Infrastructure: Difference between revisions

From WMCH Tech Wiki
Jump to navigation Jump to search
(→‎Changes: update)
(update)
 
(14 intermediate revisions by the same user not shown)
Line 1: Line 1:
Wikimedia CH has a small but efficient server fleet. Here some public information.
{{technical public info disclaimer}}


Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information.
== Contact ==
== Contact ==


If you have any question feel free to contact one of the users with access in the network:
For really any question about the infrastructure, write an email:


* [[User:Ilario]] - has a lot of experience on the tech projects hosted in WMCH (staff member)
: support (aaat) wikimedia (doooot) ch
 
These users will reply to you soon:
 
* [[User:Ilario]] - innovation manager
* [[User:Valerio Bozzolan]] – infrastructure operator ([[w:m:Wikimedia CH/Tech boost|WMCH Tech Boosts]])
* [[User:Valerio Bozzolan]] – infrastructure operator ([[w:m:Wikimedia CH/Tech boost|WMCH Tech Boosts]])
== Inventories ==
Quick overview of our Infrastructure components:
[[Infrastructure/Inventories]]


== Tasks ==
== Tasks ==
Line 12: Line 22:
Every request can be reported on Wikimedia Phabricator:
Every request can be reported on Wikimedia Phabricator:


* [[phab:tag/wmch-infrastructure/]]
* {{Phabricator Tag|wmch-infrastructure}}
 
Partially related projects, hosted in our infrastructure but managed by the community:
 
* {{Phabricator Tag|dicoado.org}}
* {{Phabricator Tag|wikimini.org}}
* {{Phabricator Tag|wmch-cronos}}
* {{Phabricator Tag|wmch-cassandra}}


== Access ==
== Access ==


Every WMCH server cannot be accessed via [[w:Secure Shell|SSH]] without being in the WMCH VPN:
Every WMCH server can be accessed via [[w:Secure Shell|SSH]] only using the WMCH VPN:


* [[Infrastructure/VPN]] - Wikimedia CH VPN
* [[Infrastructure/VPN]] - Wikimedia CH VPN


After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access.
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it.


== Changes ==
== Changes ==
Line 28: Line 45:
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure


== Server fleet ==
== Internal Tools ==
 
; All virtual servers in Moresi
 
This list was generated going to the Moresi VPS user interface and manually copying the information here:
 
{| class="wikitable"
|+
!Server
!vCore
!RAM
!OS
!IP
!Comment
|-
|[[#Server otrs01|otrs01]]
|2
|2G
|CentOS
|192.168.128.30
|
|-
|donate01
|2
|4G
|CentOS
|192.168.128.16
|-
|pfsense01
|1
|1G
|FreeBSD
|89.207.237.52
|
|-
|[[#Server members2|members2]]
|1
|4G
|Debian
|192.168.128.41
|
|-
|[[#Server demo|demo]]
|6
|8G
|Debian
|192.168.128.40
|
|-
|webdav01
|2
|4G
|CentOS
|192.168.128.17
|
|-
|web04
|2
|4G
|CentOS
|192.168.128.13
|
|-
|web03
|2
|4G
|CentOS
|192.168.128.11
|
|-
|web02
|2
|4G
|CentOS
|192.168.128.20
|
|-
|[[#Server ubu02-argo|ubu02-argo]]
|2
|8G
|Ubuntu
|192.168.128.18
|
|-
|ubu01
|2
|12G
|Ubuntu
|192.168.128.15
|
|-
|probe01
|2
|4G
|Microsoft Windows
|192.168.128.25
|
|-
|otrs01TEST
|n.a.
|n.a.
|n.a.
|192.168.128.31
|TO BE DISMISSED
|}
 
Last update: September 2022
 
=== Server ''members2'' ===
[[File:Wikimedia CH server members2 neofetch - January 2021.png|thumbnail|Overview of the server <code>members2</code>.]]
The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] buster (current stable).
 
Served resources:
* https://members.wikimedia.ch/
 
LAN IPs:* <code>192.168.128.41</code>
 
WAN IPs:* <code>89.207.237.60</code>
 
Hosting:
 
* https://members.wikimedia.ch/
* https://matomo.wikimedia.ch/ ([[phab:T268331]])
 
Databases:
 
<pre>
+-----------------------+
| dbwiki_executive      |
| dbwiki_members        |
| information_schema    |
| limesurvey_production |
| mysql                |
| performance_schema    |
| wmch_matomo          |
| zabbix                |
+-----------------------+
</pre>
 
Notable packages installed:
 
<pre>
mariadb-server
apache2
mediawiki
</pre>
 
Notable applications:
* https://members.wikimedia.ch/
* Matomo - [[phab:T268331]]
* Zabbix
 
=== Server ''demo'' ===
[[File:Wikimedia CH server demo neofetch - January 2021.png|thumbnail|Overview of the server <code>demo</code>.]]
The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] (current stable).


Served resources:
A list of other tools usually considered part of the WMCH Infrastructure:
* https://demo.wikimedia.ch/ - [[phab:tag/minipedia/]]


LAN IPs:
* Salesforce: "database" for members
* <code>192.168.128.40</code>
* Raisenow: payment platform in use for receiving donations
* Winbiz: accounting software


WAN IPs:
== Servers ==
* <code>89.207.237.59</code>


Databases:
[[Infrastructure/Servers]]
 
<pre>
+-------------------------+
| information_schema      |
| minipedia              |
| mysql                  |
| performance_schema      |
| wikimini_arwiki        |
| wikimini_arwiki2        |
| wikimini_beta_frwiki    |
| wikimini_beta_stockwiki |
| wikimini_enwiki        |
| wikimini_eswiki        |
| wikimini_frwiki        |
| wikimini_itwiki        |
| wikimini_labwiki        |
| wikimini_stockwiki      |
| wikimini_svwiki        |
| wikimini_testwiki      |
+-------------------------+
</pre>
 
Notable packages installed:
 
<pre>
mariadb-server
apache2
mediawiki
</pre>
 
Notable applications:
 
* [[w:m:Wikimini]]
 
=== Server ''ubu02-argo'' ===
 
Operating system:
 
Ubuntu 18.04 LTS
 
LAN IPs:
* <code>192.168.128.18</code>
 
RAM:
* 8G
 
Partitions:
* / 30G
 
Info:
* [[w:m:Wikimedia CH/Project/Argo Wikimetrics]]
 
=== Server ''dicoado'' ===
 
Operating system:
 
: Debian GNU/Linux bullseye (11 - stable)
 
LAN IPs:
* <code>192.168.128.35</code>
 
WAN IPs:
* <code>89.207.237.145</code>
 
vcores:
: 4
 
RAM:
: 12G
 
Partitions:
* / 17G
* /home 63G
 
Info:
: [[phab:T305080]]
 
=== Server ''openedu'' ===
 
LAN IP:
: <code>192.168.128.13</code>
 
Operating System:
: CentOS Linux 7
 
RAM:
* 4G
 
Swap:
* 2G
 
Partitions:
* <code>/</code>: 10G
* <code>/var</code>: 10G
 
=== Server ''otrs01'' ===
 
Served resources:
* https://otrs.wikimedia.ch/otrs/index.pl
 
Operating System:
: CentOS Linux 7
 
LAN IP:
: <code>192.168.128.30</code>
 
RAM:
: 2G
 
Partitions:
* / 10G
* /var 37G


== Toolforge ==
== Toolforge ==
Line 317: Line 67:
[[Infrastructure/Domains]]
[[Infrastructure/Domains]]


== Legacy infrastructure ==
== Websites ==


=== Server ''intern'' ===
See:


There is a legacy server called <code>intern</code> and exposed via https://intern.wikimedia.ch/ that hosts some legacy MySQL databases.
[[Infrastructure/Websites]]


Here some hypothesis about the purpose of each database:
== Emails ==


* <code>b00028.board_</code> – legacy running wiki about https://board.wikimedia.ch/
[[Infrastructure/Emails]]
* <code>db00028.chapters_</code> – legacy running wiki about https://chapters.wikimedia.ch/
 
* <code>db00028.members_</code> – legacy unused database previously related to https://members.wikimedia.ch/ ([[phab:T255848]])
== Archived Platforms ==
* <code>dbwiki_chapters</code> – legacy wiki about https://chapters.wikimedia.ch/ (note: no users, just contents)
 
* <code>dbwiki_executive</code> – legacy unused database previously related to https://executive.wikimedia.ch/ (note: no users, just contents)
* https://github.com/WikimediaSwitzerland
* <code>dbwiki_members</code> – legacy unused database probably an old backup of <code>db00028.members_</code> (note: no users, just contents)
*: TODO: eventually remove David Leoni as the only member of the organization
* <code>dbwiki_test</code> – unknown
*: TODO: eventually close this account, or keep it open mirroring repositories from https://gitlab.wikimedia.org/repos/wikimedia-ch/
* <code>dbwikimania</code> – unknown
* <code>dbwikivillage</code> – unknown WordPress
* <code>dbwlm</code> – unknown WordPress
* <code>dbwwwprod</code> – unknown CiviCRM + WordPress


== Historical pages ==
== Historical pages ==
Some historical pages (probably not updated):
Some historical pages (not updated):
* [[Tech Committee]]
* [[Tech Committee]]
== See also ==
* [[phab:tag/wmch-infrastructure/]]

Latest revision as of 17:02, 26 June 2026

✅ This page contains public tech info. Don't panic! The details in this page are public information which any external technical person could already guess anyway. Publishing this kind of documents bring more known benefits than unknown risks.

We do not believe in security through obscurity. Private documentation tends to a comfort zone leading to worse documentation and worse security management. Instead, we are glad to have this document in the open, and thank you for your help to share this document to others, to raise constructive critiques and suggest updates. Further info in the WMCH Tech Strategy#Public as Default on Meta-wiki.

Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information.

Contact

For really any question about the infrastructure, write an email:

support (aaat) wikimedia (doooot) ch

These users will reply to you soon:

Inventories

Quick overview of our Infrastructure components:

Infrastructure/Inventories

Tasks

Every request can be reported on Wikimedia Phabricator:

Partially related projects, hosted in our infrastructure but managed by the community:

Access

Every WMCH server can be accessed via SSH only using the WMCH VPN:

After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it.

Changes

Every important configuration change is tracked inside our repository to identify regressions:

https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure

Internal Tools

A list of other tools usually considered part of the WMCH Infrastructure:

  • Salesforce: "database" for members
  • Raisenow: payment platform in use for receiving donations
  • Winbiz: accounting software

Servers

Infrastructure/Servers

Toolforge

Wikimedia CH hosts some projects on Wikimedia Toolforge.

Here a list of all the projects that should stay up 'n' running on Wikimedia Toolforge:

Cronos Calendar

Wikimedia CH Cronos Calendar is a federated calendar for MediaWiki, not based on extensions or gadgets but wikitext-based.

Project information:

Homepage:

Repository:

Phabricator workboard:

Domains

See:

Infrastructure/Domains

Websites

See:

Infrastructure/Websites

Emails

Infrastructure/Emails

Archived Platforms

Historical pages

Some historical pages (not updated):

Retrieved from "https://tech.wikimedia.ch/w/index.php?title=Infrastructure&oldid=29427"