current config
This commit is contained in:
parent
14347cab42
commit
8c710546af
SSH key fingerprint:
SHA256:UMhcHaeI+VGsiUL2Drpw3aj1iRiQUlx8nxZqUPvoaVw
10 changed files with 639 additions and 1 deletions
|
|
@ -1,3 +1,9 @@
|
|||
# mediawiki
|
||||
|
||||
Config for wiki.ctbk.de and other MediaWiki deployments
|
||||
Config for wiki.ctbk.de and the upcoming Orgawiki deployment.
|
||||
|
||||
For deployment documentation refer to [the Wiki](https://wiki.ctbk.de/Dienste/Wiki).
|
||||
|
||||
Files for the wiki.ctbk.de public deployment are found in `public_mediawiki`. Files for the internal deployment (not yet in production) are found in `orga_mediawiki`. Some common files are found in the root directory.
|
||||
|
||||
Note that while some files may look identical between the deployments, they are not shared to allow easier modifications to both deployments independently.
|
||||
|
|
|
|||
27
fastcgi.conf
Normal file
27
fastcgi.conf
Normal file
|
|
@ -0,0 +1,27 @@
|
|||
|
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
|
||||
fastcgi_param QUERY_STRING $query_string;
|
||||
fastcgi_param REQUEST_METHOD $request_method;
|
||||
fastcgi_param CONTENT_TYPE $content_type;
|
||||
fastcgi_param CONTENT_LENGTH $content_length;
|
||||
|
||||
fastcgi_param SCRIPT_NAME $fastcgi_script_name;
|
||||
fastcgi_param REQUEST_URI $request_uri;
|
||||
fastcgi_param DOCUMENT_URI $document_uri;
|
||||
fastcgi_param DOCUMENT_ROOT $document_root;
|
||||
fastcgi_param SERVER_PROTOCOL $server_protocol;
|
||||
fastcgi_param REQUEST_SCHEME $scheme;
|
||||
fastcgi_param HTTPS $https if_not_empty;
|
||||
|
||||
fastcgi_param GATEWAY_INTERFACE CGI/1.1;
|
||||
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version;
|
||||
|
||||
fastcgi_param REMOTE_ADDR $remote_addr;
|
||||
fastcgi_param REMOTE_PORT $remote_port;
|
||||
fastcgi_param REMOTE_USER $remote_user;
|
||||
fastcgi_param SERVER_ADDR $server_addr;
|
||||
fastcgi_param SERVER_PORT $server_port;
|
||||
fastcgi_param SERVER_NAME $server_name;
|
||||
|
||||
# PHP only, required if PHP was built with --enable-force-cgi-redirect
|
||||
fastcgi_param REDIRECT_STATUS 200;
|
||||
62
nginx.conf
Normal file
62
nginx.conf
Normal file
|
|
@ -0,0 +1,62 @@
|
|||
user www-data;
|
||||
worker_processes auto;
|
||||
pid /run/nginx.pid;
|
||||
error_log /var/log/nginx/error.log;
|
||||
include /etc/nginx/modules-enabled/*.conf;
|
||||
|
||||
events {
|
||||
worker_connections 768;
|
||||
# multi_accept on;
|
||||
}
|
||||
|
||||
http {
|
||||
|
||||
##
|
||||
# Basic Settings
|
||||
##
|
||||
|
||||
sendfile on;
|
||||
tcp_nopush on;
|
||||
types_hash_max_size 2048;
|
||||
# server_tokens off;
|
||||
|
||||
# server_names_hash_bucket_size 64;
|
||||
# server_name_in_redirect off;
|
||||
|
||||
include /etc/nginx/mime.types;
|
||||
default_type application/octet-stream;
|
||||
|
||||
##
|
||||
# SSL Settings
|
||||
##
|
||||
|
||||
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
|
||||
ssl_prefer_server_ciphers on;
|
||||
|
||||
##
|
||||
# Logging Settings
|
||||
##
|
||||
|
||||
access_log /var/log/nginx/access.log;
|
||||
|
||||
##
|
||||
# Gzip Settings
|
||||
##
|
||||
|
||||
gzip on;
|
||||
|
||||
# gzip_vary on;
|
||||
# gzip_proxied any;
|
||||
# gzip_comp_level 6;
|
||||
# gzip_buffers 16 8k;
|
||||
# gzip_http_version 1.1;
|
||||
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
|
||||
|
||||
##
|
||||
# Virtual Host Configs
|
||||
##
|
||||
|
||||
include /etc/nginx/conf.d/*.conf;
|
||||
include /etc/nginx/sites-enabled/*;
|
||||
}
|
||||
|
||||
192
orga_mediawiki/LocalSettings.php
Normal file
192
orga_mediawiki/LocalSettings.php
Normal file
|
|
@ -0,0 +1,192 @@
|
|||
<?php
|
||||
# Internal wiki settings
|
||||
|
||||
# This file was automatically generated by the MediaWiki 1.39.10
|
||||
# installer. If you make manual changes, please keep track in case you
|
||||
# need to recreate them later.
|
||||
#
|
||||
# See docs/Configuration.md for all configurable settings
|
||||
# and their default values, but don't forget to make changes in _this_
|
||||
# file, not there.
|
||||
#
|
||||
# Further documentation for configuration settings may be found at:
|
||||
# https://www.mediawiki.org/wiki/Manual:Configuration_settings
|
||||
|
||||
# Protect against web entry
|
||||
if ( !defined( 'MEDIAWIKI' ) ) {
|
||||
exit;
|
||||
}
|
||||
|
||||
## Include platform/distribution defaults
|
||||
#require_once "$IP/includes/PlatformSettings.php";
|
||||
|
||||
## Server secrets file
|
||||
require_once "/etc/orga_mediawiki/SecretSettings.php";
|
||||
|
||||
## Uncomment this to disable output compression
|
||||
# $wgDisableOutputCompression = true;
|
||||
|
||||
$wgSitename = "CTBK Orgawiki";
|
||||
$wgMetaNamespace = "Wiki";
|
||||
|
||||
## The URL base path to the directory containing the wiki;
|
||||
## defaults for all runtime URL paths are based off of this.
|
||||
## For more information on customizing the URLs
|
||||
## (like /w/index.php/Page_title to /wiki/Page_title) please see:
|
||||
## https://www.mediawiki.org/wiki/Manual:Short_URL
|
||||
$wgScriptPath = "";
|
||||
$wgArticlePath = "/$1";
|
||||
$wgUsePathInfo = true;
|
||||
$wgScriptExtension = ".php";
|
||||
|
||||
## The protocol and server name to use in fully-qualified URLs
|
||||
# TODO: should be the public domain eventually
|
||||
#$wgServer = "https://orgawiki.ctbk.de";
|
||||
$wgServer = "http://wiki.chaos:81";
|
||||
|
||||
## The URL path to static resources (images, scripts, etc.)
|
||||
$wgResourceBasePath = $wgScriptPath;
|
||||
|
||||
## The URL paths to the logo. Make sure you change this from the default,
|
||||
## or else you'll overwrite your logo when you upgrade!
|
||||
# TODO: Chaostreff logo
|
||||
$wgLogos = [
|
||||
'1x' => "$wgResourceBasePath/resources/assets/change-your-logo.svg",
|
||||
'icon' => "$wgResourceBasePath/resources/assets/change-your-logo.svg",
|
||||
];
|
||||
|
||||
## UPO means: this is also a user preference option
|
||||
|
||||
$wgEnableEmail = true;
|
||||
$wgEnableUserEmail = true; # UPO
|
||||
|
||||
$wgEmergencyContact = "";
|
||||
$wgPasswordSender = "";
|
||||
|
||||
$wgEnotifUserTalk = false; # UPO
|
||||
$wgEnotifWatchlist = false; # UPO
|
||||
$wgEmailAuthentication = true;
|
||||
|
||||
## Database settings
|
||||
$wgDBtype = "postgres";
|
||||
$wgDBserver = "localhost";
|
||||
$wgDBname = "orga_mediawiki";
|
||||
$wgDBuser = "mediawiki";
|
||||
# password is in secret settings
|
||||
|
||||
# Postgres specific settings
|
||||
$wgDBport = "5432";
|
||||
$wgDBmwschema = "mediawiki";
|
||||
|
||||
# Shared database table
|
||||
# This has no effect unless $wgSharedDB is also set.
|
||||
$wgSharedTables[] = "actor";
|
||||
|
||||
## Shared memory settings
|
||||
$wgMainCacheType = CACHE_ACCEL;
|
||||
$wgMemCachedServers = [];
|
||||
|
||||
## To enable image uploads, make sure the 'images' directory
|
||||
## is writable, then set this to true:
|
||||
$wgEnableUploads = true;
|
||||
$wgUseImageMagick = true;
|
||||
$wgImageMagickConvertCommand = "/usr/bin/convert";
|
||||
|
||||
# InstantCommons allows wiki to use images from https://commons.wikimedia.org
|
||||
$wgUseInstantCommons = false;
|
||||
|
||||
# Periodically send a pingback to https://www.mediawiki.org/ with basic data
|
||||
# about this MediaWiki instance. The Wikimedia Foundation shares this data
|
||||
# with MediaWiki developers to help guide future development efforts.
|
||||
$wgPingback = false;
|
||||
|
||||
# Site language code, should be one of the list in ./includes/languages/data/Names.php
|
||||
$wgLanguageCode = "de";
|
||||
|
||||
# Time zone
|
||||
$wgLocaltimezone = "Europe/Berlin";
|
||||
|
||||
## Set $wgCacheDirectory to a writable directory on the web server
|
||||
## to make your wiki go slightly faster. The directory should not
|
||||
## be publicly accessible from the web.
|
||||
$wgCacheDirectory = "/var/cache/orga_mediawiki";
|
||||
|
||||
# Changing this will log out all existing sessions.
|
||||
$wgAuthenticationTokenVersion = "1";
|
||||
|
||||
## For attaching licensing metadata to pages, and displaying an
|
||||
## appropriate copyright notice / icon. GNU Free Documentation
|
||||
## License and Creative Commons licenses are supported so far.
|
||||
$wgRightsPage = ""; # Set to the title of a wiki page that describes your license/copyright
|
||||
$wgRightsUrl = "";
|
||||
$wgRightsText = "Alle Rechte vorbehalten";
|
||||
$wgRightsIcon = "";
|
||||
|
||||
# Path to the GNU diff3 utility. Used for conflict resolution.
|
||||
$wgDiff3 = "/usr/bin/diff3";
|
||||
|
||||
## Default skin
|
||||
# For MinervaNeue it’s "minerva"
|
||||
$wgDefaultSkin = "citizen";
|
||||
$wgDefaultMobileSkin = 'citizen';
|
||||
|
||||
# Enabled skins.
|
||||
wfLoadSkin( 'MinervaNeue' );
|
||||
# TODO: set theme color
|
||||
wfLoadSkin( 'Citizen' );
|
||||
|
||||
# Enabled extensions. Most of the extensions are enabled by adding
|
||||
# wfLoadExtension( 'ExtensionName' );
|
||||
# to LocalSettings.php. Check specific extension documentation for more details.
|
||||
# The following extensions were automatically enabled:
|
||||
wfLoadExtension( 'CategoryTree' );
|
||||
wfLoadExtension( 'CodeEditor' );
|
||||
wfLoadExtension( 'ImageMap' );
|
||||
wfLoadExtension( 'Interwiki' );
|
||||
wfLoadExtension( 'InputBox' );
|
||||
wfLoadExtension( 'Math' );
|
||||
wfLoadExtension( 'Nuke' );
|
||||
wfLoadExtension( 'ParserFunctions' );
|
||||
wfLoadExtension( 'Poem' );
|
||||
wfLoadExtension( 'PdfHandler' );
|
||||
wfLoadExtension( 'ReplaceText' );
|
||||
wfLoadExtension( 'SpamBlacklist' );
|
||||
wfLoadExtension( 'TemplateData' );
|
||||
wfLoadExtension( 'TitleBlacklist' );
|
||||
wfLoadExtension( 'VisualEditor' );
|
||||
wfLoadExtension( 'WikiEditor' );
|
||||
|
||||
wfLoadExtension( 'PluggableAuth' );
|
||||
wfLoadExtension( 'OpenIDConnect' );
|
||||
|
||||
wfLoadExtension( 'SemanticMediaWiki' );
|
||||
enableSemantics( 'orgawiki.ctbk.de' );
|
||||
|
||||
# Add more configuration options below.
|
||||
|
||||
# Disable account creation - we only use SSO accounts
|
||||
$wgGroupPermissions['*']['autocreateaccount'] = true;
|
||||
$wgGroupPermissions['sysop']['autocreateaccount'] = true;
|
||||
$wgGroupPermissions['*']['createaccount'] = false;
|
||||
$wgGroupPermissions['sysop']['createaccount'] = true;
|
||||
# Also disable reading/editing by non-logged-in users, making the wiki properly private
|
||||
$wgGroupPermissions['*']['read'] = false;
|
||||
$wgGroupPermissions['*']['edit'] = false;
|
||||
|
||||
# SSO config
|
||||
# necessary to allow admin user(s) to login
|
||||
$wgPluggableAuth_EnableLocalLogin = true;
|
||||
$wgPluggableAuth_Config["Chaostreff Backnang IdP"] = [
|
||||
'plugin' => 'OpenIDConnect',
|
||||
'data' => [
|
||||
'providerURL' => 'https://idp.ctbk.de/realms/ctbk/',
|
||||
'clientID' => 'orga_mediawiki',
|
||||
'clientsecret' => $ctbkClientSecret
|
||||
]
|
||||
];
|
||||
|
||||
# for better error reporting - disable while in production
|
||||
#error_reporting( -1 );
|
||||
#ini_set( 'display_errors', 1 );
|
||||
#$wgShowExceptionDetails = true;
|
||||
#$wgShowDBErrorBacktrace = true;
|
||||
21
orga_mediawiki/composer.local.json
Normal file
21
orga_mediawiki/composer.local.json
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
{
|
||||
"repositories": [
|
||||
{
|
||||
"type": "vcs",
|
||||
"url": "https://gerrit.wikimedia.org/r/mediawiki/extensions/OpenIDConnect"
|
||||
}
|
||||
],
|
||||
"require": {
|
||||
"starcitizentools/citizen-skin": "^2.39",
|
||||
"mediawiki/pluggable-auth": "^7",
|
||||
"mediawiki/openidconnect": "^8",
|
||||
"mediawiki/semantic-compound-queries": "^2.2",
|
||||
"mediawiki/semantic-extra-special-properties": "^3",
|
||||
"mediawiki/semantic-media-wiki": "^4.2",
|
||||
"mediawiki/semantic-result-formats": "^4.2"
|
||||
},
|
||||
"config": {
|
||||
"preferred-install": "source",
|
||||
"optimize-autoloader": true
|
||||
}
|
||||
}
|
||||
40
orga_mediawiki/orga_mediawiki.conf
Normal file
40
orga_mediawiki/orga_mediawiki.conf
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
# Public Chaostreff MediaWiki
|
||||
|
||||
server {
|
||||
listen 81;
|
||||
listen [::]:81;
|
||||
root /var/lib/orga_mediawiki;
|
||||
charset utf-8;
|
||||
client_max_body_size 100m;
|
||||
client_body_timeout 60;
|
||||
index index.php index.html index.htm;
|
||||
|
||||
location ~ \.ht {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ @rewrite;
|
||||
}
|
||||
|
||||
location @rewrite {
|
||||
rewrite ^/(.*)$ /index.php;
|
||||
}
|
||||
|
||||
location ^~ /maintenance/ {
|
||||
return 403;
|
||||
}
|
||||
# Restrictions based on the .htaccess files
|
||||
location ~ ^/(cache|includes|maintenance|languages|serialized|tests|images/deleted)/ {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location ~ \.php$ {
|
||||
include /etc/nginx/fastcgi.conf;
|
||||
|
||||
fastcgi_pass unix:/run/php/php-fpm.sock;
|
||||
fastcgi_index index.php;
|
||||
|
||||
try_files $uri @rewrite;
|
||||
}
|
||||
}
|
||||
25
pgtune.conf
Normal file
25
pgtune.conf
Normal file
|
|
@ -0,0 +1,25 @@
|
|||
# PGTune configuration
|
||||
# conf.d/pgtune.conf
|
||||
|
||||
# DB Version: 15
|
||||
# OS Type: linux
|
||||
# DB Type: web
|
||||
# Total Memory (RAM): 2 GB
|
||||
# CPUs num: 2
|
||||
# Connections num: 20
|
||||
# Data Storage: ssd
|
||||
|
||||
max_connections = 20
|
||||
shared_buffers = 512MB
|
||||
effective_cache_size = 1536MB
|
||||
maintenance_work_mem = 128MB
|
||||
checkpoint_completion_target = 0.9
|
||||
wal_buffers = 16MB
|
||||
default_statistics_target = 100
|
||||
random_page_cost = 1.1
|
||||
effective_io_concurrency = 200
|
||||
work_mem = 13107kB
|
||||
huge_pages = off
|
||||
min_wal_size = 1GB
|
||||
max_wal_size = 4GB
|
||||
|
||||
204
public_mediawiki/LocalSettings.php
Executable file
204
public_mediawiki/LocalSettings.php
Executable file
|
|
@ -0,0 +1,204 @@
|
|||
<?php
|
||||
# This file was automatically generated by the MediaWiki 1.39.10
|
||||
# installer. If you make manual changes, please keep track in case you
|
||||
# need to recreate them later.
|
||||
#
|
||||
# See docs/Configuration.md for all configurable settings
|
||||
# and their default values, but don't forget to make changes in _this_
|
||||
# file, not there.
|
||||
#
|
||||
# Further documentation for configuration settings may be found at:
|
||||
# https://www.mediawiki.org/wiki/Manual:Configuration_settings
|
||||
|
||||
# Protect against web entry
|
||||
if ( !defined( 'MEDIAWIKI' ) ) {
|
||||
exit;
|
||||
}
|
||||
|
||||
## Include platform/distribution defaults
|
||||
#require_once "$IP/includes/PlatformSettings.php";
|
||||
|
||||
## Server secrets file
|
||||
require_once "/etc/public_mediawiki/SecretSettings.php";
|
||||
|
||||
## Uncomment this to disable output compression
|
||||
# $wgDisableOutputCompression = true;
|
||||
|
||||
$wgSitename = "Chaostreff Backnang Wiki";
|
||||
$wgMetaNamespace = "Wiki";
|
||||
|
||||
## The URL base path to the directory containing the wiki;
|
||||
## defaults for all runtime URL paths are based off of this.
|
||||
## For more information on customizing the URLs
|
||||
## (like /w/index.php/Page_title to /wiki/Page_title) please see:
|
||||
## https://www.mediawiki.org/wiki/Manual:Short_URL
|
||||
$wgScriptPath = "";
|
||||
$wgArticlePath = "/$1";
|
||||
$wgUsePathInfo = true;
|
||||
$wgScriptExtension = ".php";
|
||||
|
||||
## The protocol and server name to use in fully-qualified URLs
|
||||
$wgServer = "https://wiki.ctbk.de";
|
||||
|
||||
## The URL path to static resources (images, scripts, etc.)
|
||||
$wgResourceBasePath = $wgScriptPath;
|
||||
|
||||
## The URL paths to the logo. Make sure you change this from the default,
|
||||
## or else you'll overwrite your logo when you upgrade!
|
||||
$wgLogos = [
|
||||
'1x' => "$wgResourceBasePath/resources/assets/logo.svg",
|
||||
'icon' => "$wgResourceBasePath/resources/assets/logo.svg",
|
||||
];
|
||||
$wgFavicon = "$wgResourceBasePath/resources/assets/favicon.ico";
|
||||
|
||||
## UPO means: this is also a user preference option
|
||||
|
||||
$wgEnableEmail = true;
|
||||
$wgEnableUserEmail = true; # UPO
|
||||
|
||||
$wgEmergencyContact = "";
|
||||
$wgPasswordSender = "";
|
||||
|
||||
$wgEnotifUserTalk = false; # UPO
|
||||
$wgEnotifWatchlist = false; # UPO
|
||||
$wgEmailAuthentication = true;
|
||||
|
||||
## Database settings
|
||||
$wgDBtype = "postgres";
|
||||
$wgDBserver = "localhost";
|
||||
$wgDBname = "public_mediawiki";
|
||||
$wgDBuser = "mediawiki";
|
||||
# password is in secret settings
|
||||
|
||||
# Postgres specific settings
|
||||
$wgDBport = "5432";
|
||||
$wgDBmwschema = "mediawiki";
|
||||
|
||||
# Shared database table
|
||||
# This has no effect unless $wgSharedDB is also set.
|
||||
$wgSharedTables[] = "actor";
|
||||
|
||||
## Shared memory settings
|
||||
$wgMainCacheType = CACHE_ACCEL;
|
||||
$wgMemCachedServers = [];
|
||||
|
||||
## To enable image uploads, make sure the 'images' directory
|
||||
## is writable, then set this to true:
|
||||
$wgEnableUploads = true;
|
||||
$wgAllowCopyUploads = true;
|
||||
$wgCopyUploadsFromSpecialUpload = true;
|
||||
$wgUseImageMagick = true;
|
||||
$wgImageMagickConvertCommand = "/usr/bin/convert";
|
||||
|
||||
# InstantCommons allows wiki to use images from https://commons.wikimedia.org
|
||||
$wgUseInstantCommons = false;
|
||||
|
||||
# Periodically send a pingback to https://www.mediawiki.org/ with basic data
|
||||
# about this MediaWiki instance. The Wikimedia Foundation shares this data
|
||||
# with MediaWiki developers to help guide future development efforts.
|
||||
$wgPingback = false;
|
||||
|
||||
# Site language code, should be one of the list in ./includes/languages/data/Names.php
|
||||
$wgLanguageCode = "de";
|
||||
|
||||
# Time zone
|
||||
$wgLocaltimezone = "Europe/Berlin";
|
||||
|
||||
## Set $wgCacheDirectory to a writable directory on the web server
|
||||
## to make your wiki go slightly faster. The directory should not
|
||||
## be publicly accessible from the web.
|
||||
$wgCacheDirectory = "/var/cache/public_mediawiki";
|
||||
|
||||
# Changing this will log out all existing sessions.
|
||||
$wgAuthenticationTokenVersion = "1";
|
||||
|
||||
## For attaching licensing metadata to pages, and displaying an
|
||||
## appropriate copyright notice / icon. GNU Free Documentation
|
||||
## License and Creative Commons licenses are supported so far.
|
||||
$wgRightsPage = "Wiki:Urheberrechte";
|
||||
$wgRightsUrl = "https://creativecommons.org/licenses/by/4.0/";
|
||||
$wgRightsText = "Creative Commons „Namensnennung“";
|
||||
$wgRightsIcon = "$wgResourceBasePath/resources/assets/licenses/cc-by.png";
|
||||
|
||||
# allow nonstandard display titles, which we want to have for a few pages
|
||||
$wgRestrictDisplayTitle = false;
|
||||
|
||||
# Path to the GNU diff3 utility. Used for conflict resolution.
|
||||
$wgDiff3 = "/usr/bin/diff3";
|
||||
|
||||
## Default skin
|
||||
# For MinervaNeue it’s "minerva"
|
||||
$wgDefaultSkin = "citizen";
|
||||
$wgDefaultMobileSkin = 'citizen';
|
||||
|
||||
# Enabled skins.
|
||||
wfLoadSkin( 'MinervaNeue' );
|
||||
wfLoadSkin( 'Citizen' );
|
||||
# keep this up-to-date with website theme color
|
||||
$wgCitizenThemeColor = "#f9c827";
|
||||
|
||||
# Enabled extensions. Most of the extensions are enabled by adding
|
||||
# wfLoadExtension( 'ExtensionName' );
|
||||
# to LocalSettings.php. Check specific extension documentation for more details.
|
||||
# The following extensions were automatically enabled:
|
||||
wfLoadExtension( 'CategoryTree' );
|
||||
wfLoadExtension( 'CodeEditor' );
|
||||
wfLoadExtension( 'ImageMap' );
|
||||
wfLoadExtension( 'Interwiki' );
|
||||
wfLoadExtension( 'InputBox' );
|
||||
wfLoadExtension( 'Math' );
|
||||
wfLoadExtension( 'Nuke' );
|
||||
wfLoadExtension( 'ParserFunctions' );
|
||||
wfLoadExtension( 'Poem' );
|
||||
wfLoadExtension( 'PdfHandler' );
|
||||
wfLoadExtension( 'ReplaceText' );
|
||||
wfLoadExtension( 'Renameuser' );
|
||||
wfLoadExtension( 'SpamBlacklist' );
|
||||
wfLoadExtension( 'SyntaxHighlight_GeSHi' );
|
||||
wfLoadExtension( 'TemplateData' );
|
||||
wfLoadExtension( 'TitleBlacklist' );
|
||||
wfLoadExtension( 'VisualEditor' );
|
||||
wfLoadExtension( 'WikiEditor' );
|
||||
|
||||
wfLoadExtension( 'PluggableAuth' );
|
||||
wfLoadExtension( 'OpenIDConnect' );
|
||||
|
||||
wfLoadExtension( 'SemanticMediaWiki' );
|
||||
enableSemantics( 'wiki.ctbk.de' );
|
||||
|
||||
# Add more configuration options below.
|
||||
|
||||
# Disable account creation - we only use SSO accounts
|
||||
$wgGroupPermissions['*']['autocreateaccount'] = true;
|
||||
$wgGroupPermissions['sysop']['autocreateaccount'] = true;
|
||||
$wgGroupPermissions['*']['createaccount'] = false;
|
||||
$wgGroupPermissions['sysop']['createaccount'] = true;
|
||||
|
||||
# allow copy uploads by anyone
|
||||
$wgGroupPermissions['user']['upload_by_url'] = true;
|
||||
|
||||
# SSO config
|
||||
# necessary to allow admin user(s) to login
|
||||
$wgPluggableAuth_EnableLocalLogin = true;
|
||||
$wgPluggableAuth_Config["Chaostreff Backnang IdP"] = [
|
||||
'plugin' => 'OpenIDConnect',
|
||||
'data' => [
|
||||
'providerURL' => 'https://idp.ctbk.de/realms/ctbk/',
|
||||
'clientID' => 'public_mediawiki',
|
||||
'clientsecret' => $ctbkClientSecret
|
||||
]
|
||||
];
|
||||
|
||||
# interwiki config
|
||||
$wgGroupPermissions['sysop']['interwiki'] = true;
|
||||
$wgInterwikiMagic = true;
|
||||
$wgHideInterlanguageLinks = false;
|
||||
|
||||
# for better error reporting - disable while in production
|
||||
#error_reporting( -1 );
|
||||
#ini_set( 'display_errors', 1 );
|
||||
#$wgShowExceptionDetails = true;
|
||||
#$wgShowDBErrorBacktrace = true;
|
||||
|
||||
# uncomment this if Semantic MediaWiki property locking is broken
|
||||
#$smwgChangePropagationProtection = false;
|
||||
21
public_mediawiki/composer.local.json
Normal file
21
public_mediawiki/composer.local.json
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
{
|
||||
"repositories": [
|
||||
{
|
||||
"type": "vcs",
|
||||
"url": "https://gerrit.wikimedia.org/r/mediawiki/extensions/OpenIDConnect"
|
||||
}
|
||||
],
|
||||
"require": {
|
||||
"starcitizentools/citizen-skin": "^2.39",
|
||||
"mediawiki/pluggable-auth": "^7",
|
||||
"mediawiki/openidconnect": "^8",
|
||||
"mediawiki/semantic-compound-queries": "^2.2",
|
||||
"mediawiki/semantic-extra-special-properties": "^3",
|
||||
"mediawiki/semantic-media-wiki": "^4.2",
|
||||
"mediawiki/semantic-result-formats": "^4.2"
|
||||
},
|
||||
"config": {
|
||||
"preferred-install": "source",
|
||||
"optimize-autoloader": true
|
||||
}
|
||||
}
|
||||
40
public_mediawiki/public_mediawiki.conf
Normal file
40
public_mediawiki/public_mediawiki.conf
Normal file
|
|
@ -0,0 +1,40 @@
|
|||
# Public Chaostreff MediaWiki
|
||||
|
||||
server {
|
||||
listen 80;
|
||||
listen [::]:80;
|
||||
root /var/lib/public_mediawiki;
|
||||
charset utf-8;
|
||||
client_max_body_size 100m;
|
||||
client_body_timeout 60;
|
||||
index index.php index.html index.htm;
|
||||
|
||||
location ~ \.ht {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location / {
|
||||
try_files $uri $uri/ @rewrite;
|
||||
}
|
||||
|
||||
location @rewrite {
|
||||
rewrite ^/(.*)$ /index.php;
|
||||
}
|
||||
|
||||
location ^~ /maintenance/ {
|
||||
return 403;
|
||||
}
|
||||
# Restrictions based on the .htaccess files
|
||||
location ~ ^/(cache|includes|maintenance|languages|serialized|tests|images/deleted)/ {
|
||||
deny all;
|
||||
}
|
||||
|
||||
location ~ \.php$ {
|
||||
include /etc/nginx/fastcgi.conf;
|
||||
|
||||
fastcgi_pass unix:/run/php/php-fpm.sock;
|
||||
fastcgi_index index.php;
|
||||
|
||||
try_files $uri @rewrite;
|
||||
}
|
||||
}
|
||||
Loading…
Add table
Reference in a new issue