From f7aec8c980687d15beebe51353b6795eb92f579d Mon Sep 17 00:00:00 2001
From: Alex Dehnert <alex@dehnerts.com>
Date: Tue, 1 Jul 2025 21:15:14 +0000
Subject: [PATCH] wieliczka: Alert on age of vault-secrets.conf

This depends on adehnert-sysconfig/salt commit 6ce2078ddb3a2e, and adds the
check proposed in
https://gitlab.com/adehnert-sysconfig/salt/-/issues/28#note_2457313345
---
 local.d/wieliczka.cfg | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/local.d/wieliczka.cfg b/local.d/wieliczka.cfg
index 3b1e240..d278e8f 100644
--- a/local.d/wieliczka.cfg
+++ b/local.d/wieliczka.cfg
@@ -23,3 +23,14 @@ define service {
     # Often takes more than 10 seconds to run
     check_command       check_byssh_generic_slow!check_salt_vault
 }
+
+define service {
+    # Check infrequently, because this is really for expiry checking
+    # But catch the recovery quickly ish
+    use adehnert-rare-service
+    retry_interval      15
+    host_name           wieliczka
+    service_description SALT-VAULT-SECRET
+    check_command       check_byssh_generic!check_file_age salt-vault-secrets
+    contact_groups      adehnert-priv
+}
-- 
2.34.1