cloud-mu 1.9.0.pre.beta

data/cookbooks/nagios/recipes/_load_databag_config.rb

@@ -0,0 +1,153 @@
+#
+# Author:: Sander Botman <sbotman@schubergphilis.com>
+# Cookbook Name:: nagios
+# Recipe:: _load_databag_config
+#
+# Copyright 2014, Sander Botman
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Loading all databag information
+nagios_bags = NagiosDataBags.new
+
+hostgroups = nagios_bags.get(node['nagios']['hostgroups_databag'])
+hostgroups.each do |group|
+  next if group['search_query'].nil?
+  if node['nagios']['multi_environment_monitoring']
+    query_environments = node['nagios']['monitored_environments'].map do |environment|
+      "chef_environment:#{environment}"
+    end.join(' OR ')
+    result = search(:node, "(#{group['search_query']}) AND (#{query_environments})")
+  else
+    result = search(:node, "#{group['search_query']} AND chef_environment:#{node.chef_environment}")
+  end
+
+  result.each do |n|
+    n.automatic_attrs['roles'] = [group['hostgroup_name']]
+    Nagios.instance.push(n)
+  end
+end
+
+services = nagios_bags.get(node['nagios']['services_databag'])
+services.each do |item|
+  next unless item['activate_check_in_environment'].nil? || item['activate_check_in_environment'].include?(node.chef_environment)
+  name = item['service_description'] || item['id']
+  check_command = name.downcase.start_with?('check_') ? name.downcase : 'check_' + name.downcase
+  command_name = item['check_command'].nil? ? check_command : item['check_command']
+  service_name = name.downcase.start_with?('check_') ? name.gsub('check_', '') : name.downcase
+  item['check_command'] = command_name
+
+  nagios_command command_name do
+    options item
+  end
+
+  nagios_service service_name do
+    options item
+  end
+end
+
+contactgroups = nagios_bags.get(node['nagios']['contactgroups_databag'])
+contactgroups.each do |item|
+  name = item['contactgroup_name'] || item['id']
+  nagios_contactgroup name do
+    options item
+  end
+end
+
+eventhandlers = nagios_bags.get(node['nagios']['eventhandlers_databag'])
+eventhandlers.each do |item|
+  name = item['command_name'] || item['id']
+  nagios_command name do
+    options item
+  end
+end
+
+contacts = nagios_bags.get(node['nagios']['contacts_databag'])
+contacts.each do |item|
+  name = item['contact_name'] || item['id']
+  nagios_contact name do
+    options item
+  end
+end
+
+hostescalations = nagios_bags.get(node['nagios']['hostescalations_databag'])
+hostescalations.each do |item|
+  name = item['host_description'] || item['id']
+  nagios_hostescalation name do
+    options item
+  end
+end
+
+hosttemplates = nagios_bags.get(node['nagios']['hosttemplates_databag'])
+hosttemplates.each do |item|
+  name = item['host_name'] || item['id']
+  item['name'] = name if item['name'].nil?
+  nagios_host name do
+    options item
+  end
+end
+
+servicedependencies = nagios_bags.get(node['nagios']['servicedependencies_databag'])
+servicedependencies.each do |item|
+  name = item['service_description'] || item['id']
+  nagios_servicedependency name do
+    options item
+  end
+end
+
+serviceescalations = nagios_bags.get(node['nagios']['serviceescalations_databag'])
+serviceescalations.each do |item|
+  name = item['service_description'] || item['id']
+  nagios_serviceescalation name do
+    options item
+  end
+end
+
+servicegroups = nagios_bags.get(node['nagios']['servicegroups_databag'])
+servicegroups.each do |item|
+  name = item['servicegroup_name'] || item['id']
+  nagios_servicegroup name do
+    options item
+  end
+end
+
+templates = nagios_bags.get(node['nagios']['templates_databag'])
+templates.each do |item|
+  name = item['name'] || item['id']
+  item['name'] = name
+  nagios_service name do
+    options item
+  end
+end
+
+timeperiods = nagios_bags.get(node['nagios']['timeperiods_databag'])
+timeperiods.each do |item|
+  name = item['timeperiod_name'] || item['id']
+  nagios_timeperiod name do
+    options item
+  end
+end
+
+unmanaged_hosts = nagios_bags.get(node['nagios']['unmanagedhosts_databag'])
+unmanaged_hosts.each do |item|
+  if node['nagios']['multi_environment_monitoring'].nil?
+    next if item['environment'].nil? || item['environment'] != node.chef_environment
+  else
+    envs = node['nagios']['monitored_environments']
+    next if item['environment'].nil? || !envs.include?(item['environment'])
+  end
+  name = item['host_name'] || item['id']
+  nagios_host name do
+    options item
+  end
+end

data/cookbooks/nagios/recipes/_load_default_config.rb

@@ -0,0 +1,241 @@
+#
+# Author:: Sander Botman <sbotman@schubergphilis.com>
+# Cookbook Name:: nagios
+# Recipe:: _load_default_config
+#
+# Copyright 2014, Sander Botman
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Find nodes to monitor.
+# Search in all environments if multi_environment_monitoring is enabled.
+Chef::Log.info('Beginning search for nodes.  This may take some time depending on your node count')
+
+multi_env = node['nagios']['monitored_environments']
+multi_env_search = multi_env.empty? ? '' : ' AND (chef_environment:' + multi_env.join(' OR chef_environment:') + ')'
+
+nodes = if node['nagios']['multi_environment_monitoring']
+          search(:node, "name:*#{multi_env_search}")
+        else
+          search(:node, "name:* AND chef_environment:#{node.chef_environment}")
+        end
+
+if nodes.empty?
+  Chef::Log.info('No nodes returned from search, using this node so hosts.cfg has data')
+  nodes << node
+end
+
+# Pushing current node to prevent empty hosts.cfg
+Nagios.instance.push(node)
+
+# Pushing all nodes into the Nagios.instance model
+exclude_tag = nagios_array(node['nagios']['exclude_tag_host'])
+nodes.each do |n|
+  if n.respond_to?('tags')
+    Nagios.instance.push(n) unless nagios_array(n.tags).any? { |tag| exclude_tag.include?(tag) }
+  else
+    Nagios.instance.push(n)
+  end
+end
+
+# 24x7 timeperiod
+nagios_timeperiod '24x7' do
+  options 'alias' => '24 Hours A Day, 7 Days A Week',
+          'times' => { 'sunday'    => '00:00-24:00',
+                       'monday'    => '00:00-24:00',
+                       'tuesday'   => '00:00-24:00',
+                       'wednesday' => '00:00-24:00',
+                       'thursday'  => '00:00-24:00',
+                       'friday'    => '00:00-24:00',
+                       'saturday'  => '00:00-24:00',
+                     }
+end
+
+# Host checks
+nagios_command 'check_host_alive' do
+  options 'command_line' => '$USER1$/check_ping -H $HOSTADDRESS$ -w 2000,80% -c 3000,100% -p 1'
+end
+
+# Service checks
+nagios_command 'check_nagios' do
+  options 'command_line' => '$USER1$/check_nrpe -H $HOSTADDRESS$ -c check_nagios -t 20'
+end
+
+# nrpe remote host checks
+nagios_command 'check_nrpe_alive' do
+  options 'command_line' => '$USER1$/check_nrpe -H $HOSTADDRESS$ -t 20'
+end
+
+nagios_command 'check_nrpe' do
+  options 'command_line' => '$USER1$/check_nrpe -H $HOSTADDRESS$ -c $ARG1$ -t 20'
+end
+
+# host_notify_by_email command
+nagios_command 'host_notify_by_email' do
+  options 'command_line' => '/usr/bin/printf "%b" "$LONGDATETIME$\n\n$HOSTALIAS$ $NOTIFICATIONTYPE$ $HOSTSTATE$\n\n$HOSTOUTPUT$\n\nLogin: ssh://$HOSTNAME$" | ' + node['nagios']['server']['mail_command'] + ' -s "$NOTIFICATIONTYPE$ - $HOSTALIAS$ $HOSTSTATE$!" $CONTACTEMAIL$'
+end
+
+# service_notify_by_email command
+nagios_command 'service_notify_by_email' do
+  options 'command_line' => '/usr/bin/printf "%b" "$LONGDATETIME$ - $SERVICEDESC$ $SERVICESTATE$\n\n$HOSTALIAS$  $NOTIFICATIONTYPE$\n\n$SERVICEOUTPUT$\n\nLogin: ssh://$HOSTNAME$" | ' + node['nagios']['server']['mail_command'] + ' -s "** $NOTIFICATIONTYPE$ - $HOSTALIAS$ - $SERVICEDESC$ - $SERVICESTATE$" $CONTACTEMAIL$'
+end
+
+# host_notify_by_sms_email command
+nagios_command 'host_notify_by_sms_email' do
+  options 'command_line' => '/usr/bin/printf "%b" "$HOSTALIAS$ $NOTIFICATIONTYPE$ $HOSTSTATE$\n\n$HOSTOUTPUT$" | ' + node['nagios']['server']['mail_command'] + ' -s "$HOSTALIAS$ $HOSTSTATE$!" $CONTACTPAGER$'
+end
+
+# service_notify_by_sms_email command
+nagios_command 'service_notify_by_sms_email' do
+  options 'command_line' => '/usr/bin/printf "%b" "$SERVICEDESC$ $NOTIFICATIONTYPE$ $SERVICESTATE$\n\n$SERVICEOUTPUT$" | ' + node['nagios']['server']['mail_command'] + ' -s "$HOSTALIAS$ $SERVICEDESC$ $SERVICESTATE$!" $CONTACTPAGER$'
+end
+
+# root contact
+nagios_contact 'root' do
+  options 'alias'                         => 'Root',
+          'service_notification_period'   => '24x7',
+          'host_notification_period'      => '24x7',
+          'service_notification_options'  => 'w,u,c,r',
+          'host_notification_options'     => 'd,r',
+          'service_notification_commands' => 'service_notify_by_email',
+          'host_notification_commands'    => 'host_notify_by_email',
+          'email'                         => 'root@localhost'
+end
+
+# admin contact
+nagios_contact 'admin' do
+  options 'alias'                         => 'Admin',
+          'service_notification_period'   => '24x7',
+          'host_notification_period'      => '24x7',
+          'service_notification_options'  => 'w,u,c,r',
+          'host_notification_options'     => 'd,r',
+          'service_notification_commands' => 'service_notify_by_email',
+          'host_notification_commands'    => 'host_notify_by_email'
+end
+
+nagios_contact 'default-contact' do
+  options 'name'                            => 'default-contact',
+          'service_notification_period'     => '24x7',
+          'host_notification_period'        => '24x7',
+          'service_notification_options'    => 'w,u,c,r,f',
+          'host_notification_options'       => 'd,u,r,f,s',
+          'service_notification_commands'   => 'service_notify_by_email',
+          'host_notification_commands'      => 'host_notify_by_email'
+end
+
+nagios_host 'default-host' do
+  options 'name'                         => 'default-host',
+          'notifications_enabled'        => 1,
+          'event_handler_enabled'        => 1,
+          'flap_detection_enabled'       => nagios_boolean(nagios_attr(:default_host)[:flap_detection]),
+          'process_perf_data'            => nagios_boolean(nagios_attr(:default_host)[:process_perf_data]),
+          'retain_status_information'    => 1,
+          'retain_nonstatus_information' => 1,
+          'notification_period'          => '24x7',
+          'register'                     => 0,
+          'action_url'                   => nagios_attr(:default_host)[:action_url]
+end
+
+nagios_host 'server' do
+  options 'name'                   => 'server',
+          'use'                    => 'default-host',
+          'check_period'           => nagios_attr(:default_host)[:check_period],
+          'check_interval'         => nagios_interval(nagios_attr(:default_host)[:check_interval]),
+          'retry_interval'         => nagios_interval(nagios_attr(:default_host)[:retry_interval]),
+          'max_check_attempts'     => nagios_attr(:default_host)[:max_check_attempts],
+          'check_command'          => nagios_attr(:default_host)[:check_command],
+          'notification_interval'  => nagios_interval(nagios_attr(:default_host)[:notification_interval]),
+          'notification_options'   => nagios_attr(:default_host)[:notification_options],
+          'contact_groups'         => nagios_attr(:default_contact_groups),
+          'register'               => 0
+end
+
+# Defaut host template
+Nagios.instance.default_host = node['nagios']['host_template']
+
+# Users
+# use the users_helper.rb library to build arrays of users and contacts
+nagios_users = NagiosUsers.new(node)
+nagios_users.users.each do |item|
+  o = Nagios::Contact.create(item['id'])
+  o.import(item.to_hash)
+  o.import(item['nagios'].to_hash) unless item['nagios'].nil?
+  o.use = 'default-contact'
+end
+
+nagios_contactgroup 'admins' do
+  options 'alias'   => 'Nagios Administrators',
+          'members' => nagios_users.return_user_contacts
+end
+
+nagios_contactgroup 'admins-sms' do
+  options 'alias'   => 'Sysadmin SMS',
+          'members' => nagios_users.return_user_contacts
+end
+
+# Services
+nagios_service 'default-service' do
+  options 'name'                         => 'default-service',
+          'active_checks_enabled'        => 1,
+          'passive_checks_enabled'       => 1,
+          'parallelize_check'            => 1,
+          'obsess_over_service'          => 1,
+          'check_freshness'              => 0,
+          'notifications_enabled'        => 1,
+          'event_handler_enabled'        => 1,
+          'flap_detection_enabled'       => nagios_boolean(nagios_attr(:default_service)[:flap_detection]),
+          'process_perf_data'            => nagios_boolean(nagios_attr(:default_service)[:process_perf_data]),
+          'retain_status_information'    => 1,
+          'retain_nonstatus_information' => 1,
+          'is_volatile'                  => 0,
+          'check_period'                 => '24x7',
+          'max_check_attempts'           => nagios_attr(:default_service)[:max_check_attempts],
+          'check_interval'               => nagios_interval(nagios_attr(:default_service)[:check_interval]),
+          'retry_interval'               => nagios_interval(nagios_attr(:default_service)[:retry_interval]),
+          'contact_groups'               => nagios_attr(:default_contact_groups),
+          'notification_options'         => 'w,u,c,r',
+          'notification_interval'        => nagios_interval(nagios_attr(:default_service)[:notification_interval]),
+          'notification_period'          => '24x7',
+          'register'                     => 0,
+          'action_url'                   => nagios_attr(:default_service)[:action_url]
+end
+# Default service template
+Nagios.instance.default_service = 'default-service'
+
+# Define the log monitoring template (monitoring logs is very different)
+nagios_service 'default-logfile' do
+  options 'name'                   => 'default-logfile',
+          'use'                    => 'default-service',
+          'check_period'           => '24x7',
+          'max_check_attempts'     => 1,
+          'check_interval'         => nagios_interval(nagios_attr(:default_service)[:check_interval]),
+          'retry_interval'         => nagios_interval(nagios_attr(:default_service)[:retry_interval]),
+          'contact_groups'         => nagios_attr(:default_contact_groups),
+          'notification_options'   => 'w,u,c,r',
+          'notification_period'    => '24x7',
+          'register'               => 0,
+          'is_volatile'            => 1
+end
+
+nagios_service 'service-template' do
+  options 'name'                  => 'service-template',
+          'max_check_attempts'    => nagios_attr(:default_service)[:max_check_attempts],
+          'check_interval'        => nagios_interval(nagios_attr(:default_service)[:check_interval]),
+          'retry_interval'        => nagios_interval(nagios_attr(:default_service)[:retry_interval]),
+          'notification_interval' => nagios_interval(nagios_attr(:default_service)[:notification_interval]),
+          'register'              => 0
+end
+
+nagios_resource 'USER1' do
+  options 'value' => node['nagios']['plugin_dir']
+end

data/cookbooks/nagios/recipes/apache.rb

@@ -0,0 +1,48 @@
+#
+# Author:: Tim Smith <tsmith@chef.io>
+# Cookbook Name:: nagios
+# Recipe:: apache
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+
+include_recipe 'apache2'
+include_recipe 'apache2::mod_rewrite'
+include_recipe 'apache2::mod_php5'
+include_recipe 'apache2::mod_ssl' if node['nagios']['enable_ssl']
+
+apache_site '000-default' do
+  enable false
+end
+
+apache_module 'cgi'
+
+template "#{node['apache']['dir']}/sites-available/#{node['nagios']['server']['vname']}.conf" do
+  source 'apache2.conf.erb'
+  mode '0644'
+  variables(
+    nagios_url: node['nagios']['url'],
+    https: node['nagios']['enable_ssl'],
+    ssl_cert_file: node['nagios']['ssl_cert_file'],
+    ssl_cert_key: node['nagios']['ssl_cert_key']
+  )
+  if File.symlink?("#{node['apache']['dir']}/sites-enabled/#{node['nagios']['server']['vname']}.conf")
+    notifies :reload, 'service[apache2]'
+  end
+end
+
+file "#{node['apache']['dir']}/conf.d/#{node['nagios']['server']['vname']}.conf" do
+  action :delete
+end
+
+apache_site node['nagios']['server']['vname']

data/cookbooks/nagios/recipes/default.rb

@@ -0,0 +1,204 @@
+#
+# Author:: Joshua Sierles <joshua@37signals.com>
+# Author:: Joshua Timberman <joshua@getchef.com>
+# Author:: Nathan Haneysmith <nathan@getchef.com>
+# Author:: Seth Chisamore <schisamo@getchef.com>
+# Author:: Tim Smith <tsmith@chef.io>
+# Cookbook Name:: nagios
+# Recipe:: default
+#
+# Copyright 2009, 37signals
+# Copyright 2009-2016, Chef Software, Inc.
+# Copyright 2013-2014, Limelight Networks, Inc.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# workaround to allow for a nagios server install from source using the override attribute on debian/ubuntu (COOK-2350)
+nagios_service_name = if platform_family?('debian') && node['nagios']['server']['install_method'] == 'source'
+                        node['nagios']['server']['name']
+                      else
+                        node['nagios']['server']['service_name']
+                      end
+
+# install nagios service either from source of package
+include_recipe "nagios::server_#{node['nagios']['server']['install_method']}"
+
+# configure either Apache2 or NGINX
+case node['nagios']['server']['web_server']
+when 'nginx'
+  Chef::Log.info 'Setting up Nagios server via NGINX'
+  include_recipe 'nagios::nginx'
+  web_user = node['nginx']['user']
+  web_group = node['nginx']['group'] || web_user
+when 'apache'
+  Chef::Log.info 'Setting up Nagios server via Apache2'
+  include_recipe 'nagios::apache'
+  web_user = node['apache']['user']
+  web_group = node['apache']['group'] || web_user
+else
+  Chef::Log.fatal('Unknown web server option provided for Nagios server: ' \
+                  "#{node['nagios']['server']['web_server']} provided. Allowed: 'nginx' or 'apache'")
+  raise 'Unknown web server option provided for Nagios server'
+end
+
+# use the users_helper.rb library to build arrays of users and contacts
+nagios_users = NagiosUsers.new(node)
+
+Chef::Log.fatal("Could not find users in the \"#{node['nagios']['users_databag']}\" databag with the \"#{node['nagios']['users_databag_group']}\"" \
+                ' group. Users must be defined to allow for logins to the UI. Make sure the databag exists and, if you have set the ' \
+                '"users_databag_group", that users in that group exist.') if nagios_users.users.empty?
+
+# configure the appropriate authentication method for the web server
+case node['nagios']['server_auth_method']
+when 'openid'
+  if node['nagios']['server']['web_server'] == 'apache'
+    include_recipe 'apache2::mod_auth_openid'
+  else
+    Chef::Log.fatal('OpenID authentication for Nagios is not supported on NGINX')
+    Chef::Log.fatal("Set node['nagios']['server_auth_method'] attribute in your Nagios role")
+    raise 'OpenID authentication not supported on NGINX'
+  end
+when 'cas'
+  if node['nagios']['server']['web_server'] == 'apache'
+    include_recipe 'apache2::mod_auth_cas'
+  else
+    Chef::Log.fatal('CAS authentication for Nagios is not supported on NGINX')
+    Chef::Log.fatal("Set node['nagios']['server_auth_method'] attribute in your Nagios role")
+    raise 'CAS authentivation not supported on NGINX'
+  end
+when 'ldap'
+  if node['nagios']['server']['web_server'] == 'apache'
+    include_recipe 'apache2::mod_authnz_ldap'
+  else
+    Chef::Log.fatal('LDAP authentication for Nagios is not supported on NGINX')
+    Chef::Log.fatal("Set node['nagios']['server_auth_method'] attribute in your Nagios role")
+    raise 'LDAP authentication not supported on NGINX'
+  end
+else
+  # setup htpasswd auth
+  directory node['nagios']['conf_dir']
+
+  template "#{node['nagios']['conf_dir']}/htpasswd.users" do
+    source 'htpasswd.users.erb'
+    owner node['nagios']['user']
+    group web_group
+    mode '0640'
+    variables(nagios_users: nagios_users.users)
+  end
+end
+
+# Setting all general options
+unless node['nagios'].nil?
+  unless node['nagios']['server'].nil?
+    Nagios.instance.normalize_hostname = node['nagios']['server']['normalize_hostname']
+  end
+end
+
+Nagios.instance.host_name_attribute = node['nagios']['host_name_attribute']
+
+# loading default configuration data
+if node['nagios']['server']['load_default_config']
+  include_recipe 'nagios::_load_default_config'
+end
+
+# loading all databag configurations
+if node['nagios']['server']['load_databag_config']
+  include_recipe 'nagios::_load_databag_config'
+end
+
+directory "#{node['nagios']['conf_dir']}/dist" do
+  owner node['nagios']['user']
+  group node['nagios']['group']
+  mode '0755'
+end
+
+directory node['nagios']['state_dir'] do
+  owner node['nagios']['user']
+  group node['nagios']['group']
+  mode '0751'
+end
+
+directory "#{node['nagios']['state_dir']}/rw" do
+  owner node['nagios']['user']
+  group web_group
+  mode '2710'
+end
+
+execute 'archive-default-nagios-object-definitions' do
+  command "mv #{node['nagios']['config_dir']}/*_#{node['nagios']['server']['name']}*.cfg #{node['nagios']['conf_dir']}/dist"
+  not_if { Dir.glob("#{node['nagios']['config_dir']}/*_#{node['nagios']['server']['name']}*.cfg").empty? }
+end
+
+directory "#{node['nagios']['conf_dir']}/certificates" do
+  owner web_user
+  group web_group
+  mode '0700'
+end
+
+ssl_code = "umask 077
+openssl genrsa 2048 > nagios-server.key
+openssl req -subj #{node['nagios']['ssl_req']} -new -x509 -nodes -sha1 -days 3650 -key nagios-server.key > nagios-server.crt
+cat nagios-server.key nagios-server.crt > nagios-server.pem"
+
+bash 'Create SSL Certificates' do
+  cwd "#{node['nagios']['conf_dir']}/certificates"
+  code ssl_code
+  not_if { ::File.exist?(node['nagios']['ssl_cert_file']) }
+end
+
+nagios_conf node['nagios']['server']['name'] do
+  config_subdir false
+  source 'nagios.cfg.erb'
+  variables(nagios_config: node['nagios']['conf'])
+end
+
+nagios_conf 'cgi' do
+  config_subdir false
+  variables(nagios_service_name: nagios_service_name)
+end
+
+# resource.cfg differs on RPM and tarball based systems
+if node['platform_family'] == 'rhel' || node['platform_family'] == 'fedora'
+  template "#{node['nagios']['resource_dir']}/resource.cfg" do
+    source 'resource.cfg.erb'
+    owner node['nagios']['user']
+    group node['nagios']['group']
+    mode '0600'
+  end
+
+  directory node['nagios']['resource_dir'] do
+    owner 'root'
+    group node['nagios']['group']
+    mode '0755'
+  end
+end
+
+nagios_conf 'timeperiods'
+nagios_conf 'contacts'
+nagios_conf 'commands'
+nagios_conf 'hosts'
+nagios_conf 'hostgroups'
+nagios_conf 'templates'
+nagios_conf 'services'
+nagios_conf 'servicegroups'
+nagios_conf 'servicedependencies'
+
+zap_directory node['nagios']['config_dir'] do
+  pattern '*.cfg'
+end
+
+service 'nagios' do
+  service_name nagios_service_name
+  supports status: true, restart: true, reload: true
+  action [:enable, :start]
+end