Blame docs/apps/wiki.md

2855f2
# Wiki
2855f2
2855f2
The CentOS [wiki](https://wiki.centos.org) is a place where people can contribute to some documentation/howtos and SIGs are also (some of them) write quick tutorials on how to install packages, etc
2855f2
2855f2
The wiki engine is [moin](http://moinmo.in/) and is packaged and built through [infra SIG tags](https://cbs.centos.org/koji/packageinfo?packageID=6625)
2855f2
2855f2
The [ansible-role-moin](https://github.com/centos/ansible-role-moin) ansible role is used to deploy/update/modify the existing wiki.
2855f2
2855f2
Worth knowing that on the CentOS Wiki, the default ACL is to forbid people to write content : that measure that to be taken some years ago to fight against spammers.
2855f2
2855f2
So the way to request edit permissions on the Wiki is to 
2855f2
2855f2
 * register an account (wiki isn't tied to central SSO for now)
2855f2
 * send a mail to centos-docs list and ask edit right
2855f2
2855f2
Some trusted users are added (through ansible) in the admins list, or directly in the Edit group (in moin) to have access everywhere.
2855f2
2855f2
## Fighting with spammers
2855f2
2855f2
As all wiki instances, ours is also attracting bots/spammers, adding really heavy load.
2855f2
To fight against that , some measures are in place :
2855f2
2855f2
 * using the `surge` module option in moin (search for `moin_surge_*` settings in ansible) to limit number of requests one could do at the wiki level
2855f2
 * using iptables/ipset lists to block some known bots/ip ranges (see the `ansible-role-iptables` and the ipset lists defined at the host_vars level for that host
2855f2
 * Tuning the wsgi processes/threads at the apache level
2855f2
 * using the mod_qos apache module to also block requests
2855f2
2855f2
## Backup
2855f2
2855f2
Like for other roles, the `ansible-role-moin` one includes the [centos-backup](https://github.com/CentOS/ansible-role-moin/blob/master/tasks/main.yml#L154) role, so backing up daily the wiki data/instance, that is pulled from central backup server, itself rotating and exporting to another site/DC the rotated pool