blob: 90036e82c4590978c537ece529be3982e09b1fcd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
nagios_packages:
- nagios
- nagios-plugins-all
- nagios-contrib
- nagios-selinux
- perl-Net-SNMP
- perl-Getopt-Long
- perl-Crypt-Rijndael
- perl-Crypt-DES
- perl-Digest-HMAC
- perl-Switch
- perl-bignum
- git
- python3
- bc
nagios_home: /var/spool/nagios
nagios_html_dir: /usr/share/nagios/html
nagios_cgi_dir: /usr/lib64/nagios/cgi-bin
nagios_status_file: /var/log/nagios/status.dat
nagios_state_retention_file: /var/log/nagios/retention.dat
nagios_plugin_dir: /usr/lib64/nagios/plugins
nagios_mib_dir: /usr/share/snmp/mibs
nagios_manubulon_repo: https://github.com/SteScho/manubulon-snmp
nagios_manubulon_install_dir: /usr/local/share/manubulon
nagios_thirdparty_plugins:
check_cyberpower: https://exchange.nagios.org/components/com_mtree/attachment.php?link_id=7181&cf_id=24
check_ssl_cert: https://raw.githubusercontent.com/matteocorti/check_ssl_cert/master/check_ssl_cert
nagios_thirdparty_mibs: {}
nagios_hbac_service: nagios
nagios_hbac_hostgroup: nagios_servers
nagios_check_by_ssh_args: >-
--hostname='$HOSTADDRESS$'
--quiet
--ssh-option=StrictHostKeyChecking=no
--ssh-option=UserKnownHostsFile=/dev/null
--ssh-option=ControlMaster=yes
--ssh-option='ControlPath=/var/run/nagios/ssh-$HOSTNAME$'
--ssh-option=ControlPersist={{ nagios_ssh_control_persist | quote }}
nagios_manubulon_args: >-
--hostname='$HOSTADDRESS$'
--login='$_HOSTSNMP_USER$'
--passwd='$_HOSTSNMP_AUTH_PASS$'
--privpass='$_HOSTSNMP_PRIV_PASS$'
--protocols='$_HOSTSNMP_AUTH_PROTO$,$_HOSTSNMP_PRIV_PROTO$'
nagios_selinux_policy_te: |
require {
type nagios_spool_t;
type httpd_t;
class file open;
}
#============= httpd_t ==============
allow httpd_t nagios_spool_t:file open;
nagios_apache_config: |
<Location />
AuthType GSSAPI
AuthName "FreeIPA Single Sign-On"
{{ apache_gssapi_session_config }}
AuthLDAPUrl "{{ apache_ldap_url }}?krbprincipalname"
{{ apache_ldap_creds }}
Require ldap-attribute memberof=cn={{ nagios_access_group }},{{ freeipa_group_basedn }}
</Location>
ScriptAlias "/cgi-bin/" "{{ nagios_cgi_dir }}/"
<Directory "{{ nagios_cgi_dir }}">
AllowOverride None
Require all granted
</Directory>
|
