|
 |
2855f2 |
# Wiki
|
|
|
2855f2 |
|
|
|
2855f2 |
The CentOS [wiki](https://wiki.centos.org) is a place where people can contribute to some documentation/howtos and SIGs are also (some of them) write quick tutorials on how to install packages, etc
|
|
|
2855f2 |
|
|
|
2855f2 |
The wiki engine is [moin](http://moinmo.in/) and is packaged and built through [infra SIG tags](https://cbs.centos.org/koji/packageinfo?packageID=6625)
|
|
|
2855f2 |
|
|
|
2855f2 |
The [ansible-role-moin](https://github.com/centos/ansible-role-moin) ansible role is used to deploy/update/modify the existing wiki.
|
|
|
2855f2 |
|
|
|
2855f2 |
Worth knowing that on the CentOS Wiki, the default ACL is to forbid people to write content : that measure that to be taken some years ago to fight against spammers.
|
|
|
2855f2 |
|
|
|
2855f2 |
So the way to request edit permissions on the Wiki is to
|
|
|
2855f2 |
|
|
|
2855f2 |
* register an account (wiki isn't tied to central SSO for now)
|
|
|
2855f2 |
* send a mail to centos-docs list and ask edit right
|
|
|
2855f2 |
|
|
|
2855f2 |
Some trusted users are added (through ansible) in the admins list, or directly in the Edit group (in moin) to have access everywhere.
|
|
|
2855f2 |
|
|
|
2855f2 |
## Fighting with spammers
|
|
|
2855f2 |
|
|
|
2855f2 |
As all wiki instances, ours is also attracting bots/spammers, adding really heavy load.
|
|
|
2855f2 |
To fight against that , some measures are in place :
|
|
|
2855f2 |
|
|
|
2855f2 |
* using the `surge` module option in moin (search for `moin_surge_*` settings in ansible) to limit number of requests one could do at the wiki level
|
|
|
2855f2 |
* using iptables/ipset lists to block some known bots/ip ranges (see the `ansible-role-iptables` and the ipset lists defined at the host_vars level for that host
|
|
|
2855f2 |
* Tuning the wsgi processes/threads at the apache level
|
|
|
2855f2 |
* using the mod_qos apache module to also block requests
|
|
|
2855f2 |
|
|
|
2855f2 |
## Backup
|
|
|
2855f2 |
|
|
|
2855f2 |
Like for other roles, the `ansible-role-moin` one includes the [centos-backup](https://github.com/CentOS/ansible-role-moin/blob/master/tasks/main.yml#L154) role, so backing up daily the wiki data/instance, that is pulled from central backup server, itself rotating and exporting to another site/DC the rotated pool
|