imported>Ciarandg: Fix module syntax

2022-09-30T20:40:43Z

Fix module syntax

← Older revision		Revision as of 20:40, 30 September 2022
Line 51:		Line 51:
	Now a possible configuration looks like this:		Now a possible configuration looks like this:
	{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>		{{file\|/etc/nixos/configuration.nix\|nix\|<nowiki>
	{config, ~~pkg~~, lib, ...}		{config, pkgs, lib, ...}:
	{		{
	# [...]		# [...]

imported>Nix: add Software/Applications subcategory

2021-09-20T06:12:18Z

add Software/Applications subcategory

← Older revision		Revision as of 06:12, 20 September 2021
Line 109:		Line 109:
	}		}
	</nowiki>}}		</nowiki>}}

			[[Category:Applications]]

imported>Symphorien: add nagios page to describe how to configure the web interface

2020-04-12T19:24:05Z

add nagios page to describe how to configure the web interface

New page

Nagios is a monitoring daemon. It comprises the daemon itself, and a web interface.

=== Daemon configuration ===

The simplest way of having the Nagios daemon run is to write its configuration in a <code>main.cfg</code> alongside <code>configuration.nix</code> in <code>/etc/nixos</code>.

Then
{{file|/etc/nixos/configuration.nix|nix|<nowiki>
{config, pkg, lib, ...}
{
# [...]
services.nagios = {
enable = true;
objectDefs = [ ./main.cfg ];
};
}
</nowiki>}}
{{Evaluate}}

Nagios configuration files contain a lot of boilerplate, it is possible to reuse some of the default configuration files. For example to reuse <code>templates.cfg</code>, <code>timeperiods.cfg</code> and <code>commands.cfg</code>:
<syntaxhighlight lang="nix">
{
services.nagios.objectDefs =
(map (x: "${pkgs.nagios}/etc/objects/${x}.cfg") [ "templates" "timeperiods" "commands" ]) ++
[ ./main.cfg ];
}
</syntaxhighlight>

To enable verbose logging into <code>/var/log/nagios/debug.log</code>:
<syntaxhighlight lang="nix">
{
services.nagios.extraConfig = {
debug_level = "-1";
debug_file = "/var/log/nagios/debug.log";
};
}
</syntaxhighlight>

=== Web interface ===

The NixOS module for Nagios does not automatically configure the web interface for your favorite web server. The section below describes a possible configuration for [[Nginx]].

The web interface does not handle authentication; instead it is delegated to the web server. We will use HTTP basic authentication. This is only safe over HTTPS, of course. You need to create a htpasswd file readable by the nginx user only:
{{Commands|<nowiki>
htpasswd -c /var/lib/nagios/htpasswd admin_account
chmod 0440 /var/lib/nagios/htpasswd
chown nginx:nginx /var/lib/nagios/htpasswd
</nowiki>}}

Now a possible configuration looks like this:
{{file|/etc/nixos/configuration.nix|nix|<nowiki>
{config, pkg, lib, ...}
{
# [...]
services.phpfpm.pools.nagios = {
user = "nagios";
settings = {
"listen.owner" = config.services.nginx.user;
"pm" = "ondemand";
"pm.max_children" = 2;
"pm.process_idle_timeout" = "60s";
"pm.max_requests" = 200;
};
};
services.fcgiwrap = {
enable = true;
user = "nagios";
};
services.nginx.virtualHosts."nagios.example.com" = {
forceSSL = true;
enableACME = true;
root = "${pkgs.nagios}/share/";
extraConfig = ''
index index.php;
auth_basic "Nagios";
auth_basic_user_file /var/lib/nagios/htpasswd;
'';
locations = {
"/".tryFiles = "$uri /index.php";
"/nagios/".alias = "${pkgs.nagios}/share/";
"~ \\.cgi$" = {
root = "${pkgs.nagios}/sbin/";
extraConfig = ''
rewrite ^/nagios/cgi-bin/(.*)$ /$1;

include ${pkgs.nginx}/conf/fastcgi.conf;
include ${pkgs.nginx}/conf/fastcgi_params;

fastcgi_param AUTH_USER $remote_user;
fastcgi_param REMOTE_USER $remote_user;
fastcgi_param SCRIPT_FILENAME ${pkgs.nagios}/share/sbin$fastcgi_script_name;

fastcgi_pass unix:${config.services.fcgiwrap.socketAddress};
'';
};
"~* \\.php$" = {
tryFiles = "$uri =404";
extraConfig = ''
include ${pkgs.nginx}/conf/fastcgi_params;
include ${pkgs.nginx}/conf/fastcgi.conf;
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:${config.services.phpfpm.pools.nagios.socket};
fastcgi_index index.php;
'';
};
};
};
}
</nowiki>}}

Nagios - Revision history

imported>Ciarandg: Fix module syntax

imported>Nix: add Software/Applications subcategory

imported>Symphorien: add nagios page to describe how to configure the web interface