1 # Non comment lines are YAML
3 # Strings ought to be in double quotes, but it works in most cases if they aren't :)
8 # - *: check munin stats collection works
9 # - *: check backups are successful
10 # - *: unwanted: network: auth, discard, daytime, time (on some), cvs-pserver, rsync (on some), ftp (on some), http (on some)
13 #############################
15 #############################
19 hostgroups: notacomputer
21 check_command: dsa_check_always_ok
24 hostgroups: notacomputer
26 check_command: dsa_check_always_ok
28 address: 130.239.18.97
30 hostgroups: layer3-infrastructure
32 address: 130.242.6.198
34 hostgroups: layer3-infrastructure
38 hostgroups: layer3-infrastructure
40 address: 89.16.160.116
42 hostgroups: layer3-infrastructure
44 address: 200.17.202.254
46 hostgroups: layer3-infrastructure
48 address: 150.203.164.1
50 hostgroups: layer3-infrastructure
52 address: 213.104.121.213
54 hostgroups: layer3-infrastructure
58 hostgroups: layer3-infrastructure
60 address: 217.196.149.238
62 hostgroups: layer3-infrastructure
66 hostgroups: layer3-infrastructure
68 address: 93.94.130.190
70 hostgroups: layer3-infrastructure
72 address: 62.104.23.249
74 hostgroups: layer3-infrastructure
78 hostgroups: layer3-infrastructure
80 address: 194.177.211.193
82 hostgroups: layer3-infrastructure
84 # really henet, because of something weird
87 hostgroups: layer3-infrastructure
89 address: 129.143.59.214
91 hostgroups: layer3-infrastructure
93 address: 185.17.185.190
95 hostgroups: layer3-infrastructure
97 address: 82.195.78.118
99 hostgroups: layer3-infrastructure
101 address: 148.100.88.1
103 hostgroups: layer3-infrastructure
105 address: 140.211.166.1
107 hostgroups: layer3-infrastructure
109 address: 133.242.99.65
111 hostgroups: layer3-infrastructure
113 address: 193.62.202.20
115 hostgroups: layer3-infrastructure
116 contacts: tjrc1, dave
118 address: 212.211.132.249
120 hostgroups: layer3-infrastructure
122 address: 212.211.132.1
124 hostgroups: layer3-infrastructure
126 address: 86.59.118.145
128 hostgroups: layer3-infrastructure
130 address: 154.57.0.249
132 hostgroups: layer3-infrastructure
134 address: 154.57.0.250
136 hostgroups: layer3-infrastructure
138 address: 206.12.19.254
139 hostgroups: layer3-infrastructure
142 address: 128.101.240.222
144 hostgroups: layer3-infrastructure
146 address: 177.220.10.129
148 hostgroups: layer3-infrastructure
150 address: 130.89.149.1
152 hostgroups: layer3-infrastructure
154 # really janet, because ynic is stupid about firewalling
155 address: 146.97.71.46
157 hostgroups: layer3-infrastructure
160 hostgroups: notacomputer
162 check_command: dsa_check_always_ok
164 address: 209.87.16.254
166 hostgroups: layer3-infrastructure
171 address: 212.227.126.54
172 parents: gw-1und1-sec
173 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hassrvfs, pe1950
175 address: 195.20.242.89
176 parents: gw-1und1-sec
177 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, stretch, security_mirror, hasvarlogfs, no-bacula, pe1950
181 address: 130.239.18.123
183 hostgroups: computers, hasbootfs, aacraid, nfs-client, service, apache2-hosts, stretch, autofs, sw-raid
184 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
187 address: 130.242.6.199
189 hostgroups: computers, service, stretch, apache2-hosts, hassrvfs, rsyncd-hosts
193 address: 141.170.6.156
195 hostgroups: computers, porterbox, stretch, hassrvfs
197 address: 141.170.6.149
199 hostgroups: computers, buildd, stretch, nfs-client
201 address: 141.170.6.150
203 hostgroups: computers, buildd, stretch, nfs-client
205 address: 141.170.6.154
207 hostgroups: computers, buildd, stretch, nfs-client
209 address: 141.170.6.155
211 hostgroups: computers, buildd, stretch, nfs-client
213 address: 141.170.6.157
215 hostgroups: computers, buildd, stretch, hassrvfs
217 address: 141.170.6.151
219 hostgroups: computers, porterbox, stretch, nfs-client
221 address: 141.170.6.152
223 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
225 address: 141.170.6.153
227 hostgroups: computers, buildd, stretch, hassrvfs, hasbootfs, sw-raid
229 address: 141.170.6.158
231 hostgroups: computers, buildd, stretch, hassrvfs
235 address: 217.140.96.56
237 hostgroups: computers, hasbootfs, hassrvfs, porterbox, stretch, broken_mq
239 address: 217.140.96.57
241 hostgroups: computers, hasbootfs, hassrvfs, buildd, stretch, broken_mq
243 address: 217.140.96.58
245 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
247 address: 217.140.96.60
249 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
251 address: 217.140.96.61
253 hostgroups: computers, hassrvfs, buildd, stretch, broken_mq
255 address: 217.140.96.66
257 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, porterbox, broken_mq
259 address: 217.140.96.67
261 hostgroups: computers, hasbootfs, hassrvfs, stretch, armhf, buildd, broken_mq
263 address: 217.140.96.71
265 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd, broken_mq
269 address: 138.16.160.17
271 hostgroups: computers, service, apache2-hosts, apache-https, dl380, rsyncd-hosts, stretch, hassrvfs, postgres96-hosts, manyprocesses
275 address: 5.153.231.241
277 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
279 address: 5.153.231.242
281 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
283 address: 5.153.231.243
285 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
287 address: 5.153.231.244
289 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
291 address: 5.153.231.245
293 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
295 address: 5.153.231.246
297 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
299 address: 5.153.231.247
301 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
303 address: 5.153.231.248
305 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
307 address: 5.153.231.249
309 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
311 address: 5.153.231.250
313 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
315 address: 5.153.231.251
317 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
319 address: 5.153.231.252
321 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
323 address: 5.153.231.253
325 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
327 address: 5.153.231.254
329 hostgroups: computers, bm-bl, service, stretch, multipath-hosts, manyprocesses
334 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, nfs-server, systemd-timesyncd
338 hostgroups: secondary-IPs, rsyncd-hosts
342 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, heavy-exim, spamd, apache-https, systemd-timesyncd
346 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, nfs-server, systemd-timesyncd
350 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
354 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, nfs-client, autofs, apache-https, systemd-timesyncd
359 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
364 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
366 address: 5.153.231.10
368 hostgroups: computers, hassrvfs, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
372 hostgroups: notacomputer
374 address: 5.153.231.11
375 parents: ganeti-bytemark
376 hostgroups: computers, hassrvfs, kvmdomains, stretch, autofs, nfs-client, uploadqueue, apache-https, apache2-hosts, systemd-timesyncd
378 address: 5.153.231.12
379 parents: ganeti-bytemark
380 hostgroups: computers, hassrvfs, kvmdomains, stretch, systemd-timesyncd
382 address: 5.153.231.13
383 parents: ganeti-bytemark
384 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd, broken_https_default_vhost
386 address: 5.153.231.16
387 parents: ganeti-bytemark
388 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
390 address: 5.153.231.15
391 parents: ganeti-bytemark
392 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
394 address: 5.153.231.17
395 parents: ganeti-bytemark
396 hostgroups: computers, hassrvfs, kvmdomains, stretch, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
398 address: 5.153.231.18
399 parents: ganeti-bytemark
400 hostgroups: computers, general, kvmdomains, stretch, service, apache-https, apache2-hosts, heavy-exim, systemd-timesyncd
402 address: 5.153.231.19
403 parents: ganeti-bytemark
404 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, systemd-timesyncd
406 address: 5.153.231.20
407 parents: ganeti-bytemark
408 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
410 address: 5.153.231.21
411 parents: ganeti-bytemark
412 contact_groups: alioth-admins
413 hostgroups: computers, general, wheezy, postgres91-hosts, apache2-hosts, acpid-hosts, apache-https, brokensamhain, no-bacula, bind9-hosts, xinetd-hosts, alioth, heavy-exim, spamd
414 no-servicegroups: true
416 address: 5.153.231.22
417 parents: ganeti-bytemark
418 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, hassrvfs, systemd-timesyncd
420 address: 5.153.231.23
421 parents: ganeti-bytemark
422 hostgroups: computers, general, kvmdomains, stretch, nfs-client, autofs, apache2-hosts, apache-https, service, broken_https_default_vhost, systemd-timesyncd
424 address: 5.153.231.25
425 parents: ganeti-bytemark
426 hostgroups: computers, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
428 address: 5.153.231.26
429 parents: ganeti-bytemark
430 hostgroups: computers, kvmdomains, stretch, systemd-timesyncd
432 address: 5.153.231.27
433 parents: ganeti-bytemark
434 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, porterbox, systemd-timesyncd
436 address: 5.153.231.28
437 parents: ganeti-bytemark
438 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, heavy-exim, apache2-hosts, autofs, apache-https, systemd-timesyncd
440 address: 5.153.231.29
441 parents: ganeti-bytemark
442 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
444 address: 5.153.231.30
445 parents: ganeti-bytemark
446 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
448 address: 5.153.231.32
449 parents: ganeti-bytemark
450 hostgroups: computers, kvmdomains, stretch, no-bacula, systemd-timesyncd
452 address: 5.153.231.33
453 parents: ganeti-bytemark
454 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
456 address: 5.153.231.34
457 parents: ganeti-bytemark
458 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
460 address: 5.153.231.36
461 parents: ganeti-bytemark
462 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, systemd-timesyncd
464 address: 5.153.231.38
465 parents: ganeti-bytemark
466 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, autofs, nfs-client, systemd-timesyncd
468 address: 5.153.231.39
469 parents: ganeti-bytemark
470 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
472 address: 5.153.231.40
473 parents: ganeti-bytemark
474 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, nfs-client, autofs, systemd-timesyncd
476 address: 5.153.231.42
477 parents: ganeti-bytemark
478 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, heavy-exim, systemd-timesyncd
480 address: 5.153.231.43
481 parents: ganeti-bytemark
482 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
484 address: 5.153.231.44
485 parents: ganeti-bytemark
486 hostgroups: computers, service, kvmdomains, stretch, autofs, nfs-client, apache2-hosts, apache-https, systemd-timesyncd
489 address: 5.153.231.41
491 hostgroups: computers, service, stretch, hassrvfs, dl380, manyprocesses, apache2-hosts
492 contacts: zobel, tfheen, lfilipoz, zumbi, jcristau, pabs, aurel32, dsa-nsa
497 address: 200.17.202.197
499 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, hassrvfs, stretch, high-RTT, security_mirror, no-bacula, apache-https
504 address: 150.203.164.39
506 hostgroups: computers, service, apache2-hosts, dl360, hassrvfs, stretch, apache-https
508 address: 150.203.164.60
510 hostgroups: secondary-IPs, rsyncd-hosts
512 address: 150.203.164.61
514 hostgroups: secondary-IPs, security_mirror, rsyncd-hosts
516 address: 150.203.164.62
518 hostgroups: secondary-IPs
522 address: 217.196.149.227
524 hostgroups: computers, stretch, service, sw-raid
526 address: 217.196.149.228
528 hostgroups: computers, stretch, service, sw-raid
530 address: 217.196.149.235
532 hostgroups: notacomputer
534 address: 217.196.149.229
536 hostgroups: computers, stretch, service, apache2-hosts
537 mirror-conova-debian:
538 address: 217.196.149.232
539 hostgroups: secondary-IPs
540 parents: mirror-conova
541 mirror-conova-security:
542 address: 217.196.149.233
543 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
544 parents: mirror-conova
545 mirror-conova-archive:
546 address: 217.196.149.234
547 hostgroups: secondary-IPs, rsyncd-hosts
548 parents: mirror-conova
549 mirror-conova-syncproxy4-eu:
550 address: 217.196.149.237
551 hostgroups: secondary-IPs, rsyncd-hosts, https-service
552 parents: mirror-conova
555 address: 217.196.149.230
556 parents: ganeti-conova
557 hostgroups: computers, hassrvfs, buildd, stretch
559 address: 217.196.149.231
560 parents: ganeti-conova
561 hostgroups: computers, hassrvfs, buildd, stretch
563 address: 217.196.149.236
564 parents: ganeti-conova
565 hostgroups: computers, hassrvfs, porterbox, stretch
571 hostgroups: computers, service, dl360, stretch, drbd-hosts
575 hostgroups: computers, service, dl360, stretch, drbd-hosts
579 hostgroups: notacomputer
583 parents: ganeti-csail
584 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, apache2-hosts, rsyncd-hosts, apache-https, systemd-timesyncd
587 parents: ganeti-csail
588 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
591 parents: ganeti-csail
592 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
595 parents: ganeti-csail
596 hostgroups: computers, service, kvmdomains, hassrvfs, stretch, apache2-hosts, apache-https, systemd-timesyncd
599 parents: ganeti-csail
600 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, no-bacula, apache-https, hassrvfs, systemd-timesyncd
603 parents: ganeti-csail
604 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, uploadqueue, queued, systemd-timesyncd
608 address: 93.94.130.161
610 hostgroups: computers, stretch, dl380, nfs-client, hassrvfs
614 address: 128.61.240.73
616 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, sw-raid, hasbootfs, hassrvfs, stretch, security_mirror
620 address: 194.177.211.194
622 hostgroups: notacomputer
624 address: 194.177.211.195
626 hostgroups: computers, service, dl380, stretch, drbd-hosts
628 address: 194.177.211.196
630 hostgroups: computers, service, dl380, stretch, drbd-hosts
632 address: 194.177.211.200
634 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
636 address: 194.177.211.201
638 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
640 address: 194.177.211.202
642 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, xinetd-hosts, systemd-timesyncd
644 address: 194.177.211.203
645 parents: ganeti-grnet
646 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
648 address: 194.177.211.205
649 parents: ganeti-grnet
650 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, postgres96-hosts, apache2-hosts, apache-https, systemd-timesyncd
652 address: 194.177.211.206
653 parents: ganeti-grnet
654 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, systemd-timesyncd
656 address: 194.177.211.207
657 parents: ganeti-grnet
658 hostgroups: computers, service, hassrvfs, kvmdomains, stretch, rsyncd-hosts, systemd-timesyncd
660 address: 194.177.211.208
661 parents: ganeti-grnet
662 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, postgres96-hosts, hassrvfs
663 static-master-grnet-01:
664 address: 194.177.211.209
665 parents: ganeti-grnet
666 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, hassrvfs
672 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, xinetd-hosts, stretch
676 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
680 hostgroups: secondary-IPs
681 mirror-isc-syncproxy:
684 hostgroups: secondary-IPs, rsyncd-hosts
688 address: 185.17.185.177
690 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
692 address: 185.17.185.178
694 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
696 address: 185.17.185.179
698 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
700 address: 185.17.185.180
702 hostgroups: computers, service, jessie, dl180, nfs-server, rsyncd-hosts
704 address: 185.17.185.187
706 hostgroups: computers, service, jessie, dl180, nfs-client, autofs, hassrvfs, postgres94-hosts, apache2-hosts
708 address: 185.17.185.189
710 hostgroups: computers, service, jessie, dl180, nfs-client, autofs, hassrvfs, apache2-hosts
712 address: 185.17.185.181
714 hostgroups: computers, service, stretch, dl180
716 address: 185.17.185.182
718 hostgroups: computers, service, stretch, dl180
722 address: 129.143.160.6
723 parents: gw-karlsruhe
724 hostgroups: computers, buildd, stretch
729 address: 82.195.75.109
731 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
733 address: 82.195.75.103
735 hostgroups: computers, service, dl380, acpid-hosts, stretch, drbd-hosts, manyprocesses
737 address: 82.195.75.100
739 hostgroups: computers, service, hasbootfs, kvmdomains, hassrvfs, apache2-hosts, stretch, postfix-hosts, heavy-postfix, apache-https, amavis-hosts, hasvarlogfs
741 address: 82.195.75.110
743 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, spamd, heavy-exim, highload
745 address: 82.195.75.98
747 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, heavy-exim
749 address: 82.195.75.99
751 hostgroups: computers, service, hasbootfs, kvmdomains, stretch, hasvarlogfs
753 address: 82.195.75.106
755 hostgroups: computers, service, hasbootfs, hassrvfs, apache2-hosts, spamd, heavy-exim, kvmdomains, xinetd-hosts, apache-https, stretch
757 address: 82.195.75.105
759 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch
761 address: 82.195.75.104
763 hostgroups: computers, service, kvmdomains, apache2-hosts, stretch, postgres96-hosts
765 address: 82.195.75.107
767 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, kvmdomains, stretch, apache-https
769 address: 82.195.75.111
771 hostgroups: notacomputer
773 address: 82.195.75.112
775 hostgroups: computers, service, hassrvfs, apache2-hosts, kvmdomains, stretch, apache-https, rsyncd-hosts
777 address: 82.195.75.114
779 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay
781 address: 82.195.75.91
783 hostgroups: computers, service, kvmdomains, stretch, bind9-hosts
785 address: 82.195.75.92
787 hostgroups: computers, service, kvmdomains, stretch
789 address: 82.195.75.65
791 hostgroups: computers, hasbootfs, hassrvfs, kvmdomains, service, xinetd-hosts, apache2-hosts, stretch, apache-https
793 address: 82.195.75.66
795 hostgroups: computers, buildd, stretch, hassrvfs
797 address: 82.195.75.72
799 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
801 address: 82.195.75.74
803 hostgroups: computers, buildd, stretch, hassrvfs, sw-raid, hasbootfs
805 address: 82.195.75.67
807 hostgroups: computers, buildd, stretch, hassrvfs
809 address: 82.195.75.93
811 hostgroups: computers, service, apache2-hosts, hassrvfs, rsyncd-hosts, kvmdomains, apache-https, postgres96-hosts, stretch
813 address: 82.195.75.68
815 hostgroups: computers, service, kvmdomains, stretch, uploadqueue, queued, systemd-timesyncd
819 address: 148.100.88.22
821 hostgroups: computers, buildd, hassrvfs, stretch, incomingmailrelayed
825 address: 140.211.166.200
827 hostgroups: computers, service, dl380, stretch
829 address: 140.211.166.201
831 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, hassrvfs, rsyncd-hosts, apache-https
834 address: 140.211.166.195
836 hostgroups: computers, stretch, service, manyprocesses
838 address: 140.211.166.196
840 hostgroups: computers, hassrvfs, buildd, stretch
842 address: 140.211.166.197
844 hostgroups: computers, hassrvfs, buildd, jessie
846 address: 140.211.15.152
848 hostgroups: computers, jessie, hassrvfs, porterbox, sw-raid
852 address: 193.62.202.26
854 hostgroups: computers, service, stretch, dl380, nfs-client, autofs, postgres96-hosts
856 address: 193.62.202.28
858 hostgroups: computers, postgres94-hosts, service, apache2-hosts, sw-raid, jessie, rsyncd-hosts, hasvarlogfs, multipath-hosts, nfs-server
859 contacts: tjrc1, dave
861 address: 193.62.202.29
863 hostgroups: computers, sw-raid, sparc, wheezy, no-bacula
864 contacts: tjrc1, dave
868 address: 212.211.132.250
869 parents: gw-scanplus-lobos
870 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hassrvfs, stretch, security_mirror
872 address: 212.211.132.32
873 parents: gw-scanplus-villa
874 hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl360, hassrvfs, stretch, security_mirror
878 address: 86.59.118.155
880 hostgroups: computers, buildd, stretch, sw-raid
882 address: 86.59.118.146
884 hostgroups: computers, buildd, stretch, hassrvfs
886 address: 86.59.118.147
888 hostgroups: computers, buildd, stretch, hassrvfs
892 address: 154.57.0.251
893 parents: gw-skroutz1, gw-skroutz2
894 hostgroups: computers, stretch, service, sw-raid, hassrvfs, apache2-hosts
900 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
904 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
908 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
910 address: 209.87.16.10
912 hostgroups: computers, bl460g8, service, stretch, multipath-hosts, manyprocesses
915 address: 209.87.16.20
917 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
919 address: 209.87.16.21
921 hostgroups: computers, buildd, hassrvfs, kvmdomains, stretch, systemd-timesyncd
923 address: 209.87.16.24
925 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd
927 address: 209.87.16.25
929 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, systemd-timesyncd
931 address: 209.87.16.26
933 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, broken_https_default_vhost, hassrvfs, systemd-timesyncd
935 address: 209.87.16.27
937 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, heavy-exim, systemd-timesyncd
939 address: 209.87.16.28
941 hostgroups: computers, service, kvmdomains, stretch, apache2-hosts, apache-https, broken_https_default_vhost, systemd-timesyncd
943 address: 209.87.16.29
945 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd
947 address: 209.87.16.30
949 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, systemd-timesyncd
951 address: 209.87.16.31
953 hostgroups: computers, service, bind9-hosts, kvmdomains, stretch, systemd-timesyncd
955 address: 209.87.16.32
957 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, systemd-timesyncd
959 address: 209.87.16.33
961 hostgroups: computers, service, kvmdomains, stretch, spamd, heavy-exim, mail-relay, systemd-timesyncd
963 address: 209.87.16.34
965 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
967 address: 209.87.16.35
969 hostgroups: computers, general, apache2-hosts, kvmdomains, apache-https, stretch, systemd-timesyncd
971 address: 209.87.16.36
973 hostgroups: computers, general, kvmdomains, stretch, hassrvfs, nfs-server, apache2-hosts, xinetd-hosts, apache-https, systemd-timesyncd
975 address: 209.87.16.37
977 hostgroups: computers, service, kvmdomains, stretch, heavy-exim, apache2-hosts, apache-https, nfs-client, autofs, hassrvfs, systemd-timesyncd
979 address: 209.87.16.38
981 hostgroups: computers, service, kvmdomains, stretch, postgres96-hosts, nfs-client, apache2-hosts, autofs, apache-https, systemd-timesyncd
983 address: 209.87.16.39
985 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, heavy-exim, postgres96-hosts, hasvarlogfs, apache-https, spamd, nfs-server, systemd-timesyncd
987 address: 209.87.16.42
989 hostgroups: computers, service, kvmdomains, stretch, nfs-client, autofs, systemd-timesyncd
992 address: 209.87.16.43
994 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, nfs-client, autofs, systemd-timesyncd
996 address: 209.87.16.44
998 hostgroups: computers, service, kvmdomains, stretch, hassrvfs, apache2-hosts, apache-https, systemd-timesyncd, postfix-hosts, postgres96-hosts, crazymanyprocesses
1000 address: 209.87.16.46
1001 parents: ubc-gateway
1002 hostgroups: computers, service, kvmdomains, stretch, systemd-timesyncd, apache2-hosts, apache-https, broken_https_default_vhost
1006 # address: 128.101.240.212
1008 # hostgroups: computers, service, apache2-hosts, rsyncd-hosts, dl380, hasvarfs, hasusrfs, hasorgfs, xinetd-hosts, wheezy, security_mirror, no-bacula
1010 address: 128.101.240.212
1012 hostgroups: computers, service, apache2-hosts, apache-https, dl360, hassrvfs, stretch
1014 address: 128.101.240.215
1016 hostgroups: secondary-IPs, rsyncd-hosts, security_mirror
1018 address: 128.101.240.216
1020 hostgroups: secondary-IPs, rsyncd-hosts
1022 address: 128.101.240.217
1024 hostgroups: secondary-IPs
1028 address: 177.220.10.140
1030 hostgroups: computers, stretch, service, manyprocesses
1032 address: 177.220.10.141
1034 hostgroups: computers, hassrvfs, buildd, jessie
1036 address: 177.220.10.142
1038 hostgroups: computers, hassrvfs, buildd, stretch
1040 address: 177.220.10.143
1042 hostgroups: computers, porterbox, hassrvfs, stretch
1046 address: 130.89.148.10
1048 hostgroups: computers, service, apache2-hosts, apache-https, rsyncd-hosts, dl380, stretch, incomingmailrelayed2025, hassrvfs
1050 address: 130.89.148.12
1052 hostgroups: secondary-IPs
1054 address: 130.89.148.13
1056 hostgroups: secondary-IPs
1058 address: 130.89.148.14
1060 hostgroups: secondary-IPs
1064 address: 144.32.168.74
1066 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1068 address: 144.32.168.75
1070 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1072 address: 144.32.168.76
1074 hostgroups: computers, hasbootfs, hassrvfs, armhf, stretch, buildd
1078 address: 80.245.147.46
1080 hostgroups: computers, buildd, hassrvfs, stretch
1082 address: 80.245.147.40
1084 hostgroups: computers, porterbox, hassrvfs, stretch
1088 address: 133.242.99.74
1090 hostgroups: computers, service, stretch, no-bacula, hassrvfs, apache2-hosts, rsyncd-hosts, security_mirror
1093 # {{{ ############################# host groups #############################
1098 layer3-infrastructure:
1099 alias: Layer 3 Devices
1101 alias: Systems that are not really systems. Yeah :)
1111 alias: developer accessible porter machines
1113 alias: machines running services
1115 alias: buildd systems
1117 alias: general purpose developer accessible machines
1120 alias: HP DL380 hosts
1123 alias: HP DL360 hosts
1126 alias: HP BL460 blades
1129 alias: HP BL460 Gen8 blades
1132 alias: HP blades at bytemark
1141 alias: Hosts with Linux software raid
1144 alias: Hosts with Adaptec AACraid
1147 alias: Dell PowerEdge 1950 hosts
1151 alias: Hosts running wheezy
1153 alias: Hosts running jessie
1155 alias: Hosts running stretch
1158 alias: Hosts that are KVM domains
1162 alias: hosts running drbd
1164 alias: hosts running multipathd
1166 alias: hosts running postfix instead of exim
1169 alias: "hosts running the full mail stuff, including clamav and postgrey"
1172 alias: "relays usually are hosts with more exim processes"
1175 alias: "hosts running spamassassin as daemon"
1178 alias: "postfix hosts running the full mail stuff, including clamav, SA, postgrey, policyd-weight"
1181 alias: hosts running apache2
1184 alias: hosts running bind9
1187 alias: hosts running amavis
1190 alias: hosts providing rsync services
1193 alias: hosts providing services via xinetd
1196 alias: hosts running postgres91
1199 alias: hosts running postgres94
1202 alias: hosts running postgres96
1205 alias: hosts not running ulogd
1208 alias: hosts running acpid
1211 alias: hosts that are an anonymous ftp uploadqueue
1214 alias: hosts running queued
1217 alias: hosts running bosserver
1220 alias: hosts with https services
1223 alias: https service for secondary addresses
1225 broken_https_default_vhost:
1226 alias: https default vhost does not say 200 OK
1229 alias: hosts with lots and lots of (kernel) processes
1231 alias: hosts with stupidly lots of processes
1234 alias: hosts which are not being backed up with bacula
1238 alias: hosts mounting filesystems using NFS
1241 alias: hosts serving filesystems using NFS
1244 alias: hosts running the automounter
1247 alias: Vms running systemd-timesyncd
1251 alias: "hosts on which high load is normal"
1255 alias: secondary IP addresses
1259 alias: hosts with a /boot filesystem
1262 alias: hosts with a /srv filesystem
1265 alias: hosts with a /var/log filesystem
1268 incomingmailrelayed:
1269 alias: incoming mail needs to go through a mail relay
1272 incomingmailrelayed2025:
1273 alias: incoming mail needs to go through a mail relay
1278 alias: machines that can not run samhain
1281 alias: machines with high round trip times
1284 alias: machines that just are just awkward
1287 # alias: nodes that run OpenStack compute
1289 openstack-controller:
1290 alias: nodes that run OpenStack controller
1294 alias: hosts that are security mirrors
1298 alias: hosts whose MQ is broken
1301 # {{{ ############################# servicegroups #############################
1304 alias: diskusage checks
1306 alias: buildd checks
1310 alias: backup checks
1312 alias: kernel checks
1314 alias: apt upgrade status
1316 alias: samhain integrity status
1321 servicegroup_members: apt, kernel, samhain
1325 alias: rabbitMQ stuff
1327 # {{{ ############################# services #############################
1329 # {{{ ### basic networking
1332 check: "check_ping!350.0,20%!600.0,40%"
1333 hostgroups: pingable
1334 excludehostgroups: layer3-infrastructure, high-RTT
1336 max_check_attempts: 4
1340 check: "check_ping!600.0,20%!900.0,40%"
1341 hostgroups: high-RTT
1343 max_check_attempts: 4
1347 check: "check_ping!2000.0,60%!3000.0,80%"
1348 hostgroups: layer3-infrastructure
1350 max_check_attempts: 4
1353 name: network - v6 gw
1354 nrpe: "/usr/lib/nagios/plugins/dsa-check-ipv6-default-gw"
1355 hostgroups: computers
1357 excludehostgroups: alioth
1359 # {{{ ### disk usage
1361 name: disk usage - all
1362 servicegroups: diskspace
1363 nrpe: "/usr/lib/nagios/plugins/check_disk -w 5% -c 2% -A -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -X nfs4 --ignore-eregi-path='/home/buildd/build-tr|/var/lib/schroot/mount|/proc/sys/fs/binfmt_misc'"
1364 hostgroups: computers
1365 excludehosts: sibelius
1367 name: disk usage - all
1368 servicegroups: diskspace
1369 nrpe: "/usr/lib/nagios/plugins/check_disk -X devpts -X proc -X linprocfs -X devfs -X fdescfs -X sysfs -X nfs -x nfs4 -x /srv/farm-snapshot/farm-misc 95 98"
1373 name: disk usage on /
1374 servicegroups: diskspace
1375 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /"
1376 hostgroups: computers
1378 name: disk usage on /boot
1379 servicegroups: diskspace
1380 nrpe: "/usr/lib/nagios/plugins/check_disk 75 85 /boot"
1381 hostgroups: hasbootfs
1383 name: disk usage on /srv
1384 servicegroups: diskspace
1385 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv"
1386 hostgroups: hassrvfs
1388 name: disk usage on /var/lib/postgresql
1389 servicegroups: diskspace
1390 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/lib/postgresql"
1391 hosts: sibelius, buxtehude, lw07, fasolo
1393 name: disk usage on /var/log
1394 servicegroups: diskspace
1395 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/log"
1396 hostgroups: hasvarlogfs
1398 name: disk usage on /var/spool/postfix
1399 servicegroups: diskspace
1400 nrpe: "/usr/lib/nagios/plugins/check_disk 75 90 /var/spool/postfix"
1403 name: disk usage on /srv/mirrors
1404 servicegroups: diskspace
1405 nrpe: "/usr/lib/nagios/plugins/check_disk 95 98 /srv/mirrors"
1408 name: disk usage on /srv/snapshot.debian.org
1409 servicegroups: diskspace
1410 nrpe: "/usr/lib/nagios/plugins/check_disk 90 94 /srv/snapshot.debian.org"
1413 name: disk usage on /srv/farm-snapshot/farm-2017-0
1414 servicegroups: diskspace
1415 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-0"
1418 name: disk usage on /srv/farm-snapshot/farm-2017-1
1419 servicegroups: diskspace
1420 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-1"
1423 name: disk usage on /srv/farm-snapshot/farm-2017-2
1424 servicegroups: diskspace
1425 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-2"
1428 name: disk usage on /srv/farm-snapshot/farm-2017-3
1429 servicegroups: diskspace
1430 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-3"
1433 name: disk usage on /srv/farm-snapshot/farm-2017-4
1434 servicegroups: diskspace
1435 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-4"
1438 name: disk usage on /srv/farm-snapshot/farm-2017-5
1439 servicegroups: diskspace
1440 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-5"
1443 name: disk usage on /srv/farm-snapshot/farm-2017-6
1444 servicegroups: diskspace
1445 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-6"
1448 name: disk usage on /srv/farm-snapshot/farm-2017-7
1449 servicegroups: diskspace
1450 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /srv/farm-snapshot/farm-2017-7"
1453 name: disk usage on /srv/ftp-master.debian.org
1454 servicegroups: diskspace
1455 nrpe: "/usr/lib/nagios/plugins/check_disk 93 96 /srv/ftp-master.debian.org"
1458 name: disk usage on /storage/snapshot-farm-1
1459 servicegroups: diskspace
1460 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-1"
1463 name: disk usage on /storage/snapshot-farm-2
1464 servicegroups: diskspace
1465 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-2"
1468 name: disk usage on /storage/snapshot-farm-3
1469 servicegroups: diskspace
1470 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-3"
1473 name: disk usage on /storage/snapshot-farm-4
1474 servicegroups: diskspace
1475 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-4"
1478 name: disk usage on /storage/snapshot-farm-90
1479 servicegroups: diskspace
1480 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-09"
1483 name: disk usage on /storage/snapshot-farm-10
1484 servicegroups: diskspace
1485 nrpe: "/usr/lib/nagios/plugins/check_disk 95 97 /storage/snapshot-farm-10"
1488 name: disk usage on /srv/morgue.debian.org/
1489 servicegroups: diskspace
1490 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/morgue.debian.org"
1493 name: disk usage on /srv/QNAP-big/
1494 servicegroups: diskspace
1495 nrpe: "/usr/lib/nagios/plugins/check_disk 80 90 /srv/QNAP-big"
1498 name: disk usage on /srv/QNAP-tiny
1499 servicegroups: diskspace
1500 nrpe: "/usr/lib/nagios/plugins/check_disk 90 95 /srv/QNAP-tiny"
1506 name: setup - dsa config
1507 nrpe: "/usr/lib/nagios/plugins/dsa-check-config"
1508 hostgroups: computers
1510 excludehostgroups: alioth
1512 name: setup - local hostname etc-hosts
1513 nrpe: 'if getent ahosts `hostname` | grep -q 127.0; then echo "Warning: local hostname resolves to 127/8 address"; exit 1; else echo "OK: Hostname resolves to non-127/8 address."; exit 0; fi'
1514 hostgroups: computers
1521 nrpe: "/usr/lib/nagios/plugins/check_users 30 35"
1522 hostgroups: computers
1525 nrpe: "/usr/lib/nagios/plugins/check_load -w 30,28,26 -c 50,45,50"
1526 hostgroups: computers
1527 excludehostgroups: highload
1530 nrpe: "/usr/lib/nagios/plugins/check_load -w 140,120,100 -c 240,220,200"
1531 hostgroups: highload
1534 nrpe: "/usr/lib/nagios/plugins/dsa-check-uptime"
1535 hostgroups: computers
1537 name: processes - total
1538 nrpe: "/usr/lib/nagios/plugins/check_procs 620 700"
1539 hostgroups: computers
1540 excludehostgroups: manyprocesses, crazymanyprocesses
1542 name: processes - total
1543 hostgroups: manyprocesses
1544 nrpe: "/usr/lib/nagios/plugins/check_procs 1500 1700"
1546 name: processes - total
1547 hostgroups: crazymanyprocesses
1548 nrpe: "/usr/lib/nagios/plugins/check_procs 15000 25000"
1550 name: free memory - mb
1551 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m mb"
1552 hostgroups: computers
1554 name: free memory - percent
1555 nrpe: "/usr/lib/nagios/plugins/dsa-check-memory -m pct"
1556 hostgroups: computers
1558 name: process - getty
1559 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C getty -a /sbin/getty"
1560 hostgroups: computers
1561 excludehosts: zelenka, zandonai
1562 excludehostgroups: jessie, stretch
1564 name: process - getty
1565 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C agetty -a /sbin/agetty"
1566 hostgroups: jessie, stretch
1569 name: processes - zombies
1570 nrpe: "/usr/lib/nagios/plugins/check_procs 5 10 -s Z"
1571 hostgroups: computers
1573 name: system - available entropy
1574 nrpe: "/usr/lib/nagios/plugins/dsa-check-entropy"
1575 event_handler: dsa_event_handler_restart_ekey
1576 hostgroups: computers
1578 name: system - filesystem check
1579 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-filesystems"
1582 hostgroups: computers
1587 servicegroups: backup
1588 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-dabackup"
1589 hostgroups: computers
1590 excludehosts: backuphost, storace
1592 max_check_attempts: 2
1595 name: backup server config
1596 servicegroups: backup
1597 nrpe: "/usr/lib/nagios/plugins/dsa-check-dabackup-server"
1600 max_check_attempts: 2
1603 name: backup - bacula - last backup
1604 servicegroups: backup
1605 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula $HOSTNAME$.debian.org"
1607 hostgroups: computers
1608 excludehostgroups: buildd, porterbox, no-bacula
1612 name: backup - bacula - last full backup
1613 servicegroups: backup
1614 remotecheck: "/usr/lib/nagios/plugins/dsa-check-bacula -w 1080 -c 1560 $HOSTNAME$.debian.org F"
1616 hostgroups: computers
1617 excludehostgroups: buildd, porterbox, no-bacula
1621 name: process - bacula-dir
1622 servicegroups: backup
1623 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-dir -a '/usr/sbin/bacula-dir -f -c /etc/bacula/bacula-dir.conf'"
1626 name: process - bacula-fd
1627 servicegroups: backup
1628 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u bacula -C bacula-fd -a '/usr/sbin/bacula-fd -c /etc/bacula/bacula-fd.conf'"
1629 hostgroups: computers
1630 excludehostgroups: alioth
1633 name: network backup status - draghi
1634 servicegroups: backup
1635 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile -a 2h /home/debbackup/nagios-status"
1640 name: process - acc.umu.se backup
1641 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -a 'dsmc'"
1646 name: running kernel
1647 servicegroups: kernel
1648 nrpe: "/usr/lib/nagios/plugins/dsa-check-running-kernel"
1649 hostgroups: computers
1653 name: apt - security updates
1655 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/apt"
1656 hostgroups: computers
1660 name: unexpected file - apt sources.list
1662 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /etc/apt/sources.list"
1663 hostgroups: computers
1665 name: upgraded libraries
1666 servicegroups: security
1667 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-libs --ignore-younger=1h"
1668 hostgroups: computers
1671 notification_interval: 10080
1673 name: installed firewall
1674 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/ferm.conf"
1675 hostgroups: computers
1677 name: puppetized firewall
1678 nrpe: "/usr/lib/nagios/plugins/dsa-check-file -w -f /etc/ferm/conf.d/defs.conf"
1679 hostgroups: computers
1681 name: process - ulogd
1682 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C ulogd -a '/usr/sbin/ulogd -d'"
1683 hostgroups: computers
1684 excludehostgroups: sparc, jessie, stretch
1686 name: process - ulogd
1687 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u ulog -C ulogd -a '/usr/sbin/ulogd --daemon --uid ulog'"
1688 hostgroups: jessie, stretch
1690 name: unexpected process - ulogd
1691 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C ulogd"
1695 name: process - samhain
1696 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:8 -c 1: -u root -C samhain -a '/usr/sbin/samhain'"
1697 hostgroups: computers
1698 excludehostgroups: brokensamhain
1701 servicegroups: samhain
1702 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/samhain"
1703 hostgroups: computers
1704 depends: process - samhain
1707 excludehostgroups: brokensamhain
1709 name: processes - samhain zombies
1710 nrpe: "/usr/lib/nagios/plugins/check_procs 3 6 -s Z -u root -a samhain"
1711 event_handler: dsa_event_handler_restart_samhain
1712 hostgroups: computers
1713 excludehostgroups: brokensamhain
1717 name: process - syslog-ng
1718 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -p /var/run/syslog-ng.pid'"
1719 hostgroups: computers
1720 excludehostgroups: jessie, stretch
1722 name: process - syslog-ng
1723 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C syslog-ng -a '/sbin/syslog-ng -F'"
1724 hostgroups: jessie, stretch
1727 name: remote logging on lotti
1728 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1730 hostgroups: computers
1731 excludehostgroups: alioth
1733 name: remote logging on lully
1734 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1736 hostgroups: computers
1737 excludehostgroups: alioth
1739 name: remote logging on loghost-grnet-01
1740 remotecheck: "/usr/lib/nagios/plugins/dsa-check-log-age-loghost $HOSTNAME$"
1741 runfrom: loghost-grnet-01
1742 hostgroups: computers
1743 excludehostgroups: alioth
1747 name: process - sshd
1748 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1: -u root -C sshd -a '/usr/sbin/sshd'"
1749 hostgroups: computers
1751 name: "network service - sshd"
1752 check: dsa_check_ssh
1753 hostgroups: computers
1754 depends: process - sshd
1756 notification_interval: 1440
1759 name: network service - nrpe
1760 check: check_tcp!5666
1761 hostgroups: computers
1762 max_check_attempts: -2
1763 notification_interval: 1440
1765 name: process - nrpe
1766 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d'"
1767 hostgroups: computers
1768 excludehostgroups: stretch
1769 max_check_attempts: -1
1770 depends: network service - nrpe
1772 name: process - nrpe
1773 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u nagios -C nrpe -a '/usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -f'"
1775 max_check_attempts: -1
1776 depends: network service - nrpe
1779 name: process - munin-node
1780 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C munin-node -a 'munin-node'"
1781 hostgroups: computers
1783 name: network service - munin-node
1784 check: check_tcp!4949
1785 hostgroups: computers
1786 depends: process - munin-node
1789 name: process - ntpd
1790 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -p 1 -C ntpd -a '/usr/sbin/ntpd -p /var/run/ntpd.pid'"
1791 hostgroups: computers
1792 excludehostgroups: systemd-timesyncd
1795 name: network service - ntp
1796 check: dsa_check_ntp
1797 hostgroups: computers
1798 excludehostgroups: systemd-timesyncd
1799 depends: process - ntpd
1802 name: system time synced
1803 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl -s"
1804 hostgroups: computers
1805 excludehostgroups: systemd-timesyncd, wheezy
1808 name: system time synced
1809 nrpe: "/usr/lib/nagios/plugins/dsa-check-timedatectl"
1810 hostgroups: systemd-timesyncd
1815 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C atd -a /usr/sbin/atd"
1816 hostgroups: computers
1819 name: process - irqbalance
1820 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C irqbalance -a '/usr/sbin/irqbalance'"
1821 hostgroups: computers
1822 excludehosts: harris, smetana
1825 name: process - cron
1826 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u root -C cron -a /usr/sbin/cron"
1827 hostgroups: computers
1830 name: process - ud-replicated
1831 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C ud-replicated -a '/usr/bin/python /usr/bin/ud-replicated'"
1832 hostgroups: computers
1833 excludehostgroups: alioth
1836 name: process - monit
1837 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C monit -a '/usr/bin/monit -d 300 -I -c /etc/monit/monitrc -s /var/lib/monit/monit.state'"
1838 hostgroups: computers
1839 excludehostgroups: alioth, jessie, stretch
1842 name: MQ connection on rainier
1844 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1846 hostgroups: computers
1849 excludehostgroups: alioth, broken_mq
1851 name: MQ connection on rapoport
1853 remotecheck: "/usr/lib/nagios/plugins/dsa-check-mq-connection $HOSTNAME$ ud dsa"
1855 hostgroups: computers
1858 excludehostgroups: alioth, broken_mq
1861 name: local resolver
1862 nrpe: "/usr/lib/nagios/plugins/dsa-check-resolver www.debian.org www.google.com"
1863 hostgroups: computers
1866 name: process - unbound
1867 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u unbound -C unbound -a '/usr/sbin/unbound'"
1868 hostgroups: computers
1869 excludehostgroups: alioth
1872 name: process - uptimed
1873 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u daemon -C uptimed -a '/usr/sbin/uptimed'"
1874 hostgroups: computers
1877 name: process - udevd
1878 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C udevd -a 'udevd'"
1879 hostgroups: computers
1880 excludehostgroups: jessie, stretch
1882 name: process - udevd
1883 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -p 1 -C systemd-udevd -a '/lib/systemd/systemd-udevd'"
1884 hostgroups: jessie, stretch
1887 name: process - acpid
1888 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C acpid -a '/usr/sbin/acpid'"
1889 hostgroups: acpid-hosts
1890 excludehostgroups: jessie, stretch
1892 name: unexpected process - acpid
1893 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C acpid"
1894 hostgroups: computers
1895 excludehostgroups: acpid-hosts, kvmdomains
1898 name: process - xinetd
1899 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C xinetd -a '/usr/sbin/xinetd '"
1900 hostgroups: xinetd-hosts
1902 name: unwanted process - xinetd
1903 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C xinetd"
1904 hostgroups: computers
1905 excludehostgroups: xinetd-hosts
1908 name: process - stunnel4 - puppet-ekeyd
1909 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:6 -c 1: -u stunnel4 -C stunnel4 -a '/usr/bin/stunnel4 /etc/stunnel/puppet-ekeyd.conf'"
1910 hostgroups: wheezy, jessie, stretch
1911 excludehostgroups: alioth
1913 name: process - stunnel4 - puppet-ekeyd is crazy
1914 nrpe: "sudo /usr/lib/nagios/plugins/dsa-check-stunnel-sanity"
1915 hostgroups: computers
1916 excludehostgroups: alioth
1917 excludehosts: czerny, grnet-node01, storace
1921 name: ganeti - job watcher paused
1922 nrpe: "/usr/lib/nagios/plugins/negate /usr/lib/nagios/plugins/dsa-check-file -f /var/lib/ganeti/watcher.pause"
1923 hostgroups: computers
1925 name: unwanted process - openvpn
1926 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C openvpn"
1927 hostgroups: computers
1930 name: unwanted process - gkrellmd
1931 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C gkrellmd"
1932 hostgroups: computers
1934 name: unwanted process - rpc.statd
1935 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1936 hostgroups: computers
1937 excludehostgroups: nfs-client, nfs-server
1939 name: unwanted process - rpc.statd
1940 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C rpc.statd"
1942 excludehosts: storace
1944 name: unwanted process - inetd
1945 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C inetd"
1946 hostgroups: computers
1949 name: unwanted process - snmpd
1950 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C snmpd"
1951 hostgroups: computers
1955 name: "host SSL cert"
1956 nrpe: "if [ -e /etc/ssl/certs/thishost.pem ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/certs/thishost.pem; else echo 'No thishost.pem on this host.'; fi"
1957 hostgroups: computers
1959 name: "host SSL cert - debian server"
1960 nrpe: "if [ -e /etc/ssl/debian/certs/thishost-server.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost-server.crt; else echo 'No thishost-server.crt on this host.'; fi"
1961 hostgroups: computers
1963 name: "host SSL cert - debian client"
1964 nrpe: "if [ -e /etc/ssl/debian/certs/thishost.crt ]; then /usr/lib/nagios/plugins/dsa-check-cert-expire /etc/ssl/debian/certs/thishost.crt; else echo 'No thishost.crt on this host.'; fi"
1965 hostgroups: computers
1968 nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
1969 hostgroups: computers
1971 name: SSL certs - puppet
1973 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
1976 name: SSL certs - LE
1978 remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /srv/puppet.debian.org/from-letsencrypt"
1981 # {{{ HW health/raid
1983 name: process - mdadm monitor
1985 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --pid-file /run/mdadm/monitor.pid --daemonise --scan'"
1987 excludehostgroups: jessie, stretch
1989 name: process - mdadm monitor
1991 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -C mdadm -a '/sbin/mdadm --monitor --scan'"
1993 excludehostgroups: wheezy
1995 name: RAID - sw raid
1997 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-sw"
2000 name: RAID - unexpected sw raid
2002 nrpe: "if [ -e /proc/mdstat ]; then echo 'Found /proc/mdstat'; exit 1; else echo 'No /proc/mdstat on this host.'; fi"
2003 hostgroups: computers
2004 excludehostgroups: sw-raid
2007 name: HW - HP raid status
2009 nrpe: "if [ -e /var/cache/dsa/nagios/dsa-check-hpssacli ] ; then /usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/dsa-check-hpssacli ; else /usr/lib/nagios/plugins/dsa-check-hpacucli; fi"
2011 hostgroups: dl380, dl360, bl460, bl460g8, dl180
2013 name: HW - hpacucli status
2015 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpacucli --no-controller-ok --ignore-controller='P700m'"
2020 # name: HW - edac status
2021 # nrpe: "/usr/lib/nagios/plugins/dsa-check-edac"
2022 # check_interval: 120
2023 #hostgroups: computers
2024 #excludehosts: villa, lobos
2026 name: HW - hpasmcli status
2027 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm"
2029 hostgroups: dl380, dl360, bl460, bm-bl
2030 excludehosts: villa, lobos, storace, mirror-anu, sallinen
2032 name: HW - hpasmcli status
2033 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant"
2037 name: HW - hpasmcli status
2038 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --ps-no-redundant --ignore-failed='PS2'"
2042 name: HW - hpasmcli status
2043 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present"
2045 hosts: storace, sallinen
2047 name: HW - hpasmcli status
2048 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-ignore-not-present --ps-no-redundant --ignore-failed='PS1'"
2052 name: HW - hpasmcli status
2053 nrpe: "/usr/lib/nagios/plugins/dsa-check-hpasm --fan-no-redundant"
2058 name: RAID - aacraid
2060 nrpe: "/usr/lib/nagios/plugins/dsa-check-raid-aacraid"
2066 nrpe: "/usr/lib/nagios/plugins/dsa-check-drbd -d All"
2067 hostgroups: drbd-hosts
2069 name: HW - OpenManage status
2070 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-openmanage"
2074 # {{{ ### mail stuff
2075 # {{{ exim processes and mailq
2077 name: process - exim
2078 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2079 hostgroups: computers
2080 excludehostgroups: postfix-hosts, mail-relay
2081 excludehosts: master, quantz, buxtehude
2083 name: process - exim
2084 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:25 -c 1: -u Debian-exim -C exim4 -a '/usr/sbin/exim4 -bd -q'"
2085 hostgroups: mail-relay
2087 name: process - exim - total
2088 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1: -C exim4"
2089 hostgroups: computers
2090 excludehostgroups: postfix-hosts
2091 excludehosts: master, quantz, buxtehude
2093 name: process - exim
2094 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:300 -c 1:500 -C exim4 -a '/usr/sbin/exim4'"
2095 hosts: master, quantz, buxtehude
2098 nrpe: "/usr/lib/nagios/plugins/check_mailq -M exim -w 1000 -c 2000"
2099 hostgroups: heavy-exim
2103 name: process - clamav - clamd
2104 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:2 -c 1: -u clamav -C clamd -a '/usr/sbin/clamd'"
2105 hostgroups: heavy-exim, heavy-postfix
2107 name: service - clamav
2108 nrpe: "/usr/lib/nagios/plugins/check_clamd -H /var/run/clamav/clamd.ctl"
2109 hostgroups: heavy-exim, heavy-postfix
2110 depends: process - clamav - clamd
2112 name: process - clamav - freshclam
2113 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --quiet'"
2114 hostgroups: heavy-exim, heavy-postfix
2115 excludehostgroups: jessie, stretch
2117 name: process - clamav - freshclam
2118 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u clamav -C freshclam -a '/usr/bin/freshclam -d --foreground=true'"
2119 hostgroups: heavy-exim, heavy-postfix
2120 excludehostgroups: wheezy
2122 name: unwanted process - clamav
2123 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C clamd"
2124 hostgroups: computers
2125 excludehostgroups: heavy-exim, heavy-postfix
2127 name: unwanted process - freshclam
2128 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C freshclam"
2129 hostgroups: computers
2130 excludehostgroups: heavy-exim, heavy-postfix
2134 name: process - spamd - master
2135 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d --pidfile=/var/run/spamd.pid'"
2137 excludehosts: picconi
2138 excludehostgroups: jessie, stretch
2140 name: process - spamd - master
2141 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 5 --helper-home-dir'"
2143 excludehosts: picconi
2144 excludehostgroups: wheezy
2146 name: process - spamd - master
2147 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 20 --min-spare=5 --helper-home-dir'"
2150 name: process - spamd - master
2151 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C spamd -a '/usr/sbin/spamd -d --pidfile=/var/run/spamd.pid --create-prefs --max-children 10 --helper-home-dir'"
2154 name: process - spamd - child
2155 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:11 -c 1: -C spamd -a 'spamd child'"
2158 depends: process - spamd - master
2161 name: unwanted process - spamd
2162 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C spamd"
2163 hostgroups: computers
2164 excludehostgroups: spamd
2165 excludehosts: bendel
2168 name: unwanted process - greylistd
2169 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C greylistd"
2170 hostgroups: computers
2174 name: process - postgrey
2175 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a '/usr/sbin/postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2176 hostgroups: heavy-exim
2177 excludehostgroups: jessie, stretch
2179 name: process - postgrey
2180 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --unix=/var/run/postgrey/socket --retry-window=4 --auto-whitelist-clients=10 --exim'"
2181 hostgroups: heavy-exim
2182 excludehostgroups: wheezy
2184 name: process - postgrey
2185 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postgrey -a 'postgrey --pidfile=/var/run/postgrey.pid --daemonize --inet=127.0.0.1:60000'"
2186 hostgroups: heavy-postfix
2189 name: unwanted process - postgrey
2190 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C postgrey"
2191 hostgroups: computers
2192 excludehostgroups: heavy-postfix, heavy-exim
2195 name: process - amavis - master
2196 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u amavis -a 'amavisd-new (master)'"
2197 hostgroups: amavis-hosts
2199 name: process - amavis - all
2200 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1:10 -u amavis -a 'amavisd-new '"
2201 hostgroups: amavis-hosts
2202 depends: process - amavis - master
2205 name: unwanted process - amavis
2206 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C amavisd-new"
2207 hostgroups: computers
2208 excludehostgroups: amavis-hosts
2211 name: process - weightd - master
2212 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (master)'"
2213 hostgroups: heavy-postfix, alioth
2215 name: process - weightd - cache
2216 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u polw -a 'policyd-weight (cache)'"
2217 hostgroups: heavy-postfix, alioth
2218 depends: process - weightd - master
2220 name: process - weightd - child
2221 nrpe: "/usr/lib/nagios/plugins/check_procs -w 2:50 -c 1: -u polw -a 'policyd-weight (child)'"
2222 hostgroups: heavy-postfix, alioth
2223 depends: process - weightd - master
2226 name: unwanted process - policyd-weight
2227 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C policyd-weight"
2228 hostgroups: computers
2229 excludehostgroups: heavy-postfix, alioth
2234 name: process - postfix - master
2235 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C master -a '/usr/lib/postfix/sbin/master'"
2236 hostgroups: postfix-hosts
2239 name: process - postfix - qmgr
2240 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C qmgr -a 'qmgr -l -t unix -u'"
2241 hostgroups: postfix-hosts
2242 depends: process - postfix - master
2245 name: process - postfix - pickup
2246 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u postfix -C pickup -a 'pickup -l -t unix -u -c'"
2247 hostgroups: postfix-hosts
2248 depends: process - postfix - master
2251 name: process - postfix - anvil
2252 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:1 -c 0: -u postfix -C anvil -a 'anvil -l -t unix -u'"
2253 hostgroups: postfix-hosts
2254 depends: process - postfix - master
2257 name: process - postfix - trivial-rewrite
2258 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C trivial-rewrite -a 'trivial-rewrite -n rewrite -t unix -u -c'"
2259 hostgroups: postfix-hosts
2260 depends: process - postfix - master
2262 name: process - postfix - proxymap
2263 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:10 -c 0:15 -u postfix -C proxymap -a 'proxymap -t unix -u'"
2264 hostgroups: postfix-hosts
2265 depends: process - postfix - master
2267 name: process - postfix - cleanup
2268 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C cleanup -a 'cleanup -z -t unix -u -c'"
2269 hostgroups: postfix-hosts
2270 depends: process - postfix - master
2272 name: process - postfix - local
2273 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:30 -c 0:50 -u postfix -C local -a 'local -t unix'"
2274 hostgroups: postfix-hosts
2275 depends: process - postfix - master
2278 name: network service local - smtps cert
2279 nrpe: "/usr/lib/nagios/plugins/check_smtp -H localhost -S -D 14"
2280 hostgroups: postfix-hosts
2281 depends: process - postfix - master
2284 # {{{ mail - network service
2286 name: network service - smtp
2287 check: dsa_check_smtp
2288 hostgroups: computers
2289 excludehostgroups: postfix-hosts, incomingmailrelayed, incomingmailrelayed2025
2290 depends: process - exim
2293 name: network service - smtp
2294 check: dsa_check_smtp
2295 hostgroups: postfix-hosts
2296 depends: process - postfix - master
2298 name: network service - submission
2299 check: dsa_check_smtp_port!587
2300 hostgroups: incomingmailrelayed
2301 depends: process - exim
2303 name: network service - smtp 2025
2304 check: dsa_check_smtp_port!2025
2305 hostgroups: incomingmailrelayed2025
2306 depends: process - exim
2309 # {{{ ### host specific services
2312 name: process - apache2 - master
2313 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u root -a /usr/sbin/apache2"
2314 hostgroups: apache2-hosts
2316 name: process - apache2 - worker
2317 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:50 -c 1:100 -u www-data -a /usr/sbin/apache2"
2318 hostgroups: apache2-hosts
2319 depends: process - apache2 - master
2320 excludehosts: klecker
2322 name: process - apache2 - worker
2323 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:80 -c 1:150 -u www-data -a /usr/sbin/apache2"
2325 depends: process - apache2 - master
2327 name: unwanted process - apache2
2328 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C apache2"
2329 hostgroups: computers
2330 excludehostgroups: apache2-hosts
2333 name: network service - http
2335 hostgroups: apache2-hosts
2336 excludehosts: klecker, casulana
2337 depends: process - apache2 - master
2339 name: network service - http
2341 depends: klecker:process - apache2 - master
2344 # keyserver on kaufmann
2346 name: network service - http keyserver
2347 check: dsa_check_http_port!11371
2349 depends: process - apache2 - master
2351 # https on various hosts
2353 name: network service - https
2355 hostgroups: apache-https
2356 excludehosts: menotti
2357 excludehostgroups: broken_https_default_vhost
2358 depends: "process - apache2 - master"
2361 name: network service - https
2363 hostgroups: https-service
2364 excludehostgroups: broken_https_default_vhost
2367 name: network service - https
2368 check: dsa_check_https_want_auth
2370 depends: "process - apache2 - master"
2373 name: network service - https
2374 check: dsa_check_https_any_status
2375 hostgroups: broken_https_default_vhost
2376 depends: "process - apache2 - master"
2379 name: network service - https cert
2380 check: dsa_check_cert!443
2381 hostgroups: apache-https, https-service
2382 depends: network service - https
2385 name: unwanted network service - https
2386 check: dsa_check_port_closed!443
2387 hostgroups: apache2-hosts
2388 excludehostgroups: apache-https
2393 name: network service - ftp
2395 hostgroups: uploadqueue
2399 name: unwanted process - postgresql
2400 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres"
2401 hostgroups: computers
2402 excludehostgroups: postgres91-hosts, postgres94-hosts, postgres96-hosts
2404 name: unwanted process - postgresql 9.0
2405 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C postgres -a '9.0/bin/postgres'"
2406 hostgroups: computers
2408 name: process - postgresql91 - master
2409 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.1/bin/postgres'"
2410 hostgroups: postgres91-hosts
2412 name: process - postgresql94 - master
2413 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.4/bin/postgres'"
2414 hostgroups: postgres94-hosts
2416 name: process - postgresql96 - master
2417 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u postgres -C postgres -a '/usr/lib/postgresql/9.6/bin/postgres'"
2418 hostgroups: postgres96-hosts
2420 name: postgresql backups
2421 nrpe: "/usr/bin/sudo -u debbackup /usr/lib/nagios/plugins/dsa-check-backuppg"
2422 hosts: storace, backuphost
2426 name: process - buildd
2427 servicegroups: buildd
2428 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:5 -u buildd -C buildd -a '/usr/bin/buildd'"
2430 contact_groups: buildd
2432 name: processes - zombie schroot
2433 nrpe: "(/usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0 > /dev/null || /usr/lib/nagios/plugins/check_procs -a schroot -s Zs -c 0) && /usr/lib/nagios/plugins/check_procs -a schroot -s ZNs -c 0"
2435 contact_groups: +buildd
2437 max_check_attempts: 24
2440 name: processes - lvcreate
2441 nrpe: "/usr/lib/nagios/plugins/check_procs -m 'ELAPSED' -c 500 -C lvcreate -u root -a 'lvcreate'"
2443 contact_groups: +buildd
2447 name: process - statd
2448 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u statd -C rpc.statd -a '/sbin/rpc.statd'"
2449 hostgroups: nfs-client, nfs-server
2450 excludehostgroups: stretch
2452 name: process - nfsd
2453 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u root -C nfsd -a '[nfsd]'"
2454 hostgroups: nfs-server
2456 name: process - lockd
2457 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C lockd -a '[lockd]'"
2458 hostgroups: nfs-server
2460 name: process - mountd
2461 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C rpc.mountd -a '/sbin/rpc.mountd'"
2462 hostgroups: nfs-server
2465 name: process - automount
2466 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1: -u root -C automount -a '/usr/sbin/automount'"
2469 name: unwanted process - automount
2470 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0 -C automount"
2471 hostgroups: computers
2472 excludehostgroups: autofs
2476 name: mirror sync - bugs
2477 check: "dsa_check_mirrorsync_skew!bugs.debian.org!project/trace/bugs-master.debian.org!120:600"
2479 servicegroups: mirror
2481 name: mirror sync - security
2482 check: "dsa_check_mirrorsync_skew!security-nagios.debian.org!project/trace/security-master.debian.org!150:3600"
2484 servicegroups: mirror
2486 name: mirror sync - packages
2487 check: "dsa_check_mirrorsync_skew!packages.debian.org!Pics/.trace!3600:57600"
2490 max_check_attempts: 5
2492 servicegroups: mirror
2494 name: mirror sync - snapshot
2495 check: "dsa_check_mirrorsync_skew!snapshot.debian.org!project/trace/snapshot-master.debian.org!3600:28800"
2498 max_check_attempts: 5
2500 servicegroups: mirror
2502 name: mirror sync - debian archive backend
2503 check: "dsa_check_mirrorsync!debian.backend.mirrors.debian.org!debian/project/trace/master"
2506 max_check_attempts: 5
2508 servicegroups: mirror
2511 name: mirror static sync - bits
2512 check: "dsa_check_staticsync!bits.debian.org"
2514 servicegroups: mirror
2516 name: mirror static sync - network-test
2517 check: "dsa_check_staticsync_nossl!network-test.debian.org"
2519 servicegroups: mirror
2521 name: mirror static sync - appstream
2522 check: "dsa_check_staticsync!appstream.debian.org"
2524 servicegroups: mirror
2526 name: mirror static sync - blends
2527 check: "dsa_check_staticsync!blends.debian.org"
2529 servicegroups: mirror
2531 name: mirror static sync - d-i
2532 check: "dsa_check_staticsync!d-i.debian.org"
2534 servicegroups: mirror
2536 name: mirror static sync - debaday
2537 check: "dsa_check_staticsync!debaday.debian.net"
2539 servicegroups: mirror
2541 name: mirror static sync - debdeltas
2542 check: "dsa_check_staticsync_nossl!debdeltas.debian.net"
2544 servicegroups: mirror
2546 name: mirror static sync - dsa
2547 check: "dsa_check_staticsync!dsa.debian.org"
2549 servicegroups: mirror
2551 name: mirror static sync - lintian
2552 check: "dsa_check_staticsync!lintian.debian.org"
2554 servicegroups: mirror
2556 name: mirror static sync - mozilla
2557 check: "dsa_check_staticsync_nossl!mozilla.debian.net"
2559 servicegroups: mirror
2561 name: mirror static sync - news
2562 check: "dsa_check_staticsync!news.debian.net"
2564 servicegroups: mirror
2566 name: mirror static sync - incoming.ports
2567 check: "dsa_check_staticsync_nossl!incoming.ports.debian.org"
2569 servicegroups: mirror
2571 # name: mirror static sync - release
2572 # check: "dsa_check_staticsync!release.debian.org"
2574 # servicegroups: mirror
2576 name: mirror static sync - rtc
2577 check: "dsa_check_staticsync!rtc.debian.org"
2579 servicegroups: mirror
2581 name: mirror static sync - security-team
2582 check: "dsa_check_staticsync!security-team.debian.org"
2584 servicegroups: mirror
2586 name: mirror static sync - wnpp-by-tags
2587 check: "dsa_check_staticsync!wnpp-by-tags.debian.net"
2589 servicegroups: mirror
2591 name: mirror static sync - www.ports
2592 check: "dsa_check_staticsync!www.ports.debian.org"
2594 servicegroups: mirror
2596 name: mirror static sync - timeline
2597 check: "dsa_check_staticsync!timeline.debian.net"
2599 servicegroups: mirror
2601 name: mirror static sync - backports
2602 check: "dsa_check_staticsync!backports.debian.org"
2604 servicegroups: mirror
2606 name: mirror static sync - incoming
2607 check: "dsa_check_staticsync_nossl!incoming.debian.org"
2609 servicegroups: mirror
2611 name: mirror static sync - metadata.ftp-master
2612 check: "dsa_check_staticsync_nossl!metadata.ftp-master.debian.org"
2614 servicegroups: mirror
2616 name: mirror static sync - mirror-master
2617 check: "dsa_check_staticsync_nossl!mirror-master.debian.org"
2619 servicegroups: mirror
2621 name: mirror static sync - deb
2622 check: "dsa_check_staticsync_nossl!deb.debian.org"
2624 servicegroups: mirror
2626 name: mirror static sync - manpages
2627 check: "dsa_check_staticsync!manpages.debian.org"
2629 servicegroups: mirror
2632 name: mirror static sync - 10years
2633 check: "dsa_check_staticsync!10years.debconf.org"
2635 servicegroups: mirror
2637 name: mirror static sync - debconf0
2638 check: "dsa_check_staticsync!debconf0.debconf.org"
2640 servicegroups: mirror
2642 name: mirror static sync - debconf1
2643 check: "dsa_check_staticsync!debconf1.debconf.org"
2645 servicegroups: mirror
2647 name: mirror static sync - debconf2
2648 check: "dsa_check_staticsync!debconf2.debconf.org"
2650 servicegroups: mirror
2652 name: mirror static sync - debconf3
2653 check: "dsa_check_staticsync!debconf3.debconf.org"
2655 servicegroups: mirror
2657 name: mirror static sync - debconf4
2658 check: "dsa_check_staticsync!debconf4.debconf.org"
2660 servicegroups: mirror
2662 name: mirror static sync - debconf5
2663 check: "dsa_check_staticsync!debconf5.debconf.org"
2665 servicegroups: mirror
2667 name: mirror static sync - debconf6
2668 check: "dsa_check_staticsync!debconf6.debconf.org"
2670 servicegroups: mirror
2672 name: mirror static sync - debconf7
2673 check: "dsa_check_staticsync!debconf7.debconf.org"
2675 servicegroups: mirror
2677 name: mirror static sync - debconf16
2678 check: "dsa_check_staticsync!debconf16.debconf.org"
2680 servicegroups: mirror
2682 name: mirror static sync - es
2683 check: "dsa_check_staticsync!es.debconf.org"
2685 servicegroups: mirror
2687 name: mirror static sync - fr
2688 check: "dsa_check_staticsync!fr.debconf.org"
2690 servicegroups: mirror
2692 name: mirror static sync - miniconf10
2693 check: "dsa_check_staticsync!miniconf10.debconf.org"
2695 servicegroups: mirror
2699 name: process - named
2700 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u bind -C named -a '/usr/sbin/named '"
2701 hostgroups: bind9-hosts
2703 name: network service - dns
2705 hostgroups: bind9-hosts
2706 depends: process - named
2708 name: unwanted process - named
2709 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C named"
2710 hostgroups: computers
2711 excludehostgroups: bind9-hosts
2714 name: DNS SOA sync - debian.org
2715 check: "dsa_check_soas_add!denis.debian.org!debian.org"
2718 name: DNS SOA sync - debian.net
2719 check: "dsa_check_soas_add!denis.debian.org!debian.net"
2722 name: DNS SOA sync - debian.com
2723 check: "dsa_check_soas_add!denis.debian.org!debian.com"
2726 name: DNS SOA sync - 144-28.118.59.86.in-addr.arpa
2727 check: "dsa_check_soas_add!denis.debian.org!144-28.118.59.86.in-addr.arpa"
2730 name: DNS SOA sync - debconf.net
2731 check: "dsa_check_soas_add!denis.debian.org!debconf.net"
2734 name: DNS SOA sync - debconf.org
2735 check: "dsa_check_soas_add!denis.debian.org!debconf.org"
2738 name: DNS SOA sync - debianday.org
2739 check: "dsa_check_soas_add!denis.debian.org!debianday.org"
2742 name: DNS SOA sync - dpkg.org
2743 check: "dsa_check_soas_add!denis.debian.org!dpkg.org"
2746 name: DNS - delegation and signature expiry
2748 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-rrsig-expiration-many --warn 20d --critical 7d --geozonedir /srv/dns.debian.org/repositories/auto-dns/zones /srv/dns.debian.org/repositories/domains"
2751 name: DNS - security delegations
2753 remotecheck: "/usr/lib/nagios/plugins/dsa-check-dnssec-delegation --dir /srv/dns.debian.org/repositories/domains --dir /srv/dns.debian.org/repositories/auto-dns/zones check-header"
2756 name: DNS - key coverage
2758 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/coverage"
2761 name: DNS - DS expiry
2763 remotecheck: "/usr/lib/nagios/plugins/dsa-check-statusfile /srv/dns.debian.org/var/nagios/ds"
2766 name: DNS - zones signed properly
2768 remotecheck: "/usr/lib/nagios/plugins/dsa-check-zone-signature-all"
2773 name: process - multipathd
2774 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:15 -c 1: -u root -C multipathd -a '/sbin/multipathd'"
2775 hostgroups: multipath-hosts
2777 name: unwanted process - multipathd
2778 nrpe: "/usr/lib/nagios/plugins/check_procs -w 0:0 -C multipathd"
2779 hostgroups: computers
2780 excludehostgroups: multipath-hosts
2784 name: current chroots
2785 nrpe: "/usr/lib/nagios/plugins/dsa-check-dchroots-current"
2786 hostgroups: porterbox
2792 # name: process - openstack - memcached
2793 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nobody -C memcached -a '/usr/bin/memcached -m 128 -p 11211 -u nobody -l 0.0.0.0'"
2794 # hostgroups: openstack-controller
2796 # name: process - openstack - glance-registry
2797 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u glance -C glance-registry -a '/usr/bin/python /usr/bin/glance-registry'"
2798 # hostgroups: openstack-controller
2800 # name: process - openstack - nova-api
2801 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-api -a '/usr/bin/python /usr/bin/nova-api --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-api.log'"
2802 # hostgroups: openstack-controller
2804 # name: process - openstack - nova-compute
2805 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-compute -a '/usr/bin/python /usr/bin/nova-compute --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-compute.log --config-file=/etc/nova/nova-compute.conf'"
2806 # hostgroups: openstack-compute
2808 # name: process - openstack - nova-cert
2809 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-cert -a '/usr/bin/python /usr/bin/nova-cert --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-cert.log'"
2810 # hostgroups: openstack-controller
2812 # name: process - openstack - nova-conductor
2813 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -C nova-conductor -a '/usr/bin/python /usr/bin/nova-conductor --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-conductor.log'"
2814 # hostgroups: openstack-controller
2816 # name: process - openstack - nova-consoleauth
2817 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-consoleauth --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-consoleauth.log'"
2818 # hostgroups: openstack-controller
2820 # name: process - openstack - nova-scheduler
2821 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-scheduler --config-file=/etc/nova/nova.conf --log-file /var/log/nova/nova-scheduler.log'"
2822 # hostgroups: openstack-controller
2824 # name: process - openstack - nova-spicehtml5proxy
2825 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u nova -a '/usr/bin/python /usr/bin/nova-spicehtml5proxy --log-file /var/log/nova/nova-consoleproxy.log'"
2826 # hostgroups: openstack-controller
2828 # name: process - openstack - neutron-server
2829 # nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:10 -c 1: -u neutron -C neutron-server -a '/usr/bin/python2.7 /usr/bin/neutron-server --config-file=/etc/neutron/neutron.conf --config-file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini --log-file=/var/log/neutron/neutron-server.log'"
2830 # hostgroups: openstack-controller
2834 name: system - all services running
2835 nrpe: "/usr/bin/sudo /usr/lib/nagios/plugins/dsa-check-systemd-services"
2836 hostgroups: jessie, stretch
2839 name: process - slapd
2840 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:20 -c 1:50 -u openldap -C slapd -a '/usr/sbin/slapd -h ldap:/// ldaps:/// -g openldap -u openldap'"
2843 name: network service - ldaps cert
2844 check: dsa_check_cert!636
2845 depends: process - slapd
2850 name: network service - finger
2853 depends: process - xinetd
2856 name: network service - rsync
2857 check: check_tcp!873
2858 hostgroups: rsyncd-hosts
2861 name: process - icinga
2862 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:90 -c 1: -u nagios -C icinga -a '/usr/sbin/icinga -d /etc/icinga/icinga.cfg'"
2866 name: process - debianqueued
2867 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:3 -c 1: -u dak-unpriv -C debianqueued"
2871 name: network service - gobby
2872 check: check_tcp!6523
2874 contact_groups: gobby
2877 name: network service - sip-tls cert - 443
2878 check: dsa_check_cert!443
2882 name: network service - sip-tls cert - 5061
2883 check: dsa_check_cert!5061
2887 name: freeradius process
2888 nrpe: "/usr/lib/nagios/plugins/check_procs -w 1:1 -c 1:1 -u freerad -C freeradius -a '/usr/sbin/freeradius -xx'"
2893 name: puppetmaster cert
2894 nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"
2897 max_check_attempts: 2
2900 name: puppet - agent check
2901 nrpe: "/usr/lib/nagios/plugins/dsa-check-statusfile /var/cache/dsa/nagios/puppet-agent"
2902 hostgroups: computers
2903 excludehosts: moszumanska
2909 # vim: set ts=2 sw=2 et ai si fdm=marker: