mesh-catalog/modules at 2e6cc71f7aa9b6f7565433cbff23b261422c7fb8 - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jschoubben 2e6cc71f7a gitea: the jail also bans what gitea's sshd refuses

The jail read gitea's container journal, which carries its sshd's lines,
but matched only the web login. 167 ssh attempts an hour from the
internet went unbanned. Two patterns, one per attempt: an unknown user,
and a user sshd refuses; tested against a day of the real log, 946
matches and none on an accepted login.

2026-10-02 23:23:35 +02:00

..

anthropic-consumer

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

anthropic-manager

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156)

2026-09-30 21:14:40 +02:00

dnsmasq: listen addresses are a setting, and docker's file takes none

2026-10-02 11:49:57 +02:00

A ban list never holds a neighbour (hq ADR 0186)

2026-10-02 18:42:16 +02:00

gitea: the jail also bans what gitea's sshd refuses

2026-10-02 23:23:35 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Merge pull request 'The mesh's own files for a module are placed by the mesh, not the definition (issue 174)' (#197 ) from feat/the-mesh-places-its-own-files into main

2026-09-30 21:49:11 +00:00

lab: the image carries what the builds and the lab call: python3, file, iproute2, sudo

2026-10-02 15:23:52 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

local-model-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

fail2ban holds the intrusion seat's verbs and composes the jails; mail, forge and proxy declare theirs (hq ADR 0179, to-be 31)

2026-10-02 17:02:49 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

No definition names this installation

2026-09-30 20:49:21 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The vault's claim and its own event names return

2026-10-01 17:19:05 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

mssql: the query runs as a read-only login, one line, no variables; sqlcmd is installed (hq #193 )

2026-10-02 00:25:22 +02:00

n8n: its media library is an access placed by the assignment

2026-10-01 02:02:30 +02:00

An access has an id, and its mounts name it (issue 153)

2026-10-01 00:01:42 +02:00

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

nftables declares the ufw front end absent once its filter is loaded (hq ADR 0175)

2026-10-02 16:27:34 +02:00

nodered says it reads its API token and admin password at start, so the mesh may rotate them (hq 180)

2026-10-01 11:44:29 +02:00

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

No definition names this installation

2026-09-30 20:49:21 +02:00

openai-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

postgres: the store's query runs as a read-only login, never as the admin (hq #193 )

2026-10-02 00:09:09 +02:00

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

An access has an id, and its mounts name it (issue 153)

2026-10-01 00:01:42 +02:00

The proxy's jail reads both refusals, each pattern naming the host once

2026-10-02 17:23:42 +02:00

searxng says it reads its secret key at start, so the mesh may rotate it (hq 180)

2026-10-01 12:09:47 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

supabase: own secrets, and unique ids for its containers

2026-09-30 17:57:57 +02:00

systemd-networkd

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

unifi: list networks and set the DNS their DHCP hands out

2026-10-02 11:53:16 +02:00

website: it listens on the port its container publishes

2026-09-30 21:01:47 +02:00