Jump to content

FeministWiki:Technical documentation: Difference between revisions

no edit summary
No edit summary
(8 intermediate revisions by the same user not shown)
Line 6: Line 6:


{| class="wikitable"
{| class="wikitable"
!IP            !! FQDN                        !! Host          !! Purpose
!IP            !! FQDN                        !! Host          !! Purpose                 !! Ports
|-
|-
|85.214.101.34 ||            feministwiki.org ||              || Wiki
|85.214.101.34 ||            feministwiki.org ||              || Wiki                   || 80, 443
|-
|-
|85.214.101.34 ||        www.feministwiki.org || www          || Wiki
|85.214.101.34 ||        www.feministwiki.org || www          || Wiki                   || 80, 443
|-
|-
|85.214.101.34 ||      ldap.feministwiki.org || ldap          || LDAP
|85.214.101.34 ||      ldap.feministwiki.org || ldap          || LDAP                   || -
|-
|-
|85.214.101.34 ||       blog.feministwiki.org || blog          || Blogging
|85.214.101.34 ||     blogs.feministwiki.org || blogs        || Blogging               || 80, 443
|-
|-
|85.214.101.34 ||      chat.feministwiki.org || chat          || Web-client for XMPP
|85.214.101.34 ||      chat.feministwiki.org || chat          || Web-client for XMPP     || 80, 443
|-
|-
|85.214.101.34 ||      forum.feministwiki.org || forum        || BBS Forum
|85.214.101.34 ||      forum.feministwiki.org || forum        || BBS Forum               || 80, 443
|-
|-
|85.214.101.34 ||      mail.feministwiki.org || mail          || Web-client for Mail
|85.214.101.34 ||      mail.feministwiki.org || mail          || Web-client for Mail     || 80, 443
|-
|-
|85.214.101.34 ||      files.feministwiki.org || files        || File storage
|85.214.101.34 ||      files.feministwiki.org || files        || File storage           || 80, 443
|-
|-
|85.214.101.34 ||      imap.feministwiki.org || imap          || IMAP
|85.214.101.34 ||      imap.feministwiki.org || imap          || IMAP                   || 993
|-
|-
|85.214.101.34 ||      pop3.feministwiki.org || pop3          || POP3
|85.214.101.34 ||      pop3.feministwiki.org || pop3          || POP3                   || 995
|-
|-
|85.214.101.34 ||      smtp.feministwiki.org || smtp          || SMTP
|85.214.101.34 ||      smtp.feministwiki.org || smtp          || SMTP                   || 25, 465, 587
|-
|-
|85.214.101.34 ||      xmpp.feministwiki.org || xmpp          || XMPP
|85.214.101.34 ||      xmpp.feministwiki.org || xmpp          || XMPP                   || 5222, 5269, 5280
|-
|-
|85.214.101.34 ||        irc.feministwiki.org || irc          || IRC
|85.214.101.34 ||        irc.feministwiki.org || irc          || IRC                     || 6697
|-
|-
|85.214.101.34 ||    social.feministwiki.org || social        || GNU social
|85.214.101.34 || add-member.feministwiki.org || add-member    || Add a member           || 80, 443
|-
|85.214.101.34 || add-member.feministwiki.org || add-member    || Add a member
|}
|}


(As you can see, all services are on the same server for now.)
As you can see, all services are on the same server for now. However, it should be kept as an open possibility that the hosts are split across different IPs.  When done so, the <code>ldap</code> host should listen on 636 for LDAPS connections.
 
== Firewall ==
 
The simple <code>ufw</code> firewall-frontend is used to trivially limit all network I/O to the ports you can see in the host table above, plus port 22 for ssh and scp.


== Special DNS entries ==
== Special DNS entries ==
Line 183: Line 185:
The wiki uses the SQL database called "feministwiki" and the SQL user of the same name.
The wiki uses the SQL database called "feministwiki" and the SQL user of the same name.


=== Blog ===
=== Blogs ===
 
Host: blogs.feministwiki.org <br/>
Software: WordPress (multisite)


Host: blog.feministwiki.org <br/>
This is an installation of WordPress in <code>/var/www/blogs</code>, with the "multisite network" feature enabled on a path-basis, so users can have their own blogs on URLs like <code>blogs.feministwiki.org/janedoe</code>.  LDAP authentication is enabled via the AD/LDAP plugin from miniOrange.
Software: WordPress


This is a fairly standard WordPress installation with LDAP authentication enabled via the AD/LDAP plugin from miniOrange.  Users from LDAP are registered as "subscriber" by default, and the admin has to change their WordPress role manually to allow contribution, authoring, or editing.  The permalink structure configured in WordPress is <code>/p/%author%/%year%/%monthnum%/%postname%/</code>, where Apache handles the rewrite from <code>/p/</code> to <code>/index.php/</code> for it to actually work.
Users from LDAP who log in for the first time are automatically registered as "Subscriber" accounts, and the admin can change their WordPress role "Author" to allow publishing.


WordPress uses the SQL database called "feministblog" and an SQL user of the same name.
This WordPress installation uses the SQL database called "blogs" and an SQL user of the same name.


=== Chat (web interface) ===
=== Chat (web interface) ===