[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

gerritbot added a comment. Change 532973 **merged** by Vgutierrez: [operations/puppet@production] ATS/acme_chief/varnish: remove wikiba.se https://gerrit.wikimedia.org/r/532973 TASK DETAIL https://phabricator.wikimedia.org/T155359 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

gerritbot added a comment. Change 532973 had a related patch set uploaded (by Dzahn; owner: Dzahn): [operations/puppet@production] ATS/acme_chief/varnish: remove wikiba.se https://gerrit.wikimedia.org/r/532973 TASK DETAIL https://phabricator.wikimedia.org/T155359 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

abian added a comment. In T155359#5415537 , @MasinAlDujailiWMDE wrote: > @abian Ah, I didn't configure www.wikiba.se. Now I ran into Let's Encrypt rate limiting because I didn't know how to properly configure multiple nginx server

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

MasinAlDujailiWMDE added a comment. @abian Ah, I didn't configure www.wikiba.se. Now I ran into Let's Encrypt rate limiting because I didn't know how to properly configure multiple nginx server names with puppet. I will try again in an hour, but then it should be complete. TASK DETAIL

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

MasinAlDujailiWMDE added a comment. https://wikiba.se now up and running. I think, it can be closed, then. TASK DETAIL https://phabricator.wikimedia.org/T155359 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: MasinAlDujailiWMDE Cc: WMDE-leszek,

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. I want so support basically everything that @GreenReaper said above. WMDE can take control of DNS back or we can use wikibase.org at WMF. But nn both cases HTTPS can be fixed, which this ticket is about. Also the plan from @Addshore sounds about right to me at

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#5401968 , @MasinAlDujailiWMDE wrote: > what the future brings for the content behind wikiba.se. Will it stay on our webspace? Will it be hosted by WMF? I'm afraid this part is out of our control

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Addshore added a comment. Sounds like we should: - Leave this ticket open - Move the NS servers for wikiba.se back to the WMDE controlled ones - Remove the DNS stuff I added to wmf stuff for wikibase.se - Setup letsencrypt or something similar for wikiba.se as controlled by wmde -

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

MasinAlDujailiWMDE added a comment. In T155359#5400653 , @Dzahn wrote: > What GreenReaper said, you can use "webroot" authenticator with certbot so you don't need DNS for it, but if you want DNS then see above, that's also possible.

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. Here's an example config for certbot using webroot for renewal. As used on wikitech-static.wikimedia.org because that's outside our usual infra which uses acmechief.

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#5399277 , @MasinAlDujailiWMDE wrote: > WMF nameservers. I don't know what your NetOps configured there DNS zone files are in a public repo and can be git cloned (gerrit project "operations/dns")

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

GreenReaper added a comment. Looks to me like it has the same IP address it did last year , which is in "United Domains via IP Exchange GmbH " space. I don't think you

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

MasinAlDujailiWMDE added a comment. Currently, the authoritatitative nameservers for wikiba.se are the WMF nameservers. I don't know what your NetOps configured there, so no, I cannot setup Let's Encrypt. Of course, I could configure the default nameservers again, point A and to some

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

GreenReaper added a comment. I ran into this trying to link to https://wikiba.se when explaining Wikibase to someone on Twitter (in the context of use on WikiFur , tracking conventions

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#5108338 , @Dzahn wrote: > Next is deploying https://gerrit.wikimedia.org/r/c/operations/puppet/+/500715 for T99531#5077170 [X] done >

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#5107101 , @Addshore wrote: > I guess we need to update operations/dns then? Next is deploying https://gerrit.wikimedia.org/r/c/operations/puppet/+/500715 for T99531#5077170

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#5107079 , @MasinAlDujailiWMDE wrote: > I am out of this. Currently, ns[0-2].wikimedia.org are authoritative for wikiba.se: T99531#4862262 . Do

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Vgutierrez added a comment. that's right, operations/dns manages wikiba.se TASK DETAIL https://phabricator.wikimedia.org/T155359 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Dzahn, Vgutierrez Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair,

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Addshore added a comment. I guess we need to update operations/dns then? TASK DETAIL https://phabricator.wikimedia.org/T155359 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Dzahn, Addshore Cc: MasinAlDujailiWMDE, Vgutierrez, Krenair, Addshore,

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

MasinAlDujailiWMDE added a comment. I am out of this. [[ https://phabricator.wikimedia.org/T99531#4862262 | Currently, ns[0-2].wikimedia.org are authoritative for wikiba.se ]] TASK DETAIL https://phabricator.wikimedia.org/T155359 EMAIL PREFERENCES

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Krenair added a comment. right, that makes it a subtask rather than parent task I think :)TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Dzahn, KrenairCc: Krenair, Addshore, PokestarFan, Jay8g, Dzahn,

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. I added it because T99531#4511979 says resolving T199711 "makes this whole thing simpler and zero cert cost". and that would include this ticket here afaict.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. for status on HTTPs for that please see T99531#4511979TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: Addshore, PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz,

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Addshore added a comment. In T155359#4511944, @Dzahn wrote: What this role does is git clone the deploy repo (wikibase/wikiba.se-deploy). So if that's out of date then either the deploy repo is out of date or the git cloning stopped working. Thanks, updated in

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#4511923, @Addshore wrote: Who controls this? For unknown reasons the Horizon web interface doesn't show the proxy "wikibase.wmflabs.org" in the project "wikidata-dev" context. (bug) But it could be found here:

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Addshore added a comment. In T155359#3692381, @Dzahn wrote: also see: https://wikibase.wmflabs.org Who controls this? That copy of the site is out of date now and we should probably get rid of it, or update it, but at the end of the day solve T99531TASK

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. This will be fixed by T99531 also see: https://wikibase.wmflabs.orgTASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: DzahnCc: PokestarFan, Jay8g, Dzahn, Esc3300, Ivanhercaz,

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. In T155359#2951621, @Esc3300 wrote: Just curious: who does? WMDE? Yes. Namn Abraham Taherivand Företag Wikimedia Deutschland e.V.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To:

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Esc3300 added a comment. In T155359#2945259, @Dzahn wrote: wikiba.se is not owned by WMF and doesn't point to WMF DNS servers and the IP it points to is also not under our control. Just curious: who does? WMDE?TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Dzahn added a comment. wikiba.se is not owned by WMF and doesn't point to WMF DNS servers and the IP it points to is also not under our control. Therefore i don't really see how this is an Operations/Traffic thing or what is expected from ops at this stage.TASK

[Wikidata-bugs] [Maniphest] [Commented On] T155359: wikiba.se should use HTTPS

Lydia_Pintscher added a comment. Yes, agreed.TASK DETAILhttps://phabricator.wikimedia.org/T155359EMAIL PREFERENCEShttps://phabricator.wikimedia.org/settings/panel/emailpreferences/To: Lydia_PintscherCc: Lydia_Pintscher, Bugreporter, abian, Aklapper, Th3d3v1ls, Zppix, D3r1ck01, Izno, Wikidata-bugs,