MediaWiki Debian Installation - Revision history

Wurmli: /* SSL Virtual Default Host */

2020-04-17T16:21:44Z

SSL Virtual Default Host

Wurmli at 06:14, 26 February 2020

2020-02-26T06:14:48Z

Wurmli at 06:10, 26 February 2020

2020-02-26T06:10:18Z

Wurmli at 17:37, 23 February 2020

2020-02-23T17:37:44Z

Wurmli: /* Debian on targetserver */

2020-02-19T07:50:01Z

Debian on targetserver

Wurmli: /* My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) */ February 16, 2020 - Final

2020-02-16T12:02:03Z

My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster): February 16, 2020 - Final

Wurmli: /* Math extension, including Parsoid and Mathoid */

2020-02-16T11:57:39Z

Math extension, including Parsoid and Mathoid

Wurmli: /* SSL Virtual Default Host */

2020-02-16T07:16:32Z

SSL Virtual Default Host

Wurmli: /* Short URLs */

2020-02-16T07:03:30Z

Short URLs

Wurmli: /* Firewall */

2020-02-16T06:56:24Z

Firewall

@@ Line 41: / Line 41: @@
 === SSL Virtual Default Host ===
-I used [https://letsencrypt.org/getting-started/ Let's Encrypt], respectively [https://certbot.eff.org/instructions Certbot], to get a certifcate for my site and had certbot change my configuration files in /etc/apache2. Testing with testssl showed vulnerabilities, i.e. TLSv1 and TLSv1.1 as accepted protocols.<syntaxhighlight lang="shell">
+I used [https://letsencrypt.org/getting-started/ Let's Encrypt], respectively [https://certbot.eff.org/instructions Certbot], to get a certifcate for my site and had certbot change my configuration files in /etc/apache2.
 testssl www.example.com

← Older revision		Revision as of 06:14, 26 February 2020
Line 1:		Line 1:

−	<seo title="MediaWiki,Debian,Installation" metak="Buster,Bullseye,Url,Firewall,SSL,letsencryt" metad="Challenges,installing,Mediawiki,on,Debian" google-site-verification="google00ccddbcda3bce82.html" />	+	<seo title="MediaWiki Debian Installation" metak="Buster,Bullseye,Url,Firewall,SSL,letsencryt" metad="Challenges installing Mediawiki on Debian" google-site-verification="google00ccddbcda3bce82.html" />

	== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ==		== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ==

← Older revision		Revision as of 06:10, 26 February 2020
Line 1:		Line 1:
		+
		+	<seo title="MediaWiki,Debian,Installation" metak="Buster,Bullseye,Url,Firewall,SSL,letsencryt" metad="Challenges,installing,Mediawiki,on,Debian" google-site-verification="google00ccddbcda3bce82.html" />
		+
	== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ==		== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ==
	February 2020		February 2020

@@ Line 1: / Line 1: @@
-=== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ===
+== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ==
 February 2020
@@ Line 13: / Line 13: @@
 </syntaxhighlight>
-==== Firewall ====
+=== Firewall ===
 Between my homemachine or an outside visitor and the targetserver is the firewall, built into my router. So I have to allow port sharing with my target server. Debian's default for ssh is port 22. (For further serving http, https and parsoid and mathoid extensions I also allowed ports 80, 443, 8143 and 10043 each for IPv4 and IPv6 to be shared.)
-==== Debian on targetserver ====
+=== Debian on targetserver ===
 [https://fit-iot.com/web/products/fitlet2/fitlet2-specifications/ fitlet2] comes with LinuxMint preinstalled, but I prefer Debian. The choice of a desktop environment and an Internet server on the targetserver allow remote browsing via ssh. [https://wiki.debian.org/WebServers Debian recommends]<syntaxhighlight lang="shell">
 sudo tasksel
@@ Line 25: / Line 25: @@
 </syntaxhighlight>installs, as I recall, all that is needed to run mediawiki on localhost.
-==== Short URLs ====
+=== Short URLs ===
 Short story: place two aliases into the apache2 conf-file that defines the mediawiki host and define the $wgArticlePath:<syntaxhighlight lang="text">
 /etc/apache2/conf-enabled/mediawiki.conf:
@@ Line 37: / Line 37: @@
 </syntaxhighlight>Longer story: to get this right one has to know or guess how apache2 loads its modules, whether there is cumulation or overriding and in what order apache2 loads the modules etc. And also what the Debian defaults are. As I played too long with the configuration files, I can't tell anymore what  the original state was. I suppose that /etc/mediawiki/mediawiki.conf was a link to /etc/apache2/conf-enabled/mediawiki.conf and that the above aliases could have been added there.
-==== SSL Virtual Default Host ====
+=== SSL Virtual Default Host ===
 I used [https://letsencrypt.org/getting-started/ Let's Encrypt], respectively [https://certbot.eff.org/instructions Certbot], to get a certifcate for my site and had certbot change my configuration files in /etc/apache2. Testing with testssl showed vulnerabilities, i.e. TLSv1 and TLSv1.1 as accepted protocols.<syntaxhighlight lang="shell">
 sudo apt install certbot testssl.sh
@@ Line 100: / Line 100: @@
 </syntaxhighlight>testssl www.example.com now runs flawlessly, warning only about two or three cyphers that should not be offered.
-==== Math extension, including Parsoid and Mathoid ====
+=== Math extension, including Parsoid and Mathoid ===
 I added the Extension:Math in the beginning of February 2020. Additionally, I added Parsoid and Mathoid, not being really sure whether this was needed. In any case, on the Parsoid site it is stated:<blockquote>Parsoid (the PHP version) is planned to come natively bundled with MediaWiki by June 2020. At that time, the setup instructions on this page will be updated. Until then, for non-Wikimedia installations, Parsoid/JS is the supported version of Parsoid. </blockquote>Parsoid and Mathoid are now services on my host. To access them via ports 8143 and 10043, respectively, I installed stunnel4<syntaxhighlight lang="shell">
 sudo apt install stunnel4

@@ Line 57: / Line 57: @@
         ServerName www.example.com
-        # ServerAlias does not work for me
+        # ServerAlias
-        #ServerAlias example.com *.example.com
+        ServerAlias example.com *.example.com
         Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

← Older revision		Revision as of 12:02, 16 February 2020
Line 1:		Line 1:
	=== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ===		=== My Experience Installing MediaWiki 1.31 on Debian/GNU Linux Bullseye (Buster) ===
		+	February 2020
−	This page will be under construction for some while (started 2020-2-14).

	These are no complete installation instructions, but a description of some of the challenges and the possible solutions to set up mediawiki with the following goals:		These are no complete installation instructions, but a description of some of the challenges and the possible solutions to set up mediawiki with the following goals:

← Older revision		Revision as of 11:57, 16 February 2020
Line 101:		Line 101:

	==== Math extension, including Parsoid and Mathoid ====		==== Math extension, including Parsoid and Mathoid ====
		+	I added the Extension:Math in the beginning of February 2020. Additionally, I added Parsoid and Mathoid, not being really sure whether this was needed. In any case, on the Parsoid site it is stated:<blockquote>Parsoid (the PHP version) is planned to come natively bundled with MediaWiki by June 2020. At that time, the setup instructions on this page will be updated. Until then, for non-Wikimedia installations, Parsoid/JS is the supported version of Parsoid. </blockquote>Parsoid and Mathoid are now services on my host. To access them via ports 8143 and 10043, respectively, I installed stunnel4<syntaxhighlight lang="shell">
		+	sudo apt install stunnel4
		+	</syntaxhighlight>with the conf-file:<syntaxhighlight lang="text">
		+	/etc/stunnel/parsoid-mathoid.conf:
		+
		+	cert = /etc/letsencrypt/live/www.example.com/fullchain.pem
		+	key = /etc/letsencrypt/live/www.example.com/privkey.pem
		+
		+	[parsoid]
		+	accept = :::8143
		+	connect = :::8142
		+
		+	[mathoid]
		+	accept = :::10043
		+	connect = :::10042
		+
		+	</syntaxhighlight>

@@ Line 81: / Line 81: @@
         # after it has been globally disabled with "a2disconf".
         #Include conf-available/serve-cgi-bin.conf
         SSLCertificateFile /etc/letsencrypt/live/www.example.com-0001/fullchain.pem

@@ Line 35: / Line 35: @@
 $wgArticlePath = '/wiki/$1';
-</syntaxhighlight>Longer story: to get this right one has to know or guess how apache2 loads its modules, if there is cumulation, overwriting, sequencing etc. and how Debian handles this. As I played too long with the configuration files, I can't tell anymore what  the original state was. I suppose that /etc/mediawiki/mediawiki.conf was a link to /etc/apache2/conf-enabled/mediawiki.conf and that the above aliases could have been added there.
+</syntaxhighlight>Longer story: to get this right one has to know or guess how apache2 loads its modules, whether there is cumulation or overriding and in what order apache2 loads the modules etc. And also what the Debian defaults are. As I played too long with the configuration files, I can't tell anymore what  the original state was. I suppose that /etc/mediawiki/mediawiki.conf was a link to /etc/apache2/conf-enabled/mediawiki.conf and that the above aliases could have been added there.
 ==== SSL Virtual Default Host ====