Alerts

Notify the operator when a monitored condition crosses a threshold (disk usage, link/gateway down, certificate expiry, daemon health, PF state table). Email is submitted to the local mail system (no SMTP credentials are stored); a webhook channel HTTPS-POSTs to an operator URL with an optional bearer token; a local syslog channel writes to the system log only.

{{#ERROR}}
{{ERROR}}
{{/ERROR}} {{#FLASH}}
{{FLASH}}
{{/FLASH}} {{#WRITE}}
{{/WRITE}}

Channels

A channel is email (a destination address; Mail from optional, defaults to root@<hostname>), webhook (an https:// URL plus an optional, write-only bearer token), or local syslog (no configuration and no delivery off the box — alerts are written to the system log at daemon.crit, so they reach a remote collector only if you have configured remote logging with a selector that covers it). The local syslog channel is created at first boot so a new box alerts out of the box; add an email or webhook channel to have alerts reach you off-box. Rules reference a channel by name.

{{#WRITE}}{{/WRITE}}
{{CHANNEL_ROWS}}

Rules

Each rule watches one condition. Threshold is a percentage (disk / PF states) or days remaining (certificate expiry); on/off conditions ignore it. Cooldown throttles repeat notifications.

{{#WRITE}}{{/WRITE}}
{{RULE_ROWS}}
{{#WRITE}}
{{/WRITE}}
{{#TEST}}

Send a test alert

Delivers a fixed "OgmaProtect test alert" to the chosen channel (email or webhook POST) — proves the notification path end-to-end.

{{/TEST}}