Securing MediaWiki with Let's Encrypt HTTPS: Certbot, Apache and Nginx
A verified Let's Encrypt setup for MediaWiki: certbot issuance, Apache and Nginx virtual host config, HSTS and OCSP stapling, and the MediaWiki settings that force HTTPS.
Topic
security
A collection of 3 articles
How to Protect MediaWiki Against Brute-Force Logins with Fail2Ban
A verified fail2ban setup for MediaWiki: log failed logins with Wiki2Ban (or the built-in authmanager log), then ban offending IPs with a filter and jail.
How to Secure MediaWiki with Two‑Factor Authentication and SSO Integration
Why strengthen MediaWiki login?
MediaWiki powers public wikis like Wikipedia and many private knowledge bases. Even a well‑configured password policy is not enough against credential stuffing, phishing or insider threats. Adding a second factor and centralising authentication through Single Sign‑On (SSO) raises the security bar dramatically while keeping