Open_Basedir and subdomain

[Volatile]

Hi again, sorry, but I may misunderstand open_basedir and path settings.

So I want to install basic services like nextcloud in a general place, where several subdomains can point to. Until now, I used softlinks, but I think, It would be better to do this via path.

I added ":/var/services/" to "Settings  » Webserver settings  » Paths to append to OpenBasedir".

Then, in the "Create subdomain" -> Path = "/var/services/nextcloud/" and in the drop down of "OpenBasedir-path" I selected "Path from field above".

I expected that this would set to folder at (root)/var/services/nextcloud, as it should be seen as valid destination, but instead, the folder is created at (root)/var/customers/webs/$USER/var/services/nextcloud/

Before I mindlessly try every possible constellation and break the server, I just ask, what I do wrong/misunderstood with the path settings and how to point to subdomain correctly.

BTW I also tried to go down directories with /../ but it's converted to single dot.

[d00p]

a) you cannot set a path outside your homedir as customer, only an admin can do this

b) don't do it. You'll mess up permissions if multiple customers use a "shared" folder

[Volatile]

I can't create subdomains as admin, at least I never saw the button for that.

well, the point is, I am the only one having several domains for different purposes. I also host a small webpage for a friend, who then should also have access to  the webmail (service) like roundcube. I could put the services in my (me us customer) home dir, but no one except me is doing all the maintenance here anyway. I just use two customers to have my webpages hierarchically divided from that of my friend, otherwise I would ditch customers completely and do this all as "admin" if I could. It's me, after all

But thanks so far. I guess I do it with softlinks then. It costs to much time to just get it done otherwise.

[d00p]

Just now, Volatile said:

I can't create subdomains as admin, at least I never saw the button for that.

how about just adding it as domain...?

1 minute ago, Volatile said:

who then should also have access to  the webmail (service) like roundcube

weren't you just talking about nextcloud? I dont understand the need to let multiple domains point to the same directory (cross-customer)....either use ONE fixed domain for the service and tell you friend to use it, or if  required, make a redirect from his domain to the desired domain where the service/application is installed...

If you want to keep mixing up homedirs and using softlinks - you may do so - but please specifically mention this if you ask for support here later on as it will definetly lead to issues...

[Grakser]

I had the same confusion. Adding :/var/services/ to OpenBasedir only allows access, but doesn’t change where the subdomain path actually points. When you set the subdomain path to /var/services/nextcloud, the panel still prepends the user path like /var/customers/webs/$USER/, unless you manually adjust it in the backend or use root-level config. Using /../ won’t help—it’s sanitized for security. I ended up creating a symlink inside /var/customers/webs/$USER/ pointing to /var/services/nextcloud, and allowed both paths in OpenBasedir. It works fine. If you want a true shared path across subdomains, you'd need to configure this outside the web panel using Apache/Nginx manually.

[d00p]

You should not put user data outside of the customers homedir...