Add monitoring rule for expiring SSL certificates

2022-01-17 01:43:48 +01:00 · 2022-01-17 01:43:48 +01:00 · c131e4cd95
parent 804d12a5dc
commit c131e4cd95
1 changed files with 8 additions and 0 deletions
--- a/nixos/roles/monitoring/rules.yml
+++ b/nixos/roles/monitoring/rules.yml
@ -50,3 +50,11 @@ groups:
             severity: warning
          annotations:
             description: "mail queue {{ $labels.queue }} of {{ $labels.name }} has accumulated a waiting time of {{ $value | humanizeDuration }}."
+        # TLS
+        - alert: CertificateExpiry
+          expr: probe_ssl_earliest_cert_expiry - time() < 86400 * 14
+          for: 10m
+          labels:
+            severity: warning
+          annotations:
+            summary: "Certificate for {{ $labels.instance }} is expiring soon."