#!/bin/sh -eu
tool=$(readlink -e "${0%/*}/..")
. "$tool"/local/lib.sh

"$tool"/local/apt-get-install check-mk-agent xinetd
sudo install -m 664 -o root -g root /dev/stdin /etc/xinetd.d/check_mk <<-EOF
	service check_mk
	{
		type	        = UNLISTED
		port		= 6556
		socket_type	= stream
		protocol	= tcp
		wait		= no
		user		= root
		server		= /usr/bin/check_mk_agent
		only_from	= 127.0.0.1 91.216.110.7 91.224.149.11
		#log_on_success	= 
		disable		= yes
		}
	EOF

sudo adduser --system --home /var/lib/check_mk_agent --group check_mk_agent --shell /bin/sh
sudo install -m 440 -o root -g root /dev/stdin /etc/sudoers.d/check_mk_agent <<-EOF
	check_mk_agent        ALL=NOPASSWD: /usr/bin/check_mk_agent
	EOF
sudo install -m 700 -o check_mk_agent -g check_mk_agent -d /var/lib/check_mk_agent/.ssh
sudo install -m 600 -o check_mk_agent -g check_mk_agent /dev/stdin /var/lib/check_mk_agent/etc/ssh/authorized_keys <<-EOF
	command="sudo /usr/bin/check_mk_agent",no-port-forwarding,no-agent-forwarding,no-X11-forwarding ssh-rsa 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 nagios@gaffe.grenode.net
	EOF

sudo install -m 640 -o root -g root /dev/stdin /etc/check_mk/mrpe.cfg <<-EOF
	check_gre_apt /usr/lib/nagios/plugins/check_apt -t 20
	check_gre_swap /usr/lib/nagios/plugins/check_swap -w 90% -c 25%
	check_gre_disk /usr/lib/nagios/plugins/check_disk -w 20% -c 10%
	check_gre_load /usr/lib/nagios/plugins/check_load -w 15,10,5 -c 30,25,20
	EOF