lavinmq: the broker TLS directory is the operator's, read by whoever needs it #95

Merged

jschoubben merged 1 commits from fix/the-broker-tls-directory-is-the-operators into main

2026-09-26 14:12:45 +00:00

Author	SHA1	Message	Date
jschoubben	37634de1e3	lavinmq: the broker TLS directory is the operator's, read by whoever needs it The controller now accesses /var/lib/mesh-broker-tls (mesh-controller #54) and the push refused whole: lavinmq declared the directory as an owned resource, and shared data is the operator's, owned by no module (ADR 0051). lavinmq only ever reads the certs — genesis laid them down — so it declares a read access like the controller does, and the directory belongs to nobody.	2026-09-26 16:12:29 +02:00

Author

SHA1

Message

Date

jschoubben

37634de1e3

lavinmq: the broker TLS directory is the operator's, read by whoever needs it

The controller now accesses /var/lib/mesh-broker-tls (mesh-controller
#54) and the push refused whole: lavinmq declared the directory as an
owned resource, and shared data is the operator's, owned by no module
(ADR 0051). lavinmq only ever reads the certs — genesis laid them down
— so it declares a read access like the controller does, and the
directory belongs to nobody.

2026-09-26 16:12:29 +02:00