Disable some relatively standard checks on hypervisors, since they're special

playbooks/tasks/web/nagios.yml

@@ -52,8 +52,10 @@
         command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_systemd_unit atd.service
       - name: Unit backup.service
         command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_systemd_unit backup.service
+        hostgroup: "!role-hypervisor"
       - name: Unit backup.timer
         command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_systemd_unit backup.timer
+        hostgroup: "!role-hypervisor"
       - name: Unit cron.service
         command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_systemd_unit cron.service
       - name: Unit dbus.service
@@ -65,6 +67,7 @@
         command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_systemd_unit ssh.service
       - name: Unit systemd-resolved.service
         command: check_by_ssh!/usr/local/bin/monitoring-scripts/check_systemd_unit systemd-resolved.service
+        hostgroup: "!role-hypervisor"
       - name: Users
         command: check_by_ssh!/usr/lib/nagios/plugins/check_users -w 3 -c 5
       # Tag-specific checks

roles/common/tasks/packages.yml

@@ -10,6 +10,7 @@
           - acl
           - apt-file
           - aptitude
+          - at
           - awscli
           - htop
           - jq