We try to set up common services in a consistent manner. Generally, a shared service should live in /afs/hcoop.net/common/app/$app, and be configured to track a release branch in the upstream version control to make updates easy. Review all hosted applications at least quarterly.
Make sure system:anyuser has as little access as needed and restrict the things service keytabs can modify.
todo: explains acls etc. more consistent formatting.
1. roundcube mail
Root = /afs/hcoop.net/common/app/roundcube/app. Logs are written to $root/logs, temp files in $root/temp. Main source is in $root/roundcubemail, tracking the release-0.9 branch.
Runs as pts user roundcube.
The configuration is stored in $root/config/main.inc.php. It is regrettably not synchronized with the upstream defaults, so on every update make sure to git diff -p config/main.inc.php.dist and scan for any relevant changes to the default config we should adopt.
2. phpmyadmin
Root = /afs/hcoop.net/common/app/phpmyadmin/. Git source in $root/phpmyadmin, tracking the STABLE branch.
Runs as pts user phpmyadmin.
3. Other Services
Some services have more detailed maintenance documentation: