catchup

roles/Sharingan/files/monit/checks/vips

@@ -25,5 +25,12 @@ check program https_singularity with path "/usr/lib/monitoring-plugins/check_htt
 check program https_wolfpack with path "/usr/lib/monitoring-plugins/check_http --ssl -w 10 -c 10 -H wolfpack.aninix.net"
     if status != 0 for 3 times within 5 cycles then exec "/etc/monit.d/scripts/critical wolfpack.aninix.net not reporting OK"
 
-#check program https_yggdrasil with path "/usr/lib/monitoring-plugins/check_http --ssl -w 10 -c 10 -u /web/index.html -H yggdrasil.aninix.net"
-#    if status != 0 for 3 times within 5 cycles then exec "/etc/monit.d/scripts/critical yggdrasil.aninix.net not reporting OK"
+check program https_yggdrasil with path "/usr/lib/monitoring-plugins/check_http --ssl -w 10 -c 10 -u /web/index.html -H yggdrasil.aninix.net"
+    every "* 6-23 * * *"
+    if status != 0 for 3 times within 5 cycles then exec "/etc/monit.d/scripts/critical yggdrasil.aninix.net not reporting OK"
+
+check program http_eyes with path "/usr/lib/monitoring-plugins/check_http -w 10 -c 10 -u / -H geth-eyes.msn0.aninix.net"
+    if status != 0 for 3 times within 5 cycles then exec "/etc/monit.d/scripts/critical geth-eyes HTTP not reporting OK"
+
+check program http_shadowfeed with path "/usr/lib/monitoring-plugins/check_http -w 10 -c 10 -u / -H shadowfeed.msn0.aninix.net"
+    if status != 0 for 3 times within 5 cycles then exec "/etc/monit.d/scripts/critical shadowfeed HTTP not reporting OK"

roles/Sharingan/files/monit/hostdefs/Sharingan

@@ -1,3 +1,3 @@
 include "/etc/monit.d/checks/system"
 include "/etc/monit.d/checks/vips"
-
+include "/etc/monit.d/checks/availability"

roles/Sharingan/tasks/eval.yml

@@ -1,6 +1,11 @@
 ---
 
- - name: Sharingan-Eval service
+ - name: Generate monitoring from inventory
+   delegate_to: localhost
+   run_once: true
+   command: "python3 ../bin/generate-monitoring.py {{ inventory_file }}"
+
+ - name: Sharingan-Eval service copy
    become: yes
    register: eval_service
    copy:
@@ -55,5 +60,3 @@
      owner: root
      group: root
      mode: 0700
-
-

roles/Sharingan/tasks/heartbeat.yml

@@ -45,4 +45,3 @@
      name: syslog-ng@default.service
      state: stopped
      enabled: no
-

roles/Sharingan/tasks/main.yml

@@ -12,4 +12,3 @@
 
  - import_tasks: ../roles/Sharingan/tasks/scans.yml
    when: ansible_os_family == "Archlinux"
-

roles/Sharingan/tasks/siem.yml

@@ -5,7 +5,7 @@
    package:
      name:
        - elasticsearch
-       - mongodb
+       - mongodb44-bin # Temporarily pinned for extensions
        - graylog
      state: present