[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[gerritbot]

gerritbot added a comment.


  Change 532973 **merged** by Vgutierrez:
  [operations/puppet@production] ATS/acme_chief/varnish: remove wikiba.se
  
  https://gerrit.wikimedia.org/r/532973

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: MasinAlDujailiWMDE, gerritbot
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, Hook696, Daryl-TTMG, RomaAmorRoma, 0010318400, 
E.S.A-Sheild, darthmon_wmde, Meekrab2012, joker88john, DannyS712, CucyNoiD, 
Nandana, NebulousIris, Gaboe420, Versusxo, Majesticalreaper22, Giuliamocci, 
Adrian1985, Cpaulf30, Lahi, Gq86, Af420, Darkminds3113, Bsandipan, Lordiis, 
GoranSMilovanovic, Adik2382, Th3d3v1ls, Ramalepe, Liugev6, QZanden, 
LawExplorer, WSH1906, Lewizho99, Maathavan, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[gerritbot]

gerritbot added a comment.


  Change 532973 had a related patch set uploaded (by Dzahn; owner: Dzahn):
  [operations/puppet@production] ATS/acme_chief/varnish: remove wikiba.se
  
  https://gerrit.wikimedia.org/r/532973

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: MasinAlDujailiWMDE, gerritbot
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[abian]

abian added a comment.


  In T155359#5415537 , 
@MasinAlDujailiWMDE wrote:
  
  > @abian Ah, I didn't configure www.wikiba.se. Now I ran into Let's Encrypt 
rate limiting because I didn't know how to properly configure multiple nginx 
server names with puppet. I will try again in an hour, but then it should be 
complete.
  
  Thanks!

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: MasinAlDujailiWMDE, abian
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[MasinAlDujailiWMDE]

MasinAlDujailiWMDE added a comment.


  @abian Ah, I didn't configure www.wikiba.se. Now I ran into Let's Encrypt 
rate limiting because I didn't know how to properly configure multiple nginx 
server names with puppet. I will try again in an hour, but then it should be 
complete.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: MasinAlDujailiWMDE
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[MasinAlDujailiWMDE]

MasinAlDujailiWMDE added a comment.


  https://wikiba.se now up and running. I think, it can be closed, then.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: MasinAlDujailiWMDE
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  I want so support basically everything that @GreenReaper said above. WMDE can 
take control of DNS back or we can use wikibase.org at WMF.  But nn both cases 
HTTPS can be fixed, which this ticket is about.
  
  Also the plan from @Addshore sounds about right to me at this point.  Since 
that means things will happen on the WMDE side i would like to unassign this 
ticket from me now.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  In T155359#5401968 , 
@MasinAlDujailiWMDE wrote:
  
  > what the future brings for the content behind wikiba.se. Will it stay on 
our webspace? Will it be hosted by WMF?
  
  I'm afraid this part is out of our control and up to c-levels in both WMF and 
WMDE, unfortunately it sounds like not going to happen, per T99531#5181555 
.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Addshore]

Addshore added a comment.


  Sounds like we should:
  
  - Leave this ticket open
  - Move the NS servers for wikiba.se back to the WMDE controlled ones
  - Remove the DNS stuff I added to wmf stuff for wikibase.se
  - Setup letsencrypt or something similar for wikiba.se as controlled by wmde
  - Close this ticket.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, Addshore
Cc: WMDE-leszek, GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, 
Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, 
Bugreporter, abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[MasinAlDujailiWMDE]

MasinAlDujailiWMDE added a comment.


  In T155359#5400653 , 
@Dzahn wrote:
  
  > What GreenReaper said, you can use "webroot" authenticator with certbot so 
you don't need DNS for it, but if you want DNS then see above, that's also 
possible.
  
  What I wanted to say: Without control over the zone I cannot know if our 
webroot will serve the domain. As far as I know migrating the zone was just the 
beginning of migrating everything wikiba.se-related to WMF. Of course I know 
how to use Let's Encrypt, but I don't know what the future brings for the 
content behind wikiba.se. Will it stay on our webspace? Will it be hosted by 
WMF? As I see it, the zone is currently in some kind of limbo – it still uses 
the zone file I provided last year, but that won't stay that way I think.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, MasinAlDujailiWMDE
Cc: GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, 
PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, 
abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  Here's an example config for certbot using webroot for renewal. As used on 
wikitech-static.wikimedia.org because that's outside our usual infra which uses 
acmechief.
  
  
https://gerrit.wikimedia.org/r/c/operations/wikitech-static/+/526200/2/letsencrypt/etc/letsencrypt/renewal/wikitech-static.wikimedia.org.conf

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, 
PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, 
abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  In T155359#5399277 , 
@MasinAlDujailiWMDE wrote:
  
  > WMF nameservers. I don't know what your NetOps configured there
  
  DNS zone files are in a public repo and can be git cloned (gerrit project 
"operations/dns")
  
  wikiba.se zone is in templates/wikiba.se.  It's possible to upload changes to 
code review.
  
  , so no, I cannot setup Let's Encrypt. Of course, I could configure the 
default nameservers again, point A and  to some of our servers and deploy 
Let's Encrypt there, but I believe that wasn't the intention behind your 
suggestion, @GreenReaper.
  
  > your NetOps
  
  Original version was uploaded by Addshore  in 
https://gerrit.wikimedia.org/r/c/operations/dns/+/473543  and i don't think 
GreenReaper is on any side and just wants the issue to be fixed from a user 
perspective.
  
  > I cannot setup Let's Encrypt.
  
  What GreenReaper said, you can use "webroot" authenticator with certbot so 
you don't need DNS for it, but if you want DNS then see above, that's also 
possible.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, 
PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, 
abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[GreenReaper]

GreenReaper added a comment.


  Looks to me like it has the same IP address it did last year 
, which is in "United Domains 
via IP Exchange GmbH 
" space.
  
  I don't think you actually need DNS control to do Let's Encrypt, you can use 
certbot if you have shell access . 
united-domains.de seems to offer SSH access on its "Webspace-Packet" 
 (is this what's in 
use?). I don't know if that extends to running certbot. However, you could run 
certbot on another computer and upload a challenge file 
 via SFTP. Obviously that isn't 
ideal, but it could be scripted if necessary.
  
  That said, I //did// think about suggesting that switching or reverting 
nameservers might be appropriate if you don't plan to actually transition to 
WMF hosting. As a third-party from a non-Wikimedia project, I'm not sure if 
doing that would have any "political" fallout. I'm just trying to find a 
practical solution which results in having the HTTPS wikiba.se that I expected 
to see, given the stated constraints.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, GreenReaper
Cc: GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, 
PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, 
abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[MasinAlDujailiWMDE]

MasinAlDujailiWMDE added a comment.


  Currently, the authoritatitative nameservers for wikiba.se are the WMF 
nameservers. I don't know what your NetOps configured there, so no, I cannot 
setup Let's Encrypt. Of course, I could configure the default nameservers 
again, point A and  to some of our servers and deploy Let's Encrypt there, 
but I believe that wasn't the intention behind your suggestion, @GreenReaper.

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, MasinAlDujailiWMDE
Cc: GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, 
PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, 
abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[GreenReaper]

GreenReaper added a comment.


  I ran into this trying to link to https://wikiba.se when explaining Wikibase 
to someone on Twitter  
(in the context of use on WikiFur , tracking conventions 
 and charity donations 
). T99531#5181555 
 suggests that WMDE isn't 
going to hand over the domain. So… does WMDE intend to set up Let's Encrypt on 
their own? It seems the appropriate resolution - WMF has said WMDE can't have 
their cake and eat it, and setting up Let's Encrypt should not be all that 
complicated. As it is, web browsers are now showing the site as "not secure", 
which is not great for a database product. 😼

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, GreenReaper
Cc: GreenReaper, MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, 
PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, 
abian, Aklapper, darthmon_wmde, DannyS712, Nandana, Lahi, Gq86, 
GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Wikidata-bugs, 
aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  In T155359#5108338 , 
@Dzahn wrote:
  
  > Next is deploying  
https://gerrit.wikimedia.org/r/c/operations/puppet/+/500715 for T99531#5077170 

  
  
  [X] done
  
  > and then  https://gerrit.wikimedia.org/r/c/operations/puppet/+/500695
  
  [X] done
  
  > and then WMDE and WMF have to agree on the domain transfer ownership (Lydia 
said she will ping some people to find out)
  
  [ ] still to do
  
  > looks like we are not going to do 
https://gerrit.wikimedia.org/r/c/operations/puppet/+/500711
  
  [ ] stalled / abandon?
  
  > Also note since recently we now have wikibase.org 
(https://gerrit.wikimedia.org/r/c/operations/dns/+/503154)
  
  [ ] I don't assume you guys are interested in switching domains? heh

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, PokestarFan, Jay8g, 
Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, 
alaa_wmde, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  In T155359#5107101 , 
@Addshore wrote:
  
  > I guess we need to update operations/dns then?
  
  
  Next is deploying  
https://gerrit.wikimedia.org/r/c/operations/puppet/+/500715 for T99531#5077170 

  
  and then  https://gerrit.wikimedia.org/r/c/operations/puppet/+/500695
  
  and then WMDE and WMF have to agree on the domain transfer ownership (Lydia 
said she will ping some people to find out)
  
  looks like we are not going to do 
https://gerrit.wikimedia.org/r/c/operations/puppet/+/500711
  
  Also note since recently we now have wikibase.org 
(https://gerrit.wikimedia.org/r/c/operations/dns/+/503154)

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, PokestarFan, Jay8g, 
Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, 
alaa_wmde, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.


  In T155359#5107079 , 
@MasinAlDujailiWMDE wrote:
  
  > I am out of this. Currently, ns[0-2].wikimedia.org are authoritative for 
wikiba.se: T99531#4862262 .
  
  
  Do you know anything about the domain ownership transfer though?

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn
Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, PokestarFan, Jay8g, 
Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, 
alaa_wmde, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Vgutierrez]

Vgutierrez added a comment.


  that's right, operations/dns manages wikiba.se

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, Vgutierrez
Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, PokestarFan, Jay8g, 
Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, 
alaa_wmde, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Addshore]

Addshore added a comment.


  I guess we need to update operations/dns then?

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, Addshore
Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, PokestarFan, Jay8g, 
Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, 
alaa_wmde, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[MasinAlDujailiWMDE]

MasinAlDujailiWMDE added a comment.


  I am out of this. [[ https://phabricator.wikimedia.org/T99531#4862262 | 
Currently, ns[0-2].wikimedia.org are authoritative for wikiba.se ]]

TASK DETAIL
  https://phabricator.wikimedia.org/T155359

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Dzahn, MasinAlDujailiWMDE
Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore, PokestarFan, Jay8g, 
Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, 
alaa_wmde, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Krenair]

Krenair added a comment.
right, that makes it a subtask rather than parent task I think :)TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Dzahn, KrenairCc: Krenair, Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, D3r1ck01, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.
I added it because T99531#4511979 says resolving T199711 "makes this whole thing simpler and zero cert cost". and that would include this ticket here afaict.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: Krenair, Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.
for status on HTTPs for that please see T99531#4511979TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Addshore]

Addshore added a comment.

In T155359#4511944, @Dzahn wrote:
What this role does is git clone the deploy repo (wikibase/wikiba.se-deploy).  So if that's out of date then either the deploy repo is out of date or the git cloning stopped working.


Thanks, updated in https://gerrit.wikimedia.org/r/#/c/wikibase/wikiba.se-deploy/+/453684/TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Dzahn, AddshoreCc: Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.

In T155359#4511923, @Addshore wrote:
Who controls this?


For unknown reasons the Horizon web interface doesn't show the proxy "wikibase.wmflabs.org" in the project "wikidata-dev" context. (bug)

But it could be found here:  https://tools.wmflabs.org/openstack-browser/proxy/

The project is:  https://tools.wmflabs.org/openstack-browser/project/wikidata-dev

You can see the list of admins there.

The puppet role is role(wikibase) which i once wrote and it's applied via "prefix puppet" on "all VMs in the wikidata-dev project whose names begin with 'wikibase'.".

What this role does is git clone the deploy repo (wikibase/wikiba.se-deploy).  So if that's out of date then either the deploy repo is out of date or the git cloning stopped working.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Addshore]

Addshore added a comment.

In T155359#3692381, @Dzahn wrote:
also see:
 https://wikibase.wmflabs.org


Who controls this?
That copy of the site is out of date now and we should probably get rid of it, or update it, but at the end of the day solve T99531TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Dzahn, AddshoreCc: Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.
This will be fixed by T99531

also see:
https://wikibase.wmflabs.orgTASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, GoranSMilovanovic, QZanden, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.

In T155359#2951621, @Esc3300 wrote:
Just curious: who does? WMDE?


Yes.

Namn	Abraham Taherivand
Företag	Wikimedia Deutschland e.V.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: Jay8g, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, D3r1ck01, Izno, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Esc3300]

Esc3300 added a comment.

In T155359#2945259, @Dzahn wrote:
wikiba.se is not owned by WMF and doesn't point to WMF DNS servers and the IP it points to is also not under our control.


Just curious: who does? WMDE?TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Esc3300Cc: Jay8g, hashar, Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, D3r1ck01, Izno, Wikidata-bugs, aude, Mbch331___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Dzahn]

Dzahn added a comment.
wikiba.se is not owned by WMF and doesn't point to WMF DNS servers and the IP it points to is also not under our control.

Therefore i don't really see how this is an Operations/Traffic thing or what is expected from ops at this stage.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: Dzahn, Esc3300, Ivanhercaz, Lydia_Pintscher, Bugreporter, abian, Aklapper, Th3d3v1ls, Zppix, D3r1ck01, Izno, Wikidata-bugs, aude, Dinoguy1000, faidon, Seb35, Mbch331, Jay8g, Krenair, fgiunchedi___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

[Lydia_Pintscher]

Lydia_Pintscher added a comment.
Yes, agreed.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Lydia_PintscherCc: Lydia_Pintscher, Bugreporter, abian, Aklapper, Th3d3v1ls, Zppix, D3r1ck01, Izno, Wikidata-bugs, aude, Dinoguy1000, faidon, Seb35, Mbch331, Jay8g, Krenair, fgiunchedi___
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs