Change Details

It would be awesome to migrate the two current legacy monolithic httpd `/etc/httpd/conf/virtual.conf` and `virtual-le.conf` files to a Debian-like configuration e.g. splitted for each domain / for each project and tracking available and enabled websites. In short splitting this monolithic legacy configuration: * https://phabricator.wikimedia.org/diffusion/WIIN/browse/master/servers/fabula/conf/httpd/legacy/virtual.conf;f11411344385823315aa33b5e7b5a08bb20dbd2b * https://phabricator.wikimedia.org/diffusion/WIIN/browse/master/servers/fabula/conf/httpd/legacy/virtual-le-ssl.conf;f11411344385823315aa33b5e7b5a08bb20dbd2b To this Debian-like configuration: https://phabricator.wikimedia.org/diffusion/WIIN/browse/master/servers/fabula/conf/httpd/ Also actually our VirtualHost(s) were defined in the following way: ``` <VirtualHost domain.tld> ServerName domain.tld ``` That way is not optimal because it's resolved internally like: ``` <VirtualHost IP_ADDRESS_DOMAIN_TLD:80> ServerName domain.tld ``` This means that we are making Apache HTTPd listening on a single interface (handling a single IP address) instead of listening whatever interface. This also does not simplify some other stuff like {T274064}. In short this can be fixed adopting this approach: ``` <VirtualHost *:80> ServerName domain.tld ```

It would be awesome to migrate the two current legacy monolithic httpd `/etc/httpd/conf/virtual.conf` and `virtual-le.conf` files to a Debian-like configuration e.g. splitted for each domain / for each project and tracking available and enabled websites. In short splitting this monolithic legacy configuration: * https://phabricator.wikimedia.org/diffusion/WIIN/browse/master/servers/fabula/conf/httpd/legacy/virtual.conf;f11411344385823315aa33b5e7b5a08bb20dbd2b * https://phabricator.wikimedia.org/diffusion/WIIN/browse/master/servers/fabula/conf/httpd/legacy/virtual-le-ssl.conf;f11411344385823315aa33b5e7b5a08bb20dbd2b To this Debian-like configuration: https://phabricator.wikimedia.org/diffusion/WIIN/browse/master/servers/fabula/conf/httpd/ Also actually our VirtualHost(s) were defined in the following way: ``` <VirtualHost domain.tld> ServerName domain.tld ``` That way is not optimal because it's resolved internally like: ``` <VirtualHost IP_ADDRESS_DOMAIN_TLD:80> ServerName domain.tld ``` This means that we are making Apache HTTPd listening on a single interface (handling a single IP address) instead of listening whatever interface. This also does not simplify some other stuff like {T274064}. In short this can be fixed adopting this approach: ``` <VirtualHost *:80> ServerName domain.tld ``` This is the status at the time of writing: ``` $ httpd -S VirtualHost configuration: [::1]:* wmi-fabula (/etc/httpd/conf/virtual.conf:7) 127.0.0.1:* wmi-fabula (/etc/httpd/conf/virtual.conf:7) 54.38.36.173:443 is a NameVirtualHost default server libertadigitali.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:2) port 443 namevhost libertadigitali.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:2) port 443 namevhost wikilovemonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:57) port 443 namevhost www.wikilovemonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:67) port 443 namevhost wikilovesmonuments.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:77) port 443 namevhost test.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:132) port 443 namevhost smssolidale.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:221) port 443 namevhost mb.wikilovesmonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:231) port 443 namevhost monzaebrianza.wikilovesmonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:241) port 443 namevhost old.wikilovesmonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:267) port 443 namevhost valledaosta.wikilovesmonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:305) port 443 namevhost vda.wikilovesmonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:338) port 443 namevhost www.wikilovesmonuments.it (/etc/httpd/conf/virtual-le-ssl.conf:362) port 443 namevhost sostienilacultura.it (/etc/httpd/conf/virtual-le-ssl.conf:419) port 443 namevhost www.sostienilacultura.it (/etc/httpd/conf/virtual-le-ssl.conf:429) port 443 namevhost cinquepermille.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:466) port 443 namevhost collab.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:519) port 443 namevhost dona.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:537) port 443 namevhost landing.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:589) port 443 namevhost tasks.osmit.it (/etc/httpd/sites-enabled/it-osmit-tasks-ssl.conf:8) port 443 namevhost framadate.wikimedia.it (/etc/httpd/sites-enabled/it-wikimedia-framadate-ssl.conf:12) port 443 namevhost matomo.wikimedia.it (/etc/httpd/sites-enabled/it-wikimedia-matomo-ssl.conf:12) port 443 namevhost wikimedia.it (/etc/httpd/sites-enabled/it-wikimedia-ssl.conf:16) 54.38.36.173:* is a NameVirtualHost default server old.wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:14) port * namevhost old.wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:14) port * namevhost www.wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:40) port * namevhost monzaebrianza.wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:86) port * namevhost valledaosta.wikilovesmonuments.itA (/etc/httpd/conf/virtual.conf:115) port * namevhost landing.wikimedia.it (/etc/httpd/conf/virtual.conf:208) port * namevhost cinquepermille.wikimedia.it (/etc/httpd/conf/virtual.conf:212) port * namevhost smssolidale.wikimedia.it (/etc/httpd/conf/virtual.conf:259) port * namevhost dona.wikimedia.it (/etc/httpd/conf/virtual.conf:297) port * namevhost libertadigitali.wikimedia.it (/etc/httpd/conf/virtual.conf:342) port * namevhost wikilovesmonuments.wikimedia.it (/etc/httpd/conf/virtual.conf:386) port * namevhost test.wikimedia.it (/etc/httpd/conf/virtual.conf:433) port * namevhost wikimediaitalia.it (/etc/httpd/conf/virtual.conf:456) port * namevhost wikimediaitalia.it (/etc/httpd/conf/virtual.conf:460) port * namevhost wikimediaitalia.org (/etc/httpd/conf/virtual.conf:465) port * namevhost wikimediaitalia.org (/etc/httpd/conf/virtual.conf:469) port * namevhost vda.wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:474) port * namevhost mb.wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:485) port * namevhost wikilovemonument.it (/etc/httpd/conf/virtual.conf:495) port * namevhost www.wikilovemonument.it (/etc/httpd/conf/virtual.conf:499) port * namevhost wikilovesmonument.it (/etc/httpd/conf/virtual.conf:503) port * namevhost www.wikilovesmonument.it (/etc/httpd/conf/virtual.conf:507) port * namevhost wikilovemonuments.it (/etc/httpd/conf/virtual.conf:511) port * namevhost www.wikilovemonuments.it (/etc/httpd/conf/virtual.conf:515) port * namevhost wikilovesmonuments.it (/etc/httpd/conf/virtual.conf:519) port * namevhost www.wikilovesreading.it (/etc/httpd/conf/virtual.conf:523) port * namevhost wikilovesreading.it (/etc/httpd/conf/virtual.conf:527) port * namevhost www.wikilovesbooks.it (/etc/httpd/conf/virtual.conf:531) port * namevhost wikilovesbooks.it (/etc/httpd/conf/virtual.conf:535) port * namevhost www.wikilovesreading.org (/etc/httpd/conf/virtual.conf:539) port * namevhost wikilovesreading.org (/etc/httpd/conf/virtual.conf:543) port * namevhost www.wikilovesbooks.org (/etc/httpd/conf/virtual.conf:547) port * namevhost wikilovesbooks.org (/etc/httpd/conf/virtual.conf:551) port * namevhost wikilibri.it (/etc/httpd/conf/virtual.conf:555) port * namevhost www.wikilibri.it (/etc/httpd/conf/virtual.conf:559) port * namevhost wikiscuola.org (/etc/httpd/conf/virtual.conf:563) port * namevhost www.wikiscuola.org (/etc/httpd/conf/virtual.conf:567) port * namevhost wikiscuola.info (/etc/httpd/conf/virtual.conf:571) port * namevhost www.wikiscuola.info (/etc/httpd/conf/virtual.conf:575) port * namevhost wlm.wikimedia.it (/etc/httpd/conf/virtual.conf:581) port * namevhost www.sostienilacultura.it (/etc/httpd/conf/virtual.conf:621) port * namevhost sostienilacultura.it (/etc/httpd/conf/virtual.conf:651) port * namevhost collab.wikimedia.it (/etc/httpd/conf/virtual.conf:656) port * namevhost wikimedia.info (/etc/httpd/conf/virtual.conf:676) port * namevhost www.wikimedia.info (/etc/httpd/conf/virtual.conf:680) port * namevhost mediawiki.biz (/etc/httpd/conf/virtual.conf:685) port * namevhost www.mediawiki.biz (/etc/httpd/conf/virtual.conf:689) port * namevhost mediawiki.it (/etc/httpd/conf/virtual.conf:694) port * namevhost www.mediawiki.it (/etc/httpd/conf/virtual.conf:698) port * namevhost mediawiki.net (/etc/httpd/conf/virtual.conf:703) port * namevhost www.mediawiki.net (/etc/httpd/conf/virtual.conf:707) port * namevhost mediawiki.eu (/etc/httpd/conf/virtual.conf:712) port * namevhost www.mediawiki.eu (/etc/httpd/conf/virtual.conf:716) port * namevhost wikinotizie.it (/etc/httpd/conf/virtual.conf:721) port * namevhost www.wikinotizie.it (/etc/httpd/conf/virtual.conf:725) port * namevhost itwp.it (/etc/httpd/conf/virtual.conf:730) port * namevhost www.itwp.it (/etc/httpd/conf/virtual.conf:734) port * namevhost itwp.org (/etc/httpd/conf/virtual.conf:739) port * namevhost www.itwp.org (/etc/httpd/conf/virtual.conf:743) port * namevhost wikiquote.biz (/etc/httpd/conf/virtual.conf:748) port * namevhost www.wikiquote.biz (/etc/httpd/conf/virtual.conf:752) port * namevhost wikiquote.eu (/etc/httpd/conf/virtual.conf:757) port * namevhost www.wikiquote.eu (/etc/httpd/conf/virtual.conf:761) port * namevhost wikibooks.biz (/etc/httpd/conf/virtual.conf:766) port * namevhost www.wikibooks.biz (/etc/httpd/conf/virtual.conf:770) port * namevhost wikimania.biz (/etc/httpd/conf/virtual.conf:775) port * namevhost www.wikimania.biz (/etc/httpd/conf/virtual.conf:779) port * namevhost wikimania.info (/etc/httpd/conf/virtual.conf:784) port * namevhost www.wikimania.info (/etc/httpd/conf/virtual.conf:788) port * namevhost wiktionary.info (/etc/httpd/conf/virtual.conf:793) port * namevhost www.wiktionary.info (/etc/httpd/conf/virtual.conf:797) port * namevhost wikispecies.it (/etc/httpd/conf/virtual.conf:802) port * namevhost www.wikispecies.it (/etc/httpd/conf/virtual.conf:806) port * namevhost wikispecies.eu (/etc/httpd/conf/virtual.conf:811) port * namevhost www.wikispecies.eu (/etc/httpd/conf/virtual.conf:815) port * namevhost commons.it (/etc/httpd/conf/virtual.conf:820) port * namevhost www.commons.it (/etc/httpd/conf/virtual.conf:824) port * namevhost wikimania.it (/etc/httpd/conf/virtual.conf:829) port * namevhost www.wikimania.it (/etc/httpd/conf/virtual.conf:833) port * namevhost wikisource.eu (/etc/httpd/conf/virtual.conf:838) port * namevhost www.wikisource.eu (/etc/httpd/conf/virtual.conf:842) port * namevhost wikicitazioni.it (/etc/httpd/conf/virtual.conf:847) port * namevhost www.wikicitazioni.it (/etc/httpd/conf/virtual.conf:851) port * namevhost wikiquote.it (/etc/httpd/conf/virtual.conf:856) port * namevhost www.wikiquote.it (/etc/httpd/conf/virtual.conf:860) port * namevhost wikidati.it (/etc/httpd/conf/virtual.conf:865) port * namevhost www.wikidati.it (/etc/httpd/conf/virtual.conf:869) port * namevhost wikidata.biz (/etc/httpd/conf/virtual.conf:874) port * namevhost www.wikidata.biz (/etc/httpd/conf/virtual.conf:878) port * namevhost wikidata.eu (/etc/httpd/conf/virtual.conf:883) port * namevhost www.wikidata.eu (/etc/httpd/conf/virtual.conf:887) port * namevhost wikivoyage.biz (/etc/httpd/conf/virtual.conf:892) port * namevhost www.wikivoyage.biz (/etc/httpd/conf/virtual.conf:896) port * namevhost wikivoyage.it (/etc/httpd/conf/virtual.conf:901) port * namevhost www.wikivoyage.it (/etc/httpd/conf/virtual.conf:905) port * namevhost wikiteca.it (/etc/httpd/conf/virtual.conf:910) port * namevhost www.wikiteca.it (/etc/httpd/conf/virtual.conf:914) port * namevhost wikisource.biz (/etc/httpd/conf/virtual.conf:919) port * namevhost www.wikisource.biz (/etc/httpd/conf/virtual.conf:923) port * namevhost xn--wikiversit-q4a.it (/etc/httpd/conf/virtual.conf:928) port * namevhost www.xn--wikiversit-q4a.it (/etc/httpd/conf/virtual.conf:932) port * namevhost wikiversity.biz (/etc/httpd/conf/virtual.conf:937) port * namevhost www.wikiversity.biz (/etc/httpd/conf/virtual.conf:941) port * namevhost wikiversity.info (/etc/httpd/conf/virtual.conf:946) port * namevhost www.wikiversity.info (/etc/httpd/conf/virtual.conf:950) port * namevhost libertadigitali.it (/etc/httpd/conf/virtual.conf:955) port * namevhost www.libertadigitali.it (/etc/httpd/conf/virtual.conf:959) port * namevhost stateofthemap.it (/etc/httpd/conf/virtual.conf:964) port * namevhost www.stateofthemap.it (/etc/httpd/conf/virtual.conf:968) port * namevhost tasks.osmit.it (/etc/httpd/sites-enabled/it-osmit-tasks-txt.conf:12) port * namevhost framadate.wikimedia.it (/etc/httpd/sites-enabled/it-wikimedia-framadate-txt.conf:12) port * namevhost matomo.wikimedia.it (/etc/httpd/sites-enabled/it-wikimedia-matomo-txt.conf:12) port * namevhost wikimedia.it (/etc/httpd/sites-enabled/it-wikimedia-txt.conf:16) 80.211.31.124:* www.wikimedia.it (/etc/httpd/conf/virtual.conf:144) 80.211.31.124:443 www.wikimedia.it (/etc/httpd/conf/virtual-le-ssl.conf:159) *:443 54.38.36.173 (/etc/httpd/conf.d/ssl.conf:56) ServerRoot: "/etc/httpd" Main DocumentRoot: "/var/www" Main ErrorLog: "/etc/httpd/logs/error_log" Mutex mpm-accept: using_defaults Mutex fcgid-pipe: using_defaults Mutex authdigest-opaque: using_defaults Mutex proxy-balancer-shm: using_defaults Mutex rewrite-map: using_defaults Mutex authdigest-client: using_defaults Mutex fcgid-proctbl: using_defaults Mutex ssl-stapling: using_defaults Mutex proxy: using_defaults Mutex ldap-cache: using_defaults Mutex authn-socache: using_defaults Mutex ssl-cache: using_defaults Mutex default: dir="/run/httpd/" mechanism=default PidFile: "/etc/httpd/run/httpd.pid" Define: _RH_HAS_HTTPPROTOCOLOPTIONS Define: DUMP_VHOSTS Define: DUMP_RUN_CFG User: name="nobody" id=99 Group: name="nogroup" id=65534 ```