1
2
3
4

cd /etc/pki/tls/certs/
# 會自動在/etc/ssl/certs/下面複製一份monit.pem
# 預設許可權是0400, 如果不是就手動修改
./make-dummy-cert monit.pem

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

set httpd port 2812 and

    # 只接受來自本地主機的連線(only accept connection from localhost)
    use address 10.10.10.141

    # 允許本地主機連線到伺服器和(allow localhost to connect to the server and)
    allow localhost
    # 和指定網段(192.168.0.0/16), 或者所有ip都可以訪問
    allow 0.0.0.0/0.0.0.0
    
    # 需要使用者'admin'，密碼為'monit'(require user 'admin' with password 'monit')
    allow admin:monit
    
    # 啟用SSL/TLS並設定伺服器證書的路徑(enable SSL/TLS and set path to server certificate)
    with ssl {
        pemfile: /etc/ssl/certs/monit.pem
    }

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

set httpd port 2812 and

    # 只接受來自本地主機的連線(only accept connection from localhost)
    use address 10.10.10.141

    # 允許本地主機連線到伺服器和(allow localhost to connect to the server and)
    allow localhost
    # 和指定網段(192.168.0.0/16), 或者所有ip都可以訪問
    allow 192.168.0.0/16
    # 配置域名
    allow myhost.mydomain.ro

    # 需要使用者'admin'，密碼為'monit'(require user 'admin' with password 'monit')
    allow admin:monit

    # 啟用SSL/TLS並設定伺服器證書的路徑(enable SSL/TLS and set path to server certificate)
    with ssl {
        pemfile: /etc/ssl/certs/monit.pem
    }

1
2
3
4
5
6
7
8
9
10
11
12

set mailserver  smtp.exmail.qq.com port 465
set mail-format {
 from: [email protected]
 subject: $SERVICE $EVENT at $DATE on $HOST
 message: Monit $ACTION $SERVICE $EVENT at $DATE on $HOST : $DESCRIPTION.

       Yours sincerely,
          Monit

  }

set alert [email protected]

1
2
3

set daemon 60
   with start delay 60
set logfile syslog facility log_daemon

1
2
3

set idfile /var/monit/id
set eventqueue
     basedir /var/monit

1
2
3
4
5

$ monit -t

New Monit id: 8b7015f050672ebfd066d9e161cdf3ef
Stored in '/root/.monit.id'
Control file syntax OK

1
2

systemctl start monit
systemctl enable monit

1
2
3
4
5
6
7
8
9
10
11
12
13

# 匹配程序名
check process flask MATCHING gunicorn

# 配置服務啟動和重啟命令
start program = "/usr/bin/sudo service mongod start"
restart program = "/usr/bin/sudo service mongod restart"

# 如果埠27017無法訪問則認為服務失敗，發報警郵件並重啟服務
if failed port 27017  type tcp then alert
if failed port 27017  type tcp then restart

# 如果在三個週期內重啟了3次，則不再監控
# if 3 restarts within 3 cycles then unmonitor

1
2
3
4

check program monitor with path "/bin/bash /etc/monit.d/service/service" with timeout 60 seconds

# IF STATUS operator value THEN action
if status == 1 then exec "/bin/bash /etc/monit.d/service/service restart views"