jschoubben 50ae89e718 influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted ...

They came from `requires: secret`, minted by the vault — right for a fresh
setup (the image's INIT_* variables read them once), wrong for an instance
that already exists: setup is skipped, the minted values match nothing,
and the provisioner holds a token the server never issued (issue 100).
InfluxDB will not take a chosen token value, so the operator token must be
accepted from the instance (`secret accept ace influxdb admin-token`); the
password can be either. As own secrets both are minted for a fresh install
exactly as before, and accepted where the data already knows them.
Found migrating ace's influxdb.

2026-09-30 16:18:59 +02:00

..

anthropic-consumer

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

anthropic-manager

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

audit-logger

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

baserow

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

bazarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

bookshelf

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

builder

The Go base has to be 1.26 for what compiles the controller's code

2026-09-27 20:58:09 +02:00

ca-trust

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

cloudflare-dns

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

confluence

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

de-spiegel

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

dhcpcd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

distribution

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

dnsmasq

dnsmasq: pass the DNSSEC bit down from the validating upstreams

2026-09-30 15:17:34 +02:00

fail2ban

fail2ban: ban through an action every machine has

2026-09-28 20:48:24 +02:00

gitea

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

gitlab

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

grafana

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

hello-web

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

home-assistant

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

icecast

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

influxdb

influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted

2026-09-30 16:18:59 +02:00

invoicing

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

jackett

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

jira

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

keycloak

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

letta

letta: placed state, a route, accepted keys, and a runtime that can log in

2026-09-30 12:22:12 +02:00

lidarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

mailu

mailu: admin asks the machine's resolver, not Mailu's own

2026-09-30 15:13:25 +02:00

marrytts

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mesh-catalog

The catalogue hears what it missed

2026-09-28 16:08:46 +02:00

mesh-vault

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

minio

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

model-usage

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

mongodb

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mosquitto

mosquitto: a consumer's grant is the topics it asks for, and its binding says the port

2026-09-30 13:01:14 +02:00

mssql

mssql: place its directories and name the software's port, not a machine's

2026-09-30 11:57:45 +02:00

n8n

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nats

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

networkmanager

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nextcloud

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nftables

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nodered

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

novox.be

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nzbget

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ollama

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ombi

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

only-office

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

photos

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

photos-eef

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

photos-filip

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

plex

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

portainer

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

postgres

postgres: the provisioner dials the port the mesh gave the store

2026-09-30 14:01:53 +02:00

public-acme

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

qbittorrent

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

radarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

redis

redis: place its directories and run the build in use

2026-09-30 11:57:46 +02:00

resolv-conf

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

route-adapter

route-adapter: write a body limit as the predecessor's buffering middleware

2026-09-26 16:01:23 +02:00

route-proxy

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

searxng

searxng: bind its route where its state now lives

2026-09-29 22:41:56 +02:00

showcase

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sonarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sshd

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

step-ca

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

systemd-networkd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

tautulli

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

umami

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

unifi

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00