Commit Graph

  • 6ba61a8b4b The provisioner announces the vault's events by their new names jschoubben 2026-10-01 16:51:13 +02:00
  • 8368697744 The vault's events are its own: provisioned, rotated, deprovisioned jschoubben 2026-10-01 16:50:56 +02:00
  • 966fed1829 The vault claims mesh-vault, and each uplink holder declares the manager it speaks for (hq ADR 0161) jschoubben 2026-10-01 15:58:05 +02:00
  • 67c834ac65 Merge pull request 'postgres serves the store seat's verbs, databases and query, and lists its tools (ADR 0159)' (#203) from feat/postgres-serves-the-stores-verbs into main mesh-admin 2026-10-01 13:53:05 +00:00
  • c00dd04494 postgres implements the store seat's verbs under the seat's name, and its claim says so (hq ADR 0160) jschoubben 2026-10-01 15:19:35 +02:00
  • abf5859415 Merge remote-tracking branch 'origin/main' into feat/postgres-serves-the-stores-verbs jschoubben 2026-10-01 15:19:08 +02:00
  • fe8d6a25c0 Merge pull request 'The media chain's stale copies leave the catalogue' (#204) from chore/remove-stale-media-duplicates into main mesh-admin 2026-10-01 12:54:00 +00:00
  • 738415710c The media chain's stale copies leave the catalogue jschoubben 2026-10-01 14:53:35 +02:00
  • 4c7e438ea3 postgres serves the store seat's verbs, databases and query, and lists its tools (hq ADR 0159) jschoubben 2026-10-01 14:02:41 +02:00
  • fd0fa75cc2 Merge pull request 'searxng says it reads its secret key at start, so the mesh may rotate it (hq 180)' (#202) from feat/searxng-says-how-its-secret-is-taken into main mesh-admin 2026-10-01 10:10:05 +00:00
  • 50c08818d6 searxng says it reads its secret key at start, so the mesh may rotate it (hq 180) jschoubben 2026-10-01 12:09:47 +02:00
  • 1712670610 Merge pull request 'nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)' (#201) from feat/nodered-says-how-its-secrets-are-taken into main mesh-admin 2026-10-01 09:45:32 +00:00
  • 6b0164c2ba nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180) jschoubben 2026-10-01 11:44:29 +02:00
  • 0966599c8a Merge pull request 'The forge's tools close and read pull requests, read files and branches, and delete a branch' (#200) from feat/the-forges-tools-close-and-read-pull-requests into main mesh-admin 2026-10-01 09:25:51 +00:00
  • 171f8a03f6 The forge's tools close and read pull requests, read files and branches, and delete a branch jschoubben 2026-10-01 11:25:34 +02:00
  • cb48c882a0 Merge pull request 'postgres: its server container is not named after the seat' (#177) from fix/postgres-is-not-named-after-the-seat into main mesh-admin 2026-10-01 09:25:05 +00:00
  • 3cbd98b14f Merge pull request 'n8n: its media library is an access placed by the assignment' (#199) from fix/n8n-media-access-by-id into main mesh-admin 2026-10-01 00:02:44 +00:00
  • 9fc0d675cd n8n: its media library is an access placed by the assignment jschoubben 2026-10-01 02:02:30 +02:00
  • 1b0e3841e4 Merge pull request 'n8n: its own image built from source, placed data, and what its workflows use' (#172) from feat/n8n-for-ace into main mesh-admin 2026-09-30 23:59:29 +00:00
  • 5c4364e462 n8n: its own image built from source, placed data, and what its workflows use jschoubben 2026-09-30 12:25:33 +02:00
  • a3d1c9b9ee Merge pull request 'An access has an id, and its mounts name it (issue 153)' (#198) from feat/153-an-access-has-an-id into main mesh-admin 2026-09-30 22:07:15 +00:00
  • 684b9853ad An access has an id, and its mounts name it (issue 153) jschoubben 2026-10-01 00:01:42 +02:00
  • 34ccc457fa Merge pull request 'The mesh's own files for a module are placed by the mesh, not the definition (issue 174)' (#197) from feat/the-mesh-places-its-own-files into main mesh-admin 2026-09-30 21:49:11 +00:00
  • a724c0d82e Merge pull request 'A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173)' (#196) from feat/a-provider-declares-what-it-serves into main jschoubben 2026-09-30 20:49:06 +00:00
  • e3246fa11e A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173) jschoubben 2026-09-30 22:33:19 +02:00
  • 48850ebf90 The mesh's own files for a module are placed by the mesh, not the definition (issue 174) jschoubben 2026-09-30 22:29:28 +02:00
  • 8bc4b7c389 Merge pull request 'The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts' (#195) from chore/media-chain-moves-out into main mesh-admin 2026-09-30 19:42:56 +00:00
  • 7d721051f8 The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts of that stack jschoubben 2026-09-30 21:42:42 +02:00
  • b2df040896 Merge pull request 'distribution claims mesh-artifact-store' (#194) from feat/the-artifact-store-seat-is-named-for-its-scope into main jschoubben 2026-09-30 19:17:47 +00:00
  • af069dd667 Merge pull request 'A definition names no host path for its own data' (#193) from feat/definitions-place-their-directories into main jschoubben 2026-09-30 19:17:00 +00:00
  • 13e13734c5 distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156) jschoubben 2026-09-30 21:14:40 +02:00
  • eed5e8958a A definition names no host path for its own data jschoubben 2026-09-30 21:10:18 +02:00
  • 12bbcafacf Merge pull request 'gitea: the tools' token carries write:admin; a kept token is re-minted when it lacks a scope' (#192) from feat/gitea-token-write-admin into main mesh-admin 2026-09-30 19:06:05 +00:00
  • d58ed21367 gitea: the tools' token carries write:admin, and a kept token is re-minted when it lacks a scope jschoubben 2026-09-30 21:05:52 +02:00
  • 20d8487515 Merge pull request 'website: it listens on the port its container publishes' (#191) from fix/website-listens-its-own-port into main jschoubben 2026-09-30 19:01:49 +00:00
  • aab40c6e9d website: it listens on the port its container publishes jschoubben 2026-09-30 21:01:47 +02:00
  • ad2aac7bb9 Merge pull request 'website: the container joins the network the module declares' (#190) from fix/website-network into main jschoubben 2026-09-30 18:56:26 +00:00
  • 202672ee7d website: the container joins the network the module declares jschoubben 2026-09-30 20:56:23 +02:00
  • ac7a9f2ca8 Merge pull request 'portainer: publish its software ports; the machine side is the mesh's to assign' (#189) from fix/portainer-software-ports into main mesh-admin 2026-09-30 18:54:41 +00:00
  • 80d9e9a7e7 portainer: publish its software ports; the machine side is the mesh's to assign jschoubben 2026-09-30 20:54:29 +02:00
  • e0c5acd547 Merge pull request 'No definition names this installation' (#188) from feat/a-definition-names-no-installation into main jschoubben 2026-09-30 18:49:38 +00:00
  • 3476f1ebec No definition names this installation jschoubben 2026-09-30 18:38:06 +02:00
  • 1eb8fa367b Merge pull request 'oidc-client: keycloak makes each consumer its client; grafana logs in through it' (#155) from feat/oidc-client-provision into main mesh-admin 2026-09-30 17:03:32 +00:00
  • f0c4db843e Merge pull request 'grafana: its directories are placed, its admin password is a file, and it runs the build in use' (#153) from feat/grafana-for-ace into main mesh-admin 2026-09-30 17:03:30 +00:00
  • ec909d3542 Merge pull request 'nodered: settings.json sits beside settings.js' (#187) from fix/nodered-settings-json-beside-settings-js into main mesh-admin 2026-09-30 16:32:15 +00:00
  • 409fe7ef06 nodered: settings.json sits beside settings.js, which reads it from its own directory jschoubben 2026-09-30 18:32:11 +02:00
  • c91d12a11d Merge pull request 'nodered: mount its settings where the image's health check reads them' (#186) from fix/nodered-healthcheck-settings-path into main mesh-admin 2026-09-30 16:28:09 +00:00
  • 82686e44f3 nodered: mount its settings where the image's health check reads them jschoubben 2026-09-30 18:28:05 +02:00
  • 949f5f02c9 Merge pull request 'records: a phrase that wraps, and one under emphasis, is found' (#185) from fix/a-phrase-that-wraps into main jschoubben 2026-09-30 16:13:47 +00:00
  • 3b95d00afc records: a phrase that wraps, and one under emphasis, is found jschoubben 2026-09-30 18:09:21 +02:00
  • cbf9e9b7a3 Merge pull request 'supabase: own secrets, and unique ids for its containers' (#184) from fix/supabase-own-secrets into main mesh-admin 2026-09-30 15:58:24 +00:00
  • f476255284 supabase: own secrets, and unique ids for its containers jschoubben 2026-09-30 17:57:57 +02:00
  • 6ad59540d4 Merge pull request 'records: the record is read where it is written' (#183) from feat/the-record-is-read into main jschoubben 2026-09-30 15:55:06 +00:00
  • a4892d3ff6 Merge branch 'main' into feat/the-record-is-read jschoubben 2026-09-30 15:54:54 +00:00
  • 6512878eef records: the record is read where it is written jschoubben 2026-09-30 17:45:39 +02:00
  • 8a0ebe16a3 Merge pull request 'supabase: the self-hosted stack as one module, its secrets rendered into files' (#169) from feat/supabase-for-ace into main mesh-admin 2026-09-30 15:32:33 +00:00
  • 96fb441f30 Merge pull request 'baserow: placed directories, the database password from a file, and the build ace runs' (#170) from feat/baserow-for-ace into main mesh-admin 2026-09-30 15:32:13 +00:00
  • b8c701ec94 Merge pull request 'matrix: Conduit and Element, told their own name by the route' (#166) from feat/matrix-for-ace into main mesh-admin 2026-09-30 15:32:09 +00:00
  • 65ba4e6170 Merge pull request 'mosquitto, influxdb: the provisioner sees its grants where the mesh writes them' (#182) from fix/a-provisioner-sees-its-grants-where-the-mesh-writes-them into main mesh-admin 2026-09-30 15:19:37 +00:00
  • 5b70ffd78f mosquitto, influxdb: the provisioner sees its grants where the mesh writes them jschoubben 2026-09-30 17:19:33 +02:00
  • d3ebb01180 Merge pull request 'nodered: settings are files the mesh writes; editor locked with adminAuth; pin 5.0.7' (#149) from feat/nodered-for-ace into main mesh-admin 2026-09-30 15:06:39 +00:00
  • 0020fa17cd Merge pull request 'mesh-console: the mesh's tools on the machine a person sits at' (#181) from feat/the-console into main jschoubben 2026-09-30 14:47:22 +00:00
  • 22c6032144 Merge branch 'main' into feat/the-console jschoubben 2026-09-30 14:47:11 +00:00
  • 36b35900a2 Merge pull request 'jackett: its config dir is placed, and its tools find their own key' (#150) from feat/jackett-for-ace into main mesh-admin 2026-09-30 14:40:49 +00:00
  • 9c97a8a134 Merge pull request 'icecast: its passwords are a file the mesh writes, not the image's environment' (#146) from feat/icecast-for-ace into main mesh-admin 2026-09-30 14:38:14 +00:00
  • 1bfedd2a9e Merge pull request 'unifi: placed data, mesh-assigned ports, an https route, its password as a file' (#148) from feat/unifi-for-ace into main mesh-admin 2026-09-30 14:38:12 +00:00
  • 769f0724ca mesh-console: the mesh's tools on the machine a person sits at jschoubben 2026-09-30 16:20:06 +02:00
  • c227592e7c Merge pull request 'influxdb: its admin password and operator token are its own secrets' (#180) from fix/influxdb-admin-credentials-are-accepted into main mesh-admin 2026-09-30 14:19:02 +00:00
  • 50ae89e718 influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted jschoubben 2026-09-30 16:18:59 +02:00
  • 3ae63f10c5 Merge pull request 'mosquitto: its directories are placed, not stated, and it runs the build in use' (#144) from feat/mosquitto-placed into main mesh-admin 2026-09-30 14:14:13 +00:00
  • e7799529e4 Merge pull request 'influxdb: place its directories, hand secrets over as files, name its UI' (#152) from feat/influxdb-for-ace into main mesh-admin 2026-09-30 14:10:50 +00:00
  • b9068c67bc Merge pull request 'redis: place its directories and run the build in use' (#161) from feat/redis-for-ace into main mesh-admin 2026-09-30 14:10:48 +00:00
  • 4bf705fea7 Merge pull request 'mssql: place its directories and name the software's port, not a machine's' (#160) from feat/mssql-for-ace into main mesh-admin 2026-09-30 13:55:25 +00:00
  • 00893d4944 Merge pull request 'letta: placed state, a route, accepted keys, and a runtime that can log in' (#171) from feat/letta-for-ace into main mesh-admin 2026-09-30 13:55:23 +00:00
  • a2b9a9a411 Merge pull request 'dnsmasq: pass the DNSSEC bit down from the validating upstreams' (#179) from fix/resolver-passes-the-dnssec-bit into main jschoubben 2026-09-30 13:17:38 +00:00
  • 9523105df4 dnsmasq: pass the DNSSEC bit down from the validating upstreams jschoubben 2026-09-30 15:17:34 +02:00
  • 4449f44cf1 Merge pull request 'mailu: admin asks the machine's resolver, not Mailu's own' (#178) from fix/mailu-admin-asks-the-machines-resolver into main jschoubben 2026-09-30 13:13:29 +00:00
  • 47f6e7d78b mailu: admin asks the machine's resolver, not Mailu's own jschoubben 2026-09-30 15:13:25 +02:00
  • 76443ec06d postgres: its server container is not named after the seat jschoubben 2026-09-30 14:56:31 +02:00
  • 7ab522ba31 Merge pull request 'dnsmasq: answer a container's query, which arrives on the runtime's bridge' (#176) from fix/110-the-resolver-answers-a-container into main jschoubben 2026-09-30 12:31:30 +00:00
  • 204bfbbaf9 dnsmasq: answer a container's query, which arrives on the runtime's bridge jschoubben 2026-09-30 14:31:26 +02:00
  • e0c09f46b6 Merge pull request 'dnsmasq: the runtime is reloaded when its dns file changes, and may then be restarted safely' (#175) from fix/110-the-runtime-reads-its-dns into main jschoubben 2026-09-30 12:22:10 +00:00
  • e0faf012be dnsmasq: the runtime is reloaded when its dns file changes, and may then be restarted safely jschoubben 2026-09-30 14:22:03 +02:00
  • 1b19c79d63 Merge pull request 'postgres: the provisioner dials the port the mesh gave the store' (#174) from fix/postgres-provisioner-dials-the-port-it-was-given into main mesh-admin 2026-09-30 12:06:25 +00:00
  • 4ec2ae1f7f postgres: the provisioner dials the port the mesh gave the store jschoubben 2026-09-30 14:01:53 +02:00
  • 9d716ed875 jackett: provide its Torznab API as jackett-api jschoubben 2026-09-30 13:05:36 +02:00
  • d2f03736fa grafana: its InfluxDB data source comes from the influxdb-api provision jschoubben 2026-09-30 13:02:11 +02:00
  • 3c7aafdc21 nodered: its MQTT broker comes from the mesh jschoubben 2026-09-30 13:01:14 +02:00
  • 1080f45012 mosquitto: a consumer's grant is the topics it asks for, and its binding says the port jschoubben 2026-09-30 13:01:14 +02:00
  • c5e273e232 Merge feat/influxdb-for-ace (#152) into feat/oidc-client-provision jschoubben 2026-09-30 12:55:43 +02:00
  • 323ef9ec7e influxdb: provide influxdb-api, one mesh-made v1 credential per consumer jschoubben 2026-09-30 12:55:38 +02:00
  • 8f459c7023 letta: placed state, a route, accepted keys, and a runtime that can log in jschoubben 2026-09-30 12:22:12 +02:00
  • ac8556c590 baserow: placed directories, the database password from a file, and the build ace runs jschoubben 2026-09-30 12:16:04 +02:00
  • 62cecc8a2b supabase: the self-hosted stack as one module, its secrets rendered into files jschoubben 2026-09-30 12:12:27 +02:00
  • 157fab5dc8 matrix: Conduit and Element, told their own name by the route jschoubben 2026-09-30 11:59:56 +02:00
  • 1247b8c27e redis: place its directories and run the build in use jschoubben 2026-09-30 11:57:46 +02:00
  • 0fce3ebf5d mssql: place its directories and name the software's port, not a machine's jschoubben 2026-09-30 11:57:45 +02:00
  • 5a906b757d keycloak, grafana: their public names come from the mesh, not the manifest jschoubben 2026-09-30 00:49:08 +02:00
  • d8ee88e487 grafana: log in through keycloak's oidc-client provision jschoubben 2026-09-30 00:39:16 +02:00
  • 54557b77bf keycloak: provide oidc-client, one mesh-made client per consumer jschoubben 2026-09-30 00:39:16 +02:00