283     parents: gw-bytemark
284     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
285   bm-bl8:
286     address: 5.153.231.248
287     parents: gw-bytemark
288     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
289   bm-bl9:
290     address: 5.153.231.249
291     parents: gw-bytemark
292     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
293   bm-bl10:
294     address: 5.153.231.250
295     parents: gw-bytemark
296     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
297   bm-bl11:
298     address: 5.153.231.251
299     parents: gw-bytemark
300     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
301   bm-bl12:
302     address: 5.153.231.252
303     parents: gw-bytemark
304     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
305
306   milanollo:
307     address: 5.153.231.2
308     parents: gw-bytemark
309     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
310   milanollo2:
311     address: 5.153.231.9
312     parents: milanollo
313     hostgroups: secondary-IPs
314   picconi:
315     address: 5.153.231.3
316     parents: gw-bytemark
317     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
318   senfter:
319     address: 5.153.231.4
320     parents: gw-bytemark
321     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
322   adayevskaya:
323     address: 5.153.231.5
324     parents: gw-bytemark
325     hostgroups: computers, service, kvmdomains, wheezy
326   pejacevic:
327     address: 5.153.231.6
328     parents: gw-bytemark
329     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
330     contacts: holger
331   piu-slave-bm-a:
332     address: 5.153.231.7
333     parents: gw-bytemark
334     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
335     contacts: holger
336   binet:
337     address: 5.153.231.8
338     parents: gw-bytemark
339     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
340   bmdb1:
341     address: 5.153.231.10
342     parents: gw-bytemark
343     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
344   ganeti-bytemark:
345     address: 82.195.75.111
346     parents: gw-bytemark
347     hostgroups: notacomputer
348   coccia:
349     address: 5.153.231.11
350     parents: ganeti-bytemark
351     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client, uploadqueue, xinetd-hosts
352   backuphost:
353     address: 5.153.231.12
354     parents: ganeti-bytemark
355     hostgroups: computers, hassrvfs, kvmdomains, wheezy
356   philp:
357     address: 5.153.231.13
358     parents: ganeti-bytemark
359     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
360   couper:
361     address: 5.153.231.14
362     parents: ganeti-bytemark
363     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
364   rainier:
365     address: 5.153.231.16
366     parents: ganeti-bytemark
367     hostgroups: computers, kvmdomains, wheezy, no-bacula
368   rapoport:
369     address: 5.153.231.15
370     parents: ganeti-bytemark
371     hostgroups: computers, kvmdomains, wheezy, no-bacula
372   delfin:
373     address: 5.153.231.17
374     parents: ganeti-bytemark
375     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
376   wuiet:
377     address: 5.153.231.18
378     parents: ganeti-bytemark
379     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
380   dinis:
381     address: 5.153.231.19
382     parents: ganeti-bytemark
383     hostgroups: computers, general, kvmdomains, wheezy
384   donizetti:
385     address: 5.153.231.20
386     parents: ganeti-bytemark
387     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
388   moszumanska:
389     address: 5.153.231.21
390     parents: ganeti-bytemark
391     contact_groups: alioth-admins
392     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
393     no-servicegroups: true
394   dillon:
395     address: 5.153.231.22
396     parents: ganeti-bytemark
397     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
398   ticharich:
399     address: 5.153.231.23
400     parents: ganeti-bytemark
401     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service
402   petrova:
403     address: 5.153.231.25
404     parents: ganeti-bytemark
405     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
406   oyens:
407     address: 5.153.231.26
408     parents: ganeti-bytemark
409     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
410   barriere:
411     address: 5.153.231.27
412     parents: ganeti-bytemark
413     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
414   quantz:
415     address: 5.153.231.28
416     parents: ganeti-bytemark
417     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
418   portman:
419     address: 5.153.231.29
420     parents: ganeti-bytemark
421     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
422   paradis:
423     address: 5.153.231.30
424     parents: ganeti-bytemark
425     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
426   # }}}
427   # {{{ gw-c3sl
428   santoro:
429     address: 200.17.202.197
430     parents: gw-c3sl
431     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
432     contacts: faw
433   # }}}
434   # {{{ gw-carnet
435   lebrun:
436     address: 193.198.184.10
437     parents: gw-carnet
438     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
439   schroeder:
440     address: 193.198.184.11
441     parents: gw-carnet
442     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
443   # }}}
444   # {{{ gw-cecsit
445   gluck:
446     address: 150.203.164.38
447     parents: gw-cecsit
448     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
449   # }}}
450   # {{{ gw-conova
451   sompek:
452     address: 217.196.149.225
453     parents: gw-conova
454     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
455   stadler:
456     address: 217.196.149.226
457     parents: gw-conova
458     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
459   # }}}
460   # {{{ gw-csail
461   senfl:
462     address: 128.31.0.51
463     parents: gw-csail
464     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
465   steffani:
466     address: 128.31.0.36
467     parents: gw-csail
468     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
469   # }}}
470   # {{{ gw-dgi
471   storace:
472     address: 93.94.130.161
473     parents: gw-dgi
474     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
475   # }}}
476   # {{{ gw-ftcollins
477   #alkman:
478   #  address: 192.25.206.63
479   #  parents: gw-ftcollins
480   #  hostgroups: computers, buildd, acpid-hosts, wheezy
481   #mundy:
482   #  address: 192.25.206.62
483   #  parents: gw-ftcollins
484   #  hostgroups: computers, buildd, hassrvfs, sw-raid, acpid-hosts, wheezy
485   spohr:
486     address: 192.25.206.33
487     parents: gw-ftcollins
488     hostgroups: computers, service, dl380, apache2-hosts, wheezy, no-bacula
489   # }}}
490   # {{{ gw-gatech
491   sechter:
492     address: 128.61.240.73
493     parents: gw-gatech
494     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
495   # }}}
496   # {{{ gw-grnet
497   barber:
498     address: 194.177.211.203
499     parents: gw-grnet
500     hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, wheezy
501   biber:
502     address: 194.177.211.204
503     parents: gw-grnet
504     hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, wheezy
505   rautavaara:
506     address: 194.177.211.199
507     parents: gw-grnet
508     hostgroups: computers, acpid-hosts, megaraid, service, squeeze, nfs-server
509   vitry:
510     address: 194.177.211.206
511     parents: gw-grnet
512     hostgroups: computers, acpid-hosts, mptraid, no-bacula, wheezy
513   # }}}
514   # {{{ gw-isc
515   schein:
516     address: 149.20.20.6
517     parents: gw-isc
518     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
519   # }}}
520   # {{{ gw-leaseweb
521   lw01:
522     address: 185.17.185.177
523     parents: gw-leaseweb
524     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
525   lw02:
526     address: 185.17.185.178
527     parents: gw-leaseweb
528     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
529   lw03:
530     address: 185.17.185.179
531     parents: gw-leaseweb
532     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
533   lw04:
534     address: 185.17.185.180
535     parents: gw-leaseweb
536     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
537   lw07:
538     address: 185.17.185.187
539     parents: gw-leaseweb
540     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs, postgres91-hosts, apache2-hosts
541   lw08:
542     address: 185.17.185.189
543     parents: gw-leaseweb
544     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-client, autofs, hassrvfs
545   #, apache2-hosts
546   # }}}
547   # {{{ gw-karlsruhe
548   zemlinsky:
549     address: 129.143.160.6
550     parents: gw-karlsruhe
551     hostgroups: computers, buildd, wheezy
552     contacts: pkern
553   # }}}
554   # {{{ gw-man-da
555   ball:
556     address: 82.195.75.70
557     parents: gw-man-da
558     hostgroups: computers, buildd, hasbootfs, wheezy
559   # bartok TODO
560   czerny:
561     address: 82.195.75.109
562     parents: gw-man-da
563     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
564   clementi:
565     address: 82.195.75.103
566     parents: gw-man-da
567     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
568   bendel:
569     address: 82.195.75.100
570     parents: ganeti3
571     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
572   master:
573     address: 82.195.75.110
574     parents: ganeti3
575     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
576   mipsel-manda-01:
577     address: 82.195.75.72
578     parents: gw-arm
579     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
580   mipsel-manda-02:
581     address: 82.195.75.74
582     parents: gw-arm
583     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy
584   fils:
585     address: 82.195.75.89
586     parents: ganeti3
587     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
588     contacts: christoph
589   fayrfax:
590     address: 82.195.75.82
591     parents: ganeti3
592     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
593     contacts: christoph
594   vento:
595     address: 82.195.75.98
596     parents: ganeti3
597     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
598   lully:
599     address: 82.195.75.99
600     parents: ganeti3
601     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
602   rem:
603     address: 82.195.75.68
604     parents: gw-man-da
605     hostgroups: computers, buildd, hasbootfs, hassrvfs, wheezy
606   unger:
607     address: 82.195.75.102
608     parents: gw-man-da
609     hostgroups: computers, service, dl360, acpid-hosts, wheezy
610   draghi:
611     address: 82.195.75.106
612     parents: ganeti3
613     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
614   geo1:
615     address: 82.195.75.105
616     parents: ganeti3
617     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
618   handel:
619     address: 82.195.75.104
620     parents: ganeti3
621     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
622   kaufmann:
623     address: 82.195.75.107
624     parents: ganeti3
625     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
626   stockhausen:
627     address: 82.195.75.108
628     parents: ganeti3
629     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
630   ganeti3:
631     address: 82.195.75.111
632     parents: gw-man-da
633     hostgroups: notacomputer
634   wilder:
635     address: 82.195.75.112
636     parents: ganeti3
637     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
638   mailly:
639     address: 82.195.75.114
640     parents: ganeti3
641     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
642   denis:
643     address: 82.195.75.91
644     parents: ganeti3
645     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
646   vogler:
647     address: 82.195.75.92
648     parents: ganeti3
649     hostgroups: computers, service, kvmdomains, wheezy
650   mipsel-manda-01:
651     address: 82.195.75.72
652     parents: gw-man-da
653     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
654   mipsel-manda-02:
655     address: 82.195.75.74
656     parents: gw-man-da
657     hostgroups: computers, buildd, wheezy, hassrvfs, sw-raid
658   # }}}
659   # {{{ gw-marist
660   zani:
661     address: 148.100.88.22
662     parents: gw-marist
663     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
664   # }}}
665   # {{{ gw-osuosl
666   busoni:
667     address: 140.211.15.34
668     parents: gw-osuosl
669     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
670   byrd:
671     address: 140.211.166.20
672     parents: gw-osuosl
673     hostgroups: computers, service, dl380, acpid-hosts, wheezy
674   buxtehude:
675     address: 140.211.166.26
676     parents: byrd
677     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
678   # malo TODO
679   mayer:
680     address: 140.211.166.78
681     parents: gw-osuosl
682     hostgroups: computers, buildd, hasbootfs, wheezy
683 #  mayr:
684 #    address: 140.211.166.58
685 #    parents: gw-osuosl
686 #    hostgroups: computers, buildd, hasbootfs
687   merulo:
688     address: 140.211.166.46
689     parents: gw-osuosl
690     hostgroups: computers, porterbox, hasusrfs, wheezy
691   parry:
692     address: 140.211.15.153
693     parents: gw-osuosl
694     hostgroups: computers, wheezy, buildd, hassrvfs
695   partch:
696     address: 140.211.15.152
697     parents: gw-osuosl
698     hostgroups: computers, wheezy, hassrvfs, porterbox
699   rietz:
700     address: 140.211.166.43
701     parents: gw-osuosl
702     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
703     #, bosserver
704   rietz2:
705     address: 140.211.166.44
706     parents: rietz
707     hostgroups: secondary-IPs
708   # zee TODO
709   # }}}
710   # {{{ gs-rapidswitch
711   caballero:
712     address: 193.201.200.200
713     parents: gw-rapidswitch
714     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
715   # }}}
716   # {{{ gw-sanger
717   sibelius:
718     address: 193.62.202.28
719     parents: gw-sanger
720     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts, hasvarlogfs
721     contacts: tjrc1, dave
722   smetana:
723     address: 193.62.202.29
724     parents: gw-sanger
725     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
726     contacts: tjrc1, dave
727   # }}}
728   # {{{ gw-scanplus
729   lobos:
730     address: 212.211.132.250
731     parents: gw-scanplus-lobos
732     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
733   villa:
734     address: 212.211.132.32
735     parents: gw-scanplus-villa
736     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
737   # }}}
738   # {{{ gw-sil
739   beethoven:
740     address: 86.59.118.146
741     parents: gw-sil
742     hostgroups: computers, hasbootfs, aacraid, service, acpid-hosts, wheezy
743   eder:
744     address: 86.59.118.151
745     parents: gw-sil
746     hostgroups: computers, porterbox, wheezy, hassrvfs
747   eysler:
748     address: 86.59.118.152
749     parents: gw-sil
750     hostgroups: computers, buildd, wheezy
751   eberlin:
752     address: 86.59.118.155
753     parents: gw-sil
754     hostgroups: computers, buildd, wheezy
755   # }}}
756   # {{{ gw-ubcece
757   sw-ubcece:
758     hostgroups: layer2-infrastructure
759     contacts: lfilipoz
760     pingable: false
761     check_command: dsa_check_always_ok
762   sw-ubcece-mcld:
763     hostgroups: layer2-infrastructure
764     parents: sw-ubcece
765     contacts: lfilipoz
766     pingable: false
767     check_command: dsa_check_always_ok
768   sw-ubcece-kais:
769     hostgroups: layer2-infrastructure
770     parents: sw-ubcece
771     contacts: lfilipoz
772     pingable: false
773     check_command: dsa_check_always_ok
774   spontini:
775     address: 206.12.19.14
776     parents: sw-ubcece-mcld
777     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
778     contacts: lfilipoz
779   ravel:
780     address: 206.12.19.5
781     parents: sw-ubcece-kais
782     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, hasorgfs, wheezy, autofs
783   dijkstra:
784     address: 206.12.19.218
785     parents: sw-ubcece-kais
786     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
787   pasquini:
788     address: 206.12.19.217
789     parents: sw-ubcece-kais
790     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
791   luchesi:
792     address: 206.12.19.214
793     parents: sw-ubcece-kais
794     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
795   tristano:
796     address: 206.12.19.213
797     parents: sw-ubcece-kais
798     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
799   boito:
800     address: 206.12.19.216
801     parents: sw-ubcece-kais
802     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
803   bertali:
804     address: 206.12.19.212
805     parents: sw-ubcece-kais
806     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
807   ganeti2:
808     address: 206.12.19.23
809     parents: sw-ubcece-kais
810     hostgroups: notacomputer
811   tchaikovsky:
812     address: 206.12.19.118
813     parents: ganeti2
814     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
815   wolkenstein:
816     address: 206.12.19.116
817     parents: ganeti2
818     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
819   brahms:
820     address: 206.12.19.115
821     parents: ganeti2
822     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
823   geo2:
824     address: 206.12.19.113
825     parents: ganeti2
826     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
827   stabile:
828     address: 206.12.19.13
829     parents: sw-ubcece-kais
830     hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs
831   # MSA 2000 (2012i)
832   giustini:
833     address: 192.168.2.6
834     parents: dijkstra
835     hostgroups: notacomputer
836     # unless we implement runfrom for host alive checks
837     pingable: false
838     check_command: dsa_check_always_ok
839   falla:
840     address: 206.12.19.117
841     parents: ganeti2
842     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
843   fano:
844     address: 206.12.19.110
845     parents: ganeti2
846     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
847     contacts: christoph
848   finzi:
849     address: 206.12.19.111
850     parents: ganeti2
851     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
852     contacts: christoph
853   fischer:
854     address: 206.12.19.112
855     parents: ganeti2
856     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
857   gabrielli:
858     address: 206.12.19.17
859     parents: sw-ubcece-kais
860     hostgroups: computers, porterbox, wheezy
861   corelli:
862     address: 206.12.19.16
863     parents: sw-ubcece-kais
864     hostgroups: computers, buildd, wheezy
865   lucatelli:
866     address: 206.12.19.15
867     parents: sw-ubcece-kais
868     hostgroups: computers, buildd, wheezy
869   rossini:
870     address: 206.12.19.19
871     parents: sw-ubcece-kais
872     hostgroups: computers, dl585, acpid-hosts, service, wheezy
873   salieri:
874     address: 206.12.19.20
875     parents: sw-ubcece-kais
876     hostgroups: computers, dl585, acpid-hosts, service, wheezy
877   traetta:
878     address: 206.12.19.21
879     parents: sw-ubcece-kais
880     hostgroups: computers, dl585, acpid-hosts, service, wheezy
881 #  locke:
882 #    address: 206.12.19.120
883 #    parents: sw-ubcece-kais
884 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
885   lotti:
886     address: 206.12.19.121
887     parents: sw-ubcece-kais
888     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
889   nono:
890     address: 206.12.19.123
891     parents: traetta
892     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
893   reger:
894     address: 206.12.19.124
895     parents: ganeti2
896     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
897   danzi:
898     address: 206.12.19.125
899     parents: ganeti2
900     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
901   glinka:
902     address: 206.12.19.126
903     parents: traetta
904     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
905   tye:
906     address: 206.12.19.129
907     parents: ganeti2
908     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
909   elgar:
910     address: 206.12.19.130
911     parents: salieri
912     hostgroups: computers, service, kvmdomains, wheezy
913   gombert:
914     address: 206.12.19.132
915     parents: ganeti2
916     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
917   jenkins:
918     address: 206.12.19.133
919     parents: salieri
920     hostgroups: computers, service, kvmdomains, wheezy
921   blavet:
922     address: 206.12.19.134
923     parents: ganeti2
924     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
925   diabelli:
926     address: 206.12.19.136
927     parents: traetta
928     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
929   bizet:
930     address: 206.12.19.137
931     parents: ganeti2
932     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
933   lilburn:
934     address: 206.12.19.138
935     parents: ganeti2
936     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
937   popov:
938     address: 206.12.19.119
939     parents: ganeti2
940     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
941   beach:
942     address: 206.12.19.140
943     parents: ganeti2
944     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
945   ullmann:
946     address: 206.12.19.141
947     parents: ganeti2
948     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
949   sonntag:
950     address: 206.12.19.142
951     parents: ganeti2
952     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
953   menotti:
954     address: 206.12.19.143
955     parents: ganeti2
956     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
957   muffat:
958     address: 206.12.19.146
959     parents: ganeti2
960     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
961   # }}}
962   # {{{ gw-ugent
963   ancina:
964     address: 157.193.39.13
965     parents: gw-ugent
966     hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, wheezy
967     contacts: luk
968   # }}}
969   # {{{ gw-umn
970   saens:
971     address: 128.101.240.212
972     parents: gw-umn
973     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
974   # }}}
975   # {{{ gw-utwente
976   klecker:
977     address: 130.89.148.10
978     parents: gw-utwente
979     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
980   klecker-ftp:
981     address: 130.89.148.12
982     parents: klecker
983     hostgroups: secondary-IPs
984   klecker-archive:
985     address: 130.89.148.13
986     parents: klecker
987     hostgroups: secondary-IPs
988   klecker-static:
989     address: 130.89.148.14
990     parents: klecker
991     hostgroups: secondary-IPs
992   # }}}
993   # {{{ gw-ynic
994   howells:
995     address: 144.32.168.75
996     parents: gw-ynic
997     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
998   hummel:
999     address: 144.32.168.76
1000     parents: gw-ynic
1001     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
1002   porpora:
1003     address: 144.32.168.78
1004     parents: gw-ynic
1005     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1006   poulenc:
1007     address: 144.32.168.77
1008     parents: gw-ynic
1009     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
1010   # }}}
1011   # {{{ gw-zivit
1012   zandonai:
1013     address: 80.245.147.46
1014     parents: gw-zivit
1015     hostgroups: computers, buildd, hassrvfs, wheezy
1016   zelenka:
1017     address: 80.245.147.40
1018     parents: gw-zivit
1019     hostgroups: computers, porterbox, hassrvfs, wheezy
1020   # }}}
1021   # }}}
1022
1023 # {{{ ############################# host groups #############################
1024 hostgroups:
1025   computers:
1026     alias: computers
1027     private: 1
1028   layer2-infrastructure:
1029     alias: Layer 2 Devices
1030     extinfo-icon_image: base/switch40.png
1031     extinfo-icon_image_alt: switch
1032   layer3-infrastructure:
1033     alias: Layer 3 Devices
1034     extinfo-icon_image: base/switch40.png
1035     extinfo-icon_image_alt: router
1036   notacomputer:
1037     alias: Systems that are not really systems.  Yeah :)
1038     private: 1
1039   freebsd:
1040     alias: freebsd
1041     private: 1
1042   armhf:
1043     alias: armhf
1044     private: 1
1045   sparc:
1046     alias: sparc
1047     private: 1
1048
1049   porterbox:
1050     alias: developer accessible porter machines
1051     extinfo-icon_image: base/debian.png
1052     extinfo-icon_image_alt: Debian GNU/Linux
1053     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1054   service:
1055     alias: machines running services
1056     extinfo-icon_image: base/debian.png
1057     extinfo-icon_image_alt: Debian GNU/Linux
1058     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1059   buildd:
1060     alias: buildd systems
1061     extinfo-icon_image: base/debian.png
1062     extinfo-icon_image_alt: Debian GNU/Linux
1063     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1064   general:
1065     alias: general purpose developer accessible machines
1066     extinfo-icon_image: base/debian.png
1067     extinfo-icon_image_alt: Debian GNU/Linux
1068     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1069
1070   dl380:
1071     alias: HP DL380 hosts
1072     private: 1
1073   dl385:
1074     alias: HP DL385 hosts
1075     private: 1
1076   dl360:
1077     alias: HP DL360 hosts
1078     private: 1
1079   bl460:
1080     alias: HP BL460 blades
1081     private: 1
1082   bm-bl:
1083     alias: HP blades at bytemark
1084     private: 1
1085   dl585:
1086     alias: HP DL385 hosts
1087     private: 1
1088   dl180:
1089     alias: HP DL180
1090     private: 1
1091   dl120:
1092     alias: HP DL120
1093     private: 1
1094   sw-raid:
1095     alias: Hosts with Linux software raid
1096     private: 1
1097   aacraid:
1098     alias: Hosts with Adaptec AACraid
1099     private: 1
1100   megaraid:
1101     alias: Hosts with LSI Logic MegaRAID
1102     private: 1
1103   mptraid:
1104     alias: Hosts with LSI Logic Fusion-MPT
1105     private: 1
1106
1107   squeeze:
1108     alias: Hosts running squeeze
1109   wheezy:
1110     alias: Hosts running wheezy
1111
1112   kvmdomains:
1113     alias: Hosts that are KVM domains
1114     private: 1
1115
1116   drbd-hosts:
1117     alias: hosts running drbd
1118   postfix-hosts:
1119     alias: hosts running postfix instead of exim
1120     private: 1
1121   heavy-exim:
1122     alias: "hosts running the full mail stuff, including clamav and postgrey"
1123     private: 1
1124   mail-relay:
1125     alias: "relays usually are hosts with more exim processes"
1126     private: 1
1127   spamd:
1128     alias: "hosts running spamassassin as daemon"
1129     private: 1
1130   heavy-postfix:
1131     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1132     private: 1
1133   apache2-hosts:
1134     alias: hosts running apache2
1135     private: 1
1136   jetty-hosts:
1137     alias: hosts running jetty
1138     private: 1
1139   bind9-hosts:
1140     alias: hosts running bind9
1141     private: 1
1142   # once every host runs unbound, do away with this group and check "computers" instead
1143   amavis-hosts:
1144     alias: hosts running amavis
1145     private: 1
1146   rsyncd-hosts:
1147     alias: hosts providing rsync services via xinetd
1148     private: 1
1149   xinetd-hosts:
1150     alias: hosts providing services via xinetd
1151     private: 1
1152   postgres91-hosts:
1153     alias: hosts running postgres91
1154     private: 1
1155   no-ulogd:
1156     alias: hosts not running ulogd
1157     private: 1
1158   acpid-hosts:
1159     alias: hosts running acpid
1160     private: 1
1161   uploadqueue:
1162     alias: hosts that are an anonymous ftp uploadqueue
1163     private: 1
1164   bosserver:
1165     alias: hosts running bosserver
1166     private: 1
1167   apache-https:
1168     alias: hosts with https services
1169     private: 1
1170   broken_https_default_vhost:
1171     alias: https default vhost does not say 200 OK
1172     private: 1
1173
1174   no-bacula:
1175     alias: hosts which are not being backed up with bacula
1176     private: 1
1177
1178   nfs-client:
1179     alias: hosts mounting filesystems using NFS
1180     private: 1
1181   nfs-server:
1182     alias: hosts serving filesystems using NFS
1183     private: 1
1184   autofs:
1185     alias: hosts running the automounter
1186     private: 1
1187
1188   highload:
1189     alias: "hosts on which high load is normal"
1190     private: 1
1191
1192   secondary-IPs:
1193     alias: secondary IP addresses
1194     private: 1
1195
1196   hasbootfs:
1197     alias: hosts with a /boot filesystem
1198     private: 1
1199   hassrvfs:
1200     alias: hosts with a /srv filesystem
1201     private: 1
1202   hasorgfs:
1203     alias: hosts with a /org filesystem
1204     private: 1
1205   hashomefs:
1206     alias: hosts with a /home filesystem
1207     private: 1
1208   hasvarfs:
1209     alias: hosts with a /var filesystem
1210     private: 1
1211   hasvarlogfs:
1212     alias: hosts with a /var/log filesystem
1213     private: 1
1214   hasusrfs:
1215     alias: hosts with a /usr filesystem
1216     private: 1
1217
1218   incomingmailrelayed:
1219     alias: incoming mail needs to go through a mail relay
1220     # i.e. no port 25
1221     private: 1
1222   incomingmailrelayed2025:
1223     alias: incoming mail needs to go through a mail relay
1224     # i.e. no port 25
1225     private: 1
1226
1227   brokensamhain:
1228     alias: machines that can not run samhain
1229     private: 1
1230   high-RTT:
1231     alias: machines with high round trip times
1232     private: 1
1233   ping-suckers:
1234     alias: machines that just suck at icmp
1235     private: 1
1236   alioth:
1237     alias: machines that just are just awkward
1238     private: 1
1239   openstack-compute:
1240     alias: nodes that run OpenStack compute
1241     private: 1
1242   openstack-controller:
1243     alias: nodes that run OpenStack controller
1244     private: 1
1245
1246   security_mirror:
1247     alias: hosts that are security mirrors
1248     private: 1
1249
1250   broken_mq:
1251     alias: hosts whose MQ is broken
1252     private: 1
1253 # }}}
1254 # {{{ ############################# servicegroups #############################
1255 servicegroups:
1256   diskspace:
1257     alias: diskusage checks
1258   buildd:
1259     alias: buildd checks
1260   raid:
1261     alias: raid checks
1262   backup:
1263     alias: backup checks
1264   kernel:
1265     alias: kernel checks
1266   apt:
1267     alias: apt upgrade status
1268   samhain:
1269     alias: samhain integrity status
1270   time:
1271     alias: time stuff
1272   security:
1273     alias: security
1274     servicegroup_members: apt, kernel, samhain
1275   MQ:
1276     alias: rabbitMQ stuff
1277 # }}}
1278 # {{{ ############################# services #############################
1279 services:
1280   # {{{ ### basic networking
1281   -
1282     name: PING
1283     check: "check_ping!350.0,20%!600.0,40%"
1284     hostgroups: pingable
1285     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1286     normal_check_interval: 5
1287     max_check_attempts: 4
1288     retry_check_interval: 1
1289   -
1290     name: PING
1291     check: "check_ping!600.0,20%!900.0,40%"
1292     hostgroups: high-RTT
1293     normal_check_interval: 5
1294     max_check_attempts: 4
1295     retry_check_interval: 1
1296   -
1297     name: PING
1298     check: "check_ping!600.0,90%!900.0,95%"
1299     hostgroups: ping-suckers
1300     normal_check_interval: 5
1301     max_check_attempts: 4
1302     retry_check_interval: 1
1303   -
1304     name: PING
1305     check: "check_ping!2000.0,60%!3000.0,80%"
1306     hostgroups: layer3-infrastructure
1307     normal_check_interval: 5
1308     max_check_attempts: 4
1309     retry_check_interval: 1
1310   # }}}
1311   # {{{ ### disk usage
1312   -
1313     name: disk usage - all
1314     servicegroups: diskspace
1315     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1316     hostgroups: computers
1317     excludehosts: sibelius,stabile
1318   -
1319     name: disk usage - all
1320     servicegroups: diskspace
1321     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 3%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/srv/snapshot.debian.org"
1322     hosts: stabile
1323   -
1324     name: disk usage - all
1325     servicegroups: diskspace
1326     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98"
1327     hosts: sibelius
1328
1329   -
1330     name: disk usage on /
1331     servicegroups: diskspace
1332     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1333     hostgroups: computers
1334     excludehosts: spohr
1335   -
1336     name: disk usage on /
1337     servicegroups: diskspace
1338     nrpe: "/usr/lib/nagios/plugins/check_disk 90 93 /"
1339     hosts: spohr
1340   -
1341     name: disk usage on /boot
1342     servicegroups: diskspace
1343     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1344     hostgroups: hasbootfs
1345   -
1346     name: disk usage on /var
1347     servicegroups: diskspace
1348     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1349     hostgroups: hasvarfs
1350   -
1351     name: disk usage on /org
1352     servicegroups: diskspace
1353     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1354     hostgroups: hasorgfs
1355   -
1356     name: disk usage on /srv
1357     servicegroups: diskspace
1358     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1359     hostgroups: hassrvfs
1360   -
1361     name: disk usage on /tmp
1362     servicegroups: diskspace
1363     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1364     hosts: saens
1365   -
1366     name: disk usage on /usr
1367     servicegroups: diskspace
1368     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1369     hostgroups: hasusrfs
1370   -
1371     name: disk usage on /home
1372     servicegroups: diskspace
1373     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home"
1374     hostgroups: hashomefs
1375   -
1376     name: disk usage on /var/lib/postgresql
1377     servicegroups: diskspace
1378     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1379     hosts: sibelius, busoni, buxtehude, lw07
1380   -
1381     name: disk usage on /var/log
1382     servicegroups: diskspace
1383     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1384     hostgroups: hasvarlogfs
1385   -
1386     name: disk usage on /var/spool/postfix
1387     servicegroups: diskspace
1388     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1389     hosts: bendel
1390   -
1391     name: disk usage on /srv/mirrors
1392     servicegroups: diskspace
1393     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1394     hosts: beethoven, sibelius
1395   -
1396     name: disk usage on /srv/snapshot.debian.org
1397     servicegroups: diskspace
1398     nrpe: "/usr/lib/nagios/plugins/check_disk 98 99 /srv/snapshot.debian.org"
1399     hosts: stabile
1400   -
1401     name: disk usage on /srv/snapshot.debian.org
1402     servicegroups: diskspace
1403     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1404     hosts: sibelius
1405   -
1406     name: disk usage on /srv/farm-snapshot/farm-misc
1407     servicegroups: diskspace
1408     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-misc"
1409     hosts: sibelius
1410   -
1411     name: disk usage on /var/lib/postgresql/9.1
1412     servicegroups: diskspace
1413     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1414     hosts: franck
1415   -
1416     name: disk usage on /srv/ftp-master.debian.org
1417     servicegroups: diskspace
1418     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1419     hosts: franck
1420   -
1421     name: disk usage on /srv/pgbackup
1422     servicegroups: diskspace
1423     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/pgbackup"
1424     hosts: beethoven
1425   -
1426     name: disk usage on /srv/git-backup
1427     servicegroups: diskspace
1428     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/git-backup"
1429     hosts: beethoven
1430   -
1431     name: disk usage on /srv/da-backup
1432     servicegroups: diskspace
1433     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/da-backup"
1434     hosts: beethoven
1435   -
1436     name: disk usage on /srv/bacula
1437     servicegroups: diskspace
1438     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/bacula"
1439     hosts: beethoven
1440   -
1441     name: disk usage on /storage/snapshot-farm-1
1442     servicegroups: diskspace
1443     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1444     hosts: lw01
1445   -
1446     name: disk usage on /storage/snapshot-farm-2
1447     servicegroups: diskspace
1448     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1449     hosts: lw02
1450   -
1451     name: disk usage on /storage/snapshot-farm-3
1452     servicegroups: diskspace
1453     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1454     hosts: lw03
1455   -
1456     name: disk usage on /storage/snapshot-farm-4
1457     servicegroups: diskspace
1458     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1459     hosts: lw04
1460   -
1461     name: disk usage on /srv/morgue.debian.org/
1462     servicegroups: diskspace
1463     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1464     hosts: lw03
1465   # }}}
1466   # {{{ ### system
1467   # {{{ setup
1468   -
1469     name: setup - dsa config
1470     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1471     hostgroups: computers
1472     normal_check_interval: 60
1473     excludehostgroups: alioth
1474   -
1475     name: setup - local hostname etc-hosts
1476     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1477     hostgroups: computers
1478     normal_check_interval: 60
1479   # }}}
1480   # {{{ os health
1481   ####
1482   -
1483     name: users
1484     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1485     hostgroups: computers
1486   -
1487     name: load
1488     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1489     hostgroups: computers
1490     excludehostgroups: highload
1491   -
1492     name: load
1493     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1494     hostgroups: highload
1495   -
1496     name: uptime check
1497     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1498     hostgroups: computers
1499   -
1500     name: processes - total
1501     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1502     hostgroups: computers
1503   -
1504     name: swap usage - percent
1505     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1506     hostgroups: computers
1507   -
1508     name: swap usage - mb
1509     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1510     hostgroups: computers
1511   -
1512     name: process - getty
1513     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1514     hostgroups: computers
1515     excludehosts: zelenka, zandonai
1516   -
1517     name: processes - zombies
1518     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1519     hostgroups: computers
1520   -
1521     name: system - available entropy
1522     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1523     event_handler: dsa_event_handler_restart_ekey
1524     hostgroups: computers
1525     excludehostgroups: freebsd
1526   -
1527     name: system - filesystem check
1528     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1529     normal_check_interval:  60
1530     retry_check_interval: 15
1531     hostgroups: computers
1532   # }}}
1533   # {{{ backup
1534   -
1535     name: backup
1536     servicegroups: backup
1537     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1538     hostgroups: computers
1539     excludehosts: backuphost
1540     normal_check_interval: 60
1541     max_check_attempts: 2
1542     retry_check_interval: 5
1543   -
1544     name: backup server config
1545     servicegroups: backup
1546     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1547     hosts: beethoven, backuphost
1548     normal_check_interval: 60
1549     max_check_attempts: 2
1550     retry_check_interval: 5
1551   -
1552     name: backup - bacula - last backup
1553     servicegroups: backup
1554     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1555     runfrom: dinis
1556     hostgroups: computers
1557     excludehostgroups: buildd, porterbox, no-bacula
1558     normal_check_interval:  60
1559     retry_check_interval: 15
1560   -
1561     name: backup - bacula - last full backup
1562     servicegroups: backup
1563     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1564     runfrom: dinis
1565     hostgroups: computers
1566     excludehostgroups: buildd, porterbox, no-bacula
1567     normal_check_interval:  60
1568     retry_check_interval: 15
1569   -
1570     name: process - bacula-fd
1571     servicegroups: backup
1572     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1573     hostgroups: computers
1574     excludehostgroups: freebsd, alioth
1575   -
1576     name: process - bacula-fd
1577     servicegroups: backup
1578     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1579     hostgroups: freebsd
1580
1581   ####
1582   -
1583     name: process - acc.umu.se backup
1584     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1585     hosts: sibelius
1586   # }}}
1587   # {{{ security
1588   -
1589     name: running kernel
1590     servicegroups: kernel
1591     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1592     hostgroups: computers
1593     normal_check_interval: 60
1594     retry_check_interval: 5
1595   -
1596     name: apt - security updates
1597     servicegroups: apt
1598     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1599     hostgroups: computers
1600     normal_check_interval:  60
1601     retry_check_interval: 15
1602   -
1603     name: installed firewall
1604     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1605     hostgroups: computers
1606     excludehostgroups: freebsd
1607   -
1608     name: puppetized firewall
1609     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1610     hostgroups: computers
1611     excludehostgroups: freebsd
1612   -
1613     name: process - ulogd
1614     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1615     hostgroups: computers
1616     excludehostgroups: freebsd, sparc
1617   -
1618     name: unexpected process - ulogd
1619     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1620     hostgroups: freebsd, sparc
1621   ####
1622   -
1623     name: process - samhain
1624     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1625     hostgroups: computers
1626     excludehostgroups: brokensamhain
1627   -
1628     name: samhain
1629     servicegroups: samhain
1630     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1631     hostgroups: computers
1632     depends: process - samhain
1633     normal_check_interval: 60
1634     retry_check_interval: 5
1635     excludehostgroups: brokensamhain
1636   -
1637     name: processes - samhain zombies
1638     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1639     event_handler: dsa_event_handler_restart_samhain
1640     hostgroups: computers
1641     excludehostgroups: brokensamhain
1642   # }}}
1643   # {{{ logging
1644   -
1645     name: process - syslog-ng
1646     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1647     hostgroups: computers
1648     excludehostgroups: freebsd
1649
1650   -
1651     name: process - syslog-ng
1652     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1653     hostgroups: freebsd
1654
1655   -
1656     name: remote logging on lotti
1657     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1658     runfrom: lotti
1659     hostgroups: computers
1660     excludehostgroups: alioth
1661   -
1662     name: remote logging on lully
1663     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1664     runfrom: lully
1665     hostgroups: computers
1666     excludehostgroups: alioth
1667   # }}}
1668   # {{{ base service
1669   -
1670     name: process - sshd
1671     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1672     hostgroups: computers
1673   -
1674     name: "network service - sshd"
1675     check: dsa_check_ssh
1676     hostgroups: computers
1677     depends: process - sshd
1678     normal_check_interval:  60
1679     notification_interval: 1440
1680   ####
1681   -
1682     name: network service - nrpe
1683     check: check_tcp!5666
1684     hostgroups: computers
1685     max_check_attempts: -2
1686     notification_interval: 1440
1687   -
1688     name: process - nrpe
1689     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1690     hostgroups: computers
1691     max_check_attempts: -1
1692     depends: network service - nrpe
1693   ###
1694   -
1695     name: process - munin-node
1696     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1697     hostgroups: computers
1698     excludehostgroups: freebsd, armhf
1699   -
1700     name: process - munin-node
1701     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1702     hostgroups: freebsd
1703   -
1704     name: process - munin-node
1705     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1706     hostgroups: wheezy
1707     excludehostgroups: freebsd
1708   -
1709     name: network service - munin-node
1710     check: check_tcp!4949
1711     hostgroups: computers
1712     depends: process - munin-node
1713   ###
1714   -
1715     name: process - ntpd
1716     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1717     hostgroups: computers
1718     servicegroups: time
1719   -
1720     name: network service - ntp
1721     check: dsa_check_ntp
1722     hostgroups: computers
1723     depends: process - ntpd
1724     excludehosts: ancina
1725     servicegroups: time
1726   ###
1727   -
1728     name: network service - time
1729     check: dsa_check_time
1730     hosts: ancina
1731     depends: process - xinetd
1732     servicegroups: time
1733   ###
1734   -
1735     name: process - atd
1736     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1737     hostgroups: computers
1738   ###
1739   -
1740     name: process - cron
1741     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1742     hostgroups: computers
1743   ###
1744   -
1745     name: process - ud-replicated
1746     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1747     hostgroups: computers
1748     excludehostgroups: squeeze, freebsd, alioth
1749   -
1750     name: process - ud-replicated
1751     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1752     hostgroups: freebsd
1753   ###
1754   -
1755     name: process - monit
1756     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1757     hostgroups: squeeze
1758   -
1759     name: process - monit
1760     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1761     hostgroups: computers
1762     excludehostgroups: squeeze, alioth
1763   ###
1764   -
1765     name: MQ connection on rainier
1766     servicegroups: MQ
1767     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1768     runfrom: rainier
1769     hostgroups: computers
1770     normal_check_interval:  60
1771     retry_check_interval: 15
1772     excludehostgroups: alioth, broken_mq
1773   -
1774     name: MQ connection on rapoport
1775     servicegroups: MQ
1776     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1777     runfrom: rapoport
1778     hostgroups: computers
1779     normal_check_interval:  60
1780     retry_check_interval: 15
1781     excludehostgroups: alioth, broken_mq
1782   ###
1783   -
1784     name: local resolver
1785     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1786     hostgroups: computers
1787     normal_check_interval: 60
1788   -
1789     name: process - unbound
1790     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1791     hostgroups: computers
1792     excludehostgroups: alioth
1793   ###
1794   -
1795     name: process - uptimed
1796     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1797     hostgroups: computers
1798   ###
1799   -
1800     name: process - udevd
1801     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1802     hostgroups: computers
1803     excludehostgroups: freebsd
1804   -
1805     name: unexpected process - udev
1806     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1807     hostgroups: freebsd
1808   ###
1809   -
1810     name: process - acpid
1811     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1812     hostgroups: acpid-hosts
1813   -
1814     name: unexpected process - acpid
1815     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1816     hostgroups: computers
1817     excludehostgroups: acpid-hosts, kvmdomains
1818   ###
1819   -
1820     name: process - xinetd
1821     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1822     hostgroups: xinetd-hosts
1823   -
1824     name: unwanted process - xinetd
1825     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1826     hostgroups: computers
1827     excludehostgroups: xinetd-hosts
1828   ###
1829   -
1830     name: process - stunnel4 - puppet-ekeyd
1831     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1832     hostgroups: squeeze, wheezy
1833     excludehostgroups: freebsd, alioth
1834   # }}}
1835   # {{{ anti-services
1836   -
1837     name: ganeti - job watcher paused
1838     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1839     hostgroups: computers
1840   -
1841     name: unwanted process - irqbalance
1842     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1843     hostgroups: computers
1844   -
1845     name: unwanted process - openvpn
1846     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1847     hostgroups: computers
1848     normal_check_interval: 120
1849   -
1850     name: unwanted process - gkrellmd
1851     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1852     hostgroups: computers
1853   -
1854     name: unwanted process - rpc.statd
1855     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1856     hostgroups: computers
1857     excludehostgroups: nfs-client, nfs-server
1858   -
1859     name: unwanted process - inetd
1860     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1861     hostgroups: computers
1862     excludehosts: abel
1863   -
1864     name: unwanted process - snmpd
1865     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1866     hostgroups: computers
1867   # }}}
1868   # {{{ ssl certs
1869   -
1870     name: "host SSL cert"
1871     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1872     hostgroups: computers
1873   # }}}
1874   # {{{ HW health/raid
1875   -
1876     name: process - mdadm monitor
1877     servicegroups: raid
1878     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
1879     hostgroups: sw-raid
1880     excludehostgroups: wheezy
1881   -
1882     # wheezy:
1883     name: process - mdadm monitor
1884     servicegroups: raid
1885     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1886     hostgroups: sw-raid
1887     excludehostgroups: squeeze
1888   -
1889     name: RAID - sw raid
1890     servicegroups: raid
1891     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1892     hostgroups: sw-raid
1893   ###
1894   -
1895     name: HW - hpacucli status
1896     servicegroups: raid
1897     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1898     normal_check_interval: 120
1899     hostgroups: dl385, dl380, dl360, bl460, dl180
1900     excludehosts: schein, rietz
1901   -
1902     name: HW - hpacucli status
1903     servicegroups: raid
1904     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1905     normal_check_interval: 120
1906     hostgroups: bm-bl
1907   -
1908     name: HW - hpacucli status
1909     servicegroups: raid
1910     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1911     normal_check_interval: 120
1912     hosts: schein, rietz
1913   -
1914     name: HW - hpacucli enclosure status
1915     servicegroups: raid
1916     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1917     normal_check_interval: 120
1918     hosts: franck
1919   -
1920     name: HW - hpacucli status
1921     servicegroups: raid
1922     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1923     normal_check_interval: 120
1924     hostgroups: dl585
1925   ###
1926 #  -
1927 #    name: HW - edac status
1928 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1929 #    normal_check_interval: 120
1930     #hostgroups: computers
1931     #excludehosts: villa, lobos, senfl, schein
1932   -
1933     name: HW - hpasmcli status
1934     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1935     normal_check_interval: 120
1936     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1937     excludehosts: villa, lobos, senfl, schein, storace
1938   -
1939     name: HW - hpasmcli status
1940     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1941     normal_check_interval: 120
1942     hosts: villa
1943   -
1944     name: HW - hpasmcli status
1945     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1946     normal_check_interval: 120
1947     hosts: lobos
1948   -
1949     name: HW - hpasmcli status
1950     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1951     normal_check_interval: 120
1952     hosts: senfl, schein
1953   -
1954     name: HW - hpasmcli status
1955     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1956     normal_check_interval: 120
1957     hosts: storace
1958   ###
1959   -
1960     name: RAID - 3ware
1961     servicegroups: raid
1962     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1963     hosts: powell
1964   ###
1965   -
1966     name: RAID - aacraid
1967     servicegroups: raid
1968     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1969     hostgroups: aacraid
1970   ###
1971   -
1972     name: RAID - megaraid
1973     servicegroups: raid
1974     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1975     hostgroups: megaraid
1976   ###
1977   -
1978     name: RAID - MPT
1979     servicegroups: raid
1980     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt"
1981     hostgroups: mptraid
1982   ###
1983   -
1984     name: RAID - DRBD
1985     servicegroups: raid
1986     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1987     hostgroups: drbd-hosts
1988   # }}}
1989   # }}}
1990   # {{{ ### mail stuff
1991   # {{{ exim processes and mailq
1992   -
1993     name: process - exim
1994     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1995     hostgroups: computers
1996     excludehostgroups: postfix-hosts, mail-relay
1997     excludehosts: master, busoni, quantz, buxtehude
1998   -
1999     name: process - exim
2000     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2001     hostgroups: mail-relay
2002   -
2003     name: process - exim - total
2004     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2005     hostgroups: computers
2006     excludehostgroups: postfix-hosts
2007     excludehosts: master, busoni, quantz, buxtehude
2008   -
2009     name: process - exim
2010     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2011     hosts: master, busoni, quantz, buxtehude
2012   -
2013     name: mail queue
2014     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2015     hostgroups: heavy-exim
2016   # }}}
2017   # {{{ clamav
2018   -
2019     name: process - clamav - clamd
2020     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2021     hostgroups: heavy-exim, heavy-postfix
2022   -
2023     name: service - clamav
2024     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2025     hostgroups: heavy-exim, heavy-postfix
2026     depends: process - clamav - clamd
2027   -
2028     name: process - clamav - freshclam
2029     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2030     hostgroups: heavy-exim, heavy-postfix
2031   -
2032     name: unwanted process - clamav
2033     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2034     hostgroups: computers
2035     excludehostgroups: heavy-exim, heavy-postfix
2036   -
2037     name: unwanted process - freshclam
2038     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2039     hostgroups: computers
2040     excludehostgroups: heavy-exim, heavy-postfix
2041   # }}}
2042   # {{{ anti-spam
2043   -
2044     name: process - spamd - master
2045     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2046     hostgroups: spamd
2047     excludehosts: picconi
2048   -
2049     name: process - spamd - master
2050     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2051     hosts: picconi
2052   -
2053     name: process - spamd - master
2054     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2055     hosts: bendel
2056   -
2057     name: process - spamd - child
2058     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2059     hosts: bendel
2060     hostgroups: spamd
2061     depends: process - spamd - master
2062   #
2063   -
2064     name: process - spamd - master
2065     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2066     hosts: buxtehude
2067   -
2068     name: process - spamd - child
2069     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2070     hosts: buxtehude
2071   #
2072   -
2073     name: unwanted process - spamd
2074     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2075     hostgroups: computers
2076     excludehostgroups: spamd
2077     excludehosts: bendel, busoni, buxtehude
2078
2079   -
2080     name: unwanted process - greylistd
2081     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2082     hostgroups: computers
2083
2084   ###
2085   -
2086     name: process - postgrey
2087     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2088     hostgroups: heavy-exim
2089   -
2090     name: process - postgrey
2091     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2092     hostgroups: heavy-postfix
2093   #
2094   -
2095     name: unwanted process - postgrey
2096     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2097     hostgroups: computers
2098     excludehostgroups: heavy-postfix, heavy-exim
2099   ###
2100   -
2101     name: process - amavis - master
2102     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2103     hostgroups: amavis-hosts
2104   -
2105     name: process - amavis - all
2106     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2107     hostgroups: amavis-hosts
2108     depends: process - amavis - master
2109   #
2110   -
2111     name: unwanted process - amavis
2112     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2113     hostgroups: computers
2114     excludehostgroups: amavis-hosts
2115   ###
2116   -
2117     name: process - weightd - master
2118     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2119     hostgroups: heavy-postfix, alioth
2120   -
2121     name: process - weightd - cache
2122     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2123     hostgroups: heavy-postfix, alioth
2124     depends: process - weightd - master
2125   -
2126     name: process - weightd - child
2127     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2128     hostgroups: heavy-postfix, alioth
2129     depends: process - weightd - master
2130   ###
2131   -
2132     name: unwanted process - policyd-weight
2133     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2134     hostgroups: computers
2135     excludehostgroups: heavy-postfix, alioth
2136   # }}}
2137   # {{{ postfix
2138   ###
2139   -
2140     name: process - postfix - master
2141     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2142     hostgroups: postfix-hosts
2143   -
2144     name: process - postfix - qmgr
2145     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2146     hostgroups: postfix-hosts
2147     depends: process - postfix - master
2148   -
2149     name: process - postfix - pickup
2150     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2151     hostgroups: postfix-hosts
2152     depends: process - postfix - master
2153   -
2154     name: process - postfix - anvil
2155     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2156     hostgroups: postfix-hosts
2157     depends: process - postfix - master
2158
2159   -
2160     name: process - postfix - trivial-rewrite
2161     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2162     hostgroups: postfix-hosts
2163     depends: process - postfix - master
2164   -
2165     name: process - postfix - proxymap
2166     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2167     hostgroups: postfix-hosts
2168     depends: process - postfix - master
2169   -
2170     name: process - postfix - cleanup
2171     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2172     hostgroups: postfix-hosts
2173     depends: process - postfix - master
2174   -
2175     name: process - postfix - local
2176     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2177     hostgroups: postfix-hosts
2178     depends: process - postfix - master
2179
2180   -
2181     name: network service local - smtps cert
2182     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2183     hostgroups: postfix-hosts
2184     depends: process - postfix - master
2185     normal_check_interval: 120
2186   # }}}
2187   # {{{ mail - network service
2188   -
2189     name: network service - smtp
2190     check: dsa_check_smtp
2191     hostgroups: computers
2192     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2193     depends: process - exim
2194
2195   -
2196     name: network service - smtp
2197     check: dsa_check_smtp
2198     hostgroups: postfix-hosts
2199     depends: process - postfix - master
2200   -
2201     name: network service - submission
2202     check: dsa_check_smtp_port!587
2203     hostgroups: incomingmailrelayed
2204     depends: process - exim
2205   -
2206     name: network service - smtp 2025
2207     check: dsa_check_smtp_port!2025
2208     hostgroups: incomingmailrelayed2025
2209     depends: process - exim
2210   # }}}
2211   # }}}
2212   # {{{ ### host specific services
2213   # {{{ HTTP
2214   -
2215     name: process - apache2 - master
2216     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2217     hostgroups: apache2-hosts
2218   -
2219     name: process - apache2 - worker
2220     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2221     hostgroups: apache2-hosts
2222     depends: process - apache2 - master
2223   -
2224     name: unwanted process - apache2
2225     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2226     hostgroups: computers
2227     excludehostgroups: apache2-hosts
2228
2229   -
2230     name: network service - http
2231     check: check_http
2232     hostgroups: apache2-hosts
2233     excludehosts: klecker
2234     depends: process - apache2 - master
2235   -
2236     name: network service - http
2237     check: check_http
2238     depends: klecker:process - apache2 - master
2239     hosts: klecker-ftp
2240
2241   # keyserver on kaufmann
2242   -
2243     name: network service - http keyserver
2244     check: dsa_check_http_port!11371
2245     hosts: kaufmann
2246     depends: process - apache2 - master
2247
2248   # https on various hosts
2249   -
2250     name: network service - https
2251     check: check_https
2252     hostgroups: apache-https
2253     excludehosts: handel,menotti
2254     excludehostgroups: broken_https_default_vhost
2255     depends: "process - apache2 - master"
2256     normal_check_interval: 120
2257   -
2258     name: network service - https
2259     check: dsa_check_https_want_auth
2260     hosts: handel,menotti
2261     depends: "process - apache2 - master"
2262     normal_check_interval: 120
2263   -
2264     name: network service - https
2265     check: dsa_check_https_any_status
2266     hostgroups: broken_https_default_vhost
2267     depends: "process - apache2 - master"
2268     normal_check_interval: 120
2269   -
2270     name: network service - https cert
2271     check: dsa_check_cert!443
2272     hostgroups: apache-https
2273     depends: network service - https
2274     normal_check_interval: 60
2275   -
2276     name: unwanted network service - https
2277     check: dsa_check_port_closed!443
2278     hostgroups: apache2-hosts
2279     excludehostgroups: apache-https
2280     # ravel does ssh on port 443
2281     excludehosts: ravel
2282     normal_check_interval: 60
2283   # }}}
2284   # {{{ FTP
2285   -
2286     name: network service - ftp
2287     check: check_ftp
2288     hostgroups: uploadqueue, security_mirror
2289     excludehosts: klecker
2290   -
2291     name: network service - ftp
2292     check: check_ftp
2293     hosts: klecker-ftp
2294     depends: klecker:process - xinetd
2295   # }}}
2296   # {{{ postgres
2297   -
2298     name: unwanted process - postgresql
2299     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2300     hostgroups: computers
2301     excludehostgroups: postgres91-hosts
2302   -
2303     name: unwanted process - postgresql 9.0
2304     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2305     hostgroups: computers
2306   -
2307     name: process - postgresql91 - master
2308     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2309     hostgroups: postgres91-hosts
2310   -
2311     name: postgresql backups
2312     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2313     hosts: backuphost
2314   # }}}
2315   # {{{ power
2316 #  -
2317 #    name: process - UPS - nut usbhid-ups - ups1
2318 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2319 #    hosts: franck
2320 #  -
2321 #    name: process - UPS - nut upsd
2322 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2323 #    hosts: franck
2324 #  -
2325 #    name: process - UPS - nut upsmon master
2326 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2327 #    hosts: franck
2328 #  -
2329 #    name: process - UPS - nut upsmon worker
2330 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2331 #    hosts: franck
2332 #    depends: process - UPS - nut upsmon master
2333 #  -
2334 #    name: UPS - on line power
2335 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2336 #    hosts: franck
2337 #    depends: process - UPS - nut upsd
2338   # }}}
2339   # {{{ buildd
2340   -
2341     name: process - buildd
2342     servicegroups: buildd
2343     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2344     hosts: fano, finzi, fils, fayrfax
2345     contact_groups: buildd
2346   -
2347     name: process - buildd
2348     servicegroups: buildd
2349     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2350     hostgroups: buildd
2351     excludehosts: fano, finzi, fils, fayrfax
2352     contact_groups: buildd
2353   -
2354     name: processes - zombie schroot
2355     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2356     hostgroups: buildd
2357     contact_groups: +buildd
2358     normal_check_interval: 5
2359     max_check_attempts: 24
2360     retry_check_interval: 5
2361   -
2362     name: processes - lvcreate
2363     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2364     hostgroups: buildd
2365     contact_groups: +buildd
2366   # }}}
2367   # {{{ NFS Stuff
2368   -
2369     name: process - statd
2370     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2371     hostgroups: nfs-client, nfs-server
2372   -
2373     name: process - nfsd
2374     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2375     hostgroups: nfs-server
2376   -
2377     name: process - lockd
2378     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2379     hostgroups: nfs-server
2380   -
2381     name: process - mountd
2382     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2383     hostgroups: nfs-server
2384   #
2385   -
2386     name: process - automount
2387     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2388     hostgroups: autofs
2389   -
2390     name: unwanted process - automount
2391     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2392     hostgroups: computers
2393     excludehostgroups: autofs
2394   # }}}
2395   # {{{ mirroring
2396   -
2397     name: mirror sync - bugs
2398     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2399     hosts: global
2400   -
2401     name: mirror sync - security
2402     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2403     hosts: global
2404   -
2405     name: mirror sync - packages
2406     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2407     hosts: global
2408     normal_check_interval: 15
2409     max_check_attempts: 5
2410     retry_check_interval: 5
2411   -
2412     name: mirror sync - snapshot
2413     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2414     hosts: global
2415     normal_check_interval: 15
2416     max_check_attempts: 5
2417     retry_check_interval: 5
2418   # }}}
2419   # {{{ DNS
2420   -
2421     name: process - named
2422     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2423     hostgroups: bind9-hosts
2424   -
2425     name: network service - dns
2426     check: check_dns
2427     hostgroups: bind9-hosts
2428     depends: process - named
2429   -
2430     name: unwanted process - named
2431     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2432     hostgroups: computers
2433     excludehostgroups: bind9-hosts
2434   ###
2435   -
2436     name: DNS SOA sync - debian.org
2437     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2438     hosts: global
2439   -
2440     name: DNS SOA sync - debian.net
2441     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2442     hosts: global
2443   -
2444     name: DNS SOA sync - debian.com
2445     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2446     hosts: global
2447   -
2448     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2449     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2450     hosts: global
2451   -
2452     name: DNS SOA sync - alioth.debian.org
2453     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2454     hosts: global
2455   -
2456     name: DNS - delegation and signature expiry
2457     hosts: global
2458     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2459     runfrom: denis
2460   -
2461     name: DNS - security delegations
2462     hosts: global
2463     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2464     runfrom: denis
2465   -
2466     name: DNS - key coverage
2467     hosts: global
2468     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2469     runfrom: denis
2470   -
2471     name: DNS - DS expiry
2472     hosts: global
2473     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2474     runfrom: denis
2475   # }}}
2476   # {{{ storage
2477   -
2478     name: ping alive check
2479     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2480     runfrom: dijkstra
2481     hosts: giustini
2482     normal_check_interval: 5
2483     max_check_attempts: 4
2484     retry_check_interval: 1
2485   -
2486     name: Overall Unit Status
2487     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2488     runfrom: dijkstra
2489     hosts: giustini
2490   -
2491     name: event log
2492     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2493     runfrom: dijkstra
2494     hosts: giustini
2495   # }}}
2496   # {{{ porterbox
2497   -
2498     name: current chroots
2499     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2500     hostgroups: porterbox
2501     normal_check_interval:  60
2502     retry_check_interval: 15
2503   # }}}
2504   # {{{ openstack
2505   -
2506     name: process - openstack - memcached
2507     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 64 -p 11211 -u nobody -l 127.0.0.1'"
2508     hostgroups: openstack-controller
2509   -
2510     name: process - openstack - glance-registry
2511     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2512     hostgroups: openstack-controller
2513   -
2514     name: process - openstack - nova-api
2515     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2516     hostgroups: openstack-controller
2517   -
2518     name: process - openstack - nova-compute
2519     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2520     hostgroups: openstack-compute
2521   -
2522     name: process - openstack - nova-cert
2523     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2524     hostgroups: openstack-controller
2525   -
2526     name: process - openstack - nova-conductor
2527     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2528     hostgroups: openstack-controller
2529   -
2530     name: process - openstack - nova-consoleauth
2531     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2532     hostgroups: openstack-controller
2533   -
2534     name: process - openstack - nova-scheduler
2535     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2536     hostgroups: openstack-controller
2537   -
2538     name: process - openstack - nova-spicehtml5proxy
2539     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2540     hostgroups: openstack-controller
2541   -
2542     name: process - openstack - neutron-server
2543     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2544     hostgroups: openstack-controller
2545   # }}}
2546   # {{{ misc
2547   -
2548     name: process - rngd
2549     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2550     hostgroups: dl385
2551   ###
2552   -
2553     name: process - slapd
2554     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2555     hosts: draghi
2556   -
2557     name: network service - ldaps cert
2558     check: dsa_check_cert!636
2559     depends: process - slapd
2560     normal_check_interval: 60
2561     hosts: draghi
2562   ###
2563   -
2564     name: network service - finger
2565     check: check_tcp!79
2566     hosts: draghi
2567     depends: process - xinetd
2568   ###
2569   -
2570     name: network service - rsync
2571     check: check_tcp!873
2572     hostgroups: rsyncd-hosts
2573     depends: process - xinetd
2574     excludehosts: rietz
2575   -
2576     name: network service - rsync
2577     check: check_tcp!873
2578     hosts: rietz2
2579     depends: rietz:process - xinetd
2580   -
2581     name: network service - rsync
2582     check: check_tcp!873
2583     hosts: milanollo2
2584     depends: milanollo:process - xinetd
2585   ###
2586   -
2587     name: process - icinga
2588     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2589     hosts: tchaikovsky
2590   ###
2591   -
2592     name: process - jetty - master
2593     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2594     hostgroups: jetty-hosts
2595   -
2596     name: process - jetty - worker
2597     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2598     hostgroups: jetty-hosts
2599     depends: process - jetty - master
2600   ###
2601   -
2602     name: process - debianqueued
2603     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2604     hostgroups: uploadqueue
2605   ####
2606   -
2607     name: network service - gobby
2608     check: check_tcp!6523
2609     hosts: gombert
2610     contact_groups: gobby
2611   ####
2612   -
2613     name: puppetmaster cert
2614     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2615     hosts: handel
2616     normal_check_interval: 60
2617     max_check_attempts: 2
2618     retry_check_interval: 5
2619   # }}}
2620 # }}}
2621
2622 # vim: set ts=2 sw=2 et ai si fdm=marker: