2026-09-25 - 2026-09-28
Overview
67 Pull requests merged by 2 users
Merged
#124 The forge announces every merge, whoever made it
Merged
#123 nats declares the certificate directory it mounts
Merged
#122 nats serves the mesh's existing broker certificate
Merged
#121 nats declares the upstream image it is built from
Merged
#120 lavinmq, amqp-ping and amqp-email-forwarder leave the catalogue
Merged
#119 lavinmq holds mesh-broker again, now the check reads the store
Merged
#118 Undo: claiming mesh-broker made lavinmq unbuildable
Merged
#117 lavinmq keeps mesh-broker until something else can take it
Merged
#116 The Go base has to be 1.26 for what compiles the controller's code
Merged
#115 The nats module, and every manifest's event names made local
Merged
#113 fail2ban never bans a tunnel peer: ignoreip names the mesh range
Merged
#112 Rename seat claims to mesh-*/node-*; retire verdaccio (ADR 0121)
Merged
#111 dnsmasq owns its resolver format: node-zones is a template (ADR 0120)
Merged
#110 The uplink's managers are modules: networkmanager, systemd-networkd, dhcpcd (hq ADR 0117)
Merged
#109 dnsmasq: the operator's own names have a home the mesh never rewrites
Merged
#108 mssql: its data is placed — the last /services placement retires
Merged
#107 sshd: the operator's door is a module
Merged
#106 dnsmasq: the runtime's DNS is written into daemon.json, never over it
Merged
#105 mailu: the smtp provision serves the name its certificate answers to
Merged
#104 Six modules name no /var/lib: the root is a place, the maps reference it
Merged
#103 mailu: seventeen data directories are placed, not stated
Merged
#102 nextcloud: it lives under its own name, and html is placed
Merged
#101 gitea: its data and grants are placed, not stated
Merged
#100 mongodb: its data directory is placed, not stated
Merged
#99 portainer: its data directory is placed, not stated
Merged
#98 only-office: its directories are placed, not stated
Merged
#97 Module data lives in /var/lib, now that nothing is mid-cutover
Merged
#96 A bucket is the one the mesh derives, and the photos module named another
Merged
#95 lavinmq: the broker TLS directory is the operator's, read by whoever needs it
Merged
#94 route-adapter: write a body limit as the predecessor's buffering middleware
Merged
#59 nextcloud: real mesh module, MariaDB→PostgreSQL, S3 via _FILE secrets
Merged
#58 minio: the real 4-node/8-drive erasure-coded cluster, both public routes, verified live on novox
Merged
#55 postgres: declare the data directory's real owner; keycloak: use the port template
Merged
#93 mailu: one WEBMAIL_ADDRESS, the mesh's container name
Merged
#69 The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on
Merged
#92 mailu certifies itself, take two — the fall-through is now a behaviour
Merged
#91 mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour
Merged
#90 mailu certifies itself: the edge passes unknown ACME tokens through now
Merged
#89 portainer: serve its public name, hold its real data, run the image the machine runs
Merged
#88 only-office: pin the machine side of its port
Merged
#87 invoicing: MONGO_DB says the granted database's name
Merged
#86 invoicing: the photos lessons, applied before its window
Merged
#85 mongodb: the server container is mongodb-server, not the predecessor's name
Merged
#84 Every credential provider says whether it still holds a consumer (hq issue 120)
Merged
#83 mailu: the queue is root's and traversable, which is postfix's own convention
Merged
#82 mailu: cert flavor while the predecessor's proxy owns the challenge path
Merged
#81 automx: the seed writes the schema 2021.6 reads
Merged
#80 automx: the schema its seed writes belongs to one automx2, so that one is named
Merged
#79 mailu: the containers are named by the vocabulary 2024.06 reads
Merged
#78 mailu: every container asks the module's own resolver, pinned where they can find it
Merged
#77 mailu: the admin API answers on 8080 since 2024.06
Merged
#76 automx: the launcher's wrapper is written by the build that ships it
Merged
#75 mailu: pin exactly what phase 1 verified
Merged
#74 mailu: 2024.06 closes 110/143/587 by default; parity says open them
Merged
#73 mailu: the manifest matches the machine, provides smtp, and carries automx
Merged
#72 gitea: the package team may read code, and its units are reconciled
Merged
#70 route-proxy binds the mesh's own authority for internal names; gitea's internal-API refusal joins its route
Merged
#71 gitea: a consumer's user is actually created, and a failed create says why
Merged
#68 minio: declare the route contribution it has always needed, scoped from PR #58
Merged
#67 route-proxy: the trust step skips the fetch when the CA names no roots to get
Merged
#66 route-proxy: the server container resolves its own built artifact
Merged
#65 public-acme: the roots field is named roots, not root
Merged
#64 route-proxy: declare the build context its own Dockerfile has always needed
Merged
#63 builder is a real built module now, not handed over
Merged
#62 minio: install mc in the runtime image, declare its region
Merged
#61 builder: consume package-registry as a real mesh grant, not a hand-faked one
Merged
#60 gitea: listens its real internal ssh port (22), not 2222
1 Pull request proposed by 1 user
Proposed
#114 ssh-client module: the mesh owns ~/.ssh (to-be 29) — HOLD until to-be 29 deploy