Hi TL;DR: - beans.opensuse.org has been migrated to matomo.infra.opensuse.org - the database has been moved into the Galera cluster - the old Piwik installation is upgraded to Matomo 3.13.0 Long version: Some of the openSUSE web-pages are equipped with inline Piwik code for tracking and analysis of the visitors since years. The original setup was done under my umbrella - and not really touched much over the years. While we all might need to start a conversation about "is such tracking/analyzing still needed" (especially with all these new GDPR stuff in mind), I decided to bring the setup to a more current state, first. Reason: the used SLE11 (even with LTSS) and Piwik 3.2.0 were kind of outdated and might had security issues already. So I bumbed the machine to SLE-12-SP5 and upgraded Piwik to Matomo 3.13.0 in a first step. This took some time - and involved also some database migrations for the application. Once this worked - and I got the changes I did integrated into the matomo package in network:utilities, I decided that the best way might be to go forward... In the end, I setup a new Leap 15.1 machine inside the openSUSE Heroes private network (called matomo.infra.opensuse.org). After that, I migrated the database from an old MySQL cluster to the new Galera cluster in the openSUSE Heroes network. Using Leap allowed me to enable some additional features in Matomo (like Geo or Device tracking). At the moment, the Piwik accounts and tracked pages are still the same as before - no changes happened. But we could - in theory - use Heroes accounts from now on. This would make maintaining access to the Matomo instance easier (and reduce the amount of accounts that everybody needs to remember). We might also decide to completely shut down Matomo - or even extend it's usage to other services (like the ones listed on status.o.o). We might also need to clarify if the service - together with all others - is "GDPR clean". These points are open: * GDPR check * keep or shut down Matomo * extend it to monitor (for example) other services like: + download.o.o + build.o.o + planet.o.o + lists.o.o + etherpad.o.o + forums.o.o + ... (some more resources) * align the user accounts with FreeIPA accounts for easier management With kind regards, Lars -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
Hi Lars, Am 05.01.20 um 22:03 schrieb Lars Vogdt:
TL;DR: - beans.opensuse.org has been migrated to matomo.infra.opensuse.org - the database has been moved into the Galera cluster - the old Piwik installation is upgraded to Matomo 3.13.0
Thank you so much. This has been a pain point for a long time and the board has been asking for this for some time. I'm taking the liberty to forward this appropriately, just to make sure that the board is aware that this has finally been upgraded and that it was you doing the work here!
At the moment, the Piwik accounts and tracked pages are still the same as before - no changes happened. But we could - in theory - use Heroes accounts from now on. This would make maintaining access to the Matomo instance easier (and reduce the amount of accounts that everybody needs to remember).
That sounds like a good idea, just a few questions for me to understand this better: - Do we/you have a good understanding what is needed for this (i.e. LDAP?) - Do we have all requirements in place? - Who has access to the Matomo instance as of now (i.e. board?)? Do those people have access to the heroes network / VPN, etc. pp.? Once more, many thanks for this effort. You obviously spent a lot of time with this and helped us, the board and the community a lot! Best regards, Karol Babioch -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
Am January 6, 2020 10:59:29 AM UTC schrieb Karol Babioch <kbabioch@suse.de>:
Thank you so much. This has been a pain point for a long time and the board has been asking for this for some time.
Thanks. Luckily I did not know this. ;-)
But we could - in theory - use Heroes accounts from now on.
That sounds like a good idea, just a few questions for me to understand this better:
- Do we/you have a good understanding what is needed for this (i.e. LDAP?)
Yes. As FreeIPA and the matomo host are in the same network now, this shouldn't be a problem.
- Do we have all requirements in place?
IMHO yes. But I did no final test, yet. I expect this to be similar like Gitlab or with Monitoring: just add the LDAP server URL and basedn in some config.
- Who has access to the Matomo instance as of now (i.e. board?)? Do those people have access to the heroes network / VPN, etc. pp.?
I would declare most accounts as dead: last access times 300 or more days ago - or even never logged in. The main user seems to be Doug - and he does not really have a problem, if we move his 'opensuse' account to a 'ddemaio' account.
Once more, many thanks for this effort. You obviously spent a lot of time with this and helped us, the board and the community a lot!
Welcome and thanks for this. Words like these make me feel welcome and my work appreciated. That gives a good feeling! Regards, Lars -- To unsubscribe, e-mail: heroes+unsubscribe@opensuse.org To contact the owner, e-mail: heroes+owner@opensuse.org
participants (2)
-
Karol Babioch -
Lars Vogdt