Network Goals

• Move WikiJS (Wiki2) into Kubernetes

• ^^ means we need to deploy Kubernetes cluster

• deploy keycloak for use as SSO.

• Integrate Keycloak with Budibase

• Move Budibase into Kubernetes

• Use Budibase to sync active members from Quickbooks to AD

• Use Budibase to enable self-service password resets

• Automatically create accounts for members.

• Send them an email telling them to perform a self-service password reset to get access to their account

• no plain-text passwords in emails, bucko.

• members added via QB added to an 'Automated' or 'QB-managed' group.

• Disable accounts after X amount of time without active membership unless lead/board/volunteer/working/intern

• Leads/Board/Admin exempted from automated disable.

• 2FA (push notif / TOTP)

• Sync Google Directory with AD (this will be much more complicated, probably out of the question rn).

• Sync O365 Directory with AD (should be easy to set up. But do we care rn? -- probably not, hold off until if/when there's a need.)

VPN

• We need a VPN for connecting to the Spark.spork network.

• Should be one cert available to everyone, but require that PLUS LDAP/AD creds.

• Determine if Wireguard is adequate or if there's a need for OpenVPN.

• Big bonus points for LDAP+2FA

•