mesh-tools
652b00b25b
mesh/merge-gate checking again: the gate refused `unknown` because the controller judged with a node-engine validator pinned before mesh-host #117; mesh-co…
mesh/repo-check checking again: the gate refused `unknown` because the controller judged with a node-engine validator pinned before mesh-host #117; mesh-co…
mesh/delivery-group group feat/owned-paths checking: 0 of 2 member(s) ready
mesh/delivery superseded: a newer head of the same pull request
Every directory and archive resource carries `unknown`: move-out for a home folder whose program writes nothing there (the node-engine, delivered in mesh-host #117, moves the rest to ~/.local/state/mesh-moved/<module>/ with a list), module for ~/.ssh and ~/.claude, program elsewhere; `knows` keeps what a program or the operator relies on (powerlevel10k's compiled files, i3's scripts and the asus/g14 drop-ins, dunst's slack rule, betterbird's records, node-env's forge credential, issue 1033). Two shared folders are no longer declared. Each module's README says it. checks/owned holds every manifest to it; checks/sshdir stays while main's merge check runs it (issue 1035). Tests that pin a manifest follow the new key only. Reviewed in three rounds.
mailu
Mail — Mailu, with its provisioner (the smtp provision) and tools, on the tool runtime.
Settings
A definition names no mesh (novox/hq ADR 0112, ADR 0155), so the values that are this
installation's are settings on the assignment, settings set mailu <file>:
{"domain": "…", "sitename": "…", "website": "https://…", "proxy-address": "…"}
domain is the mail domain (also the provisioner's, for a consumer's address); sitename and
website are shown by the web front; proxy-address is what REAL_IP_FROM trusts a real-IP
header from — the address the proxy forwards with. The front's own hostname is the name of its
web route, told to it by the mesh.
Files it does not know
Each directory or archive this module declares says how it treats a file it did not write (ADR 0422, ADR 0416).
${dir:mesh-state}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:state}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:grants}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-automx}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-certs}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-data}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-dkim}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-mail}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-mailqueue}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-filter}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-clamav}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-redis}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-webmail}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-dav}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-fetchmail}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-overrides-nginx}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-overrides-dovecot}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-overrides-postfix}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-overrides-rspamd}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).${dir:data-overrides-roundcube}: everything in it is the program's; the mesh moves nothing out (ADR 0422 §2).