novox/mesh-catalog
6
0
Fork 0
Code Issues Pull Requests 2 Actions Packages Projects Releases Wiki Activity
Files
908d45864a7349ef82134b46e1cf227bd34f0c5c
mesh-catalog/modules
T
History
jochen 908d45864a supabase: make logflare's stored key and backends follow its environment 
logflare 1.4.0 copies LOGFLARE_API_KEY into its default user and
POSTGRES_BACKEND_URL into every source's backend once, when it creates
them, and never reads either again. On ace every source still points at
db:5432, which resolves nowhere, so analytics stored no logs; and the key
that leaked into the log before #85 could not be replaced, because the
mesh had to mark it "applied".

The start script now runs logflare's migrations and then reconcile.exs
through `logflare eval`, before logflare starts: it uses logflare's own
Users and Backends contexts to set the default user's key to
LOGFLARE_API_KEY (clearing old_api_key) and to point each postgres
source backend at POSTGRES_BACKEND_URL. It changes nothing that already
matches, says what it changed without printing the key or a password,
and stops the start when it cannot finish.

With the key taken at every start, the secret is "at-start" and `secret
rotate` works. analytics restarts on its env file and studio on its env
file too, so a rotated key reaches every reader.
2026-10-06 11:48:57 +02:00
..
adwaita
adwaita: the theme as a module, dark by default, for GTK, Qt, the portal and the cursor (hq ADR 0208)
2026-10-04 13:21:47 +02:00
asus-zephyrus-g14
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
audit-logger
audit-logger: its test subscribes as the module does and expects local event names
2026-10-04 01:21:40 +02:00
avahi
avahi: the discovery daemon declared, and why it hears nothing reported
2026-10-04 12:50:20 +02:00
baserow
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
blueman
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
bluetooth
Add nextcloud-client and blueman: the two tray apps get an owner and tools, each with one start
2026-10-05 11:47:38 +02:00
build-agent
build-agent serves its seat's verbs: current, kill, pause, resume (hq ADR 0219)
2026-10-05 19:23:30 +02:00
ca-trust
ca-trust: a machine trusts the mesh's authority because a module put its root there
2026-09-29 15:07:40 +02:00
claude-code
claude-code: say what a registration wrote here, whichever took it first
2026-10-05 14:33:53 +02:00
claude-licence-manager
Apply a binding that differs, and never repeat a generation a node passed
2026-10-05 09:59:19 +02:00
clipmenu
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
cloudflare-dns
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
confluence
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
cups
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
dbus
dbus: hold node-message-bus, and never restart the bus live (hq ADR 0215)
2026-10-05 11:50:52 +02:00
de-spiegel
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
dhcpcd
Give /etc/resolv.conf to the uplink's holder (hq ADR 0223)
2026-10-05 23:39:13 +02:00
distribution
distribution: collect for real now that every kept archive is held
2026-10-05 18:34:37 +02:00
dmenu
dmenu: the package, which makes the notifier's menu work, and a menu tool (hq to-be 42 phase 2.7)
2026-10-04 13:02:23 +02:00
dnsmasq
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
docker
docker: find and hide secrets a container printed into its log (hq issue 268)
2026-10-06 02:13:42 +02:00
docker-compose
docker-compose: the package, and its projects as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
dunst
dunst: the notifier as a module, claiming node-notifier and serving send and history (hq ADR 0208)
2026-10-04 13:15:39 +02:00
fail2ban
fail2ban: its tools in Go
2026-10-05 12:01:25 +02:00
feh
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
flatpak
flatpak: the package, Flathub with it, and the installations as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
fonts
fonts: the five decided faces as packages, and what the generic families mean (hq to-be 42 phase 2.1)
2026-10-04 13:02:23 +02:00
forticlient
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
gitea
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
gitlab
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
gnome-keyring
gnome-keyring: the secret service as a module, claiming node-secret-service (hq ADR 0208, ADR 0102)
2026-10-04 13:15:39 +02:00
grafana
grafana: its handlers and tools run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
hello-web
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
home-assistant
home-assistant: the runtime serves its code, and its provisions step is a run-once process (hq ADR 0198)
2026-10-03 23:33:51 +02:00
hostname
Rename hosts to hostname, which also writes /etc/hostname (hq ADR 0223)
2026-10-05 23:43:14 +02:00
i3
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
i3status-rust
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
icecast
icecast: its handlers and tools run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
influxdb
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
invoicing
minio declares the bucket it derives; its consumers stop transcribing it (hq ADR 0188)
2026-10-04 02:34:06 +02:00
jira
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
keycloak
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
lab
sudo: declare the operator account's passwordless escalation as a module
2026-10-04 12:50:20 +02:00
lemurs
lemurs, clipmenu: X keeps its resources, and an image in the clipboard is never read as text
2026-10-04 16:34:02 +02:00
letta
letta: keep its database and server passwords out of its log (hq issue 268)
2026-10-06 02:13:42 +02:00
local-model-consumer
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
localization
localization: locale, time zone and console keymap as one module
2026-10-04 12:50:20 +02:00
logrotate
logrotate: rotation on every machine, its base configuration owned
2026-10-04 12:50:20 +02:00
mailu
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
marrytts
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
matrix
No definition names this installation
2026-09-30 20:49:21 +02:00
memory-pressure
Phase 3: asus-zephyrus-g14 and memory-pressure, with Go tools and long-running code
2026-10-04 15:42:56 +02:00
mesh-catalog
mesh-catalog: its consumer and tools run in the node's runtime, and its preparation is a run-once process (hq ADR 0198)
2026-10-04 01:17:41 +02:00
mesh-vault
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
mesh-watcher
Tell the operator what the mesh finds wrong, and watch the watcher (hq to-be 45 phase 1)
2026-10-06 09:35:55 +02:00
messenger
Tell the operator what the mesh finds wrong, and watch the watcher (hq to-be 45 phase 1)
2026-10-06 09:35:55 +02:00
minio
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
model-usage
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
mongodb
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
mosquitto
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
mssql
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
n8n
n8n: its media library is an access placed by the assignment
2026-10-01 02:02:30 +02:00
nats
nats: run 2.11.17, which hands a consumer with several filters every message (hq issue 266)
2026-10-06 01:29:20 +02:00
netcheck
netcheck: one module, a Go tools bundle and a TypeScript one (hq ADR 0188, 0193)
2026-10-04 00:34:31 +02:00
networkmanager
Give the uplink modules short slugs, so their identity fits a backend's limit
2026-10-06 00:03:40 +02:00
nextcloud
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
nextcloud-client
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
nftables
The packet filter's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)
2026-10-03 12:59:07 +02:00
nm-applet
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
node-env
node-env: the account's environment as one module's two files
2026-10-04 03:59:50 +02:00
nodered
nodered: the runtime serves its tools, and its mqtt step is a run-once process (hq ADR 0198)
2026-10-03 23:33:51 +02:00
ollama
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
only-office
No definition names this installation
2026-09-30 20:49:21 +02:00
openai-consumer
openai-consumer: its apply is a scheduled process (hq ADR 0198)
2026-10-04 00:52:31 +02:00
openrazer
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
pacman
pacman: the package manager's configuration, mirrors and cache as a module
2026-10-04 12:50:20 +02:00
photos-eef
The photo clients publish the endpoint they declare (hq issue 227)
2026-10-04 12:25:28 +02:00
photos-filip
The photo clients publish the endpoint they declare (hq issue 227)
2026-10-04 12:25:28 +02:00
picom
picom: the compositor as a module, claiming node-compositor (hq ADR 0208)
2026-10-04 13:15:39 +02:00
polychromatic
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
postgres
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
power
power: a lock problem is no longer said once the lock is held
2026-10-05 10:03:30 +02:00
powerlevel10k
powerlevel10k: the prompt as a pinned archive of the module's own, loaded from a slot
2026-10-04 04:04:10 +02:00
public-acme
public-acme: the roots field is named roots, not root
2026-09-25 18:08:28 +02:00
records
records: port to Go, and keep the checkout in a directory it owns
2026-10-05 17:42:08 +02:00
redis
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
restic
restic: restore a single kept file, not only a directory
2026-10-05 14:05:52 +02:00
rofi
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
route-adapter
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
route-proxy
State each provision's identity bound (hq issue 263)
2026-10-06 02:16:27 +02:00
screen-lock
screen-lock: recognise the colour build by its version scheme; its version line never says color
2026-10-04 17:07:40 +02:00
searxng
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
showcase
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
slack
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
snapd
snapd: tools for the snaps, the package blocked on the mesh's AUR repository (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
ssh-client
ssh-client: the mesh's region first in ~/.ssh/config, its hosts in config.d, tools in Go
2026-10-04 12:38:40 +02:00
sshd
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
step-ca
step-ca: stop offering acme-ca, so public names are certified by public-acme
2026-10-03 10:54:43 +02:00
sudo
sudo: declare the operator account's passwordless escalation as a module
2026-10-04 12:50:20 +02:00
supabase
supabase: make logflare's stored key and backends follow its environment
2026-10-06 11:48:57 +02:00
systemd
systemd: port to Go, and read a system unit's journal as root
2026-10-05 18:09:42 +02:00
systemd-networkd
Give the uplink modules short slugs, so their identity fits a backend's limit
2026-10-06 00:03:40 +02:00
time-sync
time-sync: one time daemon, timesyncd, with its servers declared
2026-10-04 12:50:20 +02:00
triggerhappy
triggerhappy: the machine's hotkeys as a module holding node-hotkeys (hq ADR 0212)
2026-10-04 16:50:57 +02:00
umami
A withdrawn consumer keeps its data, in every provider that holds some (hq issue 241)
2026-10-05 00:34:40 +02:00
unifi
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
website
website: it listens on the port its container publishes
2026-09-30 21:01:47 +02:00
xclip
xclip: the package, and the operator's clipboard from the mesh (hq to-be 42 phase 2.7)
2026-10-04 13:02:23 +02:00
xdg
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
xorg
xorg: the display server holds node-display-server and writes the session's start (hq ADR 0208)
2026-10-04 13:21:47 +02:00
xterm
xterm: the terminal holds node-terminal-emulator; its resources through xorg's slot (hq ADR 0208)
2026-10-04 13:21:47 +02:00
zsh
zsh: keep each PATH directory once
2026-10-04 11:34:36 +02:00
zsh-autosuggestions
zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each
2026-10-04 04:04:35 +02:00
zsh-syntax-highlighting
zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each
2026-10-04 04:04:35 +02:00