infrastructure

commit 532cd73ba7012b920a8e4380b8f10164a89467fa
parent 0482b64399060159a9f8ad732c89c51cfa38d395
Author: Silas Brack <silasbrack@gmail.com>
Date:   Fri,  3 Apr 2026 14:29:30 +0200

feat: disable anonymous reading on MediaWiki

Require users to log in before viewing wiki content.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Diffstat:
M
nixos/configuration-debian-2gb-hel1-1.nix
 | 
3
+++

1 file changed, 3 insertions(+), 0 deletions(-)
diff --git a/nixos/configuration-debian-2gb-hel1-1.nix b/nixos/configuration-debian-2gb-hel1-1.nix
@@ -178,6 +178,9 @@
       $wgEnableUploads = true;
       $wgUseImageMagick = true;
 
+      # Security: disable reading by anonymous users
+      $wgGroupPermissions['*']['read'] = false;
+
       # Security: disable anonymous editing (require login)
       $wgGroupPermissions['*']['edit'] = false;
       $wgGroupPermissions['*']['createpage'] = false;