40 files changed, 0 insertions, 4318 deletions
diff --git a/modules/private/monitoring/default.nix b/modules/private/monitoring/default.nix
deleted file mode 100644
index 0783c2f..0000000
--- a/modules/private/monitoring/default.nix
+++ /dev/null
@@ -1,249 +0,0 @@
-{ config, pkgs, lib, name, nodes, ... }:
-let
-  cfg = config.myServices.monitoring;
-  activatedPlugins = [ "memory" "command" "bandwidth" ]
-    ++ (if cfg.master then (masterObjects.activatedPlugins or []) else [])
-    ++ (if cfg.master then (lib.flatten (map (v: v.activatedPlugins or []) otherObjects)) else [])
-    ++ (hostObjects.activatedPlugins or [])
-    ++ (if cfg.master then ["notify-primary"] else ["notify-secondary"]);
-  allPluginsConfig = import ./myplugins.nix {
-    inherit pkgs lib config;
-    sudo = "/run/wrappers/bin/sudo";
-  };
-  mypluginsConfig = lib.getAttrs activatedPlugins allPluginsConfig;
-  myplugins = let
-    mypluginsChunk = builtins.concatStringsSep "\n" (lib.attrsets.mapAttrsToList (k: v: v.chunk or "") mypluginsConfig);
-  in pkgs.runCommand "buildplugins" {
-    buildInputs = [ pkgs.makeWrapper pkgs.perl ];
-  } ''
-    mkdir $out
-    ${mypluginsChunk}
-    '';
-  toObjects = pkgs.callPackage ./to_objects.nix {};
-  commonConfig = {
-    dilion = {
-      processWarn = "250"; processAlert = "400";
-      loadWarn = "1.0"; loadAlert = "1.2";
-      interface = "eth0";
-    };
-    eldiron = {
-      processWarn = "550"; processAlert = "650";
-      loadWarn = "1.0"; loadAlert = "1.2";
-      interface = "eth0";
-    };
-    backup-2 = {
-      processWarn = "60"; processAlert = "70";
-      loadWarn = "1.0"; loadAlert = "2.0";
-      interface = "ens3";
-    };
-    monitoring-1 = {
-      processWarn = "50"; processAlert = "60";
-      loadWarn = "4.0"; loadAlert = "6.0";
-      load15Warn = "1.0"; load15Alert = "2.0";
-      interface = "ens3";
-    };
-    quatresaisons = {
-      processWarn = "250"; processAlert = "400";
-      loadWarn = "1.0"; loadAlert = "1.2";
-      interface = "eth0";
-    };
-  };
-  externalObjects = lib.genAttrs [ "tiboqorl-fr" ]
-    (n: pkgs.callPackage (./. + "/objects_" + n + ".nix") { inherit emailCheck; });
-  masterPassiveObjects = let
-    passiveNodes = lib.attrsets.filterAttrs (n: _: builtins.elem n ["backup-2" "eldiron" "quatresaisons" "dilion"]) nodes;
-    toPassiveServices = map (s: s.passiveInfo.filter s // s.passiveInfo);
-    passiveServices = lib.flatten (lib.attrsets.mapAttrsToList
-      (_: n: toPassiveServices n.config.myServices.monitoring.services)
-      passiveNodes
-      ) ++ lib.flatten (lib.attrsets.mapAttrsToList
-      (_: n: toPassiveServices n.service)
-      externalObjects);
-  in {
-    service = passiveServices;
-    host = lib.lists.foldr
-      (a: b: a//b)
-      {}
-      (lib.attrsets.mapAttrsToList (_: h: h.config.myServices.monitoring.hosts) passiveNodes
-      ++ lib.attrsets.mapAttrsToList (_: n: n.host) externalObjects);
-  };
-  emailCheck = host: hostFQDN: let
-    allCfg = config.myEnv.monitoring.email_check;
-    cfg = allCfg."${host}";
-    reverseTargets = builtins.attrNames (lib.attrsets.filterAttrs (k: v: builtins.elem host v.targets) allCfg);
-    to_email = cfg': host':
-      let sep = if lib.strings.hasInfix "+" cfg'.mail_address then "_" else "+";
-      in "${cfg'.mail_address}${sep}${host'}@${cfg'.mail_domain}";
-    mails_to_send = builtins.concatStringsSep "," (map (n: to_email allCfg."${n}" host) cfg.targets);
-    mails_to_receive = builtins.concatStringsSep "," (map (n: "${to_email cfg n}:${n}") reverseTargets);
-    command = if cfg.local
-    then
-      [ "check_emails_local" "/var/lib/naemon/checks/email" mails_to_send mails_to_receive ]
-    else
-      [ "check_emails" cfg.login cfg.port mails_to_send mails_to_receive ];
-  in
-    {
-      service_description = "${hostFQDN} email service is active";
-      use = "mail-service";
-      host_name = hostFQDN;
-      servicegroups = "webstatus-email";
-      check_command = command;
-    };
-  otherObjects = map
-    (n: (pkgs.callPackage (./. + "/objects_" + n + ".nix") { inherit emailCheck; }))
-    [ "ulminfo-fr" "phare" "eban" ];
-  masterObjects = pkgs.callPackage ./objects_master.nix { inherit config; };
-  commonObjects = pkgs.callPackage ./objects_common.nix ({
-    master = cfg.master;
-    hostFQDN = config.hostEnv.fqdn;
-    hostName = name;
-    inherit mypluginsConfig;
-  } // builtins.getAttr name commonConfig);
-  hostObjects =
-    let
-      specific_file = ./. + "/objects_" + name + ".nix";
-    in
-      lib.attrsets.optionalAttrs
-        (builtins.pathExists specific_file)
-        (pkgs.callPackage specific_file {
-          inherit config nodes emailCheck;
-          hostFQDN = config.hostEnv.fqdn;
-          hostName = name;
-        });
-  objectsFiles = lib.mapAttrs' (name: value: lib.nameValuePair
-    "=/${name}/objects.conf" { alias = pkgs.writeText "objects.conf" (toObjects value); }
-  ) externalObjects;
-in
-{
-  options = {
-    myServices.monitoring = {
-      enable = lib.mkOption {
-        type = lib.types.bool;
-        default = false;
-        description = ''
-          Whether to enable monitoring.
-        '';
-      };
-      master = lib.mkOption {
-        type = lib.types.bool;
-        default = false;
-        description = ''
-          This instance is the master instance
-        '';
-      };
-      hosts = lib.mkOption {
-        readOnly = true;
-        description = "Hosts list for this host";
-        default = (commonObjects.host or {}) // (hostObjects.host or {});
-      };
-      services = lib.mkOption {
-        readOnly = true;
-        description = "Services list for this host";
-        default = commonObjects.service ++ hostObjects.service;
-      };
-    };
-  };
-  config = lib.mkIf cfg.enable {
-    services.nginx = lib.mkIf config.myServices.status.enable {
-      virtualHosts."status.immae.eu".locations = objectsFiles // {
-        "=/common/immae.cfg" = {
-          alias = pkgs.writeText "immae.cfg" ''
-            # put me for instance in /etc/naemon/module-conf.d/immae.cfg
-            # Make sure that you have include_dir=module-conf.d in
-            # naemon.cfg
-            log_initial_states=1
-            date_format=iso8601
-            admin_email=${config.myEnv.monitoring.email}
-            obsess_over_services=1
-            ocsp_command=notify-master
-          '';
-        };
-        "=/common/resource.cfg" = {
-          alias = pkgs.writeText "resource.cfg" ''
-            # Resource.cfg file
-            # Replace this with path to monitoring plugins
-            $USER1$=@@COMMON_PLUGINS@@
-            # Replace this with a path to scripts from
-            # https://git.immae.eu/cgit/perso/Immae/Config/Nix.git/tree/modules/private/monitoring/plugins
-            $USER2$=@@IMMAE_PLUGINS@@
-            $USER200$=https://status.immae.eu/
-            $USER201$=@@TOKEN@@
-          '';
-        };
-      };
-    };
-    security.sudo.extraRules = let
-      pluginsSudo = lib.lists.remove null (lib.attrsets.mapAttrsToList (k: v:
-        if (v ? sudo)
-        then ({ users = [ "naemon" ]; } // (v.sudo myplugins))
-        else null) mypluginsConfig);
-    in [
-      {
-        commands = [
-          { command = "${pkgs.mdadm}/bin/mdadm --monitor --scan -1"; options = [ "NOPASSWD" ]; }
-          { command = "${pkgs.postfix}/bin/mailq"; options = [ "NOPASSWD" ]; }
-        ];
-        users = [ "naemon" ];
-        runAs = "root";
-      }
-    ] ++ pluginsSudo;
-    environment.etc."mdadm.conf" = {
-      enable = true;
-      mode = "0644";
-      user = "root";
-      text = "MAILADDR ${config.myEnv.monitoring.email}";
-    };
-    secrets.keys = {
-      "naemon/id_rsa" = {
-        user = "naemon";
-        group = "naemon";
-        permissions = "0400";
-        text = config.myEnv.monitoring.ssh_secret_key;
-      };
-    } // lib.optionalAttrs cfg.master (
-      lib.mapAttrs' (k: v: lib.nameValuePair "${k}_access_key" {
-        user = "naemon";
-        group = "naemon";
-        permissions = "0400";
-        text = ''
-          export AWS_ACCESS_KEY_ID="${v.accessKeyId}"
-          export AWS_SECRET_ACCESS_KEY="${v.secretAccessKey}"
-          export BASE_URL="${v.remote "immae-eldiron"}"
-        '';
-      }) config.myEnv.backup.remotes
-    );
-    # needed since extraResource is not in the closure
-    systemd.services.naemon.path = [ myplugins ];
-    services.naemon = {
-      enable = true;
-      extraConfig = ''
-        use_syslog=1
-        log_initial_states=1
-        date_format=iso8601
-        admin_email=${config.myEnv.monitoring.email}
-      '' + lib.optionalString (!cfg.master) ''
-        obsess_over_services=1
-        ocsp_command=notify-master
-      '' + lib.optionalString (cfg.master) ''
-        broker_module=${pkgs.naemon-livestatus}/lib/naemon-livestatus/livestatus.so ${config.services.naemon.runDir}/live
-        broker_module=${pkgs.status_engine.module}/lib/status-engine/naemon/statusengine-${pkgs.naemon.status_engine_version}.o use_service_perfdata=1 use_process_data=0 use_system_command_data=0 use_external_command_data=0 use_flapping_data=0 use_program_status_data=0 use_notification_data=0 use_contact_status_data=0 use_contact_notification_data=0 use_event_handler_data=0 use_object_data=0
-      '';
-      extraResource = let
-        resources = [hostObjects.resources or {}] ++ (lib.mapAttrsToList (k: v: v.resources or {}) mypluginsConfig);
-        joined = lib.zipAttrsWith (n: v: if builtins.length (lib.unique v) == 1 then builtins.head v else abort "Non-unique resources names") resources;
-        joinedStr = builtins.concatStringsSep "\n" (lib.mapAttrsToList (k: v: "$" + "${k}$=${v}") joined);
-      in ''
-        $USER2$=${myplugins}
-        ${joinedStr}
-      '';
-      objectDefs = toObjects commonObjects
-        + toObjects hostObjects
-        + lib.optionalString cfg.master (toObjects masterObjects)
-        + lib.optionalString cfg.master (toObjects masterPassiveObjects)
-        + lib.optionalString cfg.master (builtins.concatStringsSep "\n" (map toObjects otherObjects));
-    };
-  };
-}
diff --git a/modules/private/monitoring/myplugins.nix b/modules/private/monitoring/myplugins.nix
deleted file mode 100644
index e59ddc4..0000000
--- a/modules/private/monitoring/myplugins.nix
+++ /dev/null
@@ -1,389 +0,0 @@
-{ sudo, pkgs, lib, config }:
-let
-  cfg = config.myServices.monitoring;
-in
-{
-  notify-secondary = {
-    resources = {
-      USER200 = config.myEnv.monitoring.status_url;
-      USER201 = config.myEnv.monitoring.status_token;
-    };
-    commands = {
-      notify-master = "$USER2$/send_nrdp.sh -u \"$USER200$\" -t \"$USER201$\" -H \"$HOSTADDRESS$\" -s \"$SERVICEDESC$\" -S \"$SERVICESTATEID$\" -o \"$SERVICEOUTPUT$ | $SERVICEPERFDATA$\"";
-    };
-    chunk = ''
-      cp ${./plugins}/send_nrdp.sh $out
-      patchShebangs $out/send_nrdp.sh
-      wrapProgram $out/send_nrdp.sh --prefix PATH : ${lib.makeBinPath [
-        pkgs.curl pkgs.jq
-      ]}
-    '';
-  };
-  notify-primary = {
-    resources = {
-      USER206 = config.myEnv.monitoring.slack_channel;
-      USER207 = config.myEnv.monitoring.slack_url;
-      USER210 = config.myEnv.monitoring.eban.user;
-      USER211 = config.myEnv.monitoring.eban.password;
-    };
-    commands = {
-      # $OVE is to force naemon to run via shell instead of execve which fails here
-      notify-host-by-email = "ADMINEMAIL=\"$ADMINEMAIL$\" SERVICENOTIFICATIONID=\"$SERVICENOTIFICATIONID$\" HOSTSTATE=\"$HOSTSTATE$\" HOSTOUTPUT=\"$HOSTOUTPUT$\" $USER2$/notify_by_email host \"$NOTIFICATIONTYPE$\" \"$HOSTALIAS$\" \"$LONGDATETIME$\" \"$CONTACTEMAIL$\" $OVE";
-      # $OVE is to force naemon to run via shell instead of execve which fails here
-      notify-service-by-email = "ADMINEMAIL=\"$ADMINEMAIL$\" SERVICENOTIFICATIONID=\"$SERVICENOTIFICATIONID$\" SERVICEDESC=\"$SERVICEDESC$\" SERVICESTATE=\"$SERVICESTATE$\" SERVICEOUTPUT=\"$SERVICEOUTPUT$\" $USER2$/notify_by_email service \"$NOTIFICATIONTYPE$\" \"$HOSTALIAS$\" \"$LONGDATETIME$\" \"$CONTACTEMAIL$\" $OVE";
-      notify-by-slack = "HOST=\"$HOSTALIAS$\" SERVICESTATE=\"$SERVICESTATE$\" SERVICEDESC=\"$SERVICEDESC$\" SERVICEOUTPUT=\"$SERVICEOUTPUT$\" $USER2$/notify_by_slack \"$ARG1$\" \"$ARG2$\"";
-      notify-host-eban-url = "STATUS_NAME=\"Server\" USER=\"$USER210$\" PASSWORD=\"$USER211$\" HOSTSTATE=\"$HOSTSTATE$\" $USER2$/notify_eban_url";
-      notify-service-eban-url = "STATUS_NAME=\"$_SERVICEWEBSTATUS_NAME$\" USER=\"$USER210$\" PASSWORD=\"$USER211$\" SERVICESTATE=\"$SERVICESTATE$\" $USER2$/notify_eban_url";
-    };
-    chunk = ''
-      cp ${./plugins}/{notify_by_email,notify_by_slack,notify_eban_url} $out
-      patchShebangs $out/{notify_by_email,notify_by_slack,notify_eban_url}
-      wrapProgram $out/notify_by_email --prefix PATH : ${lib.makeBinPath [
-        pkgs.mailutils
-      ]}
-      wrapProgram $out/notify_by_slack --prefix PATH : ${lib.makeBinPath [
-        pkgs.curl pkgs.jq
-      ]}
-      wrapProgram $out/notify_eban_url --prefix PATH : ${lib.makeBinPath [
-        pkgs.curl
-      ]}
-    '';
-  };
-  bandwidth = {
-    commands = {
-      check_local_bandwidth = "$USER2$/check_bandwidth -i=$ARG1$ -w $ARG2$ -c $ARG3$";
-    };
-    chunk = ''
-      cp ${./plugins}/check_bandwidth $out/
-      patchShebangs $out/check_bandwidth
-      wrapProgram $out/check_bandwidth --prefix PATH : ${lib.makeBinPath [
-        pkgs.iproute pkgs.bc
-      ]}
-    '';
-  };
-  command = {
-    commands = {
-      check_command_match = "$USER2$/check_command -c \"$ARG1$\" -C \"$ARG2$\" $ARG3$";
-      check_command_output = "$USER2$/check_command -c \"$ARG1$\" -s 0 -o \"$ARG2$\" $ARG3$";
-      check_command_status = "$USER2$/check_command -c \"$ARG1$\" -s \"$ARG2$\" $ARG3$";
-    };
-    chunk = ''
-      cp ${./plugins}/check_command $out/
-      patchShebangs $out/check_command
-      wrapProgram $out/check_command --prefix PATH : ${config.security.wrapperDir}
-    '';
-  };
-  dns = {
-    commands = {
-      check_dns = "$USER1$/check_dns -H $ARG1$ -s $HOSTADDRESS$ $ARG2$";
-      check_external_dns = "$USER1$/check_dns -H $ARG2$ -s $ARG1$ $ARG3$";
-    };
-  };
-  emails = {
-    resources = {
-      USER203 = config.secrets.fullPaths."naemon/id_rsa";
-    };
-    commands = {
-      check_emails = "$USER2$/check_emails -H $HOSTADDRESS$ -i $USER203$ -l $ARG1$ -p $ARG2$ -s $ARG3$ -f $ARG4$";
-      check_emails_local = "$USER2$/check_emails -H $HOSTADDRESS$ -n $ARG1$ -r $ADMINEMAIL$ -s $ARG2$ -f $ARG3$";
-    };
-    chunk = let
-      send_mails = pkgs.runCommand "send_mails" {
-        buildInputs = [ pkgs.makeWrapper ];
-      } ''
-        mkdir -p $out/bin
-        cp ${./send_mails} $out/bin/send_mails
-        patchShebangs $out
-        wrapProgram $out/bin/send_mails --prefix PATH : ${lib.makeBinPath [
-          pkgs.mailutils
-        ]}
-        '';
-    in ''
-      cp ${./plugins}/check_emails $out/
-      patchShebangs $out/check_emails
-      wrapProgram $out/check_emails --prefix PATH : ${lib.makeBinPath [
-        pkgs.openssh send_mails
-      ]} --prefix PERL5LIB : ${pkgs.perlPackages.makePerlPath [
-        pkgs.perlPackages.TimeDate
-      ]}
-    '';
-  };
-  eriomem = {
-    resources = {
-      USER208 = builtins.concatStringsSep "," (map (builtins.concatStringsSep ":") config.myEnv.monitoring.eriomem_keys);
-    };
-    commands = {
-      check_backup_eriomem = "$USER2$/check_eriomem $USER208$";
-      check_backup_eriomem_age = "$USER2$/check_backup_eriomem_age $ARG1$";
-    };
-    chunk = ''
-      cp ${./plugins}/check_eriomem $out/
-      patchShebangs $out/check_eriomem
-      wrapProgram $out/check_eriomem --prefix PATH : ${lib.makeBinPath [
-        pkgs.s3cmd pkgs.python3
-      ]}
-      cp ${./plugins}/check_backup_age $out/check_backup_eriomem_age
-      patchShebangs $out/check_backup_eriomem_age
-      wrapProgram $out/check_backup_eriomem_age --prefix PATH : ${lib.makeBinPath [
-        pkgs.duplicity
-      ]} --set SECRETS_PATH ${lib.optionalString cfg.master config.secrets.fullPaths."eriomem_access_key"}
-    '';
-  };
-  file_date = {
-    commands = {
-      check_last_file_date = "${sudo} -u \"$ARG3$\" $USER2$/check_last_file_date \"$ARG1$\" \"$ARG2$\"";
-    };
-    chunk = ''
-      cp ${./plugins}/check_last_file_date $out/
-      patchShebangs $out/check_last_file_date
-    '';
-    sudo = myplugins: {
-      commands = [
-        { command = "${myplugins}/check_last_file_date /backup2/*"; options = [ "NOPASSWD" ]; }
-      ];
-      runAs = "ALL";
-    };
-  };
-  ftp = {
-    commands = {
-      check_ftp_database = "$USER2$/check_ftp_database";
-    };
-    chunk = ''
-      cp ${./plugins}/check_ftp_database $out/
-      patchShebangs $out/check_ftp_database
-      wrapProgram $out/check_ftp_database --prefix PATH : ${lib.makeBinPath [
-        pkgs.lftp
-      ]}
-    '';
-  };
-  git = {
-    resources = {
-      USER203 = config.secrets.fullPaths."naemon/id_rsa";
-    };
-    commands = {
-      check_git = "$USER2$/check_git $USER203$";
-    };
-    chunk = ''
-      cp ${./plugins}/check_git $out/
-      patchShebangs $out/check_git
-      wrapProgram $out/check_git --prefix PATH : ${lib.makeBinPath [
-        pkgs.git pkgs.openssh
-      ]}
-    '';
-  };
-  http = {
-    resources = {
-      USER202 = config.myEnv.monitoring.http_user_password;
-    };
-    commands = {
-      check_http = "$USER1$/check_http --sni -f stickyport -H \"$ARG1$\" -u \"$ARG2$\" -r \"$ARG3$\"";
-      check_https = "$USER1$/check_http --sni --ssl -f stickyport -H \"$ARG1$\" -u \"$ARG2$\" -r \"$ARG3$\"";
-      check_https_auth = "$USER1$/check_http --sni --ssl -a \"$USER202$\" -f stickyport -H \"$ARG1$\" -u \"$ARG2$\" -r \"$ARG3$\"";
-      check_https_certificate = "$USER1$/check_http --sni --ssl -H \"$ARG1$\" -C 21,15";
-      check_https_code = "$USER1$/check_http --sni --ssl -f stickyport -H \"$ARG1$\" -u \"$ARG2$\" -e \"$ARG3$\" -r \"$ARG4$\"";
-    };
-  };
-  imap = {
-    resources = {
-      USER204 = config.myEnv.monitoring.imap_login;
-      USER205 = config.myEnv.monitoring.imap_password;
-    };
-    commands = {
-      check_imap_connection = "$USER2$/check_imap_connection -u \"$USER204$\" -p \"$USER205$\" -H \"imap.immae.eu:143\"";
-    };
-    chunk = ''
-      cp ${./plugins}/check_imap_connection $out/
-      patchShebangs $out/check_imap_connection
-      wrapProgram $out/check_imap_connection --prefix PATH : ${lib.makeBinPath [
-        pkgs.openssl
-      ]}
-    '';
-  };
-  megaraid = let
-    megacli = pkgs.megacli.overrideAttrs(old: { meta = old.meta // { license = null; }; });
-  in {
-    commands = {
-      check_megaraid = "$USER2$/check_megaraid_sas --sudo";
-    };
-    chunk = let
-      megaCliPlugin = pkgs.runCommand "megaCliPlugin" {
-        plugin = pkgs.fetchurl {
-          name = "check_megaraid_sas";
-          url = "https://exchange.nagios.org/components/com_mtree/attachment.php?link_id=6381&cf_id=24";
-          sha256 = "0yf60p4c0hb4q3fng9fc14qc89bqm0f1sijayzygadaqcl44jx4p";
-        };
-      } ''
-        mkdir $out
-        cp $plugin $out/check_megaraid_sas
-        chmod +x $out/check_megaraid_sas
-        patchShebangs $out
-        substituteInPlace $out/check_megaraid_sas --replace /usr/sbin/MegaCli ${megacli}/bin/MegaCli64
-        substituteInPlace $out/check_megaraid_sas --replace 'sudo $megacli' '${sudo} $megacli'
-        sed -i -e "s/use utils qw(%ERRORS);/my %ERRORS = ('OK' => 0, 'WARNING' => 1, 'CRITICAL' => 2, 'UNKNOWN' => 3);/" $out/check_megaraid_sas
-      '';
-    in ''
-      cp ${megaCliPlugin}/check_megaraid_sas $out/
-      patchShebangs $out/check_megaraid_sas
-    '';
-    sudo = _: {
-      commands = [
-        { command = "${megacli}/bin/MegaCli64"; options = [ "NOPASSWD" ]; }
-      ];
-      runAs = "root";
-    };
-  };
-  memory = {
-    commands = {
-      check_memory = "$USER2$/check_mem.sh -w $ARG1$ -c $ARG2$";
-    };
-    chunk = ''
-      cp ${./plugins}/check_mem.sh $out/
-      patchShebangs $out/check_mem.sh
-      wrapProgram $out/check_mem.sh --prefix PATH : ${lib.makeBinPath [
-        pkgs.gnugrep pkgs.gawk pkgs.procps-ng
-      ]}
-    '';
-  };
-  mysql = {
-    commands = {
-      check_mysql_replication = "${sudo} -u mysql $USER2$/check_mysql_replication \"$ARG1$\" \"$ARG2$\"";
-    };
-    chunk = ''
-      cp ${./plugins}/check_mysql_replication $out/
-      patchShebangs $out/check_mysql_replication
-      wrapProgram $out/check_mysql_replication --prefix PATH : ${lib.makeBinPath [
-        pkgs.gnugrep pkgs.gnused pkgs.coreutils pkgs.mariadb
-      ]}
-    '';
-    sudo = myplugins: {
-      commands = [
-        { command = "${myplugins}/check_mysql_replication *"; options = [ "NOPASSWD" ]; }
-      ];
-      runAs = "mysql";
-    };
-  };
-  openldap = {
-    commands = {
-      check_openldap_replication = "${sudo} -u openldap $USER2$/check_openldap_replication \"$ARG1$\" \"$ARG2$\" \"$ARG3$\" \"$ARG4$\" \"$ARG5$\"";
-    };
-    chunk = ''
-      cp ${./plugins}/check_openldap_replication $out/
-      patchShebangs $out/check_openldap_replication
-      wrapProgram $out/check_openldap_replication --prefix PATH : ${lib.makeBinPath [
-        pkgs.gnugrep pkgs.gnused pkgs.coreutils pkgs.openldap
-      ]}
-    '';
-    sudo = myplugins: {
-      commands = [
-        { command = "${myplugins}/check_openldap_replication *"; options = [ "NOPASSWD" ]; }
-      ];
-      runAs = "openldap";
-    };
-  };
-  ovh = {
-    resources = {
-      USER209 = builtins.concatStringsSep "," [
-        config.myEnv.monitoring.ovh_sms.endpoint
-        config.myEnv.monitoring.ovh_sms.application_key
-        config.myEnv.monitoring.ovh_sms.application_secret
-        config.myEnv.monitoring.ovh_sms.consumer_key
-        config.myEnv.monitoring.ovh_sms.account
-      ];
-    };
-    commands = {
-      check_backup_ovh_age = "$USER2$/check_backup_ovh_age $ARG1$";
-      check_ovh_sms = "$USER2$/check_ovh_sms \"$USER209$\"";
-    };
-    chunk = ''
-      cp ${./plugins}/check_backup_age $out/check_backup_ovh_age
-      patchShebangs $out/check_backup_ovh_age
-      wrapProgram $out/check_backup_ovh_age --prefix PATH : ${lib.makeBinPath [
-        pkgs.duplicity
-      ]} --set SECRETS_PATH ${lib.optionalString cfg.master config.secrets.fullPaths."ovh_access_key"}
-      cp ${./plugins}/check_ovh_sms $out/
-      patchShebangs $out/check_ovh_sms
-      wrapProgram $out/check_ovh_sms --prefix PATH : ${lib.makeBinPath [
-        (pkgs.python3.withPackages (ps: [ps.ovh]))
-      ]}
-    '';
-  };
-  postgresql = {
-    commands = {
-      check_postgresql_replication = "${sudo} -u postgres $USER2$/check_postgres_replication \"$ARG1$\" \"$ARG2$\" \"$ARG3$\"";
-      check_postgresql_database_count = "$USER2$/check_postgres_database_count \"$ARG1$\" \"$ARG2$\" \"$ARG3$\"";
-    };
-    chunk = let
-      postgresqlBinary = if config.myServices.databasesReplication.postgresql.enable
-        then config.myServices.databasesReplication.postgresql.mainPackage
-        else if config.myServices.databases.enable
-        then config.myServices.databases.postgresql.package
-        else pkgs.postgresql;
-    in ''
-      cp ${./plugins}/check_postgres_replication $out/
-      patchShebangs $out/check_postgres_replication
-      wrapProgram $out/check_postgres_replication --prefix PATH : ${lib.makeBinPath [
-        postgresqlBinary
-      ]}
-      cp ${./plugins}/check_postgres_database_count $out/
-      patchShebangs $out/check_postgres_database_count
-      wrapProgram $out/check_postgres_database_count --prefix PATH : ${lib.makeBinPath [
-        postgresqlBinary
-      ]}
-    '';
-    sudo = myplugins: {
-      commands = [
-        { command = "${myplugins}/check_postgres_replication *"; options = [ "NOPASSWD" ]; }
-      ];
-      runAs = "postgres";
-    };
-  };
-  redis = {
-    commands = {
-      check_redis_replication = "${sudo} -u redis $USER2$/check_redis_replication \"$ARG1$\"";
-    };
-    chunk = ''
-      cp ${./plugins}/check_redis_replication $out/
-      patchShebangs $out/check_redis_replication
-      wrapProgram $out/check_redis_replication --prefix PATH : ${lib.makeBinPath [
-        pkgs.gnugrep pkgs.coreutils pkgs.redis
-      ]}
-    '';
-    sudo = myplugins: {
-      commands = [
-        { command = "${myplugins}/check_redis_replication *"; options = [ "NOPASSWD" ]; }
-      ];
-      runAs = "redis";
-    };
-  };
-  tcp = {
-    commands = {
-      check_tcp = "$USER1$/check_tcp -H $HOSTADDRESS$ -p $ARG1$ -e \"$ARG2$\" -Mcrit";
-      check_tcp_ssl = "$USER1$/check_tcp -H $HOSTADDRESS$ -p $ARG1$ -S -D 21,15";
-    };
-  };
-  zfs = {
-    commands = {
-      check_zfs = "$USER2$/check_zpool.sh -p ALL -w 80 -c 90";
-      check_zfs_snapshot = "$USER2$/check_zfs_snapshot -d $ARG1$ -c 18000 -w 14400";
-    };
-    chunk = let
-      zfsPlugin = pkgs.fetchurl {
-        url = "https://www.claudiokuenzler.com/monitoring-plugins/check_zpools.sh";
-        sha256 = "0p9ms9340in80jkds4kfspw62xnzsv5s7ni9m28kxyd0bnzkbzhf";
-      };
-    in ''
-      cp ${zfsPlugin} $out/check_zpool.sh
-      chmod +x $out/check_zpool.sh
-      patchShebangs $out/check_zpool.sh
-      wrapProgram $out/check_zpool.sh --prefix PATH : ${lib.makeBinPath [
-        pkgs.which pkgs.zfs pkgs.gawk
-      ]}
-      cp ${./plugins}/check_zfs_snapshot $out
-      patchShebangs $out/check_zfs_snapshot
-      wrapProgram $out/check_zfs_snapshot --prefix PATH : ${lib.makeBinPath [
-        pkgs.zfs pkgs.coreutils pkgs.gawk pkgs.gnugrep
-      ]}
-    '';
-  };
-}
diff --git a/modules/private/monitoring/nagios-cli.cfg b/modules/private/monitoring/nagios-cli.cfg
deleted file mode 100644
index 7bd30cb..0000000
--- a/modules/private/monitoring/nagios-cli.cfg
+++ /dev/null
@@ -1,68 +0,0 @@
-# -*- coding: utf-8; -*-
-[cli]
-history                 = /var/lib/naemon/nagios_cli_history
-[ui]
-color                   = 1
-prompt                  = naemon %s>
-prompt_separator        = " → "
-[nagios]
-log                     = /var/log/naemon
-command_file            = /run/naemon/naemon.cmd
-log_file                = %(log)s/naemon.log
-object_cache_file       = /var/lib/naemon/objects.cache
-status_file             = /var/lib/naemon/status.dat
-[object]
-host.status             =
-    host_name
-    current_state
-    plugin_output
-    is_flapping
-    last_check
-    last_time_down
-    last_state_change
-    check_period
-    notification_period
-    current_attempt
-    max_attempts
-service.status          =
-    host_name
-    service_description
-    current_state
-    is_flapping
-    plugin_output
-    last_time_down
-    last_state_change
-    last_check
-    next_check
-    check_interval
-    check_latency
-    check_period
-    notification_period
-    current_attempt
-    max_attempts
-[string]
-level.ok                = ↑ OK
-level.warning           = ! WARNING
-level.critical          = ↓ CRITICAL
-level.unknown           = ↕ UNKNOWN
-[color]
-error                   = bold_red
-prompt                  = normal
-prompt.object           = bold
-host.host_name          = bold
-host.plugin_output      = bold
-service.plugin_output   = bold
-level.ok                = bold_green
-level.warning           = bold_yellow
-level.critical          = bold_red
-level.unknown           = bold_magenta
diff --git a/modules/private/monitoring/objects_backup-2.nix b/modules/private/monitoring/objects_backup-2.nix
deleted file mode 100644
index 28032a4..0000000
--- a/modules/private/monitoring/objects_backup-2.nix
+++ /dev/null
@@ -1,111 +0,0 @@
-{ config, pkgs, lib, hostFQDN, emailCheck, ... }:
-let
-  defaultPassiveInfo = {
-    filter = lib.attrsets.filterAttrs
-      (k: v: builtins.elem k ["service_description"] || builtins.substring 0 1 k == "_");
-    use = "external-passive-service";
-    freshness_threshold = "450";
-    retry_interval = "1";
-    servicegroups = "webstatus-resources";
-    host_name = hostFQDN;
-  };
-in
-{
-  activatedPlugins = [ "file_date" "mysql" "openldap" "redis" "emails" ];
-  service = [
-    (emailCheck "backup-2" hostFQDN // {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-email"; freshness_threshold = "1350"; };
-    })
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Size on /backup2 partition";
-      use = "local-service";
-      check_command = ["check_local_disk" "10%" "5%" "/backup2"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-backup"; };
-      service_description = "Last backup in /backup2/phare is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/phare" "14" "backup"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-backup"; };
-      service_description = "Last backup in /backup2/dilion is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/dilion" "14" "backup"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-backup"; };
-      service_description = "Last backup in /backup2/ulminfo is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/ulminfo" "14" "backup"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases,webstatus-backup"; };
-      service_description = "Last postgresql dump in /backup2/eldiron/postgresql_backup is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/eldiron/postgresql_backup" "7" "postgres"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases"; };
-      service_description = "Redis replication for eldiron is up to date";
-      use = "local-service";
-      check_command = ["check_redis_replication" "/run/redis_eldiron/redis.sock"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases,webstatus-backup"; };
-      service_description = "Last redis dump in /backup2/eldiron/redis_backup is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/eldiron/redis_backup" "7" "redis"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases"; };
-      service_description = "Mysql replication for eldiron is up to date";
-      use = "local-service";
-      check_command = ["check_mysql_replication" "/run/mysqld_eldiron/mysqld.sock" config.secrets.fullPaths."mysql_replication/eldiron/client"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases,webstatus-backup"; };
-      service_description = "Last mysql dump in /backup2/eldiron/mysql_backup is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/eldiron/mysql_backup" "7" "mysql"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases"; };
-      service_description = "Openldap replication for eldiron is up to date";
-      use = "local-service";
-      check_command = let
-        name = "eldiron";
-        hcfg = config.myServices.databasesReplication.openldap.hosts.eldiron;
-        base = config.myServices.databasesReplication.openldap.base;
-        eldiron_schemas = pkgs.callPackage ../databases/openldap/eldiron_schemas.nix {};
-        ldapConfig = pkgs.writeText "slapd.conf" ''
-          include ${pkgs.openldap}/etc/schema/core.schema
-          include ${pkgs.openldap}/etc/schema/cosine.schema
-          include ${pkgs.openldap}/etc/schema/inetorgperson.schema
-          include ${pkgs.openldap}/etc/schema/nis.schema
-          ${eldiron_schemas}
-          moduleload  back_hdb
-          backend     hdb
-          database    hdb
-          suffix    "${hcfg.base}"
-          directory ${base}/${name}/openldap
-          '';
-      in [
-        "check_openldap_replication"
-        hcfg.url
-        hcfg.dn
-        config.secrets.fullPaths."openldap_replication/eldiron/replication_password"
-        hcfg.base
-        ldapConfig
-      ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases,webstatus-backup"; };
-      service_description = "Last openldap dump in /backup2/eldiron/openldap_backup is not too old";
-      use = "local-service";
-      check_command = ["check_last_file_date" "/backup2/eldiron/openldap_backup" "7" "openldap"];
-    }
-  ];
-}
diff --git a/modules/private/monitoring/objects_common.nix b/modules/private/monitoring/objects_common.nix
deleted file mode 100644
index 7c9f642..0000000
--- a/modules/private/monitoring/objects_common.nix
+++ /dev/null
@@ -1,253 +0,0 @@
-{ hostFQDN
-, hostName
-, interface ? "eth0"
-, processWarn ? "250"
-, processAlert ? "400"
-, loadWarn ? "0.9"
-, load5Warn ? loadWarn
-, load15Warn ? load5Warn
-, loadAlert ? "1.0"
-, load5Alert ? loadAlert
-, load15Alert ? load5Alert
-, mdadm
-, master
-, lib
-, mypluginsConfig
-, ...
-}:
-let
-  defaultPassiveInfo = {
-    filter = lib.attrsets.filterAttrs
-      (k: v: builtins.elem k ["service_description"] || builtins.substring 0 1 k == "_");
-    use = "external-passive-service";
-    freshness_threshold = "450";
-    retry_interval = "1";
-    servicegroups = "webstatus-resources";
-    host_name = hostFQDN;
-  };
-in
-{
-  host = {
-    "${hostFQDN}" = {
-      alias = hostFQDN;
-      address = hostFQDN;
-      use = "linux-server";
-      hostgroups = "webstatus-hosts";
-      _webstatus_name = hostName;
-      _webstatus_vhost = "status.immae.eu";
-    };
-  };
-  service = [
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Size on root partition";
-      use = "local-service";
-      check_command = ["check_local_disk" "20%" "10%" "/"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Total number of process";
-      use = "local-service";
-      check_command = [
-        "check_local_procs"
-        processWarn
-        processAlert
-        "RSZDT"
-      ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Network bandwidth";
-      use = "local-service";
-      check_interval = "2";
-      max_check_attempts = "20";
-      retry_interval = "2";
-      check_command = [
-        "check_local_bandwidth"
-        interface
-        "20480" # kb/s
-        "51200" # kb/s
-      ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Average load";
-      use = "local-service";
-      check_command = [
-        "check_local_load"
-        "${loadWarn},${load5Warn},${load15Warn}"
-        "${loadAlert},${load5Alert},${load15Alert}"
-      ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Swap usage";
-      use = "local-service";
-      check_command = ["check_local_swap" "20" "10"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Memory usage";
-      use = "local-service";
-      check_command = ["check_memory" "80" "90"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "NTP is activated and working";
-      use = "local-service";
-      check_command = ["check_ntp"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "No mdadm array is degraded";
-      use = "local-service";
-      check_command = [
-        "check_command_output"
-        "${mdadm}/bin/mdadm --monitor --scan -1"
-        "^$"
-        "-s 0 -r root"
-      ];
-    }
-  ];
-  command = lib.foldr (v: o: o // (v.commands or {})) {} (builtins.attrValues mypluginsConfig) // {
-    check_local_disk = "$USER1$/check_disk -w $ARG1$ -c $ARG2$ -p $ARG3$";
-    check_local_procs = "$USER1$/check_procs -w $ARG1$ -c $ARG2$ -s $ARG3$";
-    check_local_load = "$USER1$/check_load -r -w $ARG1$ -c $ARG2$";
-    check_local_swap = "$USER1$/check_swap -n ok -w $ARG1$ -c $ARG2$";
-    check_ntp = "$USER1$/check_ntp_time -t 30 -q -H 0.arch.pool.ntp.org";
-    check_mailq = "$USER1$/check_mailq -s -w 1 -c 2";
-    check_smtp = "$USER1$/check_smtp -H $HOSTADDRESS$ -p 25 -S -D 21,15";
-    check_host_alive = "$USER1$/check_ping -H $HOSTADDRESS$ -w 3000.0,80% -c 5000.0,100% -p 5";
-    check_ok = "$USER1$/check_dummy 0 \"Dummy OK\"";
-    check_critical = "$USER1$/check_dummy 2 \"Dummy CRITICAL\"";
-  };
-  timeperiod = {
-    "24x7" = {
-      alias = "24 Hours A Day, 7 Days A Week";
-      monday = "00:00-24:00";
-      tuesday = "00:00-24:00";
-      wednesday = "00:00-24:00";
-      thursday = "00:00-24:00";
-      friday = "00:00-24:00";
-      saturday = "00:00-24:00";
-      sunday = "00:00-24:00";
-    };
-  };
-  servicegroup = {
-    webstatus-webapps = { alias = "Web applications"; };
-    webstatus-websites = { alias = "Personal websites"; };
-    webstatus-ssl = { alias = "SSL certificates"; };
-    webstatus-dns = { alias = "DNS resolution"; };
-    webstatus-remote-services = { alias = "Other remote services"; };
-    webstatus-local-services = { alias = "Other local services"; };
-    webstatus-email = { alias = "E-mail services"; };
-    webstatus-resources = { alias = "Local resources"; };
-    webstatus-databases = { alias = "Databases resources"; };
-    webstatus-backup = { alias = "Backup resources"; };
-  };
-  hostgroup = {
-    webstatus-hosts   = { alias = "Hosts"; };
-  };
-  contactgroup = {
-    admins = { alias = "Naemon Administrators"; };
-  };
-  templates = {
-    service = {
-      generic-service = {
-        active_checks_enabled = "1";
-        check_freshness = "0";
-        check_interval = "10";
-        check_period = "24x7";
-        contact_groups = "admins";
-        event_handler_enabled = "1";
-        flap_detection_enabled = "1";
-        is_volatile = "0";
-        max_check_attempts = "3";
-        notification_interval = "60";
-        notification_options = "w,u,c,r,f,s";
-        notification_period = "24x7";
-        notifications_enabled = if master then "1" else "0";
-        obsess_over_service = "1";
-        passive_checks_enabled = "1";
-        process_perf_data = "1";
-        retain_nonstatus_information = "1";
-        retain_status_information = "1";
-        retry_interval = "2";
-        _webstatus_namespace = "immae";
-      };
-      local-service = {
-        use = "generic-service";
-        host_name = hostFQDN;
-        check_interval = "5";
-        max_check_attempts = "4";
-        retry_interval = "1";
-        servicegroups = "webstatus-resources";
-      };
-      external-service = {
-        use = "generic-service";
-        check_interval = "5";
-        max_check_attempts = "4";
-        retry_interval = "1";
-      };
-      web-service = {
-        use = "generic-service";
-        check_interval = "20";
-        max_check_attempts = "2";
-        retry_interval = "1";
-      };
-      external-web-service = {
-        use = "generic-service";
-        check_interval = "20";
-        max_check_attempts = "2";
-        retry_interval = "1";
-      };
-      mail-service = {
-        use = "generic-service";
-        check_interval = "15";
-        max_check_attempts = "1";
-        retry_interval = "1";
-      };
-      dns-service = {
-        use = "generic-service";
-        check_interval = "120";
-        notification_interval = "120";
-        max_check_attempts = "5";
-        retry_interval = "5";
-      };
-    };
-    # No contact, we go through master
-    contact = {
-      generic-contact = {
-        host_notification_commands = "notify-host-by-email";
-        host_notification_options = "d,u,r,f,s";
-        host_notification_period = "24x7";
-        service_notification_commands = "notify-service-by-email";
-        service_notification_options = "w,u,c,r,f,s";
-        service_notification_period = "24x7";
-      };
-    };
-    host = {
-      generic-host = {
-        event_handler_enabled = "1";
-        flap_detection_enabled = "1";
-        notification_period = "24x7";
-        notifications_enabled = "1";
-        process_perf_data = "1";
-        retain_nonstatus_information = "1";
-        retain_status_information = "1";
-      };
-      linux-server = {
-        check_command = "check_host_alive";
-        check_interval = "5";
-        check_period = "24x7";
-        contact_groups = "admins";
-        max_check_attempts = "10";
-        notification_interval = "120";
-        notification_options = "d,u,r,f";
-        retry_interval = "1";
-        _webstatus_namespace = "immae";
-      };
-    };
-  };
-}
diff --git a/modules/private/monitoring/objects_dilion.nix b/modules/private/monitoring/objects_dilion.nix
deleted file mode 100644
index 16b3c64..0000000
--- a/modules/private/monitoring/objects_dilion.nix
+++ /dev/null
@@ -1,32 +0,0 @@
-{ lib, hostFQDN, emailCheck, ... }:
-let
-  defaultPassiveInfo = {
-    filter = lib.attrsets.filterAttrs
-      (k: v: builtins.elem k ["service_description"] || builtins.substring 0 1 k == "_");
-    use = "external-passive-service";
-    freshness_threshold = "450";
-    retry_interval = "1";
-    servicegroups = "webstatus-resources";
-    host_name = hostFQDN;
-  };
-  zfs_snapshot = name: {
-    passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-resources"; };
-    service_description = "ZFS snapshot ${name} happened not too long ago";
-    use = "local-service";
-    check_command = ["check_zfs_snapshot" name];
-  };
-in
-{
-  activatedPlugins = [ "zfs" ];
-  service = [
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-resources"; };
-      service_description = "No ZFS pool is degraded";
-      use = "local-service";
-      check_command = ["check_zfs"];
-    }
-    (zfs_snapshot "zpool/backup/eldiron/zpool/root")
-    (zfs_snapshot "zpool/backup/eldiron/zpool/root/etc")
-    (zfs_snapshot "zpool/backup/eldiron/zpool/root/var")
-  ];
-}
diff --git a/modules/private/monitoring/objects_eban.nix b/modules/private/monitoring/objects_eban.nix
deleted file mode 100644
index df54f6a..0000000
--- a/modules/private/monitoring/objects_eban.nix
+++ /dev/null
@@ -1,70 +0,0 @@
-{ ... }:
-let
-  serviceTemplate = rest: {
-    host_name = "eban.bzh";
-    use = "external-web-service";
-    contacts = "eban";
-    contact_groups = "null";
-    check_interval = "15";
-    servicegroups = "webstatus-resources";
-    _webstatus_namespace = "eban";
-  } // rest;
-in
-{
-  activatedPlugins = [ "http" ];
-  contact = {
-    eban = {
-      use = "generic-contact";
-      host_notification_commands = "notify-host-eban-url";
-      service_notification_commands = "notify-service-eban-url";
-    };
-  };
-  host = {
-    "eban.bzh" = {
-      alias = "eban.bzh";
-      address = "eban.bzh";
-      use = "linux-server";
-      hostgroups = "webstatus-hosts";
-      contacts = "eban";
-      contact_groups = "null";
-      _webstatus_name = "Eban";
-      _webstatus_vhost = "status.eban.bzh";
-      _webstatus_namespace = "eban";
-    };
-  };
-  service = [
-    (serviceTemplate {
-      service_description = "Eban website is up and running";
-      check_command = ["check_https" "eban.bzh" "/" "<title>"];
-      _webstatus_name = "Main Website";
-      _webstatus_url = "https://eban.bzh/";
-    })
-    (serviceTemplate {
-      service_description = "Eban blog is up and running";
-      check_command = ["check_https" "blog.eban.bzh" "/" "<title>"];
-      _webstatus_name = "Blog";
-      _webstatus_url = "https://blog.eban.bzh/";
-    })
-    (serviceTemplate {
-      service_description = "Eban gitea is up and running";
-      check_command = ["check_https" "git.eban.bzh" "/" "<title>"];
-      _webstatus_name = "Git";
-      _webstatus_url = "https://git.eban.bzh/";
-    })
-    (serviceTemplate {
-      service_description = "I Learned website is up and running";
-      check_command = [ "check_https" "ilearned.eu.org" "/" "<title" ];
-      _webstatus_name = "I Learned website";
-      _webstatus_url = "https://ilearned.eu.org/";
-    })
-    (serviceTemplate {
-      service_description = "I Learned gitea is up and running";
-      check_command = [ "check_https" "git.ilearned.eu.org" "/" "<title" ];
-      _webstatus_name = "I Learned Git";
-      _webstatus_url = "https://git.ilearned.eu.org/";
-    })
-  ];
-}
diff --git a/modules/private/monitoring/objects_eldiron.nix b/modules/private/monitoring/objects_eldiron.nix
deleted file mode 100644
index 75e7b0e..0000000
--- a/modules/private/monitoring/objects_eldiron.nix
+++ /dev/null
@@ -1,38 +0,0 @@
-{ lib, hostFQDN, emailCheck, ... }:
-let
-  defaultPassiveInfo = {
-    filter = lib.attrsets.filterAttrs
-      (k: v: builtins.elem k ["service_description"] || builtins.substring 0 1 k == "_");
-    use = "external-passive-service";
-    freshness_threshold = "450";
-    retry_interval = "1";
-    servicegroups = "webstatus-resources";
-    host_name = hostFQDN;
-  };
-in
-{
-  activatedPlugins = [ "emails" "postgresql" "zfs" ];
-  service = [
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-databases"; };
-      service_description = "Postgresql replication for backup-2 is up to date";
-      use = "local-service";
-      check_command = ["check_postgresql_replication" "backup-2" "/run/postgresql" "5432"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-resources"; };
-      service_description = "No ZFS pool is degraded";
-      use = "local-service";
-      check_command = ["check_zfs"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-email"; };
-      service_description = "mailq is empty";
-      use = "local-service";
-      check_command = ["check_mailq"];
-    }
-    (emailCheck "eldiron" hostFQDN // {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-email"; freshness_threshold = "1350"; };
-    })
-  ];
-}
diff --git a/modules/private/monitoring/objects_master.nix b/modules/private/monitoring/objects_master.nix
deleted file mode 100644
index 30bfe73..0000000
--- a/modules/private/monitoring/objects_master.nix
+++ /dev/null
@@ -1,39 +0,0 @@
-{ config, ... }:
-{
-  contact = {
-    immae = config.myEnv.monitoring.contacts.immae // {
-      use = "generic-contact";
-      contactgroups = "admins";
-      host_notification_commands = "notify-host-by-email,notify-by-slack!$USER206$!$USER207$";
-      service_notification_commands = "notify-service-by-email,notify-by-slack!$USER206$!$USER207$";
-    };
-  };
-  command = {
-    check_passive = "$USER1$/check_dummy 3 \"Service result are stale\"";
-  };
-  templates = {
-    service = {
-      external-passive-service = {
-        active_checks_enabled = "0";
-        check_freshness = "1";
-        check_period = "24x7";
-        contact_groups = "admins";
-        event_handler_enabled = "1";
-        flap_detection_enabled = "1";
-        is_volatile = "0";
-        max_check_attempts = "3";
-        notification_interval = "60";
-        notification_options = "w,u,c,r,f,s";
-        notification_period = "24x7";
-        notifications_enabled = "1";
-        passive_checks_enabled = "1";
-        process_perf_data = "1";
-        retain_nonstatus_information = "1";
-        retain_status_information = "1";
-        retry_interval = "2";
-        check_command = "check_passive";
-        _webstatus_namespace = "immae";
-      };
-    };
-  };
-}
diff --git a/modules/private/monitoring/objects_monitoring-1.nix b/modules/private/monitoring/objects_monitoring-1.nix
deleted file mode 100644
index 563be16..0000000
--- a/modules/private/monitoring/objects_monitoring-1.nix
+++ /dev/null
@@ -1,714 +0,0 @@
-{ config, pkgs, nodes, hostFQDN, emailCheck, lib, ... }:
-{
-  activatedPlugins = [ "dns" "ftp" "git" "http" "imap" "ovh" "tcp" ];
-  host = {
-    # Dummy host for testing
-    # "dummy-host" = {
-    #   alias = "dummy.host";
-    #   address = "dummy.host";
-    #   use = "linux-server";
-    #   check_command = "check_ok";
-    # };
-  };
-  service = [
-    # Dummy service for testing
-    # {
-    #   service_description = "Dummy failing test";
-    #   host_name = "dummy-host";
-    #   use = "local-service";
-    #   check_interval = "0.3";
-    #   max_check_attempts = "1";
-    #   flap_detection_enabled = "0";
-    #   notification_interval = "0.1";
-    #   check_command = "check_critical";
-    # }
-    (emailCheck "monitoring-1" hostFQDN)
-    {
-      service_description = "ftp has access to database for authentication";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = "check_ftp_database";
-      servicegroups = "webstatus-remote-services";
-      _webstatus_name = "FTP";
-      _webstatus_url = "ftp.immae.eu";
-    }
-    {
-      service_description = "gitolite is working";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = "check_git";
-      servicegroups = "webstatus-remote-services";
-      _webstatus_name = "Git";
-      _webstatus_url = "git.immae.eu";
-    }
-    {
-      service_description = "postfix SSL is up to date";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = "check_smtp";
-      servicegroups = "webstatus-ssl";
-      _webstatus_name = "SMTP";
-      _webstatus_url = "smtp.immae.eu";
-    }
-    {
-      service_description = "imap SSL is up to date";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = ["check_tcp_ssl" "993"];
-      servicegroups = "webstatus-ssl";
-      _webstatus_name = "IMAP";
-      _webstatus_url = "imap.immae.eu";
-    }
-    {
-      service_description = "imap connection works";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = "check_imap_connection";
-      servicegroups = "webstatus-remote-services,webstatus-email";
-      _webstatus_name = "IMAP";
-      _webstatus_url = "imap.immae.eu";
-    }
-    # Third party services
-    {
-      service_description = "OVH account has enough sms";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = "check_ovh_sms";
-      check_interval = "120";
-      notification_interval = "1440";
-    }
-    # Backup services
-    # {
-    #   service_description = "eriomem backup is up and not full";
-    #   host_name = "eldiron.immae.eu";
-    #   use = "external-service";
-    #   check_command = "check_backup_eriomem";
-    #   check_interval = "120";
-    #   notification_interval = "1440";
-    #   servicegroups = "webstatus-backup";
-    # }
-    {
-      service_description = "ovh backup is up and not full";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = "check_ok";
-      check_interval = "120";
-      notification_interval = "1440";
-      servicegroups = "webstatus-backup";
-    }
-    # DNS services
-    {
-      service_description = "eldiron dns is active and authoritative for aten.pro";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "aten.pro" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "aten.pro";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for bouya.org";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "bouya.org" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "bouya.org";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for filedesreves.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "filedesreves.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "filedesreves.fr";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for ludivinecassal.com";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "ludivinecassal.com" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "ludivinecassal.com";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for icommandeur.org";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "icommandeur.org" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "icommandeur.org";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "immae.eu" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "immae.eu";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for immae.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "immae.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "immae.fr";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for piedsjaloux.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "piedsjaloux.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "piedsjaloux.fr";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for saison-photo.org";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "saison-photo.org" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "saison-photo.org";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for tellesflorian.com";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "tellesflorian.com" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "tellesflorian.com";
-    }
-    {
-      service_description = "eldiron dns is active and authoritative for capitaines.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_dns" "capitaines.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "capitaines.fr";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for aten.pro";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "aten.pro" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "aten.pro (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for bouya.org";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "bouya.org" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "bouya.org (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for filedesreves.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "filedesreves.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "filedesreves.fr (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for ludivinecassal.com";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "ludivinecassal.com" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "ludivinecassal.com (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for icommandeur.org";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "icommandeur.org" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "icommandeur.org (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "immae.eu" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "immae.eu (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for immae.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "immae.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "immae.fr (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for piedsjaloux.fr";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "piedsjaloux.fr" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "piedsjaloux.fr (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for tellesflorian.com";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "tellesflorian.com" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "tellesflorian.com (Secondary DNS ClouDNS)";
-    }
-    {
-      service_description = "cloudns dns is active and authoritative for saison-photo.org";
-      host_name = "eldiron.immae.eu";
-      use = "dns-service";
-      check_command = ["check_external_dns" "pns1.cloudns.net" "saison-photo.org" "-A"];
-      servicegroups = "webstatus-dns";
-      _webstatus_name = "saison-photo.org (Secondary DNS ClouDNS)";
-    }
-    #### Web scenarios
-    {
-      service_description = "blog website is running on immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.immae.eu" "/blog/" "egrep -ri TODO /etc"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "Immae’s Blog";
-      _webstatus_url = "https://www.immae.eu/blog";
-    }
-    {
-      service_description = "owncloud website is running on cloud.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "cloud.immae.eu" "/" "a safe home for all your data"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Nextcloud";
-      _webstatus_url = "https://cloud.immae.eu";
-    }
-    {
-      service_description = "nextcloud website is running on nextcloud.4c.salle-s.org";
-      host_name = "quatresaisons.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "nextcloud.4c.salle-s.org" "/" "a safe home for all your data"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Nextcloud";
-      _webstatus_url = "https://nextcloud.4c.salle-s.org";
-    }
-    {
-      service_description = "davical website is running on dav.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "dav.immae.eu" "/davical/" "Log On Please"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Davical";
-      _webstatus_url = "https://dav.immae.eu/davical";
-    }
-    {
-      service_description = "adminer website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https_auth" "tools.immae.eu" "/adminer/" "www.adminer.org"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Adminer";
-      _webstatus_url = "https://tools.immae.eu/adminer/";
-    }
-    {
-      service_description = "ttrss website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "tools.immae.eu" "/ttrss/" "<title>Tiny Tiny RSS"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "TT-RSS";
-      _webstatus_url = "https://tools.immae.eu/ttrss/";
-    }
-    {
-      service_description = "mpd website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https_auth" "tools.immae.eu" "/mpd/" "<title>ympd"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "MPD (YMPD)";
-      _webstatus_url = "https://tools.immae.eu/mpd/";
-    }
-    {
-      service_description = "rompr mpd website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https_auth" "tools.immae.eu" "/rompr/" "<title>RompЯ"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "MPD (ROMPR)";
-      _webstatus_url = "https://tools.immae.eu/rompr/";
-    }
-    {
-      service_description = "wallabag website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "tools.immae.eu" "/wallabag/" "<title>Bienvenue sur wallabag"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Wallabag";
-      _webstatus_url = "https://tools.immae.eu/wallabag/";
-    }
-    {
-      service_description = "yourl website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "tools.immae.eu" "/url/admin/" "<title>YOURLS"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "YOURLS";
-      _webstatus_url = "https://tools.immae.eu/url/admin/";
-    }
-    {
-      service_description = "roundcube website is running on mail.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "mail.immae.eu" "/roundcube/" "<title>Roundcube"];
-      servicegroups = "webstatus-webapps,webstatus-email";
-      _webstatus_name = "Roundcube";
-      _webstatus_url = "https://mail.immae.eu/roundcube/";
-    }
-    {
-      service_description = "dokuwiki website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "tools.immae.eu" "/dokuwiki/" "<title>start"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Dokuwiki";
-      _webstatus_url = "https://tools.immae.eu/dokuwiki/";
-    }
-    {
-      service_description = "shaarli website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "tools.immae.eu" "/Shaarli/immae" "<title>Immae"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Shaarli";
-      _webstatus_url = "https://tools.immae.eu/Shaarli/";
-    }
-    {
-      service_description = "ldap website is running on tools.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "tools.immae.eu" "/ldap/" "<title>phpLDAPadmin"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "LDAP";
-      _webstatus_url = "https://tools.immae.eu/ldap/";
-    }
-    {
-      service_description = "gitweb website is running on git.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "git.immae.eu" "/cgit" "<title>Immae’s git"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Git";
-      _webstatus_url = "https://git.immae.eu/";
-    }
-    {
-      service_description = "mantisbt website is running on git.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "git.immae.eu" "/mantisbt/" "<title>My View - MantisBT"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Mantisbt";
-      _webstatus_url = "https://git.immae.eu/mantisbt";
-    }
-    {
-      service_description = "diaspora website is running on diaspora.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "diaspora.immae.eu" "/" "is the online social world where you are in control"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Diaspora";
-      _webstatus_url = "https://diaspora.immae.eu/";
-    }
-    {
-      service_description = "peertube website is running on peertube.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "peertube.immae.eu" "/" "<title>Immae’s PeerTube"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Peertube";
-      _webstatus_url = "https://peertube.immae.eu/";
-    }
-    {
-      service_description = "etherpad website is running on ether.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "ether.immae.eu" "/" "<title>Etherpad"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Etherpad";
-      _webstatus_url = "https://ether.immae.eu/";
-    }
-    {
-      service_description = "mediagoblin website is running on mgoblin.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "mgoblin.immae.eu" "/" "<title>GNU MediaGoblin"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Mediagoblin";
-      _webstatus_url = "https://mgoblin.immae.eu/";
-    }
-    {
-      service_description = "mastodon website is running on mastodon.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "mastodon.immae.eu" "/" "Mastodon</title>"];
-      servicegroups = "webstatus-webapps";
-      _webstatus_name = "Mastodon";
-      _webstatus_url = "https://mastodon.immae.eu/";
-    }
-    # Other web pages
-    {
-      service_description = "Jerome website is running on naturaloutil.immae.eu";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "naturaloutil.immae.eu" "/ping.php" "YES"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "naturaloutil.immae.eu";
-      _webstatus_url = "https://naturaloutil.immae.eu/";
-    }
-    {
-      service_description = "Telio website is running on realistesmedia.fr";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "realistesmedia.fr" "/" "doctype html"];
-      contact_groups = "telio-tortay";
-    }
-    {
-      service_description = "Chloe website site is running on osteopathe-cc.fr";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.osteopathe-cc.fr" "/" "<title>Chloé Condamin ostéopathe D.O."];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "osteopathe-cc.fr";
-      _webstatus_url = "https://www.osteopathe-cc.fr/";
-    }
-    {
-      service_description = "Richie website is running on europe-richie.org";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.europe-richie.org" "/" "<title>.Europe Richie]"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "europe-richie.org";
-      _webstatus_url = "https://www.europe-richie.org/";
-    }
-    {
-      service_description = "Ludivine website site is running on ludivinecassal.com";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.ludivinecassal.com" "/" "<title>Ludivine Cassal"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "ludivinecassal.com";
-      _webstatus_url = "https://www.ludivinecassal.com/";
-    }
-    {
-      service_description = "Aten website site is running on aten.pro";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "aten.pro" "/" "<title>ATEN"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "aten.pro";
-      _webstatus_url = "https://aten.pro/";
-    }
-    {
-      service_description = "PiedsJaloux website site is running on piedsjaloux.fr";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.piedsjaloux.fr" "/" "<title>Les Pieds Jaloux"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "piedsjaloux.fr";
-      _webstatus_url = "https://www.piedsjaloux.fr/";
-    }
-    {
-      service_description = "Denise and Jerome website site is running on denisejerome.piedsjaloux.fr";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "denisejerome.piedsjaloux.fr" "/" "<title>Accueil - Mariage"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "denisejerome.piedsjaloux.fr";
-      _webstatus_url = "https://denisejerome.piedsjaloux.fr/";
-    }
-    {
-      service_description = "Connexionswing website site is running on connexionswing.com";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.connexionswing.com" "/" "<title>Cours, stages"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "connexionswing.com";
-      _webstatus_url = "https://www.connexionswing.com/";
-    }
-    {
-      service_description = "Sandetludo website site is running on sandetludo.com";
-      host_name = "eldiron.immae.eu";
-      use = "external-web-service";
-      check_command = ["check_https" "www.sandetludo.com" "/" "<title>Cours de West Coast"];
-      servicegroups = "webstatus-websites";
-      _webstatus_name = "sandetludo.com";
-      _webstatus_url = "https://www.sandetludo.com/";
-    }
-    # SSL
-    {
-      service_description = "ldap SSL is up to date";
-      host_name = "eldiron.immae.eu";
-      use = "external-service";
-      check_command = ["check_tcp_ssl" "636"];
-      servicegroups = "webstatus-ssl";
-      _webstatus_name = "LDAP";
-      _webstatus_url = "ldap.immae.eu";
-    }
-    # Tiboqorl
-    {
-      service_description = "Cyllene support page is running";
-      host_name = "tiboqorl.fr";
-      use = "external-web-service";
-      contact_groups = "tiboqorl";
-      check_command = [ "check_https" "sc.groupe-cyllene.com" "/" "<title>Support Client Cyllene" ];
-      _webstatus_namespace = "tiboqorl";
-    }
-    {
-      service_description = "Origny page is running";
-      host_name = "tiboqorl.fr";
-      use = "external-web-service";
-      contact_groups = "tiboqorl";
-      check_command = [ "check_https" "origny.tiboqorl.fr" "/" "<title>Home Assistant" ];
-      _webstatus_namespace = "tiboqorl";
-    }
-  ];
-  contact = {
-    telio-tortay = config.myEnv.monitoring.contacts.telio-tortay // {
-      use = "generic-contact";
-      contactgroups = "telio-tortay";
-    };
-    thibault = config.myEnv.monitoring.contacts.thibault // {
-      use = "generic-contact";
-      contactgroups = "tiboqorl";
-    };
-  };
-  contactgroup = {
-    telio-tortay = { alias = "Telio Tortay"; members = "immae"; };
-    tiboqorl = { alias = "Tiboqorl"; members = "immae"; };
-  };
-}
diff --git a/modules/private/monitoring/objects_phare.nix b/modules/private/monitoring/objects_phare.nix
deleted file mode 100644
index 082e7e3..0000000
--- a/modules/private/monitoring/objects_phare.nix
+++ /dev/null
@@ -1,17 +0,0 @@
-{ emailCheck, ... }:
-{
-  activatedPlugins = [ "emails" ];
-  host = {
-    "phare.normalesup.org" = {
-      alias = "phare.normalesup.org";
-      address = "phare.normalesup.org";
-      use = "linux-server";
-      hostgroups = "webstatus-hosts";
-      _webstatus_name = "phare";
-      _webstatus_vhost = "status.immae.eu";
-    };
-  };
-  service = [
-    (emailCheck "phare" "phare.normalesup.org")
-  ];
-}
diff --git a/modules/private/monitoring/objects_quatresaisons.nix b/modules/private/monitoring/objects_quatresaisons.nix
deleted file mode 100644
index f30cf81..0000000
--- a/modules/private/monitoring/objects_quatresaisons.nix
+++ /dev/null
@@ -1,38 +0,0 @@
-{ lib, hostFQDN, emailCheck, openldap, ... }:
-let
-  defaultPassiveInfo = {
-    filter = lib.attrsets.filterAttrs
-      (k: v: builtins.elem k ["service_description"] || builtins.substring 0 1 k == "_");
-    use = "external-passive-service";
-    freshness_threshold = "450";
-    retry_interval = "1";
-    servicegroups = "webstatus-resources";
-    host_name = hostFQDN;
-  };
-in
-{
-  resources = {
-    USER212 = "{{ .monitoring.quatresaisons.naemon_ldap }}";
-  };
-  activatedPlugins = [ "megaraid" "command" "postgresql" ];
-  service = [
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-resources"; };
-      service_description = "No RAID device is degraded";
-      use = "local-service";
-      check_command = ["check_megaraid"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-resources"; };
-      service_description = "LDAP is running";
-      use = "local-service";
-      check_command = [ "check_command_status" "${openldap}/bin/ldapwhoami -D uid=naemon,ou=services,dc=salle-s,dc=org -w $USER212$" "0" ""];
-    }
-    {
-      passiveInfo = defaultPassiveInfo // { servicegroups = "webstatus-resources"; };
-      service_description = "Postgresql is running";
-      use = "local-service";
-      check_command = [ "check_postgresql_database_count" "/run/postgresql" "5432" "3" ];
-    }
-  ];
-}
diff --git a/modules/private/monitoring/objects_tiboqorl-fr.nix b/modules/private/monitoring/objects_tiboqorl-fr.nix
deleted file mode 100644
index b49a1d8..0000000
--- a/modules/private/monitoring/objects_tiboqorl-fr.nix
+++ /dev/null
@@ -1,174 +0,0 @@
-{ lib, ... }:
-let
-  hostFQDN = "tiboqorl.fr";
-  defaultPassiveInfo = {
-    filter = lib.attrsets.filterAttrs
-      (k: v: builtins.elem k ["service_description"] || builtins.substring 0 1 k == "_");
-    use = "external-passive-service";
-    contact_groups = "tiboqorl";
-    freshness_threshold = "450";
-    notification_interval = "240";
-    retry_interval = "1";
-    servicegroups = "webstatus-resources";
-    _webstatus_namespace = "tiboqorl";
-    host_name = hostFQDN;
-  };
-in
-{
-  host = {
-    "tiboqorl.fr" = {
-      alias = "tiboqorl.fr";
-      address = "tiboqorl.fr";
-      use = "linux-server";
-      contact_groups = "tiboqorl";
-      hostgroups = "webstatus-hosts";
-      _webstatus_name = "tiboqorl";
-      _webstatus_vhost = "status.immae.eu";
-      _webstatus_namespace = "tiboqorl";
-    };
-  };
-  service = [
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Size on root partition";
-      use = "local-service";
-      check_command = ["check_local_disk" "20%" "10%" "/"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Total number of process";
-      use = "local-service";
-      check_command = [ "check_local_procs" "250" "400" "RSZDT" ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Network bandwidth";
-      use = "local-service";
-      check_interval = "2";
-      max_check_attempts = "20";
-      retry_interval = "2";
-      check_command = [
-        "check_local_bandwidth"
-        "eth0"
-        "20480" # kb/s
-        "51200" # kb/s
-      ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Average load";
-      use = "local-service";
-      check_command = [
-        "check_local_load"
-        "0.75,0.75,0.75" # warn
-        "1.0,1.0,1.0" # alert
-      ];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Swap usage";
-      use = "local-service";
-      check_command = ["check_local_swap" "20" "10"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "Memory usage";
-      use = "local-service";
-      check_command = ["check_memory" "80" "90"];
-    }
-    {
-      passiveInfo = defaultPassiveInfo;
-      service_description = "NTP is activated and working";
-      use = "local-service";
-      check_command = ["check_ntp"];
-    }
-  ];
-  command = {
-    check_local_disk = "$USER1$/check_disk -w $ARG1$ -c $ARG2$ -p $ARG3$";
-    check_local_procs = "$USER1$/check_procs -w $ARG1$ -c $ARG2$ -s $ARG3$";
-    check_local_load = "$USER1$/check_load -w $ARG1$ -c $ARG2$";
-    check_local_swap = "$USER1$/check_swap -n ok -w $ARG1$ -c $ARG2$";
-    check_local_bandwidth = "$USER2$/check_bandwidth -i=$ARG1$ -w $ARG2$ -c $ARG3$";
-    check_memory = "$USER2$/check_mem.sh -w $ARG1$ -c $ARG2$";
-    check_ntp = "$USER1$/check_ntp_time -t 30 -q -H 0.arch.pool.ntp.org";
-    check_host_alive = "$USER1$/check_ping -H $HOSTADDRESS$ -w 3000.0,80% -c 5000.0,100% -p 5";
-    notify-master = "$USER2$/send_nrdp.sh -u \"$USER200$\" -t \"$USER201$\" -H \"$HOSTADDRESS$\" -s \"$SERVICEDESC$\" -S \"$SERVICESTATEID$\" -o \"$SERVICEOUTPUT$ | $SERVICEPERFDATA$\"";
-  };
-  timeperiod = {
-    "24x7" = {
-      alias = "24 Hours A Day, 7 Days A Week";
-      monday = "00:00-24:00";
-      tuesday = "00:00-24:00";
-      wednesday = "00:00-24:00";
-      thursday = "00:00-24:00";
-      friday = "00:00-24:00";
-      saturday = "00:00-24:00";
-      sunday = "00:00-24:00";
-    };
-  };
-  servicegroup = {
-    webstatus-resources = { alias = "Local resources"; };
-  };
-  hostgroup = {
-    webstatus-hosts = { alias = "Hosts"; };
-  };
-  contactgroup = {
-    tiboqorl = { alias = "Naemon Administrators"; };
-  };
-  templates = {
-    service = {
-      generic-service = {
-        active_checks_enabled = "1";
-        check_freshness = "0";
-        check_interval = "10";
-        check_period = "24x7";
-        contact_groups = "tiboqorl";
-        event_handler_enabled = "1";
-        flap_detection_enabled = "1";
-        is_volatile = "0";
-        max_check_attempts = "3";
-        notification_interval = "60";
-        notification_options = "w,u,c,r,f,s";
-        notification_period = "24x7";
-        notifications_enabled = "0";
-        obsess_over_service = "1";
-        passive_checks_enabled = "1";
-        process_perf_data = "1";
-        retain_nonstatus_information = "1";
-        retain_status_information = "1";
-        retry_interval = "2";
-      };
-      local-service = {
-        use = "generic-service";
-        host_name = hostFQDN;
-        check_interval = "5";
-        max_check_attempts = "4";
-        retry_interval = "1";
-        servicegroups = "webstatus-resources";
-      };
-    };
-    host = {
-      generic-host = {
-        event_handler_enabled = "1";
-        flap_detection_enabled = "1";
-        notification_period = "24x7";
-        notifications_enabled = "1";
-        process_perf_data = "1";
-        retain_nonstatus_information = "1";
-        retain_status_information = "1";
-      };
-      linux-server = {
-        check_command = "check_host_alive";
-        check_interval = "5";
-        check_period = "24x7";
-        contact_groups = "tiboqorl";
-        max_check_attempts = "10";
-        notification_interval = "120";
-        notification_options = "d,u,r,f";
-        retry_interval = "1";
-      };
-    };
-  };
-}
diff --git a/modules/private/monitoring/objects_ulminfo-fr.nix b/modules/private/monitoring/objects_ulminfo-fr.nix
deleted file mode 100644
index bd2804b..0000000
--- a/modules/private/monitoring/objects_ulminfo-fr.nix
+++ /dev/null
@@ -1,17 +0,0 @@
-{ emailCheck, ... }:
-{
-  activatedPlugins = [ "emails" ];
-  host = {
-    "ulminfo.fr" = {
-      alias = "ulminfo.fr";
-      address = "ulminfo.fr";
-      use = "linux-server";
-      hostgroups = "webstatus-hosts";
-      _webstatus_name = "ulminfo";
-      _webstatus_vhost = "status.immae.eu";
-    };
-  };
-  service = [
-    (emailCheck "ulminfo" "ulminfo.fr")
-  ];
-}
diff --git a/modules/private/monitoring/plugins/check_backup_age b/modules/private/monitoring/plugins/check_backup_age
deleted file mode 100755
index d873bdc..0000000
--- a/modules/private/monitoring/plugins/check_backup_age
+++ /dev/null
@@ -1,66 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-source $SECRETS_PATH
-export HOME=$(mktemp -d)
-trap "rm -rf $HOME" EXIT
-folder=$1
-parse_date() {
-  d=$1
-  echo $d | sed -e "s/^\(....\)\(..\)\(..\)T\(..\)\(..\)\(..\)/\1-\2-\3T\4:\5:\6/"
-}
-output=$(duplicity collection-status --log-fd 2 "$BASE_URL$folder" 2>&1 > /dev/null)
-output=$(echo "$output" | grep -v "^\.")
-last_full=$(parse_date "$(echo "$output" | grep "^ full " | cut -d' ' -f3 | sort | tail -n1)")
-last_bkp=$(parse_date "$(echo "$output" | grep -E "^ (full|inc) " | cut -d' ' -f3 | sort | tail -n1)")
-orphaned_sets=$(echo "$output" | grep "^orphaned-sets-num" | cut -d' ' -f2)
-incomplete_sets=$(echo "$output" | grep "^incomplete-sets-num" | cut -d' ' -f2)
-if [[ -z "$last_full" || -z "$last_bkp" || -z "$orphaned_sets" || -z "$incomplete_sets" ]]; then
-  echo "duply-backup $folder UNKNOWN - impossible to parse result"
-  exit 3
-fi
-last_full_age=$(( ($(date "+%s") - $(date -d "$last_full" "+%s")) / (60*60*24) ))
-last_bkp_age=$(( ($(date "+%s") - $(date -d "$last_bkp" "+%s")) / (60*60) ))
-PERFS="orphan=$orphaned_sets;1;;0; incomplete=$incomplete_sets;1;;0; age=${last_bkp_age}h;30;48;0; full_age=${last_full_age}d;35;45;0;"
-WARNINGS=""
-ERRORS=""
-if [[ "$incomplete_sets" -gt 0 ]]; then
-  WARNINGS="$WARNINGS - Incomplete sets is $incomplete_sets"
-fi
-if [[ "$orphaned_sets" -gt 0 ]]; then
-  WARNINGS="$WARNINGS - Orphaned sets is $orphaned_sets"
-fi
-if [[ "$last_full_age" -gt 45 ]]; then
-  ERRORS="$ERRORS - Last full backup is too old $last_full"
-elif [[ "$last_full_age" -gt 35 ]]; then
-  WARNINGS="$WARNINGS - Last full backup is getting old $last_full"
-fi
-if [[ "$last_bkp_age" -gt 48 ]]; then
-  ERRORS="$ERRORS - Last backup is too old $last_bkp"
-elif [[ "$last_bkp_age" -gt 30 ]]; then
-  WARNINGS="$WARNINGS - Last backup is getting old $last_bkp"
-fi
-if [[ -n "$ERRORS" ]]; then
-  echo "duply-backup $folder CRITICAL$ERRORS$WARNINGS | $PERFS"
-  exit 2
-elif [[ -n "$WARNINGS" ]]; then
-  echo "duply-backup $folder WARNING$WARNINGS | $PERFS"
-  exit 1
-else
-  echo "duply-backup $folder OK | $PERFS"
-fi
diff --git a/modules/private/monitoring/plugins/check_bandwidth b/modules/private/monitoring/plugins/check_bandwidth
deleted file mode 100755
index 53c5d85..0000000
--- a/modules/private/monitoring/plugins/check_bandwidth
+++ /dev/null
@@ -1,123 +0,0 @@
-#!/bin/bash
-# ============================== SUMMARY =====================================
-#Author : Ken Roulamellah
-#Date : 19/07/2018
-#Version : 1.0
-# Licence : GPL
-# ===================== INFORMATION ABOUT THIS PLUGIN ========================
-#
-# This plugin checks the average RX and TX bandwidth utilisation. It use
-# kbytes as measure unite.
-#
-# ========================== START OF PROGRAM CODE ===========================
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-interface=$( ip route | grep default | awk '{print $5}' | head -n1)
-function print_usage()
-{
-  echo "Usage :"
-  echo "$0 [ -i=INTERFACE]  [ -ct=COUNT ] -w WARNING -c CRITICAL"
-  echo "This script calculate the average bandwith usage."
-  echo "Default values | interface: ${interface}, counter: 10"
-}
-counter=10
-warning=-1
-critical=-1
-sum_rx=0
-sum_tx=0
-avg_rx=
-avg_tx=
-i=
-if [[ $# -lt 4 ]];
-then
-        echo "Error: Arguments are missing"
-        print_usage
-        exit $STATE_UNKNOWN
-fi
-while [[ $# -gt 0 ]]; do
-    case "$1" in
-        -i=*)
-            interface="$(cut -d'=' -f2 <<<"$1")"
-            shift
-        ;;
-        -ct=*)
-            counter="$(cut -d'=' -f2 <<<"$1")"
-            shift
-        ;;
-        -w)
-            warning=$2
-            shift 2
-        ;;
-        -c)
-            critical=$2
-            shift 2
-        ;;
-        *)
-            printf "\nError: Invalid option '$1'"
-            print_usage
-            exit $STATE_UNKNOWN
-        ;;
-    esac
-done
-if [ $warning -lt 0 ] || [ $critical -lt 0 ];
-then
-        echo "Error: You need to specify a warning and critical treshold"
-        print_usage
-    exit $STATE_UNKNOWN
-fi
-grep -q "up" /sys/class/net/$interface/operstate || exec echo "$interface: no such device or down"
-read rx <"/sys/class/net/$interface/statistics/rx_bytes"
-read tx <"/sys/class/net/$interface/statistics/tx_bytes"
-i=$counter
-while [ $i -gt 0 ]; do
-    sleep 1
-    read newrx <"/sys/class/net/$interface/statistics/rx_bytes"
-    read newtx <"/sys/class/net/$interface/statistics/tx_bytes"
-    #echo "old rx :$rx"
-    #echo "new rx :$newrx"
-    rx_cal=$(bc <<< "scale=2; ($newrx-$rx) / 1000")
-    tx_cal=$(bc <<< "scale=2; ($newtx-$tx) / 1000")
-    sum_rx=$(bc <<< "scale=2;$sum_rx+$rx_cal")
-    sum_tx=$(bc <<< "scale=2;$sum_tx+$tx_cal")
-    #echo  "$interface {rx: $rx_cal ko/s, tx: $tx_cal ko/s}"
-    rx=$newrx
-    tx=$newtx
-    ((i --))
-done
-avg_rx=$(bc <<< "scale=2;$sum_rx/$counter")
-avg_tx=$(bc <<< "scale=2;$sum_tx/$counter")
-#echo "$avg_rx"
-#echo "$avg_tx"
-if [ $(bc <<< "$avg_rx > $critical || $avg_tx > $critical") -eq 1 ]; then
-        echo "$interface CRITICAL - AVG_RX: $avg_rx kb/s,  AVG_TX:
-        $avg_tx kb/s | RX="$avg_rx"kbps;0;0;0; TX="$avg_tx"kbps;0;0;0;"
-        exit $STATE_CRITICAL
-elif [ $(bc <<< "$avg_rx > $warning || $avg_tx > $warning") -eq 1 ]; then
-        echo "$interface WARNING - AVG_RX: $avg_rx kb/s,  AVG_TX: $avg_tx kb/s | RX="$avg_rx"kbps;0;0;0; TX="$avg_tx"kbps;0;0;0;"
-        exit $STATE_WARNING
-else
-        echo "$interface - OK AVG_RX: $avg_rx kb/s,  AVG_TX: $avg_tx kb/s | RX="$avg_rx"kbps;0;0;0; TX="$avg_tx"kbps;0;0;0;"
-        exit $STATE_OK
-fi
-exit 3
diff --git a/modules/private/monitoring/plugins/check_command b/modules/private/monitoring/plugins/check_command
deleted file mode 100755
index 2b546c1..0000000
--- a/modules/private/monitoring/plugins/check_command
+++ /dev/null
@@ -1,113 +0,0 @@
-#!/usr/bin/env perl
-use strict;
-use Getopt::Std;
-$| = 1;
-my %opts;
-getopts('hr:C:c:s:o:', \%opts);
-my $STATE_OK = 0;
-my $STATE_WARNING = 1;
-my $STATE_CRITICAL = 2;
-my $STATE_UNKNOWN = 3;
-if ($opts{'h'} || scalar(%opts) == 0) {
-  &print_help();
-  exit($STATE_OK);
-}
-my $command = $opts{'c'};
-if ($command eq '') {
-  print "You must provide a command to check.\n";
-  exit($STATE_UNKNOWN);
-}
-my $expected_output = $opts{'o'};
-my $expected_status = $opts{'s'};
-my $other_command   = $opts{'C'};
-if ($other_command eq '' and $expected_status eq '' and $expected_output eq '') {
-  $expected_status = 0;
-}
-my $cmd = $command . ' 2>&1';
-my $other_cmd;
-if ($other_command ne '') {
-  $other_cmd = $other_command . ' 2>&1';
-}
-my $run_as;
-if ($opts{'r'}) {
-  $run_as = $opts{'r'};
-  $cmd = "sudo -u $run_as -n $cmd";
-  if ($other_command ne '') {
-    $other_cmd = "sudo -u $run_as -n $other_cmd";
-  }
-}
-my $cmd_result = `$cmd`;
-my $other_cmd_result;
-if ($other_command ne '') {
-  $other_cmd_result = `$other_cmd`;
-  chomp($other_cmd_result);
-}
-chomp($cmd_result);
-if ($cmd_result =~ /sudo/i) {
-  print "$command CRITICAL - No sudo right to run the command | result=1;;;;\n";
-  exit($STATE_UNKNOWN);
-} elsif ($expected_status ne '') {
-    if ($? != $expected_status) {
-      print "$command CRITICAL - Response status $? | result=1;;;;\n";
-      exit($STATE_CRITICAL);
-    } else {
-      print "$command OK - Response status $? | result=0;;;;\n";
-      exit($STATE_OK);
-    }
-} elsif ($other_command ne '') {
-  if ($cmd_result ne $other_cmd_result) {
-    print "$command CRITICAL - Expected output not matching other command output | result=1;;;;\n";
-    exit($STATE_CRITICAL);
-  } else {
-    print "$command OK - Expected output matching other command output | result=0;;;;\n";
-    exit($STATE_OK);
-  }
-} else {
-  if ($cmd_result !~ /$expected_output/) {
-    print "$command CRITICAL - Expected output not matching | result=1;;;;\n";
-    exit($STATE_CRITICAL);
-  } else {
-    print "$command OK - Expected output matching | result=0;;;;\n";
-    exit($STATE_OK);
-  }
-}
-sub print_help() {
-  print << "EOF";
-Check whether the given command responds as expected. One of -o -C or -s must be selected.
-Options:
-h
-    Print detailed help screen
-c
-    command to run (required)
-C
-    other command to compare output
-r user
-    Run as user via sudo.
-s
-    status code to check
-o
-    output to check
-EOF
-}
diff --git a/modules/private/monitoring/plugins/check_emails b/modules/private/monitoring/plugins/check_emails
deleted file mode 100755
index 534e5a5..0000000
--- a/modules/private/monitoring/plugins/check_emails
+++ /dev/null
@@ -1,121 +0,0 @@
-#!/usr/bin/env perl
-use strict;
-use Getopt::Std;
-use File::Basename;
-use Date::Parse;
-use POSIX qw(strftime);
-$| = 1;
-my %opts;
-getopts('hH:l:s:p:f:i:n:r:', \%opts);
-my $STATE_OK = 0;
-my $STATE_WARNING = 1;
-my $STATE_CRITICAL = 2;
-my $STATE_UNKNOWN = 3;
-if ($opts{'h'} || scalar(%opts) == 0) {
-  &print_help();
-  exit($STATE_OK);
-}
-my $port = $opts{'p'};
-my $host = $opts{'H'};
-my $login = $opts{'l'};
-if ($login ne '') {
-  $login = "$login@";
-}
-my $identity = $opts{'i'};
-my $local_directory = $opts{'n'};
-my $return_path = $opts{'r'};
-my @emails_to_send = split(/,/, $opts{'s'});
-my @emails_to_expect = split(/,/, $opts{'f'});
-my $cmd_result;
-if ($local_directory ne '') {
-  if (@emails_to_expect and ! -d $local_directory) {
-    print "Emails $host UNKNOWN - Could not find local directory";
-    exit($STATE_UNKNOWN);
-  }
-  $cmd_result = `send_mails $local_directory $return_path @emails_to_send 2>&1`;
-} else {
-  $cmd_result = `ssh -o BatchMode=yes -o UserKnownHostsFile=/dev/null -o CheckHostIP=no -o StrictHostKeyChecking=no -p $port -i $identity $login$host send_mails @emails_to_send 2>&1`;
-  if ($cmd_result =~ /Host key verification failed./) {
-    print "Emails $host UNKNOWN - Could not connect to host with ssh key\n";
-    exit($STATE_UNKNOWN);
-  }
-}
-my @lines = split(/\n/, $cmd_result);
-my %found_emails;
-foreach my $line (@lines) {
-  my @split_line = split(/;/, $line, 2);
-  $found_emails{$split_line[0]} = $split_line[1];
-}
-my $output = "";
-my $old = 0;
-foreach my $email_from (@emails_to_expect) {
-  my @email_split = split(/:/, $email_from);
-  my $email = $email_split[0];
-  my $from = $email_split[1];
-  if ( exists $found_emails{$email} ) {
-    my $email_date = str2time($found_emails{$email});
-    my $current_date = strftime "%s", localtime;
-    if ($current_date - $email_date > 60*30) {
-      $output = "$output$email ($found_emails{$email} from $from) ";
-    }
-    $old = ($current_date - $email_date) > $old ? ($current_date - $email_date) : $old;
-  } else {
-    $output = "$output$email (missing) "
-  }
-}
-if ($output ne '') {
-  print "Emails $host CRITICAL - expecting emails: $output | timestamp=${old}s;;;;\n";
-  exit($STATE_CRITICAL);
-} else {
-  print "Emails $host OK | timestamp=${old}s;;;;\n";
-  exit($STATE_OK);
-}
-sub print_help() {
-  print << "EOF";
-Check sent emails
-Options:
-h
-    Print detailed help screen
-H
-    Host to check
-l
-    Login
-i
-    Identity file
-n
-    Don’t use ssh, pass that directory to script
-r
-    Return path for local e-mails
-s
-    Comma separated list of emails to send from the host.
-f
-    Comma separated list of emails to expect on the host.
-EOF
-}
diff --git a/modules/private/monitoring/plugins/check_eriomem b/modules/private/monitoring/plugins/check_eriomem
deleted file mode 100755
index 880b88a..0000000
--- a/modules/private/monitoring/plugins/check_eriomem
+++ /dev/null
@@ -1,83 +0,0 @@
-#!/usr/bin/env python
-import os
-import sys
-import getopt
-import signal
-from subprocess import Popen, PIPE
-STATE_OK = 0
-STATE_WARNING = 1
-STATE_CRITICAL = 2
-STATE_UNKNOWN = 3
-keys = sys.argv[1].split(",")
-def to_args(k):
-    access, secret = k.split(":", 1)
-    return [
-            "s3cmd",
-            '-c=/dev/null',
-            '--no-check-certificate',
-            '--access_key={}'.format(access),
-            '--secret_key={}'.format(secret),
-            '--host=e.eriomem.net',
-            '--host-bucket=%(bucket)s.e.eriomem.net',
-            'du'
-            ]
-max_size = 1024*1024*1024*1024
-warning_percent = 99.75
-critical_percent = 99.95
-def output(code, msg):
-    print(msg)
-    sys.exit(code)
-def main():
-    def handler(signum, frame):
-        raise IOError
-    signal.signal(signal.SIGALRM, handler)
-    signal.alarm(60)
-    try:
-        ps = [Popen(to_args(a), stdout=PIPE, stderr=PIPE) for a in keys]
-        outs = [p.communicate() for p in ps]
-        rets = [p.wait() for p in ps]
-    except IOError:
-        for p in ps:
-            os.kill(p.pid, signal.SIGTERM)
-        output(STATE_UNKNOWN,
-                "Eriomem UNKNOWN - Command timeout after 60 seconds!")
-    signal.alarm(0)
-    if sum(rets) == 0:
-        usages = [int(out[0].decode().split("\n")[-2].split()[0]) for out in outs]
-        usage = sum(usages)
-        use_percent = 100 * usage / max_size
-        if use_percent > critical_percent:
-            output(STATE_CRITICAL,
-                    "Eriomem CRITICAL - bucket usage: %s (%s%%);| size=%s;;;;" %
-                    (sizeof_fmt(usage), use_percent, sizeof_fmt(usage)))
-        elif use_percent > warning_percent:
-            output(STATE_WARNING,
-                    "Eriomem WARNING - bucket usage: %s (%s%%);| size=%s;;;;" %
-                    (sizeof_fmt(usage), use_percent, sizeof_fmt(usage)))
-        else:
-            output(STATE_OK,
-                    "Eriomem OK - bucket usage: %s (%d%%);| size=%s;;;;" %
-                    (sizeof_fmt(usage), use_percent, sizeof_fmt(usage)))
-    else:
-        messages = "\n".join([out[0].decode() + out[1].decode() for out in outs])
-        output(STATE_UNKNOWN,
-                "Eriomem UNKNOWN - Error in command")
-def sizeof_fmt(num):
-    for unit in ['','ko','Mo','Go','To','Po','Eo','Zo']:
-        if abs(num) < 1024.0:
-            return "%3.1f%s" % (num, unit)
-        num /= 1024.0
-    return "%.1f%s%s" % (num, 'Yo')
-if __name__ == '__main__':
-    main()
diff --git a/modules/private/monitoring/plugins/check_ftp_database b/modules/private/monitoring/plugins/check_ftp_database
deleted file mode 100755
index f9cf579..0000000
--- a/modules/private/monitoring/plugins/check_ftp_database
+++ /dev/null
@@ -1,11 +0,0 @@
-#!/usr/bin/env bash
-OUT=$(echo "ls" | lftp -u test_ftp,test_ftp eldiron.immae.eu | grep it_works | wc -l)
-if [ "$OUT" -eq 1 ]; then
-  echo "ftp connection OK - access to ftp is working | ftp=1;;;;"
-  exit 0
-else
-  echo "ftp connection CRITICAL - no access to ftp | ftp=0;;;;"
-  exit 2
-fi
diff --git a/modules/private/monitoring/plugins/check_git b/modules/private/monitoring/plugins/check_git
deleted file mode 100755
index e8fbb29..0000000
--- a/modules/private/monitoring/plugins/check_git
+++ /dev/null
@@ -1,81 +0,0 @@
-#!/usr/bin/env bash
-SSH_KEY="$1"
-TMPDIR=$(mktemp -d)
-if [ ! -d "$TMPDIR" ]; then
-  echo "gitolite UNKNOWN - impossible to create temp dir"
-  exit 3
-fi
-trap "rm -rf $TMPDIR" EXIT
-ERRORS=""
-OUTPUT=""
-PERFS=""
-cd "$TMPDIR"
-OUT=$(git clone -q git://git.immae.eu/perso/Immae/Projets/Ruby/Monitor.git 2>&1)
-ERR=$?
-if [ -n "$OUT" ]; then
-OUTPUT="$OUTPUT
-$OUT"
-fi
-if [ "$ERR" != 0 ]; then
-  PERFS="$PERFS git=0;;;;"
-  ERRORS="$ERRORS git://"
-else
-  PERFS="$PERFS git=1;;;;"
-fi
-rm -rf Monitor
-OUT=$(git clone -q http://git.immae.eu/perso/Immae/Projets/Ruby/Monitor.git 2>&1)
-ERR=$?
-if [ -n "$OUT" ]; then
-OUTPUT="$OUTPUT
-$OUT"
-fi
-if [ "$ERR" != 0 ]; then
-  ERRORS="$ERRORS http://"
-  PERFS="$PERFS http=0;;;;"
-else
-  PERFS="$PERFS http=1;;;;"
-fi
-rm -rf Monitor
-OUT=$(git clone -q https://git.immae.eu/perso/Immae/Projets/Ruby/Monitor.git 2>&1)
-ERR=$?
-if [ -n "$OUT" ]; then
-OUTPUT="$OUTPUT
-$OUT"
-fi
-if [ "$ERR" != 0 ]; then
-  ERRORS="$ERRORS https://"
-  PERFS="$PERFS https=0;;;;"
-else
-  PERFS="$PERFS https=1;;;;"
-fi
-rm -rf Monitor
-OUT=$(GIT_SSH_COMMAND="ssh -i $SSH_KEY -o BatchMode=yes -o UserKnownHostsFile=/dev/null -o CheckHostIP=no -o StrictHostKeyChecking=no" git clone -q gitolite@git.immae.eu:perso/Immae/Projets/Ruby/Monitor 2>&1)
-ERR=$?
-if [ -n "$OUT" ]; then
-OUTPUT="$OUTPUT
-$OUT"
-fi
-if [ "$ERR" != 0 ]; then
-  ERRORS="$ERRORS ssh"
-  PERFS="$PERFS ssh=0;;;;"
-else
-  PERFS="$PERFS ssh=1;;;;"
-fi
-rm -rf Monitor
-if [ -n "$ERRORS" ]; then
-  echo "gitolite CRITICAL - impossible to clone via$ERRORS | $PERFS"
-  exit 2
-else
-  echo "gitolite OK - ssh, git, http and https work | $PERFS"
-  exit 0
-fi
diff --git a/modules/private/monitoring/plugins/check_imap_connection b/modules/private/monitoring/plugins/check_imap_connection
deleted file mode 100755
index c1ab0dd..0000000
--- a/modules/private/monitoring/plugins/check_imap_connection
+++ /dev/null
@@ -1,52 +0,0 @@
-#!/usr/bin/env perl
-use strict;
-use Getopt::Std;
-$| = 1;
-my %opts;
-getopts('h:u:p:H:', \%opts);
-my $STATE_OK = 0;
-my $STATE_WARNING = 1;
-my $STATE_CRITICAL = 2;
-my $STATE_UNKNOWN = 3;
-if ($opts{'h'} || !$opts{'u'} || !$opts{'p'} || !$opts{'H'}) {
-  &print_help();
-  exit($STATE_UNKNOWN);
-}
-my $user = $opts{'u'};
-my $password = $opts{'p'};
-my $host = $opts{'H'};
-my $cmd_result = `(echo "a login $user $password"; echo "b logout") | openssl s_client -quiet -ign_eof -connect $host -starttls imap 2>&1`;
-my $expected_result = "a OK Logged in";
-chomp($cmd_result);
-if ($cmd_result !~ /$expected_result/) {
-  print "IMAP CRITICAL - Unable to connect via imaps | imap=0;;;;\n";
-  exit($STATE_CRITICAL);
-} else {
-  print "IMAP OK - imaps connected successfully | imap=1;;;;\n";
-  exit($STATE_OK);
-}
-sub print_help() {
-  print << "EOF";
-Check whether imap works via ssl and is able to connect its database.
-Options:
-h
-    Print detailed help screen
-u
-    User to log in as
-p
-    Password to log in
-H
-    Host to log in to
-EOF
-}
diff --git a/modules/private/monitoring/plugins/check_last_file_date b/modules/private/monitoring/plugins/check_last_file_date
deleted file mode 100755
index f51a258..0000000
--- a/modules/private/monitoring/plugins/check_last_file_date
+++ /dev/null
@@ -1,28 +0,0 @@
-#!/bin/bash
- 
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-  
-base_path=$1
-hours=$2
-last_date=$(find $base_path -mindepth 1 -maxdepth 1 -printf "%T@\n" 2>/dev/null | sort | tail -n 1)
-if [ -z "$last_date" ]; then
-  echo "UNKNOWN: Could not read folder"
-  exit $STATE_UNKNOWN
-else
-  LC_ALL=C last_date=$(printf "%.*f" 0 $last_date)
-  LC_ALL=C age=$(( $(date "+%s") - $last_date))
-  max_age=$(( $hours * 60 * 60 ))
-  min_date=$(date -d "$hours hours ago" "+%s")
-  if [ "$min_date" -lt "$last_date" ]; then
-    echo "OK: Last file $(date -d @$last_date) | age=${age}s;;$max_age;;"
-    exit $STATE_OK
-  else
-    echo "CRITICAL: Last file $(date -d @$last_date) | age=${age}s;;$max_age;;"
-    exit $STATE_CRITICAL
-  fi
-fi
diff --git a/modules/private/monitoring/plugins/check_mem.sh b/modules/private/monitoring/plugins/check_mem.sh
deleted file mode 100755
index cc97ae2..0000000
--- a/modules/private/monitoring/plugins/check_mem.sh
+++ /dev/null
@@ -1,29 +0,0 @@
-#!/bin/bash
-if [ "$1" = "-w" ] && [ "$2" -gt "0" ] && [ "$3" = "-c" ] && [ "$4" -gt "0" ]; then
-        FreeM=`free -m`
-        memTotal_m=`echo "$FreeM" |grep Mem |awk '{print $2}'`
-        memUsed_m=`echo "$FreeM" |grep Mem |awk '{print $3}'`
-        memFree_m=`echo "$FreeM" |grep Mem |awk '{print $4}'`
-        memBuffer_m=`echo "$FreeM" |grep Mem |awk '{print $6}'`
-        memCache_m=`echo "$FreeM" |grep Mem |awk '{print $7}'`
-        memUsedPrc=`echo $((($memUsed_m*100)/$memTotal_m))||cut -d. -f1`
-        if [ "$memUsedPrc" -ge "$4" ]; then
-                echo "Memory: CRITICAL Total: $memTotal_m MB - Used: $memUsed_m MB - $memUsedPrc% used!|TOTAL=$memTotal_m;;;; USED=$memUsed_m;;;; CACHE=$memCache_m;;;; BUFFER=$memBuffer_m;;;;"
-                exit 2
-        elif [ "$memUsedPrc" -ge "$2" ]; then
-                echo "Memory: WARNING Total: $memTotal_m MB - Used: $memUsed_m MB - $memUsedPrc% used!|TOTAL=$memTotal_m;;;; USED=$memUsed_m;;;; CACHE=$memCache_m;;;; BUFFER=$memBuffer_m;;;;"
-                exit 1
-        else
-                echo "Memory: OK Total: $memTotal_m MB - Used: $memUsed_m MB - $memUsedPrc% used|TOTAL=$memTotal_m;;;; USED=$memUsed_m;;;; CACHE=$memCache_m;;;; BUFFER=$memBuffer_m;;;;"
-                exit 0
-        fi
-else # If inputs are not as expected, print help. 
-        sName="`echo $0|awk -F '/' '{print $NF}'`"
-        echo -e "\n\n\t\t### $sName Version 2.0###\n"
-        echo -e "# Usage:\t$sName -w <warnlevel> -c <critlevel>"
-        echo -e "\t\t= warnlevel and critlevel is percentage value without %\n"
-        echo "# EXAMPLE:\t/usr/lib64/nagios/plugins/$sName -w 80 -c 90"
-        echo -e "\nCopyright (C) 2012 Lukasz Gogolin (lukasz.gogolin@gmail.com), improved by Nestor 2015\n\n"
-        exit
-fi
diff --git a/modules/private/monitoring/plugins/check_mysql_replication b/modules/private/monitoring/plugins/check_mysql_replication
deleted file mode 100755
index 1ee5de1..0000000
--- a/modules/private/monitoring/plugins/check_mysql_replication
+++ /dev/null
@@ -1,41 +0,0 @@
-#!/bin/bash
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-socket=$1
-config_file=$2
-info=$(mysql --defaults-file=${config_file} -S $socket -e "show slave status" --vertical)
-exit_code=$?
-lag=$(echo "$info" | grep "\bSeconds_Behind_Master\b" | cut -d':' -f2 | sed -e "s/\s//g")
-IO_running=$(echo "$info" | grep "\bSlave_IO_Running\b" | cut -d':' -f2 | sed -e "s/\s//g")
-SQL_running=$(echo "$info" | grep "\bSlave_SQL_Running\b" | cut -d':' -f2 | sed -e "s/\s//g")
-if [[ $exit_code -ne 0 ]]; then
-  echo "UNKNOWN - Impossible to run mysql command"
-  exit $STATE_UNKNOWN
-elif [[ -z "$lag" ]]; then
-  echo "UNKNOWN - No replication found for mysql"
-  exit $STATE_UNKNOWN
-elif [[ "$IO_running" != "Yes" || "$SQL_running" != "Yes" ]]; then
-  echo "UNKNOWN - Replication is not running"
-  exit $STATE_UNKNOWN
-else
-  output="Replication lag for mysql is ${lag}s"
-  LC_ALL=C lag=$(printf "%.*f" 0 $lag)
-  if [[ $lag -lt 5 ]]; then
-    echo "OK - $output | time=${lag}s;5;10;;"
-    exit $STATE_OK
-  elif [[ $lag -lt 10 ]]; then
-    echo "WARNING - $output | time=${lag}s;5;10;;"
-    exit $STATE_WARNING
-  else
-    echo "CRITICAL - $output | time=${lag}s;5;10;;"
-    exit $STATE_CRITICAL
-  fi
-fi
diff --git a/modules/private/monitoring/plugins/check_openldap_replication b/modules/private/monitoring/plugins/check_openldap_replication
deleted file mode 100755
index 7136ad5..0000000
--- a/modules/private/monitoring/plugins/check_openldap_replication
+++ /dev/null
@@ -1,54 +0,0 @@
-#!/bin/bash
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-distant_host="$1"
-replication_dn="$2"
-replication_pw="$3"
-base="$4"
-config="$5"
-to_date() {
-  i="$1"
-  i=$(echo "$i" | grep contextCSN | cut -d":" -f2 | sed -e "s/\s//g")
-  i=$(echo "$i" | cut -d"#" -f1)
-  i=$(echo "$i" | cut -d"." -f1)
-  echo "$i"
-}
-# ldap
-remote_ldap=$(ldapsearch -H $distant_host -D "$replication_dn" -y "$replication_pw" -b "$base" -s base -LLL contextCSN )
-exit_code_remote=$?
-remote_ldap=$(to_date "$remote_ldap")
-# slapcat
-local_ldap=$(slapcat -b "$base" -f "$config" -a "(entryDN=$base)")
-exit_code_local=$?
-local_ldap=$(to_date "$local_ldap")
-offset=$(($remote_ldap - $local_ldap))
-if [[ $exit_code_remote -ne 0 || $exit_code_local -ne 0 ]]; then
-  echo "UNKNOWN - Impossible to run ldap command"
-  exit $STATE_UNKNOWN
-elif [[ -z "$offset" ]]; then
-  echo "UNKNOWN - No replication found"
-  exit $STATE_UNKNOWN
-else
-  output="Replication lag for openldap is ${offset}s"
-  LC_ALL=C lag=$(printf "%.*f" 0 $lag)
-  if [[ $offset -lt 5 ]]; then
-    echo "OK - $output | time=${offset}s;5;10;;"
-    exit $STATE_OK
-  elif [[ $offset -lt 10 ]]; then
-    echo "WARNING - $output | time=${offset}s;5;10;;"
-    exit $STATE_WARNING
-  else
-    echo "CRITICAL - $output | time=${offset}s;5;10;;"
-    exit $STATE_CRITICAL
-  fi
-fi
diff --git a/modules/private/monitoring/plugins/check_ovh_sms b/modules/private/monitoring/plugins/check_ovh_sms
deleted file mode 100755
index caf279c..0000000
--- a/modules/private/monitoring/plugins/check_ovh_sms
+++ /dev/null
@@ -1,25 +0,0 @@
-#!/usr/bin/env python
-import sys
-try:
-    import ovh
-    [endpoint, application_key, application_secret, consumer_key, account] = sys.argv[1].split(",")
-    client = ovh.Client(
-        endpoint=endpoint,
-        application_key=application_key,
-        application_secret=application_secret,
-        consumer_key=consumer_key,
-    )
-    result = client.get('/sms/{}'.format(account))["creditsLeft"]
-    if result < 20:
-        print("SMS OVH Critical - Not enough sms left ({})|SMS={};;;;".format(result, result))
-        sys.exit(2)
-    else:
-        print("SMS OVH Ok - Enough sms left ({})|SMS={};;;;".format(result, result))
-        sys.exit(0)
-except Exception:
-    print("SMS OVH UNKNOWN - Error during script")
-    sys.exit(3)
diff --git a/modules/private/monitoring/plugins/check_postgres_database_count b/modules/private/monitoring/plugins/check_postgres_database_count
deleted file mode 100755
index 43bdd8c..0000000
--- a/modules/private/monitoring/plugins/check_postgres_database_count
+++ /dev/null
@@ -1,32 +0,0 @@
-#!/bin/bash
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-host=$1
-port=$2
-min=$3
-count=$(psql -h $host -p $port -A -q -c '\t' -c 'select count(datname) from pg_catalog.pg_database' postgres 2>&1)
-exit_code=$?
-if [[ $exit_code -ne 0 ]]; then
-  echo "UNKNOWN - Impossible to run psql command: $count"
-  exit $STATE_UNKNOWN
-elif [[ -z "$count" ]]; then
-  echo "UNKNOWN - No database found"
-  exit $STATE_UNKNOWN
-else
-  output="Database count is $count"
-  LC_ALL=C count=$(printf "%.*f" 0 $count)
-  if [[ $count -gt $min ]]; then
-    echo "OK - $output | count=${count};$min;$min;0;"
-    exit $STATE_OK
-  else
-    echo "CRITICAL - $output | count=${count};$min;$min;0;"
-    exit $STATE_CRITICAL
-  fi
-fi
diff --git a/modules/private/monitoring/plugins/check_postgres_replication b/modules/private/monitoring/plugins/check_postgres_replication
deleted file mode 100755
index ff257a3..0000000
--- a/modules/private/monitoring/plugins/check_postgres_replication
+++ /dev/null
@@ -1,35 +0,0 @@
-#!/bin/bash
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-user=$1
-host=$2
-port=$3
-lag=$(psql -h $host -p $port -A -t -c "SELECT COALESCE(EXTRACT(EPOCH FROM replay_lag),0) FROM pg_stat_replication WHERE usename='$user'" 2>/dev/null)
-exit_code=$?
-if [[ $exit_code -ne 0 ]]; then
-  echo "UNKNOWN - Impossible to run psql command"
-  exit $STATE_UNKNOWN
-elif [[ -z "$lag" ]]; then
-  echo "UNKNOWN - No replication found for $user"
-  exit $STATE_UNKNOWN
-else
-  output="Replication lag for $user is ${lag}s"
-  LC_ALL=C lag=$(printf "%.*f" 0 $lag)
-  if [[ $lag -lt 5 ]]; then
-    echo "OK - $output | time=${lag}s;5;10;0;"
-    exit $STATE_OK
-  elif [[ $lag -lt 10 ]]; then
-    echo "WARNING - $output | time=${lag}s;5;10;0;"
-    exit $STATE_WARNING
-  else
-    echo "CRITICAL - $output | time=${lag}s;5;10;0;"
-    exit $STATE_CRITICAL
-  fi
-fi
diff --git a/modules/private/monitoring/plugins/check_redis_replication b/modules/private/monitoring/plugins/check_redis_replication
deleted file mode 100755
index 6dbe4c4..0000000
--- a/modules/private/monitoring/plugins/check_redis_replication
+++ /dev/null
@@ -1,38 +0,0 @@
-#!/bin/bash
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-socket=$1
-info=$(redis-cli -s $socket info replication)
-lag=$(echo "$info" | grep master_last_io_seconds_ago | cut -d":" -f2 | sed -e "s/\s//g")
-slave_offset=$(echo "$info" | grep slave_repl_offset | cut -d":" -f2 | sed -e "s/\s//g")
-master_offset=$(echo "$info" | grep master_repl_offset | cut -d":" -f2 | sed -e "s/\s//g")
-offset=$(($master_offset - $slave_offset))
-exit_code=$?
-if [[ $exit_code -ne 0 ]]; then
-  echo "UNKNOWN - Impossible to run redis command"
-  exit $STATE_UNKNOWN
-elif [[ -z "$lag" ]]; then
-  echo "UNKNOWN - No replication found"
-  exit $STATE_UNKNOWN
-else
-  output="Replication lag for redis is ${lag}s and offset is ${offset}"
-  LC_ALL=C lag=$(printf "%.*f" 0 $lag)
-  if [[ $lag -lt 5 && $offset -lt 5 ]]; then
-    echo "OK - $output | time=${lag}s;5;10;0; offset=${offset};5;10;0;"
-    exit $STATE_OK
-  elif [[ $lag -lt 10 && $offset -lt 10 ]]; then
-    echo "WARNING - $output | time=${lag}s;5;10;0; offset=${offset};5;10;0;"
-    exit $STATE_WARNING
-  else
-    echo "CRITICAL - $output | time=${lag}s;5;10;0; offset=${offset};5;10;0;"
-    exit $STATE_CRITICAL
-  fi
-fi
diff --git a/modules/private/monitoring/plugins/check_zfs_snapshot b/modules/private/monitoring/plugins/check_zfs_snapshot
deleted file mode 100755
index 56f8c4f..0000000
--- a/modules/private/monitoring/plugins/check_zfs_snapshot
+++ /dev/null
@@ -1,325 +0,0 @@
-#! /bin/sh
-OS=$(uname)
-# MIT License
-#
-# Copyright (c) 2016 Josef Friedrich <josef@friedrich.rocks>
-#
-# Permission is hereby granted, free of charge, to any person obtaining
-# a copy of this software and associated documentation files (the
-# "Software"), to deal in the Software without restriction, including
-# without limitation the rights to use, copy, modify, merge, publish,
-# distribute, sublicense, and/or sell copies of the Software, and to
-# permit persons to whom the Software is furnished to do so, subject to
-# the following conditions:
-#
-# The above copyright notice and this permission notice shall be
-# included in all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-# IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
-# CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
-# TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
-# SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-########################################################################
-# Date functions
-########################################################################
-# This date function must be placed on the top of this file because
-# they are used in some global variables.
-# to_year ###
-##
-# Get the four digit year integer from now.
-#
-# Return:
-#   The current 4 digit year.
-##
-_now_to_year() {
-        date +%Y
-}
-##
-# Convert a date in the format YYYY-MM-DD to a four digit year integer.
-#
-# Parameters:
-#   a date in the format YYYY-MM-DD
-#
-# Return:
-#   four digit year integer
-##
-_date_to_year() {
-        local OPTIONS
-        if [ "$OS" = 'Linux' ]; then
-                OPTIONS="--date $1"
-        # FreeBSD, Darwin
-        else
-                OPTIONS="-j -f %Y-%m-%d $1"
-        fi
-        date $OPTIONS +%Y
-}
-# to_datetime ###
-##
-# Convert a UNIX timestamp to a datetime string.
-#
-# Parameters:
-#   UNIX timestamp
-#
-# Return:
-#   %Y-%m-%d.%H:%M:%S
-##
-_timestamp_to_datetime() {
-        local OPTIONS
-        if [ "$OS" = 'Linux' ]; then
-                OPTIONS="--date @$1"
-        # FreeBSD, Darwin
-        else
-                OPTIONS="-j -f %s $1"
-        fi
-        date $OPTIONS +%Y-%m-%d.%H:%M:%S
-}
-# to_timestamp ###
-##
-# Get the current UNIX timestamp.
-#
-# Return:
-#   %current UNIX timestamp
-##
-_now_to_timestamp() {
-        date +%s
-}
-PROJECT_PAGES='https://github.com/Josef-Friedrich/check_zfs_snapshot
-https://exchange.icinga.com/joseffriedrich/check_zfs_snapshot
-https://exchange.nagios.org/directory/Plugins/System-Metrics/File-System/check_zfs_snapshot/details'
-VERSION=1.2
-FIRST_RELEASE=2016-09-08
-SHORT_DESCRIPTION="Monitoring plugin to check how long ago the last \
-snapshot of a ZFS dataset was created."
-USAGE="check_zfs_snapshot v$VERSION
-Copyright (c) $(_date_to_year $FIRST_RELEASE)-$(_now_to_year) \
-Josef Friedrich <josef@friedrich.rocks>
-$SHORT_DESCRIPTION
-Usage: check_zfs_snapshot <options>
-Options:
- -c, --critical=OPT_CRITICAL
-    Interval in seconds for critical state.
- -d, --dataset=OPT_DATASET
-    The ZFS dataset to check.
- -h, --help
-    Show this help.
- -s, --short-description
-    Show a short description of the command.
- -v, --version
-    Show the version number.
- -w, --warning=OPT_WARNING
-    Interval in seconds for warning state. Must be lower than -c
-Performance data:
- - last_ago
-    Time interval in seconds for last snapshot.
- - warning
-    Interval in seconds.
- - critical
-    Interval in seconds.
- - snapshot_count
-    How many snapshot exists in the given dataset and all child
-    datasets exists.
-"
-# Exit codes
-STATE_OK=0
-STATE_WARNING=1
-STATE_CRITICAL=2
-STATE_UNKNOWN=3
-_get_last_snapshot() {
-        zfs get creation -Hpr -t snapshot "$1" | \
-                awk 'BEGIN {max = 0} {if ($3>max) max=$3} END {print max}'
-}
-_getopts() {
-        while getopts ':c:d:hsvw:-:' OPT ; do
-                case $OPT in
-                        c)
-                                OPT_CRITICAL=$OPTARG
-                                ;;
-                        d)
-                                OPT_DATASET="$OPTARG"
-                                ;;
-                        h)
-                                echo "$USAGE"
-                                exit 0
-                                ;;
-                        s)
-                                echo "$SHORT_DESCRIPTION"
-                                exit 0
-                                ;;
-                        v)
-                                echo "$VERSION"
-                                exit 0
-                                ;;
-                        w)
-                                OPT_WARNING=$OPTARG
-                                ;;
-                        \?)
-                                echo "Invalid option “-$OPTARG”!" >&2
-                                exit 2
-                                ;;
-                        :)
-                                echo "Option “-$OPTARG” requires an argument!" >&2
-                                exit 3
-                                ;;
-                        -)
-                                LONG_OPTARG="${OPTARG#*=}"
-                                case $OPTARG in
-                                        critical=?*)
-                                                OPT_CRITICAL=$LONG_OPTARG
-                                                ;;
-                                        dataset=?*)
-                                                OPT_DATASET="$LONG_OPTARG"
-                                                ;;
-                                        help)
-                                                echo "$USAGE"
-                                                exit 0
-                                                ;;
-                                        short-description)
-                                                echo "$SHORT_DESCRIPTION"
-                                                exit 0
-                                                ;;
-                                        version)
-                                                echo "$VERSION"
-                                                exit 0
-                                                ;;
-                                        warning=?*)
-                                                OPT_WARNING=$LONG_OPTARG
-                                                ;;
-                                        critical*|dataset*|warning*)
-                                                echo "Option “--$OPTARG” requires an argument!" >&2
-                                                exit 3
-                                                ;;
-                                        help*|short-description*|version*)
-                                                echo "No argument allowed for the option “--$OPTARG”!" >&2
-                                                exit 4
-                                                ;;
-                                        '')     # "--" terminates argument processing
-                                                break
-                                                ;;
-                                        *)
-                                                echo "Invalid option “--$OPTARG”!" >&2
-                                                exit 2
-                                                ;;
-                                esac
-                                ;;
-                esac
-        done
-}
-_snapshot_count() {
-        # FreeBSD wc adds some whitespaces before the number!
-        # cat $HOME/debug | wc -l
-        #        7
-        local COUNT
-        COUNT="$(zfs list -t snapshot | grep "$1" | wc -l)"
-        echo $COUNT
-}
-_performance_data() {
-        echo "| \
-last_ago=${DIFF}s;$OPT_WARNING;$OPT_CRITICAL;0 \
-count=$(_snapshot_count "$OPT_DATASET");;;0\
-"
-}
-## This SEPARATOR is required for test purposes. Please don’t remove! ##
-_getopts $@
-if [ -z "$OPT_WARNING" ]; then
-        # 1 day
-        OPT_WARNING=86400
-fi
-if [ -z "$OPT_CRITICAL" ]; then
-        # 3 day
-        OPT_CRITICAL=259200
-fi
-if [ -z "$OPT_DATASET" ]; then
-        echo "Dataset has to be set! Use option -d <dataset>" >&2
-        echo "$USAGE" >&2
-        exit $STATE_UNKNOWN
-fi
-if ! zfs list "$OPT_DATASET" > /dev/null 2>&1; then
-        echo "'$OPT_DATASET' is no ZFS dataset!" >&2
-        echo "$USAGE" >&2
-        exit $STATE_UNKNOWN
-fi
-NOW=$(_now_to_timestamp)
-CREATION_DATE=$(_get_last_snapshot "$OPT_DATASET")
-DIFF=$((NOW - CREATION_DATE))
-if [ "$OPT_WARNING" -gt "$OPT_CRITICAL" ]; then
-        echo '-w OPT_WARNING must be smaller than -c OPT_CRITICAL'
-        _usage >&2
-        exit $STATE_UNKNOWN
-fi
-RETURN=STATE_UNKNOWN
-if [ "$DIFF" -gt "$OPT_CRITICAL" ]; then
-        RETURN=$STATE_CRITICAL
-        MESSAGE="CRITICAL:"
-elif [ "$DIFF" -gt "$OPT_WARNING" ]; then
-        RETURN=$STATE_WARNING
-        MESSAGE="WARNING:"
-else
-        RETURN=$STATE_OK
-        MESSAGE="OK:"
-fi
-DATE="$(_timestamp_to_datetime "$CREATION_DATE")"
-echo "$MESSAGE Last snapshot for dataset '$OPT_DATASET' was created on $DATE $(_performance_data)"
-exit $RETURN
diff --git a/modules/private/monitoring/plugins/notify_by_email b/modules/private/monitoring/plugins/notify_by_email
deleted file mode 100755
index 959db26..0000000
--- a/modules/private/monitoring/plugins/notify_by_email
+++ /dev/null
@@ -1,29 +0,0 @@
-#!/usr/bin/env bash
-# $1 = service/host
-# $2 = type (PROBLEM RECOVERY ACKNOWLEDGEMENT FLAPPINGSTART FLAPPINGSTOP FLAPPINGDISABLED DOWNTIMESTART DOWNTIMESTOP DOWNTIMECANCELLED)
-# http://www.naemon.org/documentation/usersguide/macrolist.html#notificationtype
-# $3 = host alias
-# $4 = date (YYYY-MM-DDTHH:MM:SS)
-# $5 = E-mail
-NOTIFICATION_TYPE="$2"
-HOST_ALIAS="$3"
-DATE="$4"
-CONTACT="$5"
-message=""
-if [ "$1" = "host" ]; then
-  message=$(printf "%b" "***** Naemon *****\n\nNotification Type: $NOTIFICATION_TYPE\n\nHost: $HOST_ALIAS\nState: $HOSTSTATE\nInfo: $HOSTOUTPUT\n\nDate/Time: $DATE\n")
-  subject="** $NOTIFICATION_TYPE Host Alert: $HOST_ALIAS is $HOSTSTATE **"
-else
-  message=$(printf "%b" "***** Naemon *****\n\nNotification Type: $NOTIFICATION_TYPE\n\nService: $SERVICEDESC\nHost: $HOST_ALIAS\nState: $SERVICESTATE\n\nDate/Time: $DATE\n\nAdditional Info:\n\n$SERVICEOUTPUT\n")
-  subject="** $NOTIFICATION_TYPE Service Alert: $HOST_ALIAS/$SERVICEDESC is $SERVICESTATE **"
-fi
-echo "$message" | MAILRC=/dev/null mail -r "$ADMINEMAIL" -n -s "$subject" "$CONTACT"
diff --git a/modules/private/monitoring/plugins/notify_by_slack b/modules/private/monitoring/plugins/notify_by_slack
deleted file mode 100755
index 1b16a0d..0000000
--- a/modules/private/monitoring/plugins/notify_by_slack
+++ /dev/null
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-SLACK_CHANNEL="$1"
-SLACK_USERNAME="Naemon"
-SLACK_URL="$2"
-SLACK_USERICON="https://assets.immae.eu/monitoring.png"
-if [ "$SERVICESTATE" = "CRITICAL" ]; then
-  ICON=":exclamation:"
-  COLOR="#DA0505"
-elif [ "$SERVICESTATE" = "WARNING" ]; then
-  ICON=":warning:"
-  COLOR="#F1E903"
-elif [ "$SERVICESTATE" = "OK" ]; then
-  ICON=":white_check_mark:"
-  COLOR="#36a64f"
-elif [ "$SERVICESTATE" = "UNKNOWN" ]; then
-  ICON=":question:"
-  COLOR="#000000"
-else
-  ICON=":white_medium_square:"
-  COLOR="#ffffff"
-fi
-payload=$(echo "{}" | jq -r \
-  --arg "icon_url" "$SLACK_USERICON" \
-  --arg "channel"  "$SLACK_CHANNEL" \
-  --arg "username" "$SLACK_USERNAME" \
-  --arg "text" "${ICON} ${SERVICEDESC} on ${HOST} is ${SERVICESTATE}" \
-  --arg "color" "$COLOR" \
-  --arg "host" "$HOST" \
-  --arg "desc" "$SERVICEDESC" \
-  --arg "state" "$SERVICESTATE" \
-  --arg "output" "$SERVICEOUTPUT" \
-  '.icon_url = $icon_url |
-   .channel = $channel |
-   .username = $username |
-   .text = $text |
-   .attachments = [{fallback:"", color:$color,fields: [{},{},{},{}]}] |
-   .attachments[0].fields[0] = {title:"Host",value:$host,short:true} |
-   .attachments[0].fields[1] = {title:"Service description",value:$desc,short:true} |
-   .attachments[0].fields[2] = {title:"Status",value:$state,short:true} |
-   .attachments[0].fields[3] = {title:"Message",value:$output,short:false}
-   ')
-curl -X POST --data "payload=$payload" $SLACK_URL
diff --git a/modules/private/monitoring/plugins/notify_eban_url b/modules/private/monitoring/plugins/notify_eban_url
deleted file mode 100755
index 107b5de..0000000
--- a/modules/private/monitoring/plugins/notify_eban_url
+++ /dev/null
@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-if [ "$SERVICESTATE" = "CRITICAL" -o "$SERVICESTATE" = "UNKNOWN" -o "$HOSTSTATE" = "DOWN" -o "$HOSTSTATE" = "UNREACHABLE" ]; then
-  MESSAGE="$STATUS_NAME seems down!"
-  curl -X GET -G --data-urlencode "user=$USER" --data-urlencode "pass=$PASSWORD" --data-urlencode "msg=$MESSAGE" https://smsapi.free-mobile.fr/sendmsg
-fi
diff --git a/modules/private/monitoring/plugins/send_nrdp.sh b/modules/private/monitoring/plugins/send_nrdp.sh
deleted file mode 100755
index c83c8cb..0000000
--- a/modules/private/monitoring/plugins/send_nrdp.sh
+++ /dev/null
@@ -1,57 +0,0 @@
-#!/bin/bash
-TEMPLATE='{
-  "cmd": "submitcheck",
-  "token": $token,
-  "checkresult": [{
-    "hostname": $hostname,
-    "state": $state,
-    "output": $output,
-    "type": $type,
-    "servicename": $servicename
-  }]
-}'
-while getopts "u:t:H:s:S:o:" option
-do
-  case $option in
-    u) url=$OPTARG ;;
-    t) token=$OPTARG ;;
-    H) hostname=$OPTARG ;;
-    s) servicename=$OPTARG ;;
-    S) state=$OPTARG ;;
-    o) output=$OPTARG ;;
-  esac
-done
-if [ -n "$servicename" ]; then
-  checktype="service"
-else
-  checktype="host"
-fi
-payload=$(jq -n \
-   --arg type "$checktype" \
-   --arg hostname "$hostname" \
-   --arg servicename "$servicename" \
-   --arg output "$output" \
-   --arg token "$token" \
-   --arg state "$state" \
-   "$TEMPLATE")
-rslt=$(curl -f --silent --insecure -d "$payload" -H "Content-Type: application/json" "$url")
-ret=$?
-if [ $ret != 0 ];then
-  echo "ERROR: could not connect to NRDP server at $url"
-  exit 1
-fi
-status=$(echo "$rslt" | jq -r .status)
-message=$(echo "$rslt" | jq -r .message)
-if [ "$status" != "ok" ];then
-  echo "ERROR: The NRDP Server said $message"
-  exit 2
-fi
-echo "Sent 1 checks to $url"
diff --git a/modules/private/monitoring/send_mails b/modules/private/monitoring/send_mails
deleted file mode 100755
index 105c505..0000000
--- a/modules/private/monitoring/send_mails
+++ /dev/null
@@ -1,15 +0,0 @@
-#!/usr/bin/env bash
-CHECK_DIR=$1
-shift
-RETURN_PATH=$1
-shift
-for mail in "$@"; do
-  echo "Test Mail" | MAILRC=/dev/null mail -n -r "$RETURN_PATH" -s "TestMailImmae " "$mail"
-done
-if [ -d "$CHECK_DIR" ]; then
-  cd $CHECK_DIR
-  stat -c '%n;%y' *
-fi
diff --git a/modules/private/monitoring/status.nix b/modules/private/monitoring/status.nix
deleted file mode 100644
index ab0290c..0000000
--- a/modules/private/monitoring/status.nix
+++ /dev/null
@@ -1,93 +0,0 @@
-{ config, pkgs, lib, name, ... }:
-{
-  options = {
-    myServices.status = {
-      enable = lib.mkOption {
-        type = lib.types.bool;
-        default = false;
-        description = ''
-          Whether to enable status app.
-        '';
-      };
-    };
-  };
-  config = lib.mkIf config.myServices.status.enable {
-    secrets.keys."naemon-status/environment" = {
-      user = "naemon";
-      group = "naemon";
-      permissions = "0400";
-      text = ''
-        TOKENS=${builtins.concatStringsSep " " config.myEnv.monitoring.nrdp_tokens}
-        '';
-    };
-    services.nginx = {
-      enable = true;
-      recommendedOptimisation = true;
-      recommendedGzipSettings = true;
-      recommendedProxySettings = true;
-      upstreams."netdata".servers = { "127.0.0.1:19999" = {}; };
-      upstreams."netdata".extraConfig = ''
-        keepalive 64;
-        '';
-      virtualHosts."status.eban.bzh" = {
-        acmeRoot = config.myServices.certificates.webroot;
-        useACMEHost = name;
-        forceSSL = true;
-        locations."/".proxyPass = "http://unix:/run/naemon-status/socket.sock:/";
-      };
-      virtualHosts."status.immae.eu" = {
-        acmeRoot = config.myServices.certificates.webroot;
-        useACMEHost = name;
-        forceSSL = true;
-        locations."/".proxyPass = "http://unix:/run/naemon-status/socket.sock:/";
-        locations."= /netdata".return = "301 /netdata/";
-        locations."~ /netdata/(?<ndpath>.*)".extraConfig = ''
-          proxy_redirect off;
-          proxy_set_header Host $host;
-          proxy_set_header X-Forwarded-Host $host;
-          proxy_set_header X-Forwarded-Server $host;
-          proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-          proxy_http_version 1.1;
-          proxy_pass_request_headers on;
-          proxy_set_header Connection "keep-alive";
-          proxy_store off;
-          proxy_pass http://netdata/$ndpath$is_args$args;
-          gzip on;
-          gzip_proxied any;
-          gzip_types *;
-          '';
-      };
-    };
-    security.acme.certs."${name}" = {
-      extraDomains."status.immae.eu" = null;
-      extraDomains."status.eban.bzh" = null;
-      user = config.services.nginx.user;
-      group = config.services.nginx.group;
-    };
-    myServices.certificates.enable = true;
-    networking.firewall.allowedTCPPorts = [ 80 443 ];
-    systemd.services.naemon-status = {
-      description = "Naemon status";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        EnvironmentFile = config.secrets.fullPaths."naemon-status/environment";
-        Type = "simple";
-        WorkingDirectory = "${./status}";
-        ExecStart = let
-          python = pkgs.python3.withPackages (p: [ p.gunicorn p.flask p.flask_login ]);
-        in
-          "${python}/bin/gunicorn -w4 --bind unix:/run/naemon-status/socket.sock app:app";
-        User = "naemon";
-        RuntimeDirectory = "naemon-status";
-        StandardOutput = "journal";
-        StandardError = "inherit";
-      };
-    };
-  };
-}
diff --git a/modules/private/monitoring/status/app.py b/modules/private/monitoring/status/app.py
deleted file mode 100755
index ff92891..0000000
--- a/modules/private/monitoring/status/app.py
+++ /dev/null
@@ -1,414 +0,0 @@
-from flask import Flask, request, render_template_string, jsonify, make_response
-from flask_login import LoginManager, UserMixin, login_required
-import socket
-import json
-import time
-import os
-login_manager = LoginManager()
-app = Flask(__name__)
-login_manager.init_app(app)
-STATUS = [
-        "ok",
-        "warning",
-        "error",
-        "unknown"
-        ]
-HOST_STATUS = [
-        "up",
-        "down",
-        "unreachable",
-        ]
-#### Push
-AUTHORIZED_KEYS = os.environ.get("TOKENS", "").split()
-COMMAND_FILE = "/var/run/naemon/naemon.cmd"
-ERROR_NO_REQUEST_HANDLER="NO REQUEST HANDLER"
-ERROR_NO_TOKEN_SUPPLIED="NO TOKEN"
-ERROR_BAD_TOKEN_SUPPLIED="BAD TOKEN"
-ERROR_BAD_COMMAND_FILE="BAD COMMAND FILE"
-ERROR_COMMAND_FILE_OPEN_WRITE="COMMAND FILE UNWRITEABLE"
-ERROR_COMMAND_FILE_OPEN="CANNOT OPEN COMMAND FILE"
-ERROR_BAD_WRITE="WRITE ERROR"
-ERROR_BAD_DATA="BAD DATA"
-ERROR_BAD_JSON="BAD JSON"
-ERROR_NO_CORRECT_STATUS="NO STATUS WAS CORRECT"
-#### /Push
-def get_lq(request):
-    # https://mathias-kettner.de/checkmk_livestatus.html
-    socket_path="/var/run/naemon/live"
-    s = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
-    s.connect(socket_path)
-    s.send(request.encode())
-    s.shutdown(socket.SHUT_WR)
-    chunks = []
-    while len(chunks) == 0 or len(chunks[-1]) > 0:
-        chunks.append(s.recv(4096))
-    s.close()
-    return b"".join(chunks).decode()
-class Host:
-    def __init__(self, name, alias, status, webname, vhost):
-        self.name = name
-        self.alias = alias
-        self.webname = webname or alias
-        self.vhost = vhost
-        self.status = status
-        self.services = []
-    @classmethod
-    def parse_hosts(cls, payload, vhost):
-        parsed = filter(lambda x: x.vhost == vhost, [cls.parse(p) for p in json.loads(payload)])
-        return {p.name: p for p in parsed}
-    @classmethod
-    def parse(cls, payload):
-        return cls(payload[0], payload[1], HOST_STATUS[payload[2]], payload[3].get("WEBSTATUS_NAME"), payload[3].get("WEBSTATUS_VHOST"))
-    def __repr__(self):
-        return "Host {}: {} ({})".format(self.name, self.alias, self.webname)
-    @classmethod
-    def query(cls, vhost):
-        answer = get_lq("""GET hosts
-Filter: groups >= webstatus-hosts
-Columns: name alias state custom_variables
-OutputFormat: json
-""")
-        return cls.parse_hosts(answer, vhost)
-    def fill_services(self, services):
-        self.services = [service for service in services if service.host == self.name]
-class ServiceGroup:
-    def __init__(self, name, alias):
-        self.name = name
-        self.alias = alias
-        self.services = []
-    @classmethod
-    def parse_groups(cls, payload):
-        parsed = [cls.parse(p) for p in json.loads(payload)]
-        return {p.name: p for p in parsed}
-    @classmethod
-    def parse(cls, payload):
-        return cls(payload[0], payload[1])
-    @classmethod
-    def query(cls):
-        answer = get_lq("""GET servicegroups
-Filter: name ~ ^webstatus-
-Columns: name alias custom_variables
-OutputFormat: json
-""")
-        return cls.parse_groups(answer)
-    def fill_services(self, services, hosts):
-        self.services = [service for service in services if any([group == self.name for group in service.groups]) and service.host in hosts]
-    def __repr__(self):
-        return "ServiceGroup {}: {}".format(self.name, self.alias)
-class Service:
-    def __init__(self, name, host, groups, status, webname, url, description, infos):
-        self.name = name
-        self.host = host
-        self.groups = groups
-        self.status = status
-        self.webname = webname
-        self.url = url
-        self.description = description
-        self.infos = infos
-    @classmethod
-    def parse_services(cls, payload):
-        parsed = json.loads(payload)
-        return [cls.parse(p) for p in parsed if cls.valid(p[2])]
-    @staticmethod
-    def valid(groups):
-        return any([b.startswith("webstatus-") for b in groups])
-    @classmethod
-    def parse(cls, payload):
-        return cls(payload[0],
-                payload[1],
-                payload[2],
-                STATUS[payload[3]],
-                payload[4].get("WEBSTATUS_NAME"),
-                payload[4].get("WEBSTATUS_URL"),
-                payload[5],
-                payload[6])
-    @classmethod
-    def query(cls):
-        answer = get_lq("""GET services
-Columns: display_name host_name groups state custom_variables description plugin_output
-OutputFormat: json
-""")
-        return cls.parse_services(answer)
-    def __repr__(self):
-        return "Service {}: {}".format(self.name, self.webname)
-def get_infos(vhost):
-    hosts = Host.query(vhost)
-    servicegroups = ServiceGroup.query()
-    services = Service.query()
-    for host in hosts:
-        hosts[host].fill_services(services)
-    for group in servicegroups:
-        servicegroups[group].fill_services(services, hosts)
-    return (hosts, servicegroups, services)
-TEMPLATE='''<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd">
-<html lang="en" xmlns="http://www.w3.org/1999/xhtml">
-    <head>
-        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-        <meta name="viewport" content="width=device-width, initial-scale=1.0" />
-        <title>Status</title>
-        <meta name="referrer" content="no-referrer" />
-        <style type="text/css">
-        ul {
-            list-style: none;
-            margin: 0px;
-        }
-        ul li:nth-child(2n) {
-            background-color: rgb(240, 240, 240);
-        }
-        li.resource, li.service {
-            margin: 1px 0px;
-        }
-        span.status {
-            display: inline-block;
-            width: 150px;
-            text-align: center;
-            margin-right: 5px;
-            font-variant: small-caps;
-            font-size: 1.2em;
-        }
-        .status_ok,.status_up {
-            background-color: rgba(0, 255, 0, 0.5);;
-        }
-        .status_warning {
-            background-color: rgba(255, 255, 0, 0.5);;
-        }
-        .status_error,.status_down {
-            background-color: rgba(255, 0, 0, 0.5);;
-        }
-        .status_unknown,.status_unreachable {
-            background-color: rgba(0, 0, 255, 0.5);;
-        }
-        .infos {
-            margin-left: 40px;
-            color: rgb(100, 100, 100);
-        }
-        div#services {
-            column-count: auto;
-            column-width: 36em;
-        }
-        div.servicegroup {
-            -webkit-column-break-inside: avoid;
-            break-inside: avoid;
-        }
-        h3.servicegroup_title, h3.host_title {
-            margin: 1px 0px;
-        }
-        span.service_host, span.infos {
-            float: right;
-            display: inline-block;
-            color: rgb(100, 100, 100);
-        }
-        </style>
-    </head>
-    <body>
-        <h2>Hosts</h2>
-        {%- for host in hosts.values() %}
-            <h3 class="host_title">
-                <span class="status status_{{ host.status }}">{{ host.status }}</span>
-                <span class="host">{{ host.webname }}</span>
-            </h3>
-            {%- for service in servicegroups["webstatus-resources"].services if service.host == host.name -%}
-                {%- if loop.first %}
-                <ul class="resources">
-                {% endif %}
-                <li class="resource">
-                    <span class="status status_{{ service.status }}">{{ service.status }}</span>
-                    <span class="description">{{ service.description }}</span>
-                    <span class="infos">{{ service.infos }}</span>
-                </li>
-                {%- if loop.last %}
-                </ul>
-                {% endif %}
-            {% endfor %}
-        {%- endfor %}
-        {%- for group in servicegroups.values() if group.services and group.name != "webstatus-resources" %}
-        {%- if loop.first %}
-        <h2>Services</h2>
-        <div id="services">
-        {%- endif %}
-            <div class="servicegroup">
-            <h3 class="servicegroup_title">{{ group.alias }}</h3>
-            {%- for service in group.services if service.host in hosts -%}
-                {%- if loop.first %}
-                <ul class="services">
-                {% endif %}
-                <li class="service" title="{{ service.infos }}">
-                    <span class="status status_{{ service.status }}">{{ service.status }}</span>
-                    <span class="description">
-                        {% if service.url and service.url.startswith("https://") %}
-                        <a href="{{ service.url }}">{{ service.webname or service.description }}</a>
-                        {% else %}
-                        {{ service.webname or service.description }}
-                        {% endif %}
-                    </span>
-                    <span class="service_host">{{ hosts[service.host].webname }}</span>
-                </li>
-                {%- if loop.last %}
-                </ul>
-                {% endif %}
-            {%- endfor -%}
-            </div>
-        {%- if loop.last %}
-        </div>
-        {% endif %}
-        {%- endfor %}
-    </body>
-</html>
-'''
-@login_manager.request_loader
-def load_user_from_request(request):
-    api_key = request.headers.get('Token')
-    if api_key in AUTHORIZED_KEYS:
-        return UserMixin()
-    content = request.get_json(force=True, silent=True)
-    if content is not None and content.get("token") in AUTHORIZED_KEYS:
-        return UserMixin()
-@app.route("/live", methods=["POST"])
-@login_required
-def live():
-    query = request.get_data()
-    result = get_lq(query.decode() + "\n")
-    resp = make_response(result)
-    resp.content_type = "text/plain"
-    return resp
-@app.route("/", methods=["GET"])
-def get():
-    (hosts, servicegroups, services) = get_infos(request.host)
-    resp = make_response(render_template_string(TEMPLATE, hosts=hosts, servicegroups=servicegroups))
-    resp.content_type = "text/html"
-    return resp
-@app.route("/", methods=["POST"])
-@login_required
-def push():
-    content = request.get_json(force=True, silent=True)
-    if content is None:
-        return ERROR_BAD_JSON
-    if content.get("cmd") != "submitcheck":
-        return render_error(ERROR_NO_REQUEST_HANDLER)
-    if "checkresult" not in content or not isinstance(content["checkresult"], list):
-        return render_error(ERROR_BAD_DATA)
-    checks = 0
-    errors = 0
-    for check in map(lambda x: CheckResult.from_json(x), content["checkresult"]):
-        if check is None:
-            errors += 1
-            continue
-        try:
-            write_check_output(check)
-        except Exception as e:
-            return render_error(str(e))
-        checks += 1
-    return render_response(checks, errors)
-def write_check_output(check):
-    if check.type== "service":
-        command = "[{time}] PROCESS_SERVICE_CHECK_RESULT;{hostname};{servicename};{state};{output}";
-    else:
-        command = "[{time}] PROCESS_HOST_CHECK_RESULT;{hostname};{state};{output}";
-    formatted = command.format(
-            time=int(time.time()),
-            hostname=check.hostname,
-            state=check.state,
-            output=check.output,
-            servicename=check.servicename,
-        )
-    if not os.path.exists(COMMAND_FILE):
-        raise Exception(ERROR_BAD_COMMAND_FILE)
-    if not os.access(COMMAND_FILE, os.W_OK):
-        raise Exception(ERROR_COMMAND_FILE_OPEN_WRITE)
-    if not os.access(COMMAND_FILE, os.W_OK):
-        raise Exception(ERROR_COMMAND_FILE_OPEN_WRITE)
-    try:
-        with open(COMMAND_FILE, "w") as c:
-            c.write(formatted + "\n")
-    except Exception as e:
-        raise Exception(ERROR_BAD_WRITE)
-def render_error(error):
-    return jsonify({
-            "status": "error",
-            "message": error,
-            })
-def render_response(checks, errors):
-    if checks > 0:
-        return jsonify({
-            "status": "ok",
-            "result": {
-                "checks": checks,
-                "errors": errors,
-                }
-            })
-    else:
-        return jsonify({
-            "status": "error",
-            "message": ERROR_NO_CORRECT_STATUS,
-            })
-class CheckResult:
-    def __init__(self, hostname, state, output, servicename, checktype):
-        self.hostname = hostname
-        self.state = state
-        self.output = output
-        self.servicename = servicename
-        self.type = checktype
-    @classmethod
-    def from_json(klass, j):
-        if not isinstance(j, dict):
-            return None
-        for key in ["hostname", "state", "output"]:
-            if key not in j or not isinstance(j[key], str):
-                return None
-        for key in ["servicename", "type"]:
-            if key in j and not isinstance(j[key], str):
-                return None
-        return klass(
-                j["hostname"],
-                j["state"],
-                j["output"],
-                j.get("servicename", ""),
-                j.get("type", "host"))
diff --git a/modules/private/monitoring/status_engine.nix b/modules/private/monitoring/status_engine.nix
deleted file mode 100644
index 39a753a..0000000
--- a/modules/private/monitoring/status_engine.nix
+++ /dev/null
@@ -1,115 +0,0 @@
-{ config, pkgs, lib, name, ... }:
-let
-  package = pkgs.status_engine.worker.override { config_file = config.secrets.fullPaths."status_engine"; };
-  env = config.myEnv.tools.status_engine;
-in
-{
-  config = lib.mkIf config.myServices.status.enable {
-    systemd.services.gearmand = {
-      description = "Gearman daemon";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        DynamicUser = true;
-        User = "gearmand";
-        Type = "simple";
-        ExecStart = "${pkgs.gearmand}/bin/gearmand --syslog -L 127.0.0.1 -q libsqlite3 --libsqlite3-db /var/lib/gearmand/gearmand.db --store-queue-on-shutdown -l stderr -P /run/gearmand/gearmand.pid";
-        RuntimeDirectory = "gearmand";
-        StateDirectory = "gearmand";
-      };
-    };
-    secrets.keys."status_engine" = {
-      permissions = "0400";
-      user = "naemon";
-      group = "naemon";
-      text = ''
-        node_name: ${name}
-        use_gearman: 1
-        gearman:
-          address: 127.0.0.1
-          port: 4730
-          timeout: 1000
-        use_rabbitmq: 0
-        use_redis: 1
-        redis:
-          address: 127.0.0.1
-          port: 6379
-          db: 0
-        store_live_data_in_archive_backend: 1
-        use_mysql: 1
-        mysql:
-          host: ${env.mysql.remoteHost}
-          port: ${env.mysql.port}
-          username: ${env.mysql.user}
-          password: ${env.mysql.password}
-          database: ${env.mysql.database}
-        use_crate: 0
-        number_of_bulk_records: 100
-        max_bulk_delay: 5
-        number_servicestatus_worker: 1
-        number_hoststatus_worker: 1
-        number_logentry_worker: 1
-        number_statechange_worker: 1
-        number_hostcheck_worker: 1
-        number_servicecheck_worker: 1
-        number_misc_worker: 1
-        process_perfdata: 1
-        number_perfdata_worker: 1
-        perfdata_backend:
-          - mysql
-        check_for_commands: 1
-        command_check_interval: 15
-        external_command_file: /run/naemon/naemon.cmd
-        query_handler: /run/naemon/naemon.qh
-        submit_method: qh
-        syslog_enabled: 1
-        syslog_tag: statusengine-worker
-        # Archive age
-        age_hostchecks: 5
-        age_host_acknowledgements: 60
-        age_host_notifications: 60
-        age_host_statehistory: 365
-        age_host_downtimes: 60
-        age_servicechecks: 5
-        age_service_acknowledgements: 60
-        age_service_notifications: 60
-        age_service_statehistory: 365
-        age_service_downtimes: 60
-        age_logentries: 5
-        age_tasks: 1
-        age_perfdata: 90
-        disable_http_proxy: 1
-      '';
-    };
-    services.redis = rec {
-      enable = true;
-      bind = "127.0.0.1";
-    };
-    services.cron = {
-      mailto = "cron@immae.eu";
-      systemCronJobs = [
-        "0 0 * * * naemon cd ${package} && ./bin/Console.php cleanup"
-      ];
-    };
-    systemd.services.status_engine_worker = {
-      description = "Status engine worker";
-      after = [ "network.target" ];
-      wantedBy = [ "multi-user.target" ];
-      serviceConfig = {
-        Type = "simple";
-        Restart = "on-failure";
-        User = "naemon";
-        ExecStart = "${package}/bin/StatusengineWorker.php";
-      };
-    };
-  };
-}
diff --git a/modules/private/monitoring/to_objects.nix b/modules/private/monitoring/to_objects.nix
deleted file mode 100644
index 12721d2..0000000
--- a/modules/private/monitoring/to_objects.nix
+++ /dev/null
@@ -1,77 +0,0 @@
-{ lib }:
-  with lib.attrsets;
-  with lib.strings;
-  with lib.lists;
-  with lib.trivial;
-let
-  pad = width: str: let
-      padWidth = width - stringLength str;
-      padding = concatStrings (genList (const " ") padWidth);
-    in str + optionalString (padWidth > 0) padding;
-  toStr = k: v:
-    if k == "check_command" && builtins.isList v
-    then builtins.concatStringsSep "!" v
-    else v;
-  toService = service: ''
-    define service {
-    ${builtins.concatStringsSep "\n" (mapAttrsToList (k: v:
-      "  ${pad 30 k}   ${toStr k v}"
-    ) (filterAttrs (k: v: ! builtins.elem k ["passiveInfo" "filter"]) service))}
-    }
-    '';
-  toServices = services: builtins.concatStringsSep "\n" (map toService services);
-  toCommand = k: v: ''
-    define command {
-      ${pad 30 "command_name"}   ${k}
-      ${pad 30 "command_line"}   ${v}
-    }
-    '';
-  toCommands = a: builtins.concatStringsSep "\n" (mapAttrsToList toCommand a);
-  toOther = keyname: k: v: ''
-    define ${keyname} {
-      ${pad 30 "${keyname}_name"}   ${k}
-    ${builtins.concatStringsSep "\n" (mapAttrsToList (kk: vv:
-      "  ${pad 30 kk}   ${vv}"
-    ) v)}
-    }
-    '';
-  toOtherNoName = keyname: v: ''
-    define ${keyname} {
-    ${builtins.concatStringsSep "\n" (mapAttrsToList (kk: vv:
-      "  ${pad 30 kk}   ${vv}"
-    ) v)}
-    }
-    '';
-  toOthers = keyname: a: builtins.concatStringsSep "\n" (mapAttrsToList (toOther keyname) a);
-  toOthersArray = keyname: a: builtins.concatStringsSep "\n" (map (toOtherNoName keyname) a);
-  toTemplate = keyname: k: v: ''
-    define ${keyname} {
-      ${pad 30 "name"}   ${k}
-      ${pad 30 "register"}   0
-    ${builtins.concatStringsSep "\n" (mapAttrsToList (kk: vv:
-      "  ${pad 30 kk}   ${vv}"
-    ) v)}
-    }
-    '';
-  toTemplates' = keyname: a: builtins.concatStringsSep "\n" (mapAttrsToList (toTemplate keyname) a);
-  toTemplates = v: builtins.concatStringsSep "\n" (mapAttrsToList toTemplates' v);
-  toObjects' = keyname: v:
-    if keyname == "service"
-      then toServices v
-    else if keyname == "command"
-      then toCommands v
-    else if keyname == "templates"
-      then toTemplates v
-    else if builtins.elem keyname ["hostgroup" "host" "contactgroup" "contact" "timeperiod" "servicegroup"]
-      then toOthers keyname v
-    else if builtins.elem keyname ["servicedependency"]
-      then toOthersArray keyname v
-    else "";
-  toObjects = v: builtins.concatStringsSep "\n" (mapAttrsToList toObjects' v);
-in
-  toObjects