diff --git a/server/setup/migrationsPg.ts b/server/setup/migrationsPg.ts
index 5c748c89..de3785f3 100644
--- a/server/setup/migrationsPg.ts
+++ b/server/setup/migrationsPg.ts
@@ -11,7 +11,7 @@ import m3 from "./scriptsPg/1.8.0";
 import m4 from "./scriptsPg/1.9.0";
 import m5 from "./scriptsPg/1.10.0";
 import m6 from "./scriptsPg/1.10.2";
-import m7 from "./scriptsPg/1.10.4";
+import m7 from "./scriptsPg/1.11.0";
 
 // THIS CANNOT IMPORT ANYTHING FROM THE SERVER
 // EXCEPT FOR THE DATABASE AND THE SCHEMA
@@ -24,7 +24,7 @@ const migrations = [
     { version: "1.9.0", run: m4 },
     { version: "1.10.0", run: m5 },
     { version: "1.10.2", run: m6 },
-    { version: "1.10.4", run: m7 },
+    { version: "1.11.0", run: m7 },
     // Add new migrations here as they are created
 ] as {
     version: string;
diff --git a/server/setup/migrationsSqlite.ts b/server/setup/migrationsSqlite.ts
index 80d2139d..b987b833 100644
--- a/server/setup/migrationsSqlite.ts
+++ b/server/setup/migrationsSqlite.ts
@@ -29,7 +29,7 @@ import m24 from "./scriptsSqlite/1.9.0";
 import m25 from "./scriptsSqlite/1.10.0";
 import m26 from "./scriptsSqlite/1.10.1";
 import m27 from "./scriptsSqlite/1.10.2";
-import m28 from "./scriptsSqlite/1.10.4";
+import m28 from "./scriptsSqlite/1.11.0";
 
 // THIS CANNOT IMPORT ANYTHING FROM THE SERVER
 // EXCEPT FOR THE DATABASE AND THE SCHEMA
@@ -58,7 +58,7 @@ const migrations = [
     { version: "1.10.0", run: m25 },
     { version: "1.10.1", run: m26 },
     { version: "1.10.2", run: m27 },
-    { version: "1.10.4", run: m28 },
+    { version: "1.11.0", run: m28 },
     // Add new migrations here as they are created
 ] as const;
 
diff --git a/server/setup/scriptsPg/1.10.4.ts b/server/setup/scriptsPg/1.11.0.ts
similarity index 99%
rename from server/setup/scriptsPg/1.10.4.ts
rename to server/setup/scriptsPg/1.11.0.ts
index da862412..402d3fac 100644
--- a/server/setup/scriptsPg/1.10.4.ts
+++ b/server/setup/scriptsPg/1.11.0.ts
@@ -3,7 +3,7 @@ import { sql } from "drizzle-orm";
 import { isoBase64URL } from "@simplewebauthn/server/helpers";
 import { randomUUID } from "crypto";
 
-const version = "1.10.4";
+const version = "1.11.0";
 
 export default async function migration() {
     console.log(`Running setup script ${version}...`);
diff --git a/server/setup/scriptsSqlite/1.10.4.ts b/server/setup/scriptsSqlite/1.10.4.ts
deleted file mode 100644
index 94f355a8..00000000
--- a/server/setup/scriptsSqlite/1.10.4.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import { APP_PATH } from "@server/lib/consts";
-import Database from "better-sqlite3";
-import path from "path";
-import { isoBase64URL } from "@simplewebauthn/server/helpers";
-import { randomUUID } from "crypto";
-
-const version = "1.10.4";
-
-export default async function migration() {
-    console.log(`Running setup script ${version}...`);
-
-    const location = path.join(APP_PATH, "db", "db.sqlite");
-    const db = new Database(location);
-
-    db.transaction(() => {
-        const webauthnCredentials = db
-            .prepare(
-                `SELECT credentialId, publicKey, userId, signCount, transports, name, lastUsed, dateCreated FROM 'webauthnCredentials'`
-            )
-            .all() as {
-            credentialId: string;
-            publicKey: string;
-            userId: string;
-            signCount: number;
-            transports: string | null;
-            name: string | null;
-            lastUsed: string;
-            dateCreated: string;
-        }[];
-
-        for (const webauthnCredential of webauthnCredentials) {
-            const newCredentialId = isoBase64URL.fromBuffer(
-                new Uint8Array(
-                    Buffer.from(webauthnCredential.credentialId, "base64")
-                )
-            );
-            const newPublicKey = isoBase64URL.fromBuffer(
-                new Uint8Array(
-                    Buffer.from(webauthnCredential.publicKey, "base64")
-                )
-            );
-
-            // Delete the old record
-            db.prepare(
-                `DELETE FROM 'webauthnCredentials' WHERE 'credentialId' = ?`
-            ).run(webauthnCredential.credentialId);
-
-            // Insert the updated record with converted values
-            db.prepare(
-                `INSERT INTO 'webauthnCredentials' (credentialId, publicKey, userId, signCount, transports, name, lastUsed, dateCreated) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
-            ).run(
-                newCredentialId,
-                newPublicKey,
-                webauthnCredential.userId,
-                webauthnCredential.signCount,
-                webauthnCredential.transports,
-                webauthnCredential.name,
-                webauthnCredential.lastUsed,
-                webauthnCredential.dateCreated
-            );
-        }
-
-        // 1. Add the column (nullable or with placeholder) if it doesn’t exist yet
-        db.prepare(
-            `ALTER TABLE resources ADD COLUMN resourceGuid TEXT DEFAULT 'PLACEHOLDER';`
-        ).run();
-
-        // 2. Select all rows
-        const rows = db.prepare(`SELECT resourceId FROM resources`).all() as {
-            resourceId: number;
-        }[];
-
-        // 3. Prefill with random UUIDs
-        const updateStmt = db.prepare(
-            `UPDATE resources SET resourceGuid = ? WHERE resourceId = ?`
-        );
-
-        for (const row of rows) {
-            updateStmt.run(randomUUID(), row.resourceId);
-        }
-
-        db.prepare(
-            `CREATE UNIQUE INDEX resources_resourceGuid_unique ON resources ('resourceGuid');`
-        ).run();
-
-        db.prepare(`ALTER TABLE "orgs" ADD COLUMN IF NOT EXISTS "settings" text`).run();
-    })();
-
-    console.log(`${version} migration complete`);
-}
diff --git a/server/setup/scriptsSqlite/1.11.0.ts b/server/setup/scriptsSqlite/1.11.0.ts
new file mode 100644
index 00000000..3fd74e8c
--- /dev/null
+++ b/server/setup/scriptsSqlite/1.11.0.ts
@@ -0,0 +1,330 @@
+import { APP_PATH } from "@server/lib/consts";
+import Database from "better-sqlite3";
+import path from "path";
+import { isoBase64URL } from "@simplewebauthn/server/helpers";
+import { randomUUID } from "crypto";
+
+const version = "1.11.0";
+
+export default async function migration() {
+    console.log(`Running setup script ${version}...`);
+
+    const location = path.join(APP_PATH, "db", "db.sqlite");
+    const db = new Database(location);
+
+    db.transaction(() => {
+
+        db.prepare(`
+        CREATE TABLE 'account' (
+            'accountId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'userId' text NOT NULL,
+            FOREIGN KEY ('userId') REFERENCES 'user'('id') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'accountDomains' (
+            'accountId' integer NOT NULL,
+            'domainId' text NOT NULL,
+            FOREIGN KEY ('accountId') REFERENCES 'account'('accountId') ON UPDATE no action ON DELETE cascade,
+            FOREIGN KEY ('domainId') REFERENCES 'domains'('domainId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'certificates' (
+            'certId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'domain' text NOT NULL,
+            'domainId' text,
+            'wildcard' integer DEFAULT false,
+            'status' text DEFAULT 'pending' NOT NULL,
+            'expiresAt' integer,
+            'lastRenewalAttempt' integer,
+            'createdAt' integer NOT NULL,
+            'updatedAt' integer NOT NULL,
+            'orderId' text,
+            'errorMessage' text,
+            'renewalCount' integer DEFAULT 0,
+            'certFile' text,
+            'keyFile' text,
+            FOREIGN KEY ('domainId') REFERENCES 'domains'('domainId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE UNIQUE INDEX 'certificates_domain_unique' ON 'certificates' ('domain');--> statement-breakpoint
+        CREATE TABLE 'customers' (
+            'customerId' text PRIMARY KEY NOT NULL,
+            'orgId' text NOT NULL,
+            'email' text,
+            'name' text,
+            'phone' text,
+            'address' text,
+            'createdAt' integer NOT NULL,
+            'updatedAt' integer NOT NULL,
+            FOREIGN KEY ('orgId') REFERENCES 'orgs'('orgId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'dnsChallenges' (
+            'dnsChallengeId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'domain' text NOT NULL,
+            'token' text NOT NULL,
+            'keyAuthorization' text NOT NULL,
+            'createdAt' integer NOT NULL,
+            'expiresAt' integer NOT NULL,
+            'completed' integer DEFAULT false
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'domainNamespaces' (
+            'domainNamespaceId' text PRIMARY KEY NOT NULL,
+            'domainId' text NOT NULL,
+            FOREIGN KEY ('domainId') REFERENCES 'domains'('domainId') ON UPDATE no action ON DELETE set null
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'exitNodeOrgs' (
+            'exitNodeId' integer NOT NULL,
+            'orgId' text NOT NULL,
+            FOREIGN KEY ('exitNodeId') REFERENCES 'exitNodes'('exitNodeId') ON UPDATE no action ON DELETE cascade,
+            FOREIGN KEY ('orgId') REFERENCES 'orgs'('orgId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'loginPage' (
+            'loginPageId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'subdomain' text,
+            'fullDomain' text,
+            'exitNodeId' integer,
+            'domainId' text,
+            FOREIGN KEY ('exitNodeId') REFERENCES 'exitNodes'('exitNodeId') ON UPDATE no action ON DELETE set null,
+            FOREIGN KEY ('domainId') REFERENCES 'domains'('domainId') ON UPDATE no action ON DELETE set null
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'loginPageOrg' (
+            'loginPageId' integer NOT NULL,
+            'orgId' text NOT NULL,
+            FOREIGN KEY ('loginPageId') REFERENCES 'loginPage'('loginPageId') ON UPDATE no action ON DELETE cascade,
+            FOREIGN KEY ('orgId') REFERENCES 'orgs'('orgId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'remoteExitNodeSession' (
+            'id' text PRIMARY KEY NOT NULL,
+            'remoteExitNodeId' text NOT NULL,
+            'expiresAt' integer NOT NULL,
+            FOREIGN KEY ('remoteExitNodeId') REFERENCES 'remoteExitNode'('id') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'remoteExitNode' (
+            'id' text PRIMARY KEY NOT NULL,
+            'secretHash' text NOT NULL,
+            'dateCreated' text NOT NULL,
+            'version' text,
+            'exitNodeId' integer,
+            FOREIGN KEY ('exitNodeId') REFERENCES 'exitNodes'('exitNodeId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'sessionTransferToken' (
+            'token' text PRIMARY KEY NOT NULL,
+            'sessionId' text NOT NULL,
+            'encryptedSession' text NOT NULL,
+            'expiresAt' integer NOT NULL,
+            FOREIGN KEY ('sessionId') REFERENCES 'session'('id') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'subscriptionItems' (
+            'subscriptionItemId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'subscriptionId' text NOT NULL,
+            'planId' text NOT NULL,
+            'priceId' text,
+            'meterId' text,
+            'unitAmount' real,
+            'tiers' text,
+            'interval' text,
+            'currentPeriodStart' integer,
+            'currentPeriodEnd' integer,
+            'name' text,
+            FOREIGN KEY ('subscriptionId') REFERENCES 'subscriptions'('subscriptionId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'subscriptions' (
+            'subscriptionId' text PRIMARY KEY NOT NULL,
+            'customerId' text NOT NULL,
+            'status' text DEFAULT 'active' NOT NULL,
+            'canceledAt' integer,
+            'createdAt' integer NOT NULL,
+            'updatedAt' integer,
+            'billingCycleAnchor' integer,
+            FOREIGN KEY ('customerId') REFERENCES 'customers'('customerId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'usage' (
+            'usageId' text PRIMARY KEY NOT NULL,
+            'featureId' text NOT NULL,
+            'orgId' text NOT NULL,
+            'meterId' text,
+            'instantaneousValue' real,
+            'latestValue' real NOT NULL,
+            'previousValue' real,
+            'updatedAt' integer NOT NULL,
+            'rolledOverAt' integer,
+            'nextRolloverAt' integer,
+            FOREIGN KEY ('orgId') REFERENCES 'orgs'('orgId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'usageNotifications' (
+            'notificationId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'orgId' text NOT NULL,
+            'featureId' text NOT NULL,
+            'limitId' text NOT NULL,
+            'notificationType' text NOT NULL,
+            'sentAt' integer NOT NULL,
+            FOREIGN KEY ('orgId') REFERENCES 'orgs'('orgId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'resourceHeaderAuth' (
+            'headerAuthId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'resourceId' integer NOT NULL,
+            'headerAuthHash' text NOT NULL,
+            FOREIGN KEY ('resourceId') REFERENCES 'resources'('resourceId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`
+        CREATE TABLE 'targetHealthCheck' (
+            'targetHealthCheckId' integer PRIMARY KEY AUTOINCREMENT NOT NULL,
+            'targetId' integer NOT NULL,
+            'hcEnabled' integer DEFAULT false NOT NULL,
+            'hcPath' text,
+            'hcScheme' text,
+            'hcMode' text DEFAULT 'http',
+            'hcHostname' text,
+            'hcPort' integer,
+            'hcInterval' integer DEFAULT 30,
+            'hcUnhealthyInterval' integer DEFAULT 30,
+            'hcTimeout' integer DEFAULT 5,
+            'hcHeaders' text,
+            'hcFollowRedirects' integer DEFAULT true,
+            'hcMethod' text DEFAULT 'GET',
+            'hcStatus' integer,
+            'hcHealth' text DEFAULT 'unknown',
+            FOREIGN KEY ('targetId') REFERENCES 'targets'('targetId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`DROP TABLE 'limits';`).run();
+
+        db.prepare(`
+        CREATE TABLE 'limits' (
+            'limitId' text PRIMARY KEY NOT NULL,
+            'featureId' text NOT NULL,
+            'orgId' text NOT NULL,
+            'value' real,
+            'description' text,
+            FOREIGN KEY ('orgId') REFERENCES 'orgs'('orgId') ON UPDATE no action ON DELETE cascade
+        );
+        `).run();
+
+        db.prepare(`ALTER TABLE 'orgs' ADD 'settings' text;`).run();
+        db.prepare(`ALTER TABLE 'targets' ADD 'rewritePath' text;`).run();
+        db.prepare(`ALTER TABLE 'targets' ADD 'rewritePathType' text;`).run();
+        db.prepare(`ALTER TABLE 'targets' ADD 'priority' integer DEFAULT 100 NOT NULL;`).run();
+
+        const webauthnCredentials = db
+            .prepare(
+                `SELECT credentialId, publicKey, userId, signCount, transports, name, lastUsed, dateCreated FROM 'webauthnCredentials'`
+            )
+            .all() as {
+            credentialId: string;
+            publicKey: string;
+            userId: string;
+            signCount: number;
+            transports: string | null;
+            name: string | null;
+            lastUsed: string;
+            dateCreated: string;
+        }[];
+
+        for (const webauthnCredential of webauthnCredentials) {
+            const newCredentialId = isoBase64URL.fromBuffer(
+                new Uint8Array(
+                    Buffer.from(webauthnCredential.credentialId, "base64")
+                )
+            );
+            const newPublicKey = isoBase64URL.fromBuffer(
+                new Uint8Array(
+                    Buffer.from(webauthnCredential.publicKey, "base64")
+                )
+            );
+
+            // Delete the old record
+            db.prepare(
+                `DELETE FROM 'webauthnCredentials' WHERE 'credentialId' = ?`
+            ).run(webauthnCredential.credentialId);
+
+            // Insert the updated record with converted values
+            db.prepare(
+                `INSERT INTO 'webauthnCredentials' (credentialId, publicKey, userId, signCount, transports, name, lastUsed, dateCreated) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`
+            ).run(
+                newCredentialId,
+                newPublicKey,
+                webauthnCredential.userId,
+                webauthnCredential.signCount,
+                webauthnCredential.transports,
+                webauthnCredential.name,
+                webauthnCredential.lastUsed,
+                webauthnCredential.dateCreated
+            );
+        }
+
+        // 1. Add the column (nullable or with placeholder) if it doesn’t exist yet
+        db.prepare(
+            `ALTER TABLE resources ADD COLUMN resourceGuid TEXT DEFAULT 'PLACEHOLDER';`
+        ).run();
+
+        // 2. Select all rows
+        const rows = db.prepare(`SELECT resourceId FROM resources`).all() as {
+            resourceId: number;
+        }[];
+
+        // 3. Prefill with random UUIDs
+        const updateStmt = db.prepare(
+            `UPDATE resources SET resourceGuid = ? WHERE resourceId = ?`
+        );
+
+        for (const row of rows) {
+            updateStmt.run(randomUUID(), row.resourceId);
+        }
+
+        db.prepare(
+            `CREATE UNIQUE INDEX resources_resourceGuid_unique ON resources ('resourceGuid');`
+        ).run();
+
+        db.prepare(`ALTER TABLE "orgs" ADD COLUMN IF NOT EXISTS "settings" text`).run();
+    })();
+
+    console.log(`${version} migration complete`);
+}