View source for Web Infrastructure

Some documentation on MuMaLab's web infrastructure stuff.

== Current Tasks ==
Checkout: [[Working Group IT]]

== Hosts ==
We are runnig our webinfrastructure on Hetzner:

* saturn.munichmakerlab.de

=== Saturn ===

* docker containers are started via systemd or via docker compose (configs in /data/ path) => target everything with docker compose with separated /data/ and /config/ folder.
* cronjob added for cleanup of old docker images
* docker deamon resource limit via systemd slice (/etc/systemd/system/docker.slice)
* Firewall: ufw => check via ''sudo ufw status verbose'' (does not include docker. This would need addtional hacks like [https://github.com/chaifeng/ufw-docker this], but it had no benefits so far with the reverse proxy we already use)

== Services ==

{| class="wikitable sortable"
! Service Name !! Hostname 
!Functionality!! Server !! native/docker !! status
!Source
|-
|Service Up Check
|UpTimeDashboard: https://stats.uptimerobot.com/RB3yLiI0HC
|Checks from external, if our services are reachable. Login via monitoring Email Account
=> alerts are routed to #'''infrasctructure_alerts in Slack'''
|uptimerobot.com
| -
|productive
|
|-
|Anubis
|anubis.munichmakerlab.de
|Anti Bot Protection mainly for wiki.
Docs Policies: https://github.com/TecharoHQ/anubis/blob/main/data/botPolicies.yaml
|saturn
|docker
|test
|https://anubis.techaro.lol/
|-
| Website || [https://www.munichmakerlab.de www.munichmakerlab.de] 
|Just Website, compare Github for details|| saturn || docker || productive
|[https://github.com/munichmakerlab/website Github Website]
|-
| Wiki || [https://wiki.munichmakerlab.de wiki.munichmakerlab.de] 
|Media wiki for knowledge sharing and documentation|| saturn || docker || productive
|
|-
| Nodered || [https://nodered.munichmakerlab.de nodered.munichmakerlab.de]
Admin: https://nodered.munichmakerlab.de/admin/
|Automation like spacestatus, Slack Bots etc.
Login via Github Org. Config in settings.js
| saturn || docker || productive
|[https://hub.docker.com/r/nodered/node-red Node-RED]
|-
| Log || [https://log.munichmakerlab.de log.munichmakerlab.de] 
|Blog - only Archive, since we switched to mastodon as "blog" and link it to our website. || Tumblr || - || only archive function
|
|-
| Etherpad || [https://pad.munichmakerlab.de pad.munichmakerlab.de] 
|Colaboration text tool|| saturn||docker||productive
|Latest version: [https://github.com/ether/etherpad-lite ether/etherpad-lite]
|-
| Mailinglisten||[https://lists.munichmakerlab.de lists.munichmakerlab.de]
|Mailman 3||in-berlin.de||-||productive
|
|-
|Mail
|@munichmakerlab.de
|Mailserver

|in-berlin.de
| -
|productive
|
|-
|<s>Roombooking</s>
|[https://rooms.munichmakerlab.de <s>rooms.munichmakerlab.de</s>]
|<s>Original for reserving rooms during covid</s>||<s>jupiter</s>||<s>docker</s>||<s>deactivated</s>
|[https://github.com/LibreBooking/app <s>BookedSchedular</s>]
|-
| Slack Inviter||[https://chat.munichmakerlab.de chat.munichmakerlab.de] or [https://slack.munichmakerlab.de slack.munichmakerlab.de]
|Self invite capability for our slack||saturn||docker ||productive
|[https://github.com/rauchg/slackin rauchg/slackin]
|-
|Space Status
|[https://status.munichmakerlab.de status.munichmakerlab.de]
|Button in the lab to mark space as open/closed on slack/homepage||saturn||docker||productive
|[https://github.com/munichmakerlab/spacestatus Github Spacestatus]
|-
|Eclipse Mosquitto (MQTT)||[https://mqtt.munichmakerlab.de mqtt.munichmakerlab.de]
|MQTT to use for other servicesservices like status etc. Compare [[MuMaBus]]||saturn||docker||productive
|[https://hub.docker.com/_/eclipse-mosquitto Eclipse Mosquitto]
|-
|Nextcloud||[https://nextcloud.munichmakerlab.de nextcloud.munichmakerlab.de]
|Document sharing, calendar||saturn||docker||experimental
|
|-
|Traefik Reverseproxy Dashboard||http://traefik.munichmakerlab.de/dashboard/
or
http://traefik.munichmakerlab.de/api/
|Dashboard of Reverse proxy for other services||saturn||docker||productive
|
|-
|Authentik/Keyloak SSO
|sso.munichmakerlab.de
|SSO for other services
|saturn
|docker
|experimental
|https://github.com/goauthentik/authentik
|-
|<s>Tickets (old)</s>
|<s>tickets.mumalab.org</s>
|<s>Ticket system for workshops and events</s>
|<s>German</s>
| <s>-</s>
|<s>productive</s>
|<s>https://github.com/pretix/pretix</s>
|-
|Tickets
|tickets.munichmakerlab.de
Admin: https://tickets.munichmakerlab.de/control/
|Ticket system for workshops and events
|saturn
|docker
|experimental
|https://github.com/pretix/pretix
|-
|Wiki Staging
|wiki-staging.munichmakerlab.de
|Wiki for testing (temporary)
|saturn
|docker
|Todo
|
|-
|Influx DB
|influxdb.munichmakerlab.de
|DB for particles sensor (temporary)
|saturn
|docker
|experimental
|https://hub.docker.com/_/influxdb
|-
|ToolJet
|tooljet.munichmakerlab.de
|Store member and token, who has which safety course. 
More Details: [[OpenUnitState]]
|saturn
|docker
|productive
|https://github.com/ToolJet/ToolJet
|-
|Grafana
|monitoring.munichmakerlab.de
|Grafana Dashboard for metrics and logs
=> alerts are routed to #'''infrasctructure_alerts in Slack'''
|saturn
|docker
|productive
|
|-
|Prometheus
|metrics.munichmakerlab.de
|Prometheus Metrics Endpoint. Exposed via Traefik for debugging purpose. Basic Auth
|saturn
|docker
|productive
|
|-
|<s>Calender</s>
|<s>calendar.munichmakerlab.de</s>
|<s>Widget for showing our multiple calenders</s>
|<s>saturn</s>
|<s>docker</s>
|<s>Todo</s>
|<s>https://hub.docker.com/r/niccokunzmann/open-web-calendar</s>
<s>https://github.com/niccokunzmann/open-web-calendar?tab=readme-ov-file</s>
|}

=== E-Mail and Maillinglists ===
We have an external Mailing-provider: in-berlin.de

This non-profit provider offers also managed Mailman3 for maillinglists. 

More details can be found in slack #infrastructure (Mailing Provider)

=== SSO ===
Single Sign on with Authentik

Groups:

!to be done
{| class="wikitable"
|+
!Group
!Access to
!Details
|-
|Member
|
|
|-
|IT
|
|
|-
|
|
|
|}

=== Influxdbv2 ===
For storing data from sensors. Mostly for fun and testing purpose. 


Data come from: 
{| class="wikitable"
|+
!Source
!Bucket
!User
!Tags
|-
|[[Airrohr-NG]]
|lab-environment-data
|airrohr-service-user
|
|-
|Node-Red - Spacestatus
|lab-environment-data
|Lab Status API Token
|
|-
|
|
|
|
|}

===Website===
Static website at https://munichmakerlab.de deployed via Github Actions

===Wiki===
MediaWiki at https://wiki.munichmakerlab.de/

==== Links ====

* MediaWiki book: https://workingwithmediawiki.com/book/ (really good resource for managing media wiki)

==== Details ====
[[MediaWiki HowTo]]

==== Plugins and special configurations ====
{| class="wikitable"
|+
!Extension
!Reason
!Details
!
|-
|https://www.mediawiki.org/wiki/Extension:CrawlerProtection
|Wiki was overloaded from crawlers
|"Expensive" pages to load are only accessible after login
|
|-
|https://www.mediawiki.org/wiki/Extension:ConfirmAccount
|Protect us from spam account requests
|
|
|-
|
|
|
|
|}

====Maintenance====
Deprecated (confirm account requests tool now active): We had a bit of a spam problem in the past, easiest way to fix it currently is to clean them up in the database directly.
<pre>
update mw_account_requests set acr_rejected = DATE_FORMAT(NOW(),"%Y%m%d%H%i%S"), acr_user = 1, acr_comment = "Spam, no confirmed mail address", acr_deleted = 1 where acr_email_authenticated is null and acr_rejected is null and acr_registration < now() - interval 7 day;

update mw_account_requests set acr_rejected = DATE_FORMAT(NOW(),"%Y%m%d%H%i%S"), acr_user = 1, acr_comment = "Spam", acr_deleted = 1 where acr_rejected is null and acr_registration < now() - interval 7 day;

update mw_account_requests set acr_rejected = DATE_FORMAT(NOW(),"%Y%m%d%H%i%S"), acr_user = 1, acr_comment = "Spam", acr_deleted = 1 where acr_rejected is null;
</pre>

=== Calender flow ===
<syntaxhighlight lang="text">1.Website                                                                                                               
                                                                                                                        
Pretix Ticket System + Google/Nextcloud Calendar     ──►  Website Calendar: Component shows different iCAL/CalDav                     
                                                                                                                                                                                                
                                                                                                                      
2.SlackBot                                                                                                              
                                                                                                                        
Pretix Ticket System + Google/Nextcloud Calendar   ─► Severins Calendar connector (uses iCAL/CalDav): https://calendar.munichmakes.de/  ──► Slackbot</syntaxhighlight>

===Status===
Space status at https://status.munichmakerlab.de

[[File:Status-Logic.png|none|thumb|700x700px]]
[https://wiki.munichmakerlab.de/wiki/File:MuMaLab-Status-Logic.drawio Draw.io File]

===MuMaBus===
Space Automation, see [[MuMaBus]] for details
*MQTT at saturn.munichmakerlab.de

===Slack ===
Chat, with bridge to IRC
*Application in itself  is SaaS. Check for contact person: [[List of Contacts]]
* <s>IRC bridge is powered by [https://github.com/munichmakerlab/RelayBot RelayBot], hosted on ???</s>

===Additional Services===
*[https://munichmakerlab.de/calendar Calendar]
[[Category:Infrastructure]]