summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFiles
* http: Use client certificateTobias Wiese2021-01-302
| | | | | | | | | For some http requests nginx checks if the user is authenticated with a client certificate and denies that request otherwise. This adds client certificate authentication to http checks, so that the requests are actually handled. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* service: monitor systemd system stateTobias Wiese2021-01-166
| | | | | | Monitor whether there are systemd units in a failed state. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* smtp: increase allowed delay to 0.5sTobias Wiese2020-11-161
| | | | | | | | Give the smtpd more time to answer. The old threshold is sometimes reached when a lot of emails are received. This is not really a problem so we increase the allowed delay. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* hosts/www1001: monitor www1001Tobias Wiese2020-07-012
| | | | | | Add monitoring for the webserver www1001. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* mailq: monitor nullmailer by defaultTobias Wiese2020-06-141
| | | | | | | | By default every host has a nullmailer installed (unless it has some other mailserver), so monitor the mailq of nullmailer unless some other mailserver (or "none") is explicitly defined. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* hosts/backup-master: monitor backup-masterTobias Wiese2020-06-142
| | | | | | | | | | | Add monitoring for backup-master. The server is not reachable from the outside. Therefore network checks don't make any sense. The hosts check_command is set to dummy. If the host goes done, this will be noticed, because the icinga agent looses connection to it's parent. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* smtp-cert: add extra service for smtp certificateTobias Wiese2020-06-061
| | | | | | | | | Monitor the smtp certificate in it's own service instead of including the monitoring with the other smtp-* services. After this change the time the mailserver takes to answer will be monitored. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* hosts/keen-morse: Monitor the mailserverTobias Wiese2020-05-144
| | | | | | | Add monitoring to the mailserver. Alos adds services for the mailq, smtp and imap Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* elog: Monitor elog servicesTobias Wiese2020-05-142
| | | | | | | | | Monitor the services of elog: - DNS Zone - Phabricator - Phabricator sshd Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* service/pgsql: Monitor PostgreSQLTobias Wiese2020-05-142
| | | | | | Tries to connect to a database in the postgresql cluster. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* service/cluster: monitor health of agentsTobias Wiese2020-05-142
| | | | | | | | When an agent is unhealthy only notify about that, and suppress notifications about other services on that agent not running. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* service/dns: Monitor authroitive dns serverTobias Wiese2020-05-142
| | | | | | | Monitors the zones of authorative dns servers. Does not validate DNSSEC or the resulting ip address. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* service/http: Monitor https and https certificatesTobias Wiese2020-05-142
| | | | | | | Check that https endpoints are reachable, and that the certificat is not about to expire. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* service: basic node healthTobias Wiese2020-05-113
| | | | | | | | Check for basic node health including ping, disk and swap. Also check with the package manager, that the system is up to date. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* notifications: Notify via email and telegramTobias Wiese2020-05-1110
| | | | | | | | | | Provide notification in case of a state change via email and telegram bot. The telegram bot is especially helpful in cases where a problem with email delivery is to be reportet. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* hosts: monitor master nodeTobias Wiese2020-05-102
| | | | | | Monitor the host where the icinga2 master runs. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* api: enable apiTobias Wiese2020-05-102
| | | | | | The api is used for communication between nodes. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* command: enable local command pipeTobias Wiese2020-05-101
| | | | | | | The local command pipe is used by icingaweb2 to deliver commands such as scheduling checks or creating downtimes. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* database: enable ido-pgsqlTobias Wiese2020-05-105
| | | | | | | Makes icinga2 connect to the database. The password should be supplied in the master-secrets.conf Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>
* basic configurationTobias Wiese2020-05-1023
Provides a basic inital configuration. Signed-off-by: Tobias Wiese <tobias@tobiaswiese.com>