Page MenuHomePhabricator

After the migration, test that everything works
Open, Needs TriagePublic

Description

  • all databases imported (also the ones for Cargo extension)
  • Apache server : main .htaccess file, double check security configuration
    • simplify a bit since we do not need anymore to handle http/https etc.
    • double-check from DicoAdo users
  • SSL
  • Auto Prepend File anti-IFRAME, security parameters
  • Crontab : rewrite the infomaniak cron to actually natively supported cron, check that it works
    • created native systemd job in /etc/systemd/system that can be managed with systemctl status dicoado-wiki-fr
    • created simple entries in sudo -u www-data crontab -e for hourly, daily and monthly and moved in /var/www/dicoado/fr/cron/ out of web visibility
    • fix monthly script /var/www/dicoado/fr/cron/monthly.sh that is probably needing admin database credentials.
      • You can manually test that with sudo -u www-data /var/www/dicoado/fr/cron/monthly.sh
  • Mails (they were not migrated at the moment, so they should work :D)
  • Access logs, error logs, etc. /var/log/apache2/dicoado.org and shared /var/log/apache2/error.log
  • Matomo stats on https://matomo.dicoado.org/ (hosted by WMCH too but in another instance)
  • PHP version and parameters

Event Timeline

The .htaccess is quite short now. Can you please double-check?

It seems lot of things are unnecessary now, since we have separated virtualhosts with separated redirects. But maybe I'm wrong (?)

OK please check the Task description. Everything is there.

It should be > 0.02% faster now that $wgJobRunRate is not the default anymore.

Unrelated: can we create a page like https://meta.wikimedia.org/wiki/Dicoado.org with some public info about this super-nice community project?

I ask that since we can be interested in having a public sub-page with some technical info. (Usually people use Wikitech for that, but you need separated credentials on Wikitech, and so it's a bit over-kill in my opinion here)

The .htaccess is quite short now. Can you please double-check?

It seems lot of things are unnecessary now, since we have separated virtualhosts with separated redirects. But maybe I'm wrong (?)

Unfortunately we got some regression: we're supposed to redirect people who access the dicoado.org/something, where something is not related to the main page (hence the mainpage folder) to fr.dicoado.org/something.
I think I need to draw a schematics to be sure to fully understand how the apache configuration works here, and what we have to do. The goal is to completely remove the .htaccess, fully put what is needed in the .conf files, and then a nice AllowOverride none globally.

Oh, the HSTS had broken since it was enabled in fr.dicoado.org but not in dicoado.org. I've reenabled it again but it's like the other things, it needs being properly set up.