wireguard is udp

bundles/apt/files/check_apt_upgradable

@@ -0,0 +1,15 @@
+#!/bin/bash
+
+apt update -qq --silent 2> /dev/null
+
+UPGRADABLE=$(apt list --upgradable -qq 2> /dev/null | cut -d '/' -f 1)
+
+if test "$UPGRADABLE" != ""
+then
+  echo "$(wc -l <<< $UPGRADABLE) package(s) upgradable:"
+  echo
+  echo "$UPGRADABLE"
+  exit 1
+else
+  exit 0
+fi

bundles/apt/items.py

@@ -28,6 +28,9 @@ files = {
     '/etc/apt/sources.list': {
         'content': '# managed'
     },
+    '/usr/lib/nagios/plugins/check_apt_upgradable': {
+        'mode': '0755',
+    },
 }
 
 actions = {

bundles/apt/metadata.py

@@ -3,4 +3,13 @@ defaults = {
         'packages': {},
         'sources': set(),
     },
+    'monitoring': {
+        'services': {
+            'apt upgradable': {
+                'vars.command': '/usr/lib/nagios/plugins/check_apt_upgradable',
+                'vars.sudo': True,
+                'check_interval': '1d',
+            },
+        },
+    },
 }

bundles/wireguard/metadata.py

@@ -19,7 +19,7 @@ defaults = {
     },
     'nftables': {
         'input': {
-            'tcp dport 51820 accept',
+            'udp dport 51820 accept',
         },
     },
     'wireguard': {