Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Setup MediaWiki and nginx in a "production ready" mode

Download Browse

Multiple changes are done: * MediaWiki properly sets a Content-Security-Policy, when none is set we fallback on Tuleap deny-all default * Skins and extensions assets are cached * Only the REST endpoint is accessible for the "fake" farm management instance * Only the known PHP entry points are allowed * The PHP FPM address/upstream to use can be overriden in the `tuleap.conf` nginx config file via the `$mediawiki_tuleap_php_fpm_server` To test, redeploy the nginx config and the MediaWiki package (or the config file manually). Part of story #26042: install mediawiki standalone Change-Id: I239abcc6f1cfdbcd274bf89cbedf28b57961e493

+23 −14
Thomas Gerbet (tgerbet) 2022-06-17 15:00
Thomas Gerbet (tgerbet) 2022-06-17 15:17
2191b1e3b68d9198db3a8dea9deec786a798783b
d2b334413bae24d80be333105b013f0d108f8c33
git #tuleap/stable/2191b1e3b68d9198db3a8dea9deec786a798783b

Modified Files

Side by side diff
Inline diff
Name
M plugins/mediawiki_standalone/additional-packages/mediawiki-tuleap-config/LocalSettings.Tuleap.php +3 −0 Go to diff View file
M plugins/mediawiki_standalone/etc/nginx/mediawiki_standalone.conf +20 −14 Go to diff View file