wrapProgram $out/check_eriomem --prefix PATH : ${lib.makeBinPath [
pkgs.s3cmd pkgs.python3
]}
- wrapProgram $out/check_eriomem_age --prefix PATH : ${lib.makeBinPath [
+ makeWrapper $out/check_backup_age $out/check_backup_eriomem_age --prefix PATH : ${lib.makeBinPath [
pkgs.duplicity
]} --set SECRETS_PATH ${lib.optionalString cfg.master config.secrets.fullPaths."eriomem_access_key"}
+ makeWrapper $out/check_backup_age $out/check_backup_ovh_age --prefix PATH : ${lib.makeBinPath [
+ pkgs.duplicity
+ ]} --set SECRETS_PATH ${lib.optionalString cfg.master config.secrets.fullPaths."ovh_access_key"}
wrapProgram $out/notify_by_email --prefix PATH : ${lib.makeBinPath [
pkgs.mailutils
]}
};
monitoring-1 = {
processWarn = "50"; processAlert = "60";
- loadWarn = "1.0"; loadAlert = "2.0";
+ loadWarn = "4.0"; loadAlert = "6.0";
+ load15Warn = "1.0"; load15Alert = "2.0";
interface = "ens3";
};
};
};
otherObjects = map
(n: (pkgs.callPackage (./. + "/objects_" + n + ".nix") { inherit emailCheck; }))
- [ "caldance-1" "ulminfo-fr" "phare" ];
+ [ "ulminfo-fr" "phare" ];
masterObjects = pkgs.callPackage ./objects_master.nix { inherit config; };
commonObjects = pkgs.callPackage ./objects_common.nix ({
master = cfg.master;
permissions = "0400";
text = config.myEnv.monitoring.ssh_secret_key;
}
- ] ++ lib.optional cfg.master (
+ ] ++ lib.optionals cfg.master (
+ lib.mapAttrsToList (k: v:
{
- dest = "eriomem_access_key";
+ dest = "${k}_access_key";
user = "naemon";
group = "naemon";
permissions = "0400";
text = ''
- export AWS_ACCESS_KEY_ID="${config.myEnv.backup.accessKeyId}"
- export AWS_SECRET_ACCESS_KEY="${config.myEnv.backup.secretAccessKey}"
- export BASE_URL="${config.myEnv.backup.remote}"
+ export AWS_ACCESS_KEY_ID="${v.accessKeyId}"
+ export AWS_SECRET_ACCESS_KEY="${v.secretAccessKey}"
+ export BASE_URL="${v.remote "immae-eldiron"}"
'';
- }
+ }) config.myEnv.backup.remotes
);
# needed since extraResource is not in the closure
systemd.services.naemon.path = [ myplugins ];