Add per-service customization, stealth hardening, and BYOS support

- HTTP: configurable server_header, response_code, fake_app presets
  (apache/nginx/wordpress/phpmyadmin/iis), extra_headers, custom_body,
  static files directory mount
- SSH/Cowrie: configurable kernel_version, hardware_platform, ssh_banner,
  and users/passwords via COWRIE_USERDB_ENTRIES; switched to build mode
  so cowrie.cfg.j2 persona fields and userdb.txt generation work
- SMTP: configurable banner and MTA hostname
- MySQL: configurable version string in protocol greeting
- Redis: configurable redis_version and os string in INFO response
- BYOS: [custom-*] INI sections define bring-your-own Docker services
- Stealth: rename all *_honeypot.py → server.py; replace HONEYPOT_NAME
  env var with NODE_NAME across all 22+ service templates and plugins;
  strip "honeypot" from all in-container file content
- Config: DeckyConfig.service_config dict; INI [decky-N.svc] subsections;
  composer passes service_cfg to compose_fragment
- 350 tests passing (100%)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

templates/mysql/Dockerfile

@@ -5,7 +5,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     python3 \
     && rm -rf /var/lib/apt/lists/*
 
-COPY mysql_honeypot.py /opt/mysql_honeypot.py
+COPY server.py /opt/server.py
 COPY entrypoint.sh /entrypoint.sh
 RUN chmod +x /entrypoint.sh
 

templates/mysql/entrypoint.sh

@@ -1,3 +1,3 @@
 #!/bin/bash
 set -e
-exec python3 /opt/mysql_honeypot.py
+exec python3 /opt/server.py

templates/mysql/server.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-MySQL honeypot.
+MySQLserver.
 Sends a realistic MySQL 5.7 server handshake, reads the client login
 packet, extracts username, then closes with Access Denied. Logs auth
 attempts as JSON.
@@ -13,24 +13,25 @@ import socket
 import struct
 from datetime import datetime, timezone
 
-HONEYPOT_NAME = os.environ.get("HONEYPOT_NAME", "dbserver")
-LOG_TARGET = os.environ.get("LOG_TARGET", "")
+NODE_NAME     = os.environ.get("NODE_NAME", "dbserver")
+LOG_TARGET    = os.environ.get("LOG_TARGET", "")
+_MYSQL_VER    = os.environ.get("MYSQL_VERSION", "5.7.38-log")
 
-# Minimal MySQL 5.7 server greeting (protocol v10)
+# Minimal MySQL server greeting (protocol v10) — version string is configurable
 _GREETING = (
     b"\x0a"                              # protocol version 10
-    b"5.7.38-honeypot\x00"              # server version + NUL
-    b"\x01\x00\x00\x00"                 # connection id = 1
-    b"\x70\x76\x21\x6d\x61\x67\x69\x63"  # auth-plugin-data part 1
-    b"\x00"                              # filler
-    b"\xff\xf7"                          # capability flags low
-    b"\x21"                              # charset utf8
-    b"\x02\x00"                          # status flags
-    b"\xff\x81"                          # capability flags high
-    b"\x15"                              # auth plugin data length
-    b"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"  # reserved (10 bytes)
-    b"\x21\x4f\x7d\x25\x3e\x55\x4d\x7c\x67\x75\x5e\x31\x00"  # auth part 2
-    b"mysql_native_password\x00"        # auth plugin name
+    + _MYSQL_VER.encode() + b"\x00"     # server version + NUL
+    + b"\x01\x00\x00\x00"               # connection id = 1
+    + b"\x70\x76\x21\x6d\x61\x67\x69\x63"  # auth-plugin-data part 1
+    + b"\x00"                            # filler
+    + b"\xff\xf7"                        # capability flags low
+    + b"\x21"                            # charset utf8
+    + b"\x02\x00"                        # status flags
+    + b"\xff\x81"                        # capability flags high
+    + b"\x15"                            # auth plugin data length
+    + b"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"  # reserved (10 bytes)
+    + b"\x21\x4f\x7d\x25\x3e\x55\x4d\x7c\x67\x75\x5e\x31\x00"  # auth part 2
+    + b"mysql_native_password\x00"       # auth plugin name
 )
 
 
@@ -54,7 +55,7 @@ def _log(event_type: str, **kwargs) -> None:
     event = {
         "ts": datetime.now(timezone.utc).isoformat(),
         "service": "mysql",
-        "host": HONEYPOT_NAME,
+        "host": NODE_NAME,
         "event": event_type,
         **kwargs,
     }
@@ -110,7 +111,7 @@ class MySQLProtocol(asyncio.Protocol):
 
 
 async def main():
-    _log("startup", msg=f"MySQL honeypot starting as {HONEYPOT_NAME}")
+    _log("startup", msg=f"MySQL server starting as {NODE_NAME}")
     loop = asyncio.get_running_loop()
     server = await loop.create_server(MySQLProtocol, "0.0.0.0", 3306)
     async with server: