ooni / ooni/devops

Nginx rules collisions on hosts that support http(s) traffic on port 80/443

Open
#469 0 comments 0 reactions 1 assignee View on GitHub

@LDiazN is already working on this.

Since Jul 29, 2026.

Dominant language
HCL
Stars
4
Forks
15
Avg merge
1h 50m
Merged PRs (30d)
4

Description

The Prometheus node exporter role we use for setting up monitoring on all of our hosts creates an nginx config that sometimes collides with other things also deployed in that host, usually when they support traffic on port 443/80.

This is due to the fact that the node exporter role uses the inventory_hostname to fill in the nginx config, but maybe the hostname used for monitoring is not the one used for something else. Example: notebook.ooni.org is usually used for actually using the jupyter notebook server. notebook1.htz-fns.prod.ooni.nu on the other hand is used for monitoring

The result is that two Nginx server blocks are created for the same port and nginx ignores one of them

The task is to find a way to fix the address used for monitoring on a host regardless of how it's called when running the ansible command. This can be done by changing the node exporter port or setting a different domain for the same host

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.