mesh-catalog/modules at 49c590386168ad9aa7410a3c70f6a18e03d95258 - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jschoubben 35e8a3fe19 minio: repin to pgsty's fork, build the runtime sidecar, move data off HAL's live drive

minio/minio and minio/mc were pulled from all public registries on 2026-09-11;
pgsty's fork is the working replacement (hq issue 113). The runtime sidecar
had no Dockerfile and no build section at all — added, following the same
tsc-over-client/tools/provisioner shape every other converted module uses.

The data resource pointed straight at /services/minio/data/data1-1, one of
HAL's live 8-drive erasure-coded array — starting this module would have
written into production storage the mesh doesn't own. Moved to a fresh,
empty, mesh-owned directory; the actual data migration happens over the S3
API (rclone), not by sharing a disk path.

2026-09-24 17:55:49 +02:00

..

amqp-email-forwarder

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

anthropic-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

anthropic-manager

Defer model-usage and anthropic-manager from the buildable set (issue 060)

2026-09-18 02:48:09 +02:00

Review: four manifests said something stale or nothing at all

2026-09-15 22:03:33 +02:00

baserow: its data directory is 0755, as the image ships it — the cache it runs for itself does so as another user, who must reach its own directory beneath (issue 081)

2026-09-22 13:46:01 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Protect the address the builder sends its registry password to

2026-09-22 21:56:51 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

4 modules: persistent data is a directory bind, never a named volume

2026-09-24 16:12:03 +02:00

Convert the resolver from the module it replaces: forward, answer at 127.0.0.1, point the runtime at it

2026-09-24 01:09:23 +02:00

fail2ban: require the firewall capability, not the non-existent intrusion-prevention

2026-09-08 18:27:34 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

grafana stays a declared exception until a bed exercises its admin password

2026-09-21 12:31:59 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

4 modules: persistent data is a directory bind, never a named volume

2026-09-24 16:12:03 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

Convert four more hal modules: bookshelf, unifi, fail2ban, marrytts

2026-09-05 12:04:14 +02:00

The env-file references to files the conversion removed go with them

2026-09-21 12:43:41 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

minio: repin to pgsty's fork, build the runtime sidecar, move data off HAL's live drive

2026-09-24 17:55:49 +02:00

The env-file references to files the conversion removed go with them

2026-09-21 12:43:41 +02:00

mongodb names its secrets' owner: the image drops to its own user before it reads the password file

2026-09-21 13:43:41 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Reload the filter on a rule change rather than restart it, so the node is never unfiltered in between (hq ADR 0102)

2026-09-22 19:47:43 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Ten migration-critical modules become mesh-buildable (issue 060)

2026-09-18 02:02:21 +02:00

Merge pull request '4 modules: persistent data is a directory bind, never a named volume' (#54 ) from fix/persistent-data-is-a-directory-bind-not-a-volume into main

2026-09-24 14:24:15 +00:00

Give every module that would overflow its login a short slug

2026-09-10 20:57:45 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

redis: INFO is allowed back — client libraries ask it at connect, and it reads nothing a consumer keeps

2026-09-22 02:03:23 +02:00

Convert the resolver from the module it replaces: forward, answer at 127.0.0.1, point the runtime at it

2026-09-24 01:09:23 +02:00

resolved-split-dns

Convert the resolver from the module it replaces: forward, answer at 127.0.0.1, point the runtime at it

2026-09-24 01:09:23 +02:00

route-adapter: provide route by writing into the predecessor's proxy (hq ADR 0104)

2026-09-23 00:11:21 +02:00

route-proxy: the trust gate names the binding it reads and runs again when the authority moved; the server follows it (ADR 0099)

2026-09-21 23:25:06 +02:00

4 modules: persistent data is a directory bind, never a named volume

2026-09-24 16:12:03 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The authority makes its own root at first start, and the proxy fetches it through a gate

2026-09-21 22:26:28 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Pin the analytics module to the version the machine it replaces is running

2026-09-23 02:47:23 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Pin the package registry to the version the machine it replaces is running: 6.10.3, not 6.10.1

2026-09-23 02:24:07 +02:00