Add per-service customization, stealth hardening, and BYOS support

- HTTP: configurable server_header, response_code, fake_app presets
  (apache/nginx/wordpress/phpmyadmin/iis), extra_headers, custom_body,
  static files directory mount
- SSH/Cowrie: configurable kernel_version, hardware_platform, ssh_banner,
  and users/passwords via COWRIE_USERDB_ENTRIES; switched to build mode
  so cowrie.cfg.j2 persona fields and userdb.txt generation work
- SMTP: configurable banner and MTA hostname
- MySQL: configurable version string in protocol greeting
- Redis: configurable redis_version and os string in INFO response
- BYOS: [custom-*] INI sections define bring-your-own Docker services
- Stealth: rename all *_honeypot.py → server.py; replace HONEYPOT_NAME
  env var with NODE_NAME across all 22+ service templates and plugins;
  strip "honeypot" from all in-container file content
- Config: DeckyConfig.service_config dict; INI [decky-N.svc] subsections;
  composer passes service_cfg to compose_fragment
- 350 tests passing (100%)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

templates/elasticsearch/Dockerfile

@@ -5,7 +5,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     python3 \
     && rm -rf /var/lib/apt/lists/*
 
-COPY elasticsearch_honeypot.py /opt/elasticsearch_honeypot.py
+COPY server.py /opt/server.py
 COPY entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
 

templates/elasticsearch/entrypoint.sh

@@ -1,3 +1,3 @@
 #!/bin/bash
 set -e
-exec python3 /opt/elasticsearch_honeypot.py
+exec python3 /opt/server.py

templates/elasticsearch/server.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-Elasticsearch honeypot — presents a convincing ES 7.x HTTP API on port 9200.
+Elasticsearch server — presents a convincing ES 7.x HTTP API on port 9200.
 Logs all requests (especially recon probes like /_cat/, /_cluster/, /_nodes/)
 as JSON. Designed to attract automated scanners and credential stuffers.
 """
@@ -11,14 +11,14 @@ import socket
 from datetime import datetime, timezone
 from http.server import BaseHTTPRequestHandler, HTTPServer
 
-HONEYPOT_NAME = os.environ.get("HONEYPOT_NAME", "esserver")
+NODE_NAME = os.environ.get("NODE_NAME", "esserver")
 LOG_TARGET = os.environ.get("LOG_TARGET", "")
 
 _CLUSTER_UUID = "xC3Pr9abTq2mNkOeLvXwYA"
 _NODE_UUID = "dJH7Lm2sRqWvPn0kFiEtBo"
 
 _ROOT_RESPONSE = {
-    "name": HONEYPOT_NAME,
+    "name": NODE_NAME,
     "cluster_name": "elasticsearch",
     "cluster_uuid": _CLUSTER_UUID,
     "version": {
@@ -51,7 +51,7 @@ def _log(event_type: str, **kwargs) -> None:
     event = {
         "ts": datetime.now(timezone.utc).isoformat(),
         "service": "elasticsearch",
-        "host": HONEYPOT_NAME,
+        "host": NODE_NAME,
         "event": event_type,
         **kwargs,
     }
@@ -110,7 +110,7 @@ class ESHandler(BaseHTTPRequestHandler):
         if "_search" in path or "_bulk" in path:
             self._send_json(200, {"took": 1, "timed_out": False, "hits": {"total": {"value": 0}, "hits": []}})
         else:
-            self._send_json(200, {"result": "created", "_id": "1", "_index": "honeypot"})
+            self._send_json(200, {"result": "created", "_id": "1", "_index": "server"})
 
     def do_PUT(self):
         src = self.client_address[0]
@@ -133,6 +133,6 @@ class ESHandler(BaseHTTPRequestHandler):
 
 
 if __name__ == "__main__":
-    _log("startup", msg=f"Elasticsearch honeypot starting as {HONEYPOT_NAME}")
+    _log("startup", msg=f"Elasticsearch server starting as {NODE_NAME}")
     server = HTTPServer(("0.0.0.0", 9200), ESHandler)
     server.serve_forever()