Infrastructure: Difference between revisions

From WMCH Tech Wiki
Jump to navigation Jump to search
m (Valerio Bozzolan moved page User:Valerio Bozzolan/Infrastructure to Infrastructure without leaving a redirect: useful information for hardware system administrators and curious people)
(update)
 
(46 intermediate revisions by the same user not shown)
Line 1: Line 1:
[[File:Devuan GNU-Linux - tty login as root in an ownCloud instance - server rack.jpg|thumbnail|<code>Welcome aboard, human! Bip.</code>]]
{{technical public info disclaimer}}


Wikimedia CH has a small but efficient server fleet. Here some information.
Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information.
== Contact ==
 
For really any question about the infrastructure, write an email:
 
: support (aaat) wikimedia (doooot) ch


== Access ==
These users will reply to you soon:
 
* [[User:Ilario]] - innovation manager
* [[User:Valerio Bozzolan]] – infrastructure operator ([[w:m:Wikimedia CH/Tech boost|WMCH Tech Boosts]])
 
== Inventories ==
Quick overview of our Infrastructure components:
 
[[Infrastructure/Inventories]]
 
== Tasks ==
 
Every request can be reported on Wikimedia Phabricator:
 
* {{Phabricator Tag|wmch-infrastructure}}
 
Partially related projects, hosted in our infrastructure but managed by the community:


Every server is accessible via [[w:Secure Shell|SSH]] only through a Wikimedia CH VPN.
* {{Phabricator Tag|dicoado.org}}
* {{Phabricator Tag|wikimini.org}}
* {{Phabricator Tag|wmch-cronos}}
* {{Phabricator Tag|wmch-cassandra}}


Once in the VPN, to enter in a server, we have to deploy your SSH keys in the right server.
== Access ==


== Contact ==
Every WMCH server can be accessed via [[w:Secure Shell|SSH]] only using the WMCH VPN:


If you have any question feel free to concat one of the users with access in the network:
* [[Infrastructure/VPN]] - Wikimedia CH VPN


* [[User:Ilario]] – infrastructure coordinator and operator
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it.
* [[User:Valerio Bozzolan]] – infrastructure operator


You may also want to file a task in the [[phab:tag/wmch-infrastructure/|WMCH Infrastructure workboard on Wikimedia Phabricator]].
== Changes ==


== Server fleet ==
Every important configuration change is tracked inside our repository to identify regressions:


=== Server ''members2'' ===
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure


The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] buster (current stable).
== Internal Tools ==


Served resources:
A list of other tools usually considered part of the WMCH Infrastructure:
* https://members2.wikimedia.ch/


LAN IPs:
* Salesforce: "database" for members
* <code>192.168.128.41</code>
* Raisenow: payment platform in use for receiving donations
* Winbiz: accounting software


WAN IPs:
== Servers ==
* <code>89.207.237.60</code>


Databases:
[[Infrastructure/Servers]]


* <code>dbwiki_executive</code>
== Toolforge ==
* <code>dbwiki_members</code>


Notable packages installed:
{{:Infrastructure/Toolforge}}


<pre>
== Domains ==
mariadb-server
apache2
mediawiki
</pre>


=== Server ''demo'' ===
See:


The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] (current stable).
[[Infrastructure/Domains]]


Served resources:
== Websites ==
* https://demo.wikimedia.ch/ - [[phab:tag/minipedia/]]


LAN IPs:
See:
* <code>192.168.128.40</code>


WAN IPs:
[[Infrastructure/Websites]]
* <code>89.207.237.59</code>


Databases:
== Emails ==


* <code>minipedia</code>
[[Infrastructure/Emails]]


Notable packages installed:
== Archived Platforms ==


<pre>
* https://github.com/WikimediaSwitzerland
mariadb-server
*: TODO: eventually remove David Leoni as the only member of the organization
apache2
*: TODO: eventually close this account, or keep it open mirroring repositories from https://gitlab.wikimedia.org/repos/wikimedia-ch/
mediawiki
</pre>


== See also ==
== Historical pages ==
* [[phab:tag/wmch-infrastructure/]]
Some historical pages (not updated):
* [[Tech Committee]]

Latest revision as of 17:02, 26 June 2026

✅ This page contains public tech info. Don't panic! The details in this page are public information which any external technical person could already guess anyway. Publishing this kind of documents bring more known benefits than unknown risks.

We do not believe in security through obscurity. Private documentation tends to a comfort zone leading to worse documentation and worse security management. Instead, we are glad to have this document in the open, and thank you for your help to share this document to others, to raise constructive critiques and suggest updates. Further info in the WMCH Tech Strategy#Public as Default on Meta-wiki.

Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information.

Contact

For really any question about the infrastructure, write an email:

support (aaat) wikimedia (doooot) ch

These users will reply to you soon:

Inventories

Quick overview of our Infrastructure components:

Infrastructure/Inventories

Tasks

Every request can be reported on Wikimedia Phabricator:

Partially related projects, hosted in our infrastructure but managed by the community:

Access

Every WMCH server can be accessed via SSH only using the WMCH VPN:

After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it.

Changes

Every important configuration change is tracked inside our repository to identify regressions:

https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure

Internal Tools

A list of other tools usually considered part of the WMCH Infrastructure:

  • Salesforce: "database" for members
  • Raisenow: payment platform in use for receiving donations
  • Winbiz: accounting software

Servers

Infrastructure/Servers

Toolforge

Wikimedia CH hosts some projects on Wikimedia Toolforge.

Here a list of all the projects that should stay up 'n' running on Wikimedia Toolforge:

Cronos Calendar

Wikimedia CH Cronos Calendar is a federated calendar for MediaWiki, not based on extensions or gadgets but wikitext-based.

Project information:

Homepage:

Repository:

Phabricator workboard:

Domains

See:

Infrastructure/Domains

Websites

See:

Infrastructure/Websites

Emails

Infrastructure/Emails

Archived Platforms

Historical pages

Some historical pages (not updated):