[02:01:52] RECOVERY - mw3 JobQueue on mw3 is OK: JOBQUEUE OK - job queue below 300 jobs [02:45:53] PROBLEM - mw3 JobQueue on mw3 is CRITICAL: JOBQUEUE CRITICAL - job queue greater than 300 jobs. Current queue: 2997 [04:11:52] RECOVERY - mw3 JobQueue on mw3 is OK: JOBQUEUE OK - job queue below 300 jobs [09:57:54] PROBLEM - mw3 JobQueue on mw3 is CRITICAL: JOBQUEUE CRITICAL - job queue greater than 300 jobs. Current queue: 2996 [10:15:47] PROBLEM - cp5 Current Load on cp5 is WARNING: WARNING - load average: 1.78, 1.65, 0.69 [10:17:47] RECOVERY - cp5 Current Load on cp5 is OK: OK - load average: 0.24, 1.10, 0.60 [11:45:53] RECOVERY - mw3 JobQueue on mw3 is OK: JOBQUEUE OK - job queue below 300 jobs [12:52:30] [02miraheze/puppet] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fARpl [12:52:31] [02miraheze/puppet] 07paladox 03bed7c2f - Add misc4 and misc2 ips to purge list [12:57:33] [02dns] 07paladox created branch 03paladox-patch-2 - 13https://git.io/vbQXl [12:57:34] [02miraheze/dns] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-0/±1] 13https://git.io/fARhW [12:57:36] [02miraheze/dns] 07paladox 03982383e - Update dns health check to check every 10s and up timeout to 8s This matches our varnish config. Seeing as cp* is spread around. [12:57:37] [02dns] 07paladox opened pull request 03#98: Update dns health check to check every 10s and up timeout to 8s - 13https://git.io/fARhl [12:59:07] miraheze/dns/paladox-patch-2/982383e - paladox The build passed. https://travis-ci.org/miraheze/dns/builds/424780642 [13:06:25] [02miraheze/dns] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fARjl [13:06:27] [02miraheze/dns] 07paladox 03bfb72fe - Remove mathoid from dns [13:06:56] [02miraheze/dns] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fARj4 [13:06:57] [02miraheze/dns] 07paladox 03a6a2243 - Update miraheze.org [13:51:29] Who is encouraged attend this request? https://phabricator.miraheze.org/T3483#67749 [13:51:30] Title: [ ⚓ T3483 Switch Template not working to change image and Image not updated for upload ] - phabricator.miraheze.org [14:00:23] [02dns] 07JohnFLewis commented on pull request 03#98: Update dns health check to check every 10s and up timeout to 8s - 13https://git.io/fA0In [14:01:22] [02dns] 07paladox commented on pull request 03#98: Update dns health check to check every 10s and up timeout to 8s - 13https://git.io/fA0Ir [14:04:03] [02dns] 07JohnFLewis commented on pull request 03#98: Update dns health check to check every 10s and up timeout to 8s - 13https://github.com/miraheze/dns/pull/98#issuecomment-418742943 [14:04:04] Title: [ Update dns health check to check every 10s and up timeout to 8s by paladox · Pull Request #98 · miraheze/dns · GitHub ] - github.com [14:36:52] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-0/±1] 13https://git.io/fA0mS [14:36:53] [02miraheze/puppet] 07paladox 039e8bced - Migrate icingaweb2 and grafana to use nginx [14:36:55] [02puppet] 07paladox created branch 03paladox-patch-2 - 13https://git.io/vbiAS [14:36:56] [02puppet] 07paladox opened pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [14:37:27] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-1/±0] 13https://git.io/fA0m5 [14:37:29] [02miraheze/puppet] 07paladox 036f0d3c3 - Delete apache.conf [14:37:30] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [15:28:03] Hola [15:28:09] hi [15:35:52] PROBLEM - mw3 JobQueue on mw3 is CRITICAL: JOBQUEUE CRITICAL - job queue greater than 300 jobs. Current queue: 916 [15:48:05] PROBLEM - aman.info.tm - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'aman.info.tm' expires in 15 day(s) (Fri 21 Sep 2018 03:45:56 PM GMT +0000). [15:48:19] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA08a [15:48:20] [02miraheze/ssl] 07MirahezeSSLBot 03f47f662 - Bot: Update SSL cert for aman.info.tm [15:49:15] PROBLEM - nenawiki.org - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'nenawiki.org' expires in 15 day(s) (Fri 21 Sep 2018 03:46:48 PM GMT +0000). [15:49:27] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA08r [15:49:28] [02miraheze/ssl] 07MirahezeSSLBot 03f78cb5a - Bot: Update SSL cert for nenawiki.org [15:50:41] PROBLEM - pwiki.arkcls.com - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'pwiki.arkcls.com' expires in 15 day(s) (Fri 21 Sep 2018 03:47:01 PM GMT +0000). [15:50:53] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA08y [15:50:54] [02miraheze/ssl] 07MirahezeSSLBot 03cf28c77 - Bot: Update SSL cert for pwiki.arkcls.com [15:50:55] PROBLEM - wiki.lbcomms.co.za - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'wiki.lbcomms.co.za' expires in 15 day(s) (Fri 21 Sep 2018 03:48:12 PM GMT +0000). [15:51:10] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA089 [15:51:12] [02miraheze/ssl] 07MirahezeSSLBot 034fddf57 - Bot: Update SSL cert for wiki.lbcomms.co.za [15:51:15] RECOVERY - nenawiki.org - LetsEncrypt on sslhost is OK: OK - Certificate 'nenawiki.org' will expire on Tue 04 Dec 2018 02:49:21 PM GMT +0000. [15:51:33] PROBLEM - wiki.kourouklides.com - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'wiki.kourouklides.com' expires in 15 day(s) (Fri 21 Sep 2018 03:47:57 PM GMT +0000). [15:51:44] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA085 [15:51:46] [02miraheze/ssl] 07MirahezeSSLBot 030fe7f94 - Bot: Update SSL cert for wiki.kourouklides.com [15:51:59] PROBLEM - www.alwiki.net - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'www.alwiki.net' expires in 15 day(s) (Fri 21 Sep 2018 03:49:39 PM GMT +0000). [15:52:05] RECOVERY - aman.info.tm - LetsEncrypt on sslhost is OK: OK - Certificate 'aman.info.tm' will expire on Tue 04 Dec 2018 02:48:13 PM GMT +0000. [15:52:11] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA08b [15:52:12] [02miraheze/ssl] 07MirahezeSSLBot 03d5093d9 - Bot: Update SSL cert for www.alwiki.net [15:52:35] PROBLEM - wiki.valentinaproject.org - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'wiki.valentinaproject.org' expires in 15 day(s) (Fri 21 Sep 2018 03:49:27 PM GMT +0000). [15:52:39] PROBLEM - wiki.ldmsys.net - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'wiki.ldmsys.net' expires in 15 day(s) (Fri 21 Sep 2018 03:48:44 PM GMT +0000). [15:52:47] PROBLEM - www.dariawiki.org - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'www.dariawiki.org' expires in 15 day(s) (Fri 21 Sep 2018 03:49:50 PM GMT +0000). [15:52:55] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA08j [15:52:56] [02miraheze/ssl] 07MirahezeSSLBot 03c347fa9 - Bot: Update SSL cert for wiki.ldmsys.net [15:53:09] PROBLEM - wiki.worlduniversityandschool.org - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'wiki.worlduniversityandschool.org' expires in 15 day(s) (Fri 21 Sep 2018 03:50:32 PM GMT +0000). [15:53:22] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA04J [15:53:23] [02miraheze/ssl] 07MirahezeSSLBot 03f57ebad - Bot: Update SSL cert for wiki.worlduniversityandschool.org [15:53:49] PROBLEM - www.zenbuddhism.info - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'www.zenbuddhism.info' expires in 15 day(s) (Fri 21 Sep 2018 03:51:27 PM GMT +0000). [15:53:53] PROBLEM - wikipuk.cl - LetsEncrypt on sslhost is WARNING: WARNING - Certificate 'wikipuk.cl' expires in 15 day(s) (Fri 21 Sep 2018 03:50:45 PM GMT +0000). [15:54:03] [02miraheze/ssl] 07MirahezeSSLBot pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA04q [15:54:05] [02miraheze/ssl] 07MirahezeSSLBot 037a43990 - Bot: Update SSL cert for wikipuk.cl [15:56:31] RECOVERY - wikipuk.cl - LetsEncrypt on sslhost is OK: OK - Certificate 'wikipuk.cl' will expire on Tue 04 Dec 2018 02:53:58 PM GMT +0000. [15:56:39] RECOVERY - wiki.ldmsys.net - LetsEncrypt on sslhost is OK: OK - Certificate 'wiki.ldmsys.net' will expire on Tue 04 Dec 2018 02:52:45 PM GMT +0000. [15:56:41] RECOVERY - pwiki.arkcls.com - LetsEncrypt on sslhost is OK: OK - Certificate 'pwiki.arkcls.com' will expire on Tue 04 Dec 2018 02:50:47 PM GMT +0000. [15:56:56] RECOVERY - wiki.lbcomms.co.za - LetsEncrypt on sslhost is OK: OK - Certificate 'wiki.lbcomms.co.za' will expire on Tue 04 Dec 2018 02:51:00 PM GMT +0000. [15:56:59] RECOVERY - www.alwiki.net - LetsEncrypt on sslhost is OK: OK - Certificate 'www.alwiki.net' will expire on Tue 04 Dec 2018 02:52:04 PM GMT +0000. [15:57:31] RECOVERY - wiki.kourouklides.com - LetsEncrypt on sslhost is OK: OK - Certificate 'wiki.kourouklides.com' will expire on Tue 04 Dec 2018 02:51:38 PM GMT +0000. [16:24:30] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-3 [+0/-0/±1] 13https://git.io/fA0E7 [16:24:31] [02miraheze/puppet] 07paladox 03b1c4343 - Retry ssl-acme up to 5 times This is to try and reduce race condition when alot of ssl certs need renewing thus all the checks are scheduled. [16:24:33] [02puppet] 07paladox created branch 03paladox-patch-3 - 13https://git.io/vbiAS [16:24:34] [02puppet] 07paladox opened pull request 03#827: Retry ssl-acme up to 5 times - 13https://git.io/fA0E5 [16:24:46] JohnLewis ^^ [16:26:02] [02miraheze/ssl] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0EA [16:26:03] [02miraheze/ssl] 07paladox 03c22da94 - Renew www.zenbuddhism.info cert [16:27:27] [02miraheze/ssl] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0uJ [16:27:28] [02miraheze/ssl] 07paladox 0362acb66 - Renew www.dariawiki.org cert [16:28:14] [02miraheze/ssl] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0uL [16:28:15] [02miraheze/ssl] 07paladox 03d79c8cd - Renew wiki.valentinaproject.org cert [16:29:37] RECOVERY - www.dariawiki.org - LetsEncrypt on sslhost is OK: OK - Certificate 'www.dariawiki.org' will expire on Tue 04 Dec 2018 03:26:23 PM GMT +0000. [16:29:41] RECOVERY - www.zenbuddhism.info - LetsEncrypt on sslhost is OK: OK - Certificate 'www.zenbuddhism.info' will expire on Tue 04 Dec 2018 03:25:38 PM GMT +0000. [16:29:47] RECOVERY - wiki.valentinaproject.org - LetsEncrypt on sslhost is OK: OK - Certificate 'wiki.valentinaproject.org' will expire on Tue 04 Dec 2018 03:27:45 PM GMT +0000. [16:37:32] !log deleting wulfmaerwiki wiki per https://phabricator.miraheze.org/T3560 [16:37:33] Title: [ ⚓ T3560 Please Delete Wiki and all associated content ] - phabricator.miraheze.org [16:37:37] Logged the message at https://meta.miraheze.org/wiki/Tech:Server_admin_log, Master [16:38:16] !log drop database wulfmaerwiki from db4 [16:38:20] Logged the message at https://meta.miraheze.org/wiki/Tech:Server_admin_log, Master [17:19:41] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-0/±1] 13https://git.io/fA0wR [17:19:43] [02miraheze/puppet] 07paladox 033380c4a - Update icinga2.conf [17:19:47] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://github.com/miraheze/puppet/pull/826 [17:19:50] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-0/±1] 13https://git.io/fA0wE [17:19:52] [02miraheze/puppet] 07paladox 03f1a51be - Update icinga2.conf [17:19:53] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [17:25:44] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-0/±1] 13https://git.io/fA0rZ [17:25:46] [02miraheze/puppet] 07paladox 03750913b - Update init.pp [17:25:48] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [17:29:06] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+1/-0/±0] 13https://git.io/fA0rQ [17:29:07] [02miraheze/puppet] 07paladox 039a9b915 - Create grafana.conf [17:29:09] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [17:29:23] time to merge and find out what breaks.... [17:29:31] note this will affect icinga.m.org and grafana.m.org [17:30:05] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+1/-1/±0] 13https://git.io/fA0rx [17:30:06] [02miraheze/puppet] 07paladox 03bc91342 - Rename modules/grafana/files/apache/php.ini to modules/grafana/files/nginx/php.ini [17:30:08] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [17:30:14] [02miraheze/puppet] 07paladox pushed 031 commit to 03paladox-patch-2 [+0/-1/±0] 13https://git.io/fA0rj [17:30:16] [02miraheze/puppet] 07paladox 03bb7fa77 - Delete apache.conf [17:30:17] [02puppet] 07paladox synchronize pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [17:30:48] [02puppet] 07paladox closed pull request 03#826: Migrate icingaweb2 and grafana to use nginx - 13https://git.io/fA0m9 [17:30:49] [02miraheze/puppet] 07paladox pushed 031 commit to 03master [+2/-3/±3] 13https://git.io/fA0ok [17:30:51] [02miraheze/puppet] 07paladox 0377e0f90 - Migrate icingaweb2 and grafana to use nginx (#826) * Migrate icingaweb2 and grafana to use nginx * Delete apache.conf * Update icinga2.conf * Update icinga2.conf * Update init.pp * Create grafana.conf * Rename modules/grafana/files/apache/php.ini to modules/grafana/files/nginx/php.ini * Delete apache.conf [17:32:15] !log apache2 removed from misc1 [17:32:26] Logged the message at https://meta.miraheze.org/wiki/Tech:Server_admin_log, Master [17:34:53] HTTP CRITICAL - Unable to open TCP socket [17:35:21] PROBLEM - misc1 Current Load on misc1 is WARNING: WARNING - load average: 1.99, 1.44, 0.83 [17:43:28] PROBLEM - misc1 Puppet on misc1 is WARNING: WARNING: Puppet is currently disabled, message: reason not specified, last run 48 seconds ago with 0 failures [17:49:14] RECOVERY - misc1 Puppet on misc1 is OK: OK: Puppet is currently enabled, last run 1 minute ago with 0 failures [17:56:59] PROBLEM - misc1 Puppet on misc1 is WARNING: WARNING: Puppet is currently disabled, message: paladox, last run 6 minutes ago with 0 failures [18:05:31] [02miraheze/puppet] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0iV [18:05:32] [02miraheze/puppet] 07paladox 033393933 - Fix icingaweb2 nginx config [18:06:46] RECOVERY - misc1 Puppet on misc1 is OK: OK: Puppet is currently enabled, last run 2 minutes ago with 0 failures [18:11:19] [02miraheze/puppet] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0ij [18:11:20] [02miraheze/puppet] 07paladox 03ea352f0 - Add icinga.miraheze.org web check [18:50:07] Hello [18:52:48] MacFan4000 paladox: why can’t I edit this task (i.e. to simply subscribe myself or add my project tracker) https://phabricator.miraheze.org/T3559 [18:52:49] Title: [ ⚓ T3559 Consider having Miraheze be Miraheze Foundation (MHF) ] - phabricator.miraheze.org [18:53:25] AmandaCatherine fixed [18:53:33] Thanks [18:55:31] Also, how do you recommend that I answer this question, since the way to add groups is going to change soon with full deployment of ManageWikiPermissions? https://weather.miraheze.org/wiki/User_talk:Amanda_Catherine#Additional_User_Group [18:55:32] Title: [ Login required - Weather Wiki ] - weather.miraheze.org [18:57:15] JohnLewis ^^ [18:57:59] paladox: how do you think you should answer? [18:58:27] I want to know how I should answer JohnLewis [18:58:46] AmandaCatherine: I know but paladox and ops need to be independent thinkers [18:58:51] Since right now, creating additional groups has to be done in Phab/GH, but won’t need to be for long with deployment of ManageWikiPermissions [18:59:17] I say that if they can wait the next few days then wait for ManageWikiPermissions [18:59:25] if they carn't then create the group in github [19:00:14] yeah that's a fine answer. addresses current method and advises future method [19:00:42] Ok [19:01:58] JohnLewis are you planning on deploying today? [19:02:14] doubtful [19:02:36] ok [19:02:43] JohnLewis you found more bugs in it? [19:02:48] (are you planning tommror?) [19:02:57] I've found no bugs in it [19:03:02] ok [19:03:29] I think I caught the only bugs :) [19:03:44] lol [19:03:51] JohnLewis should we deploy it to meta? [19:04:11] [d__d]: ping [19:04:11] <[d__d]> Are you in need of my services, MacFan4000? [19:04:12] could do if you want [19:04:19] Yay, bot is up [19:04:20] ok [19:04:22] deploying then :) [19:05:18] [02miraheze/mw-config] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0So [19:05:19] [02miraheze/mw-config] 07paladox 036490400 - Switch on wgManageWikiPermissionsManagement for metawiki [19:05:20] JohnLewis ^^ done :) [19:06:45] Uh.. meta just went down [19:07:08] JohnLewis i found a bug [19:07:15] AmandaCatherine works for me [19:07:17] you have? [19:07:25] https://i.imgur.com/iMvNOag.jpg [19:07:30] ^ Meta is down [19:07:36] JohnLewis no select database is shown on https://meta.miraheze.org/wiki/Special:ManageWikiPermissions [19:07:37] Title: [ Permission error - Miraheze Meta ] - meta.miraheze.org [19:07:58] JohnLewis and second bug https://meta.miraheze.org/wiki/Special:SpecialPages [19:07:59] Right now I can’t even access Meta [19:07:59] Title: [ Permission error - Miraheze Meta ] - meta.miraheze.org [19:08:03] does not work for logged out [19:08:04] users [19:08:06] uh [19:08:08] and it appears that ZppixBot can’t either [19:08:14] did you run the maintenance script? [19:08:17] Everything is saying that I don [19:08:19] Don [19:08:21] Ack [19:08:23] JohnLewis uh no [19:08:27] what maint script? [19:08:27] Don’t* have permission to read Meta [19:08:32] and there shouldn't be a select database, it's local only [19:08:32] uh [19:08:37] populaeGroupPermissions [19:08:49] JohnLewis: why is Meta down? [19:08:51] that should have been ran BEFORE enabling it [19:08:56] You do not have permission to read this page, for the following reason: [19:08:56] You are not allowed to execute the action you have requested. [19:09:04] AmandaCatherine: because read is assigned to any group [19:09:07] *isnt [19:09:08] ^ error message [19:09:12] paladox, https://meta.miraheze.org/wiki/Special:ListGroupRights [19:09:13] Title: [ Permission error - Miraheze Meta ] - meta.miraheze.org [19:09:15] That’s an urgent bug that needs to be fixed ASAP [19:09:22] it's not a ubg [19:09:23] *bug [19:09:23] How did that happen? [19:09:26] it's more deployment [19:09:27] *poor [19:09:44] I thought MW assigns read to * group by default regardless of additional config [19:09:53] So unless overwritten or revoked, it should be there [19:10:00] we overwrite it [19:10:12] Why? [19:10:24] Now nobody can access Miraheze [19:10:32] And therefore, Miraheze is, in a way, down [19:10:38] JohnLewis i ran "/srv/mediawiki/w/extensions/ManageWiki/maintenance/populateGroupPermissions.php" [19:10:39] because we need to build the config ourselves otherwise we conflict with MediaWiki and it makes the whole module useless [19:10:41] still same problem [19:10:51] paladox: "that should have been ran BEFORE enabling it" [19:10:57] oh [19:11:05] Well, whatever happened, we need to make Meta accessible again, like, now [19:11:07] ASAP [19:11:38] Fixed JohnLewis [19:11:40] thanks [19:11:49] i reverted on mw3, ran the script, and git reseted it [19:12:06] ...and, Meta is up again [19:12:18] uh not quite [19:12:33] you haven't move any of the meta wgGroupPermissions config over as needed [19:13:04] stewards have no local access besides userrights [19:13:07] uh [19:13:15] " you haven't move any of the meta wgGroupPermissions config over as needed" [19:13:19] what do you mean by that? [19:13:48] I mean what I say [19:14:07] you've not moved over the config for wgGroupPermissions for meta where groups are blacklisted or rights are blacklisted [19:14:36] wgManageWikiPermissionsAdditionalRights? [19:14:56] wgManageWikiPermissionsBlacklistGroups [19:15:09] additionalrights yes [19:15:23] Stewards [19:15:23] (list of members) [19:15:23] Edit all user rights (userrights) [19:16:36] JohnLewis so i copy [19:16:41] https://github.com/miraheze/mw-config/blob/master/LocalSettings.php#L5033 [19:16:42] Title: [ mw-config/LocalSettings.php at master · miraheze/mw-config · GitHub ] - github.com [19:16:44] to wgManageWikiPermissionsAdditionalRights [19:17:21] ? [19:18:05] pretty sure just the section for steward is missing [19:18:16] for any blacklist listed groups and rights yes [19:19:26] [02mw-config] 07paladox created branch 03paladox-patch-1 - 13https://git.io/vbvb3 [19:19:28] [02miraheze/mw-config] 07paladox pushed 031 commit to 03paladox-patch-1 [+0/-0/±1] 13https://git.io/fA0HT [19:19:29] [02miraheze/mw-config] 07paladox 033a0e98c - Add metawiki to wgManageWikiPermissionsAdditionalRights [19:19:31] [02mw-config] 07paladox opened pull request 03#2428: Add metawiki to wgManageWikiPermissionsAdditionalRights - 13https://git.io/fA0Hk [19:19:33] JohnLewis, on a side note, any reason I shouldn't close the open RfS? [19:19:34] JohnLewis Voidwalker ^^ [19:19:48] completely ignored [19:19:55] I said blacklisted groups and rights oNLY [19:20:03] otherwise that makes ManageWikiPermissions useless [19:20:09] meh [19:20:12] Voidwalker: no, no reasons [19:20:14] i haven't ignored [19:20:21] just doin't completly understand :) [19:20:37] " I said blacklisted groups and rights oNLY" i doin't see any rights that are blacklisted [19:20:39] and also you're mussing a + from metawiki [19:20:51] wgManageWikiPermissionsBlacklistRights [19:22:59] JohnLewis still doin't understand what im blacklisting apart from Voidwalker suggestion about the ones in "steward" [19:23:13] you're not blacklisting anything [19:23:15] paladox: if you don [19:23:22] Don’t know what you are doing [19:23:22] don? [19:23:25] Why are you doing it? [19:23:27] you're only adding rights and groups that exist in those arrays [19:23:28] (Typo) [19:23:38] AmandaCatherine i thought it was as easy as a config change [19:23:43] though apparently it's not [19:23:51] Exactly [19:24:43] looking at https://github.com/miraheze/mw-config/commit/cfb4649e0caa27a3bef42f34f5d0fcd86571b12b [19:24:43] Title: [ add ManageWikiPermissions on weatherwiki and wiki1776wiki - limited d… · miraheze/mw-config@cfb4649 · GitHub ] - github.com [19:24:54] looks like for weatherwiki you copied over the steward thing [19:25:00] so i guess i do the same to metawiki? [19:25:38] I think the steward block was copied over because weatherwiki has custom rights granted/revoked from stewards [19:25:42] yes, steward is a blacklisted group [19:25:43] I think Meta is using the default [19:25:47] meta isn't [19:25:52] Oh? [19:26:15] Isn’t Meta using the default steward group from a combination of MW Core and the CentralAuth extension? [19:26:32] wiki1776wiki? [19:26:35] [02mw-config] 07paladox synchronize pull request 03#2428: Add metawiki to wgManageWikiPermissionsAdditionalRights - 13https://git.io/fA0Hk [19:26:37] JohnLewis look better ^^ [19:26:37] [02miraheze/mw-config] 07paladox pushed 031 commit to 03paladox-patch-1 [+0/-0/±1] 13https://git.io/fA0Hw [19:26:38] [02miraheze/mw-config] 07paladox 0354034b5 - Update LocalSettings.php [19:26:40] AmandaCatherine: probably [19:26:50] JohnLewis: then Meta is using the default steward group [19:26:56] paladox: what about the other groups? [19:27:01] ohh [19:27:05] so i was right before? [19:27:09] Compared to weatherwiki where I merged CU and OS into the steward group, along with some other things [19:27:10] user contains blacklisted rights, wikicreator contains blacklsit rights [19:27:13] ah, ya lo ví xd [19:27:18] confirmed has blacklisted rights [19:27:37] IMHO the list of blacklisted rights is excessive [19:27:41] sysop, proxybot ,cvt all have blacklisted rights [19:27:41] But whatever [19:28:48] IMHO only the rights that are contained in groups that are “positions of trust” should be restricted [19:28:54] [02mw-config] 07paladox synchronize pull request 03#2428: Add metawiki to wgManageWikiPermissionsAdditionalRights - 13https://git.io/fA0Hk [19:28:55] [02miraheze/mw-config] 07paladox pushed 031 commit to 03paladox-patch-1 [+0/-0/±1] 13https://git.io/fA0HS [19:28:55] Confirmed, user, etc. shouldn’t have any [19:28:57] [02miraheze/mw-config] 07paladox 038dd1a23 - Update LocalSettings.php [19:28:57] merging that [19:29:14] * JohnLewis sighs [19:29:20] you merge, I'll fix [19:29:27] ok [19:29:35] [02mw-config] 07paladox closed pull request 03#2428: Add metawiki to wgManageWikiPermissionsAdditionalRights - 13https://git.io/fA0Hk [19:29:36] [02miraheze/mw-config] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0H7 [19:29:38] [02miraheze/mw-config] 07paladox 03b614b57 - Add metawiki to wgManageWikiPermissionsAdditionalRights (#2428) * Add metawiki to wgManageWikiPermissionsAdditionalRights * Update LocalSettings.php * Update LocalSettings.php [19:29:39] [02mw-config] 07paladox deleted branch 03paladox-patch-1 - 13https://git.io/vbvb3 [19:29:41] [02miraheze/mw-config] 07paladox deleted branch 03paladox-patch-1 [19:29:41] done [19:29:59] Wouldn’t it be easier if the blacklist and additional rights lists were both smaller? [19:30:22] would it? [19:30:30] I would think so [19:30:42] well feel free to propose removals if you want [19:30:43] Like I said above, IMHO only rights that local wiki crats etc aren’t allowed to have should be restricted [19:30:56] paladox: some of that (flood, etc) can be removed can be removed as the rights aren’t blacklisted [19:31:13] Johns fixing i think [19:31:26] I’ll wait till all of this Meta deployment stuff is done and then I’ll take another look [19:34:27] [02miraheze/mw-config] 07JohnFLewis pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0Qs [19:34:28] [02miraheze/mw-config] 07JohnFLewis 038702ef5 - fix additionalrights array [19:34:37] paladox: ^ [19:35:14] ah ok thanks [19:35:35] JohnLewis do we remove metawiki from wgGroupPermissions too? [19:35:43] yes [19:35:47] ok [19:36:57] [02miraheze/mw-config] 07paladox pushed 031 commit to 03master [+0/-0/±1] 13https://git.io/fA0Qg [19:36:58] [02miraheze/mw-config] 07paladox 03ea8679c - Remove metawiki from wgGroupPermissions has been migrated to ManageWikiPermissions [19:37:00] done [19:39:56] hmm, steward lost access to managewiki and noratelimit with that change [19:40:20] shouldn't have [19:40:27] but you can assign them anyway [19:40:58] not really, the group can't be touched outside of LS.php [19:41:10] oh yeah, thought you meant something else [19:41:34] see, this is the issue with poor deployments, it confuses everyone involved [19:41:53] Voidwalker: make a PR and readd them then ig [19:44:52] [02mw-config] 07The-Voidwalker opened pull request 03#2429: add managewiki and noratelimit back to steward - 13https://git.io/fA07n [19:45:23] [02mw-config] 07JohnFLewis closed pull request 03#2429: add managewiki and noratelimit back to steward - 13https://git.io/fA07n [19:45:25] [02miraheze/mw-config] 07JohnFLewis pushed 032 commits to 03master [+0/-0/±2] 13https://git.io/fA078 [19:45:26] [02miraheze/mw-config] 07The-Voidwalker 03855c54d - add managewiki and noratelimit back to steward [19:45:28] [02miraheze/mw-config] 07JohnFLewis 0328b43f8 - Merge pull request #2429 from The-Voidwalker/patch-5 add managewiki and noratelimit back to steward [19:45:51] speaking of, stewards can be removed from the wiki creator group [19:46:33] noratelimit is given to sysops and bureaucrats anyway [19:46:50] So its redundant to stewards [19:46:58] I think it’s also included in Stewards global perms [19:47:56] everyone can blame me for the poor deployment [19:48:10] i thought it was easy as switching ManageWikiPermissions on metawiki [19:48:13] but it's not [19:48:16] we could have you file an incident report ;) [19:48:51] I think the only “incident” resulting from this is that Meta was down for ~10 minutes [19:48:52] yeh i should seeeing as meta was down [19:48:56] for 1+ minute [19:49:01] When no one could read it [19:49:10] paladox: it was at least 5 minutes, more like 10 [19:49:19] When nobody had the “read” permission [19:49:59] paladox: don't know what you're going to blame besides yourself ;) [19:50:24] to be fair, global groups still had read [19:50:51] Voidwalker: yes, but the * group on Meta didn’t [19:50:58] So nobody except those in global groups could access Meta [19:51:01] all seven of us :P [19:51:09] JohnLewis yeh i know :) [19:51:14] thats why i blame my self [19:51:22] JohnLewis though you do need to create a doc for this [19:51:26] :) [19:51:36] paladox: there are docs. [19:51:40] where? [19:51:45] I do documented settings and code well [19:51:46] does it have step by step [19:51:47] in the extension [19:51:49] on how to migrate? [19:52:21] Anyway once the dust fully settles I do think I’m going to try and trim down the ManageWikiPermissions blacklist a bit [19:53:19] paladox: this is why JohnLewis only wanted a limited deployment of ManageWikiPermissions to start [19:53:29] yeh..... [19:53:30] This way poor deployments and bugs don’t go global [19:53:41] JohnLewis could luck when you migrate it to all wikis :) [19:53:45] *good [19:53:52] it'll be super easy [19:53:58] no issues deploying on existing wikis [19:54:02] the rest will be a breeze [19:54:13] it'll be a 5 minute job at most [19:54:38] JohnLewis well then im glad your spearheading that deployment! [19:54:49] course [19:54:57] That’s also due to the fact that you won’t have to fix bugs/remove vulnerabilities in 2000+ wikis at a time [19:55:14] you'll should have been put off by my message on the setting in LS [19:55:19] Since we’ve caught the bugs and vulnerabilities in the limited deployments [19:59:36] JohnLewis what message? [20:00:38] if you didn't see the comment on the line literally above where you made changes then I'd be concerned [20:01:06] paladox: https://github.com/miraheze/mw-config/blob/master/LocalSettings.php#L2413 [20:01:07] Title: [ mw-config/LocalSettings.php at master · miraheze/mw-config · GitHub ] - github.com [20:01:18] The comment next to that line [20:01:28] oh lol [20:01:37] JohnLewis why say "(no matter what he says)" [20:01:38] ? [20:02:01] because if I don't have any access at all, you're not going to be able to fix the issue [20:02:12] and there's no guarantee a revert will entirely fix the issue [20:11:00] [02mw-config] 07Amanda-Catherine opened pull request 03#2430: [Comments requested] Trim Down ManageWikiPermissions blacklist - 13https://git.io/fA0F3 [20:13:59] JohnLewis ^ [20:16:15] commented [20:20:12] [02mw-config] 07Amanda-Catherine synchronize pull request 03#2430: [Comments requested] Trim Down ManageWikiPermissions blacklist - 13https://git.io/fA0F3 [20:21:15] JohnLewis: re-added read, replied on the two others [20:21:22] replied [20:25:02] [02mw-config] 07Amanda-Catherine synchronize pull request 03#2430: [Comments requested] Trim Down ManageWikiPermissions blacklist - 13https://git.io/fA0F3 [20:31:52] someone just used MediaWiki:Common.js to redirect testwiki to a Rick Astley video on YouTube [20:32:02] Lol [20:33:19] there is the introduction of "restricted editing to global site css/js" stuff coming up next release [20:33:43]