Differenze tra le versioni di "Wikina/Technical documentation"

Da Wikimedia Italia.
Jump to navigation Jump to search
(+accessi)
(→‎Backup: +info)
Riga 87: Riga 87:
  
 
== Backup ==
 
== Backup ==
 +
 +
=== Backup on-site ===
  
 
The database is under a daily on-site backup, executed daily, before midnight. This is the on-site path:
 
The database is under a daily on-site backup, executed daily, before midnight. This is the on-site path:
Riga 92: Riga 94:
 
  /var/backups/wmi/intreccio.wikimedia.it/daily/databases/wikina.sql.gz
 
  /var/backups/wmi/intreccio.wikimedia.it/daily/databases/wikina.sql.gz
  
The backup is then kept off-site on server {{Server link|horror}} for more days.
+
=== Backup off-site ===
 +
 
 +
The backup is then pushed off-site on this server:
 +
 
 +
* {{Server link|horror}}
 +
 
 +
General details:
 +
 
 +
* [[Server/Backup onsite]]
 +
 
 +
That copy is then kept for some days, rotated on daily basis. Example location:
 +
 
 +
/var/backups/wmi/intreccio.wikimedia.it
 +
/var/backups/wmi.1/intreccio.wikimedia.it
 +
/var/backups/wmi.2/intreccio.wikimedia.it
 +
 
 +
Etc.
 +
 
 +
=== Complete snapshot ===
 +
 
 +
There is also a complete daily server snapshot executed from the OpenStack provider, restorable by any "admin" or "superadmin" of this provider:
 +
 
 +
* {{Fornitore link|vh}}
 +
 
 +
Don't execute a manual snapshot randomly since it can put the server offline for several minutes.
  
There is also a complete daily server snapshot executed from the provider {{Fornitore link|vh}}.
+
Don't allocate a server snapshot randomly since it consumes paid resources.
  
 
== Phabricator Workboard ==
 
== Phabricator Workboard ==

Versione delle 23:31, 26 gen 2023

Pagina legata al server ⚙️ intreccio

Thank you for contributing to this page, collecting info about the website called wikina, served at https://wiki.wikimedia.it/ and running MediaWiki.

Server

The website is served by server ⚙️ intreccio.

Webserver

The frontend webserver is Apache HTTP. Its configuration is published here:

443
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/sites-available/it-wikimedia-wiki-ssl.conf
80
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/sites-available/it-wikimedia-wiki-txt.conf
Main
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/include/it-wikimedia-wiki-main.conf

In short, Apache HTTPd serves static files as-is.

Dynamic files are proxed to the underlying #PHP FPM webserver.

PHP FPM

The backend PHP FPM webserver does not listen to a port but to a filesystem socket. It is here:

/run/php/php7.3-fpm-wikina.sock

Apache connects to that socket.

MediaWiki

MediaWiki configuration

The MediaWiki configuration is published here:

https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/LocalSettings-public.php

The public configuration is here on the filesystem:

/var/www/wikina/LocalSettings-public.php

The secret configuration is on the server itself and it just contains database password, email credentials, upgrade key, and nothing else.

The secret configuration is here on the filesystem:

nano /var/www/wikina/LocalSettings-secret.php

Systemd unit

There is a systemd unit executing MediaWiki background jobs. Here the unit:

https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/systemd/wikina-jobs.service

Here its source code:

https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/scripts/run-jobs.sh

Unix

There is a dedicated Unix user called wmit-wikina:wmit-wikina.

Writable files are assigned to that user.

Non-writable files are assigned to the user root:root.

Extensions

Extensions are deployed here:

/var/www/wikina/extensions

Then they can be activated from the #MediaWiki configuration.

Database

The database is a local, standard MariaDB installation.

Database name:

wikina

There is a dedicated username with its credential. It's only stored in the secret #MediaWiki configuration and nowhere else.

Backup

Backup on-site

The database is under a daily on-site backup, executed daily, before midnight. This is the on-site path:

/var/backups/wmi/intreccio.wikimedia.it/daily/databases/wikina.sql.gz

Backup off-site

The backup is then pushed off-site on this server:

General details:

That copy is then kept for some days, rotated on daily basis. Example location:

/var/backups/wmi/intreccio.wikimedia.it
/var/backups/wmi.1/intreccio.wikimedia.it
/var/backups/wmi.2/intreccio.wikimedia.it

Etc.

Complete snapshot

There is also a complete daily server snapshot executed from the OpenStack provider, restorable by any "admin" or "superadmin" of this provider:

Don't execute a manual snapshot randomly since it can put the server offline for several minutes.

Don't allocate a server snapshot randomly since it consumes paid resources.

Phabricator Workboard

To report feature requests / bugs:

Accessi a: Server intreccio

Elenco di tutti i ruoli e le relative utenze che possono accedere a Server intreccio:

Per aggiungere un ruolo o una utenza, aggiungere il seguente template nella pagina utente della persona mancante:

{{Accesso|Server intreccio|RUOLO}}

Accessi a: Wikina

Elenco di tutti i ruoli e le relative utenze che possono accedere a Wikina:

Per aggiungere un ruolo o una utenza, aggiungere il seguente template nella pagina utente della persona mancante:

{{Accesso|Wikina|RUOLO}}

Accessi a: Fornitore vh

Elenco di tutti i ruoli e le relative utenze che possono accedere a Fornitore vh:

Per aggiungere un ruolo o una utenza, aggiungere il seguente template nella pagina utente della persona mancante:

{{Accesso|Fornitore vh|RUOLO}}

Contact

Infrastruttura#Contatti

Thank you for your contributions to this page and on the WMIT infrastructure in general ❤️