Fixes: 26f289b7 ("Capitalize the first letter of all task names")

ansible-lint 6.5.0 complains about:

  name: All names should start with an
        uppercase letter. (name[casing])

This allows to retain all default hardening options that memcached@.service has.

* Remove www. from archlinux.org,
* Use HTTPS for the license link,
* Update $wgGitRepositoryViewers,
* Update comments referencing paths and URLs.

Adding/removing pages from the whitelist when using the Vector skin requires the write API now.
Without this, regular users get this error:

    You're not allowed to edit this wiki through the API.

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

- $wgScriptExtension was removed in MW 1.31
- $wgDBmysql5 was removed in MW 1.33
- $wgShowIPinHeader was removed in MW 1.27
- $wgUseETag was removed in MW 1.28
- $wgEnableWriteAPI was removed in MW 1.32
- $wgShowSQLErrors was removed in MW 1.37

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

$wgFragmentMode = [ 'html5', 'legacy' ]; is the default value since
MediaWiki 1.37:
https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:$wgFragmentMode

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

These were fixed in MediaWiki 1.38

Jakub Klinkovský authored 2 years ago and Kristian Klausen committed 2 years ago

Also updated some settings:

- The $wgShellLocale setting was removed from MediaWiki, see
  https://www.mediawiki.org/wiki/Special:MyLanguage/MediaWiki_1.38
- The "new" Vector skin got a name "vector-2022" and can be set simply
  by $wgDefaultSkin = 'vector-2022'; see
  https://www.mediawiki.org/wiki/Skin:Vector/2022#Note_about_1.38_release

This restores public access to recent changes, page history etc. which
was disabled in September 2019 due to misbehaving crawlers - see commits
https://github.com/archlinux/archwiki/commit/f2c518d3df94e9ad6898fdd03cac982902f8ac36
and https://github.com/archlinux/archwiki/commit/8595e8d66141e608db794f1deef3e52cb36e5e78.

Let's hope that our robots.txt has been improved since then and the
server load will not increase much. If it proves to be still a problem,
this commit can be reverted and we will figure out better solution.

These are used to signal the start of the document in a stream of many
documents. As Ansible only supports one YAML document per file this is
unnecessary. About a third of our YAML documents already lacked these.

Tweaking access to the abuse filter[1].

[1] https://github.com/archlinux/archwiki/pull/52

This allows us to make some abuse filters "public" while still preventing regular users from viewing them.

* Add all rights listed from https://www.mediawiki.org/wiki/Extension:AbuseFilter#User_rights.
* Log private information accessing and require providing a reason for accesing it.

Changing it to 770 so prometheus memcached exporter can connect to it.

archwiki/templates/LocalSettings.php.j2: place the commands in the QuestyCaptcha question inside <code> tags

This makes it more easier to distinguish the command from the rest of the text.

nl6720 authored 2 years ago and Jelle van der Waa committed 2 years ago

Various files in /extensions/ need to be accessible for extensions to work.

Based on example from https://www.mediawiki.org/wiki/Manual:Short_URL/Nginx.

Fixes #355.

nl6720 authored 2 years ago and Kristian Klausen committed 2 years ago

Upstream security and maintenance release.
https://lists.wikimedia.org/hyperkitty/list/mediawiki-announce@lists.wikimedia.org/thread/YJNXKPV5Z56NSUQ4G3SXPDUIZG5EQ7UR/

nl6720 authored 3 years ago and Jelle van der Waa committed 2 years ago

This provides syntax highliting and validity checking for CSS and JavaScript.
It is useful for editing things such as Common.css, Common.js and abuse filters.

See https://www.mediawiki.org/wiki/Extension:CodeEditor

PHP7 will likely be removed from the repos soon[1]. Time to upgrade! :)

[1] https://archlinux.org/todo/php-7-retiredment/

Without this change, "Search for pages containing" doesn't work.

Without this change, search suggestions don't work.

[1] https://phabricator.wikimedia.org/T288686

nl6720 authored 3 years ago and Jelle van der Waa committed 3 years ago

Ensure that the wiki's look for new users matches what they see before registering (i.e. the default).

nl6720 authored 3 years ago and Jelle van der Waa committed 3 years ago

Enable the "modern" Vector look by default to make the wiki readable on mobile devices.

Jakub Klinkovský authored 3 years ago and Kristian Klausen committed 3 years ago

We've hit this problem at least twice in the past, last time with the new
Vector skin update. With this change it should not be necessary to do
anything manually after an update.

A new editor was introduced in the most recent mediawiki update which
comes with images from a new extension location

Jakub Klinkovský authored 3 years ago and Jelle van der Waa committed 3 years ago

- abusefilter-private was renamed to abusefilter-privatedetails to
  follow upstream
- added the abusefilter-privatedetails-log permission to sysops
- reordered the other permissions

Our API endpoint was being abused by a malicious user which send about
20 req/s, as php-fpm uses a pool of workers this easily over burdens
them and also gives the server a constant 100% CPU load.

Applying a rate limit succesfully negates this issue.