jschoubben 5d59b35cf7 photos authenticates against the database its user lives in (hq issue 232) ...

The provider creates each consumer's user in that consumer's own database.
photos asked for admin, where no such user exists; invoicing, against the
same provider, already asked for the name the mesh gave it and worked.

Invisible until hq 225 was fixed: while the provisioner could not read its
secrets, no user existed anywhere, so 'UserNotFound for db admin' was a true
and complete account of that fault. A fault that explains the symptom is not
evidence there is only one.

2026-10-04 12:33:56 +02:00

..

anthropic-consumer

anthropic-consumer: its usage runs in the node's runtime, and its apply is a scheduled process (hq ADR 0198)

2026-10-04 00:52:31 +02:00

anthropic-manager

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

audit-logger

audit-logger: its test subscribes as the module does and expects local event names

2026-10-04 01:21:40 +02:00

baserow

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

build-agent

build-agent: a short slug, so its identifier on a machine fits a backend's 20-character key

2026-10-03 11:09:24 +02:00

ca-trust

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

claude-code

claude-code in Go (operator: always Go)

2026-10-04 12:27:36 +02:00

claude-licence-manager

claude-code in Go (operator: always Go)

2026-10-04 12:27:36 +02:00

cloudflare-dns

cloudflare-dns: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

confluence

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

de-spiegel

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

dhcpcd

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

distribution

The store does not collect until every controller composes the window (hq ADR 0189)

2026-10-04 04:26:38 +02:00

dnsmasq

dnsmasq: restart on the mesh's hosts region, which it reads only at start

2026-10-03 15:29:28 +02:00

fail2ban

fail2ban's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)

2026-10-03 15:07:21 +02:00

gitea

gitea: its watcher, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

gitlab

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

grafana

grafana: its handlers and tools run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

hello-web

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

home-assistant

home-assistant: the runtime serves its code, and its provisions step is a run-once process (hq ADR 0198)

2026-10-03 23:33:51 +02:00

icecast

icecast: its handlers and tools run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

influxdb

influxdb: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

invoicing

minio declares the bucket it derives; its consumers stop transcribing it (hq ADR 0188)

2026-10-04 02:34:06 +02:00

jira

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

keycloak

keycloak: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

lab

lab: its tools run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

letta

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

local-model-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

mailu

mailu: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

marrytts

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

matrix

No definition names this installation

2026-09-30 20:49:21 +02:00

mesh-catalog

mesh-catalog: its consumer and tools run in the node's runtime, and its preparation is a run-once process (hq ADR 0198)

2026-10-04 01:17:41 +02:00

mesh-vault

mesh-vault: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

minio

Rebased onto main: ADR 0188 renumbered to 0201, and minio takes the sdk at 0.1.7

2026-10-04 02:45:13 +02:00

model-usage

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

mongodb

mongodb: its handlers, tools and provisioner run in the node's runtime, through the driver in its bundle (hq ADR 0198)

2026-10-04 01:17:41 +02:00

mosquitto

mosquitto: run mosquitto_ctrl inside the broker's container

2026-10-04 01:00:51 +02:00

mssql

mssql: give TLS a host name when the server is an address

2026-10-04 01:31:31 +02:00

n8n

n8n: its media library is an access placed by the assignment

2026-10-01 02:02:30 +02:00

nats

An access has an id, and its mounts name it (issue 153)

2026-10-01 00:01:42 +02:00

netcheck

netcheck: one module, a Go tools bundle and a TypeScript one (hq ADR 0188, 0193)

2026-10-04 00:34:31 +02:00

networkmanager

And the uplink holders' capabilities return

2026-10-01 17:19:41 +02:00

nextcloud

minio declares the bucket it derives; its consumers stop transcribing it (hq ADR 0188)

2026-10-04 02:34:06 +02:00

nftables

The packet filter's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)

2026-10-03 12:59:07 +02:00

node-env

node-env: the account's environment as one module's two files

2026-10-04 03:59:50 +02:00

nodered

nodered: the runtime serves its tools, and its mqtt step is a run-once process (hq ADR 0198)

2026-10-03 23:33:51 +02:00

ollama

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

only-office

No definition names this installation

2026-09-30 20:49:21 +02:00

openai-consumer

openai-consumer: its apply is a scheduled process (hq ADR 0198)

2026-10-04 00:52:31 +02:00

photos

photos authenticates against the database its user lives in (hq issue 232)

2026-10-04 12:33:56 +02:00

photos-eef

The photo clients publish the endpoint they declare (hq issue 227)

2026-10-04 12:25:28 +02:00

photos-filip

The photo clients publish the endpoint they declare (hq issue 227)

2026-10-04 12:25:28 +02:00

postgres

postgres: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:50 +02:00

powerlevel10k

powerlevel10k: the prompt as a pinned archive of the module's own, loaded from a slot

2026-10-04 04:04:10 +02:00

public-acme

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

records

records: its consumer and tools run in the node's runtime (hq ADR 0198)

2026-10-04 00:52:31 +02:00

redis

redis: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:50 +02:00

resolv-conf

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

route-adapter

route-adapter: its step is a run-once process (hq ADR 0198)

2026-10-04 00:52:31 +02:00

route-proxy

The proxy's jail reads both refusals, each pattern naming the host once

2026-10-02 17:23:42 +02:00

searxng

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

showcase

The mesh's own files for a module are placed by the mesh, not the definition (issue 174)

2026-09-30 22:29:28 +02:00

ssh-client

ssh-client: own ~/.ssh, not the openssh package

2026-10-03 12:43:35 +02:00

sshd

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

step-ca

step-ca: stop offering acme-ca, so public names are certified by public-acme

2026-10-03 10:54:43 +02:00

supabase

supabase: own secrets, and unique ids for its containers

2026-09-30 17:57:57 +02:00

systemd

systemd owns its package; systemd-networkd configures networkd and claims none

2026-10-04 12:17:08 +02:00

systemd-networkd

systemd owns its package; systemd-networkd configures networkd and claims none

2026-10-04 12:17:08 +02:00

umami

umami: its tools and provisioner run in the node's runtime (hq ADR 0198)

2026-10-03 23:33:51 +02:00

unifi

The seven say what the runtime loads from their tools bundle (hq ADR 0192)

2026-10-03 15:58:19 +02:00

website

website: it listens on the port its container publishes

2026-09-30 21:01:47 +02:00

zsh

zsh: keep each PATH directory once

2026-10-04 11:34:36 +02:00

zsh-autosuggestions

zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each

2026-10-04 04:04:35 +02:00

zsh-syntax-highlighting

zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each

2026-10-04 04:04:35 +02:00