[02:51:27] Excuse me. [04:00:38] !log admin shortened the ttl on .wmflabs.org. to 300 [04:00:41] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [04:01:21] !log added a wildcard *.wmflabs.org domain pointing at the domain proxy in project-proxy [04:01:22] andrewbogott: Unknown project "added" [04:01:28] !log admin added a wildcard *.wmflabs.org domain pointing at the domain proxy in project-proxy [04:01:29] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [10:33:00] andrewbogott: so do we still need the hardcoded codesearch.wmflabs.org redirect if *.wmflabs.org will now redirect? [10:43:05] !log admin icinga downtime cloudnet* hosts for 30 mins to introduce new check https://gerrit.wikimedia.org/r/c/operations/puppet/+/612390 (T257552) [10:43:07] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [10:43:08] T257552: cloudnet: prometheus node exporter stopped collecting nf_conntrack_entries metric - https://phabricator.wikimedia.org/T257552 [14:07:30] legoktm: as long as you don't mind being an early adopter then you can remove the codesearch.wmflabs.org entry. It's harmless to leave it though. [15:19:37] !log admin briefly set root@cloudnet1003:~ # sysctl net.ipv4.conf.all.accept_local=1 (in neutron qrouter netns) (T257534) [15:19:39] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Admin/SAL [15:19:40] T257534: CloudVPS: issues when routing to static internal IP - https://phabricator.wikimedia.org/T257534 [15:28:26] !log deployment-prep Silenced prometheus alerts for 7d [15:28:29] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Deployment-prep/SAL [15:28:45] !log integration Silenced prometheus alerts for 7d [15:28:46] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Integration/SAL [17:06:13] !log tools.bridgebot Adding bi-directional bridge for #wikipedia-abstract [17:06:15] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools.bridgebot/SAL [17:07:38] testing the bridge [17:08:02] [telegram] ack! (re @wmtelegram_bot: [irc] testing the bridge) [18:15:06] !log mediawiki-vagrant Building instance t257855.mediawiki-vagrant.eqiad1.wikimedia.cloud to test NFSv4 (T257855) [18:15:09] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Mediawiki-vagrant/SAL [18:15:09] T257855: Problems with NFS shares when launching a mediawiki-vagrant instance in Cloud VPS - https://phabricator.wikimedia.org/T257855 [21:10:00] what's the best/easiest way to make a wiki farm? Would I just make multiple tools on toolforge? or is there a better/simpler way? [21:16:16] set up one VPS and have multiple domain point to it [21:16:45] hmm, yeah.. I guess I could do that [21:16:47] https://www.mediawiki.org/wiki/Manual:Wiki_family#Giant_switch_statement [21:16:51] https://wikitech.wikimedia.org/wiki/Help:MediaWiki-Vagrant_in_Cloud_VPS#Run_a_wikifarm [21:17:00] there's also a vagrant role...yeah [21:17:26] hmm, ok, thanks! [21:17:27] davidwbarratt: CindyCicaleseWMF runs at least one wiki farm in Cloud VPS too. She may have some tips [21:17:43] ah cool. thanks! [21:17:53] I think she uses the tooling from Darin at NASA [21:18:44] I was just going to put the extension on beta, but apparently that's a no-go. :/ https://phabricator.wikimedia.org/T216870 [21:19:22] yeah. deployment-prep is for things headed to prod, not generally testing extensions out [21:20:25] davidwbarratt: you can certainly request a Cloud VPS project to work on that extension though -- https://phabricator.wikimedia.org/project/view/2875/ [21:20:48] yeah I have one I was using for the gateway that I can re-use for the extension [21:21:09] I moved the gateway to toolforge: https://graphql.toolforge.org/ [21:21:24] an m1.medium instance can run a reasonably sized wikifarm without breaking a sweat using MediaWiki-Vagrant or bare metal [21:21:50] ooo, good to know [21:25:53] davidwbarratt: you might want to cleanup the 3rd party resource loads in that graphql tool -- https://csp-report.toolforge.org/search?ft=graphql -- we have some anonymizing CDN proxies to help -- https://wikitech.wikimedia.org/wiki/Help:Toolforge/Web#External_assets [21:52:20] bd808 ugh.. it's baked into the library I'm using, but I can check it out [21:53:11] somedayâ„¢ I'm going to flip the CSP header from report-only to enforced mode ;) [21:57:06] can someone do that in production? :P [21:58:29] I'm not sure who is trying to move that forward these days. bawolff moved on to other things I think [21:58:56] when that switch flips in prod I'm guessing that at least 50% of userscripts will stop working [21:59:28] Yeah... Unfortunately it's back-burnererered [22:00:02] did you see the enwiki AN thread about RedWarn? [22:02:00] You think we have time to read things like this? ;) [22:02:26] tl;dr is that one massively advertised antivandalism gamification script loaded all of its dependencies and itself from cdnjs and people werent happy [22:03:03] [22:28:04] !log toolsbeta rebooting toolsbeta-sgebastion-04 during NFS testing thing [22:28:06] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Toolsbeta/SAL