<?php

# See includes/MainConfigSchema.php for all configurable settings
# and their default values, but don't forget to make changes in _this_
# file, not there.

# Further documentation for configuration settings may be found at:
# https://www.mediawiki.org/wiki/Manual:Configuration_settings

# Protect against web entry
if ( !defined( 'MEDIAWIKI' ) ) {
	exit;
}

# wgconf
$wgLocalDatabases = [
	'enwickedgov',
	'metawiki',
	'ensterling',
	'loginwiki',
	'entechwiki',
	'commonswiki',
	'testwiki'
];

$wgConf->wikis = $wgLocalDatabases;
$wgConf->suffixes = [ 'wickedgov', 'metawiki', 'sterling', 'loginwiki', 'techwiki', 'commonswiki', 'testwiki' ];

$wgConf->settings = [

'wgServer' => [
	'enwickedgov' => 'https://www.wickedgov.org',
	'metawiki' => 'https://meta.wickedgov.org',
	'ensterling' => 'https://sterling.wickedgov.org',
	'loginwiki' => 'https://login.wickedgov.org',
	'entechwiki' => 'https://tech.wickedgov.org',
	'commonswiki' => 'https://commons.wickedgov.org',
	'testwiki' => 'https://test.wickedgov.org',
],

'wgCanonicalServer' => [
	'enwickedgov' => 'https://www.wickedgov.org',
	'metawiki' => 'https://meta.wickedgov.org',
	'ensterling' => 'https://sterling.wickedgov.org',
	'loginwiki' => 'https://login.wickedgov.org',
	'entechwiki' => 'https://tech.wickedgov.org',
	'commonswiki' => 'https://commons.wickedgov.org',
	'testwiki' => 'https://test.wickedgov.org',
],

'wgScriptPath' => [
	'default' => '/w',
],

'wgArticlePath' => [
	'default' => '/wiki/$1',
],

'wgSitename' => [
	'enwickedgov' => 'WickedGov',
	'ensterling' => 'LambWiki',
	'metawiki' => 'WickedGov Meta-Wiki',
	'loginwiki' => 'WickedGov Login Wiki',
	'entechwiki' => 'WickedTech',
	'commonswiki' => 'WickedGov Commons',
	'testwiki' => 'Test Wiki',
],

'wgMetaNamespace' => [
	'default' => false,
	'metawiki' => 'Meta',
	'loginwiki' => 'LoginWiki',
	'commonswiki' => 'Commons',
],

'+wgGroupPermissions' => [

'default' => [
	'user' => [
		'changetags' => false,
		'oathauth-enable' => true,
#		'reupload-own' => true,
		'spamblacklistlog' => false,
		'viewmywatchlist' => true,
		'torunblocked' => false,
		'movefile' => false,
	],
	'accountcreator' => [
		'noratelimit' => true,
		'centralauth-createlocal' => true,
	],
	'autoconfirmed' => [
		'editsemiprotected' => true,
		'autoconfirmed' => true,
		'skipcaptcha' => true,
	],
	'autopatrolled' => [
		'autopatrol' => true,
		'patrolmarks' => true,
	],
	'bot' => [
		'bot' => true,
		'abusefilter-bypass-blocked-external-domains' => true,
		'sboverride' => true,
		'editsemiprotected' => true,
		'autopatrol' => true,
		'autoconfirmed' => true,
		'suppressredirect' => true,
		'nominornewtalk' => true,
		'apihighlimits' => true,
		'changetags' => true,
		'ipblock-exempt' => true,
		'globalblock-exempt' => true,
		'skipcaptcha' => true,
	],
	'bureaucrat' => [
		'noratelimit' => true,
		'oathauth-verify-user' => true,
#		'oathauth-view-log' => true,
	],
	'checkuser' => [
		'checkuser' => true,
		'checkuser-temporary-account-no-preference' => false,
		'abusefilter-privatedetails' => true,
		'abusefilter-privatedetails-log' => true,
		'checkuser-log' => true,
		'checkuser-temporary-account-log' => false,
        ],
	'confirmed' => [
		'editsemiprotected' => true,
		'autoconfirmed' => true,
		'skipcaptcha' => true,
	],
	'interface-admin' => [
		'editcontentmodel' => true,
		'editusercss' => true,
		'edituserjson' => true,
		'edituserjs' => true,
		'editsitecss' => true,
		'editsitejson' => true,
		'editsitejs' => true,
		'editinterface' => true,
	],
	'ipb-exemption' => [
		'ipblock-exempt' => true,
		'torunblocked' => true,
		'autoconfirmed' => true,
		'globalblock-exempt' => true,
	],
	'steward' => [
		'centralauth-lock' => false,
		'centralauth-suppress' => false,
		'centralauth-unmerge' => false,
		'userrights' => true,
	],
	'suppress' => [
		'hideuser' => true,
		'deletelogentry' => true,
		'deleterevision' => true,
		'abusefilter-hide-log' => true,
		'abusefilter-hidden-log' => true,
		'viewsuppressed' => true,
		'suppressionlog' => true,
		'suppressrevision' => true,
		'deletedhistory' => true,
		'deletedtext' => true,
		'browsearchive' => true,
	],
	'sysop' => [
		'blockemail' => true,
		'block' => true,
		'changetags' => true,
		'ipblock-exempt' => true,
		'torunblocked' => true,
		'globalblock-exempt' => true,
		'protect' => true,
		'managechangetags' => true,
		'createaccount' => false,
		'abusefilter-modify' => true,
		'abusefilter-modify-blocked-external-domains' => true,
		'abusefilter-bypass-blocked-external-domains' => true,
#		'deletechangetags' => true,
		'deletelogentry' => true,
		'deleterevision' => true,
		'delete' => true,
		'edituserjson' => true,
		'editprotected' => true,
		'editsemiprotected' => true,
		'editsitejson' => true,
		'editcontentmodel' => true,
		'editinterface' => true,
		'autopatrol' => true,
		'import' => true,
		'importupload' => false,
		'patrol' => true,
		'markbotedits' => true,
		'nuke' => true,
		'oathauth-view-log' => false,
		'oathauth-disable-for-user' => false,
		'oathauth-verify-user' => false,
		'mergehistory' => true,
		'abusefilter-modify-restricted' => true,
		'move-categorypages' => true,
		'movefile' => true,
		'move' => false,
		'move-subpages' => true,
		'move-rootuserpages' => false,
		'autoconfirmed' => true,
		'noratelimit' => true,
		'suppressredirect' => true,
		'nominornewtalk' => true,
		'tboverride' => true,
		'override-antispoof' => true,
		'reupload' => true,
		'rollback' => true,
		'abusefilter-revert' => true,
		'browsearchive' => true,
		'undelete' => true,
		'upload' => true,
		'upload_by_url' => true,
		'apihighlimits' => true,
		'unwatchedpages' => true,
		'abusefilter-view-private' => true,
		'deletedhistory' => true,
		'deletedtext' => true,
		'abusefilter-log-detail' => true,
		'abusefilter-log-private' => true,
		'titleblacklistlog' => false,
		'spamblacklistlog' => true,
		'abusefilter-access-protected-vars' => false,
		'abusefilter-protected-vars-log' => false,
		'skipcaptcha' => true,
	],
	'transwiki' => [
		'import' => true,
	],
	'importupload' => [
		'import' => true,
		'importupload' => true,
		'mergehistory' => true,
	],
],
'+enwickedgov' => [
	'uploader' => [
		'reupload' => true,
		'upload' => true,
		'upload_by_url' => true,
	],
	'extendedconfirmed' => [
		'editextendedprotected' => true,
	],
	'bot' => [
		'editextendedprotected' => true,
	],
	'bureaucrat' => [
		'deletechangetags' => true,
	],
	'sysop' => [
		'deletechangetags' => false,
		'editextendedprotected' => true,
	],
	'user' => [
		'edituserpages' => true,
	],
],
'+metawiki' => [
	'autoconfirmed' => [
		'mwoauthproposeconsumer' => true,
	],
	'confirmed' => [
		'mwoauthproposeconsumer' => true,
	],
	'user' => [
		'mwoauthupdateownconsumer' => true,
		'mwoauthmanagemygrants' => true,
	],
	'steward' => [
		'userrights' => true,
		'userrights-interwiki' => true,
		'centralauth-lock' => true,
		'centralauth-suppress' => true,
		'centralauth-rename' => true,
		'globalblock' => true,
		'block' => true,
		'blockemail' => true,
		'globalgrouppermissions' => true,
		'globalgroupmembership' => true,
		'abusefilter-modify' => true,
		'abusefilter-modify-global' => true,
		'interwiki' => true,
		'oathauth-verify-user' => true,
		'mwoauthsuppress' => true,
		'mwoauthviewsuppressed' => true,
		'mwoauthmanageconsumer' => true,
	],
	'sysadmin' => [
		'userrights' => true,
		'userrights-interwiki' => true,
		'centralauth-lock' => true,
		'centralauth-suppress' => true,
		'centralauth-rename' => true,
		'centralauth-unmerge' => true,
		'globalblock' => true,
		'block' => true,
		'blockemail' => true,
		'globalgrouppermissions' => true,
		'globalgroupmembership' => true,
		'abusefilter-modify' => true,
		'abusefilter-modify-global' => true,
		'oathauth-verify-user' => true,
		'oathauth-disable-for-user' => true,
		'mwoauthmanageconsumer' => true,
		'mwoauthviewsuppressed' => true,
		'mwoauthsuppress' => true,
	],
	'translationadmin' => [
		'pagelang' => true,
		'editcontentmodel' => true,
		'translate-import' => true,
		'translate-manage' => true,
		'pagetranslation' => true,
	],
	'sysop' => [
		'pagelang' => true,
		'abusefilter-modify-global' => true,
	],
	'trustandsafety' => [
		'userrights' => true,
		'userrights-interwiki' => true,
		'centralauth-lock'=> true,
		'globalblock' => true,
		'centralauth-suppress' => true,
		'centralauth-unmerge' => true,
		'oathauth-verify-user' => true,
		'oathauth-disable-for-user' => true,
		'centralauth-rename' => true,
		'globalgrouppermissions' => true,
		'globalgroupmembership' => true,
	],
	'centralnoticeadmin' => [
		'centralnotice-admin' => true,
		'protect' => true,
		'editinterface' => true,
	],
	// T7
	'tempaccountviewer' => [
		'checkuser-temporary-account' => true,
	],
],
'+commonswiki' => [
	'filemover' => [
		'movefile' => true,
	],
	'translationadmin' => [
		'pagelang' => true,
		'editcontentmodel' => true,
		'translate-import' => true,
		'translate-manage' => true,
		'pagetranslation' => true,
	],
	'sysop' => [
		'pagelang' => true,
	],
	'patroller' => [
		'rollback' => true,
		'patrol' => true,
	],
],
'+testwiki' => [
	'translationadmin' => [
		'pagelang' => true,
		'editcontentmodel' => true,
		'translate-import' => true,
		'translate-manage' => true,
		'pagetranslation' => true,
        ],
	'sysop' => [
		'pagelang' => true,
	],
	'centralnoticeadmin' => [
		'centralnotice-admin' => true,
		'protect' => true,
		'editinterface' => true,
	],
	'tempaccountviewer' => [
		'checkuser-temporary-account' => true,
	],
	'checkuser' => [
		'checkuser-temporary-account-no-preference' => true,
	],
	'suppress' => [
		'checkuser-temporary-account-no-preference' => true,
	],
],
],

'wgAddGroups' => [
	'default' => [
		'accountcreator' => [
			'confirmed'
		],
		'bureaucrat' => [
			'accountcreator',
			'bot',
			'bureaucrat',
			'interface-admin',
			'sysop',
			'transwiki',
		],
		'sysop' => [
			'autopatrolled',
			'confirmed',
			'ipb-exemption',
		],
	],
	'+enwickedgov' => [
		'sysop' => [
			'extendedconfirmed',
			'uploader',
		],
	],
	'+metawiki' => [
		'bureaucrat' => [
			'translationadmin'
		],
	],
	'+commonswiki' => [
		'bureaucrat' => [
			'translationadmin'
		],
		'sysop' => [
			'filemover',
			'patroller'
		],
	],
	'+testwiki' => [
		'bureaucrat' => [
			'importupload',
			'centralnoticeadmin',
			'translationadmin'
		],
	],
],

'wgRemoveGroups' => [
	'default' => [
		'bureaucrat' => [
			'accountcreator',
			'bot',
			'interface-admin',
			'transwiki'
		],
		'sysop' => [
			'autopatrolled',
			'confirmed',
			'ipb-exemption'
		],
	],
	'+enwickedgov' => [
		'bureaucrat' => [
			'sysop'
		],
		'sysop' => [
			'extendedconfirmed',
			'uploader',
		],
	],
	'+metawiki' => [
		'bureaucrat' => [
			'translationadmin'
		],
	],
	'+commonswiki' => [
		'bureaucrat' => [
			'translationadmin'
		],
		'sysop' => [
			'filemover',
			'patroller'
		],
	],
	'+testwiki' => [
		'bureaucrat' => [
			'sysop',
			'importupload',
			'translationadmin',
			'centralnoticeadmin'
		],
	],
],
'wgGroupsAddToSelf' => [
	'metawiki' => [
		'sysop' => [
			'translationadmin'
		],
	],
	'commonswiki' => [
		'sysop' => [
			'translationadmin'
		],
	],
],
'wgGroupsRemoveFromSelf' => [
	'default' => [
		'autoconfirmed' => [
			'confirmed'
		],
	],
	'+metawiki' => [
		'sysop' => [
			'translationadmin'
		],
	],
	'+commonswiki' => [
		'sysop' => [
			'translationadmin'
		],
	],
],

'wgUseInstantCommons' => [
	'default' => false,
],

'wgLogos' => [
'default' => [
	'icon' => "https://uploads.wickedgov.org/enwickedgov/static/logo/logo.svg",
	'1x' => "https://uploads.wickedgov.org/enwickedgov/static/logo/135px.png",
	'wordmark' => [
		'1x' => 'https://uploads.wickedgov.org/enwickedgov/static/wordmark/135px.png',
		'src' => 'https://uploads.wickedgov.org/enwickedgov/static/wordmark/wordmark.svg',
		'width' => 135,
		'height' => 19,
	],
],
'metawiki' => [
	'icon' => "https://uploads.wickedgov.org/enwickedgov/static/logo/meta.svg",
	'1x' => "https://uploads.wickedgov.org/enwickedgov/static/logo/135px-meta.png",
	'wordmark' => [
		'1x' => 'https://uploads.wickedgov.org/enwickedgov/static/wordmark/135px-meta.png',
		'src' => 'https://uploads.wickedgov.org/enwickedgov/static/wordmark/meta.svg',
		'width' => 107,
		'height' => 32,
	],
],
'+entechwiki' => [
	'1x' => 'https://uploads.wickedgov.org/enwickedgov/static/logo/WickedTech-135px.png'
],

],

'wgNoticeProject' => [
	'enwickedgov' => 'wickedgov',
	'ensterling' => 'sterling',
	'entechwiki' => 'techwiki',
	'commonswiki' => 'commonswiki',
	'metawiki' => 'metawiki',
	'testwiki' => 'test',
],

];
$wgGroupPermissions['user']['editcontentmodel'] = false;
$wgGroupPermissions['user']['reupload'] = false;
$wgGroupPermissions['user']['reupload-shared'] = false;
$wgGroupPermissions['user']['move-categorypages'] = false;
$wgGroupPermissions['user']['movefile'] = false;
$wgGroupPermissions['user']['move-subpages'] = false;
$wgGroupPermissions['bureaucrat']['userrights'] = false;
$wgGroupPermissions['bureaucrat']['override-antispoof'] = false;
$wgGroupPermissions['steward']['userrights'] = true;
$wgGroupPermissions['steward']['centralauth-createlocal'] = false;
$wgGroupPermissions['sysop']['unblockself'] = false;
$wgGroupPermissions['sysop']['bigdelete'] = false;
$wgGroupPermissions['bureaucrat']['renameuser'] = false;
$wgGroupPermissions['sysop']['importupload'] = false;
$wgGroupPermissions['user']['changetags'] = false;
if ($wgDBname === 'enwickedgov') {
	$wgGroupPermissions['sysop']['deletechangetags'] = false;
};

# Loginwiki/techwiki should be fishbowl
if ($wgDBname === 'loginwiki') {
	$wgGroupPermissions['*'] = [
		'read' => true,
		'autocreateaccount' => true,
		'editmyoptions' => true,
		'editmyprivateinfo' => true,
		'viewmyprivateinfo' => true,
		'centralauth-merge' => true,
		'torunblocked' => true,
	];
	$wgGroupPermissions['user'] = [
		'read' => true,
	];
	$wgGroupPermissions['autoconfirmed'] = [
		'read' => true,
	];
	$wgGroupPermissions['steward']['edit'] = true;
	$wgGroupPermissions['*']['ipblock-exempt'] = true;
};
if ($wgDBname === 'entechwiki') {
	$wgGroupPermissions['*'] = [
		'read' => true,
		'editmyoptions' => true,
		'editmyprivateinfo' => true,
		'viewmyprivateinfo' => true,
		'centralauth-merge' => true,
	];
	$wgGroupPermissions['user'] = [
		'read' => true,
	];
	$wgGroupPermissions['autoconfirmed'] = [
		'read' => true,
	];
	$wgGroupPermissions['sysop'] = [
		'read' => true,
	];
	$wgGroupPermissions['bureaucrat'] = [
		'read' => true,
	];
	$wgAddGroups['sysop'] = '';
	$wgAddGroups['bureaucrat'] = '';
	$wgRemoveGroups['sysop'] = '';
	$wgRemoveGroups['bureaucrat'] = '';
};

# Load additional userright
$wgAvailableRights[] = 'editextendedprotected';

# On metawiki, allow subpages in mainspace
if ($wgDBname === 'metawiki') {
	$wgNamespacesWithSubpages[NS_MAIN] = true;
};

# Template subpages, all wikis
$wgNamespacesWithSubpages[NS_TEMPLATE] = true;

# All non-redirects in mainspace are articles
$wgArticleCountMethod = 'any';

## Specify the canonical URI for all pages
$wgEnableCanonicalServerLink = true;

## The URL path to static resources (images, scripts, etc.)
$wgResourceBasePath = $wgScriptPath;

## The URL paths to the logo.  Make sure you change this from the default,
## or else you'll overwrite your logo when you upgrade!
/*$wgLogos = [
	'icon' => "https://uploads.wickedgov.org/static/logo/logo.svg",
	'1x' => "https://uploads.wickedgov.org/static/logo/135px.png",
	'wordmark' => [
		'1x' => 'https://uploads.wickedgov.org/static/wordmark/135px.png',
		'src' => 'https://uploads.wickedgov.org/static/wordmark/wordmark.svg',
		'width' => 135,
		'height' => 19,
	],
];*/
$wgFavicon = 'https://uploads.wickedgov.org/enwickedgov/static/favicon.png';

## UPO means: this is also a user preference option

$wgEnableEmail = true;
$wgEnableUserEmail = true; # UPO

$wgEmergencyContact = "info@wickedgov.org";
$wgPasswordSender = "noreply@wickedgov.org";

$wgEnotifUserTalk = true; # UPO
$wgEnotifWatchlist = true; # UPO
$wgEmailAuthentication = true;

## Database settings
$wgDBtype = "mysql";
$wgDBserver = "localhost";
$wgDBuser = "wguser";
require('/var/www/PrivateSettings.php');

# MySQL specific settings
$wgDBprefix = "";
$wgDBssl = false;

# MySQL table options to use during installation or update
$wgDBTableOptions = "ENGINE=InnoDB, DEFAULT CHARSET=binary";

## Shared memory settings
$wgMainCacheType = CACHE_ACCEL;
$wgMemCachedServers = [];

## Upload configuration
if ($wgDBname === 'enwickedgov' or $wgDBname === 'commonswiki') {
	$wgEnableUploads = true;
};
if ($wgDBname !== 'commonswiki') {
	$wgGroupPermissions['user']['upload'] = false;
	$wgGroupPermissions['user']['reupload-own'] = false;
	$wgUploadNavigationUrl = "https://commons.wickedgov.org/wiki/Special:Upload";
	$wgUploadMissingFileUrl= "https://commons.wickedgov.org/wiki/Special:Upload";
	$wgUseSharedUploads = true;
	$wgSharedUploadPath = 'https://uploads.wickedgov.org/commonswiki';
	$wgSharedUploadDirectory = '/var/www/wguploads/commonswiki/';
	$wgHashedSharedUploadDirectory = true;
	$wgFetchCommonsDescriptions = true;
	$wgSharedUploadDBname = 'commonswiki';  # DB-Name of commons
	$wgRepositoryBaseUrl = "https://commons.wickedgov.org/wiki/Image:";
};
$wgUploadDirectory = "/var/www/wguploads/{$wgDBname}";
$wgUploadPath = "https://uploads.wickedgov.org/$wgDBname";
$wgUseImageMagick = false;
$wgAllowCopyUploads = true;
$wgCopyUploadsFromSpecialUpload = true;


# SVG configuration
$wgFileExtensions[] = 'svg';
$wgSVGConverters = [ 'rsvg' => '/usr/bin/rsvg-convert -w $width -h $height -o $output $input' ];
$wgSVGConverter = 'rsvg' ;


# Periodically send a pingback to https://www.mediawiki.org/ with basic data
# about this MediaWiki instance. The Wikimedia Foundation shares this data
# with MediaWiki developers to help guide future development efforts.
$wgPingback = true;

# Site language code, should be one of the list in ./includes/languages/data/Names.php
$wgLanguageCode = "en";

# Time zone
$wgLocaltimezone = "UTC";

## Set $wgCacheDirectory to a writable directory on the web server
## to make your wiki go slightly faster. The directory should not
## be publicly accessible from the web.
#$wgCacheDirectory = "$IP/cache";

# Changing this will log out all existing sessions.
$wgAuthenticationTokenVersion = "1";

# Site upgrade key. Must be set to a string (default provided) to turn on the
# web installer while LocalSettings.php is in place
#$wgUpgradeKey = "2a8df03a1cf51f4f";

## For attaching licensing metadata to pages, and displaying an
## appropriate copyright notice / icon. GNU Free Documentation
## License and Creative Commons licenses are supported so far.
$wgRightsPage = "Policy:Copyrights"; # Set to the title of a wiki page that describes your license/copyright
$wgRightsUrl = "https://creativecommons.org/licenses/by-sa/4.0/";
$wgRightsText = "Creative Commons Attribution-ShareAlike";

# Terms of Use footer link
$wgHooks['SkinAddFooterLinks'][] = function ( Skin $skin, string $key, array &$footerlinks ) {
	if ( $key === 'places' ) {
		$footerlinks['termsofuse'] = Html::rawElement( 'a', [
			'href' => Title::newFromText(
				$skin->msg( 'termsofuse-page' )->inContentLanguage()->text()
			)->getFullURL()
		], $skin->msg( 'termsofuse-desc' )->escaped() );
	};
};

# Disable raw HTML copyright messages
$wgAllowRawHtmlCopyrightMessages = false;

# Path to the GNU diff3 utility. Used for conflict resolution.
$wgDiff3 = "/usr/bin/diff3";

## Default skin: you can change the default skin. Use the internal symbolic
## names, e.g. 'vector' or 'monobook':
$wgDefaultSkin = "citizen";

# Enable the Vector skin
wfLoadSkin( 'Vector' );

# Enable/configure the Foreground skin
wfLoadSkin( 'Foreground' );
$wgForegroundFeatures = [
 	'showActionsForAnon' => true,
 	'NavWrapperType' => 'divonly',
 	'showHelpUnderTools' => true,
 	'showRecentChangesUnderTools' => true,
 	'enableTabs' => false,
 	'wikiName' => $wgSitename,
 	'navbarIcon' => false,
 	'IeEdgeCode' => 1,
 	'showFooterIcons' => 0,
 	'addThisFollowPUBID' => ''
];

# Enable/configure the Citizen skin
wfLoadSkin( 'Citizen' );
$wgCitizenShowPageTools	= 'permission';
$wgCitizenThemeDefault = 'auto';


# Enabled extensions. Most of the extensions are enabled by adding
# wfLoadExtension( 'ExtensionName' );
# to LocalSettings.php. Check specific extension documentation for more details.
# The following extensions were automatically enabled:
wfLoadExtension( 'AbuseFilter' );
$wgAbuseFilterEnableBlockedExternalDomain = true;
wfLoadExtension( 'CategoryTree' );
wfLoadExtension( 'Cite' );
wfLoadExtension( 'CodeEditor' );
wfLoadExtension( 'CodeMirror' );
wfLoadExtension( 'DiscussionTools' );
wfLoadExtension( 'Echo' );
$wgEchoSharedTrackingDB = 'metawiki';
$wgDefaultUserOptions['echo-cross-wiki-notifications'] = true;
$wgMainStash = CACHE_ACCEL;
wfLoadExtension( 'Gadgets' );
wfLoadExtension( 'InputBox' );
wfLoadExtension( 'Interwiki' );
wfLoadExtension( 'Linter' );
wfLoadExtension( 'LoginNotify' );
wfLoadExtension( 'Math' );
wfLoadExtension( 'MultimediaViewer' );
wfLoadExtension( 'Nuke' );
wfLoadExtension( 'OAuth' );
$wgMWOAuthCentralWiki = 'metawiki';
wfLoadExtension( 'OATHAuth' );
$wgOATHRequiredForGroups = [
	'bureaucrat',
	'checkuser',
	'interface-admin',
	'steward',
	'suppress'
];
$wgOATHExclusiveRights = [
	'editsitecss',
	'editsitejs',
	'editusercss',
	'edituserjs'
];
$wgOATHAuthAccountPrefix = 'WickedGov';
$wgVirtualDomainsMapping['virtual-oathauth'] = [ 'db' => 'metawiki' ];
wfLoadExtension( 'PageImages' );
wfLoadExtension( 'ParserFunctions' );
wfLoadExtension( 'PdfHandler' );
wfLoadExtension( 'Poem' );
wfLoadExtension( 'SecureLinkFixer' );
wfLoadExtension( 'SpamBlacklist' );
$wgLogSpamBlacklistHits = true;
$wgBlacklistSettings = [
	'spam' => [
		'files' => [
			'DB: metawiki Spam_blacklist',
		],
	],
        'email' => [
		'files' => [
			'DB: metawiki Spam_blacklist',
		],
	],
];
wfLoadExtension( 'SyntaxHighlight_GeSHi' );
wfLoadExtension( 'TemplateData' );
wfLoadExtension( 'TextExtracts' );
wfLoadExtension( 'Thanks' );
wfLoadExtension( 'TitleBlacklist' );
$wgTitleBlacklistLogHits = false;
$wgTitleBlacklistBlockAutoAccountCreation = false;
$wgTitleBlacklistSources = [
	[
		'type' => 'localpage',
		'src'  => 'MediaWiki:Titleblacklist'
	],
	[
		'type' => 'url',
		'src'  => 'https://meta.wickedgov.org/w/index.php?title=Title_blacklist&action=raw'
	],
];
wfLoadExtension( 'VisualEditor' );
wfLoadExtension( 'WikiEditor' );

# Additional extensions
wfLoadExtension( 'AntiSpoof' );
wfLoadExtension( 'CheckUser' );
wfLoadExtension( 'CommonsMetadata' );
wfLoadExtension( 'Disambiguator' );
wfLoadExtension( 'DismissableSiteNotice' );
$wgDismissableSiteNoticeForAnons = true;
wfLoadExtension( 'TemplateStyles' );
wfLoadExtension( 'TorBlock' );
$wgApplyIpBlocksToXff = true;
wfLoadExtension( 'WikimediaMessages' );

# CENTRALAUTH
wfLoadExtension( 'CentralAuth' );
$wgVirtualDomainsMapping['virtual-centralauth'] = [ 'db' => 'centralauth' ];

# GlobalUserPage
wfLoadExtension( 'GlobalUserPage' );
$wgGlobalUserPageAPIUrl = 'https://meta.wickedgov.org/w/api.php';
$wgGlobalUserPageFooterKey = 'globaluserpage-footer';
$wgGlobalUserPageDBname = 'metawiki';

# GlobalCssJs
wfLoadExtension( 'GlobalCssJs' );
$wgUseGlobalSiteCssJs = true;
$wgResourceLoaderSources['metawiki'] = array(
	'apiScript' => 'https://meta.wickedgov.org/w/api.php',
	'loadScript' => 'https://meta.wickedgov.org/w/load.php',
);
$wgGlobalCssJsConfig = [
	'wiki' => 'metawiki',
	'source' => 'metawiki',
];

# GlobalPreferences
wfLoadExtension( 'GlobalPreferences' );
$wgGlobalPreferencesDB = 'metawiki';

# GlobalBlocking
wfLoadExtension( 'GlobalBlocking' );
$wgVirtualDomainsMapping['virtual-globalblocking'] = ['db' => 'globalblocking'];
if (($wgDBname === 'metawiki') || ($wgDBname === 'loginwiki')) {
	$wgApplyGlobalBlocks = false;
} else {
	$wgApplyGlobalBlocks = true;
};
$wgGlobalBlockingCentralWiki = 'metawiki';

# ContactPage on metawiki
if ($wgDBname === 'metawiki') {

wfLoadExtension( 'ContactPage' );

$wgContactConfig['stewards'] = [
	'RecipientEmail' => 'stewards@wickedgov.org',
	'SenderEmail' => 'noreply@wickedgov.org',
	'SenderName' => 'User Email',
	'RequireDetails' => true,
	'IncludeIP' => true,
	'MustBeLoggedIn' => false,
	'NameReadonly' => false,
	'EmailReadonly' => false,
	'SubjectReadonly' => false,
	'MustHaveEmail' => false,
	'AdditionalFields' => [
		'Text' => [
			'label-message' => 'emailmessage',
			'type' => 'textarea',
			'required' => true
		],
	],
	'FieldsMergeStrategy' => null,
	'RLModules' => [],
	'RLStyleModules' => [],
];


};
wfLoadExtension( 'ConfirmEdit' );
$wgCaptchaClass = false;
$wgCaptchaTriggers['edit'] = false;
$wgCaptchaTriggers['create'] = false;
$wgCaptchaTriggersOnNamespace[NS_MAIN]['create'] = true;
$wgCaptchaTriggersOnNamespace[NS_USER]['create'] = true;
$wgCaptchaTriggers['sendemail'] = true;
$wgCaptchaTriggers['contactpage'] = true;
$wgCaptchaTriggers['addurl'] = true;
$wgCaptchaTriggers['createaccount'] = true;
$wgCaptchaTriggers['badlogin'] = true;
$wgCaptchaTriggers['badloginperuser'] = true;
$wgCaptchaBadLoginAttempts = 3;
$wgCaptchaBadLoginExpiration = 300;
$wgCaptchaBadLoginPerUserAttempts = 5;
$wgCaptchaBadLoginPerUserExpiration = 600;
# wgconf
function efGetSiteParams( $conf, $wiki ) {
	$site = null;
	$lang = null;
	foreach( $conf->suffixes as $suffix ) {
		if ( substr( $wiki, -strlen( $suffix ) ) === $suffix ) {
			$site = $suffix;
			$lang = substr( $wiki, 0, -strlen( $suffix ) );
			break;
		}
	}
	return [
		'suffix' => $site,
		'lang' => $lang,
		'params' => [
			'lang' => $lang,
			'site' => $site,
			'wiki' => $wiki,
		],
		'tags' => [],
	];
}

$wgConf->siteParamsCallback = 'efGetSiteParams';
$wgConf->extractAllGlobals( $wgDBname );


# Disambiguator configuration
$wgDisambiguatorIndicateLinks = true;
$wgDisambiguatorNotifications = true;

# MobileFrontend configuration
wfLoadSkin( 'MinervaNeue' );

# Popups/Previews configuration
if ($wgDBname !== 'metawiki') {
	wfLoadExtension( 'Popups' );
};
$wgPopupsReferencePreviewsBetaFeature = false;

# Scribunto configuration
wfLoadExtension( 'Scribunto' );
$wgScribuntoDefaultEngine = 'luastandalone';

# MLES
$wgBabelCategoryNames = [
	'0' => 'User %code%-0',
	'1' => 'User %code%-1',
	'2' => 'User %code%-2',
	'3' => 'User %code%-3',
	'4' => 'User %code%-4',
	'5' => 'User %code%-5',
	'N' => 'User %code%-N',
];
$wgBabelMainCategory = false;
wfLoadExtension( 'Babel' );
if ($wgDBname === 'metawiki' or $wgDBname === 'commonswiki' or $wgDBname === 'testwiki') {
	$wgPageLanguageUseDB = true;

	wfLoadExtension( 'cldr' );

	wfLoadExtension( 'CleanChanges' );
	$wgCCTrailerFilter = true;
	$wgCCUserFilter = false;
	$wgDefaultUserOptions['usenewrc'] = 1;

	wfLoadExtension( 'Translate' );
	$wgGroupPermissions['*']['translate'] = true;
	$wgGroupPermissions['user']['translate-messagereview'] = true;
	$wgTranslateDocumentationLanguageCode = 'qqq';
	$wgExtraLanguageNames['qqq'] = 'Message documentation'; # No linguistic content. Used for documenting messages
	$wgTranslateFuzzyBotName = 'TranslationBot';
	$wgEnablePageTranslation = true;

	wfLoadExtension( 'UniversalLanguageSelector' );
};

# Dependency for CentralNotice.
# Do not remove unless you know what you're doing.
wfLoadExtension( 'EventLogging' );
$wgEventLoggingBaseUri = '/beacon/event';
$wgEventLoggingServiceUri = '/beacon/intake-analytics';
$wgEventLoggingStreamNames = false;

# CENTRALNOTICE
wfLoadExtension( 'CentralNotice' );
$wgNoticeProjects = array(
	'wickedgov',
	'sterling',
	'techwiki',
	'commonswiki',
	'metawiki',
	'test',
);
if ($wgDBname === 'metawiki' | $wgDBname === 'testwiki') {
	$wgNoticeInfrastructure = true;
	$wgGroupPermissions['sysop']['centralnotice-admin'] = false;
} else {
	$wgNoticeInfrastructure = false;
	$wgCentralHost = 'https://meta.wickedgov.org';
	$wgCentralSelectedBannerDispatcher = 'https://meta.wickedgov.org/w/index.php/Special:BannerLoader';
	$wgCentralDBname = 'metawiki';
	$wgCentralBannerRecorder = 'https://meta.wickedgov.org/w/index.php/Special:RecordImpression';
};

# Enable user CSS/JS
$wgAllowUserJs = true;
$wgAllowUserCss = true;

if ($wgDBname === 'enwickedgov') {
	# Policy: namespace
	define("NS_POLICY", 3000); // This MUST be even.
	define("NS_POLICY_TALK", 3001); // This MUST be the following odd integer.
	$wgExtraNamespaces[NS_POLICY] = "Policy";
	$wgExtraNamespaces[NS_POLICY_TALK] = "Policy_talk";
};

# Protection levels
if ($wgDBname === 'enwickedgov') {
	$wgRestrictionLevels = [ '', 'autoconfirmed', 'editextendedprotected', 'sysop', 'editofficeprotected'];
	$wgSemiprotectedRestrictionLevels = ['autoconfirmed', 'editextendedprotected'];
};

$wgAutoConfirmAge = 86400*3;
$wgAutoConfirmCount = 5;
$wgTorAutoConfirmAge = $wgAutoConfirmAge;
$wgTorAutoConfirmCount = $wgAutoConfirmCount;


if ($wgDBname === 'enwickedgov') {
$wgAutopromoteOnce = [
	"onView" => [
		"extendedconfirmed" => [
			"&",
			[
				APCOND_EDITCOUNT,
				100
			],
			[
				APCOND_AGE_FROM_EDIT,
				1209600
			],
			[
				"!",
				[
					APCOND_INGROUPS,
					"sysop"
				]
			],
 			[
				"!",
				[
					APCOND_INGROUPS,
					"bot"
				]
			]
		]
	]
];
};

# Disable unused groups/rights from extensions
$wgHooks['MediaWikiServices'][] = static function () {
	global $wgGroupPermissions, $wgDBname;
	unset( $wgGroupPermissions['push-subscription-manager'] );
	unset( $wgGroupPermissions['checkuser-temporary-account-viewer'] );
	unset( $wgGroupPermissions['sysop']['centralnotice-admin'] );
	if ($wgDBname !== 'metawiki') {
		unset ( $wgGroupPermissions['steward']['globalblock'] );
	};
};

# Disallow certain characters in usernames
$wgInvalidUsernameCharacters =  '@:>=.';

# CU config
// Do NOT change these settings without
// office legal approval; thanks.
$wgAbuseFilterLogPrivateDetailsAccess = true;
$wgAbuseFilterPrivateDetailsForceReason = true;
$wgCheckUserForceSummary = true;
$wgCheckUserCAMultiLock = [
	'centralDB' => 'metawiki',
	'groups' => [ 'steward' ]
];
$wgCheckUserCAtoollink = 'metawiki';
$wgCheckUserGBtoollink = $wgCheckUserCAMultiLock;
$wgCheckUserLogLogins = true;
$wgCheckUserLogSuccessfulBotLogins = false;
$wgVirtualDomainsMapping['virtual-checkuser-global'] = ['db' => 'metawiki'];
$wgCUDMaxAge = 86400 * 90;
# end CU config

# Protection of the User: namespace
/*
if ($wgDBname === 'enwickedgov') {
$wgNamespaceProtection[NS_USER] = ['edituserpages'];
};
*/

# CommonsMetadata configuration
$wgCommonsMetadataSetTrackingCategories = true;
$wgCommonsMetadataPublicDomainPageUrl = "https://en.wikipedia.org/wiki/Public_domain";


# Namespace alias for metaspace and metatalkspace
if ($wgDBname === 'enwickedgov') {
	$wgNamespaceAliases['WG'] = NS_PROJECT;
	$wgNamespaceAliases['WT'] = NS_PROJECT_TALK;
};
switch ($wgDBname) {
	case 'enwickedgov':
		$wgNamespaceAliases['WG'] = NS_PROJECT;
		$wgNamespaceAliases['WT'] = NS_PROJECT_TALK;
		break;
	case 'ensterling':
		$wgNamespaceAliases['LW'] = NS_PROJECT;
		$wgNamespaceAliases['LT'] = NS_PROJECT_TALK;
		break;
};

# Prevent Main Page shenanigans on enwickedgov
if ($wgDBname === 'enwickedgov') {
	$wgHooks['getUserPermissionsErrorsExpensive'][] = static function ( &$title, &$user, $action, &$result ) {
		if ( $action !== 'protect' && $action !== 'unprotect' && $action !== 'delete' && $action !== 'move') {
			return true;
		}
		$main = Title::newMainPage();
		$mainText = $main->getPrefixedDBkey();
		if ( $mainText === $title->getPrefixedDBkey() ) {
			$result = [ 'cant-delete-main-page' ];
			return false;
		}
	};
};

# NEW protection indicators
if ($wgDBname === 'enwickedgov') {
	$wgEnableProtectionIndicators = true;
};

# Turn on Realtime Preview in WikiEditor
$wgWikiEditorRealtimePreview = true;

# Restrict deletion of pages with very large histories
$wgDeleteRevisionsLimit = 5000;

# Configure transwiki import sources
$wgImportSources = [
	'wikipedia',
	'mediawikiwiki',
	'metawikimedia',
	'metawiki',
	'enwickedgov',
	'mirahezedev',
];

// Don't allow import from the current wiki
if (($key = array_search($wgDBname, $wgImportSources)) !== false) {
	unset($wgImportSources[$key]);
}

# Set group permissions
$wgExtensionFunctions[] = function() use ( &$wgGroupPermissions )
{
	unset( $wgGroupPermissions['push-subscription-manager']);
	unset( $wgGroupPermissions['upwizcampeditors']);
};

# BEGIN GRANT CONFIG

$wgGrantPermissions = [
	'basic' => [
		'abusefilter-log' => true,
		'abusefilter-log-detail' => false,
		'abusefilter-view' => true,
		'autocreateaccount' => false,
		'autoconfirmed' => true,
		'autopatrol' => true,
		'editsemiprotected' => true,
		'editextendedprotected' => true,
		'ipblock-exempt' => true,
		'nominornewtalk' => true,
		'patrolmarks' => true,
		'read' => true,
		'skipcaptcha' => true,
		'torunblocked' => true,
		'unwatchedpages' => true,
	],
	'highvolume' => [
		'bot' => true,
		'apihighlimits' => true,
		'noratelimit' => true,
		'markbotedits' => true,
	],
	'import' => [
		'import' => true,
		'importupload' => true,
	],
	'editpage' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
	],
	'editprotected' => [
		'abusefilter-bypass-blocked-external-domains' => true,
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'editprotected' => true,
		'editofficeprotected' => true,
		'sboverride' => true,
		'tboverride' => true,
	],
	'editmycssjs' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'editmyusercss' => true,
		'editmyuserjson' => true,
		'editmyuserjs' => true,
	],
	'editmyoptions' => [
		'editmyoptions' => true,
		'editmyuserjson' => true,
	],
	'editinterface' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'editinterface' => true,
		'edituserjson' => true,
		'editsitejson' => true,
	],
	'editsiteconfig' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'editinterface' => true,
		'edituserjson' => true,
		'editsitejson' => true,
		'editusercss' => true,
		'edituserjs' => true,
		'editsitecss' => true,
		'editsitejs' => true,
	],
	'createeditmovepage' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'createpage' => true,
		'createtalk' => true,
		'delete-redirect' => true,
		'move' => true,
		'move-rootuserpages' => true,
		'move-subpages' => true,
		'move-categorypages' => true,
		'suppressredirect' => true,
	],
	'uploadfile' => [
		'upload' => true,
		'reupload-own' => true,
	],
	'uploadeditmovefile' => [
		'upload' => true,
		'reupload-own' => true,
		'reupload' => true,
		'upload_by_url' => true,
		'movefile' => true,
		'suppressredirect' => true,
	],
	'patrol' => [
		'patrol' => true,
	],
	'rollback' => [
		'rollback' => true,
	],
	'blockusers' => [
		'block' => true,
		'blockemail' => true,
	],
	'viewdeleted' => [
		'browsearchive' => true,
		'deletedhistory' => true,
		'deletedtext' => true,
	],
	'viewrestrictedlogs' => [
		'abusefilter-hidden-log' => true,
		'abusefilter-log-private' => true,
		'abusefilter-view-private' => true,
		'spamblacklistlog' => true,
		'suppressionlog' => true,
		'titleblacklistlog' => true,
	],
	'delete' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'browsearchive' => true,
		'deletedhistory' => true,
		'deletedtext' => true,
		'delete' => true,
		'bigdelete' => true,
		'deletelogentry' => true,
		'deleterevision' => true,
		'undelete' => true,
		'nuke' => true,
	],
	'oversight' => [
		'abusefilter-hide-log' => true,
		'suppressrevision' => true,
		'viewsuppressed' => true,
	],
	'protect' => [
		'edit' => true,
		'minoredit' => true,
		'applychangetags' => true,
		'changetags' => true,
		'editcontentmodel' => true,
		'editprotected' => true,
		'editofficeprotected' => true,
		'protect' => true,
	],
	'viewmywatchlist' => [
		'viewmywatchlist' => true,
	],
	'editmywatchlist' => [
		'editmywatchlist' => true,
	],
	'sendemail' => [
		'sendemail' => true,
	],
	'createaccount' => [
		'createaccount' => true,
		'tboverride-account' => true,
		'override-antispoof' => true,
	],
	'privateinfo' => [
		'viewmyprivateinfo' => true,
	],
	'mergehistory' => [
		'mergehistory' => true,
	],
	'oath' => [
		'oathauth-api-all' => true,
		'oathauth-verify-user' => true,
	],
	'checkuser' => [
		'checkuser' => true,
		'checkuser-log' => true,
	],
	'checkuser-temporary-account' => [
		'checkuser-temporary-account' => true,
		'checkuser-temporary-account-no-preference' => true,
		'checkuser-temporary-account-log' => true,
	],
];
# END GRANT CONFIG

# Rate limit stuff
$wgRateLimits = [
	'move' => [
		'newbie' => [ 2, 120 ],
		# To limit high-rate move page attacks on smaller wikis
		# Newbie limit was trivially avoided by a patient vandal
		'user' => [ 8, 60 ],
	],
		'edit' => [
			// 8 ed./min per each non-autoconfirmed, or group thereof from same IP
			'ip' => [ 8, 60 ],
			'newbie' => [ 8, 60 ],
			'user' => [ 90, 60 ],
		],
		'badcaptcha' => [ // Bug T92376
			// Mainly for account creation by unregistered spambots.
			// A human probably gives up after a handful attempts to
			// register, but ip/newbie editing needs to be considered too.
			'ip' => [ 15, 60 ],
			'newbie' => [ 15, 60 ],
			// Mainly to catch linkspam bot edits. Account creations by users?
			// Some wikis request tons of captchas to users under 50 edits:
			// the limit needs to be higher than any human can conceivably do.
			'user' => [ 30, 60 ],
		],
		'mailpassword' => [
			// 5 password reminders per hour per IP
			'ip' => [ 5, 3600 ],
		],
		'sendemail' => [
			'ip' => [ 5, 86400 ], // 5 per day per ip (logged-out and new users)
			'newbie' => [ 5, 86400 ], // 5 per day for non-autoconfirmed
			'user-global' => [ 20, 86400 ], // 20 per day for users
		],
		'changeemail' => [
			'ip-all' => [ 10, 3600 ],
			'user' => [ 4, 86400 ]
		],
		// For expanded rollback permissions...
		'rollback' => [
			'user' => [ 100, 60 ], // T228708
			'newbie' => [ 5, 120 ],
		],
		'purge' => [
			// 30 page purges per minute
			'ip' => [ 30, 60 ],
			'user' => [ 30, 60 ],
		],
		'linkpurge' => [
			// 30 backlink purges per minute
			'ip' => [ 30, 60 ],
			'user' => [ 30, 60 ],
		],
		'renderfile' => [
			// 1400 new thumbnails per minute
			'ip' => [ 700, 30 ],
			'user' => [ 700, 30 ],
		],
		'renderfile-nonstandard' => [
			// 140 new thumbnails per minute
			'ip' => [ 70, 30 ],
			'user' => [ 70, 30 ],
		],
		'cxsave' => [
			// 10 saves per 30 seconds
			'ip' => [ 10, 30 ],
			'user' => [ 10, 30 ],
		],
		'badoath' => [
			'&can-bypass' => false,
			'user' => [ 10, 60 ],
			'user-global' => [ 10, 60 ],
		],
		'upload' => [
			'user' => [ 10, 120 ],
			'newbie' => [ 3, 120 ],
		],

];

#Number of account creations per IP per day
$wgAccountCreationThrottle = [ [
	'count' => 10,
	'seconds' => 86400,
] ];


# Password policies
$wgPasswordPolicy['policies'] = [
		'bureaucrat' => [
			'MinimalPasswordLength' => ['value' => 10, 'forceChange' => true],
			'MinimumPasswordLengthToLogin' => 1,
		],
		'sysop' => [
			'MinimalPasswordLength' => ['value' => 10, 'forceChange' => true],
			'MinimumPasswordLengthToLogin' => 1,
		],
		'interface-admin' => [
			'MinimalPasswordLength' => ['value' => 10, 'forceChange' => true],
			'MinimumPasswordLengthToLogin' => 1,
		],
		'bot' => [
			'MinimalPasswordLength' => 8,
			'MinimumPasswordLengthToLogin' => 1,
		],
		'checkuser' => [
                        'MinimalPasswordLength' => ['value' => 10, 'forceChange' => true],
                        'MinimumPasswordLengthToLogin' => 1,
		],
		'suppress' => [
			'MinimalPasswordLength' => ['value' => 10, 'forceChange' => true],
                        'MinimumPasswordLengthToLogin' => 1,
		],
		'importupload' => [
                        'MinimalPasswordLength' => ['value' => 10, 'forceChange' => true],
                        'MinimumPasswordLengthToLogin' => 1,
		],
		'steward' => [
			'MinimalPasswordLength' => [ 'value' => 12, 'forceChange' => true ],
			'MinimumPasswordLengthToLogin' => 1,
		],
		'default' => [
			'MinimalPasswordLength' => [ 'value' => 8, 'suggestChangeOnLogin' => true ],
			'PasswordCannotBeSubstringInUsername' => [
				'value' => true,
				'suggestChangeOnLogin' => true
			],
			'PasswordCannotMatchDefaults' => [ 'value' => true, 'suggestChangeOnLogin' => true ],
			'MaximalPasswordLength' => [ 'value' => 4096, 'suggestChangeOnLogin' => true ],
			'PasswordNotInCommonList' => [ 'value' => true, 'suggestChangeOnLogin' => true ],
		],
];
$wgCentralAuthGlobalPasswordPolicies['policies'] = [
	'steward' => [
		'MinimalPasswordLength' => [ 'value' => 12, 'forceChange' => true ],
		'MinimumPasswordLengthToLogin' => 1,
	],
	'global-sysop' => [
		'MinimalPasswordLength' => [ 'value' => 10, 'forceChange' => true ],
		'MinimumPasswordLengthToLogin' => 1,
	],
	'sysadmin' => [
		'MinimalPasswordLength' => [ 'value' => 12, 'forceChange' => true ],
		'MinimumPasswordLengthToLogin' => 1,
	],
	'staff' => [
		'MinimalPasswordLength' => [ 'value' => 12, 'forceChange' => true ],
		'MinimumPasswordLengthToLogin' => 1,
	],
	'default' => [
		'MinimalPasswordLength' => [ 'value' => 8, 'suggestChangeOnLogin' => true ],
		'PasswordCannotBeSubstringInUsername' => [
			'value' => true,
			'suggestChangeOnLogin' => true
		],
		'PasswordCannotMatchDefaults' => [ 'value' => true, 'suggestChangeOnLogin' => true ],
		'MaximalPasswordLength' => [ 'value' => 4096, 'suggestChangeOnLogin' => true ],
		'PasswordNotInCommonList' => [ 'value' => true, 'suggestChangeOnLogin' => true ],
	],
];


# Stewards outside metawiki
if ($wgDBname !== 'metawiki') {
	$wgExtensionFunctions[] = function() use ( &$wgGroupPermissions ) {
		unset( $wgGroupPermissions['steward'] );
		$wgGroupPermissions['steward']['userrights'] = true;
		$wgGroupPermissions['steward']['edit'] = true;
	};
};

$wgScriptPath = "/w";
$wgResourceBasePath = $wgScriptPath;
$wgRightsIcon = "$wgScriptPath/resources/assets/licenses/cc-by-sa.png";

$wgEnableMultiBlocks = true;
$wgEnablePartialActionBlocks = true;

$wgExtensionFunctions[] = function() use ( &$wgGroupPermissions ) {
	unset( $wgGroupPermissions['push-subscription-manager'] );
};

$wgCookieSameSite = "None";
$wgUseSameSiteLegacyCookies = true;
$wgCentralAuthCookies = true;
$wgCentralAuthCookieDomain = '.wickedgov.org';
$wgCentralAuthAutoMigrate = true;
$wgCentralAuthLoginWiki = 'loginwiki';
$wgCentralAuthAutoMigrateNonGlobalAccounts = true;
$wgCentralAuthStrict = true;
$wgCentralAuthAutoCreateWikis = ['loginwiki', 'metawiki'];
$wgCentralAuthAutoLoginWikis = [
	# Mapping from domain name to wiki id for other wikis to automatically login into
	'login.wickedgov.org' => 'loginwiki',
];
if ($wgDBname === 'metawiki') {
	$wgCentralAuthEnableGlobalRenameRequest	= true;
};
$wgCentralAuthAutomaticVanishPerformer = 'GlobalVanishRequests';

$wgAbuseFilterCentralDB	= 'metawiki';
if ($wgDBname === 'metawiki') {
	$wgAbuseFilterIsCentral	= true;
};

if ($wgDBname === 'testwiki' or $wgDBname === 'loginwiki') {
$wgAutoCreateTempUser = [
	'known' => true,
	'enabled' => true,
	'actions' => [
		'edit',
	],
	'genPattern' => '~$1',
	'matchPattern' => null,
	'reservedPattern' => '~$1',
	'serialProvider' => [
		'type' => 'centralauth',
		'useYear' => true,
	],
	'serialMapping' => [
		'type' => 'plain-numeric',
	],
	'expireAfterDays' => 90,
	'notifyBeforeExpirationDays' => 10,
];
} else {
$wgAutoCreateTempUser = [
	'known' => false,
	'enabled' => false,
	'actions' => [
		'edit',
	],
	'genPattern' => '~$1',
	'matchPattern' => null,
	'reservedPattern' => '~$1',
	'serialProvider' => [
		'type' => 'centralauth',
		'useYear' => true,
	],
	'serialMapping' => [
		'type' => 'plain-numeric',
	],
	'expireAfterDays' => 90,
	'notifyBeforeExpirationDays' => 10,
];
};

$wgInterwikiCentralDB = 'metawiki';
#$wgVirtualDomainsMapping['virtual-interwiki'] = ['db' => 'metawiki'];