Initial commit

Signed-off-by: Julien Riou <julien@riou.xyz>

files/nagios/apache2.conf

@@ -0,0 +1,24 @@
+# Managed by Ansible
+
+ScriptAlias /cgi-bin/nagios4 /usr/lib/cgi-bin/nagios4
+ScriptAlias /nagios4/cgi-bin /usr/lib/cgi-bin/nagios4
+
+Alias /nagios4/stylesheets /etc/nagios4/stylesheets
+Alias /nagios4 /usr/share/nagios4/htdocs
+
+<DirectoryMatch (/usr/share/nagios4/htdocs|/usr/lib/cgi-bin/nagios4|/etc/nagios4/stylesheets)>
+    Options FollowSymLinks
+    DirectoryIndex index.php index.html
+    AllowOverride AuthConfig
+
+    AuthUserFile "/etc/nagios4/htdigest.users"
+    AuthType Basic
+    AuthName "Restricted Files"
+    AuthBasicProvider file
+    AuthUserFile "/etc/nagios4/htdigest.users"
+    Require user admin
+</DirectoryMatch>
+
+<Directory /usr/share/nagios4/htdocs>
+    Options	+ExecCGI	
+</Directory>

files/nagios/cgi.cfg

@@ -0,0 +1,27 @@
+# Managed by Ansible
+
+main_config_file=/etc/nagios4/nagios.cfg
+physical_html_path=/usr/share/nagios4/htdocs
+url_html_path=/nagios4
+show_context_help=0
+use_pending_states=1
+use_authentication=1
+use_ssl_authentication=0
+default_user_name=admin
+authorized_for_system_information=nagiosadmin
+authorized_for_configuration_information=nagiosadmin
+authorized_for_system_commands=nagiosadmin
+authorized_for_all_services=nagiosadmin
+authorized_for_all_hosts=nagiosadmin
+authorized_for_all_service_commands=nagiosadmin
+authorized_for_all_host_commands=nagiosadmin
+default_statuswrl_layout=4
+ping_syntax=/bin/ping -n -U -c 5 $HOSTADDRESS$
+refresh_rate=90
+result_limit=100
+escape_html_tags=1
+action_url_target=_blank
+notes_url_target=_blank
+lock_author_names=1
+navbar_search_for_addresses=1
+navbar_search_for_aliases=1

files/nagios/check_timesyncd

@@ -0,0 +1,15 @@
+#!/bin/bash
+/usr/bin/timedatectl status | grep -q "NTP service: active"
+if [ $? -ne 0 ] ; then
+    echo "NTP service not active"
+    exit 1
+fi
+
+/usr/bin/timedatectl status | grep -q "System clock synchronized: yes"
+if [ $? -ne 0 ] ; then
+    echo "System clock not synchronized"
+    exit 1
+fi
+
+echo "NTP is healthy"
+exit 0

files/nagios/nagios.cfg

@@ -0,0 +1,112 @@
+# Managed by Ansible
+log_file=/var/log/nagios4/nagios.log
+cfg_dir=/etc/nagios-plugins/config
+cfg_dir=/etc/nagios4/conf.d
+cfg_file=/etc/nagios4/objects/commands.cfg
+cfg_file=/etc/nagios4/objects/contacts.cfg
+cfg_file=/etc/nagios4/objects/timeperiods.cfg
+cfg_file=/etc/nagios4/objects/templates.cfg
+object_cache_file=/var/lib/nagios4/objects.cache
+precached_object_file=/var/lib/nagios4/objects.precache
+resource_file=/etc/nagios4/resource.cfg
+status_file=/var/lib/nagios4/status.dat
+status_update_interval=10
+nagios_user=nagios
+nagios_group=nagios
+check_external_commands=1
+command_file=/var/lib/nagios4/rw/nagios.cmd
+lock_file=/var/run/nagios4/nagios4.pid
+temp_file=/var/lib/nagios4/nagios.tmp
+temp_path=/tmp
+event_broker_options=-1
+log_rotation_method=d
+log_archive_path=/var/log/nagios4/archives
+use_syslog=1
+log_notifications=1
+log_service_retries=1
+log_host_retries=1
+log_event_handlers=1
+log_initial_states=0
+log_current_states=1
+log_external_commands=1
+log_passive_checks=1
+service_inter_check_delay_method=s
+max_service_check_spread=30
+service_interleave_factor=s
+host_inter_check_delay_method=s
+max_host_check_spread=30
+max_concurrent_checks=0
+check_result_reaper_frequency=10
+max_check_result_reaper_time=30
+check_result_path=/var/lib/nagios4/spool/checkresults
+max_check_result_file_age=3600
+cached_host_check_horizon=15
+cached_service_check_horizon=15
+enable_predictive_host_dependency_checks=1
+enable_predictive_service_dependency_checks=1
+soft_state_dependencies=0
+auto_reschedule_checks=0
+auto_rescheduling_interval=30
+auto_rescheduling_window=180
+service_check_timeout=60
+host_check_timeout=30
+event_handler_timeout=30
+notification_timeout=30
+ocsp_timeout=5
+perfdata_timeout=5
+retain_state_information=1
+state_retention_file=/var/lib/nagios4/retention.dat
+retention_update_interval=60
+use_retained_program_state=1
+use_retained_scheduling_info=1
+retained_host_attribute_mask=0
+retained_service_attribute_mask=0
+retained_process_host_attribute_mask=0
+retained_process_service_attribute_mask=0
+retained_contact_host_attribute_mask=0
+retained_contact_service_attribute_mask=0
+interval_length=60
+check_for_updates=1
+bare_update_check=0
+use_aggressive_host_checking=0
+execute_service_checks=1
+accept_passive_service_checks=1
+execute_host_checks=1
+accept_passive_host_checks=1
+enable_notifications=1
+enable_event_handlers=1
+process_performance_data=0
+obsess_over_services=0
+obsess_over_hosts=0
+translate_passive_host_checks=0
+passive_host_checks_are_soft=0
+check_for_orphaned_services=1
+check_for_orphaned_hosts=1
+check_service_freshness=1
+service_freshness_check_interval=60
+service_check_timeout_state=c
+check_host_freshness=0
+host_freshness_check_interval=60
+additional_freshness_latency=15
+enable_flap_detection=1
+low_service_flap_threshold=5.0
+high_service_flap_threshold=20.0
+low_host_flap_threshold=5.0
+high_host_flap_threshold=20.0
+date_format=us
+illegal_object_name_chars=`~!$%^&*|'"<>?,()=
+illegal_macro_output_chars=`~$&|'"<>
+use_regexp_matching=0
+use_true_regexp_matching=0
+admin_email=nagios@localhost
+admin_pager=pagenagios@localhost
+daemon_dumps_core=0
+use_large_installation_tweaks=0
+enable_environment_macros=0
+debug_level=0
+debug_verbosity=1
+debug_file=/var/log/nagios4/nagios.debug
+max_debug_file_size=1000000
+allow_empty_hostgroup_assignment=0
+cfg_file=/opt/notify-by-telegram/nagios.cfg
+host_down_disable_service_checks=1

files/nagios/security.conf

@@ -0,0 +1,16 @@
+# Managed by Ansible
+
+ServerTokens Prod
+ServerSignature Off
+TraceEnable Off
+
+<DirectoryMatch "/\.svn">
+   Require all denied
+</DirectoryMatch>
+
+<DirectoryMatch "/\.git">
+   Require all denied
+</DirectoryMatch>
+
+Header set X-Content-Type-Options: "nosniff"
+Header set X-Frame-Options: "sameorigin"