BabiSender at 08:22, 26 February 2026

2026-02-26T08:22:32Z

← Older revision		Revision as of 08:22, 26 February 2026
Line 251:		Line 251:
	----------------------------------------- */		----------------------------------------- */

	# ~~ANONYMOUS USERS (not logged in)~~		# Anonymous users
	$wgGroupPermissions['*']['read'] = true; ~~# Can view pages~~		$wgGroupPermissions['*']['read'] = true;
	$wgGroupPermissions['*']['edit'] = false; ~~# Cannot edit~~		$wgGroupPermissions['*']['edit'] = false;
	$wgGroupPermissions['*']['createaccount'] = false; ~~# Cannot create accounts~~		$wgGroupPermissions['*']['createaccount'] = false;

	# ~~LOGGED-IN USERS (default group)~~		# Disable public account creation
	$wgGroupPermissions['~~user~~']['~~read'] = true; # Can view pages~~		$wgGroupPermissions['*']['createaccount'] = false;
	~~$wgGroupPermissions['user']['edit~~'] = false; ~~# Cannot edit (read-only)~~

	# ~~EDITOR GROUP (must be assigned by admin)~~		# Allow bureaucrats/admins to create accounts
	$wgGroupPermissions['~~editor~~']['~~read~~'] = true; ~~# Can view pages~~		$wgGroupPermissions['bureaucrat']['createaccount'] = true;
	~~$wgGroupPermissions['editor']['edit'] = true; # Can edit pages~~
	~~$wgGroupPermissions['editor']['upload'] = true; # Can upload files~~
	~~$wgGroupPermissions['editor']['reupload'] = true; # Can replace existing files~~

	# ~~SYSOP GROUP~~ (~~administrators~~)		# Logged-in users (view only)
	$wgGroupPermissions['~~sysop~~']['read'] = true; ~~# Can view pages~~		$wgGroupPermissions['user']['read'] = true;
	$wgGroupPermissions['~~sysop~~']['edit'] = ~~true~~; ~~# Can edit pages~~		$wgGroupPermissions['user']['edit'] = false;
	~~$wgGroupPermissions['sysop']['protect'] = true; # Can protect pages~~
	~~$wgGroupPermissions['sysop']['userrights'] = true; # Can assign user groups~~

	# ~~Enable protection levels~~		# Editor group
	$~~wgRestrictionLevels~~[] = '~~user~~';		$wgGroupPermissions['editor']['read'] = true;
			$wgGroupPermissions['editor']['edit'] = true;
			$wgGroupPermissions['editor']['upload'] = true;
			$wgGroupPermissions['editor']['reupload'] = true;

			# Sysop (admin)
			$wgGroupPermissions['sysop']['read'] = true;
			$wgGroupPermissions['sysop']['edit'] = true;
			$wgGroupPermissions['sysop']['protect'] = true;
			$wgGroupPermissions['sysop']['userrights'] = true;
			$wgGroupPermissions['sysop']['createaccount'] = true;
	</syntaxhighlight>		</syntaxhighlight>

BabiSender: Created page with "== MediaWiki Additional Configuration Guide ==
'''''This guide covers advanced configuration options for your MediaWiki installation, including logos, permissions, email, private namespaces, and two-factor authentication.'''''
'''Prerequisites:''' Complete the '''MediaWiki Docker Setup Guide''' before proceeding with..."

2026-02-12T06:14:48Z

Created page with "== MediaWiki Additional Configuration Guide == <div style="font-size: 100%;"> '''''This guide covers advanced configuration options for your MediaWiki installation, including logos, permissions, email, private namespaces, and two-factor authentication.''''' <div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;"> '''Prerequisites:''' Complete the '''MediaWiki Docker Setup Guide''' before proceeding with..."

New page

== MediaWiki Additional Configuration Guide ==

<div style="font-size: 100%;">
'''''This guide covers advanced configuration options for your MediaWiki installation, including logos, permissions, email, private namespaces, and two-factor authentication.'''''

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Prerequisites:''' Complete the '''[[MediaWiki Docker Setup Guide]]''' before proceeding with this configuration.
</div>

== Advanced Configuration ==

=== Part 1: Customizing Your Wiki's Appearance ===

'''1. Upload Your Logo Files'''

Before configuring logos, you need to upload your logo images to the wiki's images folder.

'''Step A: Prepare Your Logo Files'''

Create logo images in these sizes:
* '''Small logo (50x50 pixels):''' For favicon and small displays - save as <code>yourlogo-50.svg</code> or <code>yourlogo-50.png</code>
* '''Large logo (160x160 pixels):''' For the main wiki logo - save as <code>yourlogo-160.svg</code> or <code>yourlogo-160.png</code>

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Tip:''' SVG format is recommended because it scales cleanly at any size. PNG is also acceptable.
</div>

'''Step B: Copy Logo Files to the Server'''

First, you need to upload files to the Docker volume:

<syntaxhighlight lang="bash" style="font-size: 85%;">
# Create a temporary container to access the images volume
docker run -d --name temp-mediawiki \
-v 230912_images:/var/www/html/images \
mediawiki sleep 3600

# Copy your logo files into the container
docker cp ~/Downloads/yourlogo-50.svg temp-mediawiki:/var/www/html/images/
docker cp ~/Downloads/yourlogo-160.svg temp-mediawiki:/var/www/html/images/

# Fix permissions
docker exec temp-mediawiki chown 33:33 /var/www/html/images/yourlogo-50.svg
docker exec temp-mediawiki chown 33:33 /var/www/html/images/yourlogo-160.svg

# Remove the temporary container
docker stop temp-mediawiki
docker rm temp-mediawiki
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Note:''' Replace <code>yourlogo-50.svg</code> and <code>yourlogo-160.svg</code> with your actual filename. Adjust the path <code>~/Downloads/</code> if your files are saved elsewhere.
</div>

'''2. Configure Logo and Favicon in LocalSettings.php'''

Open your LocalSettings.php file:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Find the existing <code>$wgLogos</code> section (it looks like this):

<syntaxhighlight lang="php" style="font-size: 85%;">
$wgLogos = [
'1x' => "$wgResourceBasePath/resources/assets/change-your-logo.svg",
'icon' => "$wgResourceBasePath/resources/assets/change-your-logo.svg",
];
</syntaxhighlight>

Replace it with:

<syntaxhighlight lang="php" style="font-size: 85%;">
$wgLogos = [
'1x' => "$wgResourceBasePath/images/yourlogo-160.svg",
'icon' => "$wgResourceBasePath/images/yourlogo-50.svg",
];

$wgFavicon = "$wgResourceBasePath/images/yourlogo-50.svg";
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''What this does:'''
* <code>'1x'</code> sets your main wiki logo (shown in the corner)
* <code>'icon'</code> sets the smaller icon version
* <code>$wgFavicon</code> sets the browser tab icon
</div>

Save and exit.

=== Part 2: Customizing the Wiki Skin (Theme) ===

'''3. Configure the Modern Vector Skin'''

MediaWiki comes with several "skins" (visual themes). The Vector skin has a modern version called <code>vector-2022</code>.

Open LocalSettings.php again:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Find this line near the bottom:

<syntaxhighlight lang="php" style="font-size: 85%;">
$wgDefaultSkin = "monobook";
</syntaxhighlight>

Replace it with this configuration block:

<syntaxhighlight lang="php" style="font-size: 85%;">
# Use the modern Vector 2022 skin by default
$wgDefaultSkin = "vector-2022";

# Make existing users see the new skin too
$wgVectorDefaultSkinVersionForExistingAccounts = "2";

# Make the skin work well on mobile devices
$wgVectorResponsive = true;

# Enable appearance customization options for users
$wgVectorFeatureFlags = [
'VectorAppearance' => [
'logged_in' => true,
'logged_out' => true,
],
];
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''What this does:'''
* Sets the modern Vector skin as default
* Makes it responsive for mobile/tablet viewing
* Allows users to customize appearance settings
</div>

Save and exit.

=== Part 3: Setting Up Email and SMTP ===

This allows your wiki to send password reset emails, notifications, and user-to-user messages.

'''4. Configure Email Settings'''

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Important:''' This example uses Gmail. If using another email provider, you'll need their SMTP settings.
</div>

'''Step A: Generate a Gmail App Password'''

If using Gmail, you need an "App Password" (regular passwords won't work):

# Go to your Google Account: https://myaccount.google.com/
# Click '''Security''' in the left sidebar
# Scroll to "How you sign in to Google"
# Click '''2-Step Verification''' (you must enable this first)
# Scroll down and click '''App passwords'''
# Select '''Mail''' and '''Other (Custom name)'''
# Type "MediaWiki" as the name
# Click '''Generate'''
# Copy the 16-character password (it looks like: <code>abcd efgh ijkl mnop</code>)

'''Step B: Add Email Configuration to LocalSettings.php'''

Open LocalSettings.php:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Scroll to the bottom (after the extensions section) and add:

<syntaxhighlight lang="php" style="font-size: 85%;">
/*-------------------------------------------
EMAIL & SMTP CONFIGURATION
----------------------------------------- */

# Enable email features
$wgEnableEmail = true;
$wgEnableUserEmail = true;
$wgEmailAuthentication = true;

# Enable email notifications for talk pages and watchlist
$wgEnotifUserTalk = true;
$wgEnotifWatchlist = true;

# Set your wiki's email addresses
$wgEmergencyContact = "your-email@gmail.com";
$wgPasswordSender = "your-email@gmail.com";

# Gmail SMTP configuration
$wgSMTP = [
'host' => 'smtp.gmail.com',
'IDHost' => 'yourdomain.com', # Your domain (or 'gmail.com' for testing)
'port' => 587,
'auth' => true,
'username' => 'your-email@gmail.com', # Your Gmail address
'password' => 'your app password here', # Paste your 16-character App Password
'secure' => 'tls'
];

# Email settings
$wgUserEmailUseReplyTo = true;
$wgAllowHTMLEmail = true;

# Enable password reset via email
$wgPasswordResetRoutes = [
'username' => true,
'email' => true,
];

# Password reset links expire after 24 hours
$wgNewPasswordExpiry = 86400;
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Replace these values:'''
* <code>your-email@gmail.com</code> → Your actual Gmail address
* <code>your app password here</code> → The 16-character password from Step A (remove spaces)
* <code>yourdomain.com</code> → Your wiki's domain name
</div>

Save and exit.

=== Part 4: Permission System (Who Can Do What) ===

'''5. Create a Clean Permission Structure'''

By default, MediaWiki allows anyone to edit. Let's create a more controlled system with different user levels.

Open LocalSettings.php:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Find the existing permissions section in your CUSTOM PERMISSIONS & EXTENSIONS block:

<syntaxhighlight lang="php" style="font-size: 85%;">
// 1. SECURITY: Prevent anonymous editing and account creation
$wgGroupPermissions['*']['edit'] = false;
$wgGroupPermissions['*']['createaccount'] = false;
</syntaxhighlight>

Replace it with this expanded permission system:

<syntaxhighlight lang="php" style="font-size: 85%;">
/*-------------------------------------------
CLEAN PERMISSION SYSTEM
----------------------------------------- */

# ANONYMOUS USERS (not logged in)
$wgGroupPermissions['*']['read'] = true; # Can view pages
$wgGroupPermissions['*']['edit'] = false; # Cannot edit
$wgGroupPermissions['*']['createaccount'] = false; # Cannot create accounts

# LOGGED-IN USERS (default group)
$wgGroupPermissions['user']['read'] = true; # Can view pages
$wgGroupPermissions['user']['edit'] = false; # Cannot edit (read-only)

# EDITOR GROUP (must be assigned by admin)
$wgGroupPermissions['editor']['read'] = true; # Can view pages
$wgGroupPermissions['editor']['edit'] = true; # Can edit pages
$wgGroupPermissions['editor']['upload'] = true; # Can upload files
$wgGroupPermissions['editor']['reupload'] = true; # Can replace existing files

# SYSOP GROUP (administrators)
$wgGroupPermissions['sysop']['read'] = true; # Can view pages
$wgGroupPermissions['sysop']['edit'] = true; # Can edit pages
$wgGroupPermissions['sysop']['protect'] = true; # Can protect pages
$wgGroupPermissions['sysop']['userrights'] = true; # Can assign user groups

# Enable protection levels
$wgRestrictionLevels[] = 'user';
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''What this permission structure means:'''
* '''Anonymous visitors:''' Can only read pages
* '''Logged-in users:''' Can only read pages (no editing)
* '''Editors:''' Can read, edit, and upload files (assigned by admins)
* '''Sysops (Admins):''' Full control over the wiki
</div>

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''How to assign the Editor role:'''

After restarting your wiki, log in as an admin and go to:
* '''Special:UserRights''' (or click '''Special Pages''' → '''User rights management''')
* Enter a username
* Check the '''editor''' box
* Click '''Save user groups'''
</div>

Save and exit.

=== Part 5: Creating a Private Namespace ===

Private namespaces let you create pages that only certain user groups can see. This is useful for internal documentation, confidential information, or drafts.

'''6. Configure the Private Namespace'''

The Lockdown extension should already be installed from the basic setup. Now let's configure it.

Open LocalSettings.php:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Add this section after your extensions (near the bottom of the CUSTOM PERMISSIONS & EXTENSIONS block):

<syntaxhighlight lang="php" style="font-size: 85%;">
/*-------------------------------------------
PRIVATE NAMESPACE (RESTRICTED ACCESS)
----------------------------------------- */

# Load the Lockdown extension
wfLoadExtension( 'Lockdown' );

# Define namespace IDs (must be unique)
define("NS_PRIVATE", 3000);
define("NS_PRIVATE_TALK", 3001);

# Register the namespace names
$wgExtraNamespaces[NS_PRIVATE] = "Private";
$wgExtraNamespaces[NS_PRIVATE_TALK] = "Private_talk";

# Set permissions for the Private namespace
# Only logged-in users, editors, and admins can READ
$wgNamespacePermissionLockdown[NS_PRIVATE]['read'] = ['user', 'editor', 'sysop'];

# Only editors and admins can EDIT
$wgNamespacePermissionLockdown[NS_PRIVATE]['edit'] = ['editor', 'sysop'];
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''How to use the Private namespace:'''

To create a private page, use this format in the URL or search:
* <code>Private:YourPageName</code>

Example: <code>Private:Company_Policies</code>

Anonymous users and non-logged-in visitors will get an access denied message.
</div>

Save and exit.

=== Part 6: Additional Recommended Extensions ===

These extensions add useful features for a professional wiki.

'''7. Enable Additional Extensions'''

Open LocalSettings.php:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Find your EXTERNAL EXTENSIONS section and expand it with these additional extensions:

<syntaxhighlight lang="php" style="font-size: 85%;">
// 3. EXTERNAL EXTENSIONS
wfLoadExtension( 'Mermaid' );

/*-------------------------------------------
ADDITIONAL RECOMMENDED EXTENSIONS
----------------------------------------- */

# Content organization
wfLoadExtension( 'CategoryTree' ); # Browse categories as tree structure
wfLoadExtension( 'ImageMap' ); # Clickable image regions

# User experience
wfLoadExtension( 'Echo' ); # Notification system
wfLoadExtension( 'Thanks' ); # Thank users for edits
wfLoadExtension( 'DiscussionTools' ); # Better talk page discussions

# Content features
wfLoadExtension( 'TemplateData' ); # Document templates
wfLoadExtension( 'TemplateStyles' ); # CSS styling for templates
wfLoadExtension( 'Poem' ); # Format poetry and verse

# File handling
wfLoadExtension( 'PdfHandler' ); # Display PDF thumbnails
wfLoadExtension( 'MultimediaViewer' ); # Better image viewing

# Moderation & security
wfLoadExtension( 'ConfirmEdit' ); # CAPTCHA for spam prevention
wfLoadExtension( 'SpamBlacklist' ); # Block spam URLs
wfLoadExtension( 'TitleBlacklist' ); # Block page title patterns
wfLoadExtension( 'CiteThisPage' ); # Citation tools
</syntaxhighlight>

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Note:''' Some of these extensions may already be included in your MediaWiki installation. If you get an error about a missing extension after restarting, simply comment out that line by adding <code>#</code> at the beginning or remove it entirely.
</div>

Save and exit.

=== Part 7: Enable File Uploads ===

'''8. Configure Upload Settings'''

Open LocalSettings.php:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Find the line with <code>$wgEnableUploads</code> and update the upload settings:

<syntaxhighlight lang="php" style="font-size: 85%;">
# Enable file uploads
$wgEnableUploads = true;
$wgUseImageMagick = true;
$wgImageMagickConvertCommand = "/usr/bin/convert";
$wgUseInstantCommons = false;

# Allow these file types to be uploaded
$wgFileExtensions = ['png','gif','jpg','jpeg','webp','svg','pdf','doc','docx','xls','xlsx'];

# Allow SVG files with embedded titles
$wgAllowTitleInSVG = true;
$wgSVGConverter = 'ImageMagick';
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Note:''' You can add or remove file extensions based on your needs. Be cautious about allowing executable files or scripts.
</div>

Save and exit.

=== Part 8: Two-Factor Authentication for Administrators ===

Add an extra layer of security by requiring administrators to use two-factor authentication.

'''9. Install the OATHAuth Extension'''

First, check if the extension already exists:

<syntaxhighlight lang="bash" style="font-size: 85%;">
ls /opt/stacks/mediawiki/extensions/ | grep -i oath
</syntaxhighlight>

If you don't see <code>OATHAuth</code>, install it:

<syntaxhighlight lang="bash" style="font-size: 85%;">
cd /opt/stacks/mediawiki/extensions
git clone https://gerrit.wikimedia.org/r/mediawiki/extensions/OATHAuth.git
sudo chown -R 33:33 OATHAuth
</syntaxhighlight>

'''10. Configure OATHAuth for Admins Only'''

Open LocalSettings.php:

<syntaxhighlight lang="bash" style="font-size: 85%;">
sudo nano /opt/stacks/mediawiki/LocalSettings.php
</syntaxhighlight>

Add this configuration after your extensions:

<syntaxhighlight lang="php" style="font-size: 85%;">
/*-------------------------------------------
TWO-FACTOR AUTHENTICATION (ADMINS ONLY)
----------------------------------------- */

# Load the OATHAuth extension
wfLoadExtension( 'OATHAuth' );

# REQUIRE 2FA for administrators (sysops) only
$wgOATHRequiredForGroups = ['sysop'];

# Optional: Also require 2FA for bureaucrats if you have this group
# $wgOATHRequiredForGroups = ['sysop', 'bureaucrat'];

# Allow TOTP (Time-based One-Time Password) - works with Google Authenticator, Authy, etc.
$wgOATHAuthModules = [
'totp' => [
'class' => 'MediaWiki\\Extension\\OATHAuth\\Module\\TOTP',
],
];
</syntaxhighlight>

<div style="background-color: #f8f9fa; border-left: 4px solid #3498db; padding: 12px; margin: 15px 0; font-size: 90%;">
'''What this does:'''
* Loads the OATHAuth extension
* '''Requires''' 2FA only for users in the 'sysop' (administrator) group
* Regular users and editors do NOT need 2FA
* Uses TOTP method (compatible with most authenticator apps)
</div>

Save and exit.

=== Part 9: Apply All Changes ===

'''11. Update the Database and Restart'''

After making all these configuration changes, update your database and restart the containers:

<syntaxhighlight lang="bash" style="font-size: 85%;">
# Update database to recognize new extensions and namespaces
docker exec -it mediawiki php maintenance/update.php --quick

# Restart MediaWiki to apply all changes
cd /opt/stacks/mediawiki
docker compose restart
</syntaxhighlight>

Wait about 30 seconds for the containers to fully restart.

== Setting Up Two-Factor Authentication ==

'''12. Set Up 2FA for Administrator Accounts'''

Now each administrator needs to enable 2FA on their account.

'''Step A: Install an Authenticator App (If Not Already Installed)'''

On your phone or tablet, install one of these apps:
* '''Google Authenticator''' (iOS/Android)
* '''Microsoft Authenticator''' (iOS/Android)
* '''Authy''' (iOS/Android)
* '''1Password''' (if you use a password manager)

'''Step B: Enable 2FA on Your Admin Account'''

# Log in to MediaWiki as an administrator
# Click on your username in the top-right corner
# Click '''Preferences'''
# Click the '''Two-factor authentication''' tab (or '''OATH''' tab)
# Click '''Enable two-factor authentication'''
# You'll see a QR code on the screen

'''Step C: Scan the QR Code'''

# Open your authenticator app on your phone
# Tap the "+" or "Add account" button
# Scan the QR code shown on your screen
# The app will add an entry like "MediaWiki - YourUsername"
# You'll see a 6-digit code that changes every 30 seconds

'''Step D: Verify the Setup'''

# Enter the 6-digit code from your authenticator app into the MediaWiki form
# You'll also see '''scratch codes''' (recovery codes) - SAVE THESE SAFELY!
# Click '''Confirm''' or '''Enable'''

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''CRITICAL - Save Your Recovery Codes!'''

Write down or securely save your recovery codes (also called scratch codes). If you lose access to your phone, these codes are the ONLY way to regain access to your account. Store them in a safe place like:
* A password manager
* A secure note app
* Printed on paper in a safe location

Each recovery code can only be used once.
</div>

'''13. Test Two-Factor Authentication'''

'''Log out and log back in''' to verify 2FA is working:

# Log out of your MediaWiki account
# Log back in with your username and password
# You'll now see a new screen asking for a '''Two-factor authentication token'''
# Open your authenticator app
# Enter the current 6-digit code
# Click '''Continue''' or '''Log in'''

You should now be logged in successfully!

== Verification Checklist ==

'''14. Test Your Configuration'''

Visit your wiki and verify these features are working:

* '''Logo:''' Your custom logo appears in the top-left corner and as the favicon

* '''Skin:''' The modern Vector 2022 skin is active

* '''Permissions:'''
# Log out and confirm you can only read pages
# Log in as a regular user and confirm you cannot edit
# Log in as admin and assign the "editor" role to a test user via '''Special:UserRights'''
# Confirm the editor can now edit pages

* '''Email:'''
# Click "Forgot password?" on the login page
# Enter your username or email
# Check that you receive the reset email

* '''Private Namespace:'''
# Create a page like <code>Private:Test</code>
# Log out and confirm anonymous users cannot access it
# Log in as a regular user and confirm you can view it
# Check that only editors and admins can edit it

* '''File Uploads:'''
# Log in as an editor or admin
# Go to '''Special:Upload'''
# Try uploading an image file
# Verify it appears on the page

* '''Two-Factor Authentication:'''
# Verify all admins have set up 2FA
# Test login process with 2FA code
# Verify recovery codes are saved securely

== Managing Two-Factor Authentication ==

'''If an Admin Loses Access to Their Phone:'''

They can use one of their recovery codes instead of the authenticator code:
# At the 2FA prompt, enter one of the saved recovery codes
# Once logged in, immediately go to '''Preferences''' → '''Two-factor authentication'''
# Disable 2FA, then re-enable it with a new QR code
# Generate new recovery codes

'''If Recovery Codes Are Also Lost:'''

Another administrator needs to disable 2FA for that account:

<syntaxhighlight lang="bash" style="font-size: 85%;">
# Run this command to disable 2FA for a specific user
docker exec -it mediawiki php maintenance/run.php OATHAuth:deleteUser --user="USERNAME"
</syntaxhighlight>

Replace <code>USERNAME</code> with the actual username.

<div style="background-color: #fff3cd; border-left: 4px solid #ffc107; padding: 12px; margin: 15px 0; font-size: 90%;">
'''Security Tip:''' Create at least two administrator accounts so one admin can help recover another's account if needed.
</div>

== Troubleshooting ==

'''Email not sending?'''
* Verify your Gmail App Password is correct (16 characters, no spaces)
* Check that 2-Step Verification is enabled on your Google account
* Look at container logs: <code>docker compose logs -f mediawiki</code>

'''Logo not appearing?'''
* Verify files were copied correctly: <code>docker exec mediawiki ls -la /var/www/html/images/</code>
* Hard refresh your browser: <code>Ctrl + Shift + R</code> (Windows/Linux) or <code>Cmd + Shift + R</code> (Mac)
* Check the exact filenames in LocalSettings.php match the uploaded files

'''Private namespace not working?'''
* Ensure Lockdown extension is installed: <code>ls /opt/stacks/mediawiki/extensions/Lockdown</code>
* Run database update: <code>docker exec -it mediawiki php maintenance/update.php --quick</code>
* Restart containers: <code>docker compose restart</code>

'''2FA prompt not appearing for admins:'''
* Verify the configuration in LocalSettings.php
* Check that database update ran successfully: <code>docker exec -it mediawiki php maintenance/update.php</code>
* Restart containers: <code>docker compose restart</code>
* Clear your browser cache and try again

'''QR code not displaying:'''
* Check container logs: <code>docker compose logs -f mediawiki</code>
* Verify OATHAuth extension is installed: <code>ls /opt/stacks/mediawiki/extensions/OATHAuth</code>

'''Authenticator codes not working:'''
* Verify your phone's time is set to automatic (not manual)
* Time synchronization is critical for TOTP to work
* Try syncing time in your authenticator app settings

== Maintenance Tasks ==

'''Regular Backups'''

Create a backup script for your wiki:

<syntaxhighlight lang="bash" style="font-size: 85%;">
#!/bin/bash
# Save as /opt/scripts/backup-mediawiki.sh

BACKUP_DIR="/opt/backups/mediawiki"
DATE=$(date +%Y%m%d_%H%M%S)

mkdir -p $BACKUP_DIR

# Backup database
docker exec mediawiki-db mysqldump -u root -pyour_root_password my_wiki > $BACKUP_DIR/db_$DATE.sql

# Backup LocalSettings.php
cp /opt/stacks/mediawiki/LocalSettings.php $BACKUP_DIR/LocalSettings_$DATE.php

# Backup images (use docker volume backup)
docker run --rm -v 230912_images:/data -v $BACKUP_DIR:/backup alpine tar czf /backup/images_$DATE.tar.gz -C /data .

echo "Backup completed: $DATE"
</syntaxhighlight>

'''Updating MediaWiki'''

When a new version is released:

<syntaxhighlight lang="bash" style="font-size: 85%;">
# Pull the latest MediaWiki image
docker pull mediawiki:latest

# Restart with the new image
cd /opt/stacks/mediawiki
docker compose down
docker compose up -d

# Update the database schema
docker exec -it mediawiki php maintenance/update.php

# Clear the cache
docker exec -it mediawiki php maintenance/rebuildLocalisationCache.php
</syntaxhighlight>

== Summary ==

You've successfully configured advanced features for your MediaWiki installation:

✓ Custom logos and modern Vector 2022 theme
<br>
✓ Email notifications via SMTP (Gmail)
<br>
✓ Multi-level permission system (Anonymous, User, Editor, Sysop)
<br>
✓ Private namespace for confidential content
<br>
✓ Additional professional extensions
<br>
✓ File upload capabilities
<br>
✓ Two-factor authentication for administrators
<br>
✓ Enhanced security hardening

'''''Your MediaWiki installation is now fully configured and production-ready!'''''

== Next Steps ==

Your wiki is now fully configured! You can:

* Create user accounts and assign roles via '''Special:UserRights'''
* Start creating content in the main namespace
* Create private documentation in the <code>Private:</code> namespace
* Customize the main page by editing '''MediaWiki:Mainpage'''
* Explore '''Special:SpecialPages''' to discover all available features
* Set up automatic backups (see Maintenance Tasks above)
* Configure SSL/HTTPS if not already done
* Install additional extensions from https://www.mediawiki.org/wiki/Category:Extensions

For additional help, visit the official MediaWiki documentation at https://www.mediawiki.org/

Mediawiki Additional Configuration - Revision history

Dani at 00:33, 5 March 2026

Dani at 00:25, 5 March 2026

BabiSender at 08:22, 26 February 2026

BabiSender at 06:37, 12 February 2026

BabiSender at 06:33, 12 February 2026

← Older revision		Revision as of 00:33, 5 March 2026
Line 283:		Line 283:

	After restarting your wiki, log in as an admin and go to:		After restarting your wiki, log in as an admin and go to:
	* '''Special:UserRights''' (or click '''Special Pages''' → '''User rights ~~management~~''')		* '''Special:UserRights''' (or click '''Special Pages''' → '''User and rights section''')
	* Enter a username		* Enter a username
	* Check the '''editor''' box		* Check the '''editor''' box

← Older revision		Revision as of 06:37, 12 February 2026
Line 752:		Line 752:
	* Install additional extensions from https://www.mediawiki.org/wiki/Category:Extensions		* Install additional extensions from https://www.mediawiki.org/wiki/Category:Extensions

	For additional help, visit the official MediaWiki documentation at https://www.mediawiki.org/		'''''For additional help, visit the official MediaWiki documentation at''''' https://www.mediawiki.org/

← Older revision		Revision as of 06:33, 12 February 2026
Line 534:		Line 534:
	# Click '''Preferences'''		# Click '''Preferences'''
	# Click the '''Two-factor authentication''' tab (or '''OATH''' tab)		# Click the '''Two-factor authentication''' tab (or '''OATH''' tab)
	# Click '''~~Enable two-factor authentication~~'''		# Click '''Manage''' and '''Add an authenticator app'''
	# You'll see a QR code on the screen		# You'll see a QR code on the screen