DuckCorp » DuckCorp Infrastructure

In the past, data spaces were split to separate services and avoid spreading security problems or configuration mistakes from one service to another. This doesn't necessary lead to real security as sometimes we had to bind-mount spaces inside other spaces in order to allow a legitimate use of multiple protocol to access data. This also lead to available space fragmentation, and we don't have TB of disks.

So we need to rationalize our storage. My first guess would be to split by privacy level:

• user strictly private data, mostly /home, accessible only with very high security protocols (SSH without passwd)
• user sharable private data, like data stored in OC
• user public data, like data on the public FTP
  We should then be able to raise data quota as spaces are less fragmented. Each level would have its own separate quota.

We should also rationalize the access protocols to remove obsolete or unused methods if possible, or perhaps add a brand new wonderful service.