Mcint/wiki to spec

[mcint]

I would love to not merge this until every line has been discussed. I've included comments that are in the file now, working notes. Unfortunate that there's not a better highly flexible, appropriate to context (/low overhead) way to explore these. Maybe in GitHub Discussions, for wiki config draft ideas. Can remove in follow-on commit.

Carries the torch on #292

[mcint]

There's a separate issue with, new wiki directory hosted
at /srv/mediawiki/noisebridge.net-1.39.13
with /srv/mediawiki/{{ meddiawiki.domain}}
as template source.

I'm a little doubtful of how much the parameterization helps in the directory name, and I found it a huge risk-impediment to upgrading the wiki, reversibly, in 2023. I think I would advocate a release / version suffix, at least blue-green style, if not just MW version number.

Target directory incompatibility with ansible schema, makes other diffs moot.

Need to add, and discuss, addition to robots.txt on

User-agent: *

of

Disallow: /index.php?
Disallow: /index.php
Disallow: /wiki/Special:
Disallow: /api.php?
Disallow: /api.php

---

I'm a little concerned about thse too

TASK [mediawiki : fetch mediawiki LTS release] ****************************************************************************************************************
vchanged: [m3.noisebridge.net]

TASK [mediawiki : make wiki cache directory] ******************************************************************************************************************
--- before
+++ after
@@ -1,4 +1,4 @@
 {
-    "mode": "0700",
+    "mode": "0755",
     "path": "/var/cache/mediawiki"
 }

changed: [m3.noisebridge.net]

TASK [mediawiki : make wiki directory] ************************************************************************************************************************
--- before
+++ after
@@ -1,5 +1,5 @@
 {
-    "group": 33,
-    "owner": 33,
+    "group": 1002,
+    "owner": 1002,
     "path": "/srv/mediawiki/noisebridge.net-upgrade-2023"
 }

changed: [m3.noisebridge.net]

id	user
33	www-data
1002	wiki

Doesn't matter too much, because caddy runs them---the 755 perms might though.

[mcint]

Thanks to @ElanHR for merging earlier versions of the m3-live LocalSettings.php diff into the repo.

Between templates and practical irreversibility, it was pretty impossible to deploy without the vault password. Working on the diff minimization now.