Infrastructure: Difference between revisions
update |
|||
| (43 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{technical public info disclaimer}} |
|||
[[File:Devuan GNU-Linux - tty login as root in an ownCloud instance - server rack.jpg|thumbnail|<code>Welcome aboard, human! Bip.</code>]] |
|||
Wikimedia CH has |
Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information. |
||
== Contact == |
|||
For really any question about the infrastructure, write an email: |
|||
== Access == |
|||
: support (aaat) wikimedia (doooot) ch |
|||
Every server is accessible via [[w:Secure Shell|SSH]] only through a Wikimedia CH VPN. |
|||
These users will reply to you soon: |
|||
Once in the VPN, to enter in a server, we have to deploy your SSH keys in the right server. |
|||
* [[User:Ilario]] - innovation manager |
|||
== Contact == |
|||
* [[User:Valerio Bozzolan]] – infrastructure operator ([[w:m:Wikimedia CH/Tech boost|WMCH Tech Boosts]]) |
|||
== Inventories == |
|||
If you have any question feel free to concat one of the users with access in the network: |
|||
Quick overview of our Infrastructure components: |
|||
[[Infrastructure/Inventories]] |
|||
* [[User:Ilario]] – infrastructure coordinator and operator |
|||
* [[User:Valerio Bozzolan]] – infrastructure operator |
|||
You may also want to file a task in the [[phab:tag/wmch-infrastructure/|WMCH Infrastructure workboard on Wikimedia Phabricator]]. |
|||
== Tasks == |
== Tasks == |
||
| Line 22: | Line 22: | ||
Every request can be reported on Wikimedia Phabricator: |
Every request can be reported on Wikimedia Phabricator: |
||
* |
* {{Phabricator Tag|wmch-infrastructure}} |
||
Partially related projects, hosted in our infrastructure but managed by the community: |
|||
== Changes == |
|||
* {{Phabricator Tag|dicoado.org}} |
|||
Every important configuration change is tracked inside our repository to identify regressions: |
|||
* {{Phabricator Tag|wikimini.org}} |
|||
* {{Phabricator Tag|wmch-cronos}} |
|||
* {{Phabricator Tag|wmch-cassandra}} |
|||
== Access == |
|||
* [https://gerrit.wikimedia.org/r/admin/repos/wikimedia-ch/wmch-infrastructure wmch-infrastructure on Gerrit] |
|||
Every WMCH server can be accessed via [[w:Secure Shell|SSH]] only using the WMCH VPN: |
|||
== Server fleet == |
|||
* [[Infrastructure/VPN]] - Wikimedia CH VPN |
|||
=== Server ''members2'' === |
|||
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it. |
|||
The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] buster (current stable). |
|||
== Changes == |
|||
Served resources: |
|||
* https://members2.wikimedia.ch/ |
|||
Every important configuration change is tracked inside our repository to identify regressions: |
|||
LAN IPs: |
|||
* <code>192.168.128.41</code> |
|||
WAN IPs: |
|||
* <code>89.207.237.60</code> |
|||
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure |
|||
Databases: |
|||
== Internal Tools == |
|||
* <code>dbwiki_executive</code> |
|||
* <code>dbwiki_members</code> |
|||
A list of other tools usually considered part of the WMCH Infrastructure: |
|||
Notable packages installed: |
|||
* Salesforce: "database" for members |
|||
<pre> |
|||
* Raisenow: payment platform in use for receiving donations |
|||
mariadb-server |
|||
* Winbiz: accounting software |
|||
apache2 |
|||
mediawiki |
|||
</pre> |
|||
== Servers == |
|||
[[Infrastructure/Servers]] |
|||
The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] (current stable). |
|||
== Toolforge == |
|||
Served resources: |
|||
* https://demo.wikimedia.ch/ - [[phab:tag/minipedia/]] |
|||
{{:Infrastructure/Toolforge}} |
|||
LAN IPs: |
|||
* <code>192.168.128.40</code> |
|||
== Domains == |
|||
WAN IPs: |
|||
* <code>89.207.237.59</code> |
|||
See: |
|||
Databases: |
|||
[[Infrastructure/Domains]] |
|||
* <code>minipedia</code> |
|||
== Websites == |
|||
Notable packages installed: |
|||
See: |
|||
<pre> |
|||
mariadb-server |
|||
apache2 |
|||
mediawiki |
|||
</pre> |
|||
[[Infrastructure/Websites]] |
|||
== Legacy infrastructure == |
|||
== Emails == |
|||
[[Infrastructure/Emails]] |
|||
There is a legacy server called <code>intern</code> and exposed via https://intern.wikimedia.ch/ that hosts some legacy MySQL databases. |
|||
== Archived Platforms == |
|||
Here some hypothesis about the purpose of each database: |
|||
* https://github.com/WikimediaSwitzerland |
|||
* <code>b00028.board_</code> – legacy running wiki about https://board.wikimedia.ch/ |
|||
*: TODO: eventually remove David Leoni as the only member of the organization |
|||
* <code>db00028.chapters_</code> – legacy running wiki about https://chapters.wikimedia.ch/ |
|||
*: TODO: eventually close this account, or keep it open mirroring repositories from https://gitlab.wikimedia.org/repos/wikimedia-ch/ |
|||
* <code>db00028.members_</code> – legacy unused database previously related to https://members.wikimedia.ch/ ([[phab:T255848]]) |
|||
* <code>dbwiki_chapters</code> – legacy wiki about https://chapters.wikimedia.ch/ (note: no users, just contents) |
|||
* <code>dbwiki_executive</code> – legacy unused database previously related to https://executive.wikimedia.ch/ (note: no users, just contents) |
|||
* <code>dbwiki_members</code> – legacy unused database probably an old backup of <code>db00028.members_</code> (note: no users, just contents) |
|||
* <code>dbwiki_test</code> – unknown |
|||
* <code>dbwikimania</code> – unknown |
|||
* <code>dbwikivillage</code> – unknown WordPress |
|||
* <code>dbwlm</code> – unknown WordPress |
|||
* <code>dbwwwprod</code> – unknown CiviCRM + WordPress |
|||
== |
== Historical pages == |
||
Some historical pages (not updated): |
|||
* [[phab:tag/wmch-infrastructure/]] |
|||
* [[Tech Committee]] |
|||
Latest revision as of 17:02, 26 June 2026
✅ This page contains public tech info. Don't panic! The details in this page are public information which any external technical person could already guess anyway. Publishing this kind of documents bring more known benefits than unknown risks.
We do not believe in security through obscurity. Private documentation tends to a comfort zone leading to worse documentation, worse security management and faster obsolescence. Instead, we are glad to have this document in the open, and thank you for your help to share this document to others, to raise constructive critiques and suggest updates. Further info in the WMCH Tech Strategy#Public as Default on Meta-wiki.
Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information.
Contact
For really any question about the infrastructure, write an email:
- support (aaat) wikimedia (doooot) ch
These users will reply to you soon:
- User:Ilario - innovation manager
- User:Valerio Bozzolan – infrastructure operator (WMCH Tech Boosts)
Inventories
Quick overview of our Infrastructure components:
Tasks
Every request can be reported on Wikimedia Phabricator:
Partially related projects, hosted in our infrastructure but managed by the community:
Access
Every WMCH server can be accessed via SSH only using the WMCH VPN:
- Infrastructure/VPN - Wikimedia CH VPN
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it.
Changes
Every important configuration change is tracked inside our repository to identify regressions:
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure
Internal Tools
A list of other tools usually considered part of the WMCH Infrastructure:
- Salesforce: "database" for members
- Raisenow: payment platform in use for receiving donations
- Winbiz: accounting software
Servers
Toolforge
Wikimedia CH hosts some projects on Wikimedia Toolforge.
Here a list of all the projects that should stay up 'n' running on Wikimedia Toolforge:
Cronos Calendar
Wikimedia CH Cronos Calendar is a federated calendar for MediaWiki, not based on extensions or gadgets but wikitext-based.
Project information:
Homepage:
Repository:
Phabricator workboard:
Domains
See:
Websites
See:
Emails
Archived Platforms
- https://github.com/WikimediaSwitzerland
- TODO: eventually remove David Leoni as the only member of the organization
- TODO: eventually close this account, or keep it open mirroring repositories from https://gitlab.wikimedia.org/repos/wikimedia-ch/
Historical pages
Some historical pages (not updated):