mesh-catalog/modules at 38b56a787723eb2173a7a48aa7b5d1d3ad71e84b - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jochen 38b56a7877 node-env: the account's environment as one module's two files

Every module contributes variables and PATH entries as facts, and one holder of
node-environment places them (novox/hq ADR 0203, to-be 41 WP3). This is that holder: no
package, no process, no tools — the directories it owns under the home and two files the
controller fills, the POSIX file at the path the seat fixes (~/.config/mesh/environment.sh,
sourced by the login shell) and environment.d's 50-mesh.conf for the account's service
manager and graphical session.

2026-10-04 03:59:50 +02:00

..

anthropic-consumer

anthropic-consumer: its usage runs in the node's runtime, and its apply is a scheduled process (hq ADR 0198)

2026-10-04 00:52:31 +02:00

anthropic-manager

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

audit-logger: its test subscribes as the module does and expects local event names

2026-10-04 01:21:40 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

build-agent: a short slug, so its identifier on a machine fits a backend's 20-character key

2026-10-03 11:09:24 +02:00

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

cloudflare-dns: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156)

2026-09-30 21:14:40 +02:00

dnsmasq: restart on the mesh's hosts region, which it reads only at start

2026-10-03 15:29:28 +02:00

fail2ban's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)

2026-10-03 15:07:21 +02:00

gitea: its watcher, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

grafana: its handlers and tools run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

home-assistant: the runtime serves its code, and its provisions step is a run-once process (hq ADR 0198)

2026-10-03 23:33:51 +02:00

icecast: its handlers and tools run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

influxdb: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

keycloak: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

lab: its tools run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

local-model-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

mailu: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

No definition names this installation

2026-09-30 20:49:21 +02:00

mesh-catalog: its consumer and tools run in the node's runtime, and its preparation is a run-once process (hq ADR 0198)

2026-10-04 01:17:41 +02:00

mesh-vault: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

minio: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

mongodb: its handlers, tools and provisioner run in the node's runtime, through the driver in its bundle (hq ADR 0198)

2026-10-04 01:17:41 +02:00

mosquitto: run mosquitto_ctrl inside the broker's container

2026-10-04 01:00:51 +02:00

mssql: give TLS a host name when the server is an address

2026-10-04 01:31:31 +02:00

n8n: its media library is an access placed by the assignment

2026-10-01 02:02:30 +02:00

An access has an id, and its mounts name it (issue 153)

2026-10-01 00:01:42 +02:00

netcheck: one module, a Go tools bundle and a TypeScript one (hq ADR 0188, 0193)

2026-10-04 00:34:31 +02:00

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

nextcloud: its handlers and tools run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

The packet filter's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)

2026-10-03 12:59:07 +02:00

node-env: the account's environment as one module's two files

2026-10-04 03:59:50 +02:00

nodered: the runtime serves its tools, and its mqtt step is a run-once process (hq ADR 0198)

2026-10-03 23:33:51 +02:00

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

No definition names this installation

2026-09-30 20:49:21 +02:00

openai-consumer

openai-consumer: its apply is a scheduled process (hq ADR 0198)

2026-10-04 00:52:31 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

postgres: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:50 +02:00

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

records: its consumer and tools run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

redis: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:50 +02:00

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

route-adapter: its step is a run-once process (hq ADR 0198)

2026-10-04 00:52:31 +02:00

The proxy's jail reads both refusals, each pattern naming the host once

2026-10-02 17:23:42 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

ssh-client: own ~/.ssh, not the openssh package

2026-10-03 12:43:35 +02:00

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

step-ca: stop offering acme-ca, so public names are certified by public-acme

2026-10-03 10:54:43 +02:00

supabase: own secrets, and unique ids for its containers

2026-09-30 17:57:57 +02:00

systemd: act as the runtime's account can, and never read a failure as an answer

2026-10-04 03:58:19 +02:00

systemd-networkd

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

umami: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

website: it listens on the port its container publishes

2026-09-30 21:01:47 +02:00

zsh: the shell as a module — package, the mesh's ~/.zshrc block, the login-shell seat and execute

2026-10-04 02:32:34 +02:00