X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fmonitoring%2Fdefault.nix;h=316c2ddff5dd56688979e7b3bc0d55a06e90ab2c;hb=171d8e1a8861e5844f6cb8d1623b93b0e86aabea;hp=0586567ec326034bb11d61f5f61d5e05c092780e;hpb=9f16e659f129dd8acab7d086ef9822673a01ba06;p=perso%2FImmae%2FConfig%2FNix.git diff --git a/modules/private/monitoring/default.nix b/modules/private/monitoring/default.nix index 0586567..316c2dd 100644 --- a/modules/private/monitoring/default.nix +++ b/modules/private/monitoring/default.nix @@ -26,9 +26,6 @@ let wrapProgram $out/send_nrdp.sh --prefix PATH : ${lib.makeBinPath [ pkgs.curl pkgs.jq ]} - wrapProgram $out/check_maison_bbc --prefix PATH : ${lib.makeBinPath [ - pkgs.curl pkgs.jq - ]} wrapProgram $out/check_mem.sh --prefix PATH : ${lib.makeBinPath [ pkgs.gnugrep pkgs.gawk pkgs.procps-ng ]} @@ -61,9 +58,9 @@ let wrapProgram $out/check_eriomem --prefix PATH : ${lib.makeBinPath [ pkgs.s3cmd pkgs.python3 ]} - wrapProgram $out/notify_maison_bbc_by_email --prefix PATH : ${lib.makeBinPath [ - pkgs.mailutils pkgs.gawk - ]} + wrapProgram $out/check_eriomem_age --prefix PATH : ${lib.makeBinPath [ + pkgs.duplicity + ]} --set SECRETS_PATH ${lib.optionalString cfg.master config.secrets.fullPaths."eriomem_access_key"} wrapProgram $out/notify_by_email --prefix PATH : ${lib.makeBinPath [ pkgs.mailutils ]} @@ -142,7 +139,7 @@ let lib.attrsets.optionalAttrs (builtins.pathExists specific_file) (pkgs.callPackage specific_file { - inherit config emailCheck; + inherit config nodes emailCheck; hostFQDN = config.hostEnv.fqdn; hostName = name; }); @@ -238,16 +235,27 @@ in dest = "naemon/id_rsa"; user = "naemon"; group = "naemon"; - premissions = "0400"; + permissions = "0400"; text = config.myEnv.monitoring.ssh_secret_key; } - ]; + ] ++ lib.optional cfg.master ( + { + dest = "eriomem_access_key"; + user = "naemon"; + group = "naemon"; + permissions = "0400"; + text = '' + export AWS_ACCESS_KEY_ID="${config.myEnv.backup.accessKeyId}" + export AWS_SECRET_ACCESS_KEY="${config.myEnv.backup.secretAccessKey}" + export BASE_URL="${config.myEnv.backup.remote}" + ''; + } + ); # needed since extraResource is not in the closure systemd.services.naemon.path = [ myplugins ]; services.naemon = { enable = true; extraConfig = '' - broker_module=${pkgs.naemon-livestatus}/lib/naemon-livestatus/livestatus.so ${config.services.naemon.runDir}/live use_syslog=1 log_initial_states=1 date_format=iso8601 @@ -255,6 +263,9 @@ in '' + lib.optionalString (!cfg.master) '' obsess_over_services=1 ocsp_command=notify-master + '' + lib.optionalString (cfg.master) '' + broker_module=${pkgs.naemon-livestatus}/lib/naemon-livestatus/livestatus.so ${config.services.naemon.runDir}/live + broker_module=${pkgs.status_engine.module}/lib/status-engine/naemon/statusengine-${pkgs.naemon.status_engine_version}.o use_service_perfdata=1 use_process_data=0 use_system_command_data=0 use_external_command_data=0 use_flapping_data=0 use_program_status_data=0 use_notification_data=0 use_contact_status_data=0 use_contact_notification_data=0 use_event_handler_data=0 use_object_data=0 ''; extraResource = '' $USER2$=${myplugins}