1 files changed, 78 insertions, 0 deletions
diff --git a/roles/nagios_server/vars/main.yml b/roles/nagios_server/vars/main.yml
new file mode 100644
index 0000000..aa8effa
--- /dev/null
+++ b/roles/nagios_server/vars/main.yml
@@ -0,0 +1,78 @@
+nagios_packages:
+  - nagios
+  - nagios-plugins-all
+  - nagios-contrib
+  - nagios-selinux
+  - perl-Net-SNMP
+  - perl-Getopt-Long
+  - perl-Crypt-Rijndael
+  - perl-Crypt-DES
+  - perl-Digest-HMAC
+  - perl-Switch
+  - perl-bignum
+  - git
+  - python3
+  - bc
+
+nagios_home: /var/spool/nagios
+nagios_html_dir: /usr/share/nagios/html
+nagios_cgi_dir:  /usr/lib64/nagios/cgi-bin
+nagios_status_file: /var/log/nagios/status.dat
+nagios_state_retention_file: /var/log/nagios/retention.dat
+nagios_plugin_dir: /usr/lib64/nagios/plugins
+
+nagios_mib_dir: /usr/share/snmp/mibs
+
+nagios_manubulon_install_dir: /usr/local/share/manubulon
+
+nagios_thirdparty_plugins:
+  check_cyberpower: https://exchange.nagios.org/components/com_mtree/attachment.php?link_id=7181&cf_id=24
+  check_ssl_cert: https://raw.githubusercontent.com/matteocorti/check_ssl_cert/master/check_ssl_cert
+
+nagios_thirdparty_mibs: {}
+
+nagios_hbac_service: nagios
+nagios_hbac_hostgroup: nagios_servers
+
+nagios_check_by_ssh_args: >-
+  --hostname='$HOSTADDRESS$'
+  --quiet
+  --ssh-option=StrictHostKeyChecking=no
+  --ssh-option=UserKnownHostsFile=/dev/null
+  --ssh-option=ControlMaster=yes
+  --ssh-option='ControlPath=/var/run/nagios/ssh-$HOSTNAME$'
+  --ssh-option=ControlPersist={{ nagios_ssh_control_persist | quote }}
+
+nagios_manubulon_args: >-
+  --hostname='$HOSTADDRESS$'
+  --login='$_HOSTSNMP_USER$'
+  --passwd='$_HOSTSNMP_AUTH_PASS$'
+  --privpass='$_HOSTSNMP_PRIV_PASS$'
+  --protocols='$_HOSTSNMP_AUTH_PROTO$,$_HOSTSNMP_PRIV_PROTO$'
+
+nagios_selinux_policy_te: |
+  require {
+    type nagios_spool_t;
+    type httpd_t;
+    class file open;
+  }
+
+  #============= httpd_t ==============
+  allow httpd_t nagios_spool_t:file open;
+
+nagios_apache_config: |
+  <Location />
+    AuthType GSSAPI
+    AuthName "FreeIPA Single Sign-On"
+    {{ apache_gssapi_session_config }}
+    AuthLDAPUrl "{{ apache_ldap_url }}?krbprincipalname"
+    {{ apache_ldap_creds }}
+    Require ldap-attribute memberof=cn={{ nagios_access_group }},{{ freeipa_group_basedn }}
+  </Location>
+
+  ScriptAlias "/cgi-bin/" "{{ nagios_cgi_dir }}/"
+
+  <Directory "{{ nagios_cgi_dir }}">
+    AllowOverride None
+    Require all granted
+  </Directory>