Differenze tra le versioni di "Wikina/Technical documentation"

Da Wikimedia Italia.
Jump to navigation Jump to search
(add stub)
 
(+info)
Riga 1: Riga 1:
 
{{Server|intreccio}}
 
{{Server|intreccio}}
  
Thank you for contributing to this page, collecting info about the website called '''wikina''' served at https://wiki.wikimedia.it/ and running MediaWiki.
+
Thank you for contributing to this page, collecting info about the website called '''wikina''', served at https://wiki.wikimedia.it/ and running MediaWiki.
  
 
== Server ==
 
== Server ==
Riga 9: Riga 9:
 
== Webserver ==
 
== Webserver ==
  
The Apache HTTP configuration is published here:
+
The frontend webserver is Apache HTTP. Its configuration is published here:
  
---
+
;443
 +
:https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/sites-available/it-wikimedia-wiki-ssl.conf
  
 +
;80
 +
:https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/sites-available/it-wikimedia-wiki-txt.conf
 +
 +
;Main:
 +
:https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/include/it-wikimedia-wiki-main.conf
 +
 +
In short, Apache HTTPd serves static files as-is.
 +
 +
Dynamic files are proxed to the underlying [[#PHP FPM]] webserver.
 +
 +
== PHP FPM ==
 +
 +
The backend PHP FPM webserver does not listen to a port but to a filesystem socket. It is here:
 +
 +
/run/php/php7.3-fpm-wikina.sock
 +
 +
Apache connects to that socket.
 +
 +
== MediaWiki ==
 +
 +
=== MediaWiki configuration ===
 +
 +
The MediaWiki configuration is published here:
 +
 +
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/LocalSettings-public.php
 +
 +
The public configuration is here on the filesystem:
 +
 +
/var/www/wikina/LocalSettings-public.php
 +
 +
The secret configuration is on the server itself and it just contains database password, email credentials, upgrade key, and nothing else.
 +
 +
The secret configuration is here on the filesystem:
 +
 +
nano /var/www/wikina/LocalSettings-secret.php
 +
 +
== Systemd unit ==
 +
 +
There is a systemd unit executing MediaWiki background jobs. Here the unit:
 +
 +
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/systemd/wikina-jobs.service
 +
 +
Here its source code:
 +
 +
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/scripts/run-jobs.sh
 +
 +
== Unix ==
 +
 +
There is a dedicated Unix user called <code>wmit-wikina:wmit-wikina</code>.
 +
 +
Writable files are assigned to that user.
 +
 +
Non-writable files are assigned to the user <code>root:root</code>.
 +
 +
== Extensions ==
 +
 +
Extensions are deployed here:
 +
 +
/var/www/wikina/extensions
 +
 +
Then they can be activated from the [[#MediaWiki configuration]].
 +
 +
== Database ==
 +
 +
The database is a local, standard MariaDB installation.
 +
 +
;Database name:
 +
: wikina
 +
 +
There is a dedicated username with its credential. It's only stored in the secret [[#MediaWiki configuration]] and nowhere else.
 +
 +
== Phabricator Workboard ==
 +
 +
* [[phabricator:tag/wmit-infrastructure/|#wmit-infrastructure]]
 +
 +
== Contact ==
 +
[[Infrastruttura#Contatti]]
 +
 +
Thank you for your contributions to this page and on the WMIT infrastructure in general ❤️
 
__NOINDEX__<!-- this should be a public page but without impacting in the main website search results -->
 
__NOINDEX__<!-- this should be a public page but without impacting in the main website search results -->

Versione delle 21:59, 26 gen 2023

Pagina legata al server ⚙️ intreccio

Thank you for contributing to this page, collecting info about the website called wikina, served at https://wiki.wikimedia.it/ and running MediaWiki.

Server

The website is served by server ⚙️ intreccio.

Webserver

The frontend webserver is Apache HTTP. Its configuration is published here:

443
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/sites-available/it-wikimedia-wiki-ssl.conf
80
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/sites-available/it-wikimedia-wiki-txt.conf
Main
https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/conf/apache2/include/it-wikimedia-wiki-main.conf

In short, Apache HTTPd serves static files as-is.

Dynamic files are proxed to the underlying #PHP FPM webserver.

PHP FPM

The backend PHP FPM webserver does not listen to a port but to a filesystem socket. It is here:

/run/php/php7.3-fpm-wikina.sock

Apache connects to that socket.

MediaWiki

MediaWiki configuration

The MediaWiki configuration is published here:

https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/LocalSettings-public.php

The public configuration is here on the filesystem:

/var/www/wikina/LocalSettings-public.php

The secret configuration is on the server itself and it just contains database password, email credentials, upgrade key, and nothing else.

The secret configuration is here on the filesystem:

nano /var/www/wikina/LocalSettings-secret.php

Systemd unit

There is a systemd unit executing MediaWiki background jobs. Here the unit:

https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/systemd/wikina-jobs.service

Here its source code:

https://gitlab.wikimedia.org/repos/wikimedia-it/wmit-infrastructure/-/blob/main/servers/intreccio/projects/wikina/scripts/run-jobs.sh

Unix

There is a dedicated Unix user called wmit-wikina:wmit-wikina.

Writable files are assigned to that user.

Non-writable files are assigned to the user root:root.

Extensions

Extensions are deployed here:

/var/www/wikina/extensions

Then they can be activated from the #MediaWiki configuration.

Database

The database is a local, standard MariaDB installation.

Database name
wikina

There is a dedicated username with its credential. It's only stored in the secret #MediaWiki configuration and nowhere else.

Phabricator Workboard

Contact

Infrastruttura#Contatti

Thank you for your contributions to this page and on the WMIT infrastructure in general ❤️