zulip/puppet/zulip_ops/manifests/nagios.pp

class zulip_ops::nagios {
  include zulip_ops::base
  include zulip_ops::apache
  include zulip::nagios

  $nagios_packages = [# Packages needed for Nagios
                      "nagios3",
                      # For sending outgoing email
                      "msmtp",
                      ]
  package { $nagios_packages: ensure => "installed" }
  $nagios_format_users = join($zulip_ops::base::users, ",")
  $nagios_alert_email = zulipconf("nagios", "alert_email", undef)
  $nagios_test_email = zulipconf("nagios", "test_email", undef)
  $nagios_pager_email = zulipconf("nagios", "pager_email", undef)

  $nagios_mail_domain = zulipconf("nagios", "mail_domain", undef)
  $nagios_mail_host = zulipconf("nagios", "mail_host", undef)
  $nagios_mail_password = zulipsecret("secrets", "nagios_mail_password", "")

  $hosts_domain = zulipconf("nagios", "hosts_domain", undef)
  $hosts_zmirror = split(zulipconf("nagios", "hosts_zmirror", undef), ",")
  $hosts_zmirrorp = split(zulipconf("nagios", "hosts_zmirrorp", undef), ",")
  $hosts_app_prod = split(zulipconf("nagios", "hosts_app_prod", undef), ",")
  $hosts_app_staging = split(zulipconf("nagios", "hosts_app_staging", undef), ",")
  $hosts_postgres_primary = split(zulipconf("nagios", "hosts_postgres_primary", undef), ",")
  $hosts_postgres_secondary = split(zulipconf("nagios", "hosts_postgres_secondary", undef), ",")
  $hosts_redis = split(zulipconf("nagios", "hosts_redis", undef), ",")
  $hosts_loadbalancer = split(zulipconf("nagios", "hosts_loadbalancer", undef), ",")
  $hosts_stats = split(zulipconf("nagios", "hosts_stats", undef), ",")

  apache2site { 'nagios':
    require => [File['/etc/apache2/sites-available/'],
                Apache2mod['headers'], Apache2mod['ssl'],
                ],
    ensure => present,
  }

  file { "/etc/nagios3/":
    recurse => true,
    purge => false,
    require => Package[nagios3],
    owner  => "root",
    group  => "root",
    mode => 644,
    source => "puppet:///modules/zulip_ops/nagios3/",
    notify => Service["nagios3"],
  }

  file { "/etc/nagios3/conf.d/contacts.cfg":
    require => Package[nagios3],
    owner  => "root",
    group  => "root",
    mode => 644,
    content => template("zulip_ops/nagios3/contacts.cfg.template.erb"),
    notify => Service["nagios3"],
  }
  file { "/etc/nagios3/conf.d/hosts.cfg":
    require => Package[nagios3],
    owner  => "root",
    group  => "root",
    mode => 644,
    content => template("zulip_ops/nagios3/hosts.cfg.template.erb"),
    notify => Service["nagios3"],
  }

  file { "/etc/nagios3/cgi.cfg":
    require => Package[nagios3],
    owner  => "root",
    group  => "root",
    mode => 644,
    content => template("zulip_ops/nagios3/cgi.cfg.template.erb"),
    notify => Service["nagios3"],
  }

  service { "nagios3":
    ensure => running,
  }

  file { [ '/etc/nagios3/conf.d/extinfo_nagios2.cfg',
           '/etc/nagios3/conf.d/services_nagios2.cfg',
           '/etc/nagios3/conf.d/contacts_nagios2.cfg',
           '/etc/nagios3/conf.d/hostgroups_nagios2.cfg',
           '/etc/nagios3/conf.d/localhost_nagios2.cfg',
           ]:
    ensure     => absent,
  }

  file { '/etc/nagios3/conf.d/zulip_nagios.cfg':
    ensure     => file,
    mode       => 644,
    owner      => "root",
    group      => "root",
    source => '/usr/local/share/zulip/integrations/nagios/zulip_nagios.cfg',
    notify => Service["nagios3"],
  }

  $hosts = $zulip_ops::base::hosts
  file { '/etc/nagios3/conf.d/zulip_autossh.cfg':
    ensure     => file,
    mode       => 644,
    owner      => "root",
    group      => "root",
    content => template('zulip_ops/nagios_autossh.template.erb'),
    notify => Service["nagios3"],
  }

  file { '/var/lib/nagios/msmtprc':
    ensure     => file,
    mode       => 600,
    owner      => "nagios",
    group      => "nagios",
    content    => template("zulip_ops/msmtprc_nagios.template.erb"),
    require    => File['/var/lib/nagios'],
  }

  exec { "fix_nagios_permissions":
    command => "dpkg-statoverride --update --add nagios www-data 2710 /var/lib/nagios3/rw",
    unless => "bash -c 'ls -ld /var/lib/nagios3/rw | grep ^drwx--s--- -q'",
    notify => Service["nagios3"],
  }
  exec { "fix_nagios_permissions2":
    command => "dpkg-statoverride --update --add nagios nagios 751 /var/lib/nagios3",
    unless => "bash -c 'ls -ld /var/lib/nagios3 | grep ^drwxr-x--x -q'",
    notify => Service["nagios3"],
  }

  # TODO: Install our API
}