mesh-catalog/modules at bb8f2e76a92c9abf637946a7badb4e512df45a27 - mesh-catalog - Gitea: Git with a cup of tea

novox/mesh-catalog

Files

T

History

jschoubben bb8f2e76a9 dnsmasq: the operator's own names have a home the mesh never rewrites

A workstation's job includes names that are neither a mesh machine nor
a routed name (novox/hq 122): shanks carries 13 Mediahuis entries in
/etc/hosts, and mesh-wireguard replaces /etc/hosts whole when taken —
so without this they vanish, and the take gates the node. Two homes,
neither the mesh's to own: conf-dir=/etc/dnsmasq.d/,*.conf (drop-in
directives, HAL's dnsmasq-app used exactly this) and
addn-hosts=/etc/hosts.local (plain host lines). The mesh creates and
rewrites neither; a machine with none loses nothing. The migration
moves such names here BEFORE the /etc/hosts take, closing the window.

2026-09-26 22:43:29 +02:00

..

amqp-email-forwarder

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

anthropic-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

anthropic-manager

Defer model-usage and anthropic-manager from the buildable set (issue 060)

2026-09-18 02:48:09 +02:00

Review: four manifests said something stale or nothing at all

2026-09-15 22:03:33 +02:00

baserow: its data directory is 0755, as the image ships it — the cache it runs for itself does so as another user, who must reach its own directory beneath (issue 081)

2026-09-22 13:46:01 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on

2026-09-25 20:48:10 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

4 modules: persistent data is a directory bind, never a named volume

2026-09-24 16:12:03 +02:00

dnsmasq: the operator's own names have a home the mesh never rewrites

2026-09-26 22:43:29 +02:00

fail2ban: require the firewall capability, not the non-existent intrusion-prevention

2026-09-08 18:27:34 +02:00

Six modules name no /var/lib: the root is a place, the maps reference it

2026-09-26 18:20:47 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

grafana stays a declared exception until a bed exercises its admin password

2026-09-21 12:31:59 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

Five modules keep their own secrets from the vault, under local names; route-proxy declares its bases

2026-09-21 22:16:10 +02:00

A bucket is the one the mesh derives, and the photos module named another

2026-09-26 16:46:10 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

keycloak: use Hostname v2's actual config shape, not v1's deprecated flags

2026-09-24 17:27:04 +02:00

lavinmq: the broker TLS directory is the operator's, read by whoever needs it

2026-09-26 16:12:29 +02:00

Six modules take their secrets from files; the rest say precisely why not

2026-09-21 12:29:25 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

mailu: the smtp provision serves the name its certificate answers to

2026-09-26 19:26:53 +02:00

Convert four more hal modules: bookshelf, unifi, fail2ban, marrytts

2026-09-05 12:04:14 +02:00

The env-file references to files the conversion removed go with them

2026-09-21 12:43:41 +02:00

Add the mesh-vault module; redis takes its password from it

2026-09-21 00:48:13 +02:00

Merge main

2026-09-26 15:05:40 +02:00

The env-file references to files the conversion removed go with them

2026-09-21 12:43:41 +02:00

Six modules name no /var/lib: the root is a place, the maps reference it

2026-09-26 18:20:47 +02:00

Review fixes: holds and create agree, and no password leaves a check

2026-09-26 01:24:32 +02:00

mssql: its data is placed — the last /services placement retires

2026-09-26 20:36:03 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

Six modules name no /var/lib: the root is a place, the maps reference it

2026-09-26 18:20:47 +02:00

Reload the filter on a rule change rather than restart it, so the node is never unfiltered in between (hq ADR 0102)

2026-09-22 19:47:43 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Six modules name no /var/lib: the root is a place, the maps reference it

2026-09-26 18:20:47 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

A bucket is the one the mesh derives, and the photos module named another

2026-09-26 16:46:10 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

11 modules: a container's ports say the software's port, not the machine's

2026-09-24 15:45:58 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

portainer: its data directory is placed, not stated

2026-09-26 18:02:25 +02:00

Merge main

2026-09-26 15:04:47 +02:00

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

redis: say whether it still holds a consumer's ACL user

2026-09-26 00:53:13 +02:00

Convert the resolver from the module it replaces: forward, answer at 127.0.0.1, point the runtime at it

2026-09-24 01:09:23 +02:00

resolved-split-dns

Convert the resolver from the module it replaces: forward, answer at 127.0.0.1, point the runtime at it

2026-09-24 01:09:23 +02:00

route-adapter: write a body limit as the predecessor's buffering middleware

2026-09-26 16:01:23 +02:00

route-proxy: internal names are certified by the mesh's own authority

2026-09-25 20:36:41 +02:00

4 modules: persistent data is a directory bind, never a named volume

2026-09-24 16:12:03 +02:00

Name the two modules after their software: nftables and distribution

2026-09-15 20:51:00 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

sshd: the operator's door is a module

2026-09-26 20:14:54 +02:00

route-proxy: internal names are certified by the mesh's own authority

2026-09-25 20:36:41 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

Pin the analytics module to the version the machine it replaces is running

2026-09-23 02:47:23 +02:00

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

The npm registry is a seat gitea holds, and gitea holds the git seat a build's source can live on

2026-09-25 20:48:10 +02:00