mesh/merge-gate checking again: the gate refused `unknown` because the controller judged with a node-engine validator pinned before mesh-host #117; mesh-co…
mesh/repo-check checking again: the gate refused `unknown` because the controller judged with a node-engine validator pinned before mesh-host #117; mesh-co…
mesh/delivery-group group feat/owned-paths checking: 0 of 2 member(s) ready
mesh/delivery superseded: a newer head of the same pull request
Every directory and archive resource carries `unknown`: move-out for a home folder whose program writes nothing there (the node-engine, delivered in mesh-host #117, moves the rest to ~/.local/state/mesh-moved/<module>/ with a list), module for ~/.ssh and ~/.claude, program elsewhere; `knows` keeps what a program or the operator relies on (powerlevel10k's compiled files, i3's scripts and the asus/g14 drop-ins, dunst's slack rule, betterbird's records, node-env's forge credential, issue 1033). Two shared folders are no longer declared. Each module's README says it. checks/owned holds every manifest to it; checks/sshdir stays while main's merge check runs it (issue 1035). Tests that pin a manifest follow the new key only. Reviewed in three rounds.
174 lines
3.7 KiB
JSON
174 lines
3.7 KiB
JSON
{
|
|
"module": "only-office",
|
|
"version": "1",
|
|
"slug": "office",
|
|
"capabilities": [
|
|
"container-runtime"
|
|
],
|
|
"requires": [
|
|
"route"
|
|
],
|
|
"contributes": {
|
|
"route": {
|
|
"label": "office",
|
|
"endpoint": "web"
|
|
}
|
|
},
|
|
"binds": {
|
|
"route": "${dir:state}/route.json"
|
|
},
|
|
"own-secrets": {
|
|
"jwt": "${dir:state}/jwt.secret"
|
|
},
|
|
"listens": [
|
|
{
|
|
"name": "web",
|
|
"port": 9070,
|
|
"protocol": "tcp",
|
|
"from": "mesh",
|
|
"why": "the document server over http; its public name is a route grant, and route-proxy reaches it on this published port"
|
|
}
|
|
],
|
|
"data": {
|
|
"own": [
|
|
{
|
|
"id": "data",
|
|
"path": "${dir:data}",
|
|
"class": "rebuildable",
|
|
"why": "documents being edited; the documents themselves are the file store's"
|
|
},
|
|
{
|
|
"id": "lib",
|
|
"path": "${dir:lib}",
|
|
"class": "rebuildable",
|
|
"why": "the document server's working files"
|
|
},
|
|
{
|
|
"id": "db",
|
|
"path": "${dir:db}",
|
|
"class": "rebuildable",
|
|
"why": "the document server's own database of editing sessions"
|
|
},
|
|
{
|
|
"id": "fonts",
|
|
"path": "${dir:fonts}",
|
|
"class": "rebuildable",
|
|
"why": "fonts, installed again"
|
|
},
|
|
{
|
|
"id": "logs",
|
|
"path": "${dir:logs}",
|
|
"class": "cache",
|
|
"why": "logs"
|
|
},
|
|
{
|
|
"id": "rabbitmq",
|
|
"path": "${dir:rabbitmq}",
|
|
"class": "cache",
|
|
"why": "its queue's working set"
|
|
},
|
|
{
|
|
"id": "redis",
|
|
"path": "${dir:redis}",
|
|
"class": "cache",
|
|
"why": "its cache"
|
|
}
|
|
]
|
|
},
|
|
"resources": [
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": ".",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "server-env",
|
|
"type": "file",
|
|
"path": "${dir:state}/server.env",
|
|
"mode": "0600",
|
|
"template": "files/server.env"
|
|
},
|
|
{
|
|
"id": "logs",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "data",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "lib",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "db",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "rabbitmq",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "redis",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "fonts",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"unknown": "program"
|
|
},
|
|
{
|
|
"id": "net",
|
|
"type": "network",
|
|
"name": "only-office"
|
|
},
|
|
{
|
|
"id": "server",
|
|
"type": "container",
|
|
"name": "only-office",
|
|
"image": "onlyoffice/documentserver@sha256:3ab6ebc7c605e5a32b7ae3ff19daed4925090245acc8100ce2230bd766c88212",
|
|
"network": "only-office",
|
|
"env-file": [
|
|
"${dir:state}/server.env"
|
|
],
|
|
"ports": [
|
|
"9070:80"
|
|
],
|
|
"volumes": [
|
|
"${dir:logs}:/var/log/onlyoffice",
|
|
"${dir:data}:/var/www/onlyoffice/Data",
|
|
"${dir:lib}:/var/lib/onlyoffice",
|
|
"${dir:db}:/var/lib/postgresql",
|
|
"${dir:rabbitmq}:/var/lib/rabbitmq",
|
|
"${dir:redis}:/var/lib/redis",
|
|
"${dir:fonts}:/usr/share/fonts/truetype/custom"
|
|
],
|
|
"secrets-in-environment": "run-document-server.sh regenerates JWT_SECRET from the environment on every start and overwrites local.json; not convertible"
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "files",
|
|
"kind": "archive",
|
|
"from": "files"
|
|
}
|
|
]
|
|
}
|
|
}
|