Add per-service customization, stealth hardening, and BYOS support

- HTTP: configurable server_header, response_code, fake_app presets
  (apache/nginx/wordpress/phpmyadmin/iis), extra_headers, custom_body,
  static files directory mount
- SSH/Cowrie: configurable kernel_version, hardware_platform, ssh_banner,
  and users/passwords via COWRIE_USERDB_ENTRIES; switched to build mode
  so cowrie.cfg.j2 persona fields and userdb.txt generation work
- SMTP: configurable banner and MTA hostname
- MySQL: configurable version string in protocol greeting
- Redis: configurable redis_version and os string in INFO response
- BYOS: [custom-*] INI sections define bring-your-own Docker services
- Stealth: rename all *_honeypot.py → server.py; replace HONEYPOT_NAME
  env var with NODE_NAME across all 22+ service templates and plugins;
  strip "honeypot" from all in-container file content
- Config: DeckyConfig.service_config dict; INI [decky-N.svc] subsections;
  composer passes service_cfg to compose_fragment
- 350 tests passing (100%)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

decnet/ini_loader.py

@@ -12,11 +12,26 @@ Format:
     ip=192.168.1.82               # optional
     services=ssh,smb              # optional; falls back to --randomize-services
 
+    [hostname-1.ssh]              # optional per-service persona config
+    kernel_version=5.15.0-76-generic
+    users=root:toor,admin:admin123
+
+    [hostname-1.http]
+    server_header=nginx/1.18.0
+    fake_app=wordpress
+
     [hostname-2]
     services=ssh
 
     [hostname-3]
     ip=192.168.1.32
+
+    # Custom (bring-your-own) service definitions:
+    [custom-myservice]
+    binary=my-docker-image:latest
+    exec=/usr/bin/myservice -p 8080
+    ports=8080
+
 """
 
 import configparser
@@ -29,6 +44,16 @@ class DeckySpec:
     name: str
     ip: str | None = None
     services: list[str] | None = None
+    service_config: dict[str, dict] = field(default_factory=dict)
+
+
+@dataclass
+class CustomServiceSpec:
+    """Spec for a user-defined (bring-your-own) service."""
+    name: str          # service slug, e.g. "myservice" (section is "custom-myservice")
+    image: str         # Docker image to use
+    exec_cmd: str      # command to run inside the container
+    ports: list[int] = field(default_factory=list)
 
 
 @dataclass
@@ -38,6 +63,7 @@ class IniConfig:
     interface: str | None = None
     log_target: str | None = None
     deckies: list[DeckySpec] = field(default_factory=list)
+    custom_services: list[CustomServiceSpec] = field(default_factory=list)
 
 
 def load_ini(path: str | Path) -> IniConfig:
@@ -56,13 +82,40 @@ def load_ini(path: str | Path) -> IniConfig:
         cfg.interface = g.get("interface")
         cfg.log_target = g.get("log_target") or g.get("log-target")
 
+    # First pass: collect decky sections and custom service definitions
     for section in cp.sections():
         if section == "general":
             continue
+        if "." in section:
+            continue  # subsections handled in second pass
+        if section.startswith("custom-"):
+            # Bring-your-own service definition
+            s = cp[section]
+            svc_name = section[len("custom-"):]
+            image = s.get("binary", "")
+            exec_cmd = s.get("exec", "")
+            ports_raw = s.get("ports", "")
+            ports = [int(p.strip()) for p in ports_raw.split(",") if p.strip().isdigit()]
+            cfg.custom_services.append(
+                CustomServiceSpec(name=svc_name, image=image, exec_cmd=exec_cmd, ports=ports)
+            )
+            continue
         s = cp[section]
         ip = s.get("ip")
         svc_raw = s.get("services")
         services = [sv.strip() for sv in svc_raw.split(",")] if svc_raw else None
         cfg.deckies.append(DeckySpec(name=section, ip=ip, services=services))
 
+    # Second pass: collect per-service subsections [decky-name.service]
+    decky_names = {d.name for d in cfg.deckies}
+    decky_map = {d.name: d for d in cfg.deckies}
+    for section in cp.sections():
+        if "." not in section:
+            continue
+        decky_name, _, svc_name = section.partition(".")
+        if decky_name not in decky_names:
+            continue  # orphaned subsection — ignore
+        svc_cfg = {k: v for k, v in cp[section].items()}
+        decky_map[decky_name].service_config[svc_name] = svc_cfg
+
     return cfg