1.2 Update

.dockerignore

@@ -1,13 +1,5 @@
-.env
-.env.example
-LICENSE
-README.md
-compose.yml
-production-compose.yml.example
-staging-compose.yml.example
-compose.yml.example
-composer.lock
-.gitignore
-.git/
-vendor/
-systemd/
+# Deny all files by default
+*
+
+# Allow everything in the wiki directory
+!wiki/

.env.example

@@ -1,31 +1,88 @@
 # Build Arguments
+
+# This major version number of MediaWiki you want to use, e.g. "1.44"
 MEDIAWIKI_MAJOR_VERSION=""
+# The full version number of MediaWiki you want to use, e.g. "1.44.2"
 MEDIAWIKI_VERSION=""
+# The branch of MediaWiki you want to use for extensions, e.g. "REL1_44"
 MEDIAWIKI_BRANCH=""
+# The version of the Citizen skin you want to use, e.g. "3.11.0"
 CITIZEN_VERSION=""
 
+
 # Core Secrets
+
+# The key to access the upgrade page, this is disabled on the default image
+# This needs to be a 16 character alphanumeric string
 UPGRADE_KEY=""
+# The key is used for various security related functions within MediaWiki
+# This needs to be a 64 character alphanumeric string
 SECRET_KEY=""
 
-# DB Secrets
+
+# DB Configurations
+
+# The IP address or hostname of your database server
 DB_SERVER=""
+# The name of the table in the database used by MediaWiki
 DB_NAME=""
+# The username used by MediaWiki to connect to the database
 DB_USER=""
+# The password used by MediaWiki to connect to the database
 DB_PASSWORD=""
 
-# Extension Secrets
-TURNSTILE_SITE_KEY=""
+
+# SMTP Configurations and Secrets
+
+# The SMTP server host address
+SMTP_HOST=""
+# The SMTP domain you wish to use for sending emails
+SMTP_DOMAIN=""
+# The SMTP server port, usually 587 for TLS or 465 for SSL
+SMTP_PORT=""
+# The email address to send SMTP emails from for service notifications
+SMTP_USERNAME=""
+# The password for the SMTP username
 SMTP_PASSWORD=""
+# The email address to send emergency notifications to
+EMERGENCY_EMAIL=""
+
+
+# Cloudflare Turnstile Secrets
+
+# The site key for Cloudflare Turnstile
+TURNSTILE_SITE_KEY=""
+# The secret key for Cloudflare Turnstile
 TURNSTILE_SECRET_KEY=""
-DISCORD_WEBHOOK_URL=""
+
+
+# OpenID Okta Secrets
+
+# The client ID for OpenID authentication from Okta
 OPENID_CLIENT_ID=""
+# The client secret for OpenID authentication from Okta
 OPENID_CLIENT_SECRET=""
-ACCESS_KEY_ID=""
-SECRET_ACCESS_KEY=""
 
-# Wiki Configurations
+
+# S3 Configurations and Secrets
+
+# The S3 endpoint URL
+S3_ENDPOINT=""
+# The S3 access key ID
+S3_ACCESS_KEY_ID=""
+# The S3 secret access key
+S3_SECRET_ACCESS_KEY=""
+# The S3 bucket name
+S3_BUCKET_NAME=""
+# The S3 bucket domain
+S3_BUCKET_DOMAIN=""
+
+
+# Miscellaneous Configurations
+
+# The domain the wiki will be accessible from, without the protocol (e.g. example.com)
 SITENAME=""
+# The full URL the wiki will be accessible from, including the protocol (e.g. https://example.com)
 WG_SERVER=""
-AWS_BUCKET_NAME=""
-AWS_BUCKET_DOMAIN=""
+# Discord Webhook URL
+DISCORD_WEBHOOK_URL=""

.env.local.example

@@ -0,0 +1,96 @@
+# Build Arguments
+
+# This major version number of MediaWiki you want to use, e.g. "1.44"
+MEDIAWIKI_MAJOR_VERSION=""
+# The full version number of MediaWiki you want to use, e.g. "1.44.2"
+MEDIAWIKI_VERSION=""
+# The branch of MediaWiki you want to use for extensions, e.g. "REL1_44"
+MEDIAWIKI_BRANCH=""
+# The version of the Citizen skin you want to use, e.g. "3.11.0"
+CITIZEN_VERSION=""
+
+
+# Core Secrets
+
+# The key to access the upgrade page, this is disabled on the default image
+# This needs to be a 16 character alphanumeric string
+UPGRADE_KEY=""
+# The key is used for various security related functions within MediaWiki
+# This needs to be a 64 character alphanumeric string
+SECRET_KEY=""
+
+
+# DB Configurations
+
+# The IP address or hostname of your database server
+DB_SERVER="local-wiki-mariadb"
+# The name of the table in the database used by MediaWiki
+DB_NAME="local-maria-db" # This needs to match MARIADB_NAME
+# The username used by MediaWiki to connect to the database
+DB_USER="local-maria-user" # This needs to match MARIADB_USER
+# The password used by MediaWiki to connect to the database
+DB_PASSWORD="local-maria-password" # This needs to match MARIADB_PASSWORD
+
+
+# SMTP Configurations and Secrets
+
+# The SMTP server host address
+SMTP_HOST=""
+# The SMTP domain you wish to use for sending emails
+SMTP_DOMAIN=""
+# The SMTP server port, usually 587 for TLS or 465 for SSL
+SMTP_PORT=""
+# The email address to send SMTP emails from for service notifications
+SMTP_USERNAME=""
+# The password for the SMTP username
+SMTP_PASSWORD=""
+# The email address to send emergency notifications to
+EMERGENCY_EMAIL=""
+
+
+# Cloudflare Turnstile Secrets
+
+# The site key for Cloudflare Turnstile
+TURNSTILE_SITE_KEY=""
+# The secret key for Cloudflare Turnstile
+TURNSTILE_SECRET_KEY=""
+
+
+# OpenID Okta Secrets - DISABLED LOCALLY
+
+# The client ID for OpenID authentication from Okta
+# OPENID_CLIENT_ID=""
+# The client secret for OpenID authentication from Okta
+# OPENID_CLIENT_SECRET=""
+
+
+# S3 Configurations and Secrets
+
+# The S3 endpoint URL
+S3_ENDPOINT="http://minio:9000"
+# The S3 access key ID
+S3_ACCESS_KEY_ID="local-minio-user" # This needs to match MINIO_USER
+# The S3 secret access key
+S3_SECRET_ACCESS_KEY="local-minio-password" # This needs to match MINIO_PASSWORD
+# The S3 bucket name
+S3_BUCKET_NAME=""
+# The S3 bucket domain
+S3_BUCKET_DOMAIN="minio:9000"
+
+
+# Miscellaneous Configurations
+
+# The domain the wiki will be accessible from, without the protocol (e.g. localhost:3000)
+SITENAME="localhost:3000"
+# The full URL the wiki will be accessible from, including the protocol (e.g. https://localhost:3000)
+WG_SERVER="http://localhost:3000"
+# Discord Webhook URL
+DISCORD_WEBHOOK_URL=""
+
+
+# Local Configurations
+MARIADB_PASSWORD="local-maria-password" # This needs to match DB_PASSWORD
+MARIADB_NAME="local-maria-db" # This needs to match DB_NAME
+MARIADB_USER="local-maria-user" # This needs to match DB_USER
+MINIO_USER="local-minio-user" # This needs to match S3_ACCESS_KEY_ID
+MINIO_PASSWORD="local-minio-password" # This needs to match S3_SECRET_ACCESS_KEY

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @allthingslinux/wiki-admin

.github/workflows/lint-dockerfile.yml

@@ -0,0 +1,22 @@
+name: Lint Dockerfile
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**/Dockerfile*'
+
+jobs:
+  hadolint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Lint Dockerfile with hadolint
+        uses: hadolint/hadolint-action@v3.1.0
+        with:
+          dockerfile: Dockerfile
+          failure-threshold: error

.github/workflows/lint-php.yml

@@ -0,0 +1,60 @@
+name: Lint PHP
+
+on:
+  pull_request:
+    branches: [main]
+    paths:
+      - '**/*.php'
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  phpcs:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.head_ref }}
+
+      - name: Set up PHP
+        uses: shivammathur/setup-php@v2
+        with:
+          php-version: '8.3'
+          tools: phpcs, phpcbf
+
+      - name: Lint with PHPCS
+        id: phpcs
+        shell: bash
+        run: |
+          set +e
+          phpcs .
+          echo "exit_code=$?" >> "$GITHUB_OUTPUT"
+          set -e
+
+      - name: Auto fix with PHPCBF
+        if: steps.phpcs.outputs.exit_code != '0'
+        run: phpcbf .
+
+      - name: Commit fixes
+        if: steps.phpcs.outputs.exit_code != '0' && github.event.pull_request.head.repo.fork == false
+        shell: bash
+        run: |
+          if git diff --quiet; then
+            echo "PHPCBF ran but no changes were made."
+            exit 0
+          fi
+
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -m "Apply PHPCBF fixes"
+          git push
+
+      - name: Lint with PHPCS again
+        if: steps.phpcs.outputs.exit_code != '0'
+        run: phpcs .
+

.github/workflows/lint-python.yml

@@ -0,0 +1,26 @@
+name: Lint Python
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - '**.py'
+
+jobs:
+  pylint:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v5
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.x'
+
+    - name: Install dependencies
+      run: pip install pylint
+
+    - name: Run Pylint
+      run: pylint $(git ls-files '*.py')

.github/workflows/test-build.yml

@@ -0,0 +1,33 @@
+name: Docker Build Test
+
+on:
+  pull_request:
+    branches:
+      - main
+    paths:
+      - 'Dockerfile'
+      - 'wiki/**'
+
+jobs:
+  docker-build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build test image
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: ./Dockerfile
+          push: false
+          tags: test:latest
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          build-args: |
+            MEDIAWIKI_MAJOR_VERSION=1.44
+            MEDIAWIKI_VERSION=1.44.3
+            MEDIAWIKI_BRANCH=REL1_44
+            CITIZEN_VERSION=3.11.0

.gitignore

@@ -1,4 +1,7 @@
-vendor/
 .env
-compose.yaml
 composer.lock
+compose.yaml
+backups/
+database/
+images/
+vendor/

.hadolint.yaml

@@ -0,0 +1,3 @@
+---
+ignored:
+  - DL3018  # Pin versions in apk add