Move secrets to flakes

[perso/Immae/Config/Nix.git] / modules / private / monitoring / objects_backup-2.nix

diff --git a/modules/private/monitoring/objects_backup-2.nix b/modules/private/monitoring/objects_backup-2.nix
index 927cc25141cf36896d93ae57c219a21807d09ab3..28032a477dea0e578758db67ea1240b8472372c0 100644 (file)
--- a/modules/private/monitoring/objects_backup-2.nix
+++ b/modules/private/monitoring/objects_backup-2.nix
@@ -11,6 +11,7 @@ let
   };
 in
 {
+  activatedPlugins = [ "file_date" "mysql" "openldap" "redis" "emails" ];
   service = [
     (emailCheck "backup-2" hostFQDN // {
       passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-email"; freshness_threshold = "1350"; };
@@ -29,9 +30,9 @@ in
     }
     {
       passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-backup"; };
-      service_description = "Last backup in /backup2/immae_eu is not too old";
+      service_description = "Last backup in /backup2/dilion is not too old";
       use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/immae_eu" "14" "backup"];
+      check_command = ["check_last_file_date" "/backup2/dilion" "14" "backup"];
     }
     {
       passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-backup"; };
@@ -61,7 +62,7 @@ in
       passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases"; };
       service_description = "Mysql replication for eldiron is up to date";
       use = "local-service";
-      check_command = ["check_mysql_replication" "/run/mysqld_eldiron/mysqld.sock" "/var/secrets/mysql_replication/eldiron/client"];
+      check_command = ["check_mysql_replication" "/run/mysqld_eldiron/mysqld.sock" config.secrets.fullPaths."mysql_replication/eldiron/client"];
     }
     {
       passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases,webstatus-backup"; };
@@ -79,6 +80,10 @@ in
         base = config.myServices.databasesReplication.openldap.base;
         eldiron_schemas = pkgs.callPackage ../databases/openldap/eldiron_schemas.nix {};
         ldapConfig = pkgs.writeText "slapd.conf" ''
+          include ${pkgs.openldap}/etc/schema/core.schema
+          include ${pkgs.openldap}/etc/schema/cosine.schema
+          include ${pkgs.openldap}/etc/schema/inetorgperson.schema
+          include ${pkgs.openldap}/etc/schema/nis.schema
           ${eldiron_schemas}
           moduleload  back_hdb
           backend     hdb
@@ -91,7 +96,7 @@ in
         "check_openldap_replication"
         hcfg.url
         hcfg.dn
-        "${config.secrets.location}/openldap_replication/eldiron/replication_password"
+        config.secrets.fullPaths."openldap_replication/eldiron/replication_password"
         hcfg.base
         ldapConfig
       ];