mesh-catalog

anthropic-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

anthropic-manager

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

audit-logger

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

baserow

baserow: placed directories, the database password from a file, and the build ace runs

2026-09-30 12:16:04 +02:00

bazarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

bookshelf

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

builder

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

ca-trust

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

cloudflare-dns

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

confluence

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

de-spiegel

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

dhcpcd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

distribution

distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156)

2026-09-30 21:14:40 +02:00

dnsmasq

dnsmasq: pass the DNSSEC bit down from the validating upstreams

2026-09-30 15:17:34 +02:00

fail2ban

fail2ban: ban through an action every machine has

2026-09-28 20:48:24 +02:00

gitea

gitea: the tools' token carries write:admin, and a kept token is re-minted when it lacks a scope

2026-09-30 21:05:52 +02:00

gitlab

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

grafana

grafana: its InfluxDB data source comes from the influxdb-api provision

2026-09-30 13:02:11 +02:00

hello-web

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

home-assistant

The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts of that stack

2026-09-30 21:42:42 +02:00

icecast

icecast: its passwords are a file the mesh writes, not the image's environment

2026-09-29 23:39:36 +02:00

influxdb

influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted

2026-09-30 16:18:59 +02:00

invoicing

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

jira

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

keycloak

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

letta

letta: placed state, a route, accepted keys, and a runtime that can log in

2026-09-30 12:22:12 +02:00

lidarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

local-model-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

mailu

No definition names this installation

2026-09-30 20:49:21 +02:00

marrytts

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

matrix

No definition names this installation

2026-09-30 20:49:21 +02:00

mesh-catalog

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

mesh-console

mesh-console: the mesh's tools on the machine a person sits at

2026-09-30 16:20:06 +02:00

mesh-vault

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

minio

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

model-usage

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

mongodb

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mosquitto

mosquitto, influxdb: the provisioner sees its grants where the mesh writes them

2026-09-30 17:19:33 +02:00

mssql

mssql: place its directories and name the software's port, not a machine's

2026-09-30 11:57:45 +02:00

n8n

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

nats

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

networkmanager

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nextcloud

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nftables

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nodered

nodered: settings.json sits beside settings.js, which reads it from its own directory

2026-09-30 18:32:11 +02:00

nzbget

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ollama

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ombi

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

only-office

No definition names this installation

2026-09-30 20:49:21 +02:00

openai-consumer

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

photos

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

photos-eef

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

photos-filip

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

plex

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

portainer

portainer: publish its software ports; the machine side is the mesh's to assign

2026-09-30 20:54:29 +02:00

postgres

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

public-acme

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

qbittorrent

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

radarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

records

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

redis

redis: place its directories and run the build in use

2026-09-30 11:57:46 +02:00

resolv-conf

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

route-adapter

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

route-proxy

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

searxng

The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts of that stack

2026-09-30 21:42:42 +02:00

showcase

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

sonarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sshd

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

step-ca

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

supabase

supabase: own secrets, and unique ids for its containers

2026-09-30 17:57:57 +02:00

systemd-networkd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

tautulli

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

umami

A definition names no host path for its own data

2026-09-30 21:10:18 +02:00

unifi

unifi: placed data, mesh-assigned ports, an https route, and its password as a file

2026-09-29 23:39:50 +02:00

website

website: it listens on the port its container publishes

2026-09-30 21:01:47 +02:00