X-Git-Url: https://git.openstreetmap.org./chef.git/blobdiff_plain/947d5ccfbb71576033782d37dfa28d81c0d197f3..e96ff51f93bdd8cb2e66fa0f114abba99048cb01:/cookbooks/mediawiki/templates/default/LocalSettings.php.erb

diff --git a/cookbooks/mediawiki/templates/default/LocalSettings.php.erb b/cookbooks/mediawiki/templates/default/LocalSettings.php.erb
index e3236159e..11bbd022b 100644
--- a/cookbooks/mediawiki/templates/default/LocalSettings.php.erb
+++ b/cookbooks/mediawiki/templates/default/LocalSettings.php.erb
@@ -12,26 +12,23 @@ if ( !defined( 'MEDIAWIKI' ) ) {
 $wgSitename      = '<%= @mediawiki[:sitename] %>';
 $wgMetaNamespace = '<%= @mediawiki[:metanamespace] %>';
 
-
 ## The URL base path to the directory containing the wiki;
 ## defaults for all runtime URL paths are based off of this.
 ## For more information on customizing the URLs
 ## (like /w/index.php/Page_title to /wiki/Page_title) please see:
-## http://www.mediawiki.org/wiki/Manual:Short_URL
+## https://www.mediawiki.org/wiki/Manual:Short_URL
 $wgScriptPath       = "/w";
 $wgArticlePath      = '/wiki/$1';
 $wgUsePathInfo      = true;
 $wgScriptExtension  = ".php";
 
 ## The protocol and server name to use in fully-qualified URLs
-$wgServer           = "//<%= @mediawiki[:site] %>";
-$wgInternalServer   = 'http://<%= @mediawiki[:site] %>';
+$wgServer           = "//<%= @name %>";
+$wgInternalServer   = 'https://<%= @name %>';
 
-<% if @mediawiki[:enable_ssl] -%>
 $wgSecureLogin = true;
-$wgDefaultUserOptions['prefershttps'] = 0;
-<% end -%>
-$wgCookieSecure = false;
+$wgDefaultUserOptions['prefershttps'] = 1;
+$wgCookieSecure = true;
 
 ## The relative URL path to the skins directory
 $wgStylePath        = "$wgScriptPath/skins";
@@ -94,13 +91,26 @@ $wgFileExtensions[] = 'doc';
 $wgFileExtensions[] = 'pdf';
 $wgFileExtensions[] = 'odt';
 $wgFileExtensions[] = 'odp';
+$wgFileExtensions[] = 'ods';
 $wgFileExtensions[] = 'svg';
+$wgFileExtensions[] = 'osm';
+<% @mediawiki[:extra_file_extensions].each do |mw_extra_file_extension| -%>
+	$wgFileExtensions[] = '<%= mw_extra_file_extension %>';
+<% end -%>
+
+# Add OSM XML file format per http://www.iana.org/assignments/media-types/media-types.xhtml
+# Shout out to Paul Norman for reserving this.
+# Helps MimeMagic determine XML-based formats and chooses the correct MimeType
+# for .osm files.
+$wgXMLMimeTypes[] = array('osm' => 'application/vnd.openstreetmap.data+xml');
+
+$wgTrustedMediaFormats[] = 'application/vnd.openstreetmap.data+xml';
 
 $wgSVGConverters = array( 'rsvg' => '/usr/bin/rsvg-convert -w $width -h $height -o $output $input');
 $wgSVGConverter = 'rsvg';
 $wgSVGMaxSize = 2000;
 
-# InstantCommons allows wiki to use images from http://commons.wikimedia.org
+# InstantCommons allows wiki to use images from https://commons.wikimedia.org
 <% if @mediawiki[:commons] -%>
 $wgUseInstantCommons  = true;
 <% else -%>
@@ -139,8 +149,8 @@ $wgDefaultSkin = "<%= @mediawiki[:skin] %>";
 ## For attaching licensing metadata to pages, and displaying an
 ## appropriate copyright notice / icon. GNU Free Documentation
 ## License and Creative Commons licenses are supported so far.
-$wgRightsPage = "OpenStreetMap_License"; # Set to the title of a wiki page that describes your license/copyright
-$wgRightsUrl  = "http://creativecommons.org/licenses/by-sa/2.0/";
+$wgRightsPage = "Wiki_content_license"; # Set to the title of a wiki page that describes your license/copyright
+$wgRightsUrl  = "https://creativecommons.org/licenses/by-sa/2.0/";
 $wgRightsText = "Creative Commons Attribution-ShareAlike 2.0 license";
 $wgRightsIcon = "/cc-wiki.png";
 
@@ -158,29 +168,72 @@ $wgResourceLoaderMaxQueryLength = -1;
 # End of automatically generated settings.
 # Add more configuration options below.
 
-#Only Allow Signed-in users to edit
+# Only Allow Signed-in users to edit
 $wgGroupPermissions['*']['edit'] = false;
 
-#Allow bureaucrat group access to oversight options
+# Only allow autoconfirmed for a few actions
+$wgGroupPermissions['user']['move'] = false;
+$wgGroupPermissions['user']['movefile'] = false;
+$wgGroupPermissions['user']['move-categorypages'] = false;
+$wgGroupPermissions['user']['upload'] = false;
+$wgGroupPermissions['autoconfirmed']['move'] = true;
+$wgGroupPermissions['autoconfirmed']['movefile'] = true;
+$wgGroupPermissions['autoconfirmed']['move-categorypages'] = true;
+$wgGroupPermissions['autoconfirmed']['upload'] = true;
+
+# Allow bureaucrat group access to oversight options
 $wgGroupPermissions['bureaucrat']['hideuser'] = true;
 $wgGroupPermissions['bureaucrat']['deletelogentry'] = true;
 $wgGroupPermissions['bureaucrat']['deleterevision'] = true;
 $wgGroupPermissions['bureaucrat']['suppressrevision'] = true;
 $wgGroupPermissions['bureaucrat']['suppressionlog'] = true;
 
-#Allow Subpages on Main Namespace
+<% if @mediawiki[:private_accounts] -%>
+# Prevent new user registrations except by existing users
+$wgGroupPermissions['*']['createaccount'] = false;
+$wgGroupPermissions['user']['createaccount'] = true;
+<% end -%>
+<% if @mediawiki[:private_site] -%>
+
+# Disable reading by anonymous users
+$wgGroupPermissions['*']['read'] = false;
+
+# Allow anonymous users to access the login page
+$wgWhitelistRead = array ("Special:Userlogin");
+
+# Prevent new user registrations except by sysops
+$wgGroupPermissions['*']['createaccount'] = false;
+
+# Restrict access to the upload directory
+$wgUploadPath = "$wgScriptPath/img_auth.php";
+<% end -%>
+
+# Allow Subpages on Main Namespace
 $wgNamespacesWithSubpages[NS_MAIN] = true;
 
-#DNS Blacklists to use
+# DNS Blacklists to use
 $wgEnableDnsBlacklist = true;
-$wgDnsBlacklistUrls = array( 'proxies.dnsbl.sorbs.net.', 'opm.tornevall.org.', 'xbl.spamhaus.org.' );
+$wgDnsBlacklistUrls = array( 'proxies.dnsbl.sorbs.net.', 'opm.tornevall.org.', 'xbl.spamhaus.org.', 'dnsbl-3.uceprotect.net.' );
+
+# Require validated email to edit
+$wgEmailConfirmToEdit = true;
+
+# Extend autoblock period
+$wgAutoblockExpiry = 7776000; // 90 days
 
-#Disable Hit Counter for Performance
+# Spam filter regex
+$wgSpamRegex = '/\b(gmail|dell|asus|eps(o|0)n|br(o|0)ther|can(o|0)n|hp|k(o|0)dak|lexmark|mcafee|bitdefender|n(o|0)rt(o|0)n( 360)?|avira|kaspersky|avg|avast|micr(o|0)s(o|0)ft|(o|0)utl(o|0)(o|0)k|printer|netgear( r(o|0)uter)?|quickb(o|0)(o|0)ks( payr(o|0)ll)?)( antivirus)?( helpline| cust(o|0)mer|( technical| tech)| cust(o|0)mer service)? (supp(o|0)rt number|ph(o|0)ne number|supp(o|0)rt ph(o|0)ne number|care number|helpdesk number)\b/i';
+
+# Autopromote users to autoconfirmed
+$wgAutoConfirmAge = 345600; // 4 days
+$wgAutoConfirmCount = 10;
+
+# Disable Hit Counter for Performance
 $wgDisableCounters = TRUE;
-#Disable IP in Header to avoid cache issue
+# Disable IP in Header to avoid cache issue
 $wgShowIPinHeader = FALSE;
 
-#Job Runs by cron
+# Job Runs by cron
 $wgJobRunRate = 0;
 
 # Allow external images from a few sites
@@ -188,15 +241,15 @@ $wgAllowExternalImagesFrom = array( 'http://tile.openstreetmap.org/', 'http://sv
 
 $wgNoFollowDomainExceptions = array( 'www.openstreetmap.org', 'josm.openstreetmap.de', 'taginfo.openstreetmap.org', 'blog.openstreetmap.org', 'wiki.osmfoundation.org' );
 
-#FIXME - move to specific
+# FIXME - move to specific
 $wgForceUIMsgAsContentMsg = array( 'mainpage-url', 'portal-url', 'mapfeatures-url', 'helppage' );
 
-#FIXME - move to specific
+# FIXME - move to specific
 $wgAllowUserJs = TRUE;
 $wgAllowUserCss = TRUE;
 
-#FIXME - move to specific
-#DE
+# FIXME - move to specific
+# DE
 define('NS_LANG_DE', 200);
 $wgExtraNamespaces[NS_LANG_DE] = 'DE';
 $wgNamespacesWithSubpages[NS_LANG_DE] = TRUE;
@@ -205,7 +258,7 @@ define('NS_LANG_DE_TALK', 201);
 $wgExtraNamespaces[NS_LANG_DE_TALK] = 'DE_talk';
 $wgNamespacesWithSubpages[NS_LANG_DE_TALK] = TRUE;
 
-#FR
+# FR
 define('NS_LANG_FR', 202);
 $wgExtraNamespaces[NS_LANG_FR] = 'FR';
 $wgNamespacesWithSubpages[NS_LANG_FR] = TRUE;
@@ -214,7 +267,7 @@ define('NS_LANG_FR_TALK', 203);
 $wgExtraNamespaces[NS_LANG_FR_TALK] = 'FR_talk';
 $wgNamespacesWithSubpages[NS_LANG_FR_TALK] = TRUE;
 
-#ES
+# ES
 define('NS_LANG_ES', 204);
 $wgExtraNamespaces[NS_LANG_ES] = 'ES';
 $wgNamespacesWithSubpages[NS_LANG_ES] = TRUE;
@@ -223,7 +276,7 @@ define('NS_LANG_ES_TALK', 205);
 $wgExtraNamespaces[NS_LANG_ES_TALK] = 'ES_talk';
 $wgNamespacesWithSubpages[NS_LANG_ES_TALK] = TRUE;
 
-#IT
+# IT
 define('NS_LANG_IT', 206);
 $wgExtraNamespaces[NS_LANG_IT] = 'IT';
 $wgNamespacesWithSubpages[NS_LANG_IT] = TRUE;
@@ -232,7 +285,7 @@ define('NS_LANG_IT_TALK', 207);
 $wgExtraNamespaces[NS_LANG_IT_TALK] = 'IT_talk';
 $wgNamespacesWithSubpages[NS_LANG_IT_TALK] = TRUE;
 
-#NL
+# NL
 define('NS_LANG_NL', 208);
 $wgExtraNamespaces[NS_LANG_NL] = 'NL';
 $wgNamespacesWithSubpages[NS_LANG_NL] = TRUE;
@@ -241,7 +294,7 @@ define('NS_LANG_NL_TALK', 209);
 $wgExtraNamespaces[NS_LANG_NL_TALK] = 'NL_talk';
 $wgNamespacesWithSubpages[NS_LANG_NL_TALK] = TRUE;
 
-#RU
+# RU
 define('NS_LANG_RU', 210);
 $wgExtraNamespaces[NS_LANG_RU] = 'RU';
 $wgNamespacesWithSubpages[NS_LANG_RU] = TRUE;
@@ -250,7 +303,7 @@ define('NS_LANG_RU_TALK', 211);
 $wgExtraNamespaces[NS_LANG_RU_TALK] = 'RU_talk';
 $wgNamespacesWithSubpages[NS_LANG_RU_TALK] = TRUE;
 
-#JA
+# JA
 define('NS_LANG_JA', 212);
 $wgExtraNamespaces[NS_LANG_JA] = 'JA';
 $wgNamespacesWithSubpages[NS_LANG_JA] = TRUE;
@@ -267,11 +320,13 @@ $wgNamespacesToBeSearchedDefault[NS_LANG_NL] = TRUE;
 $wgNamespacesToBeSearchedDefault[NS_LANG_RU] = TRUE;
 $wgNamespacesToBeSearchedDefault[NS_LANG_JA] = TRUE;
 
+<% if @mediawiki[:site_notice] -%>
+$wgSiteNotice = "<%= @mediawiki[:site_notice] %>";
+<% end -%>
 <% if @mediawiki[:site_readonly] -%>
 $wgReadOnly = "<%= @mediawiki[:site_readonly] %>";
 <% end -%>
 
-<% Dir.glob("#{@mediawiki[:directory]}/LocalSettings.d/*.php") do |file| -%>
+<% Dir.glob("#{@directory}/LocalSettings.d/*.php") do |file| -%>
 <%= "require_once('#{file}');" %>
 <% end -%>
-