Drew: Created page with "* Move WikiJS (Wiki2) into Kubernetes * ^^ means we need to deploy Kubernetes cluster * deploy keycloak for use as SSO. * Integrate Keycloak with Budibase * Move Budibase..."

2022-05-29T17:28:36Z

Created page with "* Move WikiJS (Wiki2) into Kubernetes * ^^ means we need to deploy Kubernetes cluster * deploy keycloak for use as SSO. * Integrate Keycloak with Budibase * Move Budibase..."

New page

* Move WikiJS (Wiki2) into Kubernetes

* ^^ means we need to deploy Kubernetes cluster

* deploy keycloak for use as SSO.

* Integrate Keycloak with Budibase

* Move Budibase into Kubernetes

* Use Budibase to sync active members from Quickbooks to AD

* Use Budibase to enable self-service password resets

* Automatically create accounts for members.

* Send them an email telling them to perform a self-service password reset to get access to their account

* no plain-text passwords in emails, bucko.

* members added via QB added to an 'Automated' or 'QB-managed' group.

* Disable accounts after X amount of time without active membership unless lead/board/volunteer/working/intern

* Leads/Board/Admin exempted from automated disable.

* 2FA (push notif / TOTP)

* Sync Google Directory with AD (this will be much more complicated, probably out of the question rn).

* Sync O365 Directory with AD (should be easy to set up. But do we care rn? -- probably not, hold off until if/when there's a need.)

<br>

== VPN ==

* We need a VPN for connecting to the Spark.spork network.

* Should be one cert available to everyone, but require that PLUS LDAP/AD creds.

* Determine if Wireguard is adequate or if there's a need for OpenVPN.

* Big bonus points for LDAP+2FA

* 

Network Goals - Revision history

Drew: Created page with "* Move WikiJS (Wiki2) into Kubernetes * ^^ means we need to deploy Kubernetes cluster * deploy keycloak for use as SSO. * Integrate Keycloak with Budibase * Move Budibase..."