CHG-2018-02-05 migrate osemain to hetzner2 - Revision history

Maltfield: Undo revision 302352 by Maltfield (talk)

2024-12-11T21:59:49Z

Undo revision 302352 by Maltfield (talk)

← Older revision		Revision as of 21:59, 11 December 2024
Line 61:		Line 61:
	# entirely migrate the 'osemain' wordpress site from hetzner1 (shared hosting) to hetzner2 (dedicated hosting)		# entirely migrate the 'osemain' wordpress site from hetzner1 (shared hosting) to hetzner2 (dedicated hosting)
	# changes the domain from 'http://opensourceecology.org/' to 'https://www..opensourceecology.org'		# changes the domain from 'http://opensourceecology.org/' to 'https://www..opensourceecology.org'
	# update core wp from v5.1.1 to v6.6.1		# update core wp from v4.7.9 to v4.9.2

	~~TODO:~~
	# changes the docroot to a subversion repo of the wp codebase, making it easier to update in the future without sacrificing security (ie: permitting wordpress to update itself) for ease-of-use		# changes the docroot to a subversion repo of the wp codebase, making it easier to update in the future without sacrificing security (ie: permitting wordpress to update itself) for ease-of-use
	# updates the vhost config to block access to svn files, and more generally: ".\.(svn\|git\|hg\|bzr\|cvs\|ht)/."		# updates the vhost config to block access to svn files, and more generally: ".\.(svn\|git\|hg\|bzr\|cvs\|ht)/."
Line 90:		Line 88:
	=Apply to Production=		=Apply to Production=
	<pre>		<pre>
	~~# TODO: verify this script~~

	####################		####################
	# run on hetzner1 #		# run on hetzner1 #

Maltfield: initial creation

2024-12-11T21:57:42Z

initial creation

← Older revision		Revision as of 21:57, 11 December 2024
Line 61:		Line 61:
	# entirely migrate the 'osemain' wordpress site from hetzner1 (shared hosting) to hetzner2 (dedicated hosting)		# entirely migrate the 'osemain' wordpress site from hetzner1 (shared hosting) to hetzner2 (dedicated hosting)
	# changes the domain from 'http://opensourceecology.org/' to 'https://www..opensourceecology.org'		# changes the domain from 'http://opensourceecology.org/' to 'https://www..opensourceecology.org'
	# update core wp from v4.7.9 to v4.9.2		# update core wp from v5.1.1 to v6.6.1

			TODO:
	# changes the docroot to a subversion repo of the wp codebase, making it easier to update in the future without sacrificing security (ie: permitting wordpress to update itself) for ease-of-use		# changes the docroot to a subversion repo of the wp codebase, making it easier to update in the future without sacrificing security (ie: permitting wordpress to update itself) for ease-of-use
	# updates the vhost config to block access to svn files, and more generally: ".\.(svn\|git\|hg\|bzr\|cvs\|ht)/."		# updates the vhost config to block access to svn files, and more generally: ".\.(svn\|git\|hg\|bzr\|cvs\|ht)/."
Line 88:		Line 90:
	=Apply to Production=		=Apply to Production=
	<pre>		<pre>
			# TODO: verify this script

	####################		####################
	# run on hetzner1 #		# run on hetzner1 #

Maltfield: Maltfield moved page CHG-2018-02-05 to CHG-2018-02-05 migrate osemain to hetzner2

2020-04-27T12:24:33Z

Maltfield moved page CHG-2018-02-05 to CHG-2018-02-05 migrate osemain to hetzner2

← Older revision	Revision as of 12:24, 27 April 2020
(No difference)

Maltfield at 16:43, 14 March 2018

2018-03-14T16:43:01Z

← Older revision		Revision as of 16:43, 14 March 2018
Line 1:		Line 1:
	=Status=		=Status=

			==2018-03-13 06:55 UTC==

			Marcin confirmed that no further issues have been discovered, and we should mark this change as successful. The content freeze is now officially lifted for osemain (www.opensourceecology.org)

			There are minor issues causing varnish to hit-for-pass (causing varnish to call the backend) at an unnecessarily high rate, but this is just a minor issue. I'll log the fixing of this issue in [[Maltfield_Log\|my work log]].

	==2018-03-02 05:17 UTC==		==2018-03-02 05:17 UTC==

Maltfield at 05:43, 2 March 2018

2018-03-02T05:43:34Z

← Older revision		Revision as of 05:43, 2 March 2018
Line 1:		Line 1:
	=Status=		=Status=

			==2018-03-02 05:17 UTC==

			I confirmed that the backups were complete on hetzner1, and I moved all of the old osemain wordpress files out of the docroot on on hetzner1:/usr/home/osemain/public_html into hetzner1:/usr/home/osemain/noBackup/deleteMeIn2019/osemain_olddocroot/

			I sent an email to Marcin & Catarina asking for validation. The site is still under a content freeze for 1 week, excepting trivial changes for testing.

	==2018-03-01 20:00 UTC==		==2018-03-01 20:00 UTC==

Maltfield: /* 2018-03-01 20:00 UTC */

2018-03-01T20:03:04Z

2018-03-01 20:00 UTC

← Older revision		Revision as of 20:03, 1 March 2018
Line 3:		Line 3:
	==2018-03-01 20:00 UTC==		==2018-03-01 20:00 UTC==

	Pausing this change until tomorrow. It's 90% done. All that remains is to actually remove the old files on hetzner1, but the system-wide backup I kicked-off at the start of this CHG is still running. I'll resume this tomorrow after the backup has been verified on our dreamhost server. Then I'll remove the files & get validation from Marcin. In the meantime, my own spotchecks for both the wiki & osemain show that ~~it's~~ functional.		Pausing this change until tomorrow. It's 90% done. All that remains is to actually remove the old files on hetzner1, but the system-wide backup I kicked-off at the start of this CHG is still running. I'll resume this tomorrow after the backup has been verified on our dreamhost server. Then I'll remove the files & get validation from Marcin. In the meantime, my own spotchecks for both the wiki & osemain show that both sites are fully functional.

	==2018-03-01 15:00 UTC==		==2018-03-01 15:00 UTC==

Maltfield at 20:02, 1 March 2018

2018-03-01T20:02:23Z

← Older revision		Revision as of 20:02, 1 March 2018
Line 1:		Line 1:
	=Status=		=Status=

			==2018-03-01 20:00 UTC==

			Pausing this change until tomorrow. It's 90% done. All that remains is to actually remove the old files on hetzner1, but the system-wide backup I kicked-off at the start of this CHG is still running. I'll resume this tomorrow after the backup has been verified on our dreamhost server. Then I'll remove the files & get validation from Marcin. In the meantime, my own spotchecks for both the wiki & osemain show that it's functional.

			==2018-03-01 15:00 UTC==

			Started this change.

	==2018-02-28 02:32 UTC==		==2018-02-28 02:32 UTC==

Maltfield at 13:40, 1 March 2018

2018-03-01T13:40:10Z

← Older revision		Revision as of 13:40, 1 March 2018
Line 1:		Line 1:
	=Status=		=Status=

			==2018-02-28 02:32 UTC==

			Marcin confirmed that all outstanding issues are fixed, and that we can proceed with migration. The new migration time is 2018-03-01 15:00 UTC

			==2018-02-20==

			Marcin confirmed that enabling 2FA opened up his account, but he got a Forbidden issue when attempting to update or create blog posts (as opposed to pages). I fixed this by whitelisting the modsec rule id = 973337, xss.

			==2018-02-14==

			Marcin confirmed that all issues were fixed, but couldn't edit. The result was that his account was locked in a demoted state as the Subscriber role because he didn't enable 2FA. I added documentation to [[2FA]] to clarify.

	==2018-02-12==		==2018-02-12==

Maltfield at 01:24, 13 February 2018

2018-02-13T01:24:26Z

← Older revision		Revision as of 01:24, 13 February 2018
Line 164:		Line 164:
	# SET PERMISSIONS		# SET PERMISSIONS

	~~vhostDir=~~"~~/var/www/html/www.opensourceecology.org~~"		chown -R not-apache:apache "${vhostDir_hetzner2}"
	~~wpDocroot=~~"${~~vhostDir~~}~~/htdocs~~"		find "${vhostDir_hetzner2}" -type d -exec chmod 0050 {} \;
			find "${vhostDir_hetzner2}" -type f -exec chmod 0040 {} \;

	chown -R not-apache:apache "${~~vhostDir~~}"		chown not-apache:apache-admins "${vhostDir_hetzner2}/wp-config.php"
	~~find~~ "${~~vhostDir~~}" -~~type d -exec chmod 0050 {} \;~~		chmod 0040 "${vhostDir_hetzner2}/wp-config.php"
	~~find~~ "~~${vhostDir}" -type f -exec chmod 0040 {} \;~~

	~~chown not-apache:apache-admins "${vhostDir}/wp-config.php"~~		[ -d "${docrootDir_hetzner2}/wp-content/uploads" ] \|\| mkdir "${docrootDir_hetzner2}/wp-content/uploads"
	~~chmod 0040 "${vhostDir}/wp-config.php"~~		chown -R apache:apache "${docrootDir_hetzner2}/wp-content/uploads"
			find "${docrootDir_hetzner2}/wp-content/uploads" -type f -exec chmod 0660 {} \;
	[ -d "${~~wpDocroot~~}/wp-content/uploads" ] \|\| mkdir "${~~wpDocroot~~}/wp-content/uploads"		find "${docrootDir_hetzner2}/wp-content/uploads" -type d -exec chmod 0770 {} \;
	chown -R apache:apache "${~~wpDocroot~~}/wp-content/uploads"
	find "${~~wpDocroot~~}/wp-content/uploads" -type f -exec chmod 0660 {} \;
	find "${~~wpDocroot~~}/wp-content/uploads" -type d -exec chmod 0770 {} \;

	# UPDATE EXISTING PLUGINS		# UPDATE EXISTING PLUGINS
Line 211:		Line 208:
	# SET PERMISSIONS AGAIN		# SET PERMISSIONS AGAIN

	~~vhostDir="/var/www/html/www.opensourceecology.org"~~		chown -R not-apache:apache "${vhostDir_hetzner2}"
	~~wpDocroot="${vhostDir}/htdocs"~~		find "${vhostDir_hetzner2}" -type d -exec chmod 0050 {} \;
			find "${vhostDir_hetzner2}" -type f -exec chmod 0040 {} \;
	chown -R not-apache:apache "${~~vhostDir~~}"
	find "${~~vhostDir~~}" -type d -exec chmod 0050 {} \;
	find "${~~vhostDir~~}" -type f -exec chmod 0040 {} \;

	chown not-apache:apache-admins "${~~vhostDir~~}/wp-config.php"		chown not-apache:apache-admins "${vhostDir_hetzner2}/wp-config.php"
	chmod 0040 "${~~vhostDir~~}/wp-config.php"		chmod 0040 "${vhostDir_hetzner2}/wp-config.php"

	[ -d "${~~wpDocroot~~}/wp-content/uploads" ] \|\| mkdir "${~~wpDocroot~~}/wp-content/uploads"		[ -d "${docrootDir_hetzner2}/wp-content/uploads" ] \|\| mkdir "${docrootDir_hetzner2}/wp-content/uploads"
	chown -R apache:apache "${~~wpDocroot~~}/wp-content/uploads"		chown -R apache:apache "${docrootDir_hetzner2}/wp-content/uploads"
	find "${~~wpDocroot~~}/wp-content/uploads" -type f -exec chmod 0660 {} \;		find "${docrootDir_hetzner2}/wp-content/uploads" -type f -exec chmod 0660 {} \;
	find "${~~wpDocroot~~}/wp-content/uploads" -type d -exec chmod 0770 {} \;		find "${docrootDir_hetzner2}/wp-content/uploads" -type d -exec chmod 0770 {} \;

	# finally, log into the new wordpress site (use '/login' instead of '/wp-login.php'. After authenticating, wp will ask you to update, if necessary. Then update settings:		# finally, log into the new wordpress site (use '/login' instead of '/wp-login.php'. After authenticating, wp will ask you to update, if necessary. Then update settings:

Maltfield at 01:19, 13 February 2018

2018-02-13T01:19:11Z

← Older revision		Revision as of 01:19, 13 February 2018
Line 162:		Line 162:
	vim ${vhostDir_hetzner2}/wp-config.php		vim ${vhostDir_hetzner2}/wp-config.php

	chown -R apache:apache "${~~vhostDir_hetzner2~~}"		# SET PERMISSIONS
	find "${~~vhostDir_hetzner2~~}" -type d -exec chmod ~~0750~~ {} \;
	find "${~~vhostDir_hetzner2~~}" -type f -exec chmod ~~0640~~ {} \;		vhostDir="/var/www/html/www.opensourceecology.org"
	~~find~~ "${~~docrootDir_hetzner2~~}/wp-~~content~~" ~~-type f -exec~~ chmod ~~0660~~ {} \;		wpDocroot="${vhostDir}/htdocs"
	~~find~~ "${~~docrootDir_hetzner2~~}/wp-content" ~~-type d -exec chmod 0770~~ {} \;
	chown apache:apache-~~admins~~ "${~~vhostDir_hetzner2~~}/wp-~~config.php~~"		chown -R not-apache:apache "${vhostDir}"
	~~chmod 0440~~ "${~~vhostDir_hetzner2~~}/wp-~~config.php~~"		find "${vhostDir}" -type d -exec chmod 0050 {} \;
			find "${vhostDir}" -type f -exec chmod 0040 {} \;

			chown not-apache:apache-admins "${vhostDir}/wp-config.php"
			chmod 0040 "${vhostDir}/wp-config.php"

			[ -d "${wpDocroot}/wp-content/uploads" ] \|\| mkdir "${wpDocroot}/wp-content/uploads"
			chown -R apache:apache "${wpDocroot}/wp-content/uploads"
			find "${wpDocroot}/wp-content/uploads" -type f -exec chmod 0660 {} \;
			find "${wpDocroot}/wp-content/uploads" -type d -exec chmod 0770 {} \;

	# UPDATE EXISTING PLUGINS		# UPDATE EXISTING PLUGINS
Line 199:		Line 208:
	# install "Varnish Caching" pugin		# install "Varnish Caching" pugin
	sudo -u wp -i wp --path=${docrootDir_hetzner2} plugin install vcaching --activate		sudo -u wp -i wp --path=${docrootDir_hetzner2} plugin install vcaching --activate

			# SET PERMISSIONS AGAIN

			vhostDir="/var/www/html/www.opensourceecology.org"
			wpDocroot="${vhostDir}/htdocs"

			chown -R not-apache:apache "${vhostDir}"
			find "${vhostDir}" -type d -exec chmod 0050 {} \;
			find "${vhostDir}" -type f -exec chmod 0040 {} \;

			chown not-apache:apache-admins "${vhostDir}/wp-config.php"
			chmod 0040 "${vhostDir}/wp-config.php"

			[ -d "${wpDocroot}/wp-content/uploads" ] \|\| mkdir "${wpDocroot}/wp-content/uploads"
			chown -R apache:apache "${wpDocroot}/wp-content/uploads"
			find "${wpDocroot}/wp-content/uploads" -type f -exec chmod 0660 {} \;
			find "${wpDocroot}/wp-content/uploads" -type d -exec chmod 0770 {} \;

	# finally, log into the new wordpress site (use '/login' instead of '/wp-login.php'. After authenticating, wp will ask you to update, if necessary. Then update settings:		# finally, log into the new wordpress site (use '/login' instead of '/wp-login.php'. After authenticating, wp will ask you to update, if necessary. Then update settings: