118 bootstrap procedure

[runleveldev]

Required features:

• 'Site' model (id PK, name, internalDomain, subnet, gateway, dnsForwarders). FRE configures (1, 'default', , , , )
• 'Group' model (gidNumber PK, cn, isAdmin), FRE configures [(GID_MIN, 'sysadmins', True), (GID_MIN + 1, 'ldapusers', False)]
• 'User' model, fields based on LDAP schemas (uidNumber PK, uid, gidNumber, homeDirectory, loginShell, cn, sn, givenName, mail, sshPublicKey, userPassword, status), FRE configures the first user using UID_MIN.
• 'UserGroups' association model (uidNumber, gidNumber). Users get 'ldapusers' as primary group by default. 'sysadmins' denotes cluster superusers. The 'ldapusers' group will get SUDO on containers, but only 'sysadmins' will on Nodes and core infra containers
• 'ExternalDomain' model (id, name, cloudflareApiKey)
• Alter 'Service' model add externalDomainId to http services
• Alter 'Container' model replace username with userId
• Create dnsmasq.conf template
• Some sort of acme configuration, lego
• Node import
• Container import
• Implement API-backed container creation

[cmyers-mieweb]

Did we want to also include additional rate limiting for logins and registers inside /create-a-container/views/server.js?
Something similar to adding this const

  const authLimiter = RateLimit({
    windowMs: 15 * 60 * 1000, // 15 minutes
    max: 10, // max 10 attempts per IP per window
    standardHeaders: true,
    legacyHeaders: false
  });

and then applying it to lines 116 and 117 app.use('/login', loginRouter); and app.use('/register', registerRouter);

  app.use('/login', authLimiter, loginRouter);
  app.use('/register', authLimiter, registerRouter);

[runleveldev]

Did we want to also include additional rate limiting for logins and registers inside /create-a-container/views/server.js? Something similar to adding this const

  const authLimiter = RateLimit({
    windowMs: 15 * 60 * 1000, // 15 minutes
    max: 10, // max 10 attempts per IP per window
    standardHeaders: true,
    legacyHeaders: false
  });

and then applying it to lines 116 and 117 app.use('/login', loginRouter); and app.use('/register', registerRouter);

  app.use('/login', authLimiter, loginRouter);
  app.use('/register', authLimiter, registerRouter);

The rate limit is actually applied globally. See line 73 of the server.js

[cmyers-mieweb]

Approved, we can work together on the merge