Domain structure recomendations

@robb evaluate than LDAP-connected Apps like WebTop, NextCloud, SOGo must contact LDAP server at every login

Any service outside the GREEN network who’s connecting to user database needs constant access to user list.