Infrastructure: Difference between revisions
Jump to navigation
Jump to search
Content deleted Content added
→Changes: update |
update |
||
| (14 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{technical public info disclaimer}} |
|||
Wikimedia CH has a small but efficient server fleet. Here some public information. |
|||
Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information. |
|||
== Contact == |
== Contact == |
||
For really any question about the infrastructure, write an email: |
|||
: support (aaat) wikimedia (doooot) ch |
|||
* [[User:Ilario]] - has a lot of experience on the tech projects hosted in WMCH (staff member) |
|||
These users will reply to you soon: |
|||
* [[User:Ilario]] - innovation manager |
|||
* [[User:Valerio Bozzolan]] – infrastructure operator ([[w:m:Wikimedia CH/Tech boost|WMCH Tech Boosts]]) |
* [[User:Valerio Bozzolan]] – infrastructure operator ([[w:m:Wikimedia CH/Tech boost|WMCH Tech Boosts]]) |
||
== Inventories == |
|||
Quick overview of our Infrastructure components: |
|||
[[Infrastructure/Inventories]] |
|||
== Tasks == |
== Tasks == |
||
| Line 12: | Line 22: | ||
Every request can be reported on Wikimedia Phabricator: |
Every request can be reported on Wikimedia Phabricator: |
||
* |
* {{Phabricator Tag|wmch-infrastructure}} |
||
Partially related projects, hosted in our infrastructure but managed by the community: |
|||
* {{Phabricator Tag|dicoado.org}} |
|||
* {{Phabricator Tag|wikimini.org}} |
|||
* {{Phabricator Tag|wmch-cronos}} |
|||
* {{Phabricator Tag|wmch-cassandra}} |
|||
== Access == |
== Access == |
||
Every WMCH server |
Every WMCH server can be accessed via [[w:Secure Shell|SSH]] only using the WMCH VPN: |
||
* [[Infrastructure/VPN]] - Wikimedia CH VPN |
* [[Infrastructure/VPN]] - Wikimedia CH VPN |
||
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access. |
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it. |
||
== Changes == |
== Changes == |
||
| Line 28: | Line 45: | ||
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure |
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure |
||
== |
== Internal Tools == |
||
A list of other tools usually considered part of the WMCH Infrastructure: |
|||
; All virtual servers in Moresi |
|||
* Salesforce: "database" for members |
|||
This list was generated going to the Moresi VPS user interface and manually copying the information here: |
|||
* Raisenow: payment platform in use for receiving donations |
|||
* Winbiz: accounting software |
|||
== Servers == |
|||
{| class="wikitable" |
|||
|+ |
|||
!Server |
|||
!vCore |
|||
!RAM |
|||
!OS |
|||
!IP |
|||
!Comment |
|||
|- |
|||
|[[#Server otrs01|otrs01]] |
|||
|2 |
|||
|2G |
|||
|CentOS |
|||
|192.168.128.30 |
|||
| |
|||
|- |
|||
|donate01 |
|||
|2 |
|||
|4G |
|||
|CentOS |
|||
|192.168.128.16 |
|||
|- |
|||
|pfsense01 |
|||
|1 |
|||
|1G |
|||
|FreeBSD |
|||
|89.207.237.52 |
|||
| |
|||
|- |
|||
|[[#Server members2|members2]] |
|||
|1 |
|||
|4G |
|||
|Debian |
|||
|192.168.128.41 |
|||
| |
|||
|- |
|||
|[[#Server demo|demo]] |
|||
|6 |
|||
|8G |
|||
|Debian |
|||
|192.168.128.40 |
|||
| |
|||
|- |
|||
|webdav01 |
|||
|2 |
|||
|4G |
|||
|CentOS |
|||
|192.168.128.17 |
|||
| |
|||
|- |
|||
|web04 |
|||
|2 |
|||
|4G |
|||
|CentOS |
|||
|192.168.128.13 |
|||
| |
|||
|- |
|||
|web03 |
|||
|2 |
|||
|4G |
|||
|CentOS |
|||
|192.168.128.11 |
|||
| |
|||
|- |
|||
|web02 |
|||
|2 |
|||
|4G |
|||
|CentOS |
|||
|192.168.128.20 |
|||
| |
|||
|- |
|||
|[[#Server ubu02-argo|ubu02-argo]] |
|||
|2 |
|||
|8G |
|||
|Ubuntu |
|||
|192.168.128.18 |
|||
| |
|||
|- |
|||
|ubu01 |
|||
|2 |
|||
|12G |
|||
|Ubuntu |
|||
|192.168.128.15 |
|||
| |
|||
|- |
|||
|probe01 |
|||
|2 |
|||
|4G |
|||
|Microsoft Windows |
|||
|192.168.128.25 |
|||
| |
|||
|- |
|||
|otrs01TEST |
|||
|n.a. |
|||
|n.a. |
|||
|n.a. |
|||
|192.168.128.31 |
|||
|TO BE DISMISSED |
|||
|} |
|||
[[Infrastructure/Servers]] |
|||
Last update: September 2022 |
|||
=== Server ''members2'' === |
|||
[[File:Wikimedia CH server members2 neofetch - January 2021.png|thumbnail|Overview of the server <code>members2</code>.]] |
|||
The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] buster (current stable). |
|||
Served resources: |
|||
* https://members.wikimedia.ch/ |
|||
LAN IPs:* <code>192.168.128.41</code> |
|||
WAN IPs:* <code>89.207.237.60</code> |
|||
Hosting: |
|||
* https://members.wikimedia.ch/ |
|||
* https://matomo.wikimedia.ch/ ([[phab:T268331]]) |
|||
Databases: |
|||
<pre> |
|||
+-----------------------+ |
|||
| dbwiki_executive | |
|||
| dbwiki_members | |
|||
| information_schema | |
|||
| limesurvey_production | |
|||
| mysql | |
|||
| performance_schema | |
|||
| wmch_matomo | |
|||
| zabbix | |
|||
+-----------------------+ |
|||
</pre> |
|||
Notable packages installed: |
|||
<pre> |
|||
mariadb-server |
|||
apache2 |
|||
mediawiki |
|||
</pre> |
|||
Notable applications: |
|||
* https://members.wikimedia.ch/ |
|||
* Matomo - [[phab:T268331]] |
|||
* Zabbix |
|||
=== Server ''demo'' === |
|||
[[File:Wikimedia CH server demo neofetch - January 2021.png|thumbnail|Overview of the server <code>demo</code>.]] |
|||
The server called <code>members2</code> was installed in 2020 and runs [[w:Debian GNU/Linux|Debian GNU/Linux]] (current stable). |
|||
Served resources: |
|||
* https://demo.wikimedia.ch/ - [[phab:tag/minipedia/]] |
|||
LAN IPs: |
|||
* <code>192.168.128.40</code> |
|||
WAN IPs: |
|||
* <code>89.207.237.59</code> |
|||
Databases: |
|||
<pre> |
|||
+-------------------------+ |
|||
| information_schema | |
|||
| minipedia | |
|||
| mysql | |
|||
| performance_schema | |
|||
| wikimini_arwiki | |
|||
| wikimini_arwiki2 | |
|||
| wikimini_beta_frwiki | |
|||
| wikimini_beta_stockwiki | |
|||
| wikimini_enwiki | |
|||
| wikimini_eswiki | |
|||
| wikimini_frwiki | |
|||
| wikimini_itwiki | |
|||
| wikimini_labwiki | |
|||
| wikimini_stockwiki | |
|||
| wikimini_svwiki | |
|||
| wikimini_testwiki | |
|||
+-------------------------+ |
|||
</pre> |
|||
Notable packages installed: |
|||
<pre> |
|||
mariadb-server |
|||
apache2 |
|||
mediawiki |
|||
</pre> |
|||
Notable applications: |
|||
* [[w:m:Wikimini]] |
|||
=== Server ''ubu02-argo'' === |
|||
Operating system: |
|||
Ubuntu 18.04 LTS |
|||
LAN IPs: |
|||
* <code>192.168.128.18</code> |
|||
RAM: |
|||
* 8G |
|||
Partitions: |
|||
* / 30G |
|||
Info: |
|||
* [[w:m:Wikimedia CH/Project/Argo Wikimetrics]] |
|||
=== Server ''dicoado'' === |
|||
Operating system: |
|||
: Debian GNU/Linux bullseye (11 - stable) |
|||
LAN IPs: |
|||
* <code>192.168.128.35</code> |
|||
WAN IPs: |
|||
* <code>89.207.237.145</code> |
|||
vcores: |
|||
: 4 |
|||
RAM: |
|||
: 12G |
|||
Partitions: |
|||
* / 17G |
|||
* /home 63G |
|||
Info: |
|||
: [[phab:T305080]] |
|||
=== Server ''openedu'' === |
|||
LAN IP: |
|||
: <code>192.168.128.13</code> |
|||
Operating System: |
|||
: CentOS Linux 7 |
|||
RAM: |
|||
* 4G |
|||
Swap: |
|||
* 2G |
|||
Partitions: |
|||
* <code>/</code>: 10G |
|||
* <code>/var</code>: 10G |
|||
=== Server ''otrs01'' === |
|||
Served resources: |
|||
* https://otrs.wikimedia.ch/otrs/index.pl |
|||
Operating System: |
|||
: CentOS Linux 7 |
|||
LAN IP: |
|||
: <code>192.168.128.30</code> |
|||
RAM: |
|||
: 2G |
|||
Partitions: |
|||
* / 10G |
|||
* /var 37G |
|||
== Toolforge == |
== Toolforge == |
||
| Line 317: | Line 67: | ||
[[Infrastructure/Domains]] |
[[Infrastructure/Domains]] |
||
== |
== Websites == |
||
See: |
|||
=== Server ''intern'' === |
|||
[[Infrastructure/Websites]] |
|||
There is a legacy server called <code>intern</code> and exposed via https://intern.wikimedia.ch/ that hosts some legacy MySQL databases. |
|||
== Emails == |
|||
Here some hypothesis about the purpose of each database: |
|||
[[Infrastructure/Emails]] |
|||
* <code>b00028.board_</code> – legacy running wiki about https://board.wikimedia.ch/ |
|||
* <code>db00028.chapters_</code> – legacy running wiki about https://chapters.wikimedia.ch/ |
|||
== Archived Platforms == |
|||
* <code>db00028.members_</code> – legacy unused database previously related to https://members.wikimedia.ch/ ([[phab:T255848]]) |
|||
* <code>dbwiki_chapters</code> – legacy wiki about https://chapters.wikimedia.ch/ (note: no users, just contents) |
|||
* https://github.com/WikimediaSwitzerland |
|||
* <code>dbwiki_executive</code> – legacy unused database previously related to https://executive.wikimedia.ch/ (note: no users, just contents) |
|||
*: TODO: eventually remove David Leoni as the only member of the organization |
|||
* <code>dbwiki_members</code> – legacy unused database probably an old backup of <code>db00028.members_</code> (note: no users, just contents) |
|||
*: TODO: eventually close this account, or keep it open mirroring repositories from https://gitlab.wikimedia.org/repos/wikimedia-ch/ |
|||
* <code>dbwiki_test</code> – unknown |
|||
* <code>dbwikimania</code> – unknown |
|||
* <code>dbwikivillage</code> – unknown WordPress |
|||
* <code>dbwlm</code> – unknown WordPress |
|||
* <code>dbwwwprod</code> – unknown CiviCRM + WordPress |
|||
== Historical pages == |
== Historical pages == |
||
Some historical pages ( |
Some historical pages (not updated): |
||
* [[Tech Committee]] |
* [[Tech Committee]] |
||
== See also == |
|||
* [[phab:tag/wmch-infrastructure/]] |
|||
Latest revision as of 17:02, 26 June 2026
✅ This page contains public tech info. Don't panic! The details in this page are public information which any external technical person could already guess anyway. Publishing this kind of documents bring more known benefits than unknown risks.
We do not believe in security through obscurity. Private documentation tends to a comfort zone leading to worse documentation, worse security management and faster obsolescence. Instead, we are glad to have this document in the open, and thank you for your help to share this document to others, to raise constructive critiques and suggest updates. Further info in the WMCH Tech Strategy#Public as Default on Meta-wiki.
Wikimedia CH has an infrastructure consisting in websites, domains, servers, and more. Here some public information.
Contact
For really any question about the infrastructure, write an email:
- support (aaat) wikimedia (doooot) ch
These users will reply to you soon:
- User:Ilario - innovation manager
- User:Valerio Bozzolan – infrastructure operator (WMCH Tech Boosts)
Inventories
Quick overview of our Infrastructure components:
Tasks
Every request can be reported on Wikimedia Phabricator:
Partially related projects, hosted in our infrastructure but managed by the community:
Access
Every WMCH server can be accessed via SSH only using the WMCH VPN:
- Infrastructure/VPN - Wikimedia CH VPN
After you have obtained your WMCH VPN credentials, stay ready to share your SSH public keys, to deploy them on the desired server, to be then able to access it.
Changes
Every important configuration change is tracked inside our repository to identify regressions:
https://gitlab.wikimedia.org/repos/wikimedia-ch/wmch-infrastructure
Internal Tools
A list of other tools usually considered part of the WMCH Infrastructure:
- Salesforce: "database" for members
- Raisenow: payment platform in use for receiving donations
- Winbiz: accounting software
Servers
Toolforge
Wikimedia CH hosts some projects on Wikimedia Toolforge.
Here a list of all the projects that should stay up 'n' running on Wikimedia Toolforge:
Cronos Calendar
Wikimedia CH Cronos Calendar is a federated calendar for MediaWiki, not based on extensions or gadgets but wikitext-based.
Project information:
Homepage:
Repository:
Phabricator workboard:
Domains
See:
Websites
See:
Emails
Archived Platforms
- https://github.com/WikimediaSwitzerland
- TODO: eventually remove David Leoni as the only member of the organization
- TODO: eventually close this account, or keep it open mirroring repositories from https://gitlab.wikimedia.org/repos/wikimedia-ch/
Historical pages
Some historical pages (not updated):