From: Aurelien Jarno <aurelien@aurel32.net>
Date: Sun, 31 Mar 2019 18:50:16 +0000 (+0200)
Subject: Check for Debian SMTP CA cert expiration
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-nagios.git;a=commitdiff_plain;h=23da63fdcf009e97c001c123eba66a652b8588bb

Check for Debian SMTP CA cert expiration

Note that despite its name this CA is also used for at least SSL tunnels,
and PostgreSQL.
---

diff --git a/config/nagios-master.cfg b/config/nagios-master.cfg
index 818cfcc..af2a92b 100644
--- a/config/nagios-master.cfg
+++ b/config/nagios-master.cfg
@@ -2907,6 +2907,14 @@ services:
     check_interval: 60
     hosts: vogler
   ####
+  -
+    name: Debian SMTP CA
+    nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /srv/puppet.debian.org/ca/ca.crt"
+    hosts: handel
+    check_interval: 60
+    max_check_attempts: 2
+    retry_interval: 5
+  ####
   -
     name: puppetmaster cert
     nrpe: "sudo -u puppet /usr/lib/nagios/plugins/dsa-check-cert-expire /var/lib/puppet/ssl/certs/ca.pem"