jochen
8c60604eb7
The desk's prompt named only the module and the secret's key, so the operator asking for one of mesh-mail's mail-credential-* accounts could not tell which one. node-launcher.secret (modules/rofi) now shows the controller's optional what as its own line under the module and secret names, escaped as text so the catalogue's words never reach the prompt as markup; omitted as before when none is declared. mesh-mail's mail-credential-* family now declares that line with the long-form own-secrets shape the controller's manifest parser reads (novox/hq issue 789 part b; part a landed in mesh-controller).
199 lines
4.7 KiB
JSON
199 lines
4.7 KiB
JSON
{
|
|
"module": "mesh-mail",
|
|
"version": "1",
|
|
"slug": "mail",
|
|
"requires": [
|
|
"postgres-database",
|
|
"s3-bucket"
|
|
],
|
|
"contributes": {
|
|
"postgres-database": {
|
|
"name": "mail"
|
|
}
|
|
},
|
|
"binds": {
|
|
"postgres-database": "${dir:state}/database.json",
|
|
"s3-bucket": "${dir:state}/store-binding.json"
|
|
},
|
|
"secrets": {
|
|
"postgres-database": "${dir:state}/database.secret",
|
|
"s3-bucket": "${dir:state}/store.secret"
|
|
},
|
|
"own-secrets": {
|
|
"mail-credential-*": {
|
|
"path": "${dir:state}/mail-credential-*.secret",
|
|
"issued-by": "outside",
|
|
"prompt": "the password of the mail account {member}"
|
|
}
|
|
},
|
|
"tools": [
|
|
"mail_accounts",
|
|
"mail_search",
|
|
"mail_read",
|
|
"mail_health",
|
|
"mail_send",
|
|
"mail_send_status"
|
|
],
|
|
"uses": [
|
|
"operator-channel"
|
|
],
|
|
"state": [
|
|
"sends"
|
|
],
|
|
"streams": [
|
|
{
|
|
"name": "mail",
|
|
"events": [
|
|
"mail.*.message.added",
|
|
"mail.*.message.changed",
|
|
"mail.*.message.removed"
|
|
],
|
|
"max-age-days": 7,
|
|
"grant": {
|
|
"config": "grants",
|
|
"events": "mail.{key}.**"
|
|
}
|
|
}
|
|
],
|
|
"resources": [
|
|
{
|
|
"id": "state",
|
|
"type": "directory",
|
|
"mode": "0700",
|
|
"place": "."
|
|
},
|
|
{
|
|
"id": "database-url",
|
|
"type": "file",
|
|
"path": "${dir:state}/database.url",
|
|
"mode": "0600",
|
|
"content": "postgresql://${bound:postgres-database:as}:${secret:postgres-database}@${bound:postgres-database:at}:${bound:postgres-database:port}/${bound:postgres-database:as}\n"
|
|
},
|
|
{
|
|
"id": "store",
|
|
"type": "file",
|
|
"path": "${dir:state}/store.json",
|
|
"mode": "0600",
|
|
"content": "{\n \"scheme\": \"${bound:s3-bucket:scheme}\",\n \"at\": \"${bound:s3-bucket:at}\",\n \"port\": \"${bound:s3-bucket:port}\",\n \"bucket\": \"${bound:s3-bucket:bucket}\",\n \"region\": \"${bound:s3-bucket:region}\",\n \"key\": \"${bound:s3-bucket:as}\",\n \"secret\": \"${secret:s3-bucket}\"\n}\n"
|
|
},
|
|
{
|
|
"id": "accounts",
|
|
"trusted": true,
|
|
"type": "file",
|
|
"path": "${dir:state}/accounts.json",
|
|
"mode": "0600",
|
|
"merge": "json",
|
|
"takes-settings": [
|
|
"accounts"
|
|
],
|
|
"content": "{\n \"accounts\": {}\n}\n"
|
|
},
|
|
{
|
|
"id": "grants",
|
|
"trusted": true,
|
|
"type": "file",
|
|
"path": "${dir:state}/grants.json",
|
|
"mode": "0600",
|
|
"merge": "json",
|
|
"takes-settings": [
|
|
"grants"
|
|
],
|
|
"content": "{\n \"grants\": {}\n}\n"
|
|
},
|
|
{
|
|
"id": "prepare",
|
|
"type": "process",
|
|
"name": "mesh-mail-prepare",
|
|
"artifact": "tools",
|
|
"run": [
|
|
"./mesh-mail",
|
|
"prepare"
|
|
],
|
|
"run-once": true,
|
|
"env": {
|
|
"DATABASE_URL_FILE": "${dir:state}/database.url"
|
|
},
|
|
"restart-on": [
|
|
"database-url"
|
|
]
|
|
},
|
|
{
|
|
"id": "keep",
|
|
"type": "process",
|
|
"name": "mesh-mail-keep",
|
|
"artifact": "tools",
|
|
"run": [
|
|
"./mesh-mail",
|
|
"keep"
|
|
],
|
|
"env": {
|
|
"DATABASE_URL_FILE": "${dir:state}/database.url",
|
|
"MESH_MAIL_ACCOUNTS": "${dir:state}/accounts.json",
|
|
"MESH_MAIL_SECRETS": "${dir:state}",
|
|
"MESH_MAIL_STORE": "${dir:state}/store.json"
|
|
},
|
|
"restart-on": [
|
|
"database-url",
|
|
"store",
|
|
"accounts"
|
|
],
|
|
"health": {
|
|
"kind": "unit"
|
|
}
|
|
},
|
|
{
|
|
"id": "watch",
|
|
"type": "process",
|
|
"name": "mesh-mail-watch",
|
|
"artifact": "tools",
|
|
"run": [
|
|
"./mesh-mail",
|
|
"watch"
|
|
],
|
|
"user": "${machine:account}",
|
|
"env": {
|
|
"DATABASE_URL_FILE": "${dir:state}/database.url",
|
|
"MESH_MAIL_ACCOUNTS": "${dir:state}/accounts.json",
|
|
"MESH_MAIL_SECRETS": "${dir:state}",
|
|
"MESH_MAIL_STATUS": "${dir:state}/health.json"
|
|
},
|
|
"restart-on": [
|
|
"database-url",
|
|
"accounts"
|
|
],
|
|
"health": {
|
|
"kind": "tool",
|
|
"tool": "mail_health",
|
|
"needs": "postgres-database",
|
|
"interval": "60s",
|
|
"timeout": "10s",
|
|
"looks": 2,
|
|
"grace": "180s"
|
|
}
|
|
}
|
|
],
|
|
"build": {
|
|
"artifacts": [
|
|
{
|
|
"name": "tools",
|
|
"kind": "bundle",
|
|
"language": "go",
|
|
"system": "arch",
|
|
"from": "cmd/mesh-mail",
|
|
"binary": "mesh-mail",
|
|
"loads": [
|
|
"mesh-mail"
|
|
],
|
|
"env": {
|
|
"DATABASE_URL_FILE": "${dir:state}/database.url",
|
|
"MESH_MAIL_ACCOUNTS": "${dir:state}/accounts.json",
|
|
"MESH_MAIL_GRANTS": "${dir:state}/grants.json",
|
|
"MESH_MAIL_SECRETS": "${dir:state}",
|
|
"MESH_MAIL_STORE": "${dir:state}/store.json",
|
|
"MESH_MAIL_STATUS": "${dir:state}/health.json"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|