6761bb02a1
nextcloud: it lives under its own name, and html is placed
jschoubben2026-09-26 18:05:28 +02:00
f98c9859d2
Merge pull request 'gitea: its data and grants are placed, not stated' (#101) from feat/gitea-dirs-are-placed into main
jschoubben2026-09-26 16:04:30 +00:00
cac5eab7da
gitea: its data and grants are placed, not stated
jschoubben2026-09-26 18:04:17 +02:00
770c9f6a78
Merge pull request 'mongodb: its data directory is placed, not stated' (#100) from feat/mongodb-dir-is-placed into main
jschoubben2026-09-26 16:03:36 +00:00
5427118614
mongodb: its data directory is placed, not stated
jschoubben2026-09-26 18:03:25 +02:00
53765335cf
Merge pull request 'portainer: its data directory is placed, not stated' (#99) from feat/portainer-dir-is-placed into main
jschoubben2026-09-26 16:02:42 +00:00
5fd2ed9686
portainer: its data directory is placed, not stated
jschoubben2026-09-26 18:02:25 +02:00
f7887d706d
Merge pull request 'only-office: its directories are placed, not stated' (#98) from feat/only-office-dirs-are-placed into main
jschoubben2026-09-26 16:01:43 +00:00
d6dd21a091
only-office: its directories are placed, not stated
jschoubben2026-09-26 18:01:31 +02:00
a844701577
Merge pull request 'Module data lives in /var/lib, now that nothing is mid-cutover' (#97) from feat/module-data-lives-in-var-lib into main
jschoubben2026-09-26 14:47:37 +00:00
50a99f022c
Module data lives in /var/lib, now that nothing is mid-cutover
jschoubben2026-09-26 16:47:24 +02:00
382a44621e
Merge pull request 'A bucket is the one the mesh derives, and the photos module named another' (#96) from fix/a-bucket-is-the-one-the-mesh-derives into main
jschoubben2026-09-26 14:46:30 +00:00
ddb67fc095
A bucket is the one the mesh derives, and the photos module named another
jochen2026-09-26 16:46:10 +02:00
78595e4db3
Merge pull request 'lavinmq: the broker TLS directory is the operator's, read by whoever needs it' (#95) from fix/the-broker-tls-directory-is-the-operators into main
jschoubben2026-09-26 14:12:45 +00:00
37634de1e3
lavinmq: the broker TLS directory is the operator's, read by whoever needs it
jschoubben2026-09-26 16:12:29 +02:00
36c5f87130
Merge pull request 'route-adapter: write a body limit as the predecessor's buffering middleware' (#94) from feat/a-route-may-limit-the-body-it-carries into main
jschoubben2026-09-26 14:02:03 +00:00
b2e39eb2cd
route-adapter: write a body limit as the predecessor's buffering middleware
jochen2026-09-26 16:01:23 +02:00
3d73c9f54e
Merge pull request 'nextcloud: real mesh module, MariaDB→PostgreSQL, S3 via _FILE secrets' (#59) from feat/nextcloud-module-postgres-migration into main
jschoubben2026-09-26 13:06:32 +00:00
4d715f8b73
Merge pull request 'minio: the real 4-node/8-drive erasure-coded cluster, both public routes, verified live on novox' (#58) from feat/minio-real-cluster-not-single-node into main
jschoubben2026-09-26 13:05:57 +00:00
fa91be4941
Merge pull request 'postgres: declare the data directory's real owner; keycloak: use the port template' (#55) from fix/postgres-owner-and-keycloak-port-template into main
jschoubben2026-09-26 13:05:10 +00:00
fc5ccdfe2a
Merge pull request 'mailu: one WEBMAIL_ADDRESS, the mesh's container name' (#93) from fix/one-webmail-address into main
jschoubben2026-09-26 13:04:44 +00:00
4489e56935
mailu: one WEBMAIL_ADDRESS, the mesh's container name
jschoubben2026-09-26 15:04:32 +02:00
08e947e4c8
Merge pull request 'The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on' (#69) from feat/seats-are-a-closed-set into main
jschoubben2026-09-26 12:31:10 +00:00
420d05e8dd
Merge pull request 'mailu certifies itself, take two — the fall-through is now a behaviour' (#92) from fix/mailu-certifies-itself-take-two into main
jschoubben2026-09-26 12:27:56 +00:00
6769e66c82
mailu certifies itself, take two — the fall-through is now a behaviour
jschoubben2026-09-26 14:27:45 +02:00
15b35b53db
Merge pull request 'mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour' (#91) from fix/mailu-back-to-cert-while-the-fallthrough-is-fixed into main
jschoubben2026-09-26 12:19:17 +00:00
6177565741
mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour
jschoubben2026-09-26 14:19:05 +02:00
6b2ea0972a
Merge pull request 'mailu certifies itself: the edge passes unknown ACME tokens through now' (#90) from fix/mailu-certifies-itself into main
jschoubben2026-09-26 12:15:24 +00:00
a978b53d1c
mailu certifies itself: the edge passes unknown ACME tokens through now
jschoubben2026-09-26 14:15:12 +02:00
7501c1db9e
Merge pull request 'portainer: serve its public name, hold its real data, run the image the machine runs' (#89) from fix/portainer-serves-its-name into main
jschoubben2026-09-26 01:46:24 +00:00
00ada1e9f7
portainer: serve its public name, hold its real data, run the image the machine runs
jschoubben2026-09-26 03:46:11 +02:00
67b443d5ad
Merge pull request 'only-office: pin the machine side of its port' (#88) from fix/only-office-pins-its-machine-port into main
jschoubben2026-09-26 01:44:59 +00:00
a2da2e4910
only-office: pin the machine side of its port
jschoubben2026-09-26 03:44:47 +02:00
bcb9ca8f93
Merge pull request 'invoicing: MONGO_DB says the granted database's name' (#87) from fix/invoicing-names-its-database into main
jschoubben2026-09-26 01:34:09 +00:00
2409afda60
invoicing: MONGO_DB says the granted database's name
jschoubben2026-09-26 03:34:00 +02:00
511200ed9c
Merge pull request 'invoicing: the photos lessons, applied before its window' (#86) from fix/invoicing-learns-the-photos-lessons into main
jschoubben2026-09-26 01:15:38 +00:00
b704bf5ad8
invoicing: the photos lessons, applied before its window
jschoubben2026-09-26 03:15:26 +02:00
142d65c52a
Merge pull request 'mongodb: the server container is mongodb-server, not the predecessor's name' (#85) from fix/mongodb-coexists-with-the-predecessor into main
jschoubben2026-09-26 00:37:51 +00:00
ccb6e7500e
mongodb: the server container is mongodb-server, not the predecessor's name
jschoubben2026-09-26 00:56:02 +02:00
bbda88c13b
Merge pull request 'Every credential provider says whether it still holds a consumer (hq issue 120)' (#84) from fix/120-redis-says-what-it-holds into main
jschoubben2026-09-25 23:31:28 +00:00
620b47d309
mssql remaps a user only when orphaned; mailu's operator tool no longer re-enables
jochen2026-09-26 01:30:15 +02:00
6fd93afc6c
Review fixes: holds and create agree, and no password leaves a check
jochen2026-09-26 01:24:32 +02:00
0cb0f814b4
Every credential provider says whether it still holds a consumer
jochen2026-09-26 01:09:52 +02:00
3d271f72ea
redis: say whether it still holds a consumer's ACL user
jochen2026-09-26 00:53:13 +02:00
76ca479f37
Merge pull request 'mailu: the queue is root's and traversable, which is postfix's own convention' (#83) from fix/the-queue-is-traversable into main
jschoubben2026-09-25 22:17:54 +00:00
a055334c9b
mailu: the queue is root's and traversable, which is postfix's own convention
jschoubben2026-09-26 00:17:41 +02:00
d5b169b6b6
Merge pull request 'mailu: cert flavor while the predecessor's proxy owns the challenge path' (#82) from fix/mailu-tls-cert-behind-the-predecessors-proxy into main
jschoubben2026-09-25 22:11:26 +00:00
8ecc5a7249
mailu: cert flavor while the predecessor's proxy owns the challenge path
jschoubben2026-09-26 00:11:11 +02:00
29f00f33a5
Merge pull request 'automx: the seed writes the schema 2021.6 reads' (#81) from fix/automx-seed-knows-prio into main
jschoubben2026-09-25 22:06:36 +00:00
480627fdd9
automx: the seed writes the schema 2021.6 reads
jschoubben2026-09-26 00:06:24 +02:00
c8c939a595
Merge pull request 'automx: the schema its seed writes belongs to one automx2, so that one is named' (#80) from fix/automx-pins-the-schema-its-seed-writes into main
jschoubben2026-09-25 21:59:54 +00:00
30b7ce429c
automx: the schema its seed writes belongs to one automx2, so that one is named
jschoubben2026-09-25 23:59:42 +02:00
b8a50ee7a0
Merge pull request 'mailu: the containers are named by the vocabulary 2024.06 reads' (#79) from fix/mailu-speaks-2024-06-addresses into main
jschoubben2026-09-25 21:56:40 +00:00
4e37b3e84d
mailu: the containers are named by the vocabulary 2024.06 reads
jschoubben2026-09-25 23:56:28 +02:00
7cb7659fbe
Merge pull request 'mailu: every container asks the module's own resolver, pinned where they can find it' (#78) from feat/mailu-points-at-its-own-resolver into main
jschoubben2026-09-25 21:49:30 +00:00
047f228fe3
mailu: every container asks the module's own resolver, pinned where they can find it
jschoubben2026-09-25 23:49:17 +02:00
40aa93dc2b
Merge pull request 'mailu: the admin API answers on 8080 since 2024.06' (#77) from fix/mailu-admin-answers-on-8080 into main
jschoubben2026-09-25 21:45:11 +00:00
5462317183
mailu: the admin API answers on 8080 since 2024.06
jschoubben2026-09-25 23:45:00 +02:00
cb9d43b2a1
Merge pull request 'automx: the launcher's wrapper is written by the build that ships it' (#76) from fix/automx-carries-its-own-wrapper into main
jschoubben2026-09-25 21:44:46 +00:00
aa8c4253f1
automx: the launcher's wrapper is written by the build that ships it
jschoubben2026-09-25 23:44:34 +02:00
4863eef586
Merge pull request 'mailu: pin exactly what phase 1 verified' (#75) from fix/mailu-pins-what-phase-one-verified into main
jschoubben2026-09-25 21:34:26 +00:00
621246996d
Merge pull request 'mailu: 2024.06 closes 110/143/587 by default; parity says open them' (#74) from fix/mailu-ports-parity into main
jschoubben2026-09-25 20:56:39 +00:00
e3d8bd0726
mailu: 2024.06 closes 110/143/587 by default; parity says open them
jschoubben2026-09-25 22:56:27 +02:00
a708666bad
Merge pull request 'mailu: the manifest matches the machine, provides smtp, and carries automx' (#73) from feat/mailu-becomes-real into main
jschoubben2026-09-25 20:40:08 +00:00
ed5d1386ce
mailu: the manifest matches the machine, provides smtp, and carries automx
jschoubben2026-09-25 22:39:29 +02:00
3875987656
Merge pull request 'gitea: the package team may read code, and its units are reconciled' (#72) from fix/gitea-package-team-reads-code into main
jschoubben2026-09-25 19:59:25 +00:00
311f7f1fdb
gitea: the package team may read code, and its units are reconciled
jschoubben2026-09-25 21:59:09 +02:00
bbd1723612
Merge pull request 'route-proxy binds the mesh's own authority for internal names; gitea's internal-API refusal joins its route' (#70) from feat/route-proxy-internal-acme into main
jschoubben2026-09-25 19:55:32 +00:00
c7964b7285
Merge pull request 'gitea: a consumer's user is actually created, and a failed create says why' (#71) from fix/gitea-provisioner-user-create into main
jschoubben2026-09-25 19:54:08 +00:00
02ccf31a71
gitea: a consumer's user is actually created, and a failed create says why
jschoubben2026-09-25 21:42:38 +02:00
c2353fc0a6
gitea: the internal-API refusal is part of the route, not a file beside the proxy
jschoubben2026-09-25 20:51:44 +02:00
45dd036623
The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on
jochen2026-09-25 20:48:10 +02:00
962cba7c04
route-proxy: internal names are certified by the mesh's own authority
jschoubben2026-09-25 20:36:41 +02:00
bfe99f8c78
Merge pull request 'minio: declare the route contribution it has always needed, scoped from PR #58' (#68) from fix/minio-declares-its-real-route-contribution into main
jschoubben2026-09-25 16:19:39 +00:00
f0aa9e5fed
minio: declare the route contribution it has always needed, scoped from PR #58jschoubben2026-09-25 18:19:27 +02:00
cb38bf08a6
Merge pull request 'route-proxy: the trust step skips the fetch when the CA names no roots to get' (#67) from fix/route-proxy-trust-skips-when-there-is-nothing-to-fetch into main
jschoubben2026-09-25 16:15:09 +00:00
95a0a5672c
route-proxy: the trust step skips the fetch when the CA names no roots to get
jschoubben2026-09-25 18:14:58 +02:00
d243b56942
Merge pull request 'route-proxy: the server container resolves its own built artifact' (#66) from fix/route-proxy-server-uses-its-real-artifact into main
jschoubben2026-09-25 16:09:19 +00:00
4c5e69903f
route-proxy: the server container resolves its own built artifact
jschoubben2026-09-25 18:09:09 +02:00
547937034f
Merge pull request 'public-acme: the roots field is named roots, not root' (#65) from fix/public-acme-field-name-matches-what-route-proxy-reads into main
jschoubben2026-09-25 16:08:39 +00:00
3147fac08b
public-acme: the roots field is named roots, not root
jschoubben2026-09-25 18:08:28 +02:00
7a96287d99
Merge pull request 'route-proxy: declare the build context its own Dockerfile has always needed' (#64) from feat/route-proxy-declares-its-real-context into main
jschoubben2026-09-25 15:58:20 +00:00
dd5b973e66
route-proxy: declare the build context its own Dockerfile has always needed
jschoubben2026-09-25 17:58:10 +02:00
72b1413497
Merge pull request 'builder is a real built module now, not handed over' (#63) from feat/builder-is-a-real-built-module into main
jschoubben2026-09-25 15:54:58 +00:00
8369fe22b8
builder is a real built module now, not handed over
jschoubben2026-09-25 17:54:46 +02:00
19e0a8469d
Merge pull request 'minio: install mc in the runtime image, declare its region' (#62) from fix/minio-provisioner-missing-mc-cli into main
jschoubben2026-09-25 15:25:18 +00:00
271911753f
Merge pull request 'builder: consume package-registry as a real mesh grant, not a hand-faked one' (#61) from fix/builder-real-package-registry-grant into main
jschoubben2026-09-25 15:25:04 +00:00
4e2dd0adae
Merge pull request 'gitea: listens its real internal ssh port (22), not 2222' (#60) from fix/gitea-ssh-port-manifest-mismatch into main
jschoubben2026-09-25 15:24:49 +00:00
1b02dc1f66
builder: qualify its own image with the registry host
jschoubben2026-09-25 17:10:56 +02:00
755b0a5599
builder: consume package-registry as a real mesh grant, not a hand-faked one
jschoubben2026-09-25 17:08:12 +02:00
ae6dfea2c9
gitea: listens its real internal ssh port (22), not 2222
jschoubben2026-09-25 17:07:58 +02:00
b3de7e7944
minio: declare region eu-west, don't leave it as live-only drift
jschoubben2026-09-25 15:10:30 +02:00
107090310d
nextcloud: point S3 config at the bucket the mesh actually provisioned
jschoubben2026-09-25 14:42:57 +02:00
5d13a5078c
minio: install mc in the runtime image — the provisioner needs it to run
jschoubben2026-09-25 14:37:23 +02:00
61eca75315
nextcloud: pull the S3 region from the binding, not a hardcoded literal
jschoubben2026-09-25 14:15:40 +02:00