Nginx cannot resolve the host, occasional 502 bad gateway about bunkerweb

[fl0ppy-d1sk]

Hello @xn3cr0nx,

The default value of DNS_RESOLVERS is now 127.0.0.11. Feel free to open a new issue if needed.

[fl0ppy-d1sk]

Hello @xn3cr0nx, can you try setting the DNS_RESOLVERS environment variable to 127.0.0.11 and tell me if that changes anything please ?

[fl0ppy-d1sk]

Can you share your docker-compose.yml file or commands so we can investigate on this bug ?

[xn3cr0nx]

thanks @bunkerity, it feels like DNS_RESOLVERS could have fixed it, I am not getting 502 anymore, but I need to monitor its behavior.

In the following I paste the current docker-compose file (removing secrets and not interesting services like postgres and redis). here you can find the original file, but I edited it as follows due to staging testing.

version: '3.7'

x-env: &env production
x-decidim: &decidim 0.23.1
x-ruby: &ruby 
  RUBY_VERSION: 2.6.6

x-network: &network
  networks:
    decidim:

services:
  decidim:
    container_name: decidim
    hostname: decidim-host
    image: *pg-db
    build:
      context: .
      dockerfile: Dockerfile
    volumes:
      - decidim-gems:/usr/local/bundle:delegated
      - decidim-uploads://home/decidim/azione-decidim/public/uploads
      - decidim-config:/home/decidim/azione-decidim/config
    environment:
      PORT: 3000
      DATABASE_HOST: pg
      DATABASE_USERNAME: *pg-user
      DATABASE_NAME: *pg-db
      RAILS_ENV: *env
      REDIS_URL: redis://redis:6379
      DATABASE_URL: postgres://postgres@pg:5432/azione-decidim_production
      RAILS_SERVE_STATIC_FILES: "true"
      SECRETKEY: secret
      SECRET_KEY_BASE: secret
      DECIDIM_VERSION: *decidim
      # RAILS_LOG_TO_STDOUT: true
      <<: [*ruby, *admin, *org, *smtp]
    depends_on:
      - pg
      - redis
      - nginx
    links:
      - pg
      - redis
    <<: *network
      
  nginx:
    image: bunkerity/bunkerized-nginx
    container_name: nginx
    restart: always
    ports:
      - 80:8080
      - 443:8443
    environment:
      AUTO_LETS_ENCRYPT: "yes" 
      REDIRECT_HTTP_TO_HTTPS: "yes"
      SERVER_NAME: lombardia.amicidiazione.it milano.amicidiazione.it staging.amicidiazione.it
      MULTISITE: "yes"
      DISABLE_DEFAULT_SERVER: "yes"
      ALLOWED_METHODS: "GET|POST|HEAD|OPTIONS|PUT|DELETE"
      WRITE_ACCESS: "yes"
      REFERRER_POLICY: "origin"
      USE_CLAMAV_UPLOAD: "no"
      USE_CLAMAV_SCAN: "no"
      CLAMAV_SCAN_REMOVE: "no"
      ADDITIONAL_MODULES: "ruby"
      USE_MODSECURITY_CRS: "no"
      USE_MODSECURITY: "no"
      DNS_RESOLVERS: "127.0.0.11"
    volumes:
      - nginx-letsencrypt:/etc/letsencrypt
      - ./server-confs:/server-confs
      - ./http-confs:/http-confs
    <<: *network 

volumes:
  pg:
  redis:
  decidim-gems:
  decidim-config:
  decidim-uploads:
  nginx-letsencrypt:

networks:
  decidim: