Hello! We are running our annual fundraising. Please consider making a donation if you value this freely available service or want to support people around the world working towards liberatory social change. https://riseup.net/donate.

Commit 8571e7dc authored by drebs's avatar drebs
Browse files

Monitor DebOps PKI error.log for HTTP redirects

parent 7993d8fd
Pipeline #64943 passed with stages
in 11 minutes and 20 seconds
......@@ -250,6 +250,23 @@ class profile::monitoring::services (
target => '/etc/icinga2/conf.d/services.conf',
}
# XXX Remove once we change the way we generate TLS certificates, and maybe
# move to hiera if that change will take long to happen.
icinga2::object::service { "DebOps PKI ACME error.log: ${site}":
check_command => 'file_age',
host_name => $config['host_name'],
command_endpoint => $config['host_name'],
zone => 'icinga2',
import => [ 'generic-service' ],
target => '/etc/icinga2/conf.d/services.conf',
vars => {
file_age_file => "/etc/pki/realms/${site}/acme/error.log",
file_age_critical_time => 1,
file_age_ignoremissing => true,
},
groups => [ 'certs' ],
}
}
### Backup checks
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment