10 files changed, 111 insertions, 5 deletions

diff --git a/systems/backup-2/flake.lock b/systems/backup-2/flake.lock
index c2a087b..5a21b51 100644
--- a/systems/backup-2/flake.lock
+++ b/systems/backup-2/flake.lock
@@ -417,7 +417,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hkZiW8Nyd9pNIXhV/AQaJZQ1peOvTBMD8zjEtSAkh3E=",
+        "narHash": "sha256-d2Qc6vQHwjxXQqM76iLVNMFFux1HUZcpGZ8A8hPkYlE=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
diff --git a/systems/dilion/flake.lock b/systems/dilion/flake.lock
index 0156cab..c55de32 100644
--- a/systems/dilion/flake.lock
+++ b/systems/dilion/flake.lock
@@ -207,7 +207,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hkZiW8Nyd9pNIXhV/AQaJZQ1peOvTBMD8zjEtSAkh3E=",
+        "narHash": "sha256-d2Qc6vQHwjxXQqM76iLVNMFFux1HUZcpGZ8A8hPkYlE=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
diff --git a/systems/eldiron/flake.lock b/systems/eldiron/flake.lock
index 8392aa7..52b9d03 100644
--- a/systems/eldiron/flake.lock
+++ b/systems/eldiron/flake.lock
@@ -2066,7 +2066,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hkZiW8Nyd9pNIXhV/AQaJZQ1peOvTBMD8zjEtSAkh3E=",
+        "narHash": "sha256-d2Qc6vQHwjxXQqM76iLVNMFFux1HUZcpGZ8A8hPkYlE=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
diff --git a/systems/monitoring-1/flake.lock b/systems/monitoring-1/flake.lock
index eb2e4a9..5685340 100644
--- a/systems/monitoring-1/flake.lock
+++ b/systems/monitoring-1/flake.lock
@@ -277,7 +277,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hkZiW8Nyd9pNIXhV/AQaJZQ1peOvTBMD8zjEtSAkh3E=",
+        "narHash": "sha256-d2Qc6vQHwjxXQqM76iLVNMFFux1HUZcpGZ8A8hPkYlE=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
diff --git a/systems/monitoring-1/monitoring-master.nix b/systems/monitoring-1/monitoring-master.nix
index e9362d9..6981672 100644
--- a/systems/monitoring-1/monitoring-master.nix
+++ b/systems/monitoring-1/monitoring-master.nix
@@ -66,6 +66,10 @@ in
           $USER201$=@@TOKEN@@
         '';
       };
+      "=/common/.env.example".alias = ./monitoring/env.example;
+      "=/common/docker-compose.yml".alias = ./monitoring/docker-compose.yml;
+      "=/common/Dockerfile".alias = ./monitoring/Dockerfile;
+      "=/common/run.sh".alias = ./monitoring/run.sh;
     };
   };
 
diff --git a/systems/monitoring-1/monitoring/Dockerfile b/systems/monitoring-1/monitoring/Dockerfile
new file mode 100644
index 0000000..4bbf01b
--- /dev/null
+++ b/systems/monitoring-1/monitoring/Dockerfile
@@ -0,0 +1,35 @@
+FROM debian:bookworm
+
+ARG namespace
+
+RUN \
+  apt-get update && DEBIAN_FRONTEND=noninteractive apt-get install -y \
+    curl \
+    gnupg
+
+RUN \
+  curl -s "https://build.opensuse.org/projects/home:naemon/signing_keys/download?kind=gpg" | gpg --dearmor > /usr/share/keyrings/naemon.gpg \
+  && echo "deb [signed-by=/usr/share/keyrings/naemon.gpg] https://download.opensuse.org/repositories/home:/naemon/Debian_12/ ./" >> /etc/apt/sources.list.d/naemon-stable.list
+
+# Install the baseline packages for this image. Note, these 
+# packages are not version controlled and may change between
+# builds.
+RUN apt-get update && \
+  DEBIAN_FRONTEND=noninteractive \
+  # La liste des packages debian à installer est directement fournie par Immae
+  apt-get install -y $(curl https://status.immae.eu/$namespace/debian-packages)
+
+# Perform the data directory initialization
+RUN mkdir -p /data/var/log/naemon \
+    && rm -rf /var/log/naemon \
+    && ln -s /data/var/log/naemon /var/log/naemon \
+    && find /etc/naemon -type f -not -name "naemon.cfg" -delete
+
+# Add the bootstrap script
+RUN curl https://status.immae.eu/common/run.sh > /run.sh
+RUN chmod 755 /run.sh
+
+# All data is stored on the root data volme
+VOLUME ["/data"]
+
+ENTRYPOINT ["/run.sh"]
diff --git a/systems/monitoring-1/monitoring/docker-compose.yml b/systems/monitoring-1/monitoring/docker-compose.yml
new file mode 100644
index 0000000..b369463
--- /dev/null
+++ b/systems/monitoring-1/monitoring/docker-compose.yml
@@ -0,0 +1,15 @@
+services:
+  naemon:
+    build:
+      context: https://status.immae.eu/common/Dockerfile
+      args:
+        - namespace=${NAMESPACE}
+    container_name: naemon
+    restart: unless-stopped
+    environment:
+      - NOTIFY_REMOTE_TOKEN=${NOTIFY_REMOTE_TOKEN}
+      - NAMESPACE=${NAMESPACE}
+    pid: host
+    network_mode: host
+    volumes:
+      - ./data/log:/data/var/log/naemon
diff --git a/systems/monitoring-1/monitoring/env.example b/systems/monitoring-1/monitoring/env.example
new file mode 100644
index 0000000..bace5a5
--- /dev/null
+++ b/systems/monitoring-1/monitoring/env.example
@@ -0,0 +1,5 @@
+# Les deux variables ci-dessous sont à demander à Immae
+# Token pour notifier le serveur distant (immae)
+NOTIFY_REMOTE_TOKEN=
+# Namespace sur immae.eu
+NAMESPACE=
diff --git a/systems/monitoring-1/monitoring/run.sh b/systems/monitoring-1/monitoring/run.sh
new file mode 100644
index 0000000..9a57990
--- /dev/null
+++ b/systems/monitoring-1/monitoring/run.sh
@@ -0,0 +1,47 @@
+#!/bin/bash
+
+function graceful_exit(){
+  # Note, "service naemon stop" does not work in the phusion image
+  # We just kill the process rather than chase this down.
+  pkill naemon
+  exit $1
+}
+
+# Recup fichiers Ismael
+if [ -n "$NAMESPACE" ]; then
+  echo "Namespace: $NAMESPACE"
+else
+  echo "Le namespace n'a pas été défini dans \$NAMESPACE."
+  exit 1
+fi
+
+curl -o /etc/naemon/conf.d/objects.cfg "https://status.immae.eu/$NAMESPACE/objects.conf"
+curl -o /etc/naemon/module-conf.d/immae.cfg "https://status.immae.eu/common/immae.cfg"
+curl -o /etc/naemon/resource.cfg "https://status.immae.eu/common/resource.cfg"
+
+curl "https://status.immae.eu/$NAMESPACE/plugins.tar" | tar -C /etc/naemon -x
+
+sed -i -e "s|@@COMMON_PLUGINS@@|/usr/lib/naemon/plugins|" \
+       -e "s|@@IMMAE_PLUGINS@@|/etc/naemon/immae_plugins/|" \
+       -e "s|@@TOKEN@@|$NOTIFY_REMOTE_TOKEN|" \
+       /etc/naemon/resource.cfg
+
+# Ensure consistent ownership for the data volume, even if the
+# UID/GID's changes
+chown -R naemon:naemon /etc/naemon /data/var/log/naemon
+
+# Start the services
+service naemon start
+
+# Trap exit signals and do a proper shutdown
+trap "graceful_exit 0;" SIGINT SIGTERM
+
+sleep 5
+while true
+do
+  if ! [ -d "/proc/$(cat /var/run/naemon/naemon.pid)" ]; then
+    echo "Naemon no longer running"
+    graceful_exit 1
+  fi
+  sleep 1
+done
diff --git a/systems/quatresaisons/flake.lock b/systems/quatresaisons/flake.lock
index 6aab914..55bb07d 100644
--- a/systems/quatresaisons/flake.lock
+++ b/systems/quatresaisons/flake.lock
@@ -239,7 +239,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hkZiW8Nyd9pNIXhV/AQaJZQ1peOvTBMD8zjEtSAkh3E=",
+        "narHash": "sha256-d2Qc6vQHwjxXQqM76iLVNMFFux1HUZcpGZ8A8hPkYlE=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },