Commit Graph

  • 6761bb02a1 nextcloud: it lives under its own name, and html is placed jschoubben 2026-09-26 18:05:28 +02:00
  • f98c9859d2 Merge pull request 'gitea: its data and grants are placed, not stated' (#101) from feat/gitea-dirs-are-placed into main jschoubben 2026-09-26 16:04:30 +00:00
  • cac5eab7da gitea: its data and grants are placed, not stated jschoubben 2026-09-26 18:04:17 +02:00
  • 770c9f6a78 Merge pull request 'mongodb: its data directory is placed, not stated' (#100) from feat/mongodb-dir-is-placed into main jschoubben 2026-09-26 16:03:36 +00:00
  • 5427118614 mongodb: its data directory is placed, not stated jschoubben 2026-09-26 18:03:25 +02:00
  • 53765335cf Merge pull request 'portainer: its data directory is placed, not stated' (#99) from feat/portainer-dir-is-placed into main jschoubben 2026-09-26 16:02:42 +00:00
  • 5fd2ed9686 portainer: its data directory is placed, not stated jschoubben 2026-09-26 18:02:25 +02:00
  • f7887d706d Merge pull request 'only-office: its directories are placed, not stated' (#98) from feat/only-office-dirs-are-placed into main jschoubben 2026-09-26 16:01:43 +00:00
  • d6dd21a091 only-office: its directories are placed, not stated jschoubben 2026-09-26 18:01:31 +02:00
  • a844701577 Merge pull request 'Module data lives in /var/lib, now that nothing is mid-cutover' (#97) from feat/module-data-lives-in-var-lib into main jschoubben 2026-09-26 14:47:37 +00:00
  • 50a99f022c Module data lives in /var/lib, now that nothing is mid-cutover jschoubben 2026-09-26 16:47:24 +02:00
  • 382a44621e Merge pull request 'A bucket is the one the mesh derives, and the photos module named another' (#96) from fix/a-bucket-is-the-one-the-mesh-derives into main jschoubben 2026-09-26 14:46:30 +00:00
  • ddb67fc095 A bucket is the one the mesh derives, and the photos module named another jochen 2026-09-26 16:46:10 +02:00
  • 78595e4db3 Merge pull request 'lavinmq: the broker TLS directory is the operator's, read by whoever needs it' (#95) from fix/the-broker-tls-directory-is-the-operators into main jschoubben 2026-09-26 14:12:45 +00:00
  • 37634de1e3 lavinmq: the broker TLS directory is the operator's, read by whoever needs it jschoubben 2026-09-26 16:12:29 +02:00
  • 36c5f87130 Merge pull request 'route-adapter: write a body limit as the predecessor's buffering middleware' (#94) from feat/a-route-may-limit-the-body-it-carries into main jschoubben 2026-09-26 14:02:03 +00:00
  • b2e39eb2cd route-adapter: write a body limit as the predecessor's buffering middleware jochen 2026-09-26 16:01:23 +02:00
  • 3d73c9f54e Merge pull request 'nextcloud: real mesh module, MariaDB→PostgreSQL, S3 via _FILE secrets' (#59) from feat/nextcloud-module-postgres-migration into main jschoubben 2026-09-26 13:06:32 +00:00
  • fb95eb6e46 Merge main jschoubben 2026-09-26 15:06:11 +02:00
  • 4d715f8b73 Merge pull request 'minio: the real 4-node/8-drive erasure-coded cluster, both public routes, verified live on novox' (#58) from feat/minio-real-cluster-not-single-node into main jschoubben 2026-09-26 13:05:57 +00:00
  • afe8aae826 Merge main jochen 2026-09-26 15:05:40 +02:00
  • fa91be4941 Merge pull request 'postgres: declare the data directory's real owner; keycloak: use the port template' (#55) from fix/postgres-owner-and-keycloak-port-template into main jschoubben 2026-09-26 13:05:10 +00:00
  • 87f73dce6a Merge main jschoubben 2026-09-26 15:04:47 +02:00
  • fc5ccdfe2a Merge pull request 'mailu: one WEBMAIL_ADDRESS, the mesh's container name' (#93) from fix/one-webmail-address into main jschoubben 2026-09-26 13:04:44 +00:00
  • 4489e56935 mailu: one WEBMAIL_ADDRESS, the mesh's container name jschoubben 2026-09-26 15:04:32 +02:00
  • 08e947e4c8 Merge pull request 'The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on' (#69) from feat/seats-are-a-closed-set into main jschoubben 2026-09-26 12:31:10 +00:00
  • 7fb9dd0254 Merge main jschoubben 2026-09-26 14:29:28 +02:00
  • 420d05e8dd Merge pull request 'mailu certifies itself, take two — the fall-through is now a behaviour' (#92) from fix/mailu-certifies-itself-take-two into main jschoubben 2026-09-26 12:27:56 +00:00
  • 6769e66c82 mailu certifies itself, take two — the fall-through is now a behaviour jschoubben 2026-09-26 14:27:45 +02:00
  • 15b35b53db Merge pull request 'mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour' (#91) from fix/mailu-back-to-cert-while-the-fallthrough-is-fixed into main jschoubben 2026-09-26 12:19:17 +00:00
  • 6177565741 mailu: back to the copied cert — the edge's fall-through is a belief, not a behaviour jschoubben 2026-09-26 14:19:05 +02:00
  • 6b2ea0972a Merge pull request 'mailu certifies itself: the edge passes unknown ACME tokens through now' (#90) from fix/mailu-certifies-itself into main jschoubben 2026-09-26 12:15:24 +00:00
  • a978b53d1c mailu certifies itself: the edge passes unknown ACME tokens through now jschoubben 2026-09-26 14:15:12 +02:00
  • 7501c1db9e Merge pull request 'portainer: serve its public name, hold its real data, run the image the machine runs' (#89) from fix/portainer-serves-its-name into main jschoubben 2026-09-26 01:46:24 +00:00
  • 00ada1e9f7 portainer: serve its public name, hold its real data, run the image the machine runs jschoubben 2026-09-26 03:46:11 +02:00
  • 67b443d5ad Merge pull request 'only-office: pin the machine side of its port' (#88) from fix/only-office-pins-its-machine-port into main jschoubben 2026-09-26 01:44:59 +00:00
  • a2da2e4910 only-office: pin the machine side of its port jschoubben 2026-09-26 03:44:47 +02:00
  • bcb9ca8f93 Merge pull request 'invoicing: MONGO_DB says the granted database's name' (#87) from fix/invoicing-names-its-database into main jschoubben 2026-09-26 01:34:09 +00:00
  • 2409afda60 invoicing: MONGO_DB says the granted database's name jschoubben 2026-09-26 03:34:00 +02:00
  • 511200ed9c Merge pull request 'invoicing: the photos lessons, applied before its window' (#86) from fix/invoicing-learns-the-photos-lessons into main jschoubben 2026-09-26 01:15:38 +00:00
  • b704bf5ad8 invoicing: the photos lessons, applied before its window jschoubben 2026-09-26 03:15:26 +02:00
  • 142d65c52a Merge pull request 'mongodb: the server container is mongodb-server, not the predecessor's name' (#85) from fix/mongodb-coexists-with-the-predecessor into main jschoubben 2026-09-26 00:37:51 +00:00
  • ccb6e7500e mongodb: the server container is mongodb-server, not the predecessor's name jschoubben 2026-09-26 00:56:02 +02:00
  • bbda88c13b Merge pull request 'Every credential provider says whether it still holds a consumer (hq issue 120)' (#84) from fix/120-redis-says-what-it-holds into main jschoubben 2026-09-25 23:31:28 +00:00
  • 620b47d309 mssql remaps a user only when orphaned; mailu's operator tool no longer re-enables jochen 2026-09-26 01:30:15 +02:00
  • 6fd93afc6c Review fixes: holds and create agree, and no password leaves a check jochen 2026-09-26 01:24:32 +02:00
  • 0cb0f814b4 Every credential provider says whether it still holds a consumer jochen 2026-09-26 01:09:52 +02:00
  • 3d271f72ea redis: say whether it still holds a consumer's ACL user jochen 2026-09-26 00:53:13 +02:00
  • 76ca479f37 Merge pull request 'mailu: the queue is root's and traversable, which is postfix's own convention' (#83) from fix/the-queue-is-traversable into main jschoubben 2026-09-25 22:17:54 +00:00
  • a055334c9b mailu: the queue is root's and traversable, which is postfix's own convention jschoubben 2026-09-26 00:17:41 +02:00
  • d5b169b6b6 Merge pull request 'mailu: cert flavor while the predecessor's proxy owns the challenge path' (#82) from fix/mailu-tls-cert-behind-the-predecessors-proxy into main jschoubben 2026-09-25 22:11:26 +00:00
  • 8ecc5a7249 mailu: cert flavor while the predecessor's proxy owns the challenge path jschoubben 2026-09-26 00:11:11 +02:00
  • 29f00f33a5 Merge pull request 'automx: the seed writes the schema 2021.6 reads' (#81) from fix/automx-seed-knows-prio into main jschoubben 2026-09-25 22:06:36 +00:00
  • 480627fdd9 automx: the seed writes the schema 2021.6 reads jschoubben 2026-09-26 00:06:24 +02:00
  • c8c939a595 Merge pull request 'automx: the schema its seed writes belongs to one automx2, so that one is named' (#80) from fix/automx-pins-the-schema-its-seed-writes into main jschoubben 2026-09-25 21:59:54 +00:00
  • 30b7ce429c automx: the schema its seed writes belongs to one automx2, so that one is named jschoubben 2026-09-25 23:59:42 +02:00
  • b8a50ee7a0 Merge pull request 'mailu: the containers are named by the vocabulary 2024.06 reads' (#79) from fix/mailu-speaks-2024-06-addresses into main jschoubben 2026-09-25 21:56:40 +00:00
  • 4e37b3e84d mailu: the containers are named by the vocabulary 2024.06 reads jschoubben 2026-09-25 23:56:28 +02:00
  • 7cb7659fbe Merge pull request 'mailu: every container asks the module's own resolver, pinned where they can find it' (#78) from feat/mailu-points-at-its-own-resolver into main jschoubben 2026-09-25 21:49:30 +00:00
  • 047f228fe3 mailu: every container asks the module's own resolver, pinned where they can find it jschoubben 2026-09-25 23:49:17 +02:00
  • 40aa93dc2b Merge pull request 'mailu: the admin API answers on 8080 since 2024.06' (#77) from fix/mailu-admin-answers-on-8080 into main jschoubben 2026-09-25 21:45:11 +00:00
  • 5462317183 mailu: the admin API answers on 8080 since 2024.06 jschoubben 2026-09-25 23:45:00 +02:00
  • cb9d43b2a1 Merge pull request 'automx: the launcher's wrapper is written by the build that ships it' (#76) from fix/automx-carries-its-own-wrapper into main jschoubben 2026-09-25 21:44:46 +00:00
  • aa8c4253f1 automx: the launcher's wrapper is written by the build that ships it jschoubben 2026-09-25 23:44:34 +02:00
  • 4863eef586 Merge pull request 'mailu: pin exactly what phase 1 verified' (#75) from fix/mailu-pins-what-phase-one-verified into main jschoubben 2026-09-25 21:34:26 +00:00
  • 75f993e92b mailu: pin exactly what phase 1 verified jschoubben 2026-09-25 23:34:13 +02:00
  • 621246996d Merge pull request 'mailu: 2024.06 closes 110/143/587 by default; parity says open them' (#74) from fix/mailu-ports-parity into main jschoubben 2026-09-25 20:56:39 +00:00
  • e3d8bd0726 mailu: 2024.06 closes 110/143/587 by default; parity says open them jschoubben 2026-09-25 22:56:27 +02:00
  • a708666bad Merge pull request 'mailu: the manifest matches the machine, provides smtp, and carries automx' (#73) from feat/mailu-becomes-real into main jschoubben 2026-09-25 20:40:08 +00:00
  • ed5d1386ce mailu: the manifest matches the machine, provides smtp, and carries automx jschoubben 2026-09-25 22:39:29 +02:00
  • 3875987656 Merge pull request 'gitea: the package team may read code, and its units are reconciled' (#72) from fix/gitea-package-team-reads-code into main jschoubben 2026-09-25 19:59:25 +00:00
  • 311f7f1fdb gitea: the package team may read code, and its units are reconciled jschoubben 2026-09-25 21:59:09 +02:00
  • bbd1723612 Merge pull request 'route-proxy binds the mesh's own authority for internal names; gitea's internal-API refusal joins its route' (#70) from feat/route-proxy-internal-acme into main jschoubben 2026-09-25 19:55:32 +00:00
  • c7964b7285 Merge pull request 'gitea: a consumer's user is actually created, and a failed create says why' (#71) from fix/gitea-provisioner-user-create into main jschoubben 2026-09-25 19:54:08 +00:00
  • 02ccf31a71 gitea: a consumer's user is actually created, and a failed create says why jschoubben 2026-09-25 21:42:38 +02:00
  • c2353fc0a6 gitea: the internal-API refusal is part of the route, not a file beside the proxy jschoubben 2026-09-25 20:51:44 +02:00
  • 45dd036623 The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on jochen 2026-09-25 20:48:10 +02:00
  • 962cba7c04 route-proxy: internal names are certified by the mesh's own authority jschoubben 2026-09-25 20:36:41 +02:00
  • bfe99f8c78 Merge pull request 'minio: declare the route contribution it has always needed, scoped from PR #58' (#68) from fix/minio-declares-its-real-route-contribution into main jschoubben 2026-09-25 16:19:39 +00:00
  • f0aa9e5fed minio: declare the route contribution it has always needed, scoped from PR #58 jschoubben 2026-09-25 18:19:27 +02:00
  • cb38bf08a6 Merge pull request 'route-proxy: the trust step skips the fetch when the CA names no roots to get' (#67) from fix/route-proxy-trust-skips-when-there-is-nothing-to-fetch into main jschoubben 2026-09-25 16:15:09 +00:00
  • 95a0a5672c route-proxy: the trust step skips the fetch when the CA names no roots to get jschoubben 2026-09-25 18:14:58 +02:00
  • d243b56942 Merge pull request 'route-proxy: the server container resolves its own built artifact' (#66) from fix/route-proxy-server-uses-its-real-artifact into main jschoubben 2026-09-25 16:09:19 +00:00
  • 4c5e69903f route-proxy: the server container resolves its own built artifact jschoubben 2026-09-25 18:09:09 +02:00
  • 547937034f Merge pull request 'public-acme: the roots field is named roots, not root' (#65) from fix/public-acme-field-name-matches-what-route-proxy-reads into main jschoubben 2026-09-25 16:08:39 +00:00
  • 3147fac08b public-acme: the roots field is named roots, not root jschoubben 2026-09-25 18:08:28 +02:00
  • 7a96287d99 Merge pull request 'route-proxy: declare the build context its own Dockerfile has always needed' (#64) from feat/route-proxy-declares-its-real-context into main jschoubben 2026-09-25 15:58:20 +00:00
  • dd5b973e66 route-proxy: declare the build context its own Dockerfile has always needed jschoubben 2026-09-25 17:58:10 +02:00
  • 72b1413497 Merge pull request 'builder is a real built module now, not handed over' (#63) from feat/builder-is-a-real-built-module into main jschoubben 2026-09-25 15:54:58 +00:00
  • 8369fe22b8 builder is a real built module now, not handed over jschoubben 2026-09-25 17:54:46 +02:00
  • 19e0a8469d Merge pull request 'minio: install mc in the runtime image, declare its region' (#62) from fix/minio-provisioner-missing-mc-cli into main jschoubben 2026-09-25 15:25:18 +00:00
  • 271911753f Merge pull request 'builder: consume package-registry as a real mesh grant, not a hand-faked one' (#61) from fix/builder-real-package-registry-grant into main jschoubben 2026-09-25 15:25:04 +00:00
  • 4e2dd0adae Merge pull request 'gitea: listens its real internal ssh port (22), not 2222' (#60) from fix/gitea-ssh-port-manifest-mismatch into main jschoubben 2026-09-25 15:24:49 +00:00
  • 1b02dc1f66 builder: qualify its own image with the registry host jschoubben 2026-09-25 17:10:56 +02:00
  • 755b0a5599 builder: consume package-registry as a real mesh grant, not a hand-faked one jschoubben 2026-09-25 17:08:12 +02:00
  • ae6dfea2c9 gitea: listens its real internal ssh port (22), not 2222 jschoubben 2026-09-25 17:07:58 +02:00
  • b3de7e7944 minio: declare region eu-west, don't leave it as live-only drift jschoubben 2026-09-25 15:10:30 +02:00
  • 107090310d nextcloud: point S3 config at the bucket the mesh actually provisioned jschoubben 2026-09-25 14:42:57 +02:00
  • 5d13a5078c minio: install mc in the runtime image — the provisioner needs it to run jschoubben 2026-09-25 14:37:23 +02:00
  • 61eca75315 nextcloud: pull the S3 region from the binding, not a hardcoded literal jschoubben 2026-09-25 14:15:40 +02:00