6ba61a8b4b
The provisioner announces the vault's events by their new names
jschoubben2026-10-01 16:51:13 +02:00
8368697744
The vault's events are its own: provisioned, rotated, deprovisioned
jschoubben2026-10-01 16:50:56 +02:00
966fed1829
The vault claims mesh-vault, and each uplink holder declares the manager it speaks for (hq ADR 0161)
jschoubben2026-10-01 15:58:05 +02:00
67c834ac65
Merge pull request 'postgres serves the store seat's verbs, databases and query, and lists its tools (ADR 0159)' (#203) from feat/postgres-serves-the-stores-verbs into main
mesh-admin2026-10-01 13:53:05 +00:00
c00dd04494
postgres implements the store seat's verbs under the seat's name, and its claim says so (hq ADR 0160)
jschoubben2026-10-01 15:19:35 +02:00
abf5859415
Merge remote-tracking branch 'origin/main' into feat/postgres-serves-the-stores-verbs
jschoubben2026-10-01 15:19:08 +02:00
fe8d6a25c0
Merge pull request 'The media chain's stale copies leave the catalogue' (#204) from chore/remove-stale-media-duplicates into main
mesh-admin2026-10-01 12:54:00 +00:00
738415710c
The media chain's stale copies leave the catalogue
jschoubben2026-10-01 14:53:35 +02:00
4c7e438ea3
postgres serves the store seat's verbs, databases and query, and lists its tools (hq ADR 0159)
jschoubben2026-10-01 14:02:41 +02:00
fd0fa75cc2
Merge pull request 'searxng says it reads its secret key at start, so the mesh may rotate it (hq 180)' (#202) from feat/searxng-says-how-its-secret-is-taken into main
mesh-admin2026-10-01 10:10:05 +00:00
50c08818d6
searxng says it reads its secret key at start, so the mesh may rotate it (hq 180)
jschoubben2026-10-01 12:09:47 +02:00
1712670610
Merge pull request 'nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)' (#201) from feat/nodered-says-how-its-secrets-are-taken into main
mesh-admin2026-10-01 09:45:32 +00:00
6b0164c2ba
nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)
jschoubben2026-10-01 11:44:29 +02:00
0966599c8a
Merge pull request 'The forge's tools close and read pull requests, read files and branches, and delete a branch' (#200) from feat/the-forges-tools-close-and-read-pull-requests into main
mesh-admin2026-10-01 09:25:51 +00:00
171f8a03f6
The forge's tools close and read pull requests, read files and branches, and delete a branch
jschoubben2026-10-01 11:25:34 +02:00
cb48c882a0
Merge pull request 'postgres: its server container is not named after the seat' (#177) from fix/postgres-is-not-named-after-the-seat into main
mesh-admin2026-10-01 09:25:05 +00:00
3cbd98b14f
Merge pull request 'n8n: its media library is an access placed by the assignment' (#199) from fix/n8n-media-access-by-id into main
mesh-admin2026-10-01 00:02:44 +00:00
9fc0d675cd
n8n: its media library is an access placed by the assignment
jschoubben2026-10-01 02:02:30 +02:00
1b0e3841e4
Merge pull request 'n8n: its own image built from source, placed data, and what its workflows use' (#172) from feat/n8n-for-ace into main
mesh-admin2026-09-30 23:59:29 +00:00
5c4364e462
n8n: its own image built from source, placed data, and what its workflows use
jschoubben2026-09-30 12:25:33 +02:00
a3d1c9b9ee
Merge pull request 'An access has an id, and its mounts name it (issue 153)' (#198) from feat/153-an-access-has-an-id into main
mesh-admin2026-09-30 22:07:15 +00:00
684b9853ad
An access has an id, and its mounts name it (issue 153)
jschoubben2026-10-01 00:01:42 +02:00
34ccc457fa
Merge pull request 'The mesh's own files for a module are placed by the mesh, not the definition (issue 174)' (#197) from feat/the-mesh-places-its-own-files into main
mesh-admin2026-09-30 21:49:11 +00:00
a724c0d82e
Merge pull request 'A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173)' (#196) from feat/a-provider-declares-what-it-serves into main
jschoubben2026-09-30 20:49:06 +00:00
e3246fa11e
A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173)
jschoubben2026-09-30 22:33:19 +02:00
48850ebf90
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
jschoubben2026-09-30 22:29:28 +02:00
8bc4b7c389
Merge pull request 'The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts' (#195) from chore/media-chain-moves-out into main
mesh-admin2026-09-30 19:42:56 +00:00
7d721051f8
The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts of that stack
jschoubben2026-09-30 21:42:42 +02:00
b2df040896
Merge pull request 'distribution claims mesh-artifact-store' (#194) from feat/the-artifact-store-seat-is-named-for-its-scope into main
jschoubben2026-09-30 19:17:47 +00:00
af069dd667
Merge pull request 'A definition names no host path for its own data' (#193) from feat/definitions-place-their-directories into main
jschoubben2026-09-30 19:17:00 +00:00
13e13734c5
distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156)
jschoubben2026-09-30 21:14:40 +02:00
eed5e8958a
A definition names no host path for its own data
jschoubben2026-09-30 21:10:18 +02:00
12bbcafacf
Merge pull request 'gitea: the tools' token carries write:admin; a kept token is re-minted when it lacks a scope' (#192) from feat/gitea-token-write-admin into main
mesh-admin2026-09-30 19:06:05 +00:00
d58ed21367
gitea: the tools' token carries write:admin, and a kept token is re-minted when it lacks a scope
jschoubben2026-09-30 21:05:52 +02:00
20d8487515
Merge pull request 'website: it listens on the port its container publishes' (#191) from fix/website-listens-its-own-port into main
jschoubben2026-09-30 19:01:49 +00:00
aab40c6e9d
website: it listens on the port its container publishes
jschoubben2026-09-30 21:01:47 +02:00
ad2aac7bb9
Merge pull request 'website: the container joins the network the module declares' (#190) from fix/website-network into main
jschoubben2026-09-30 18:56:26 +00:00
202672ee7d
website: the container joins the network the module declares
jschoubben2026-09-30 20:56:23 +02:00
ac7a9f2ca8
Merge pull request 'portainer: publish its software ports; the machine side is the mesh's to assign' (#189) from fix/portainer-software-ports into main
mesh-admin2026-09-30 18:54:41 +00:00
80d9e9a7e7
portainer: publish its software ports; the machine side is the mesh's to assign
jschoubben2026-09-30 20:54:29 +02:00
e0c5acd547
Merge pull request 'No definition names this installation' (#188) from feat/a-definition-names-no-installation into main
jschoubben2026-09-30 18:49:38 +00:00
3476f1ebec
No definition names this installation
jschoubben2026-09-30 18:38:06 +02:00
1eb8fa367b
Merge pull request 'oidc-client: keycloak makes each consumer its client; grafana logs in through it' (#155) from feat/oidc-client-provision into main
mesh-admin2026-09-30 17:03:32 +00:00
f0c4db843e
Merge pull request 'grafana: its directories are placed, its admin password is a file, and it runs the build in use' (#153) from feat/grafana-for-ace into main
mesh-admin2026-09-30 17:03:30 +00:00
ec909d3542
Merge pull request 'nodered: settings.json sits beside settings.js' (#187) from fix/nodered-settings-json-beside-settings-js into main
mesh-admin2026-09-30 16:32:15 +00:00
409fe7ef06
nodered: settings.json sits beside settings.js, which reads it from its own directory
jschoubben2026-09-30 18:32:11 +02:00
c91d12a11d
Merge pull request 'nodered: mount its settings where the image's health check reads them' (#186) from fix/nodered-healthcheck-settings-path into main
mesh-admin2026-09-30 16:28:09 +00:00
82686e44f3
nodered: mount its settings where the image's health check reads them
jschoubben2026-09-30 18:28:05 +02:00
949f5f02c9
Merge pull request 'records: a phrase that wraps, and one under emphasis, is found' (#185) from fix/a-phrase-that-wraps into main
jschoubben2026-09-30 16:13:47 +00:00
3b95d00afc
records: a phrase that wraps, and one under emphasis, is found
jschoubben2026-09-30 18:09:21 +02:00
cbf9e9b7a3
Merge pull request 'supabase: own secrets, and unique ids for its containers' (#184) from fix/supabase-own-secrets into main
mesh-admin2026-09-30 15:58:24 +00:00
f476255284
supabase: own secrets, and unique ids for its containers
jschoubben2026-09-30 17:57:57 +02:00
6ad59540d4
Merge pull request 'records: the record is read where it is written' (#183) from feat/the-record-is-read into main
jschoubben2026-09-30 15:55:06 +00:00
a4892d3ff6
Merge branch 'main' into feat/the-record-is-read
jschoubben2026-09-30 15:54:54 +00:00
6512878eef
records: the record is read where it is written
jschoubben2026-09-30 17:45:39 +02:00
8a0ebe16a3
Merge pull request 'supabase: the self-hosted stack as one module, its secrets rendered into files' (#169) from feat/supabase-for-ace into main
mesh-admin2026-09-30 15:32:33 +00:00
96fb441f30
Merge pull request 'baserow: placed directories, the database password from a file, and the build ace runs' (#170) from feat/baserow-for-ace into main
mesh-admin2026-09-30 15:32:13 +00:00
b8c701ec94
Merge pull request 'matrix: Conduit and Element, told their own name by the route' (#166) from feat/matrix-for-ace into main
mesh-admin2026-09-30 15:32:09 +00:00
65ba4e6170
Merge pull request 'mosquitto, influxdb: the provisioner sees its grants where the mesh writes them' (#182) from fix/a-provisioner-sees-its-grants-where-the-mesh-writes-them into main
mesh-admin2026-09-30 15:19:37 +00:00
5b70ffd78f
mosquitto, influxdb: the provisioner sees its grants where the mesh writes them
jschoubben2026-09-30 17:19:33 +02:00
d3ebb01180
Merge pull request 'nodered: settings are files the mesh writes; editor locked with adminAuth; pin 5.0.7' (#149) from feat/nodered-for-ace into main
mesh-admin2026-09-30 15:06:39 +00:00
0020fa17cd
Merge pull request 'mesh-console: the mesh's tools on the machine a person sits at' (#181) from feat/the-console into main
jschoubben2026-09-30 14:47:22 +00:00
22c6032144
Merge branch 'main' into feat/the-console
jschoubben2026-09-30 14:47:11 +00:00
36b35900a2
Merge pull request 'jackett: its config dir is placed, and its tools find their own key' (#150) from feat/jackett-for-ace into main
mesh-admin2026-09-30 14:40:49 +00:00
9c97a8a134
Merge pull request 'icecast: its passwords are a file the mesh writes, not the image's environment' (#146) from feat/icecast-for-ace into main
mesh-admin2026-09-30 14:38:14 +00:00
1bfedd2a9e
Merge pull request 'unifi: placed data, mesh-assigned ports, an https route, its password as a file' (#148) from feat/unifi-for-ace into main
mesh-admin2026-09-30 14:38:12 +00:00
769f0724ca
mesh-console: the mesh's tools on the machine a person sits at
jschoubben2026-09-30 16:20:06 +02:00
c227592e7c
Merge pull request 'influxdb: its admin password and operator token are its own secrets' (#180) from fix/influxdb-admin-credentials-are-accepted into main
mesh-admin2026-09-30 14:19:02 +00:00
50ae89e718
influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted
jschoubben2026-09-30 16:18:59 +02:00
3ae63f10c5
Merge pull request 'mosquitto: its directories are placed, not stated, and it runs the build in use' (#144) from feat/mosquitto-placed into main
mesh-admin2026-09-30 14:14:13 +00:00
e7799529e4
Merge pull request 'influxdb: place its directories, hand secrets over as files, name its UI' (#152) from feat/influxdb-for-ace into main
mesh-admin2026-09-30 14:10:50 +00:00
b9068c67bc
Merge pull request 'redis: place its directories and run the build in use' (#161) from feat/redis-for-ace into main
mesh-admin2026-09-30 14:10:48 +00:00
4bf705fea7
Merge pull request 'mssql: place its directories and name the software's port, not a machine's' (#160) from feat/mssql-for-ace into main
mesh-admin2026-09-30 13:55:25 +00:00
00893d4944
Merge pull request 'letta: placed state, a route, accepted keys, and a runtime that can log in' (#171) from feat/letta-for-ace into main
mesh-admin2026-09-30 13:55:23 +00:00
a2b9a9a411
Merge pull request 'dnsmasq: pass the DNSSEC bit down from the validating upstreams' (#179) from fix/resolver-passes-the-dnssec-bit into main
jschoubben2026-09-30 13:17:38 +00:00
9523105df4
dnsmasq: pass the DNSSEC bit down from the validating upstreams
jschoubben2026-09-30 15:17:34 +02:00
4449f44cf1
Merge pull request 'mailu: admin asks the machine's resolver, not Mailu's own' (#178) from fix/mailu-admin-asks-the-machines-resolver into main
jschoubben2026-09-30 13:13:29 +00:00
47f6e7d78b
mailu: admin asks the machine's resolver, not Mailu's own
jschoubben2026-09-30 15:13:25 +02:00
76443ec06d
postgres: its server container is not named after the seat
jschoubben2026-09-30 14:56:31 +02:00
7ab522ba31
Merge pull request 'dnsmasq: answer a container's query, which arrives on the runtime's bridge' (#176) from fix/110-the-resolver-answers-a-container into main
jschoubben2026-09-30 12:31:30 +00:00
204bfbbaf9
dnsmasq: answer a container's query, which arrives on the runtime's bridge
jschoubben2026-09-30 14:31:26 +02:00
e0c09f46b6
Merge pull request 'dnsmasq: the runtime is reloaded when its dns file changes, and may then be restarted safely' (#175) from fix/110-the-runtime-reads-its-dns into main
jschoubben2026-09-30 12:22:10 +00:00
e0faf012be
dnsmasq: the runtime is reloaded when its dns file changes, and may then be restarted safely
jschoubben2026-09-30 14:22:03 +02:00
1b19c79d63
Merge pull request 'postgres: the provisioner dials the port the mesh gave the store' (#174) from fix/postgres-provisioner-dials-the-port-it-was-given into main
mesh-admin2026-09-30 12:06:25 +00:00
4ec2ae1f7f
postgres: the provisioner dials the port the mesh gave the store
jschoubben2026-09-30 14:01:53 +02:00
9d716ed875
jackett: provide its Torznab API as jackett-api
jschoubben2026-09-30 13:05:36 +02:00
d2f03736fa
grafana: its InfluxDB data source comes from the influxdb-api provision
jschoubben2026-09-30 13:02:11 +02:00
3c7aafdc21
nodered: its MQTT broker comes from the mesh
jschoubben2026-09-30 13:01:14 +02:00
1080f45012
mosquitto: a consumer's grant is the topics it asks for, and its binding says the port
jschoubben2026-09-30 13:01:14 +02:00
c5e273e232
Merge feat/influxdb-for-ace (#152) into feat/oidc-client-provision
jschoubben2026-09-30 12:55:43 +02:00
323ef9ec7e
influxdb: provide influxdb-api, one mesh-made v1 credential per consumer
jschoubben2026-09-30 12:55:38 +02:00
8f459c7023
letta: placed state, a route, accepted keys, and a runtime that can log in
jschoubben2026-09-30 12:22:12 +02:00
ac8556c590
baserow: placed directories, the database password from a file, and the build ace runs
jschoubben2026-09-30 12:16:04 +02:00
62cecc8a2b
supabase: the self-hosted stack as one module, its secrets rendered into files
jschoubben2026-09-30 12:12:27 +02:00
157fab5dc8
matrix: Conduit and Element, told their own name by the route
jschoubben2026-09-30 11:59:56 +02:00
1247b8c27e
redis: place its directories and run the build in use
jschoubben2026-09-30 11:57:46 +02:00
0fce3ebf5d
mssql: place its directories and name the software's port, not a machine's
jschoubben2026-09-30 11:57:45 +02:00
5a906b757d
keycloak, grafana: their public names come from the mesh, not the manifest
jschoubben2026-09-30 00:49:08 +02:00
d8ee88e487
grafana: log in through keycloak's oidc-client provision
jschoubben2026-09-30 00:39:16 +02:00
54557b77bf
keycloak: provide oidc-client, one mesh-made client per consumer
jschoubben2026-09-30 00:39:16 +02:00