]> git.donarmstrong.com Git - dsa-puppet.git/blob - modules/nagios/manifests/client.pp
85c471fc9bde87555868f39fcbd79582828f1a1f
[dsa-puppet.git] / modules / nagios / manifests / client.pp
1 class nagios::client inherits nagios {
2         package {
3                 dsa-nagios-nrpe-config: ensure => purged;
4                 dsa-nagios-checks: ensure => installed;
5         }
6
7         file {
8                 "/etc/default/nagios-nrpe-server":
9                         source  => [ "puppet:///nagios/per-host/$fqdn/default",
10                                      "puppet:///nagios/common/default" ],
11                         require => Package["nagios-nrpe-server"],
12                         notify  => Exec["nagios-nrpe-server restart"];
13                 "/etc/default/nagios-nrpe":
14                         ensure  => absent,
15                         notify  => Exec["nagios-nrpe-server restart"];
16                 "/etc/nagios/nrpe.cfg":
17                         source  => [ "puppet:///nagios/per-host/$fqdn/nrpe.cfg",
18                                      "puppet:///nagios/common/nrpe.cfg" ],
19                         require => Package["nagios-nrpe-server"],
20                         notify  => Exec["nagios-nrpe-server restart"];
21                 "/etc/nagios/nrpe.d":
22                         mode    => 755,
23                         require => Package["nagios-nrpe-server"],
24                         ensure  => directory;
25                 "/etc/nagios/nrpe.d/debianorg.cfg":
26                         content => template("nagios/inc-debian.org.erb"),
27                         require => Package["nagios-nrpe-server"],
28                         notify  => Exec["nagios-nrpe-server restart"];
29                 "/etc/nagios/nrpe.d/nrpe_dsa.cfg":
30                         source  => [ "puppet:///nagios/dsa-nagios/generated/nrpe_dsa.cfg" ],
31                         require => Package["dsa-nagios-checks"],
32                         notify  => Exec["nagios-nrpe-server restart"];
33
34                 "/etc/nagios/obsolete-packages-ignore":
35                         source  => [ "puppet:///nagios/per-host/$fqdn/obsolete-packages-ignore",
36                                      "puppet:///nagios/common/obsolete-packages-ignore" ],
37                         require => Package["dsa-nagios-checks"];
38
39                 "/etc/nagios/obsolete-packages-ignore.d/hostspecific":
40                         content => template("nagios/obsolete-packages-ignore.d-hostspecific.erb"),
41                         require => Package["dsa-nagios-checks"];
42         }
43
44         exec { "nagios-nrpe-server restart":
45                 path        => "/etc/init.d:/usr/bin:/usr/sbin:/bin:/sbin",
46                 refreshonly => true,
47         }
48         @ferm::rule { "dsa-nagios-v4":
49                 description     => "Allow nrpe from nagios master",
50                 rule            => "proto tcp mod state state (NEW) dport (5666) @subchain 'nagios' { saddr (\$HOST_NAGIOS_V4) ACCEPT; }"
51         }
52         @ferm::rule { "dsa-nagios-v6":
53                 description     => "Allow nrpe from nagios master",
54                 domain          => "ip6",
55                 rule            => "proto tcp mod state state (NEW) dport (5666) @subchain 'nagios' { saddr (\$HOST_NAGIOS_V6) ACCEPT; }"
56         }
57 }