Add check_rbl

roles/icinga2_master/templates/zones.d/global-templates/commands.conf.j2

@@ -15,6 +15,17 @@ object CheckCommand "sudo_smart" {
     command = [ "sudo" ] + command
 }
 
+object CheckCommand "rbl_extra_opts" {
+    import "rbl"
+    arguments += {
+        "--extra-opts" = {
+            value = "rbl@/etc/nagios-plugins/check_rbl.ini"
+            required = true
+        }
+    }
+    arguments["-s"]["required"] = false
+}
+
 # the original "systemd" CheckCommand uses /check_systemd.py as executable
 object CheckCommand "check_systemd" {
     import "systemd"

roles/mailserver_monitoring/tasks/main.yml

@@ -1,5 +1,12 @@
 ---
 
+- name: Install packages
+  become: true
+  ansible.builtin.apt:
+    name:
+      - monitoring-plugins-check-logfiles
+      - libnet-ip-perl
+
 - name: Copy mailserver services on icinga2 Master
   delegate_to: "{{ icinga2_master }}"
   become: true
@@ -21,11 +28,6 @@
     mode: 0440
     validate: 'visudo -cf %s'
 
-- name: Install packages
-  become: true
-  ansible.builtin.apt:
-    name: monitoring-plugins-check-logfiles
-
 - name: Copy sudoers file for nagios as root (for check_logfiles)
   become: true
   ansible.builtin.copy:

roles/mailserver_monitoring/templates/zones.d/master/services/mailserver.conf.j2

@@ -47,3 +47,13 @@ apply Service "mail-activity" {
     vars.logfiles_rotation = "mail.log.*"
     vars.logfiles_critical_pattern = "!relay="
 }
+
+apply Service "rbl" {
+    import "generic-service"
+    check_command = "rbl_extra_opts"
+    check_interval = 1h
+    command_endpoint = host.name
+    assign where host.name == "{{ inventory_hostname }}"
+    vars.rbl_hostame = "{{ ipv4_addr }}"
+    vars.rbl_timeout = 120
+}