# snmpd.conf — pfv-netinfra-02 [#420] scoped ACL for LibreNMS instrumentation
# Sources: tsys-librenms LAN (192.168.3.176) + Tailscale (100.86.204.77) only.
# No broad subnet grants (founder ruling 2026-08-27, matches dcinfra/sensors pattern).
sysLocation "Rack 3 netinfra (DNS/DHCP/NTP secondary)"
sysContact ops@turnsys.com

agentaddress 127.0.0.1:161,192.168.3.253:161,100.71.171.20:161

rocommunity kn3lmgmt 127.0.0.1
rocommunity kn3lmgmt 192.168.3.176
rocommunity kn3lmgmt 100.86.204.77

# Instrumentation feeds for the monitoring session (DNS/DHCP/NTP graphing):
extend ntpq /usr/bin/ntpq -c rv
extend dhcpd-leases /bin/sh -c "grep -c '^lease' /var/lib/dhcp/dhcpd.leases"
extend dhcpd-active /bin/sh -c "grep -c 'binding state active' /var/lib/dhcp/dhcpd.leases"