Monit

Ansible role for configuring Monit. Sample usage see example.yml.

Requirements

An ansible ready host.

Begun to update with a install from source as the packages are out of date (see https://github.com/idealista/monit-role) To_do:

• possibly specific a backports version?

Role Variables

• monit_cycle: Time between checks in seconds. Defaults to 120.
• monit_log_destination: Where the log will be written. Can be a path to a file or "syslog", which will write to syslog daemon. Defaults to /var/log/monit.log.
• monit_state_file: State file path. Defaults to /var/lib/monit/state.
• monit_id_file: Id file path. Defaults to /var/lib/monit/id.
• monit_eventqueue_dir: Event queue directory path. It is only used when this variable is defined. Defaults to /var/lib/monit/events.
• monit_eventqueue_slots: Event queue slots. It is only used when monit_eventqueue_dir is defined. Defaults to 100.
• monit_services: List of hashes of services to be monitorized by monit.
  • name: Name of the process or host.
  • type: Type of monitorization, "process", "host" and "system" are supported.
  • target: Target of monitorization. Should be a pidfile, an address or undefined, depending on the type of service.
  • start: Command that starts the service. Optional.
  • stop: Command that stop the service. Optional.
  • rules: List of rules to be included in this service. Optional.
• monit_service_detele_unlisted: Remove existing service monitorization configurations not declared in the services. Defaults to true.
• monit_start_monitors: Start configured services. Defaults to true.
• monit_mail_enabled: Enable mail alerts. Defaults to false.
• monit_mailserver_host: Mailserver host address. Defaults to localhost.
• monit_mailserver_host: Mailserver host port. Defaults to 25.
• monit_mailserver_user: Username for authentication on mailserver.
• monit_mailserver_password: Password for authentication on mailserver.
• monit_mailserver_timeout: Timeout for mailserver connection. Defaults to 5.
• monit_mailserver_ssl_version: If defined, monit will use this algorithm for SSL connection to the mail server. Possible values are SSLAUTO, SSLV2, SSLV3, TLSV1, TLSV11, TLSV12.
• monit_alert_address: Mail address where the alerts will be sent to.
• monit_alert_mail_from: Sender mail address.
• monit_alert_mail_subject: Mail subject.
• monit_alert_mail_message: Mail message body.
• monit_webinterface_enabled: Enable monit web interface. Defaults to true.
• monit_webinterface_bind: IP address to bind web interface. Defaults to 0.0.0.0 (listen for external requests).
• monit_webinterface_port: Port for web interface. Defaults to 2812.
• monit_webinterface_rw_group: Define group of users allowed to read and write on web interface. It is only applied when defined and is empty by default.
• monit_webinterface_r_group: Define group of users allowed to read on web interface. It is only applied when defined and is empty by default.
• monit_webinterface_acl_rules: List of ACL rules for the web interface, such as "localhost" or "hauk:password". It is only applied when defined and is empty by default.
• monit_apache_rules: List of monitoring rules for apache service. You should adjust them to your needs.
• monit_apache_groups: List of groups for the apache service. This list is empty by default.
• monit_memcached_rules: List of monitoring rules for memcached service. You should adjust them to your needs.
• monit_memcached_groups: List of groups for the memcached service. This list is empty by default.

The following variables are used for the logic of the role and should not be changed by the users.

• monit_unstartable_monitors: Config files present in /etc/monit/conf.d that are not actually monitors and, as such, should no be started by our role when monit_start_monitors is true.

Slack Integration

You can use a custom webhook to post alerts to slack

monit_slack_webhook: - whether or not to put up the custom slack integration monit_slack_webhook_key: '' - the webhook key generated by slack monit_slack_channel: 'general' - the channel you want to post to

Then in any monitor add a line such as:

• "if failed port 8080 then exec '/usr/bin/ruby /etc/monit/slack.rb'"

Custom facts

This role writes a monit_services_configured on /etc/ansible/facts.d/monit.fact in order to keep track of the configured monitors between different plays. This helps us removing unused monitors.

LICENSE

MIT

CONTRIBUTE

Feel free to contribute by add issue and pull request.

CONTRIBUTORS

• Manuel Tiago Pereira
• Panagiotis Moustafellos
• Peter Golm