l0pht

Regional Cluster design:

graph TD;
    DockerShell1-->DockerSSHD1;
    DockerShell2-->DockerSSHD1;
    DockerShell3-->DockerSSHD2;
    DockerShell4-->DockerSSHD2;
    DockerShell5-->DockerSSHD2;
    DockerSSHD1-->Server1;
    DockerSSHD2-->Server2;
    Server1-- Optional VPN -->OpenVPN;
    Server2-- Optional VPN -->OpenVPN;
    OpenVPN -- Leaving Region -->NordVPN
    NordVPN-->INTERNETZ

1. Server is running OpenSSH in a docker and shares /var/run/docker.sock with the OpenSSH-Docker instance. This allows to have just the docker_cli to be installed and spin up a shell for the user without having to run an extra docker-daemon (but using the docker-daemon from Server instead).
2. On small deployments the OpenVPN Server can be the same as Server[12]. This allows to run everything off 1 single server.
3. AWS Fargate could be utilized by nesting the entire setup in a Docker-in-Docker (dind) configuration.

Cluster can be deployed in various regions for less latency.