Adding domain monitoring for TLSA/SSHFP/CAA records

This commit is contained in:
2025-12-18 14:43:13 -06:00
parent 49839d1333
commit 43f764e664
4 changed files with 42 additions and 1 deletions

View File

@@ -0,0 +1,8 @@
check program domain-tlsa with path "/etc/monit.d/scripts/check-domain aninix.net tlsa aninix.net-0002"
if status != 0 for 5 times within 5 cycles then exec "/etc/monit.d/scripts/critical TLSA records do not match -- regenerate and update"
check program domain-sshfp with path "/etc/monit.d/scripts/check-domain aninix.net sshfp"
if status != 0 for 5 times within 5 cycles then exec "/etc/monit.d/scripts/critical SSHFP records do not match -- regenerate and update"
check program domain-caa with path "/etc/monit.d/scripts/check-domain aninix.net caa"
if status != 0 for 5 times within 5 cycles then exec "/etc/monit.d/scripts/critical CAA record does not match -- regenerate and update"