1d71787896
Merge pull request 'The forge announces every merge, whoever made it' (#124) from feat/the-forge-announces-every-merge into main
main
mesh-admin2026-09-28 01:03:48 +00:00
f5969a2f9f
Merge pull request 'nats declares the certificate directory it mounts' (#123) from feat/nats-serves-the-meshs-certificate into main
jschoubben2026-09-27 22:31:20 +00:00
721149eda1
nats declares the certificate directory it mounts
jschoubben2026-09-28 00:15:59 +02:00
8e27bc1e36
Merge pull request 'nats serves the mesh's existing broker certificate' (#122) from feat/nats-serves-the-meshs-certificate into main
jschoubben2026-09-27 22:07:29 +00:00
b1b18ae390
Merge pull request 'nats declares the upstream image it is built from' (#121) from fix/nats-declares-its-base into main
jschoubben2026-09-27 21:40:50 +00:00
c0edebefb9
Merge pull request 'lavinmq, amqp-ping and amqp-email-forwarder leave the catalogue' (#120) from feat/amqp-leaves-the-catalogue into main
jschoubben2026-09-27 21:30:19 +00:00
dca84d3bb4
Merge pull request 'lavinmq holds mesh-broker again, now the check reads the store' (#119) from restore/broker-claim into main
jschoubben2026-09-27 20:24:22 +00:00
6e5b2557ba
Merge pull request 'Undo: claiming mesh-broker made lavinmq unbuildable' (#118) from revert/broker-seat-claim into main
jschoubben2026-09-27 19:53:49 +00:00
5f5798ec8a
Merge pull request 'lavinmq keeps mesh-broker until something else can take it' (#117) from fix/broker-seat-must-stay-held into main
jschoubben2026-09-27 19:17:45 +00:00
51713dd631
Merge pull request 'The Go base has to be 1.26 for what compiles the controller's code' (#116) from fix/go-126-base into main
jschoubben2026-09-27 19:00:38 +00:00
adb02da136
Merge pull request 'The nats module, and every manifest's event names made local' (#115) from feat/nats-genesis into main
jschoubben2026-09-27 17:31:04 +00:00
3d7d896014
Merge pull request 'fail2ban never bans a tunnel peer: ignoreip names the mesh range' (#113) from fix/fail2ban-ignores-the-mesh-range into main
jschoubben2026-09-27 14:55:55 +00:00
278610c0c3
fail2ban never bans a tunnel peer: ignoreip names the mesh range
jschoubben2026-09-27 16:55:34 +02:00
b58a3b487d
A build's outcome belongs to the role, not to the module holding it
jschoubben2026-09-27 15:37:21 +02:00
7b06a7a408
Event names are local now, in the manifests and in the code
jschoubben2026-09-27 14:42:28 +02:00
f0a6ce8d4a
Merge pull request 'Rename seat claims to mesh-*/node-*; retire verdaccio (ADR 0121)' (#112) from feat/system-seats-named-by-scope into main
jschoubben2026-09-27 12:32:29 +00:00
6bedcd3f21
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
jschoubben2026-09-27 14:30:56 +02:00
a093c88c32
nats declares its own server settings, and where the mesh's users go
jschoubben2026-09-27 02:50:35 +02:00
f67f0ca9bc
Merge pull request 'dnsmasq owns its resolver format: node-zones is a template (ADR 0120)' (#111) from feat/roster-facts-are-templates into main
jschoubben2026-09-26 23:51:29 +00:00
968473219a
dnsmasq owns its resolver format: node-zones is a template, not a controller formatter (ADR 0120)
jschoubben2026-09-27 01:33:28 +02:00
ad219beee2
Merge pull request 'The uplink's managers are modules: networkmanager, systemd-networkd, dhcpcd (hq ADR 0117)' (#110) from feat/the-uplink-modules into main
jschoubben2026-09-26 23:00:30 +00:00
fd09b1a50e
review: the uplink managers are the machine's — no state on their services, none for dhcpcd; comments corrected
jochen2026-09-27 00:07:27 +02:00
7aea08d6c3
dhcpcd's mesh block goes at the start: lines after an interface line are that interface's
jochen2026-09-26 23:48:20 +02:00
23d735a0bf
The uplink's managers are modules (hq ADR 0117)
jochen2026-09-26 23:47:31 +02:00
226eab4c6f
Merge pull request 'dnsmasq: the operator's own names have a home the mesh never rewrites' (#109) from feat/dnsmasq-has-a-home-for-operator-names into main
jschoubben2026-09-26 20:43:53 +00:00
bb8f2e76a9
dnsmasq: the operator's own names have a home the mesh never rewrites
jschoubben2026-09-26 22:43:29 +02:00
ea7f6796e8
lavinmq is a provider, not foundation
jschoubben2026-09-26 21:08:40 +02:00
372450851f
Merge pull request 'mssql: its data is placed — the last /services placement retires' (#108) from feat/mssql-data-is-placed into main
jschoubben2026-09-26 18:36:16 +00:00
f4e4e12c99
mssql: its data is placed — the last /services placement retires
jschoubben2026-09-26 20:36:03 +02:00
fd9be011c0
Merge pull request 'sshd: the operator's door is a module' (#107) from feat/sshd-module into main
jschoubben2026-09-26 18:15:08 +00:00
a85b0ee346
sshd: the operator's door is a module
jschoubben2026-09-26 20:14:54 +02:00
34243c9e34
Merge pull request 'dnsmasq: the runtime's DNS is written into daemon.json, never over it' (#106) from fix/dnsmasq-writes-into-daemon-json into main
jschoubben2026-09-26 18:12:20 +00:00
870a541072
dnsmasq: the runtime's DNS is written into daemon.json, never over it
jschoubben2026-09-26 20:12:06 +02:00
9b063a77b2
nats: the module, and an image that reloads in place
jschoubben2026-09-26 19:34:14 +02:00
a59750fa28
Merge pull request 'mailu: the smtp provision serves the name its certificate answers to' (#105) from fix/smtp-serves-its-tls-name into main
jschoubben2026-09-26 17:27:06 +00:00
81592a3b2c
mailu: the smtp provision serves the name its certificate answers to
jschoubben2026-09-26 19:26:53 +02:00
705ceec1e7
Merge pull request 'Six modules name no /var/lib: the root is a place, the maps reference it' (#104) from feat/six-modules-name-no-var-lib into main
jschoubben2026-09-26 16:21:00 +00:00
afdd149ab7
Six modules name no /var/lib: the root is a place, the maps reference it
jschoubben2026-09-26 18:20:47 +02:00
dde8b15483
Merge pull request 'mailu: seventeen data directories are placed, not stated' (#103) from feat/mailu-dirs-are-placed into main
jschoubben2026-09-26 16:07:24 +00:00
8a046be198
mailu: seventeen data directories are placed, not stated
jschoubben2026-09-26 18:07:11 +02:00
668278bde4
Merge pull request 'nextcloud: it lives under its own name, and html is placed' (#102) from feat/nextcloud-lives-under-its-own-name into main
jschoubben2026-09-26 16:05:41 +00:00
6761bb02a1
nextcloud: it lives under its own name, and html is placed
jschoubben2026-09-26 18:05:28 +02:00
f98c9859d2
Merge pull request 'gitea: its data and grants are placed, not stated' (#101) from feat/gitea-dirs-are-placed into main
jschoubben2026-09-26 16:04:30 +00:00
cac5eab7da
gitea: its data and grants are placed, not stated
jschoubben2026-09-26 18:04:17 +02:00
770c9f6a78
Merge pull request 'mongodb: its data directory is placed, not stated' (#100) from feat/mongodb-dir-is-placed into main
jschoubben2026-09-26 16:03:36 +00:00
5427118614
mongodb: its data directory is placed, not stated
jschoubben2026-09-26 18:03:25 +02:00
53765335cf
Merge pull request 'portainer: its data directory is placed, not stated' (#99) from feat/portainer-dir-is-placed into main
jschoubben2026-09-26 16:02:42 +00:00
5fd2ed9686
portainer: its data directory is placed, not stated
jschoubben2026-09-26 18:02:25 +02:00
f7887d706d
Merge pull request 'only-office: its directories are placed, not stated' (#98) from feat/only-office-dirs-are-placed into main
jschoubben2026-09-26 16:01:43 +00:00
d6dd21a091
only-office: its directories are placed, not stated
jschoubben2026-09-26 18:01:31 +02:00
a844701577
Merge pull request 'Module data lives in /var/lib, now that nothing is mid-cutover' (#97) from feat/module-data-lives-in-var-lib into main
jschoubben2026-09-26 14:47:37 +00:00
50a99f022c
Module data lives in /var/lib, now that nothing is mid-cutover
jschoubben2026-09-26 16:47:24 +02:00
382a44621e
Merge pull request 'A bucket is the one the mesh derives, and the photos module named another' (#96) from fix/a-bucket-is-the-one-the-mesh-derives into main
jschoubben2026-09-26 14:46:30 +00:00
ddb67fc095
A bucket is the one the mesh derives, and the photos module named another
jochen2026-09-26 16:46:10 +02:00
78595e4db3
Merge pull request 'lavinmq: the broker TLS directory is the operator's, read by whoever needs it' (#95) from fix/the-broker-tls-directory-is-the-operators into main
jschoubben2026-09-26 14:12:45 +00:00
37634de1e3
lavinmq: the broker TLS directory is the operator's, read by whoever needs it
jschoubben2026-09-26 16:12:29 +02:00
36c5f87130
Merge pull request 'route-adapter: write a body limit as the predecessor's buffering middleware' (#94) from feat/a-route-may-limit-the-body-it-carries into main
jschoubben2026-09-26 14:02:03 +00:00
b2e39eb2cd
route-adapter: write a body limit as the predecessor's buffering middleware
jochen2026-09-26 16:01:23 +02:00
3d73c9f54e
Merge pull request 'nextcloud: real mesh module, MariaDB→PostgreSQL, S3 via _FILE secrets' (#59) from feat/nextcloud-module-postgres-migration into main
jschoubben2026-09-26 13:06:32 +00:00
4d715f8b73
Merge pull request 'minio: the real 4-node/8-drive erasure-coded cluster, both public routes, verified live on novox' (#58) from feat/minio-real-cluster-not-single-node into main
jschoubben2026-09-26 13:05:57 +00:00
fa91be4941
Merge pull request 'postgres: declare the data directory's real owner; keycloak: use the port template' (#55) from fix/postgres-owner-and-keycloak-port-template into main
jschoubben2026-09-26 13:05:10 +00:00
fc5ccdfe2a
Merge pull request 'mailu: one WEBMAIL_ADDRESS, the mesh's container name' (#93) from fix/one-webmail-address into main
jschoubben2026-09-26 13:04:44 +00:00
4489e56935
mailu: one WEBMAIL_ADDRESS, the mesh's container name
jschoubben2026-09-26 15:04:32 +02:00
08e947e4c8
Merge pull request 'The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on' (#69) from feat/seats-are-a-closed-set into main
jschoubben2026-09-26 12:31:10 +00:00
420d05e8dd
Merge pull request 'mailu certifies itself, take two — the fall-through is now a behaviour' (#92) from fix/mailu-certifies-itself-take-two into main
jschoubben2026-09-26 12:27:56 +00:00
6769e66c82
mailu certifies itself, take two — the fall-through is now a behaviour
jschoubben2026-09-26 14:27:45 +02:00
15b35b53db
Merge pull request 'mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour' (#91) from fix/mailu-back-to-cert-while-the-fallthrough-is-fixed into main
jschoubben2026-09-26 12:19:17 +00:00
6177565741
mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour
jschoubben2026-09-26 14:19:05 +02:00
6b2ea0972a
Merge pull request 'mailu certifies itself: the edge passes unknown ACME tokens through now' (#90) from fix/mailu-certifies-itself into main
jschoubben2026-09-26 12:15:24 +00:00
a978b53d1c
mailu certifies itself: the edge passes unknown ACME tokens through now
jschoubben2026-09-26 14:15:12 +02:00
7501c1db9e
Merge pull request 'portainer: serve its public name, hold its real data, run the image the machine runs' (#89) from fix/portainer-serves-its-name into main
jschoubben2026-09-26 01:46:24 +00:00
00ada1e9f7
portainer: serve its public name, hold its real data, run the image the machine runs
jschoubben2026-09-26 03:46:11 +02:00
67b443d5ad
Merge pull request 'only-office: pin the machine side of its port' (#88) from fix/only-office-pins-its-machine-port into main
jschoubben2026-09-26 01:44:59 +00:00
a2da2e4910
only-office: pin the machine side of its port
jschoubben2026-09-26 03:44:47 +02:00
bcb9ca8f93
Merge pull request 'invoicing: MONGO_DB says the granted database's name' (#87) from fix/invoicing-names-its-database into main
jschoubben2026-09-26 01:34:09 +00:00
2409afda60
invoicing: MONGO_DB says the granted database's name
jschoubben2026-09-26 03:34:00 +02:00
511200ed9c
Merge pull request 'invoicing: the photos lessons, applied before its window' (#86) from fix/invoicing-learns-the-photos-lessons into main
jschoubben2026-09-26 01:15:38 +00:00
b704bf5ad8
invoicing: the photos lessons, applied before its window
jschoubben2026-09-26 03:15:26 +02:00
142d65c52a
Merge pull request 'mongodb: the server container is mongodb-server, not the predecessor's name' (#85) from fix/mongodb-coexists-with-the-predecessor into main
jschoubben2026-09-26 00:37:51 +00:00
ccb6e7500e
mongodb: the server container is mongodb-server, not the predecessor's name
jschoubben2026-09-26 00:56:02 +02:00
bbda88c13b
Merge pull request 'Every credential provider says whether it still holds a consumer (hq issue 120)' (#84) from fix/120-redis-says-what-it-holds into main
jschoubben2026-09-25 23:31:28 +00:00
620b47d309
mssql remaps a user only when orphaned; mailu's operator tool no longer re-enables
jochen2026-09-26 01:30:15 +02:00
6fd93afc6c
Review fixes: holds and create agree, and no password leaves a check
jochen2026-09-26 01:24:32 +02:00
mesh-admin
jschoubben
jochen