mesh-catalog

4 Commits

Include renames

Author	SHA1	Message	Date
jschoubben	2e4144213b	Revert the document-server link of nextcloud and only-office (mesh-catalog #438 ): since its merge at 11:49 novox cannot be resolved, so no machine can get new instructions (issue 1830) mesh/merge-gate error: builds nextcloud, only-office → novox; no bus step; the check could not run: build-1792666287056161072-store never became ready Details mesh/repo-check error: the check could not run: build-1792666287056161072-store never became ready Details mesh/delivery stopped: the pull request closed unmerged Details mesh/check failed: unit: modules/gitea.test: [gitea] where the poll of merges last looked from could not be read, so none is kept — no runtime \| 2e414…	2026-10-22 12:51:10 +02:00
jochen	2d2e831659	Apply only-office's bound address and secret to onlyoffice settings every tick (issue 1830)	2026-10-22 11:30:26 +02:00
jochen	d3ebaf72eb	Require only-office's document server and carry its address and secret into nextcloud's config (issue 1830)	2026-10-22 11:27:49 +02:00
jochen	fe2040c65e	Keep every password, token and API key the vault's, never a setting (hq issue 342) mesh/merge-gate head fe2040c65ea2 merged into trunk 53e51864969f — pass: builds baserow, gitea, grafana, home-assistant, icecast, influxdb, letta, mailu, n… Details mesh/repo-check head fe2040c65ea2 merged into trunk 53e51864969f — pass: THE CHANGE ALTERS ITS OWN CHECK (merge-check.sh): main's version judged it; the ch… Details mesh/delivery-group group fix/342-a-secret-is-never-a-setting ready: every member ready, and composed together they pass Details mesh/delivery superseded: a newer head of the same pull request Details A setting outranked the vault: baserow, grafana, letta and unifi merged a layer's password over the ${secret:...} in their runtime config, and the gitea, home-assistant, icecast, influxdb, mailu and nextcloud clients read the settings file before the vault's file. A secret in a setting cannot be rotated and is read back by the settings verb. The four files now keep their password protected, so the controller refuses a setting of it. The six clients ignore a secret in the settings file and say so once, by key and never with the value; icecast reads its admin password from the vault's file. checks/secrets refuses a mergeable file whose secret a layer could replace; searxng's nested server.secret_key is listed as known until the controller protects a nested key.	2026-10-13 07:32:19 +02:00