$wgScriptExtension = ".php";
## The protocol and server name to use in fully-qualified URLs
-$wgServer = "//<%= @mediawiki[:site] %>";
-$wgInternalServer = 'http://<%= @mediawiki[:site] %>';
+$wgServer = "//<%= @name %>";
+$wgInternalServer = 'http://<%= @name %>';
-<% if @mediawiki[:enable_ssl] -%>
+<% if @mediawiki[:ssl_enabled] -%>
$wgSecureLogin = true;
$wgDefaultUserOptions['prefershttps'] = 0;
<% end -%>
$wgGroupPermissions['bureaucrat']['suppressrevision'] = true;
$wgGroupPermissions['bureaucrat']['suppressionlog'] = true;
+<% if @mediawiki[:private_accounts] -%>
+#Prevent new user registrations except by existing users
+$wgGroupPermissions['*']['createaccount'] = false;
+$wgGroupPermissions['user']['createaccount'] = true;
+<% end -%>
+<% if @mediawiki[:private] -%>
+
+#Disable reading by anonymous users
+$wgGroupPermissions['*']['read'] = false;
+
+#Allow anonymous users to access the login page
+$wgWhitelistRead = array ("Special:Userlogin");
+
+#Prevent new user registrations except by sysops
+$wgGroupPermissions['*']['createaccount'] = false;
+
+#Restrict access to the upload directory
+$wgUploadPath = "$wgScriptPath/img_auth.php";
+<% end -%>
+
#Allow Subpages on Main Namespace
$wgNamespacesWithSubpages[NS_MAIN] = true;
$wgReadOnly = "<%= @mediawiki[:site_readonly] %>";
<% end -%>
-<% Dir.glob("#{@mediawiki[:directory]}/LocalSettings.d/*.php") do |file| -%>
+<% Dir.glob("#{@directory}/LocalSettings.d/*.php") do |file| -%>
<%= "require_once('#{file}');" %>
<% end -%>
-