mesh-catalog/modules at 28b8feebfca8a26a27827287d01a5f5b7cfd8858 - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jschoubben 28b8feebfc The authority makes its own root at first start, and the proxy fetches it through a gate

step-ca's root certificate, its key and that key's password were own secrets — random
bytes the mesh minted, which no certificate is (novox/hq 04-ISSUES/076). The mesh
mints only the CA password now; step-ca makes its root at first start and serves it
at /roots.pem, which the manifest now names beside the ACME directory. The route
proxy fetches that root over the mesh network in a run-once step before it starts,
instead of being handed a served fact that could only be written before anything ran
(ADR 0098).

2026-09-21 22:26:28 +02:00

..

amqp-email-forwarder

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

anthropic-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

anthropic-manager

Defer model-usage and anthropic-manager from the buildable set (issue 060)

2026-09-18 02:48:09 +02:00

Review: four manifests said something stale or nothing at all

2026-09-15 22:03:33 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The builder runs on the machine's network: it copies images into the mesh's registry itself now

2026-09-21 22:24:43 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

Review: four manifests said something stale or nothing at all

2026-09-15 22:03:33 +02:00

fail2ban: require the firewall capability, not the non-existent intrusion-prevention

2026-09-08 18:27:34 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

grafana stays a declared exception until a bed exercises its admin password

2026-09-21 12:31:59 +02:00

Declare what hello-web is made of, to prove a build from a path

2026-09-12 16:57:18 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

Convert four more hal modules: bookshelf, unifi, fail2ban, marrytts

2026-09-05 12:04:14 +02:00

The env-file references to files the conversion removed go with them

2026-09-21 12:43:41 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The env-file references to files the conversion removed go with them

2026-09-21 12:43:41 +02:00

mongodb names its secrets' owner: the image drops to its own user before it reads the password file

2026-09-21 13:43:41 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Pin the operator's own images by digest, as every other image already is

2026-09-11 01:06:14 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Pin the operator's own images by digest, as every other image already is

2026-09-11 01:06:14 +02:00

Pin the operator's own images by digest, as every other image already is

2026-09-11 01:06:14 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Ten migration-critical modules become mesh-buildable (issue 060)

2026-09-18 02:02:21 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

resolved-split-dns

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

The authority makes its own root at first start, and the proxy fetches it through a gate

2026-09-21 22:26:28 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The authority makes its own root at first start, and the proxy fetches it through a gate

2026-09-21 22:26:28 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Ten migration-critical modules become mesh-buildable (issue 060)

2026-09-18 02:02:21 +02:00