X-Git-Url: https://git.immae.eu/?a=blobdiff_plain;f=modules%2Fprivate%2Fmonitoring%2Fdefault.nix;h=d6c91acce6a8e5c3f5a9ec214c838180661fbb36;hb=ab8f306d7c2c49b8116e1af7b355ed2384617ed9;hp=6062abab2e1689e5c02eb57983ad84f0c49e5273;hpb=9f2025235d888eb4a7822024a5fad2e288388814;p=perso%2FImmae%2FConfig%2FNix.git

diff --git a/modules/private/monitoring/default.nix b/modules/private/monitoring/default.nix
index 6062aba..d6c91ac 100644
--- a/modules/private/monitoring/default.nix
+++ b/modules/private/monitoring/default.nix
@@ -1,4 +1,4 @@
-{ config, myconfig, pkgs, lib, name, hostFQDN, ... }:
+{ config, pkgs, lib, name, ... }:
 let
   myplugins = pkgs.runCommand "buildplugins" {
     buildInputs = [ pkgs.makeWrapper pkgs.perl ];
@@ -16,43 +16,36 @@ let
     wrapProgram $out/check_postgres_replication --prefix PATH : ${lib.makeBinPath [
       pkgs.postgresql
     ]}
+    wrapProgram $out/check_redis_replication --prefix PATH : ${lib.makeBinPath [
+      pkgs.gnugrep pkgs.coreutils pkgs.redis
+    ]}
+    wrapProgram $out/check_mysql_replication --prefix PATH : ${lib.makeBinPath [
+      pkgs.gnugrep pkgs.gnused pkgs.coreutils pkgs.mariadb
+    ]}
+    wrapProgram $out/check_openldap_replication --prefix PATH : ${lib.makeBinPath [
+      pkgs.gnugrep pkgs.gnused pkgs.coreutils pkgs.openldap
+    ]}
     '';
-  defaultObjects =
-    let specific_file = ./conf + "/specific_" + name + ".cfg";
+  toObjects = pkgs.callPackage ./to_objects.nix {};
+  commonConfig = {
+    eldiron = {
+      processWarn = "250"; processAlert = "400";
+      loadWarn = "8.0"; loadAlert = "10.0";
+    };
+    backup-2 = {
+      processWarn = "50"; processAlert = "60";
+      loadWarn = "1.0"; loadAlert = "2.0";
+    };
+  };
+  commonObjects = pkgs.callPackage ./objects_common.nix ({
+    hostFQDN = config.hostEnv.FQDN;
+    sudo = "/run/wrappers/bin/sudo";
+  } // builtins.getAttr name commonConfig);
+  hostObjects =
+    let
+      specific_file = ./. + "/objects_" + name + ".nix";
     in
-        builtins.readFile ./conf/local_services.cfg
-      + builtins.readFile ./conf/timeperiods.cfg
-      + builtins.readFile ./conf/services.cfg
-      + builtins.readFile ./conf/contacts.cfg
-      + builtins.readFile ./conf/hosts.cfg
-      + ''
-        define command {
-          command_line       ${myplugins}/send_nrdp.sh -u "$USER200$" -t "$USER201$" -H "$HOSTADDRESS$" -s "$SERVICEDESC$" -S "$SERVICESTATEID$" -o "$SERVICEOUTPUT$"
-          command_name       notify-master
-        }
-        define service {
-          service_description  No mdadm array is degraded
-          use                  local-service
-          check_command        check_command_output!${pkgs.mdadm}/bin/mdadm --monitor --scan -1!^$!-s 0 -r root
-        }
-
-        define service {
-          name                local-service
-          use                 generic-service
-          host_name           ${hostFQDN}
-          check_interval      5
-          max_check_attempts  4
-          register            0
-          retry_interval      1
-        }
-        define host {
-          host_name           ${hostFQDN}
-          alias               ${hostFQDN}
-          address             ${hostFQDN}
-          use                 linux-server
-        }
-        ''
-      + lib.strings.optionalString (builtins.pathExists specific_file) (builtins.readFile specific_file);
+      lib.attrsets.optionalAttrs (builtins.pathExists specific_file) (pkgs.callPackage specific_file { inherit config; });
 in
 {
   options = {
@@ -82,25 +75,45 @@ in
       }
       {
         commands = [
-          { command = "${myplugins}/check_postgres_replication *"; options = [ "NOPASSWD" ]; }
           { command = "${myplugins}/check_last_file_date /backup2/*"; options = [ "NOPASSWD" ]; }
         ];
         users = [ "naemon" ];
+        runAs = "ALL";
+      }
+      {
+        commands = [
+          { command = "${myplugins}/check_postgres_replication *"; options = [ "NOPASSWD" ]; }
+        ];
+        users = [ "naemon" ];
         runAs = "postgres";
       }
       {
         commands = [
-          { command = "${myplugins}/check_last_file_date /backup2/*"; options = [ "NOPASSWD" ]; }
+          { command = "${myplugins}/check_mysql_replication *"; options = [ "NOPASSWD" ]; }
+        ];
+        users = [ "naemon" ];
+        runAs = "mysql";
+      }
+      {
+        commands = [
+          { command = "${myplugins}/check_openldap_replication *"; options = [ "NOPASSWD" ]; }
+        ];
+        users = [ "naemon" ];
+        runAs = "openldap";
+      }
+      {
+        commands = [
+          { command = "${myplugins}/check_redis_replication *"; options = [ "NOPASSWD" ]; }
         ];
         users = [ "naemon" ];
-        runAs = "backup";
+        runAs = "redis";
       }
     ];
     environment.etc."mdadm.conf" = {
       enable = true;
       mode = "0644";
       user = "root";
-      text = "MAILADDR ${myconfig.env.monitoring.email}";
+      text = "MAILADDR ${config.myEnv.monitoring.email}";
     };
 
     # needed since extraResource is not in the closure
@@ -112,17 +125,17 @@ in
         use_syslog=1
         log_initial_states=1
         date_format=iso8601
-        admin_email=${myconfig.env.monitoring.email}
+        admin_email=${config.myEnv.monitoring.email}
 
         obsess_over_services=1
         ocsp_command=notify-master
       '';
       extraResource = ''
         $USER2$=${myplugins}
-        $USER200$=${myconfig.env.monitoring.status_url}
-        $USER201$=${myconfig.env.monitoring.status_token}
+        $USER200$=${config.myEnv.monitoring.status_url}
+        $USER201$=${config.myEnv.monitoring.status_token}
       '';
-      objectDefs = defaultObjects;
+      objectDefs = toObjects commonObjects + toObjects hostObjects;
     };
   };
 }