Feature 57 (config and provisioning): modules declare config and provisions, their files rendered from templates; synced with main (issues of feature 57, 874)

2026-10-16 07:37:43 +00:00
parent 1a2c917abf
commit 9652b2d5ce
771 changed files with 52063 additions and 1774 deletions
@@ -0,0 +1,12 @@
+# Written by the mesh (module nfs-server, novox/hq ADR 0263). Replaced on every push; a drop-in of
+# the operator's that sorts after this one overrides it, and is theirs.
+#
+# NFS version 4 only: a client needs port 2049 and nothing else, so the module opens nothing more
+# than that, to the private network. Version 3 needs rpcbind and mountd, on ports the mesh does not open.
+[nfsd]
+vers2=n
+vers3=n
+vers4=y
+vers4.0=n
+vers4.1=y
+vers4.2=y
@@ -0,0 +1,10 @@
+# Written by the mesh (module nfs-server, novox/hq ADR 0263) from this machine's assignment.
+# Replaced on every push; change the `shares` setting, never this file.
+#
+# The shares: name=folder, or name=folder:ro, one share per folder. The grants: share=node:rw|ro[,…],
+# which nodes may mount each and how. The module's process exports a share to a node's private address
+# only when it is granted here and that node's mounts module wants it, every client mapped to the
+# folder's owner, and only to addresses inside the range below.
+shares=${config:shares}
+grants=${config:grants}
+range=${machine:mesh-range}