Add check for mailserver-pgsql

roles/icinga2_master/tasks/main.yml

@@ -55,6 +55,27 @@
     - "{{ role_path }}/templates/zones.d/master/*.conf.j2"
   notify: Reload icinga2 service
 
+- name: Create global-templates zone directory
+  become: true
+  ansible.builtin.file:
+    path: /etc/icinga2/zones.d/global-templates
+    state: directory
+    owner: nagios
+    group: nagios
+    mode: 0750
+
+- name: Copy files under global-templates zone directory
+  become: true
+  ansible.builtin.template:
+    src: "{{ item }}"
+    dest: "/etc/icinga2/zones.d/global-templates/{{ item | basename | replace('.j2', '') }}"
+    owner: nagios
+    group: nagios
+    mode: 0644
+  with_fileglob:
+    - "{{ role_path }}/templates/zones.d/global-templates/*.conf.j2"
+  notify: Reload icinga2 service
+
 - name: Create services directory
   become: true
   ansible.builtin.file:

roles/icinga2_master/templates/zones.d/global-templates/commands.conf.j2

@@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+
+object CheckCommand "sudo_pgsql" {
+    import "pgsql"
+    command = [ "sudo", "-u", "postgres" ] + command
+}

roles/mailserver_monitoring/tasks/main.yml

@@ -10,3 +10,13 @@
     group: nagios
     mode: 0644
   notify: Reload icinga2 service
+
+- name: Copy sudoers file for nagios as postgres
+  become: true
+  ansible.builtin.copy:
+    content: 'nagios ALL=(postgres) NOPASSWD:/usr/lib/nagios/plugins/check_pgsql'
+    dest: /etc/sudoers.d/nagios-pgsql
+    owner: root
+    group: root
+    mode: 0440
+    validate: 'visudo -cf %s'

roles/mailserver_monitoring/templates/zones.d/master/services/mailserver.conf.j2

@@ -26,3 +26,12 @@ apply Service "imaps" {
     check_command = "simap"
     assign where host.name == "{{ inventory_hostname }}"
 }
+
+apply Service "mailserver-pgsql" {
+    import "generic-service"
+    check_command = "sudo_pgsql"
+    command_endpoint = host.name
+    assign where host.name == "{{ inventory_hostname }}"
+    vars.pgsql_hostname = "/run/postgresql"
+    vars.pgsql_database = "mailserver"
+}