-{ config, myconfig, pkgs, lib, name, hostFQDN, ... }:
+{ config, pkgs, lib, name, ... }:
let
myplugins = pkgs.runCommand "buildplugins" {
buildInputs = [ pkgs.makeWrapper pkgs.perl ];
wrapProgram $out/check_postgres_replication --prefix PATH : ${lib.makeBinPath [
pkgs.postgresql
]}
+ wrapProgram $out/check_redis_replication --prefix PATH : ${lib.makeBinPath [
+ pkgs.gnugrep pkgs.coreutils pkgs.redis
+ ]}
+ wrapProgram $out/check_mysql_replication --prefix PATH : ${lib.makeBinPath [
+ pkgs.gnugrep pkgs.gnused pkgs.coreutils pkgs.mariadb
+ ]}
+ wrapProgram $out/check_openldap_replication --prefix PATH : ${lib.makeBinPath [
+ pkgs.gnugrep pkgs.gnused pkgs.coreutils pkgs.openldap
+ ]}
'';
toObjects = pkgs.callPackage ./to_objects.nix {};
commonConfig = {
};
};
commonObjects = pkgs.callPackage ./objects_common.nix ({
- inherit hostFQDN;
+ hostFQDN = config.hostEnv.FQDN;
sudo = "/run/wrappers/bin/sudo";
} // builtins.getAttr name commonConfig);
hostObjects =
let
specific_file = ./. + "/objects_" + name + ".nix";
in
- lib.attrsets.optionalAttrs (builtins.pathExists specific_file) (pkgs.callPackage specific_file {});
+ lib.attrsets.optionalAttrs (builtins.pathExists specific_file) (pkgs.callPackage specific_file { inherit config; });
in
{
options = {
}
{
commands = [
- { command = "${myplugins}/check_postgres_replication *"; options = [ "NOPASSWD" ]; }
{ command = "${myplugins}/check_last_file_date /backup2/*"; options = [ "NOPASSWD" ]; }
];
users = [ "naemon" ];
+ runAs = "ALL";
+ }
+ {
+ commands = [
+ { command = "${myplugins}/check_postgres_replication *"; options = [ "NOPASSWD" ]; }
+ ];
+ users = [ "naemon" ];
runAs = "postgres";
}
{
commands = [
- { command = "${myplugins}/check_last_file_date /backup2/*"; options = [ "NOPASSWD" ]; }
+ { command = "${myplugins}/check_mysql_replication *"; options = [ "NOPASSWD" ]; }
];
users = [ "naemon" ];
runAs = "mysql";
}
{
commands = [
- { command = "${myplugins}/check_last_file_date /backup2/*"; options = [ "NOPASSWD" ]; }
+ { command = "${myplugins}/check_openldap_replication *"; options = [ "NOPASSWD" ]; }
+ ];
+ users = [ "naemon" ];
+ runAs = "openldap";
+ }
+ {
+ commands = [
+ { command = "${myplugins}/check_redis_replication *"; options = [ "NOPASSWD" ]; }
];
users = [ "naemon" ];
- runAs = "backup";
+ runAs = "redis";
}
];
environment.etc."mdadm.conf" = {
enable = true;
mode = "0644";
user = "root";
- text = "MAILADDR ${myconfig.env.monitoring.email}";
+ text = "MAILADDR ${config.myEnv.monitoring.email}";
};
# needed since extraResource is not in the closure
use_syslog=1
log_initial_states=1
date_format=iso8601
- admin_email=${myconfig.env.monitoring.email}
+ admin_email=${config.myEnv.monitoring.email}
obsess_over_services=1
ocsp_command=notify-master
'';
extraResource = ''
$USER2$=${myplugins}
- $USER200$=${myconfig.env.monitoring.status_url}
- $USER201$=${myconfig.env.monitoring.status_token}
+ $USER200$=${config.myEnv.monitoring.status_url}
+ $USER201$=${config.myEnv.monitoring.status_token}
'';
objectDefs = toObjects commonObjects + toObjects hostObjects;
};