https://git.psi.ch/linux-infra/sysdb/ is pulled into /var/www/sysdb/app/ (no automation, just by hand)

httpd runs the service and it needs restarting, when pulling changes

Access rights are granted on the environment level (bob env list). At this time, most of the users and groups come from the AD, except for the sysdb-admins, which is defined locally, see /etc/group

Detailed documentation of the software is at:

http://linux-infra.gitpages.psi.ch/admin-guide/index.html