We try to set up common services in a consistent manner. Generally, a shared service should live in `/afs/hcoop.net/common/app/$app`, and be configured to track a release branch in the upstream version control to make updates easy. Review all hosted applications at least quarterly.

Make sure `system:anyuser` has as little access as needed and restrict the things service keytabs can modify.

'''todo: explains acls etc. more consistent formatting.'''

== roundcube mail ==

https://webmail.hcoop.net

Root = `/afs/hcoop.net/common/app/roundcube/app`. Logs are written to `$root/logs`, temp files in `$root/temp`. Main source is in `$root/roundcubemail`, tracking the `release-0.8` branch.

Runs as pts user `roundcube`.

Configured to use the classic theme by default because the new larry theme wastes too much vertical space (unusable on a 1366x768 laptop, even fullscreen).

== phpmyadmin ==

Root = `/afs/hcoop.net/common/app/phpmyadmin/app`. Source in `$root/phpmyadmin`, tracking the `STABLE` branch.

Runs as pts user `phpmyadmin`.

== Other Services ==

Some services have more detailed maintenance documentation:

 * /MoinMoin
----
CategorySystemAdministration