ooni/devops

View on GitHub

Stars: 4
Forks: 15
Open beginner issues: 0
Indexed issues: 61
Avg merge: 1h 50m
Merged PRs (30d): 4

Dominant language: HCL
License: No license data
Last GitHub push: Sep 8, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

61 open issues indexed

deploy-testlists.yml does not update container with tag latest if it is already running Open

Difficulty 3/5 1-2 days Newbie friendliness 58/100

ooni/devops#483 · Opened Aug 19, 2026
add cloudflare r2 storage with clickhouse incremental backups Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

ooni/devops#482 · Opened Aug 18, 2026
normalize datetime to utc specific timezone Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ooni/devops#481 · Opened Aug 18, 2026
re-run ansible deployments on monitoring, notebook, etc Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

ooni/devops#476 · Opened Aug 5, 2026
fastpath input URLs are not normalized Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

ooni/devops#471 · Opened Aug 3, 2026
Nginx rules collisions on hosts that support http(s) traffic on port 80/443 Open

ooni/devops#469 · 1 assignee · Opened Jul 29, 2026
Clean up ansible roles Open

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ooni/devops#456 · Opened Jul 13, 2026
Create clickhouse user for notebook server Open

ooni/devops#451 · 1 assignee · Opened Jul 9, 2026
investigate why nginx stops connecting to upstreams Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ooni/devops#449 · Opened Jul 7, 2026
consolidate ooni addressing using ooni.org and ooni.io Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

ooni/devops#448 · Opened Jun 30, 2026
clickhouse version is out of support period Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

ooni/devops#437 · 1 comment · Opened May 26, 2026
notebook1 clickhouse-server has reference to database using postgresql, there is no postgresql installed Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

ooni/devops#434 · Opened May 21, 2026
ansible roles nginx and clickhouse do not support debian 13 Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

ooni/devops#429 · 2 comments · Opened May 15, 2026
Create skipping indexes on observations and analysis tables Open

ooni/devops#411 · 1 assignee · Opened Apr 21, 2026
Improve primary keys of clickhouse tables Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

ooni/devops#410 · 1 comment · Opened Apr 20, 2026
figure out why docker doesn't create the nft tables for port redirection on fastpath Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

ooni/devops#408 · Opened Apr 16, 2026
2026-04-10 Incident affecting fastpath Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ooni/devops#396 · 2 comments · Opened Apr 11, 2026
Investigate if we can alert on uncaught exception count in the logs Open

ooni/devops#370 · 1 assignee · Opened Mar 12, 2026
Add slack notifications for AWS code pipeline events Open

ooni/devops#364 · 1 assignee · Opened Mar 10, 2026
redeployment of clickhouseproxy needs to update nft rules on clickhouse Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ooni/devops#348 · Opened Feb 27, 2026
dom0-bootstrap.yml -> we have a part of this, but we should verify we aren't missing anything Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ooni/devops#341 · Opened Feb 20, 2026
generate and manage certificates for prometheus node_exporter TLS and client certificate authentication Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

ooni/devops#340 · 4 comments · Opened Feb 19, 2026
obtain certificates using terraform and route53 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ooni/devops#339 · Opened Feb 19, 2026
Work to be done related to moving terraform provisioning over from ansible configs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

ooni/devops#337 · Opened Feb 18, 2026
update ec2 instance image to latest ubuntu LTS Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

ooni/devops#318 · 3 comments · Opened Jan 29, 2026
slack to IRC and back bridge is broken Open

chore

ooni/devops#288 · 1 comment · 1 assignee · Opened Nov 25, 2025
Update grafana dashboards Open

ooni/devops#280 · 1 assignee · Opened Nov 7, 2025
Look into reserving instances on AWS Open

funder/otffoss2025

ooni/devops#273 · 2 comments · 2 assignees · Opened Oct 16, 2025
Investigate how to better allocate tasks in ECS Open

funder/otffoss2025

ooni/devops#272 · 1 assignee · Opened Oct 15, 2025
Come up with clickhouse backup process Open

ooni/devops#259 · 1 assignee · Opened Jul 28, 2025
Service logs are not encrypted, resulting in increased exposure should sensitive fields appear in logs Open

funder/otffoss2025 security

ooni/devops#249 · 1 assignee · Opened Jul 2, 2025
SSH open to the internet Open

funder/otffoss2025 security

ooni/devops#248 · 1 assignee · Opened Jul 2, 2025
Tighten permissions of the OONIDevopsPolicy AWS policy Open

funder/otffoss2025 security

ooni/devops#247 · 1 assignee · Opened Jul 2, 2025
Fix readonly user permissions in clickhouse cluster Open

chore funder/otffoss2025

ooni/devops#245 · 1 assignee · Opened May 20, 2025
Fix openvpn server side deployment Open

funder/otffoss2025

ooni/devops#228 · 3 comments · 1 assignee · Opened Mar 31, 2025
migrate echo and http-return-json-headers test helper hosts Open

funder/otffoss2025

Difficulty 5/5 Over a week Newbie friendliness 25/100

ooni/devops#224 · 3 comments · Opened Mar 24, 2025
Install node exporter in ansible controller box Open

funder/otfcred2025

ooni/devops#216 · 1 comment · 1 assignee · Opened Mar 6, 2025
make HSM configuration more robust to unintended large billings Open

ooni/devops#201 · 1 assignee · Opened Feb 25, 2025
migrate ams-slack host Open

funder/otffoss2025

ooni/devops#197 · 2 assignees · Opened Feb 24, 2025
Evaluate using golden images for deploying ec2 nodes Open

funder/otffoss2025

ooni/devops#190 · 1 assignee · Opened Feb 19, 2025
Test the ecs-discovery.py script in the CI Open

funder/otfcred2025

ooni/devops#188 · 1 assignee · Opened Feb 18, 2025
Improve monitoring of ooniservices Open

ooni/devops#157 · 2 assignees · Opened Jan 22, 2025
There are EC2 instances and ECS services that expose HTTP/HTTPS to the internet rather than only accepting connections via the load balancer Open

funder/otffoss2025

Difficulty 4/5 3-5 days Newbie friendliness 20/100

ooni/devops#152 · 1 comment · Opened Jan 14, 2025
The CloudWatch retention period is not set Open

funder/otffoss2025

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ooni/devops#151 · 1 comment · Opened Jan 14, 2025
VPC flow logs are not enabled in the VPC Open

funder/otffoss2025

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ooni/devops#150 · Opened Jan 14, 2025
ESC task definitions use the bridge networking mode rather than the recommended awsvpc mode Open

funder/otffoss2025

Difficulty 3/5 1-2 days Newbie friendliness 25/100

ooni/devops#149 · Opened Jan 14, 2025
The ooniapi, oonidata, and oonith services are exposed without a web application firewall Open

funder/otffoss2025

Difficulty 4/5 3-5 days Newbie friendliness 20/100

ooni/devops#148 · Opened Jan 14, 2025
The length of an email address is not validated before the email address is checked for validity with a regular expression Open

funder/otffoss2025

Difficulty 3/5 1-2 days Newbie friendliness 20/100

ooni/devops#147 · Opened Jan 14, 2025
There are SecretsManager secret resources without a KMS ID supplied, leading to the default Customer Master Key being used Open

funder/otffoss2025

Difficulty 4/5 3-5 days Newbie friendliness 25/100

ooni/devops#146 · Opened Jan 14, 2025
The AWS Application Load balancer can drop requests with invalid headers, but this is not enabled Open

funder/otffoss2025

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

ooni/devops#145 · Opened Jan 14, 2025

ooni/devops

Get new issues in your inbox