Wiki Upgrade

Eternal Wiki Upgrade Quest

This is the beginning of the wiki upgrade page....

Requirements

1. https by letsencrypt
2. debian 9
3. no snowflakes, all our (known) devops culture at nb is ansible
4. salt the passwords correctly

Chosen Technologies

1. Ansible
2. Debian 9
3. Caddy
4. Letsencrypt / Certbot

Ansible Roles

Noisebridge already has an ansible infrastructure repo, please join the Noisebridge github group and hack this: https://github.com/noisebridge/ansible/

1. Certbot - https://github.com/geerlingguy/ansible-role-certbot
2. Semantic Mediawiki - Mediawiki maintains some: https://phabricator.wikimedia.org/diffusion/1881/
   1. It may be useful to look at this one: https://github.com/yongxinL/ansible-mediawiki

Database Hacking

We need to upgrade a really old version of mediawiki and will likely need to futz with the database. Lets use one of the OpenStack Semantic MediaWiki images for testing and refitting the database: https://wikitech.wikimedia.org/wiki/Portal:Cloud_VPS

1. Migrate to postgresql?
   1. make a git repo to store migration sql and other sql used for massaging the database contents
2. Delete old passwords (md5 with no salt) and expire all user passwords?
   1. Write/publish public sql script to clean up the production database for public publishing
3. Clean the database of spam/cruft?
   1. publish these scripts to the same sql script repo

Password Rollover

We need to delete the password column and expire everyone's password. The old mediawiki only stores md5 hashed passwords with no salts, so we'll have to delete the whole thing

user_password_expires

MediaWiki version: ≥ 1.23

Date when user's password expires; null for no expiration date. Can also be set manually by calling User->expirePassword().