breeze 0.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/.gitignore +6 -0
- data/Gemfile +4 -0
- data/LICENSE +22 -0
- data/README.md +4 -0
- data/Rakefile +2 -0
- data/bin/breeze +17 -0
- data/breeze.gemspec +28 -0
- data/lib/breeze.rb +6 -0
- data/lib/breeze/fog_extensions.rb +2 -0
- data/lib/breeze/fog_extensions/aws.rb +65 -0
- data/lib/breeze/initializer.rb +40 -0
- data/lib/breeze/tasks.rb +10 -0
- data/lib/breeze/tasks/app.rb +145 -0
- data/lib/breeze/tasks/configuration.rb +63 -0
- data/lib/breeze/tasks/db.rb +31 -0
- data/lib/breeze/tasks/dns.rb +67 -0
- data/lib/breeze/tasks/list.rb +74 -0
- data/lib/breeze/tasks/server.rb +72 -0
- data/lib/breeze/tasks/server/address.rb +27 -0
- data/lib/breeze/tasks/server/image.rb +27 -0
- data/lib/breeze/tasks/server/tag.rb +16 -0
- data/lib/breeze/veur.rb +86 -0
- data/lib/templates/Thorfile +122 -0
- data/lib/templates/maintenance.html +23 -0
- data/lib/templates/profiles/minimal/scripts/install_conf.sh +4 -0
- data/lib/templates/profiles/minimal/scripts/install_cust.sh +7 -0
- data/lib/templates/profiles/rails_and_image_magick/configs/database.yml +18 -0
- data/lib/templates/profiles/rails_and_image_magick/configs/memcached.conf +51 -0
- data/lib/templates/profiles/rails_and_image_magick/configs/nginx/logrotate +26 -0
- data/lib/templates/profiles/rails_and_image_magick/configs/nginx/monit +9 -0
- data/lib/templates/profiles/rails_and_image_magick/configs/nginx/nginx.conf +99 -0
- data/lib/templates/profiles/rails_and_image_magick/scripts/install_conf.sh +33 -0
- data/lib/templates/profiles/rails_and_image_magick/scripts/install_cust.sh +24 -0
- data/lib/templates/shared/configs/crontab +10 -0
- data/lib/templates/shared/configs/monitrc +248 -0
- data/lib/templates/shared/scripts/credentials.sh +5 -0
- data/lib/templates/shared/scripts/deploy.sh +43 -0
- data/lib/templates/shared/scripts/install.sh +38 -0
- data/lib/templates/user_data.sh +4 -0
- metadata +133 -0
@@ -0,0 +1,23 @@
|
|
1
|
+
<!DOCTYPE html>
|
2
|
+
<html>
|
3
|
+
<head>
|
4
|
+
<title>down for maintenance</title>
|
5
|
+
<style type="text/css">
|
6
|
+
body { background-color: #fff; color: #666; text-align: center; font-family: arial, sans-serif; }
|
7
|
+
div.dialog {
|
8
|
+
width: 24em;
|
9
|
+
padding: 0 4em;
|
10
|
+
margin: 4em auto 0 auto;
|
11
|
+
border: 1px solid #ccc;
|
12
|
+
}
|
13
|
+
h1 { font-size: 100%; line-height: 1.5em; }
|
14
|
+
</style>
|
15
|
+
</head>
|
16
|
+
|
17
|
+
<body>
|
18
|
+
<div class="dialog">
|
19
|
+
<h1>The system is down for maintenance</h1>
|
20
|
+
<p>It will be back shortly.</p>
|
21
|
+
</div>
|
22
|
+
</body>
|
23
|
+
</html>
|
@@ -0,0 +1,18 @@
|
|
1
|
+
<%
|
2
|
+
@path = "#{CONFIGURATION[:app_path]}/config/database.yml"
|
3
|
+
@owner = 'rails'
|
4
|
+
@group = 'rails'
|
5
|
+
@perms = 0640
|
6
|
+
@post = 'rake db:migrate'
|
7
|
+
|
8
|
+
conf = CONFIGURATION[:default_db_options]
|
9
|
+
%>
|
10
|
+
# Database configuration
|
11
|
+
|
12
|
+
production:
|
13
|
+
adapter: mysql2
|
14
|
+
host: <%= ENV['DB_SERVER'] %>
|
15
|
+
database: MY-DB-NAME
|
16
|
+
encoding: utf8
|
17
|
+
username: <%= conf[:master_username] %>
|
18
|
+
password: <%= conf[:password] %>
|
@@ -0,0 +1,51 @@
|
|
1
|
+
<%
|
2
|
+
@path = "/etc/memcached.conf"
|
3
|
+
@post = "/etc/init.d/memcached restart"
|
4
|
+
%>
|
5
|
+
# memcached default config file
|
6
|
+
# 2003 - Jay Bonci <jaybonci@debian.org>
|
7
|
+
# This configuration file is read by the start-memcached script provided as
|
8
|
+
# part of the Debian GNU/Linux distribution.
|
9
|
+
|
10
|
+
# Run memcached as a daemon. This command is implied, and is not needed for the
|
11
|
+
# daemon to run. See the README.Debian that comes with this package for more
|
12
|
+
# information.
|
13
|
+
-d
|
14
|
+
|
15
|
+
# Log memcached's output to /var/log/memcached
|
16
|
+
logfile /var/log/memcached.log
|
17
|
+
|
18
|
+
# Be verbose
|
19
|
+
# -v
|
20
|
+
|
21
|
+
# Be even more verbose (print client commands as well)
|
22
|
+
# -vv
|
23
|
+
|
24
|
+
# Start with a cap of 64 megs of memory. It's reasonable, and the daemon default
|
25
|
+
# Note that the daemon will grow to this size, but does not start out holding this much
|
26
|
+
# memory
|
27
|
+
-m 64
|
28
|
+
|
29
|
+
# Default connection port is 11211
|
30
|
+
-p 11211
|
31
|
+
|
32
|
+
# Run the daemon as root. The start-memcached will default to running as root if no
|
33
|
+
# -u command is present in this config file
|
34
|
+
-u memcache
|
35
|
+
|
36
|
+
# Specify which IP address to listen on. The default is to listen on all IP addresses
|
37
|
+
# This parameter is one of the only security measures that memcached has, so make sure
|
38
|
+
# it's listening on a firewalled interface.
|
39
|
+
-l 127.0.0.1
|
40
|
+
|
41
|
+
# Limit the number of simultaneous incoming connections. The daemon default is 1024
|
42
|
+
# -c 1024
|
43
|
+
|
44
|
+
# Lock down all paged memory. Consult with the README and homepage before you do this
|
45
|
+
# -k
|
46
|
+
|
47
|
+
# Return error when memory is exhausted (rather than removing items)
|
48
|
+
# -M
|
49
|
+
|
50
|
+
# Maximize core file limit
|
51
|
+
# -r
|
@@ -0,0 +1,26 @@
|
|
1
|
+
<%
|
2
|
+
@path = "/etc/logrotate.d/nginx"
|
3
|
+
shared_rotate_conf = <<-END_SHARED_ROTATE_CONF
|
4
|
+
size 1M
|
5
|
+
missingok
|
6
|
+
rotate 5
|
7
|
+
compress
|
8
|
+
delaycompress
|
9
|
+
notifempty
|
10
|
+
END_SHARED_ROTATE_CONF
|
11
|
+
%>
|
12
|
+
# Nginx logs
|
13
|
+
/var/log/nginx/*.log {
|
14
|
+
<%= shared_rotate_conf %>
|
15
|
+
create 640 root adm
|
16
|
+
sharedscripts
|
17
|
+
postrotate
|
18
|
+
[ ! -f /var/run/nginx.pid ] || kill -USR1 `cat /var/run/nginx.pid`
|
19
|
+
endscript
|
20
|
+
}
|
21
|
+
|
22
|
+
# Rails application logs
|
23
|
+
<%= CONFIGURATION[:app_path] %>/log/*.log {
|
24
|
+
<%= shared_rotate_conf %>
|
25
|
+
copytruncate
|
26
|
+
}
|
@@ -0,0 +1,9 @@
|
|
1
|
+
<%
|
2
|
+
@path = '/etc/monit/conf.d/nginx'
|
3
|
+
%>
|
4
|
+
check process nginx with pidfile /var/run/nginx.pid
|
5
|
+
group nginx-production
|
6
|
+
start program = "/etc/init.d/nginx start"
|
7
|
+
stop program = "/etc/init.d/nginx stop"
|
8
|
+
if failed host localhost port 80 protocol http and request "/robots.txt" with timeout 5 seconds then restart
|
9
|
+
if 2 restarts within 3 cycles then timeout
|
@@ -0,0 +1,99 @@
|
|
1
|
+
<%
|
2
|
+
@path = "/etc/nginx/nginx.conf"
|
3
|
+
|
4
|
+
%w[ /tmp/nginx ].each do |dir|
|
5
|
+
system("mkdir -p #{dir} && chown www-data #{dir}") unless File.directory?(dir)
|
6
|
+
end
|
7
|
+
|
8
|
+
passenger_version = "3.0.2"
|
9
|
+
server_name = ENV['PUBLIC_SERVER_NAME']
|
10
|
+
server_root = "/srv/your-app/public"
|
11
|
+
|
12
|
+
shared_server_conf = <<-END_SHARED_SERVER_CONF
|
13
|
+
|
14
|
+
server_name #{server_name};
|
15
|
+
client_max_body_size 20M;
|
16
|
+
|
17
|
+
# redirect www.example.com to example.com
|
18
|
+
if ( $host = www.#{server_name} ) {
|
19
|
+
rewrite ^\/(.*)$ http://#{server_name}/$1 permanent;
|
20
|
+
}
|
21
|
+
|
22
|
+
# let browsers cache static assets
|
23
|
+
location ~ ^/(images|javascripts|stylesheets)/ { expires 1y; }
|
24
|
+
|
25
|
+
# always display system/maintenance.html if it exists
|
26
|
+
if ($request_filename ~* \.(js|css|gif|png|jpg)$) { break; }
|
27
|
+
if (-f $document_root/system/maintenance.html) {
|
28
|
+
rewrite ^(.*)$ /system/maintenance.html last;
|
29
|
+
break;
|
30
|
+
}
|
31
|
+
|
32
|
+
location / {
|
33
|
+
passenger_enabled on;
|
34
|
+
}
|
35
|
+
|
36
|
+
error_page 500 502 503 504 /500.html;
|
37
|
+
error_page 404 /404.html;
|
38
|
+
|
39
|
+
END_SHARED_SERVER_CONF
|
40
|
+
|
41
|
+
@post = <<-POST
|
42
|
+
if [ -f /var/run/nginx.pid ]; then
|
43
|
+
/etc/init.d/nginx reload
|
44
|
+
else
|
45
|
+
/etc/init.d/nginx start
|
46
|
+
fi
|
47
|
+
POST
|
48
|
+
%>
|
49
|
+
user www-data;
|
50
|
+
pid /var/run/nginx.pid;
|
51
|
+
error_log /var/log/nginx/error.log;
|
52
|
+
|
53
|
+
worker_processes 2;
|
54
|
+
events {
|
55
|
+
worker_connections 1024;
|
56
|
+
use epoll;
|
57
|
+
}
|
58
|
+
|
59
|
+
http {
|
60
|
+
|
61
|
+
root <%= server_root %>;
|
62
|
+
|
63
|
+
include /etc/nginx/mime.types;
|
64
|
+
default_type text/html;
|
65
|
+
|
66
|
+
access_log /var/log/nginx/access.log;
|
67
|
+
|
68
|
+
sendfile on;
|
69
|
+
tcp_nopush on;
|
70
|
+
tcp_nodelay on;
|
71
|
+
|
72
|
+
gzip on;
|
73
|
+
gzip_disable "msie6";
|
74
|
+
gzip_types text/plain text/css application/x-javascript text/xml application/xml application/xml+rss text/javascript;
|
75
|
+
|
76
|
+
passenger_root /usr/lib/ruby/gems/1.9.1/gems/passenger-<%= passenger_version %>;
|
77
|
+
passenger_ruby /usr/bin/ruby;
|
78
|
+
passenger_log_level 0;
|
79
|
+
passenger_max_pool_size 4; # for micro instances
|
80
|
+
passenger_min_instances 2;
|
81
|
+
passenger_pool_idle_time 0;
|
82
|
+
rails_app_spawner_idle_time 0;
|
83
|
+
passenger_pre_start http://<%= server_name %>/;
|
84
|
+
|
85
|
+
server {
|
86
|
+
listen 80;
|
87
|
+
<%= shared_server_conf %>
|
88
|
+
}
|
89
|
+
|
90
|
+
# remove this server block if you don't have ssl certificates
|
91
|
+
server {
|
92
|
+
listen 443;
|
93
|
+
ssl on;
|
94
|
+
ssl_certificate /etc/nginx/YOUR-CERTIFICATE-FILE.crt;
|
95
|
+
ssl_certificate_key /etc/nginx/YOUR-CERTIFICATE-FILE.key;
|
96
|
+
<%= shared_server_conf.gsub('http://', 'https://') %>
|
97
|
+
}
|
98
|
+
|
99
|
+
}
|
@@ -0,0 +1,33 @@
|
|
1
|
+
# This script is sourced at the beginning of install.sh.
|
2
|
+
# PACKAGES, RUBY_PACKAGE, IMAGE_MAGICK_PACKAGE, IMAGE_MAGICK_OPTIONS and NGINX_OPTIONS are required.
|
3
|
+
# The IMAGE_MAGICK_PACKAGE defined below may no longer be available from the download url specified
|
4
|
+
# in install_cust.sh. Find the latest release at http://www.imagemagick.org/script/download.php.
|
5
|
+
|
6
|
+
# define packages to install
|
7
|
+
# passenger will replace the nginx binary, but the package provides startup script, user etc.
|
8
|
+
SYSTEM_PACKAGES="git-core monit nginx memcached"
|
9
|
+
DB_CLIENT_PACKAGES="mysql-client libmysqlclient16 libmysqlclient16-dev"
|
10
|
+
RUBY_BUILD_DEPENDENCIES="\
|
11
|
+
build-essential bison openssl zlib1g libxslt1.1 libssl-dev libxslt1-dev libxml2 \
|
12
|
+
libffi-dev libyaml-dev libxslt-dev autoconf libc6-dev libreadline6-dev zlib1g-dev"
|
13
|
+
NGINX_AND_PASSENGER_DEPENDENCIES="libpcre3-dev libcurl4-openssl-dev"
|
14
|
+
|
15
|
+
# $PACKAGES is used by install.sh
|
16
|
+
PACKAGES="$SYSTEM_PACKAGES $DB_CLIENT_PACKAGES $RUBY_BUILD_DEPENDENCIES $NGINX_AND_PASSENGER_DEPENDENCIES"
|
17
|
+
|
18
|
+
# the rest is used by install_cust.sh
|
19
|
+
RUBY_PACKAGE=ruby-1.9.2-p180
|
20
|
+
IMAGE_MAGICK_PACKAGE=ImageMagick-6.6.7-8
|
21
|
+
IMAGE_MAGICK_OPTIONS='--disable-static --with-modules --without-perl --without-magick-plus-plus --with-quantum-depth=8'
|
22
|
+
NGINX_OPTIONS="\
|
23
|
+
--conf-path=/etc/nginx/nginx.conf \
|
24
|
+
--lock-path=/var/lock/nginx.lock \
|
25
|
+
--http-client-body-temp-path=/tmp/nginx/client_body_temp \
|
26
|
+
--http-proxy-temp-path=/tmp/nginx/proxy_temp \
|
27
|
+
--http-fastcgi-temp-path=/tmp/nginx/fastcgi_temp \
|
28
|
+
--http-uwsgi-temp-path=/tmp/nginx/uwsgi_temp \
|
29
|
+
--http-scgi-temp-path=/tmp/nginx/scgi_temp \
|
30
|
+
--with-pcre \
|
31
|
+
--with-http_ssl_module \
|
32
|
+
--with-http_realip_module"
|
33
|
+
# more options at http://wiki.nginx.org/Modules
|
@@ -0,0 +1,24 @@
|
|
1
|
+
# This script is sourced at the end of install.sh when packages have been installed
|
2
|
+
# and aliases and functions have been defined.
|
3
|
+
|
4
|
+
# install ruby
|
5
|
+
download ftp://ftp.ruby-lang.org//pub/ruby/1.9/$RUBY_PACKAGE.tar.gz
|
6
|
+
extract_and_install $RUBY_PACKAGE
|
7
|
+
sudo gem update --system
|
8
|
+
sudo gem install --no-ri --no-rdoc bundler passenger
|
9
|
+
|
10
|
+
# install nginx and passenger
|
11
|
+
sudo passenger-install-nginx-module --auto --auto-download --prefix=/usr --extra-configure-flags="$NGINX_OPTIONS"
|
12
|
+
# remove confusing nginx configuration files that are not used
|
13
|
+
sudo rm -rf /etc/nginx/{conf.d,fastcgi*,scgi_params*,sites-*,uwsgi*}
|
14
|
+
|
15
|
+
# install ImageMagick
|
16
|
+
package_manager -y build-dep imagemagick
|
17
|
+
download ftp://ftp.imagemagick.org/pub/ImageMagick/$IMAGE_MAGICK_PACKAGE.tar.gz
|
18
|
+
extract_and_install $IMAGE_MAGICK_PACKAGE "$IMAGE_MAGICK_OPTIONS"
|
19
|
+
|
20
|
+
# set up the shell environment for user ubuntu
|
21
|
+
cat >> $HOME/.profile <<END_PROFILE
|
22
|
+
# export RAILS_ENV=production
|
23
|
+
# export EDITOR=vi
|
24
|
+
END_PROFILE
|
@@ -0,0 +1,248 @@
|
|
1
|
+
<%
|
2
|
+
@path = '/etc/monit/monitrc'
|
3
|
+
@perms = 0600
|
4
|
+
@post = 'echo startup=1 > /etc/default/monit'
|
5
|
+
%>
|
6
|
+
###############################################################################
|
7
|
+
## Monit control file
|
8
|
+
###############################################################################
|
9
|
+
##
|
10
|
+
## Comments begin with a '#' and extend through the end of the line. Keywords
|
11
|
+
## are case insensitive. All path's MUST BE FULLY QUALIFIED, starting with '/'.
|
12
|
+
##
|
13
|
+
## Below you will find examples of some frequently used statements. For
|
14
|
+
## information about the control file and a complete list of statements and
|
15
|
+
## options, please have a look in the Monit manual.
|
16
|
+
##
|
17
|
+
##
|
18
|
+
###############################################################################
|
19
|
+
## Global section
|
20
|
+
###############################################################################
|
21
|
+
##
|
22
|
+
## Start Monit in the background (run as a daemon):
|
23
|
+
#
|
24
|
+
set daemon 45 # check services at 45-second intervals
|
25
|
+
with start delay 120 # optional: delay the first check by 2-minutes (by
|
26
|
+
# default Monit check immediately after Monit start)
|
27
|
+
#
|
28
|
+
#
|
29
|
+
## Set syslog logging with the 'daemon' facility. If the FACILITY option is
|
30
|
+
## omitted, Monit will use 'user' facility by default. If you want to log to
|
31
|
+
## a standalone log file instead, specify the full path to the log file
|
32
|
+
#
|
33
|
+
# set logfile syslog facility log_daemon
|
34
|
+
#
|
35
|
+
#
|
36
|
+
### Set the location of the Monit id file which stores the unique id for the
|
37
|
+
### Monit instance. The id is generated and stored on first Monit start. By
|
38
|
+
### default the file is placed in $HOME/.monit.id.
|
39
|
+
#
|
40
|
+
# set idfile /var/.monit.id
|
41
|
+
#
|
42
|
+
### Set the location of the Monit state file which saves monitoring states
|
43
|
+
### on each cycle. By default the file is placed in $HOME/.monit.state. If
|
44
|
+
### the state file is stored on a persistent filesystem, Monit will recover
|
45
|
+
### the monitoring state across reboots. If it is on temporary filesystem, the
|
46
|
+
### state will be lost on reboot which may be convenient in some situations.
|
47
|
+
#
|
48
|
+
# set statefile /var/.monit.state
|
49
|
+
#
|
50
|
+
## Set the list of mail servers for alert delivery. Multiple servers may be
|
51
|
+
## specified using a comma separator. By default Monit uses port 25 - it is
|
52
|
+
## possible to override this with the PORT option.
|
53
|
+
#
|
54
|
+
# set mailserver mail.bar.baz, # primary mailserver
|
55
|
+
# backup.bar.baz port 10025, # backup mailserver on port 10025
|
56
|
+
# localhost # fallback relay
|
57
|
+
#
|
58
|
+
#
|
59
|
+
## By default Monit will drop alert events if no mail servers are available.
|
60
|
+
## If you want to keep the alerts for later delivery retry, you can use the
|
61
|
+
## EVENTQUEUE statement. The base directory where undelivered alerts will be
|
62
|
+
## stored is specified by the BASEDIR option. You can limit the maximal queue
|
63
|
+
## size using the SLOTS option (if omitted, the queue is limited by space
|
64
|
+
## available in the back end filesystem).
|
65
|
+
#
|
66
|
+
# set eventqueue
|
67
|
+
# basedir /var/monit # set the base directory where events will be stored
|
68
|
+
# slots 100 # optionally limit the queue size
|
69
|
+
#
|
70
|
+
#
|
71
|
+
## Send status and events to M/Monit (for more informations about M/Monit
|
72
|
+
## see http://mmonit.com/).
|
73
|
+
#
|
74
|
+
# set mmonit http://monit:monit@192.168.1.10:8080/collector
|
75
|
+
#
|
76
|
+
#
|
77
|
+
## Monit by default uses the following alert mail format:
|
78
|
+
##
|
79
|
+
## --8<--
|
80
|
+
## From: monit@$HOST # sender
|
81
|
+
## Subject: monit alert -- $EVENT $SERVICE # subject
|
82
|
+
##
|
83
|
+
## $EVENT Service $SERVICE #
|
84
|
+
## #
|
85
|
+
## Date: $DATE #
|
86
|
+
## Action: $ACTION #
|
87
|
+
## Host: $HOST # body
|
88
|
+
## Description: $DESCRIPTION #
|
89
|
+
## #
|
90
|
+
## Your faithful employee, #
|
91
|
+
## Monit #
|
92
|
+
## --8<--
|
93
|
+
##
|
94
|
+
## You can override this message format or parts of it, such as subject
|
95
|
+
## or sender using the MAIL-FORMAT statement. Macros such as $DATE, etc.
|
96
|
+
## are expanded at runtime. For example, to override the sender, use:
|
97
|
+
#
|
98
|
+
# set mail-format { from: monit@foo.bar }
|
99
|
+
#
|
100
|
+
#
|
101
|
+
## You can set alert recipients whom will receive alerts if/when a
|
102
|
+
## service defined in this file has errors. Alerts may be restricted on
|
103
|
+
## events by using a filter as in the second example below.
|
104
|
+
#
|
105
|
+
# set alert sysadm@foo.bar # receive all alerts
|
106
|
+
# set alert manager@foo.bar only on { timeout } # receive just service-
|
107
|
+
# # timeout alert
|
108
|
+
#
|
109
|
+
#
|
110
|
+
## Monit has an embedded web server which can be used to view status of
|
111
|
+
## services monitored and manage services from a web interface. See the
|
112
|
+
## Monit Wiki if you want to enable SSL for the web server.
|
113
|
+
#
|
114
|
+
# set httpd port 2812 and
|
115
|
+
# use address localhost # only accept connection from localhost
|
116
|
+
# allow localhost # allow localhost to connect to the server and
|
117
|
+
# allow admin:monit # require user 'admin' with password 'monit'
|
118
|
+
# allow @monit # allow users of group 'monit' to connect (rw)
|
119
|
+
# allow @users readonly # allow users of group 'users' to connect readonly
|
120
|
+
#
|
121
|
+
#
|
122
|
+
###############################################################################
|
123
|
+
## Services
|
124
|
+
###############################################################################
|
125
|
+
##
|
126
|
+
## Check general system resources such as load average, cpu and memory
|
127
|
+
## usage. Each test specifies a resource, conditions and the action to be
|
128
|
+
## performed should a test fail.
|
129
|
+
#
|
130
|
+
check system <%= host_name %>
|
131
|
+
if loadavg (1min) > 4 then alert
|
132
|
+
if loadavg (5min) > 2 then alert
|
133
|
+
if memory usage > 75% then alert
|
134
|
+
if cpu usage (user) > 70% then alert
|
135
|
+
if cpu usage (system) > 30% then alert
|
136
|
+
if cpu usage (wait) > 20% then alert
|
137
|
+
|
138
|
+
check device rootfs with path /
|
139
|
+
if space usage > 75% then alert
|
140
|
+
if inode usage > 75% then alert
|
141
|
+
|
142
|
+
#
|
143
|
+
#
|
144
|
+
## Check a file for existence, checksum, permissions, uid and gid. In addition
|
145
|
+
## to alert recipients in the global section, customized alert can be sent to
|
146
|
+
## additional recipients by specifying a local alert handler. The service may
|
147
|
+
## be grouped using the GROUP option. More than one group can be specified by
|
148
|
+
## repeating the 'group name' statement.
|
149
|
+
#
|
150
|
+
# check file apache_bin with path /usr/local/apache/bin/httpd
|
151
|
+
# if failed checksum and
|
152
|
+
# expect the sum 8f7f419955cefa0b33a2ba316cba3659 then unmonitor
|
153
|
+
# if failed permission 755 then unmonitor
|
154
|
+
# if failed uid root then unmonitor
|
155
|
+
# if failed gid root then unmonitor
|
156
|
+
# alert security@foo.bar on {
|
157
|
+
# checksum, permission, uid, gid, unmonitor
|
158
|
+
# } with the mail-format { subject: Alarm! }
|
159
|
+
# group server
|
160
|
+
#
|
161
|
+
#
|
162
|
+
## Check that a process is running, in this case Apache, and that it respond
|
163
|
+
## to HTTP and HTTPS requests. Check its resource usage such as cpu and memory,
|
164
|
+
## and number of children. If the process is not running, Monit will restart
|
165
|
+
## it by default. In case the service is restarted very often and the
|
166
|
+
## problem remains, it is possible to disable monitoring using the TIMEOUT
|
167
|
+
## statement. This service depends on another service (apache_bin) which
|
168
|
+
## is defined above.
|
169
|
+
#
|
170
|
+
# check process apache with pidfile /usr/local/apache/logs/httpd.pid
|
171
|
+
# start program = "/etc/init.d/httpd start" with timeout 60 seconds
|
172
|
+
# stop program = "/etc/init.d/httpd stop"
|
173
|
+
# if cpu > 60% for 2 cycles then alert
|
174
|
+
# if cpu > 80% for 5 cycles then restart
|
175
|
+
# if totalmem > 200.0 MB for 5 cycles then restart
|
176
|
+
# if children > 250 then restart
|
177
|
+
# if loadavg(5min) greater than 10 for 8 cycles then stop
|
178
|
+
# if failed host www.tildeslash.com port 80 protocol http
|
179
|
+
# and request "/somefile.html"
|
180
|
+
# then restart
|
181
|
+
# if failed port 443 type tcpssl protocol http
|
182
|
+
# with timeout 15 seconds
|
183
|
+
# then restart
|
184
|
+
# if 3 restarts within 5 cycles then timeout
|
185
|
+
# depends on apache_bin
|
186
|
+
# group server
|
187
|
+
#
|
188
|
+
#
|
189
|
+
## Check filesystem permissions, uid, gid, space and inode usage. Other services,
|
190
|
+
## such as databases, may depend on this resource and an automatically graceful
|
191
|
+
## stop may be cascaded to them before the filesystem will become full and data
|
192
|
+
## lost.
|
193
|
+
#
|
194
|
+
# check filesystem datafs with path /dev/sdb1
|
195
|
+
# start program = "/bin/mount /data"
|
196
|
+
# stop program = "/bin/umount /data"
|
197
|
+
# if failed permission 660 then unmonitor
|
198
|
+
# if failed uid root then unmonitor
|
199
|
+
# if failed gid disk then unmonitor
|
200
|
+
# if space usage > 80% for 5 times within 15 cycles then alert
|
201
|
+
# if space usage > 99% then stop
|
202
|
+
# if inode usage > 30000 then alert
|
203
|
+
# if inode usage > 99% then stop
|
204
|
+
# group server
|
205
|
+
#
|
206
|
+
#
|
207
|
+
## Check a file's timestamp. In this example, we test if a file is older
|
208
|
+
## than 15 minutes and assume something is wrong if its not updated. Also,
|
209
|
+
## if the file size exceed a given limit, execute a script
|
210
|
+
#
|
211
|
+
# check file database with path /data/mydatabase.db
|
212
|
+
# if failed permission 700 then alert
|
213
|
+
# if failed uid data then alert
|
214
|
+
# if failed gid data then alert
|
215
|
+
# if timestamp > 15 minutes then alert
|
216
|
+
# if size > 100 MB then exec "/my/cleanup/script" as uid dba and gid dba
|
217
|
+
#
|
218
|
+
#
|
219
|
+
## Check directory permission, uid and gid. An event is triggered if the
|
220
|
+
## directory does not belong to the user with uid 0 and gid 0. In addition,
|
221
|
+
## the permissions have to match the octal description of 755 (see chmod(1)).
|
222
|
+
#
|
223
|
+
# check directory bin with path /bin
|
224
|
+
# if failed permission 755 then unmonitor
|
225
|
+
# if failed uid 0 then unmonitor
|
226
|
+
# if failed gid 0 then unmonitor
|
227
|
+
#
|
228
|
+
#
|
229
|
+
## Check a remote host availability by issuing a ping test and check the
|
230
|
+
## content of a response from a web server. Up to three pings are sent and
|
231
|
+
## connection to a port and an application level network check is performed.
|
232
|
+
#
|
233
|
+
# check host myserver with address 192.168.1.1
|
234
|
+
# if failed icmp type echo count 3 with timeout 3 seconds then alert
|
235
|
+
# if failed port 3306 protocol mysql with timeout 15 seconds then alert
|
236
|
+
# if failed url http://user:password@192.168.1.1:8080/?querystring
|
237
|
+
# and content == 'action="j_security_check"'
|
238
|
+
# then alert
|
239
|
+
#
|
240
|
+
###############################################################################
|
241
|
+
## Includes
|
242
|
+
###############################################################################
|
243
|
+
##
|
244
|
+
## It is possible to include additional configuration parts from other files or
|
245
|
+
## directories.
|
246
|
+
#
|
247
|
+
|
248
|
+
include /etc/monit/conf.d/*
|