aptitude install monit

set daemon  60
set logfile syslog facility log_daemon
set mailserver localhost
set mail-format { from: monit@lablxtst.localdomain }
set alert tech@lablxtst.localdomain
set httpd port 2812 and
SSL ENABLE
PEMFILE  /var/certs/monit.pem
allow admin:test
 
check process proftpd with pidfile /var/run/proftpd.pid
start program = "/etc/init.d/proftpd start"
stop program  = "/etc/init.d/proftpd stop"
if failed port 21 protocol ftp then restart
if 5 restarts within 5 cycles then timeout
 
check process sshd with pidfile /var/run/sshd.pid
start program  "/etc/init.d/ssh start"
stop program  "/etc/init.d/ssh stop"
if failed port 22 protocol ssh then restart
if 5 restarts within 5 cycles then timeout
 
check process mysql with pidfile /var/run/mysqld/mysqld.pid
group database
start program = "/etc/init.d/mysql start"
stop program = "/etc/init.d/mysql stop"
if failed host 127.0.0.1 port 3306 then restart
if 5 restarts within 5 cycles then timeout
 
check process postfix with pidfile /var/spool/postfix/pid/master.pid
group mail
start program = "/etc/init.d/postfix start"
stop  program = "/etc/init.d/postfix stop"
if failed port 25 protocol smtp then restart
if 5 restarts within 5 cycles then timeout
 
check process lighttpd with pidfile /var/run/lighttpd.pid
group www-data
start program = "/etc/init.d/lighttpd start"
stop program = "/etc/init.d/lighttpd stop"
if cpu > 60% for 2 cycles then alert
if cpu > 80% for 5 cycles then restart
if totalmem > 200.0 MB for 5 cycles then restart
if children > 250 then restart
if loadavg(5min) greater than 10 for 8 cycles then stop
if failed host lablxtst.localdomain port 80 protocol http
and request "/index.html"
then restart
if 3 restarts within 5 cycles then timeout

if failed host lablxtst.localdomain port 80 protocol http
and request "/index.html"

mkdir /var/certs
cd /var/certs

vi /var/certs/monit.cnf

# create RSA certs - Server
 
RANDFILE = ./openssl.rnd
 
[ req ]
default_bits = 1024
encrypt_key = yes
distinguished_name = req_dn
x509_extensions = cert_type
 
[ req_dn ]
countryName = IT
countryName_default = IT
 
stateOrProvinceName             = Italy
stateOrProvinceName_default     = Milan
 
localityName                    = Milan
localityName_default            = Milan
 
organizationName                = Local Company
organizationName_default        = Monit Inc.
 
organizationalUnitName          = Technical Department
organizationalUnitName_default  = Technical Department
 
commonName                      = lablxtst.localdomain
commonName_default              = lablxtst.localdomain
 
emailAddress                    = tech@lablxtst.localdomain
emailAddress_default            = tech@lablxtst.localdomain
 
[ cert_type ]
nsCertType = server

openssl req -new -x509 -days 365 -nodes -config ./monit.cnf -out /var/certs/monit.pem -keyout /var/certs/monit.pem
openssl gendh 512 >> /var/certs/monit.pem
openssl x509 -subject -dates -fingerprint -noout -in /var/certs/monit.pem
chmod 700 /var/certs/monit.pem

vi /etc/default/monit

# Defaults for monit initscript
# sourced by /etc/init.d/monit
# installed at /etc/default/monit by maintainer scripts
# Fredrik Steen <stone@debian.org>
 
# You must set this variable to for monit to start
startup=1
 
# To change the intervals which monit should run uncomment
# and change this variable.
CHECK_INTERVALS=60

/etc/init.d/monit start