Internal HTTPS private CA direct
120-https-private-ca-direct.yaml
HTTP(S)
What this example does
This example demonstrates internal https private ca direct.
Checks and behavior
- Sends an GET request to https://service.internal.example/health.
- Checks allowed/denied HTTP status codes.
- TLS settings cover certificate trust, certificate expiry, private CA bundle.
- Uses none proxy configuration.
- Formats results for nagios output.
Adapt example domains, addresses, credentials and thresholds to your environment before use.
YAML configuration
# Copyright (c) 2026 mati peterson. Maintainer: mati peterson <ipsonic@mailbox.org>. Project: https://ipsonic.com/probe/. Disclaimer: Provided AS IS, without warranty of any kind. Use at your own risk; validate checks and configurations before production use.
# export PROBE_CA_BUNDLE=/etc/ipsonic-probe/private-roots.pem
name: Internal HTTPS private CA direct
url: https://service.internal.example/health
proxy:
mode: none
tls:
verify: true
ca_file_env: PROBE_CA_BUNDLE
min_valid_days: 21
tests:
status:
allow: [200]
monitoring:
service_name: Internal private CA TLS
output: nagios
on_failure: critical