f552bc6a6851effa4580a4063b00e7f78a9c05db
[mirror/dsa-nagios.git] / config / nagios-master.cfg
1 # Non comment lines are YAML
2 #
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
4 #
5 # vim:set syntax=yaml:
6
7 # TODO
8 #  - *: check munin stats collection works
9 #  - *: check backups are successful
10 #  - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
11
12 ---
13 #############################
14 # hosts
15 #############################
16 servers:
17   # {{{ gateways
18   global:
19     hostgroups: notacomputer
20     pingable: false
21     check_command: dsa_check_always_ok
22   gw-1und1:
23     parents: gw-ubcece
24     hostgroups: notacomputer
25     pingable: false
26     check_command: dsa_check_always_ok
27   gw-1und1-sec:
28     parents: gw-ubcece
29     hostgroups: notacomputer
30     pingable: false
31     check_command: dsa_check_always_ok
32   gw-accumu:
33     address: 130.239.18.97
34     parents: gw-ubcece
35     hostgroups: layer3-infrastructure
36   gw-bytemark:
37     address: 89.16.160.116
38     parents: gw-ubcece
39     hostgroups: layer3-infrastructure
40   gw-c3sl:
41     address: 200.17.202.254
42     parents: gw-ubcece
43     hostgroups: layer3-infrastructure
44   gw-cecsit:
45     address: 150.203.164.38
46     parents: gw-ubcece
47     hostgroups: layer3-infrastructure
48   gw-arm:
49     address: 213.104.121.213
50     parents: gw-ubcece
51     hostgroups: layer3-infrastructure
52   gw-brown:
53     address: 138.16.160.1
54     parents: gw-ubcece
55     hostgroups: layer3-infrastructure
56   gw-carnet:
57     address: 161.53.160.1
58     parents: gw-ubcece
59     hostgroups: layer3-infrastructure
60   gw-conova:
61     address: 217.196.149.238
62     parents: gw-ubcece
63     hostgroups: layer3-infrastructure
64   gw-csail:
65     address: 128.31.0.1
66     parents: gw-ubcece
67     hostgroups: layer3-infrastructure
68   gw-dgi:
69     address: 93.94.132.102
70     parents: gw-ubcece
71     hostgroups: layer3-infrastructure
72     contacts: bzed
73   gw-freenet:
74     address: 62.104.23.249
75     parents: gw-ubcece
76     hostgroups: layer3-infrastructure
77   gw-ftcollins:
78     address: 192.25.206.1
79     parents: gw-ubcece
80     hostgroups: layer3-infrastructure
81   gw-gatech:
82     address: 128.61.240.1
83     parents: gw-ubcece
84     hostgroups: layer3-infrastructure
85   gw-grnet:
86     address: 194.177.211.193
87     parents: gw-ubcece
88     hostgroups: layer3-infrastructure
89   gw-isc:
90     address: 149.20.20.1
91     parents: gw-ubcece
92     hostgroups: layer3-infrastructure
93   gw-karlsruhe:
94     address: 129.143.57.177
95     parents: gw-ubcece
96     hostgroups: layer3-infrastructure
97   gw-leaseweb:
98     address: 185.17.185.190
99     parents: gw-ubcece
100     hostgroups: layer3-infrastructure
101   gw-man-da:
102     address: 82.195.75.126
103     parents: gw-ubcece
104     hostgroups: layer3-infrastructure
105   gw-marist:
106     address: 148.100.88.1
107     parents: gw-ubcece
108     hostgroups: layer3-infrastructure
109   gw-osuosl:
110     address: 140.211.166.1
111     parents: gw-ubcece
112     hostgroups: layer3-infrastructure
113   gw-rapidswitch:
114     address: 193.201.200.129
115     parents: gw-ubcece
116     hostgroups: layer3-infrastructure
117   gw-sanger:
118     address: 193.62.202.20
119     parents: gw-ubcece
120     hostgroups: layer3-infrastructure
121     contacts: tjrc1, dave
122   gw-scanplus-lobos:
123     address: 212.211.132.249
124     parents: gw-ubcece
125     hostgroups: layer3-infrastructure
126   gw-scanplus-villa:
127     address: 212.211.132.1
128     parents: gw-ubcece
129     hostgroups: layer3-infrastructure
130   gw-sil:
131     address: 86.59.118.145
132     parents: gw-ubcece
133     hostgroups: layer3-infrastructure
134   gw-ubcece:
135     address: 206.12.19.254
136     hostgroups: layer3-infrastructure
137     contacts: lfilipoz
138   gw-ugent:
139     address: 193.191.17.50
140     parents: gw-ubcece
141     hostgroups: layer3-infrastructure
142   gw-umn:
143     address: 128.101.240.222
144     parents: gw-ubcece
145     hostgroups: layer3-infrastructure
146   gw-utwente:
147     address: 130.89.149.1
148     parents: gw-ubcece
149     hostgroups: layer3-infrastructure
150   gw-ynic:
151     # really janet, because ynic is stupid about firewalling
152     #address: 146.97.42.26
153     address: 146.97.41.66
154     parents: gw-ubcece
155     hostgroups: layer3-infrastructure
156   gw-zivit:
157     address: 80.245.144.3
158     parents: gw-ubcece
159     hostgroups: layer3-infrastructure
160   # }}}
161   # {{{ servers
162   # {{{ gw-1und1
163   powell:
164     address: 87.106.64.223
165     parents: gw-1und1
166     hostgroups: computers, service, acpid-hosts, wheezy
167   pkgmirror-1and1:
168     address: 213.165.95.4
169     parents: powell
170     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
171   babin:
172     address: 213.165.95.6
173     parents: powell
174     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
175   # }}}
176   # {{{ gw-1und1-sec
177   schumann:
178     address: 212.227.126.54
179     parents: gw-1und1-sec
180     hostgroups: computers, acpid-hosts, service, wheezy
181   chopin:
182     address: 195.20.242.124
183     parents: schumann
184     hostgroups: computers, service, apache2-hosts, hassrvfs, hasbootfs, rsyncd-hosts, uploadqueue, kvmdomains, xinetd-hosts, apache-https, postgres91-hosts, wheezy
185   geo3:
186     address: 195.20.242.125
187     parents: schumann
188     hostgroups: computers, service, hasbootfs, bind9-hosts, kvmdomains, wheezy
189   soler:
190     address: 195.20.242.126
191     parents: schumann
192     hostgroups: computers, service, hasbootfs, hassrvfs, kvmdomains, apache2-hosts, wheezy, apache-https
193   wieck:
194     address: 195.20.242.89
195     parents: gw-1und1-sec
196     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, xinetd-hosts, wheezy, security_mirror, hasvarlogfs, no-bacula
197   # }}}
198   # {{{ gw-accumu
199   pettersson:
200     address: 130.239.18.123
201     parents: gw-accumu
202     hostgroups: computers, hasbootfs, aacraid, nfs-client, acpid-hosts, service, apache2-hosts, wheezy, autofs
203   praetorius:
204     address: 130.239.18.121
205     parents: gw-accumu
206     hostgroups: computers, buildd, hassrvfs, wheezy
207   # }}}
208   # {{{ gw-arm
209   abel:
210     address: 217.140.96.56
211     parents: gw-arm
212     hostgroups: computers, hasbootfs, hassrvfs, porterbox, wheezy, broken_mq
213   antheil:
214     address: 217.140.96.60
215     parents: gw-arm
216     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
217   arnold:
218     address: 217.140.96.57
219     parents: gw-arm
220     hostgroups: computers, hasbootfs, hassrvfs, buildd, wheezy, broken_mq
221   harris:
222     address: 217.140.96.66
223     parents: gw-arm
224     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, porterbox, broken_mq
225   hartmann:
226     address: 217.140.96.67
227     parents: gw-arm
228     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
229   hasse:
230     address: 217.140.96.68
231     parents: gw-arm
232     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
233   henze:
234     address: 217.140.96.70
235     parents: gw-arm
236     hostgroups: computers, hasbootfs, hassrvfs, wheezy, armhf, buildd, broken_mq
237   hoiby:
238     address: 217.140.96.71
239     parents: gw-arm
240     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd, broken_mq
241   # }}}
242   # {{{ gw-brown
243   franck:
244     address: 138.16.160.12
245     parents: gw-brown
246     hostgroups: computers, service, apache2-hosts, dl380, rsyncd-hosts, postgres91-hosts, spamd, acpid-hosts, uploadqueue, xinetd-hosts, apache-https, hassrvfs, wheezy
247   # }}}
248   # {{{ gw-bytemark
249   bm-bl1:
250     address: 5.153.231.241
251     parents: gw-bytemark
252     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
253   bm-bl2:
254     address: 5.153.231.242
255     parents: gw-bytemark
256     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
257   bm-bl3:
258     address: 5.153.231.243
259     parents: gw-bytemark
260     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
261   bm-bl4:
262     address: 5.153.231.244
263     parents: gw-bytemark
264     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
265   bm-bl5:
266     address: 5.153.231.245
267     parents: gw-bytemark
268     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
269   bm-bl6:
270     address: 5.153.231.246
271     parents: gw-bytemark
272     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
273   bm-bl7:
274     address: 5.153.231.247
275     parents: gw-bytemark
276     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
277   bm-bl8:
278     address: 5.153.231.248
279     parents: gw-bytemark
280     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy
281   bm-bl9:
282     address: 5.153.231.249
283     parents: gw-bytemark
284     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
285   bm-bl10:
286     address: 5.153.231.250
287     parents: gw-bytemark
288     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
289   bm-bl11:
290     address: 5.153.231.251
291     parents: gw-bytemark
292     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
293   bm-bl12:
294     address: 5.153.231.252
295     parents: gw-bytemark
296     hostgroups: computers, bm-bl, acpid-hosts, service, wheezy, openstack-compute, broken_mq
297
298   milanollo:
299     address: 5.153.231.2
300     parents: gw-bytemark
301     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-server, xinetd-hosts
302   milanollo2:
303     address: 5.153.231.9
304     parents: milanollo
305     hostgroups: secondary-IPs
306   picconi:
307     address: 5.153.231.3
308     parents: gw-bytemark
309     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https
310   senfter:
311     address: 5.153.231.4
312     parents: gw-bytemark
313     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, no-bacula, apache-https
314   adayevskaya:
315     address: 5.153.231.5
316     parents: gw-bytemark
317     hostgroups: computers, service, kvmdomains, wheezy
318   pejacevic:
319     address: 5.153.231.6
320     parents: gw-bytemark
321     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, apache-https
322     contacts: holger
323   piu-slave-bm-a:
324     address: 5.153.231.7
325     parents: gw-bytemark
326     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
327     contacts: holger
328   binet:
329     address: 5.153.231.8
330     parents: gw-bytemark
331     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
332   bmdb1:
333     address: 5.153.231.10
334     parents: gw-bytemark
335     hostgroups: computers, hassrvfs, kvmdomains, wheezy, postgres91-hosts
336   ganeti-bytemark:
337     address: 82.195.75.111
338     parents: gw-bytemark
339     hostgroups: notacomputer
340   coccia:
341     address: 5.153.231.11
342     parents: ganeti-bytemark
343     hostgroups: computers, hassrvfs, kvmdomains, wheezy, autofs, nfs-client
344   backuphost:
345     address: 5.153.231.12
346     parents: ganeti-bytemark
347     hostgroups: computers, hassrvfs, kvmdomains, wheezy
348   philp:
349     address: 5.153.231.13
350     parents: ganeti-bytemark
351     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts
352   couper:
353     address: 5.153.231.14
354     parents: ganeti-bytemark
355     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
356   rainier:
357     address: 5.153.231.16
358     parents: ganeti-bytemark
359     hostgroups: computers, kvmdomains, wheezy, no-bacula
360   rapoport:
361     address: 5.153.231.15
362     parents: ganeti-bytemark
363     hostgroups: computers, kvmdomains, wheezy, no-bacula
364   delfin:
365     address: 5.153.231.17
366     parents: ganeti-bytemark
367     hostgroups: computers, hassrvfs, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs
368   wuiet:
369     address: 5.153.231.18
370     parents: ganeti-bytemark
371     hostgroups: computers, general, kvmdomains, wheezy, service, apache-https, apache2-hosts, heavy-exim, xinetd-hosts
372   dinis:
373     address: 5.153.231.19
374     parents: ganeti-bytemark
375     hostgroups: computers, general, kvmdomains, wheezy
376   donizetti:
377     address: 5.153.231.20
378     parents: ganeti-bytemark
379     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs
380   moszumanska:
381     address: 5.153.231.21
382     parents: ganeti-bytemark
383     contact_groups: alioth-admins
384     hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
385     no-servicegroups: true
386   dillon:
387     address: 5.153.231.22
388     parents: ganeti-bytemark
389     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, hassrvfs
390   ticharich:
391     address: 5.153.231.23
392     parents: ganeti-bytemark
393     hostgroups: computers, general, kvmdomains, wheezy, nfs-client, autofs, apache2-hosts, apache-https, service
394   petrova:
395     address: 5.153.231.25
396     parents: ganeti-bytemark
397     hostgroups: computers, kvmdomains, wheezy, apache2-hosts
398   oyens:
399     address: 5.153.231.26
400     parents: ganeti-bytemark
401     hostgroups: computers, kvmdomains, wheezy, apache2-hosts, openstack-controller, apache-https, broken_mq
402   barriere:
403     address: 5.153.231.27
404     parents: ganeti-bytemark
405     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, porterbox
406   quantz:
407     address: 5.153.231.28
408     parents: ganeti-bytemark
409     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, nfs-client, xinetd-hosts, heavy-exim, apache2-hosts, autofs, apache-https
410   portman:
411     address: 5.153.231.29
412     parents: ganeti-bytemark
413     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
414   paradis:
415     address: 5.153.231.30
416     parents: ganeti-bytemark
417     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts
418   # }}}
419   # {{{ gw-c3sl
420   santoro:
421     address: 200.17.202.197
422     parents: gw-c3sl
423     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, xinetd-hosts, hassrvfs, wheezy, high-RTT, security_mirror, no-bacula, apache-https
424     contacts: faw
425   # }}}
426   # {{{ gw-carnet
427   lebrun:
428     address: 193.198.184.10
429     parents: gw-carnet
430     hostgroups: computers, buildd, sw-raid, hasorgfs, sparc, wheezy
431   schroeder:
432     address: 193.198.184.11
433     parents: gw-carnet
434     hostgroups: computers, buildd, sw-raid, hassrvfs, sparc, wheezy
435   # }}}
436   # {{{ gw-cecsit
437   gluck:
438     address: 150.203.164.38
439     parents: gw-cecsit
440     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, acpid-hosts, xinetd-hosts, wheezy, security_mirror, no-bacula, apache-https
441   # }}}
442   # {{{ gw-conova
443   sompek:
444     address: 217.196.149.225
445     parents: gw-conova
446     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
447   stadler:
448     address: 217.196.149.226
449     parents: gw-conova
450     hostgroups: computers, buildd, hassrvfs, sw-raid, wheezy, sparc
451   # }}}
452   # {{{ gw-csail
453   senfl:
454     address: 128.31.0.51
455     parents: gw-csail
456     hostgroups: computers, service, dl360, acpid-hosts, hassrvfs, apache2-hosts, rsyncd-hosts, xinetd-hosts, squeeze, apache-https
457   steffani:
458     address: 128.31.0.36
459     parents: gw-csail
460     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
461   # }}}
462   # {{{ gw-dgi
463   argento:
464     address: 93.94.130.160
465     parents: gw-dgi
466     hostgroups: computers, sw-raid, hassrvfs, wheezy
467   storace:
468     address: 93.94.130.161
469     parents: gw-dgi
470     hostgroups: computers, acpid-hosts, wheezy, dl380, nfs-client, hassrvfs
471   # }}}
472   # {{{ gw-ftcollins
473   #alkman:
474   #  address: 192.25.206.63
475   #  parents: gw-ftcollins
476   #  hostgroups: computers, buildd, acpid-hosts, wheezy
477   #mundy:
478   #  address: 192.25.206.62
479   #  parents: gw-ftcollins
480   #  hostgroups: computers, buildd, hassrvfs, sw-raid, acpid-hosts, wheezy
481   spohr:
482     address: 192.25.206.33
483     parents: gw-ftcollins
484     hostgroups: computers, service, dl380, apache2-hosts, wheezy, no-bacula
485   # }}}
486   # {{{ gw-gatech
487   sechter:
488     address: 128.61.240.73
489     parents: gw-gatech
490     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, acpid-hosts, hasbootfs, hassrvfs, xinetd-hosts, wheezy, security_mirror
491   # }}}
492   # {{{ gw-grnet
493   barber:
494     address: 194.177.211.203
495     parents: gw-grnet
496     hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, wheezy
497   biber:
498     address: 194.177.211.204
499     parents: gw-grnet
500     hostgroups: computers, acpid-hosts, buildd, hassrvfs, mptraid, wheezy
501   rautavaara:
502     address: 194.177.211.199
503     parents: gw-grnet
504     hostgroups: computers, acpid-hosts, megaraid, service, squeeze, nfs-server
505   vitry:
506     address: 194.177.211.206
507     parents: gw-grnet
508     hostgroups: computers, acpid-hosts, mptraid, no-bacula, wheezy
509   # }}}
510   # {{{ gw-isc
511   schein:
512     address: 149.20.20.6
513     parents: gw-isc
514     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, acpid-hosts, dl360, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
515   # }}}
516   # {{{ gw-leaseweb
517   lw01:
518     address: 185.17.185.177
519     parents: gw-leaseweb
520     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
521   lw02:
522     address: 185.17.185.178
523     parents: gw-leaseweb
524     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
525   lw03:
526     address: 185.17.185.179
527     parents: gw-leaseweb
528     hostgroups: computers, service, acpid-hosts, wheezy, dl180, nfs-server
529   lw04:
530     address: 185.17.185.180
531     parents: gw-leaseweb
532     hostgroups: computers,  service, acpid-hosts, wheezy, dl180, nfs-server, postgres91-hosts
533   lw05:
534     address: 185.17.185.181
535     parents: gw-leaseweb
536     hostgroups: computers,  service, acpid-hosts, wheezy, dl120, sw-raid, nfs-client, autofs, hassrvfs, apache2-hosts
537   lw06:
538     address: 185.17.185.182
539     parents: gw-leaseweb
540     hostgroups: computers,  service, acpid-hosts, wheezy, dl120, sw-raid, nfs-client, autofs, hassrvfs, apache2-hosts
541   # }}}
542   # {{{ gw-karlsruhe
543   zemlinsky:
544     address: 129.143.160.6
545     parents: gw-karlsruhe
546     hostgroups: computers, buildd, wheezy
547     contacts: pkern
548   # }}}
549   # {{{ gw-man-da
550   ball:
551     address: 82.195.75.70
552     parents: gw-man-da
553     hostgroups: computers, buildd, hasbootfs, wheezy
554   # bartok TODO
555   czerny:
556     address: 82.195.75.109
557     parents: gw-man-da
558     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
559   clementi:
560     address: 82.195.75.103
561     parents: gw-man-da
562     hostgroups: computers, service, dl380, acpid-hosts, wheezy, drbd-hosts
563   bendel:
564     address: 82.195.75.100
565     parents: ganeti3
566     hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, wheezy, postfix-hosts, heavy-postfix, acpid-hosts, apache-https, amavis-hosts, hasvarlogfs
567   master:
568     address: 82.195.75.110
569     parents: ganeti3
570     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, spamd, heavy-exim, highload
571   fils:
572     address: 82.195.75.89
573     parents: ganeti3
574     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
575     contacts: christoph
576   fayrfax:
577     address: 82.195.75.82
578     parents: ganeti3
579     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
580     contacts: christoph
581   vento:
582     address: 82.195.75.98
583     parents: ganeti3
584     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https, heavy-exim
585   lully:
586     address: 82.195.75.99
587     parents: ganeti3
588     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hasvarlogfs
589   rem:
590     address: 82.195.75.68
591     parents: gw-man-da
592     hostgroups: computers, buildd, hasbootfs, hassrvfs, wheezy
593   unger:
594     address: 82.195.75.102
595     parents: gw-man-da
596     hostgroups: computers, service, dl360, acpid-hosts, wheezy
597   draghi:
598     address: 82.195.75.106
599     parents: ganeti3
600     hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, wheezy
601   geo1:
602     address: 82.195.75.105
603     parents: ganeti3
604     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
605   handel:
606     address: 82.195.75.104
607     parents: ganeti3
608     hostgroups: computers, service, kvmdomains, apache2-hosts, wheezy, apache-https
609   kaufmann:
610     address: 82.195.75.107
611     parents: ganeti3
612     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, xinetd-hosts, wheezy
613   stockhausen:
614     address: 82.195.75.108
615     parents: ganeti3
616     hostgroups: computers, service, kvmdomains, wheezy, acpid-hosts, jetty-hosts
617   ganeti3:
618     address: 82.195.75.111
619     parents: gw-man-da
620     hostgroups: notacomputer
621   wilder:
622     address: 82.195.75.112
623     parents: ganeti3
624     hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, wheezy, acpid-hosts, apache-https, rsyncd-hosts, xinetd-hosts
625   mailly:
626     address: 82.195.75.114
627     parents: ganeti3
628     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
629   denis:
630     address: 82.195.75.91
631     parents: ganeti3
632     hostgroups: computers, service, kvmdomains, wheezy, bind9-hosts
633   vogler:
634     address: 82.195.75.92
635     parents: ganeti3
636     hostgroups: computers, service, kvmdomains, wheezy
637   # }}}
638   # {{{ gw-marist
639   zani:
640     address: 148.100.88.22
641     parents: gw-marist
642     hostgroups: computers, buildd, hassrvfs, wheezy, incomingmailrelayed, ping-suckers
643   # }}}
644   # {{{ gw-osuosl
645   busoni:
646     address: 140.211.15.34
647     parents: gw-osuosl
648     hostgroups: computers, service, dl360, hassrvfs, acpid-hosts, wheezy, hasvarlogfs, apache2-hosts, no-bacula, apache-https
649   byrd:
650     address: 140.211.166.20
651     parents: gw-osuosl
652     hostgroups: computers, service, dl380, acpid-hosts, wheezy
653   buxtehude:
654     address: 140.211.166.26
655     parents: byrd
656     hostgroups: computers, service, hassrvfs, acpid-hosts, apache2-hosts, heavy-exim, postgres91-hosts, wheezy, hasvarlogfs, apache-https
657   # malo TODO
658   mayer:
659     address: 140.211.166.78
660     parents: gw-osuosl
661     hostgroups: computers, buildd, hasbootfs, wheezy
662 #  mayr:
663 #    address: 140.211.166.58
664 #    parents: gw-osuosl
665 #    hostgroups: computers, buildd, hasbootfs
666   merulo:
667     address: 140.211.166.46
668     parents: gw-osuosl
669     hostgroups: computers, porterbox, hasusrfs, wheezy
670   parry:
671     address: 140.211.15.153
672     parents: gw-osuosl
673     hostgroups: computers, wheezy, buildd, hassrvfs
674   partch:
675     address: 140.211.15.152
676     parents: gw-osuosl
677     hostgroups: computers, wheezy, hassrvfs, porterbox
678   rietz:
679     address: 140.211.166.43
680     parents: gw-osuosl
681     hostgroups: computers, service, rsyncd-hosts, dl385, hassrvfs, acpid-hosts, xinetd-hosts, wheezy
682     #, bosserver
683   rietz2:
684     address: 140.211.166.44
685     parents: rietz
686     hostgroups: secondary-IPs
687   # zee TODO
688   # }}}
689   # {{{ gs-rapidswitch
690   caballero:
691     address: 193.201.200.200
692     parents: gw-rapidswitch
693     hostgroups: computers, buildd, sw-raid, wheezy, hassrvfs, acpid-hosts
694   # }}}
695   # {{{ gw-sanger
696   sibelius:
697     address: 193.62.202.28
698     parents: gw-sanger
699     hostgroups: computers, acpid-hosts, postgres91-hosts, service, apache2-hosts, sw-raid, squeeze, rsyncd-hosts, xinetd-hosts, hasvarlogfs
700     contacts: tjrc1, dave
701   smetana:
702     address: 193.62.202.29
703     parents: gw-sanger
704     hostgroups: computers, porterbox, sw-raid, sparc, wheezy
705     contacts: tjrc1, dave
706   # }}}
707   # {{{ gw-scanplus
708   lobos:
709     address: 212.211.132.250
710     parents: gw-scanplus-lobos
711     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
712   villa:
713     address: 212.211.132.32
714     parents: gw-scanplus-villa
715     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
716   # }}}
717   # {{{ gw-sil
718   beethoven:
719     address: 86.59.118.146
720     parents: gw-sil
721     hostgroups: computers, hasbootfs, aacraid, service, acpid-hosts, wheezy
722   eder:
723     address: 86.59.118.151
724     parents: gw-sil
725     hostgroups: computers, porterbox, wheezy, hassrvfs
726   eysler:
727     address: 86.59.118.152
728     parents: gw-sil
729     hostgroups: computers, buildd, wheezy
730   eberlin:
731     address: 86.59.118.155
732     parents: gw-sil
733     hostgroups: computers, buildd, wheezy
734   # }}}
735   # {{{ gw-ubcece
736   sw-ubcece:
737     hostgroups: layer2-infrastructure
738     contacts: lfilipoz
739     pingable: false
740     check_command: dsa_check_always_ok
741   sw-ubcece-mcld:
742     hostgroups: layer2-infrastructure
743     parents: sw-ubcece
744     contacts: lfilipoz
745     pingable: false
746     check_command: dsa_check_always_ok
747   sw-ubcece-kais:
748     hostgroups: layer2-infrastructure
749     parents: sw-ubcece
750     contacts: lfilipoz
751     pingable: false
752     check_command: dsa_check_always_ok
753   spontini:
754     address: 206.12.19.14
755     parents: sw-ubcece-mcld
756     hostgroups: computers, buildd, hasbootfs, hassrvfs, sparc, wheezy
757     contacts: lfilipoz
758   ravel:
759     address: 206.12.19.5
760     parents: sw-ubcece-kais
761     hostgroups: computers, general, dl385, apache2-hosts, acpid-hosts, hasbootfs, nfs-client, rsyncd-hosts, uploadqueue, hasorgfs, xinetd-hosts, wheezy, autofs
762   dijkstra:
763     address: 206.12.19.218
764     parents: sw-ubcece-kais
765     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
766   pasquini:
767     address: 206.12.19.217
768     parents: sw-ubcece-kais
769     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
770   luchesi:
771     address: 206.12.19.214
772     parents: sw-ubcece-kais
773     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
774   tristano:
775     address: 206.12.19.213
776     parents: sw-ubcece-kais
777     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
778   boito:
779     address: 206.12.19.216
780     parents: sw-ubcece-kais
781     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
782   bertali:
783     address: 206.12.19.212
784     parents: sw-ubcece-kais
785     hostgroups: computers, bl460, acpid-hosts, service, wheezy, drbd-hosts
786   ganeti2:
787     address: 206.12.19.23
788     parents: sw-ubcece-kais
789     hostgroups: notacomputer
790   tchaikovsky:
791     address: 206.12.19.118
792     parents: ganeti2
793     hostgroups: computers, general, apache2-hosts, hasbootfs, kvmdomains, apache-https, wheezy
794   wolkenstein:
795     address: 206.12.19.116
796     parents: ganeti2
797     hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, rsyncd-hosts, apache2-hosts, wheezy
798   brahms:
799     address: 206.12.19.115
800     parents: ganeti2
801     hostgroups: computers, buildd, hassrvfs, kvmdomains, wheezy
802   geo2:
803     address: 206.12.19.113
804     parents: ganeti2
805     hostgroups: computers, service, bind9-hosts, kvmdomains, wheezy
806   stabile:
807     address: 206.12.19.13
808     parents: sw-ubcece-kais
809     hostgroups: computers, hashomefs, sw-raid, rsyncd-hosts, apache2-hosts, xinetd-hosts, service, nfs-server, squeeze, hassrvfs
810   # MSA 2000 (2012i)
811   giustini:
812     address: 192.168.2.6
813     parents: dijkstra
814     hostgroups: notacomputer
815     # unless we implement runfrom for host alive checks
816     pingable: false
817     check_command: dsa_check_always_ok
818   falla:
819     address: 206.12.19.117
820     parents: ganeti2
821     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
822   fano:
823     address: 206.12.19.110
824     parents: ganeti2
825     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
826     contacts: christoph
827   finzi:
828     address: 206.12.19.111
829     parents: ganeti2
830     hostgroups: computers, freebsd, wheezy, buildd, hassrvfs
831     contacts: christoph
832   fischer:
833     address: 206.12.19.112
834     parents: ganeti2
835     hostgroups: computers, freebsd, hassrvfs, porterbox, wheezy
836   gabrielli:
837     address: 206.12.19.17
838     parents: sw-ubcece-kais
839     hostgroups: computers, porterbox, wheezy
840   corelli:
841     address: 206.12.19.16
842     parents: sw-ubcece-kais
843     hostgroups: computers, buildd, wheezy
844   lucatelli:
845     address: 206.12.19.15
846     parents: sw-ubcece-kais
847     hostgroups: computers, buildd, wheezy
848   rossini:
849     address: 206.12.19.19
850     parents: sw-ubcece-kais
851     hostgroups: computers, dl585, acpid-hosts, service, wheezy
852   salieri:
853     address: 206.12.19.20
854     parents: sw-ubcece-kais
855     hostgroups: computers, dl585, acpid-hosts, service, wheezy
856   traetta:
857     address: 206.12.19.21
858     parents: sw-ubcece-kais
859     hostgroups: computers, dl585, acpid-hosts, service, wheezy
860 #  locke:
861 #    address: 206.12.19.120
862 #    parents: sw-ubcece-kais
863 #    hostgroups: computers, service, hasbootfs, kvmdomains, squeeze, hasvicepa
864   lotti:
865     address: 206.12.19.121
866     parents: sw-ubcece-kais
867     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, hassrvfs
868   nono:
869     address: 206.12.19.123
870     parents: traetta
871     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, xinetd-hosts, apache2-hosts, apache-https, broken_https_default_vhost
872   reger:
873     address: 206.12.19.124
874     parents: ganeti2
875     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, apache-https, heavy-exim
876   danzi:
877     address: 206.12.19.125
878     parents: ganeti2
879     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, xinetd-hosts
880   glinka:
881     address: 206.12.19.126
882     parents: traetta
883     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, nfs-client, autofs, xinetd-hosts
884   tye:
885     address: 206.12.19.129
886     parents: ganeti2
887     hostgroups: computers, service, kvmdomains, wheezy, heavy-exim, apache2-hosts, nfs-client, autofs, hassrvfs
888   elgar:
889     address: 206.12.19.130
890     parents: salieri
891     hostgroups: computers, service, kvmdomains, wheezy
892   gombert:
893     address: 206.12.19.132
894     parents: ganeti2
895     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts
896   jenkins:
897     address: 206.12.19.133
898     parents: salieri
899     hostgroups: computers, service, kvmdomains, wheezy
900   blavet:
901     address: 206.12.19.134
902     parents: ganeti2
903     hostgroups: computers, service, kvmdomains, wheezy, xinetd-hosts, nfs-client, autofs
904   diabelli:
905     address: 206.12.19.136
906     parents: traetta
907     hostgroups: computers, service, hasbootfs, kvmdomains, wheezy, apache2-hosts, apache-https, broken_https_default_vhost
908   bizet:
909     address: 206.12.19.137
910     parents: ganeti2
911     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, no-bacula
912   lilburn:
913     address: 206.12.19.138
914     parents: ganeti2
915     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs
916   popov:
917     address: 206.12.19.119
918     parents: ganeti2
919     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, nfs-client, autofs, heavy-exim
920   beach:
921     address: 206.12.19.140
922     parents: ganeti2
923     hostgroups: computers, service, kvmdomains, wheezy, apache2-hosts, xinetd-hosts, hassrvfs, nfs-server, rsyncd-hosts, no-bacula, apache-https
924   ullmann:
925     address: 206.12.19.141
926     parents: ganeti2
927     hostgroups: computers, service, kvmdomains, wheezy, postgres91-hosts, nfs-client, apache2-hosts, autofs, apache-https
928   sonntag:
929     address: 206.12.19.142
930     parents: ganeti2
931     hostgroups: computers, service, kvmdomains, wheezy, nfs-client, autofs
932   menotti:
933     address: 206.12.19.143
934     parents: ganeti2
935     hostgroups: computers, service, kvmdomains, wheezy, hassrvfs, apache2-hosts, apache-https
936   muffat:
937     address: 206.12.19.146
938     parents: ganeti2
939     hostgroups: computers, service, kvmdomains, wheezy, spamd, heavy-exim, mail-relay
940   # }}}
941   # {{{ gw-ugent
942   ancina:
943     address: 157.193.39.13
944     parents: gw-ugent
945     hostgroups: computers, buildd, hassrvfs, hasbootfs, incomingmailrelayed2025, xinetd-hosts, wheezy
946     contacts: luk
947   # }}}
948   # {{{ gw-umn
949   saens:
950     address: 128.101.240.212
951     parents: gw-umn
952     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
953   # }}}
954   # {{{ gw-utwente
955   klecker:
956     address: 130.89.148.10
957     parents: gw-utwente
958     hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, acpid-hosts, xinetd-hosts, wheezy, incomingmailrelayed2025, hassrvfs
959   klecker-ftp:
960     address: 130.89.148.12
961     parents: klecker
962     hostgroups: secondary-IPs
963   klecker-archive:
964     address: 130.89.148.13
965     parents: klecker
966     hostgroups: secondary-IPs
967   klecker-static:
968     address: 130.89.148.14
969     parents: klecker
970     hostgroups: secondary-IPs
971   # }}}
972   # {{{ gw-ynic
973   howells:
974     address: 144.32.168.75
975     parents: gw-ynic
976     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
977   hummel:
978     address: 144.32.168.76
979     parents: gw-ynic
980     hostgroups: computers, hasbootfs, hassrvfs, armhf, wheezy, buildd
981   porpora:
982     address: 144.32.168.78
983     parents: gw-ynic
984     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
985   poulenc:
986     address: 144.32.168.77
987     parents: gw-ynic
988     hostgroups: computers, buildd, sw-raid, hassrvfs, wheezy
989   # }}}
990   # {{{ gw-zivit
991   zandonai:
992     address: 80.245.147.46
993     parents: gw-zivit
994     hostgroups: computers, buildd, hassrvfs, wheezy
995   zelenka:
996     address: 80.245.147.40
997     parents: gw-zivit
998     hostgroups: computers, porterbox, hassrvfs, wheezy
999   # }}}
1000   # }}}
1001
1002 # {{{ ############################# host groups #############################
1003 hostgroups:
1004   computers:
1005     alias: computers
1006     private: 1
1007   layer2-infrastructure:
1008     alias: Layer 2 Devices
1009     extinfo-icon_image: base/switch40.png
1010     extinfo-icon_image_alt: switch
1011   layer3-infrastructure:
1012     alias: Layer 3 Devices
1013     extinfo-icon_image: base/switch40.png
1014     extinfo-icon_image_alt: router
1015   notacomputer:
1016     alias: Systems that are not really systems.  Yeah :)
1017     private: 1
1018   freebsd:
1019     alias: freebsd
1020     private: 1
1021   armhf:
1022     alias: armhf
1023     private: 1
1024   sparc:
1025     alias: sparc
1026     private: 1
1027
1028   porterbox:
1029     alias: developer accessible porter machines
1030     extinfo-icon_image: base/debian.png
1031     extinfo-icon_image_alt: Debian GNU/Linux
1032     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1033   service:
1034     alias: machines running services
1035     extinfo-icon_image: base/debian.png
1036     extinfo-icon_image_alt: Debian GNU/Linux
1037     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1038   buildd:
1039     alias: buildd systems
1040     extinfo-icon_image: base/debian.png
1041     extinfo-icon_image_alt: Debian GNU/Linux
1042     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1043   general:
1044     alias: general purpose developer accessible machines
1045     extinfo-icon_image: base/debian.png
1046     extinfo-icon_image_alt: Debian GNU/Linux
1047     extinfo-notes_url: http://db.debian.org/machines.cgi?host=%s
1048
1049   dl380:
1050     alias: HP DL380 hosts
1051     private: 1
1052   dl385:
1053     alias: HP DL385 hosts
1054     private: 1
1055   dl360:
1056     alias: HP DL360 hosts
1057     private: 1
1058   bl460:
1059     alias: HP BL460 blades
1060     private: 1
1061   bm-bl:
1062     alias: HP blades at bytemark
1063     private: 1
1064   dl585:
1065     alias: HP DL385 hosts
1066     private: 1
1067   dl180:
1068     alias: HP DL180
1069     private: 1
1070   dl120:
1071     alias: HP DL120
1072     private: 1
1073   sw-raid:
1074     alias: Hosts with Linux software raid
1075     private: 1
1076   aacraid:
1077     alias: Hosts with Adaptec AACraid
1078     private: 1
1079   megaraid:
1080     alias: Hosts with LSI Logic MegaRAID
1081     private: 1
1082   mptraid:
1083     alias: Hosts with LSI Logic Fusion-MPT
1084     private: 1
1085
1086   squeeze:
1087     alias: Hosts running squeeze
1088   wheezy:
1089     alias: Hosts running wheezy
1090
1091   kvmdomains:
1092     alias: Hosts that are KVM domains
1093     private: 1
1094
1095   drbd-hosts:
1096     alias: hosts running drbd
1097   postfix-hosts:
1098     alias: hosts running postfix instead of exim
1099     private: 1
1100   heavy-exim:
1101     alias: "hosts running the full mail stuff, including clamav and postgrey"
1102     private: 1
1103   mail-relay:
1104     alias: "relays usually are hosts with more exim processes"
1105     private: 1
1106   spamd:
1107     alias: "hosts running spamassassin as daemon"
1108     private: 1
1109   heavy-postfix:
1110     alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1111     private: 1
1112   apache2-hosts:
1113     alias: hosts running apache2
1114     private: 1
1115   jetty-hosts:
1116     alias: hosts running jetty
1117     private: 1
1118   bind9-hosts:
1119     alias: hosts running bind9
1120     private: 1
1121   # once every host runs unbound, do away with this group and check "computers" instead
1122   amavis-hosts:
1123     alias: hosts running amavis
1124     private: 1
1125   rsyncd-hosts:
1126     alias: hosts providing rsync services via xinetd
1127     private: 1
1128   xinetd-hosts:
1129     alias: hosts providing services via xinetd
1130     private: 1
1131   postgres91-hosts:
1132     alias: hosts running postgres91
1133     private: 1
1134   no-ulogd:
1135     alias: hosts not running ulogd
1136     private: 1
1137   acpid-hosts:
1138     alias: hosts running acpid
1139     private: 1
1140   uploadqueue:
1141     alias: hosts that are an anonymous ftp uploadqueue
1142     private: 1
1143   bosserver:
1144     alias: hosts running bosserver
1145     private: 1
1146   apache-https:
1147     alias: hosts with https services
1148     private: 1
1149   broken_https_default_vhost:
1150     alias: https default vhost does not say 200 OK
1151     private: 1
1152
1153   no-bacula:
1154     alias: hosts which are not being backed up with bacula
1155     private: 1
1156
1157   nfs-client:
1158     alias: hosts mounting filesystems using NFS
1159     private: 1
1160   nfs-server:
1161     alias: hosts serving filesystems using NFS
1162     private: 1
1163   autofs:
1164     alias: hosts running the automounter
1165     private: 1
1166
1167   highload:
1168     alias: "hosts on which high load is normal"
1169     private: 1
1170
1171   secondary-IPs:
1172     alias: secondary IP addresses
1173     private: 1
1174
1175   hasbootfs:
1176     alias: hosts with a /boot filesystem
1177     private: 1
1178   hassrvfs:
1179     alias: hosts with a /srv filesystem
1180     private: 1
1181   hasorgfs:
1182     alias: hosts with a /org filesystem
1183     private: 1
1184   hashomefs:
1185     alias: hosts with a /home filesystem
1186     private: 1
1187   hasvarfs:
1188     alias: hosts with a /var filesystem
1189     private: 1
1190   hasvarlogfs:
1191     alias: hosts with a /var/log filesystem
1192     private: 1
1193   hasusrfs:
1194     alias: hosts with a /usr filesystem
1195     private: 1
1196
1197   incomingmailrelayed:
1198     alias: incoming mail needs to go through a mail relay
1199     # i.e. no port 25
1200     private: 1
1201   incomingmailrelayed2025:
1202     alias: incoming mail needs to go through a mail relay
1203     # i.e. no port 25
1204     private: 1
1205
1206   brokensamhain:
1207     alias: machines that can not run samhain
1208     private: 1
1209   high-RTT:
1210     alias: machines with high round trip times
1211     private: 1
1212   ping-suckers:
1213     alias: machines that just suck at icmp
1214     private: 1
1215   alioth:
1216     alias: machines that just are just awkward
1217     private: 1
1218   openstack-compute:
1219     alias: nodes that run OpenStack compute
1220     private: 1
1221   openstack-controller:
1222     alias: nodes that run OpenStack controller
1223     private: 1
1224
1225   security_mirror:
1226     alias: hosts that are security mirrors
1227     private: 1
1228
1229   broken_mq:
1230     alias: hosts whose MQ is broken
1231     private: 1
1232 # }}}
1233 # {{{ ############################# servicegroups #############################
1234 servicegroups:
1235   diskspace:
1236     alias: diskusage checks
1237   buildd:
1238     alias: buildd checks
1239   raid:
1240     alias: raid checks
1241   backup:
1242     alias: backup checks
1243   kernel:
1244     alias: kernel checks
1245   apt:
1246     alias: apt upgrade status
1247   samhain:
1248     alias: samhain integrity status
1249   time:
1250     alias: time stuff
1251   security:
1252     alias: security
1253     servicegroup_members: apt, kernel, samhain
1254   MQ:
1255     alias: rabbitMQ stuff
1256 # }}}
1257 # {{{ ############################# services #############################
1258 services:
1259   # {{{ ### basic networking
1260   -
1261     name: PING
1262     check: "check_ping!350.0,20%!600.0,40%"
1263     hostgroups: pingable
1264     excludehostgroups: layer3-infrastructure, high-RTT, ping-suckers
1265     normal_check_interval: 5
1266     max_check_attempts: 4
1267     retry_check_interval: 1
1268   -
1269     name: PING
1270     check: "check_ping!600.0,20%!900.0,40%"
1271     hostgroups: high-RTT
1272     normal_check_interval: 5
1273     max_check_attempts: 4
1274     retry_check_interval: 1
1275   -
1276     name: PING
1277     check: "check_ping!600.0,90%!900.0,95%"
1278     hostgroups: ping-suckers
1279     normal_check_interval: 5
1280     max_check_attempts: 4
1281     retry_check_interval: 1
1282   -
1283     name: PING
1284     check: "check_ping!2000.0,60%!3000.0,80%"
1285     hostgroups: layer3-infrastructure
1286     normal_check_interval: 5
1287     max_check_attempts: 4
1288     retry_check_interval: 1
1289   # }}}
1290   # {{{ ### disk usage
1291   -
1292     name: disk usage - all
1293     servicegroups: diskspace
1294     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount'"
1295     hostgroups: computers
1296     excludehosts: sibelius,stabile
1297   -
1298     name: disk usage - all
1299     servicegroups: diskspace
1300     nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 3%  -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs --ignore-eregi-path=/srv/snapshot.debian.org"
1301     hosts: stabile
1302   -
1303     name: disk usage - all
1304     servicegroups: diskspace
1305     nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs 95 98"
1306     hosts: sibelius
1307
1308   -
1309     name: disk usage on /
1310     servicegroups: diskspace
1311     nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1312     hostgroups: computers
1313     excludehosts: spohr
1314   -
1315     name: disk usage on /
1316     servicegroups: diskspace
1317     nrpe: "/usr/lib/nagios/plugins/check_disk 90 93 /"
1318     hosts: spohr
1319   -
1320     name: disk usage on /boot
1321     servicegroups: diskspace
1322     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1323     hostgroups: hasbootfs
1324   -
1325     name: disk usage on /var
1326     servicegroups: diskspace
1327     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var"
1328     hostgroups: hasvarfs
1329   -
1330     name: disk usage on /org
1331     servicegroups: diskspace
1332     nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /org"
1333     hostgroups: hasorgfs
1334   -
1335     name: disk usage on /srv
1336     servicegroups: diskspace
1337     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv"
1338     hostgroups: hassrvfs
1339   -
1340     name: disk usage on /tmp
1341     servicegroups: diskspace
1342     nrpe: "/usr/lib/nagios/plugins/check_disk 60 80 /tmp"
1343     hosts: saens
1344   -
1345     name: disk usage on /usr
1346     servicegroups: diskspace
1347     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /usr"
1348     hostgroups: hasusrfs
1349   -
1350     name: disk usage on /home
1351     servicegroups: diskspace
1352     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /home"
1353     hostgroups: hashomefs
1354   -
1355     name: disk usage on /var/lib/postgresql
1356     servicegroups: diskspace
1357     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1358     hosts: sibelius, busoni, buxtehude, lw04
1359   -
1360     name: disk usage on /var/log
1361     servicegroups: diskspace
1362     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1363     hostgroups: hasvarlogfs
1364   -
1365     name: disk usage on /var/spool/postfix
1366     servicegroups: diskspace
1367     nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1368     hosts: bendel
1369   -
1370     name: disk usage on /srv/mirrors
1371     servicegroups: diskspace
1372     nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1373     hosts: beethoven, sibelius
1374   -
1375     name: disk usage on /srv/snapshot.debian.org
1376     servicegroups: diskspace
1377     nrpe: "/usr/lib/nagios/plugins/check_disk 98 99 /srv/snapshot.debian.org"
1378     hosts: stabile
1379   -
1380     name: disk usage on /srv/snapshot.debian.org
1381     servicegroups: diskspace
1382     nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1383     hosts: sibelius
1384   -
1385     name: disk usage on /srv/farm-snapshot/farm-misc
1386     servicegroups: diskspace
1387     nrpe: "/usr/lib/nagios/plugins/check_disk 97 95 /srv/farm-snapshot/farm-misc"
1388     hosts: sibelius
1389   -
1390     name: disk usage on /var/lib/postgresql/9.1
1391     servicegroups: diskspace
1392     nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /var/lib/postgresql/9.1"
1393     hosts: franck
1394   -
1395     name: disk usage on /srv/ftp-master.debian.org
1396     servicegroups: diskspace
1397     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/ftp-master.debian.org"
1398     hosts: franck
1399   -
1400     name: disk usage on /srv/pgbackup
1401     servicegroups: diskspace
1402     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/pgbackup"
1403     hosts: beethoven
1404   -
1405     name: disk usage on /srv/git-backup
1406     servicegroups: diskspace
1407     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/git-backup"
1408     hosts: beethoven
1409   -
1410     name: disk usage on /srv/da-backup
1411     servicegroups: diskspace
1412     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/da-backup"
1413     hosts: beethoven
1414   -
1415     name: disk usage on /srv/bacula
1416     servicegroups: diskspace
1417     nrpe: "/usr/lib/nagios/plugins/check_disk 85 95 /srv/bacula"
1418     hosts: beethoven
1419   -
1420     name: disk usage on /storage/snapshot-farm-1
1421     servicegroups: diskspace
1422     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-1"
1423     hosts: lw01
1424   -
1425     name: disk usage on /storage/snapshot-farm-2
1426     servicegroups: diskspace
1427     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-2"
1428     hosts: lw02
1429   -
1430     name: disk usage on /storage/snapshot-farm-3
1431     servicegroups: diskspace
1432     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-3"
1433     hosts: lw03
1434   -
1435     name: disk usage on /storage/snapshot-farm-4
1436     servicegroups: diskspace
1437     nrpe: "/usr/lib/nagios/plugins/check_disk 98 92 /storage/snapshot-farm-4"
1438     hosts: lw04
1439   -
1440     name: disk usage on /srv/morgue.debian.org/
1441     servicegroups: diskspace
1442     nrpe: "/usr/lib/nagios/plugins/check_disk 95 90 /srv/morgue.debian.org"
1443     hosts: lw03
1444   # }}}
1445   # {{{ ### system
1446   # {{{ setup
1447   -
1448     name: setup - dsa config
1449     nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1450     hostgroups: computers
1451     normal_check_interval: 60
1452     excludehostgroups: alioth
1453   -
1454     name: setup - local hostname etc-hosts
1455     nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1456     hostgroups: computers
1457     normal_check_interval: 60
1458   # }}}
1459   # {{{ os health
1460   ####
1461   -
1462     name: users
1463     nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1464     hostgroups: computers
1465   -
1466     name: load
1467     nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1468     hostgroups: computers
1469     excludehostgroups: highload
1470   -
1471     name: load
1472     nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1473     hostgroups: highload
1474   -
1475     name: uptime check
1476     nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1477     hostgroups: computers
1478   -
1479     name: processes - total
1480     nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1481     hostgroups: computers
1482   -
1483     name: swap usage - percent
1484     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20% -c 10%"
1485     hostgroups: computers
1486   -
1487     name: swap usage - mb
1488     nrpe: "/usr/lib/nagios/plugins/check_swap -w 20000 -c 5000"
1489     hostgroups: computers
1490   -
1491     name: process - getty
1492     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1493     hostgroups: computers
1494     excludehosts: zelenka, zandonai
1495   -
1496     name: processes - zombies
1497     nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1498     hostgroups: computers
1499   -
1500     name: system - available entropy
1501     nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1502     event_handler: dsa_event_handler_restart_ekey
1503     hostgroups: computers
1504     excludehostgroups: freebsd
1505   -
1506     name: system - filesystem check
1507     nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1508     normal_check_interval:  60
1509     retry_check_interval: 15
1510     hostgroups: computers
1511   # }}}
1512   # {{{ backup
1513   -
1514     name: backup
1515     servicegroups: backup
1516     nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1517     hostgroups: computers
1518     excludehosts: backuphost
1519     normal_check_interval: 60
1520     max_check_attempts: 2
1521     retry_check_interval: 5
1522   -
1523     name: backup server config
1524     servicegroups: backup
1525     nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1526     hosts: beethoven, backuphost
1527     normal_check_interval: 60
1528     max_check_attempts: 2
1529     retry_check_interval: 5
1530   -
1531     name: backup - bacula - last backup
1532     servicegroups: backup
1533     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1534     runfrom: dinis
1535     hostgroups: computers
1536     excludehostgroups: buildd, porterbox, no-bacula
1537     normal_check_interval:  60
1538     retry_check_interval: 15
1539   -
1540     name: backup - bacula - last full backup
1541     servicegroups: backup
1542     remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1543     runfrom: dinis
1544     hostgroups: computers
1545     excludehostgroups: buildd, porterbox, no-bacula
1546     normal_check_interval:  60
1547     retry_check_interval: 15
1548   -
1549     name: process - bacula-fd
1550     servicegroups: backup
1551     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1552     hostgroups: computers
1553     excludehostgroups: freebsd, alioth
1554   -
1555     name: process - bacula-fd
1556     servicegroups: backup
1557     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1558     hostgroups: freebsd
1559
1560   ####
1561   -
1562     name: process - acc.umu.se backup
1563     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1564     hosts: sibelius
1565   # }}}
1566   # {{{ security
1567   -
1568     name: running kernel
1569     servicegroups: kernel
1570     nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1571     hostgroups: computers
1572     normal_check_interval: 60
1573     retry_check_interval: 5
1574   -
1575     name: apt - security updates
1576     servicegroups: apt
1577     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1578     hostgroups: computers
1579     normal_check_interval:  60
1580     retry_check_interval: 15
1581   -
1582     name: installed firewall
1583     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1584     hostgroups: computers
1585     excludehostgroups: freebsd
1586   -
1587     name: puppetized firewall
1588     nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1589     hostgroups: computers
1590     excludehostgroups: freebsd
1591   -
1592     name: process - ulogd
1593     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1594     hostgroups: computers
1595     excludehostgroups: freebsd, sparc
1596   -
1597     name: unexpected process - ulogd
1598     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1599     hostgroups: freebsd, sparc
1600   ####
1601   -
1602     name: process - samhain
1603     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1604     hostgroups: computers
1605     excludehostgroups: brokensamhain
1606   -
1607     name: samhain
1608     servicegroups: samhain
1609     nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1610     hostgroups: computers
1611     depends: process - samhain
1612     normal_check_interval: 60
1613     retry_check_interval: 5
1614     excludehostgroups: brokensamhain
1615   -
1616     name: processes - samhain zombies
1617     nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1618     event_handler: dsa_event_handler_restart_samhain
1619     hostgroups: computers
1620     excludehostgroups: brokensamhain
1621   # }}}
1622   # {{{ logging
1623   -
1624     name: process - syslog-ng
1625     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1626     hostgroups: computers
1627     excludehostgroups: freebsd
1628
1629   -
1630     name: process - syslog-ng
1631     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:2 -c 2: -u root -C syslog-ng  -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1632     hostgroups: freebsd
1633
1634   -
1635     name: remote logging on lotti
1636     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1637     runfrom: lotti
1638     hostgroups: computers
1639     excludehostgroups: alioth
1640   -
1641     name: remote logging on lully
1642     remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1643     runfrom: lully
1644     hostgroups: computers
1645     excludehostgroups: alioth
1646   # }}}
1647   # {{{ base service
1648   -
1649     name: process - sshd
1650     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1651     hostgroups: computers
1652   -
1653     name: "network service - sshd"
1654     check: dsa_check_ssh
1655     hostgroups: computers
1656     depends: process - sshd
1657     normal_check_interval:  60
1658     notification_interval: 1440
1659   ####
1660   -
1661     name: network service - nrpe
1662     check: check_tcp!5666
1663     hostgroups: computers
1664     max_check_attempts: -2
1665     notification_interval: 1440
1666   -
1667     name: process - nrpe
1668     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1669     hostgroups: computers
1670     max_check_attempts: -1
1671     depends: network service - nrpe
1672   ###
1673   -
1674     name: process - munin-node
1675     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a '/usr/sbin/munin-node'"
1676     hostgroups: computers
1677     excludehostgroups: freebsd, armhf
1678   -
1679     name: process - munin-node
1680     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C perl -a '/usr/bin/perl -wT /usr/sbin/munin-node'"
1681     hostgroups: freebsd
1682   -
1683     name: process - munin-node
1684     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1685     hostgroups: wheezy
1686     excludehostgroups: freebsd
1687   -
1688     name: network service - munin-node
1689     check: check_tcp!4949
1690     hostgroups: computers
1691     depends: process - munin-node
1692   ###
1693   -
1694     name: process - ntpd
1695     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1696     hostgroups: computers
1697     servicegroups: time
1698   -
1699     name: network service - ntp
1700     check: dsa_check_ntp
1701     hostgroups: computers
1702     depends: process - ntpd
1703     excludehosts: ancina
1704     servicegroups: time
1705   ###
1706   -
1707     name: network service - time
1708     check: dsa_check_time
1709     hosts: ancina
1710     depends: process - xinetd
1711     servicegroups: time
1712   ###
1713   -
1714     name: process - atd
1715     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1716     hostgroups: computers
1717   ###
1718   -
1719     name: process - cron
1720     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1721     hostgroups: computers
1722   ###
1723   -
1724     name: process - ud-replicated
1725     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1726     hostgroups: computers
1727     excludehostgroups: squeeze, freebsd, alioth
1728   -
1729     name: process - ud-replicated
1730     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C python2.7 -a '/usr/bin/python /usr/bin/ud-replicated'"
1731     hostgroups: freebsd
1732   ###
1733   -
1734     name: process - monit
1735     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/sbin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1736     hostgroups: squeeze
1737   -
1738     name: process - monit
1739     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1740     hostgroups: computers
1741     excludehostgroups: squeeze, alioth
1742   ###
1743   -
1744     name: MQ connection on rainier
1745     servicegroups: MQ
1746     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1747     runfrom: rainier
1748     hostgroups: computers
1749     normal_check_interval:  60
1750     retry_check_interval: 15
1751     excludehostgroups: alioth, broken_mq
1752   -
1753     name: MQ connection on rapoport
1754     servicegroups: MQ
1755     remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1756     runfrom: rapoport
1757     hostgroups: computers
1758     normal_check_interval:  60
1759     retry_check_interval: 15
1760     excludehostgroups: alioth, broken_mq
1761   ###
1762   -
1763     name: local resolver
1764     nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1765     hostgroups: computers
1766     normal_check_interval: 60
1767   -
1768     name: process - unbound
1769     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1770     hostgroups: computers
1771     excludehostgroups: alioth
1772   ###
1773   -
1774     name: process - uptimed
1775     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1776     hostgroups: computers
1777   ###
1778   -
1779     name: process - udevd
1780     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1781     hostgroups: computers
1782     excludehostgroups: freebsd
1783   -
1784     name: unexpected process - udev
1785     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C udevd"
1786     hostgroups: freebsd
1787   ###
1788   -
1789     name: process - acpid
1790     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1791     hostgroups: acpid-hosts
1792   -
1793     name: unexpected process - acpid
1794     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1795     hostgroups: computers
1796     excludehostgroups: acpid-hosts, kvmdomains
1797   ###
1798   -
1799     name: process - xinetd
1800     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd -pidfile /var/run/xinetd.pid -stayalive'"
1801     hostgroups: xinetd-hosts
1802   -
1803     name: unwanted process - xinetd
1804     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1805     hostgroups: computers
1806     excludehostgroups: xinetd-hosts
1807   ###
1808   -
1809     name: process - stunnel4 - puppet-ekeyd
1810     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1811     hostgroups: squeeze, wheezy
1812     excludehostgroups: freebsd, alioth
1813   # }}}
1814   # {{{ anti-services
1815   -
1816     name: ganeti - job watcher paused
1817     nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1818     hostgroups: computers
1819   -
1820     name: unwanted process - irqbalance
1821     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C irqbalance"
1822     hostgroups: computers
1823   -
1824     name: unwanted process - openvpn
1825     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1826     hostgroups: computers
1827     normal_check_interval: 120
1828   -
1829     name: unwanted process - gkrellmd
1830     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1831     hostgroups: computers
1832   -
1833     name: unwanted process - rpc.statd
1834     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1835     hostgroups: computers
1836     excludehostgroups: nfs-client, nfs-server
1837   -
1838     name: unwanted process - inetd
1839     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1840     hostgroups: computers
1841     excludehosts: abel
1842   -
1843     name: unwanted process - snmpd
1844     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1845     hostgroups: computers
1846   # }}}
1847   # {{{ ssl certs
1848   -
1849     name: "host SSL cert"
1850     nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1851     hostgroups: computers
1852   # }}}
1853   # {{{ HW health/raid
1854   -
1855     name: process - mdadm monitor
1856     servicegroups: raid
1857     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /var/run/mdadm/monitor.pid --daemonise --scan'"
1858     hostgroups: sw-raid
1859     excludehostgroups: wheezy
1860   -
1861     # wheezy:
1862     name: process - mdadm monitor
1863     servicegroups: raid
1864     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1865     hostgroups: sw-raid
1866     excludehostgroups: squeeze
1867   -
1868     name: RAID - sw raid
1869     servicegroups: raid
1870     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
1871     hostgroups: sw-raid
1872   ###
1873   -
1874     name: HW - hpacucli status
1875     servicegroups: raid
1876     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli"
1877     normal_check_interval: 120
1878     hostgroups: dl385, dl380, dl360, bl460, dl180
1879     excludehosts: schein, rietz
1880   -
1881     name: HW - hpacucli status
1882     servicegroups: raid
1883     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
1884     normal_check_interval: 120
1885     hostgroups: bm-bl
1886   -
1887     name: HW - hpacucli status
1888     servicegroups: raid
1889     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-battery"
1890     normal_check_interval: 120
1891     hosts: schein, rietz
1892   -
1893     name: HW - hpacucli enclosure status
1894     servicegroups: raid
1895     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli-enclosure 1 1E:1"
1896     normal_check_interval: 120
1897     hosts: franck
1898   -
1899     name: HW - hpacucli status
1900     servicegroups: raid
1901     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --ignore-transfer-speed=1I:1:1 --ignore-transfer-speed=1I:1:2"
1902     normal_check_interval: 120
1903     hostgroups: dl585
1904   ###
1905   -
1906     name: HW - edac status
1907     nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
1908     normal_check_interval: 120
1909     hosts: lw05, lw06
1910     #hostgroups: computers
1911     #excludehosts: villa, lobos, senfl, schein
1912   -
1913     name: HW - hpasmcli status
1914     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
1915     normal_check_interval: 120
1916     hostgroups: dl385, dl380, dl360, bl460, dl585, bm-bl
1917     excludehosts: villa, lobos, senfl, schein, storace
1918   -
1919     name: HW - hpasmcli status
1920     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
1921     normal_check_interval: 120
1922     hosts: villa
1923   -
1924     name: HW - hpasmcli status
1925     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant  --ignore-failed='PS2'"
1926     normal_check_interval: 120
1927     hosts: lobos
1928   -
1929     name: HW - hpasmcli status
1930     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
1931     normal_check_interval: 120
1932     hosts: senfl, schein
1933   -
1934     name: HW - hpasmcli status
1935     nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
1936     normal_check_interval: 120
1937     hosts: storace
1938   ###
1939   -
1940     name: RAID - 3ware
1941     servicegroups: raid
1942     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-3ware"
1943     hosts: powell
1944   ###
1945   -
1946     name: RAID - aacraid
1947     servicegroups: raid
1948     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
1949     hostgroups: aacraid
1950   ###
1951   -
1952     name: RAID - megaraid
1953     servicegroups: raid
1954     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-megaraid"
1955     hostgroups: megaraid
1956   ###
1957   -
1958     name: RAID - MPT
1959     servicegroups: raid
1960     nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-mpt"
1961     hostgroups: mptraid
1962   ###
1963   -
1964     name: RAID - DRBD
1965     servicegroups: raid
1966     nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
1967     hostgroups: drbd-hosts
1968   # }}}
1969   # }}}
1970   # {{{ ### mail stuff
1971   # {{{ exim processes and mailq
1972   -
1973     name: process - exim
1974     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1975     hostgroups: computers
1976     excludehostgroups: postfix-hosts, mail-relay
1977     excludehosts: master, busoni, quantz, buxtehude
1978   -
1979     name: process - exim
1980     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
1981     hostgroups: mail-relay
1982   -
1983     name: process - exim - total
1984     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
1985     hostgroups: computers
1986     excludehostgroups: postfix-hosts
1987     excludehosts: master, busoni, quantz, buxtehude
1988   -
1989     name: process - exim
1990     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
1991     hosts: master, busoni, quantz, buxtehude
1992   -
1993     name: mail queue
1994     nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
1995     hostgroups: heavy-exim
1996   # }}}
1997   # {{{ clamav
1998   -
1999     name: process - clamav - clamd
2000     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2001     hostgroups: heavy-exim, heavy-postfix
2002   -
2003     name: service - clamav
2004     nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2005     hostgroups: heavy-exim, heavy-postfix
2006     depends: process - clamav - clamd
2007   -
2008     name: process - clamav - freshclam
2009     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2010     hostgroups: heavy-exim, heavy-postfix
2011   -
2012     name: unwanted process - clamav
2013     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2014     hostgroups: computers
2015     excludehostgroups: heavy-exim, heavy-postfix
2016   -
2017     name: unwanted process - freshclam
2018     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2019     hostgroups: computers
2020     excludehostgroups: heavy-exim, heavy-postfix
2021   # }}}
2022   # {{{ anti-spam
2023   -
2024     name: process - spamd - master
2025     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2026     hostgroups: spamd
2027     excludehosts: picconi
2028   -
2029     name: process - spamd - master
2030     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 20 --min-spare=5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2031     hosts: picconi
2032   -
2033     name: process - spamd - master
2034     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 10 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2035     hosts: bendel
2036   -
2037     name: process - spamd - child
2038     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2039     hosts: bendel
2040     hostgroups: spamd
2041     depends: process - spamd - master
2042   #
2043   -
2044     name: process - spamd - master
2045     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u debbugs -C spamd -a '/usr/sbin/spamd -d '"
2046     hosts: buxtehude
2047   -
2048     name: process - spamd - child
2049     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u debbugs -C spamd -a 'spamd child'"
2050     hosts: buxtehude
2051   #
2052   -
2053     name: unwanted process - spamd
2054     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2055     hostgroups: computers
2056     excludehostgroups: spamd
2057     excludehosts: bendel, busoni, buxtehude
2058
2059   -
2060     name: unwanted process - greylistd
2061     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2062     hostgroups: computers
2063
2064   ###
2065   -
2066     name: process - postgrey
2067     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2068     hostgroups: heavy-exim
2069   -
2070     name: process - postgrey
2071     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2072     hostgroups: heavy-postfix
2073   #
2074   -
2075     name: unwanted process - postgrey
2076     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2077     hostgroups: computers
2078     excludehostgroups: heavy-postfix, heavy-exim
2079   ###
2080   -
2081     name: process - amavis - master
2082     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2083     hostgroups: amavis-hosts
2084   -
2085     name: process - amavis - all
2086     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2087     hostgroups: amavis-hosts
2088     depends: process - amavis - master
2089   #
2090   -
2091     name: unwanted process - amavis
2092     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2093     hostgroups: computers
2094     excludehostgroups: amavis-hosts
2095   ###
2096   -
2097     name: process - weightd - master
2098     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2099     hostgroups: heavy-postfix, alioth
2100   -
2101     name: process - weightd - cache
2102     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2103     hostgroups: heavy-postfix, alioth
2104     depends: process - weightd - master
2105   -
2106     name: process - weightd - child
2107     nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2108     hostgroups: heavy-postfix, alioth
2109     depends: process - weightd - master
2110   ###
2111   -
2112     name: unwanted process - policyd-weight
2113     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2114     hostgroups: computers
2115     excludehostgroups: heavy-postfix, alioth
2116   # }}}
2117   # {{{ postfix
2118   ###
2119   -
2120     name: process - postfix - master
2121     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/master'"
2122     hostgroups: postfix-hosts
2123   -
2124     name: process - postfix - qmgr
2125     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t fifo -u'"
2126     hostgroups: postfix-hosts
2127     depends: process - postfix - master
2128   -
2129     name: process - postfix - pickup
2130     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t fifo -u -c'"
2131     hostgroups: postfix-hosts
2132     depends: process - postfix - master
2133   -
2134     name: process - postfix - anvil
2135     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2136     hostgroups: postfix-hosts
2137     depends: process - postfix - master
2138
2139   -
2140     name: process - postfix - trivial-rewrite
2141     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2142     hostgroups: postfix-hosts
2143     depends: process - postfix - master
2144   -
2145     name: process - postfix - proxymap
2146     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2147     hostgroups: postfix-hosts
2148     depends: process - postfix - master
2149   -
2150     name: process - postfix - cleanup
2151     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2152     hostgroups: postfix-hosts
2153     depends: process - postfix - master
2154   -
2155     name: process - postfix - local
2156     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2157     hostgroups: postfix-hosts
2158     depends: process - postfix - master
2159
2160   -
2161     name: network service local - smtps cert
2162     nrpe: "/usr/lib/nagios/plugins/check_http -H localhost -p 465 -S -C 14 -t 45"
2163     hostgroups: postfix-hosts
2164     depends: process - postfix - master
2165     normal_check_interval: 120
2166   # }}}
2167   # {{{ mail - network service
2168   -
2169     name: network service - smtp
2170     check: dsa_check_smtp
2171     hostgroups: computers
2172     excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2173     depends: process - exim
2174
2175   -
2176     name: network service - smtp
2177     check: dsa_check_smtp
2178     hostgroups: postfix-hosts
2179     depends: process - postfix - master
2180   -
2181     name: network service - submission
2182     check: dsa_check_smtp_port!587
2183     hostgroups: incomingmailrelayed
2184     depends: process - exim
2185   -
2186     name: network service - smtp 2025
2187     check: dsa_check_smtp_port!2025
2188     hostgroups: incomingmailrelayed2025
2189     depends: process - exim
2190   # }}}
2191   # }}}
2192   # {{{ ### host specific services
2193   # {{{ HTTP
2194   -
2195     name: process - apache2 - master
2196     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2197     hostgroups: apache2-hosts
2198   -
2199     name: process - apache2 - worker
2200     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2201     hostgroups: apache2-hosts
2202     depends: process - apache2 - master
2203   -
2204     name: unwanted process - apache2
2205     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2206     hostgroups: computers
2207     excludehostgroups: apache2-hosts
2208
2209   -
2210     name: network service - http
2211     check: check_http
2212     hostgroups: apache2-hosts
2213     excludehosts: klecker
2214     depends: process - apache2 - master
2215   -
2216     name: network service - http
2217     check: check_http
2218     depends: klecker:process - apache2 - master
2219     hosts: klecker-ftp
2220
2221   # keyserver on kaufmann
2222   -
2223     name: network service - http keyserver
2224     check: dsa_check_http_port!11371
2225     hosts: kaufmann
2226     depends: process - apache2 - master
2227
2228   # https on various hosts
2229   -
2230     name: network service - https
2231     check: check_https
2232     hostgroups: apache-https
2233     excludehosts: handel,menotti
2234     excludehostgroups: broken_https_default_vhost
2235     depends: "process - apache2 - master"
2236     normal_check_interval: 120
2237   -
2238     name: network service - https
2239     check: dsa_check_https_want_auth
2240     hosts: handel,menotti
2241     depends: "process - apache2 - master"
2242     normal_check_interval: 120
2243   -
2244     name: network service - https
2245     check: dsa_check_https_any_status
2246     hostgroups: broken_https_default_vhost
2247     depends: "process - apache2 - master"
2248     normal_check_interval: 120
2249   -
2250     name: network service - https cert
2251     check: dsa_check_cert!443
2252     hostgroups: apache-https
2253     depends: network service - https
2254     normal_check_interval: 60
2255   -
2256     name: unwanted network service - https
2257     check: dsa_check_port_closed!443
2258     hostgroups: apache2-hosts
2259     excludehostgroups: apache-https
2260     # ravel does ssh on port 443
2261     excludehosts: ravel
2262     normal_check_interval: 60
2263   # }}}
2264   # {{{ FTP
2265   -
2266     name: network service - ftp
2267     check: check_ftp
2268     hostgroups: uploadqueue, security_mirror
2269     excludehosts: klecker
2270   -
2271     name: network service - ftp
2272     check: check_ftp
2273     hosts: klecker-ftp
2274     depends: klecker:process - xinetd
2275   # }}}
2276   # {{{ postgres
2277   -
2278     name: unwanted process - postgresql
2279     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2280     hostgroups: computers
2281     excludehostgroups: postgres91-hosts
2282   -
2283     name: unwanted process - postgresql 9.0
2284     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2285     hostgroups: computers
2286   -
2287     name: process - postgresql91 - master
2288     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2289     hostgroups: postgres91-hosts
2290   -
2291     name: postgresql backups
2292     nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2293     hosts: backuphost
2294   # }}}
2295   # {{{ power
2296 #  -
2297 #    name: process - UPS - nut usbhid-ups - ups1
2298 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C usbhid-ups  -a '/lib/nut/usbhid-ups -a ups1'"
2299 #    hosts: franck
2300 #  -
2301 #    name: process - UPS - nut upsd
2302 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsd  -a '/sbin/upsd'"
2303 #    hosts: franck
2304 #  -
2305 #    name: process - UPS - nut upsmon master
2306 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C upsmon  -a '/sbin/upsmon'"
2307 #    hosts: franck
2308 #  -
2309 #    name: process - UPS - nut upsmon worker
2310 #    nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u nut -C upsmon  -a '/sbin/upsmon'"
2311 #    hosts: franck
2312 #    depends: process - UPS - nut upsmon master
2313 #  -
2314 #    name: UPS - on line power
2315 #    nrpe: "/usr/lib/nagios/plugins/dsa-check-ups"
2316 #    hosts: franck
2317 #    depends: process - UPS - nut upsd
2318   # }}}
2319   # {{{ buildd
2320   -
2321     name: process - buildd
2322     servicegroups: buildd
2323     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C perl -a '/usr/bin/buildd'"
2324     hosts: fano, finzi, fils, fayrfax
2325     contact_groups: buildd
2326   -
2327     name: process - buildd
2328     servicegroups: buildd
2329     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2330     hostgroups: buildd
2331     excludehosts: fano, finzi, fils, fayrfax
2332     contact_groups: buildd
2333   -
2334     name: processes - zombie schroot
2335     nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2336     hostgroups: buildd
2337     contact_groups: +buildd
2338     normal_check_interval: 5
2339     max_check_attempts: 24
2340     retry_check_interval: 5
2341   -
2342     name: processes - lvcreate
2343     nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2344     hostgroups: buildd
2345     contact_groups: +buildd
2346   # }}}
2347   # {{{ NFS Stuff
2348   -
2349     name: process - statd
2350     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2351     hostgroups: nfs-client, nfs-server
2352   -
2353     name: process - nfsd
2354     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2355     hostgroups: nfs-server
2356   -
2357     name: process - lockd
2358     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2359     hostgroups: nfs-server
2360   -
2361     name: process - mountd
2362     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2363     hostgroups: nfs-server
2364   #
2365   -
2366     name: process - automount
2367     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2368     hostgroups: autofs
2369   -
2370     name: unwanted process - automount
2371     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2372     hostgroups: computers
2373     excludehostgroups: autofs
2374   # }}}
2375   # {{{ mirroring
2376   -
2377     name: mirror sync - bugs
2378     check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2379     hosts: global
2380   -
2381     name: mirror sync - security
2382     check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2383     hosts: global
2384   -
2385     name: mirror sync - packages
2386     check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2387     hosts: global
2388     normal_check_interval: 15
2389     max_check_attempts: 5
2390     retry_check_interval: 5
2391   -
2392     name: mirror sync - snapshot
2393     check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2394     hosts: global
2395     normal_check_interval: 15
2396     max_check_attempts: 5
2397     retry_check_interval: 5
2398   # }}}
2399   # {{{ DNS
2400   -
2401     name: process - named
2402     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named -u bind'"
2403     hostgroups: bind9-hosts
2404   -
2405     name: network service - dns
2406     check: check_dns
2407     hostgroups: bind9-hosts
2408     depends: process - named
2409   -
2410     name: unwanted process - named
2411     nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2412     hostgroups: computers
2413     excludehostgroups: bind9-hosts
2414   ###
2415   -
2416     name: DNS SOA sync - debian.org
2417     check: "dsa_check_soas_add!denis.debian.org!debian.org"
2418     hosts: global
2419   -
2420     name: DNS SOA sync - debian.net
2421     check: "dsa_check_soas_add!denis.debian.org!debian.net"
2422     hosts: global
2423   -
2424     name: DNS SOA sync - debian.com
2425     check: "dsa_check_soas_add!denis.debian.org!debian.com"
2426     hosts: global
2427   -
2428     name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2429     check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2430     hosts: global
2431   -
2432     name: DNS SOA sync - alioth.debian.org
2433     check: "dsa_check_soas_add!denis.debian.org!alioth.debian.org"
2434     hosts: global
2435   -
2436     name: DNS - delegation and signature expiry
2437     hosts: global
2438     remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2439     runfrom: denis
2440   -
2441     name: DNS - security delegations
2442     hosts: global
2443     remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2444     runfrom: denis
2445   -
2446     name: DNS - key coverage
2447     hosts: global
2448     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2449     runfrom: denis
2450   -
2451     name: DNS - DS expiry
2452     hosts: global
2453     remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2454     runfrom: denis
2455   # }}}
2456   # {{{ storage
2457   -
2458     name: ping alive check
2459     remotecheck: "/usr/lib/nagios/plugins/check_ping -H $HOSTADDRESS$ -w 50,10% -c 200,30%"
2460     runfrom: dijkstra
2461     hosts: giustini
2462     normal_check_interval: 5
2463     max_check_attempts: 4
2464     retry_check_interval: 1
2465   -
2466     name: Overall Unit Status
2467     remotecheck: "/usr/lib/nagios/plugins/check_snmp -H $HOSTADDRESS$ -C public -P 2c -o connUnitStatus -n -c 3 -w 3"
2468     runfrom: dijkstra
2469     hosts: giustini
2470   -
2471     name: event log
2472     remotecheck: "/usr/lib/nagios/plugins/dsa-check-msa-eventlog --start=9966 $HOSTADDRESS$ public"
2473     runfrom: dijkstra
2474     hosts: giustini
2475   # }}}
2476   # {{{ porterbox
2477   -
2478     name: current chroots
2479     nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2480     hostgroups: porterbox
2481     normal_check_interval:  60
2482     retry_check_interval: 15
2483   # }}}
2484   # {{{ openstack
2485   -
2486     name: process - openstack - memcached
2487     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 64 -p 11211 -u nobody -l 127.0.0.1'"
2488     hostgroups: openstack-controller
2489   -
2490     name: process - openstack - glance-registry
2491     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2492     hostgroups: openstack-controller
2493   -
2494     name: process - openstack - nova-api
2495     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2496     hostgroups: openstack-controller
2497   -
2498     name: process - openstack - nova-compute
2499     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2500     hostgroups: openstack-compute
2501   -
2502     name: process - openstack - nova-cert
2503     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2504     hostgroups: openstack-controller
2505   -
2506     name: process - openstack - nova-conductor
2507     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2508     hostgroups: openstack-controller
2509   -
2510     name: process - openstack - nova-consoleauth
2511     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2512     hostgroups: openstack-controller
2513   -
2514     name: process - openstack - nova-scheduler
2515     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2516     hostgroups: openstack-controller
2517   -
2518     name: process - openstack - nova-spicehtml5proxy
2519     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2520     hostgroups: openstack-controller
2521   -
2522     name: process - openstack - neutron-server
2523     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2524     hostgroups: openstack-controller
2525   # }}}
2526   # {{{ misc
2527   -
2528     name: process - rngd
2529     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rngd  -a '/usr/sbin/rngd -r /dev/hwrng'"
2530     hostgroups: dl385
2531   ###
2532   -
2533     name: process - slapd
2534     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2535     hosts: draghi
2536   -
2537     name: network service - ldaps cert
2538     check: dsa_check_cert!636
2539     depends: process - slapd
2540     normal_check_interval: 60
2541     hosts: draghi
2542   ###
2543   -
2544     name: network service - finger
2545     check: check_tcp!79
2546     hosts: draghi
2547     depends: process - xinetd
2548   ###
2549   -
2550     name: network service - rsync
2551     check: check_tcp!873
2552     hostgroups: rsyncd-hosts
2553     depends: process - xinetd
2554     excludehosts: rietz
2555   -
2556     name: network service - rsync
2557     check: check_tcp!873
2558     hosts: rietz2
2559     depends: rietz:process - xinetd
2560   -
2561     name: network service - rsync
2562     check: check_tcp!873
2563     hosts: milanollo2
2564     depends: milanollo:process - xinetd
2565   ###
2566   -
2567     name: process - icinga
2568     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:30 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2569     hosts: tchaikovsky
2570   ###
2571   -
2572     name: process - jetty - master
2573     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a 'jsvc.exec'"
2574     hostgroups: jetty-hosts
2575   -
2576     name: process - jetty - worker
2577     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u jetty -a 'jsvc.exec -user jetty'"
2578     hostgroups: jetty-hosts
2579     depends: process - jetty - master
2580   ###
2581   -
2582     name: process - debianqueued
2583     nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2584     hostgroups: uploadqueue
2585   ####
2586   -
2587     name: network service - gobby
2588     check: check_tcp!6523
2589     hosts: gombert
2590     contact_groups: gobby
2591   ####
2592   -
2593     name: puppetmaster cert
2594     nrpe: "/usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2595     hosts: handel
2596     normal_check_interval: 60
2597     max_check_attempts: 2
2598     retry_check_interval: 5
2599   # }}}
2600 # }}}
2601
2602 # vim: set ts=2 sw=2 et ai si fdm=marker: