Mediawiki

Mediawiki version 1.35

Requires Docker version 1.11.2 or above to run.

Based on mediawiki.

1. Set up Docker Swarm and abra
2. Deploy coop-cloud/traefik
3. cp .envrc.sample .envrc
4. Edit .envrc - be sure to change $DOMAIN to something that resolves to your Docker swarm box
5. direnv allow (or . .envrc)
6. Generate secrets:

   abra secret_generate db_password v1
   abra secret_generate db_root_password v1
   abra secret_generate mediawiki_secret_key v1 "pwgen -n 64 1"
   

7. abra deploy
8. Create an initial admin user: abra run app php /var/www/html/maintenance/createAndPromote.php --sysop YourUsername YourPassword

SimpleSAMLphp

This app includes optional SAML Single Sign On using SimpleSAMLphp and Mediawiki's Extension:SimpleSAMLphp, based on the venatorfox/simplesamlphp image.

NOTE: currently, if you enable SAML then it'll disable Mediawiki's own user account system. Patches to make this configurable are welcome!

1. Edit .envrc and uncomment lines in the SAML section (including COMPOSE_FILE)
2. direnv allow
3. Generate secrets:

   abra secret_generate saml_admin_password v1
   abra secret_generate saml_secret_salt v1 "pwgen -n 64 1"
   

4. abra deploy
5. Copy your SimpleSAMLphp metadata and certificates to the container (assuming you have local metadata and cert folders:

   abra cp metadata simplesaml:/var/simplesamlphp/
   abra cp cert simplesaml:/var/simplesamlphp/
   

6. You can log into SimpleSAMLphp using the password you generated at https://$DOMAIN/simplesaml/ and test authentication
7. Edit SimpleSAMLphp's config.php and change store.sql.dsn:

   abra run simplesaml vi /var/simplesamlphp/config/config.php
   # find 'store.sql.dsn' and edit to:
   # 'sqlite:/var/simplesamlphp/data/simplesamlphp.sq3'
   

OpenID Connect

1. Edit .envrc and uncomment lines in the OPENID section (including COMPOSE_FILE)
2. direnv allow
3. Get your Keycloak generated client secret and docker secret create it as openid_client_secret

License

MIT License