mesh-catalog/modules at feat/the-operators-machine - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jochen 9ab58e79fb systemd: the service manager as a module — holds node-service-manager and answers for the units in both scopes

The holder of the seat the controller seeds under novox/hq ADR 0177. Eight
verbs under the seat's name — units, status, start, stop, restart, enable,
disable, journal — each taking an optional scope, "system" by default or
"user" for the operator account's own manager, reached as
`systemctl --user --machine=<account>@` when the runtime is not that account.
One tool of its own, systemd_failed, for every failed unit in both scopes.
A package, a claim and a bundle; no container, no process: served by the node
tools runtime (ADR 0175) once it exists. `module check` passes against a
controller that carries the seat; the tools type-check against the SDK.

2026-10-02 16:47:48 +02:00

..

anthropic-consumer

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

anthropic-manager

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156)

2026-09-30 21:14:40 +02:00

dnsmasq: listen addresses are a setting, and docker's file takes none

2026-10-02 11:49:57 +02:00

fail2ban: ban through an action every machine has

2026-09-28 20:48:24 +02:00

The forge's tools close and read pull requests, read files and branches, and delete a branch

2026-10-01 11:25:34 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Merge pull request 'The mesh's own files for a module are placed by the mesh, not the definition (issue 174)' (#197 ) from feat/the-mesh-places-its-own-files into main

2026-09-30 21:49:11 +00:00

lab: the image carries what the builds and the lab call: python3, file, iproute2, sudo

2026-10-02 15:23:52 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

local-model-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

Merge pull request 'The mesh's own files for a module are placed by the mesh, not the definition (issue 174)' (#197 ) from feat/the-mesh-places-its-own-files into main

2026-09-30 21:49:11 +00:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

No definition names this installation

2026-09-30 20:49:21 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The vault's claim and its own event names return

2026-10-01 17:19:05 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

mssql: the query runs as a read-only login, one line, no variables; sqlcmd is installed (hq #193 )

2026-10-02 00:25:22 +02:00

n8n: its media library is an access placed by the assignment

2026-10-01 02:02:30 +02:00

An access has an id, and its mounts name it (issue 153)

2026-10-01 00:01:42 +02:00

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Cite hq ADR 0170, not 0169: the firewall seat's record was renumbered after a collision on hq main

2026-10-02 14:52:26 +02:00

nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)

2026-10-01 11:44:29 +02:00

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

No definition names this installation

2026-09-30 20:49:21 +02:00

openai-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

postgres: the store's query runs as a read-only login, never as the admin (hq #193 )

2026-10-02 00:09:09 +02:00

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

An access has an id, and its mounts name it (issue 153)

2026-10-01 00:01:42 +02:00

route-proxy: a bus account, to read its membership

2026-10-02 01:46:18 +02:00

searxng says it reads its secret key at start, so the mesh may rotate it (hq 180)

2026-10-01 12:09:47 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

supabase: own secrets, and unique ids for its containers

2026-09-30 17:57:57 +02:00

systemd: the service manager as a module — holds node-service-manager and answers for the units in both scopes

2026-10-02 16:47:48 +02:00

systemd-networkd

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

unifi: list networks and set the DNS their DHCP hands out

2026-10-02 11:53:16 +02:00

website: it listens on the port its container publishes

2026-09-30 21:01:47 +02:00

zsh: the shell as a module — package, the mesh's ~/.zshrc block, the login-shell seat and execute

2026-10-02 16:40:34 +02:00