* Distinguishes between three groups of files
** '''public''': Files which are available to all clients (theoretically even to the entire internet, added to clients via GENTOO_MIRRORS)
** '''site-localrestricted''': Files which are only available to authenticated clients belonging to the same infrastructure (for example those which would put us into [http://www.bettercallsaul.com/ legal troubles] if available to the public, used by clients via a ''local'' entry in <code>/etc/portage/mirrors</code>)
*** A subdirectory named after a site will be created below <code>site-local</code>, for example <code>site-local/example-site</code>.
** '''stackrole-localrestricted''': Files which are only available to authenticated clients belonging to the same infrastructure and the software stack group (private files of a specific customer, used by clients via a ''local'' entry in <code>/etc/portage/mirrors</code>)*** A subdirectory per stack role will be created below <code>stackrole-localrestricted</code>, for example <code>stackrole-localrestricted/secret-stackmediawiki_mysql</code>.
* Provides an easy way to let an administrator manually upload new files, for example via WebDAV-CGI, SFTP or a similar mechanism.
* Possibility to authenticate clients either via HTTP basic auth or client certificates.
* Old or no longer supported files will be removed automatically
* Can be implemented on the [[#Build_host_requirements|build host]]
== Directory structure ==