Page MenuHomeMiraheze

OrangeStar (Alex)
User

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Tuesday

  • Clear sailing ahead.

User Details

User Since
Nov 4 2022, 15:51 (68 w, 1 d)
Availability
Available
IRC Nickname
Orange_Star
GitHub User
redbluegreenhat
Miraheze User
OrangeStar [ Global Accounts ]

Profile picture is from Wikimedia Commons, taken by ronardios from Flickr, licensed CC-BY-SA 2.0: https://commons.wikimedia.org/wiki/File:Anolis_carolinensis_aggression.jpg

Recent Activity

Yesterday

OrangeStar created T11897: Configure CORS between wikis.
Sat, Feb 24, 11:24 · MediaWiki (SRE)

Fri, Feb 23

OrangeStar added a project to T11888: Wiki undeletions through ManageWiki are unsuccessful : OrangeStar.
Fri, Feb 23, 08:16 · OrangeStar

Thu, Feb 22

OrangeStar removed a project from T11884: Replace RfRW with an extension: OrangeStar.
Thu, Feb 22, 15:43 · MediaWiki (SRE)
OrangeStar placed T11884: Replace RfRW with an extension up for grabs.
Thu, Feb 22, 15:43 · MediaWiki (SRE)
OrangeStar moved T11884: Replace RfRW with an extension from Radar to In Progress on the OrangeStar board.
Thu, Feb 22, 10:34 · MediaWiki (SRE)
OrangeStar added a comment to T11884: Replace RfRW with an extension.

https://github.com/miraheze/ReopenWiki repository created, currently a copy of https://github.com/miraheze/ImportDump/commit/3fe0e404a5abc32f6fd8ab25e82ca2bfaca65552, I'm in the process of renaming stuff. After that will give it the ability to reopen closed wikis, then install it on mirabeta, do some testing, and give it the okay. Shouldn't take too long, will hopefully be able to end this one by the weekend.

Thu, Feb 22, 09:48 · MediaWiki (SRE)

Wed, Feb 21

OrangeStar updated the task description for T11884: Replace RfRW with an extension.
Wed, Feb 21, 15:30 · MediaWiki (SRE)
OrangeStar triaged T11884: Replace RfRW with an extension as Low priority.
Wed, Feb 21, 15:25 · MediaWiki (SRE)
OrangeStar updated the task description for T11883: Split CreateWiki's inactivity-related functionality to a new extension.
Wed, Feb 21, 15:17 · MediaWiki (SRE), OrangeStar, ManageWiki, CreateWiki
OrangeStar moved T11883: Split CreateWiki's inactivity-related functionality to a new extension from Radar to Investigate on the OrangeStar board.
Wed, Feb 21, 15:06 · MediaWiki (SRE), OrangeStar, ManageWiki, CreateWiki
OrangeStar triaged T11883: Split CreateWiki's inactivity-related functionality to a new extension as Low priority.
Wed, Feb 21, 15:05 · MediaWiki (SRE), OrangeStar, ManageWiki, CreateWiki

Mon, Feb 19

OrangeStar closed T11873: SSL for custom domain: cco.miraheze.org as Invalid.

Please use Special:RequestSSL on Meta. Additionally, please change the CNAME record's target to mw-lb.miraheze.org.

Mon, Feb 19, 16:13 · MediaWiki (SRE), SSL

Sun, Feb 18

OrangeStar added a comment to T11867: CSP review for 1.1.1.1.

Had to change to Cloudflare's 1.1.1.1 because Quad9 doesn't serve CORS headers, while Cloudflare does.

Sun, Feb 18, 17:56 · CSP Review, MediaWiki (SRE)
OrangeStar renamed T11867: CSP review for 1.1.1.1 from CSP review for dns.quad9.net to CSP review for 1.1.1.1.
Sun, Feb 18, 17:55 · CSP Review, MediaWiki (SRE)
OrangeStar updated the task description for T11867: CSP review for 1.1.1.1.
Sun, Feb 18, 17:03 · CSP Review, MediaWiki (SRE)
OrangeStar created T11867: CSP review for 1.1.1.1.
Sun, Feb 18, 16:49 · CSP Review, MediaWiki (SRE)
OrangeStar added a comment to T10505: Add Extension:WebP.

@Universal_Omega Why don't we enable it at mirabeta and see what happens?

Sun, Feb 18, 15:11 · BrandonWM , Extensions, MediaWiki (SRE)

Sat, Feb 17

OrangeStar added a comment to T11865: Echo email icons broken.

R9:3afdbcb55dcfe8ba0e9ba5d81d5a0e51c6789bf2 has been merged and deployed, how about now?

Sat, Feb 17, 19:23 · MediaWiki (SRE), MediaWiki, Production Error
OrangeStar updated subscribers of T11699: Automate checking that domain is pointed.

During a conversation with @Universal_Omega on #miraheze-tech/#tech it was suggested to do these in the extension rather than using hooks. I will be rethinking my approach to this, will likely drop the proposed hook and add some more configs to RequestSSL, namely one where all subdomains under a domain can be exempted from DNS checks, and configs for CNAME and NS records that, if found, will mark the custom domain in the request as pointed.

Sat, Feb 17, 19:06 · MediaWiki (SRE), RequestSSL
OrangeStar added a comment to T11865: Echo email icons broken.

@MacFan4000 is there something at Graylog being logged that we can look at?

Sat, Feb 17, 18:49 · MediaWiki (SRE), MediaWiki, Production Error
OrangeStar added a comment to T11108: Improve CentralAuth performance or create our own Login extension.
Sat, Feb 17, 18:13 · OrangeStar, Extensions, MediaWiki (SRE)
OrangeStar added a comment to T11108: Improve CentralAuth performance or create our own Login extension.

@Paladox What bottlenecks are we hitting in right now, if any, in terms of performance? It may just have been the old hardware not being up to snuff.

Sat, Feb 17, 10:22 · OrangeStar, Extensions, MediaWiki (SRE)
OrangeStar moved T11108: Improve CentralAuth performance or create our own Login extension from Radar to Investigate on the OrangeStar board.
Sat, Feb 17, 10:05 · OrangeStar, Extensions, MediaWiki (SRE)
OrangeStar added a project to T11108: Improve CentralAuth performance or create our own Login extension: OrangeStar.
Sat, Feb 17, 10:04 · OrangeStar, Extensions, MediaWiki (SRE)

Fri, Feb 16

OrangeStar renamed T11863: Request for personal project & workboard for OrangeStar from Request for personal project & workboard to Request for personal project & workboard for OrangeStar.
Fri, Feb 16, 18:05 · Phorge
OrangeStar created T11863: Request for personal project & workboard for OrangeStar.
Fri, Feb 16, 18:05 · Phorge
OrangeStar placed T11413: Show global extensions in ManageWiki up for grabs.

won't be working on this for the foreseeable future.

Fri, Feb 16, 17:43 · MediaWiki (SRE), ManageWiki
OrangeStar placed T11857: Don't serve the MediaWiki-oriented CSP on Phorge up for grabs.
Fri, Feb 16, 17:42 · Infrastructure (SRE)
OrangeStar claimed T11857: Don't serve the MediaWiki-oriented CSP on Phorge.
Fri, Feb 16, 17:35 · Infrastructure (SRE)
OrangeStar closed T11862: SSL for custom domain: nintendo.miraheze.org as Invalid.

Please use Special:RequestSSL on Meta.

Fri, Feb 16, 17:23
OrangeStar added a comment to T11809: Drop MediaWiki 1.40 from the CI pipeline.

this is tagged MediaWiki (SRE) but funnily enough no-one from that team has the required access to change CI workflows on all of our mw repos 🤔.

Fri, Feb 16, 17:21 · MediaWiki (SRE), Extensions
OrangeStar added a comment to rPUPC2de77451c98c: relaybot: remove #miraheze-sre-security.

if that channel is being removed pls also update onboarding docs.

Fri, Feb 16, 17:18

Thu, Feb 15

OrangeStar triaged T11857: Don't serve the MediaWiki-oriented CSP on Phorge as Low priority.
Thu, Feb 15, 19:22 · Infrastructure (SRE)

Tue, Feb 13

OrangeStar renamed T11851: check_reverse_dns should contact authoritative nameservers for the TLD directly when checking if we're the authoritative nameservers of a domain from check_reverse_dns should contact authoritative nameservers for the TLD directly on DNS checks to check_reverse_dns should contact authoritative nameservers for the TLD directly when checking if we're the authoritative nameservers of a domain.
Tue, Feb 13, 20:37 · SRE Automation, Monitoring, SSL, Infrastructure (SRE)
OrangeStar created T11851: check_reverse_dns should contact authoritative nameservers for the TLD directly when checking if we're the authoritative nameservers of a domain.
Tue, Feb 13, 20:29 · SRE Automation, Monitoring, SSL, Infrastructure (SRE)

Sun, Feb 11

OrangeStar added a comment to T11824: InvalidArgumentException: Setting siteGlobalID is missing from both Repo and Client settings!.

Hmmm, their docs only mention this setting on the Client section, it could probably be undefined on a WikibaseRepo wiki, where there is also no WikibaseClient config to query.

Sun, Feb 11, 16:30 · Extensions, MediaWiki (SRE)
OrangeStar added a comment to T11824: InvalidArgumentException: Setting siteGlobalID is missing from both Repo and Client settings!.

I have no idea about Wikibase. I'll try my best at finding a solution for this however.

Sun, Feb 11, 16:19 · Extensions, MediaWiki (SRE)

Sat, Feb 10

OrangeStar reopened T11832: DISPLAYTITLE broken as "Open".

Seems I was wrong. Could not reproduce with Vector-2022 at mirabeta with my username.

Sat, Feb 10, 20:33 · Upstream, MediaWiki (SRE), MediaWiki
OrangeStar added a comment to T11832: DISPLAYTITLE broken.

Report to upstream is pending btw.

Sat, Feb 10, 13:53 · Upstream, MediaWiki (SRE), MediaWiki
OrangeStar closed T11832: DISPLAYTITLE broken as Invalid.

Some skins are escaping the HTML in DisplayTitle apparently, and including both an escaped and unescaped version in the output. Very bizarre issue all around since it didn't happen to me while logged in. Very likely upstream issue.

Sat, Feb 10, 13:50 · Upstream, MediaWiki (SRE), MediaWiki
OrangeStar added a comment to T7582: Create automated system for managing SSL requests.

@Reception123 If you want to get RequestSSL working right now, we could look at sending emails the way core does with Special:EmailUser

Sat, Feb 10, 11:01 · RequestSSL, Goal-2023-Jan-Jun, SRE Automation, Goal-2021-Jul-Dec, SSL, MediaWiki (SRE)

Fri, Feb 9

OrangeStar closed T11812: Numerous confirmed XSS in ManageWiki as Resolved.
Fri, Feb 9, 21:31 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Security advisory is now published. This task should be good for opening to the public now. For those reading this, we actually found some more XSS vectors when deploying the fixes to prod, so we actually have multiple patches in the GHSA for this one.

Fri, Feb 9, 21:31 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar claimed T11812: Numerous confirmed XSS in ManageWiki.
Fri, Feb 9, 21:16 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11823: SSL for custom domain: lhmn.miraheze.org.

@PiscesKazeMGR Indeed, see RequestSSL. It is a new extension created as part of T7582. In the future all of these custom domain requests will not only be possible to do on Meta (without needing to create a task here), but will also be fully automatic. While it is installed, right now it is not used, since it is still under development and not quite ready.

Fri, Feb 9, 19:20 · MediaWiki (SRE), SSL
OrangeStar placed T11812: Numerous confirmed XSS in ManageWiki up for grabs.

I just realized it will be better to just leave deploying the fixes to someone with access to mwtask181. Removing myself as assignee as my part is done, I think.

Fri, Feb 9, 14:58 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11824: InvalidArgumentException: Setting siteGlobalID is missing from both Repo and Client settings!.

@Paladox can you give us a stacktrace for those without graylog access?

Fri, Feb 9, 14:39 · Extensions, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

I've set confidentiality to high, since you could read private ManageWiki settings (for example, the Discord webhook for wikis using that extension) with XSS on those pages.

Fri, Feb 9, 12:22 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

https://github.com/miraheze/ManageWiki/security/advisories/GHSA-4jr2-jhfm-2r84

Fri, Feb 9, 12:00 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

I'm going to create a new draft GHSA, GitHub got bugged and thinks there are no changes waiting to be merged from the private fork sigh.

Fri, Feb 9, 11:42 · ManageWiki, Security, MediaWiki (SRE)

Thu, Feb 8

OrangeStar closed T11814: Confirmed XSS in WikiDiscover as Resolved.

https://github.com/miraheze/WikiDiscover/security/advisories/GHSA-cfcf-94jv-455f is now published and the fix is live on the latest master. I believe this is task is now good for opening to the public

Thu, Feb 8, 20:27 · WikiDiscover, MediaWiki (SRE), Security
OrangeStar claimed T11814: Confirmed XSS in WikiDiscover.

Fix for this one is pretty simple. @Universal_Omega I will also need you to give me permission to make security advisories on WikiDiscover.

Thu, Feb 8, 19:58 · WikiDiscover, MediaWiki (SRE), Security
OrangeStar added a comment to T11814: Confirmed XSS in WikiDiscover.
<td class="TablePager_col_wiki_dbname"><a href="https://semantic-mediawiki.mirabeta.org">Semantic MediaWiki</a></td>
<td class="TablePager_col_wiki_language">English</td>
<td class="TablePager_col_wiki_closed">Open</td>
<td class="TablePager_col_wiki_private">Public</td>
<td class="TablePager_col_wiki_category">Software/Computing</td>
<td class="TablePager_col_wiki_creation">28 <script>alert('january')</script>"><script>alert('january')</script><x y="() 2022</td>
<td class="TablePager_col_wiki_description"> </td>
Thu, Feb 8, 19:41 · WikiDiscover, MediaWiki (SRE), Security
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

security advisory draft (https://github.com/miraheze/ManageWiki/security/advisories/GHSA-42fh-6pcr-3j58) is ready, all the changes have been made to the private fork if I'm not missing anything. Waiting for an SRE to review everything and give me the okay (or merge the changes themselves) so that they can double check my work and we can deploy the fixes to production as soon as possible.

Thu, Feb 8, 11:14 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

I think I'm good to go to squash all of these and make a PR.

Thu, Feb 8, 10:25 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Thu, Feb 8, 10:20 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

@Universal_Omega You mean making the help messages in MWS.php, like https://github.com/miraheze/mw-config/blob/master/ManageWikiSettings.php#L109, interface messages? Because if so that looks like a complex rewrite. Also, all of those messages as well as managewiki-requires, managewiki-conflicts, and all the various right-* messages from core that are also XSS vectors in the permissions subpage must be added to wgRawHtmlMessages. We can do that, if you want, but after this.

Thu, Feb 8, 09:51 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.
Thu, Feb 8, 09:34 · ManageWiki, Security, MediaWiki (SRE)

Wed, Feb 7

OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Yeah there's no way my last patch is right.

Wed, Feb 7, 20:07 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Wed, Feb 7, 19:48 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

New patch superseding the other patch. Only thing missing is I think the XSS on the permissions subpage, which seems a bit more complex.

Wed, Feb 7, 19:34 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Also, just to clarify my previous message.

Wed, Feb 7, 19:09 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar claimed T11812: Numerous confirmed XSS in ManageWiki.

I think I know what is causing this, so I'll try to get this fixed tomorrow at the latest.

Wed, Feb 7, 19:06 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Assuming that patch fixes that for the extensions subpage, I can more or less make a theory (the form descriptor is passed around through so many functions that it is hard to keep track).

Wed, Feb 7, 18:58 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

Looking at meta.miraheze.org, that is indeed supposed to be the "label" (it is not actually a label HTML element)

Wed, Feb 7, 18:42 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

https://github.com/miraheze/ManageWiki/blob/75510297a32ed8881c98212f29001d226f0a833e/includes/FormFactory/ManageWikiFormFactoryBuilder.php#L269 where required and conflicting extensions are added to the form.

Wed, Feb 7, 18:29 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar added a comment to T11812: Numerous confirmed XSS in ManageWiki.

/extensions and /settings confirmed busted. /core doesn't give any alerts.

Wed, Feb 7, 17:50 · ManageWiki, Security, MediaWiki (SRE)
OrangeStar created T11809: Drop MediaWiki 1.40 from the CI pipeline.
Wed, Feb 7, 16:16 · MediaWiki (SRE), Extensions
OrangeStar added a comment to T11807: Remove flatbox.

Since this was a CC0 skin (a public-domain like license), I can consider forking it if users show interest in this skin and an archive of the source code is located.

Wed, Feb 7, 16:06 · MediaWiki (SRE)

Tue, Feb 6

OrangeStar moved T11798: RequestWiki is broken following 1.41 update from Backlog to Bugs on the CreateWiki board.
Tue, Feb 6, 17:47 · MediaWiki (SRE), CreateWiki
OrangeStar claimed T11798: RequestWiki is broken following 1.41 update.

To give everyone an update, I'm going to be rewriting this part of RequestWiki so that it does not use upserts and behaves more like ImportDump. I believe that may fix the issue, or at least give us a different error :p.

Tue, Feb 6, 17:43 · MediaWiki (SRE), CreateWiki
OrangeStar added a comment to T11798: RequestWiki is broken following 1.41 update.

@Agent_Isai shared this stacktrace on #miraheze:

Tue, Feb 6, 16:28 · MediaWiki (SRE), CreateWiki
OrangeStar added a comment to T11762: $wgRSSAllowImageTag needed for RSS feed.

@Rodejong That website is now approved, you just have to wait for it to be added to the list (task T11776).

Tue, Feb 6, 16:23 · Configuration, MediaWiki (SRE)

Mon, Feb 5

OrangeStar placed T11785: Unable to Edit up for grabs.

We need to know which one is your wiki and what page is missing the edit button.

Mon, Feb 5, 18:14 · MediaWiki (SRE), MediaWiki

Sun, Feb 4

OrangeStar removed a project from T11780: Importing from WikiTide: DataDump.
Sun, Feb 4, 19:12 · MediaWiki (SRE)
OrangeStar added a comment to T11780: Importing from WikiTide.

Please try to request the import at Special:RequestImportDump first.

Sun, Feb 4, 19:12 · MediaWiki (SRE)
OrangeStar edited projects for T11777: Automatic functionality of Related Articles feature not working, added: Configuration; removed Extensions.
Sun, Feb 4, 18:32 · Configuration, MediaWiki (SRE)
OrangeStar added a comment to T11777: Automatic functionality of Related Articles feature not working.

I think this is not a bug actually. The extension depends on CirrusSearch's "morelike" to locate related articles automatically, according to Help:Extension:RelatedArticles. We need to add $wgRelatedArticlesUseCirrusSearch, as well as $wgRelatedArticlesOnlyUseCirrusSearch to ManageWiki.

Sun, Feb 4, 18:28 · Configuration, MediaWiki (SRE)
OrangeStar added a comment to T11413: Show global extensions in ManageWiki.

If that would be more performant, then I'll try to do it that way. I didn't have any ideas on how to show to the users the existence of global extensions anyway, and showing them alongside regular extensions would be the best way.

Sun, Feb 4, 18:18 · MediaWiki (SRE), ManageWiki
OrangeStar created T11778: Diffusion is broken.
Sun, Feb 4, 17:31 · Phorge
OrangeStar triaged T11776: CSP review for cms-imgp.jw-cdn.org as Normal priority.
Sun, Feb 4, 12:15 · CSP Review, MediaWiki (SRE)
OrangeStar edited projects for T11762: $wgRSSAllowImageTag needed for RSS feed, added: Configuration; removed MediaWiki.
Sun, Feb 4, 12:12 · Configuration, MediaWiki (SRE)
OrangeStar edited projects for T11747: add $wgNamespaceLogos to ManageWiki, added: Configuration; removed MediaWiki.
Sun, Feb 4, 12:11 · Configuration, MediaWiki (SRE)
OrangeStar claimed T11413: Show global extensions in ManageWiki.

We can use ExtensionRegistry::getAllThings() to get a list of all installed extensions, and compare it against $wgManageWikiExtensions to know which ones are being loaded outside of ManageWiki. As for showing this information to users, I don't yet know how to approach that.

Sun, Feb 4, 11:41 · MediaWiki (SRE), ManageWiki
OrangeStar added a comment to T11547: Install “Fluent” theme on wanderingstars.miraheze.org.

CSS is now bundled in the skin (https://github.com/immewnity/mediawiki-fluent/commit/331d9a6c98f92c8dff5d1b6a89030ea97dc56614). Not sure if there are any blockers left. Thanks @Original_Authority for fixing my mess with the Gravatar stuff :p.
EDIT: Oops, forgot about #13.

Sun, Feb 4, 10:32 · Upstream, MediaWiki (SRE), Extensions
OrangeStar added a comment to T11757: Disable Upload Wizard Tutorial and Remove Creative Commons selection on aieseattle.miraheze.org.

Hey, since it seems you know your way around configuring MediaWiki, you may be interested in knowing that our MediaWiki configuration is public, available at a GitHub repo called mw-config. If you'd like and have a GitHub account, you can submit a Pull Request with your desired changes there. Otherwise, someone from SRE will handle this soon.

Sun, Feb 4, 10:11 · Configuration, MediaWiki (SRE)
OrangeStar updated OrangeStar.
Sun, Feb 4, 10:00
OrangeStar updated OrangeStar.
Sun, Feb 4, 10:00
OrangeStar updated OrangeStar.
Sun, Feb 4, 09:58
OrangeStar edited projects for T11757: Disable Upload Wizard Tutorial and Remove Creative Commons selection on aieseattle.miraheze.org, added: Configuration; removed MediaWiki.
Sun, Feb 4, 09:42 · Configuration, MediaWiki (SRE)

Sat, Feb 3

OrangeStar added a comment to T11770: Consider migrating to the Caddy webserver in our cache proxies.

It would be easier because you wouldn't need a command anymore, it would be fully automatic, which is the point of T11710. When Caddy sees a new domain name for the first time, it queries a HTTP server, and if it gets a 200 OK as a response, it generates a certificate for that domain. This all happens in the timespan of the first TLS ClientHello for that domain.

Sat, Feb 3, 17:23 · Infrastructure (SRE), RequestSSL
OrangeStar added a comment to T10615: Extension Review: Semantic Scribunto.

https://github.com/miraheze/mw-config/pull/5455

Sat, Feb 3, 13:14 · BrandonWM , Extensions, MediaWiki (SRE)
OrangeStar added a comment to T11770: Consider migrating to the Caddy webserver in our cache proxies.

https://github.com/caddyserver/nginx-adapter could make such a migration possible, but of course rewriting the config in JSON or Caddyfile would be best.

Sat, Feb 3, 13:01 · Infrastructure (SRE), RequestSSL
OrangeStar edited P502 Theoretical lifecycle of custom domain requests with RequestSSL+Caddy.
Sat, Feb 3, 12:48 · RequestSSL
OrangeStar edited P502 Theoretical lifecycle of custom domain requests with RequestSSL+Caddy.
Sat, Feb 3, 12:48 · RequestSSL
OrangeStar added a comment to P502 Theoretical lifecycle of custom domain requests with RequestSSL+Caddy.

https://caddyserver.com/docs/caddyfile/options#on-demand-tls Caddy sends a ?domain=<domainname> GET parameter when querying whether it is okay to generate a certificate.

Sat, Feb 3, 12:36 · RequestSSL
OrangeStar created P502 Theoretical lifecycle of custom domain requests with RequestSSL+Caddy.
Sat, Feb 3, 12:34 · RequestSSL
OrangeStar updated the task description for T11770: Consider migrating to the Caddy webserver in our cache proxies.
Sat, Feb 3, 12:09 · Infrastructure (SRE), RequestSSL
OrangeStar added a comment to T11770: Consider migrating to the Caddy webserver in our cache proxies.

Adding the RequestSSL tag since, while this is Miraheze-specific, it is of interest to me as a developer. If this is done it will define how I approach the Miraheze-specific hook handlers related to RequestSSL.

Sat, Feb 3, 12:06 · Infrastructure (SRE), RequestSSL
OrangeStar created T11770: Consider migrating to the Caddy webserver in our cache proxies.
Sat, Feb 3, 12:06 · Infrastructure (SRE), RequestSSL