mesh-catalog/modules at 1a28e5aec6a6dd79f93dfdedf99b6aa4ef0edd19 - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jschoubben 1a28e5aec6 Six modules take their secrets from files; the rest say precisely why not

From the survey of every env-file secret (ADR 0086, issue 041): amqp-ping,
minio, mongodb and grafana use the _FILE twin their software honours;
mesh-catalog and model-usage read DATABASE_URL_FILE (a file the mesh
templates, mounted where only the runtime reads it); grafana's secret files
belong to its own account. Two dead deliveries removed: a line nothing read
in amqp-email-forwarder, and mailu's secret.env on four containers that
never read it. The 25 exceptions that remain carry the surveyed reason —
convertible and awaiting a bed, convertible through a generated config file,
the application's own code, or not convertible.

2026-09-21 12:29:25 +02:00

..

amqp-email-forwarder

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

anthropic-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

anthropic-manager

Defer model-usage and anthropic-manager from the buildable set (issue 060)

2026-09-18 02:48:09 +02:00

Review: four manifests said something stale or nothing at all

2026-09-15 22:03:33 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The builder names the registry by the binding again (ADR 0082)

2026-09-17 23:05:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

Review: four manifests said something stale or nothing at all

2026-09-15 22:03:33 +02:00

fail2ban: require the firewall capability, not the non-existent intrusion-prevention

2026-09-08 18:27:34 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Declare what hello-web is made of, to prove a build from a path

2026-09-12 16:57:18 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Convert four more hal modules: bookshelf, unifi, fail2ban, marrytts

2026-09-05 12:04:14 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

mesh-controller

The control plane's secret files belong to its own account (secrets-owner)

2026-09-21 10:19:00 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Pin the operator's own images by digest, as every other image already is

2026-09-11 01:06:14 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Pin the operator's own images by digest, as every other image already is

2026-09-11 01:06:14 +02:00

Pin the operator's own images by digest, as every other image already is

2026-09-11 01:06:14 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Ten migration-critical modules become mesh-buildable (issue 060)

2026-09-18 02:02:21 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

resolved-split-dns

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

Rename mesh-control -> mesh-controller, substrate -> foundation

2026-09-16 18:40:40 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Ten migration-critical modules become mesh-buildable (issue 060)

2026-09-18 02:02:21 +02:00