Check certs on the puppet host
authorPeter Palfrader <peter@palfrader.org>
Tue, 2 Feb 2016 07:01:25 +0000 (08:01 +0100)
committerPeter Palfrader <peter@palfrader.org>
Tue, 2 Feb 2016 07:01:25 +0000 (08:01 +0100)
config/nagios-master.cfg

index cb9c73c..9961342 100644 (file)
@@ -2022,10 +2022,15 @@ services:
     nrpe: "if [ -e /var/lib/dsa/sso/ca.crl ]; then /usr/lib/nagios/plugins/dsa-check-crl-expire -w 129600 -c 86400 /var/lib/dsa/sso/ca.crl; else echo 'No sso/ca.crl on this host.'; fi"
     hostgroups: computers
   -
-    name: letsencrypt SSL certs
+    name: SSL certs - puppet
     hosts: global
-    remotecheck: "/srv/letsencrypt.debian.org/bin/check-cert-expire"
-    runfrom: denis
+    remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/servicecerts"
+    runfrom: handel
+  -
+    name: SSL certs - LE
+    hosts: global
+    remotecheck: "/usr/lib/nagios/plugins/dsa-check-cert-expire-dir /etc/puppet/modules/ssl/files/from-letsencrypt"
+    runfrom: handel
   # }}}
   # {{{ HW health/raid
   -