service/http: Monitor https and https certificates

Check that https endpoints are reachable, and that the certificat
is not about to expire.

Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>

1 files changed, 30 insertions, 0 deletions

diff --git a/zones.d/master/services.conf b/zones.d/master/services.conf
index 25ca1c5..2b31393 100644
--- a/zones.d/master/services.conf
+++ b/zones.d/master/services.conf
@@ -32,3 +32,33 @@ apply Service "ssh" {
 
 	assign where (host.address || host.address6) && host.vars.kernel == "linux"
 }
+
+/**
+ * Network Service checks
+ */
+
+template Service "http" {
+	import "generic-network-service"
+
+	check_command = "http"
+
+	vars += {
+		http_vhost = http_vhost
+		http_sni = true
+		http_warn_time = 0.2s
+		http_critical_time = 0.3s
+	}
+	vars += config
+}
+
+apply Service "https-" for (http_vhost => config in host.vars.http_vhosts) {
+	import "http"
+
+	vars.http_ssl = true
+}
+
+apply Service "https-cert-" for (http_vhost => config in host.vars.http_vhosts) {
+	import "http"
+
+	vars.http_certificate = "25,10"
+}