novox/mesh-catalog
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
d0b74f1545cfb0e88bcdcae7d45da87dda2ca568
mesh-catalog/modules
T
History
jschoubben d0b74f1545 The mesh's one resolver, what every node asks, and a node's hosts file (hq ADR 0194, 0196, 0199) 
- dnsmasq holds mesh-dns-resolver: provides wildcard-resolution mesh-wide, forwards every declared
  zone (zones fact), listens on the private address and loopback only, reads no hosts file and no
  operator's files, and no longer writes the container runtime's dns.
- resolv-conf names the mesh's resolver by address, then 1.1.1.1, timeout 1, one attempt; it now
  holds the runtime's live-restore, which dnsmasq held and every node needs.
- resolved-split-dns routes the suffix to the mesh's resolver by address, not 127.0.0.1.
- hosts: new module holding node-hosts-file — the machine's own lines in its block of /etc/hosts,
  the operator's lines kept, changed by entries/add/remove through sudo -n.
2026-10-04 17:32:15 +02:00
..
adwaita
adwaita: the theme as a module, dark by default, for GTK, Qt, the portal and the cursor (hq ADR 0208)
2026-10-04 13:21:47 +02:00
asus-zephyrus-g14
power: a machine's power as a module holding node-power; the laptop's resume and lid move onto it (hq ADR 0211)
2026-10-04 17:19:27 +02:00
audit-logger
audit-logger: its test subscribes as the module does and expects local event names
2026-10-04 01:21:40 +02:00
avahi
avahi: the discovery daemon declared, and why it hears nothing reported
2026-10-04 12:50:20 +02:00
baserow
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
bluetooth
bluetooth: the stack, its daemon, and the devices as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
build-agent
build-agent: a short slug, so its identifier on a machine fits a backend's 20-character key
2026-10-03 11:09:24 +02:00
ca-trust
ca-trust: a machine trusts the mesh's authority because a module put its root there
2026-09-29 15:07:40 +02:00
claude-code
The licence manager's verb is public-key: a seat's verb is lower-case letters, digits and hyphens
2026-10-04 15:33:28 +02:00
claude-licence-manager
The licence manager's verb is public-key: a seat's verb is lower-case letters, digits and hyphens
2026-10-04 15:33:28 +02:00
clipmenu
lemurs, clipmenu: X keeps its resources, and an image in the clipboard is never read as text
2026-10-04 16:34:02 +02:00
cloudflare-dns
cloudflare-dns: its tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
confluence
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
cups
cups: the scheduler and driverless printing, and the printers as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
de-spiegel
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
dhcpcd
And the uplink holders' capabilities return
2026-10-01 17:19:41 +02:00
distribution
The store does not collect until every controller composes the window (hq ADR 0189)
2026-10-04 04:26:38 +02:00
dmenu
dmenu: the package, which makes the notifier's menu work, and a menu tool (hq to-be 42 phase 2.7)
2026-10-04 13:02:23 +02:00
dnsmasq
The mesh's one resolver, what every node asks, and a node's hosts file (hq ADR 0194, 0196, 0199)
2026-10-04 17:32:15 +02:00
docker
docker: the container runtime as a module, with its tools in Go
2026-10-04 12:43:51 +02:00
docker-compose
docker-compose: the package, and its projects as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
dunst
dunst: the notifier as a module, claiming node-notifier and serving send and history (hq ADR 0208)
2026-10-04 13:15:39 +02:00
fail2ban
fail2ban's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)
2026-10-03 15:07:21 +02:00
feh
feh: the wallpaper as a module, its image an archive of its own (hq ADR 0208, ADR 0205)
2026-10-04 13:15:39 +02:00
flatpak
flatpak: the package, Flathub with it, and the installations as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
fonts
fonts: the five decided faces as packages, and what the generic families mean (hq to-be 42 phase 2.1)
2026-10-04 13:02:23 +02:00
gitea
gitea: its watcher, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-04 00:52:31 +02:00
gitlab
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
gnome-keyring
gnome-keyring: the secret service as a module, claiming node-secret-service (hq ADR 0208, ADR 0102)
2026-10-04 13:15:39 +02:00
grafana
grafana: its handlers and tools run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
hello-web
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
home-assistant
home-assistant: the runtime serves its code, and its provisions step is a run-once process (hq ADR 0198)
2026-10-03 23:33:51 +02:00
hosts
The mesh's one resolver, what every node asks, and a node's hosts file (hq ADR 0194, 0196, 0199)
2026-10-04 17:32:15 +02:00
i3
i3, screen-lock: the session's output to the journal, and the colour locker removed before i3lock is checked
2026-10-04 15:09:39 +02:00
i3status-rust
lemurs, i3status-rust: what the first assignment refused
2026-10-04 15:17:07 +02:00
icecast
icecast: its handlers and tools run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
influxdb
influxdb: its tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
invoicing
minio declares the bucket it derives; its consumers stop transcribing it (hq ADR 0188)
2026-10-04 02:34:06 +02:00
jira
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
keycloak
keycloak: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
lab
sudo: declare the operator account's passwordless escalation as a module
2026-10-04 12:50:20 +02:00
lemurs
lemurs, clipmenu: X keeps its resources, and an image in the clipboard is never read as text
2026-10-04 16:34:02 +02:00
letta
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
local-model-consumer
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
localization
localization: locale, time zone and console keymap as one module
2026-10-04 12:50:20 +02:00
logrotate
logrotate: rotation on every machine, its base configuration owned
2026-10-04 12:50:20 +02:00
mailu
mailu: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-04 00:52:31 +02:00
marrytts
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
matrix
No definition names this installation
2026-09-30 20:49:21 +02:00
memory-pressure
Phase 3: asus-zephyrus-g14 and memory-pressure, with Go tools and long-running code
2026-10-04 15:42:56 +02:00
mesh-catalog
mesh-catalog: its consumer and tools run in the node's runtime, and its preparation is a run-once process (hq ADR 0198)
2026-10-04 01:17:41 +02:00
mesh-vault
mesh-vault: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-04 00:52:31 +02:00
minio
Rebased onto main: ADR 0188 renumbered to 0201, and minio takes the sdk at 0.1.7
2026-10-04 02:45:13 +02:00
model-usage
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
mongodb
mongodb: its handlers, tools and provisioner run in the node's runtime, through the driver in its bundle (hq ADR 0198)
2026-10-04 01:17:41 +02:00
mosquitto
mosquitto: run mosquitto_ctrl inside the broker's container
2026-10-04 01:00:51 +02:00
mssql
mssql: give TLS a host name when the server is an address
2026-10-04 01:31:31 +02:00
n8n
n8n: its media library is an access placed by the assignment
2026-10-01 02:02:30 +02:00
nats
Bind the bus's monitoring inside its container, published on the machine's loopback alone
2026-10-04 16:53:16 +02:00
netcheck
netcheck: one module, a Go tools bundle and a TypeScript one (hq ADR 0188, 0193)
2026-10-04 00:34:31 +02:00
networkmanager
And the uplink holders' capabilities return
2026-10-01 17:19:41 +02:00
nextcloud
minio declares the bucket it derives; its consumers stop transcribing it (hq ADR 0188)
2026-10-04 02:34:06 +02:00
nftables
The packet filter's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)
2026-10-03 12:59:07 +02:00
node-env
node-env: the account's environment as one module's two files
2026-10-04 03:59:50 +02:00
nodered
nodered: the runtime serves its tools, and its mqtt step is a run-once process (hq ADR 0198)
2026-10-03 23:33:51 +02:00
ollama
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
only-office
No definition names this installation
2026-09-30 20:49:21 +02:00
openai-consumer
openai-consumer: its apply is a scheduled process (hq ADR 0198)
2026-10-04 00:52:31 +02:00
pacman
pacman: the package manager's configuration, mirrors and cache as a module
2026-10-04 12:50:20 +02:00
photos-eef
The photo clients publish the endpoint they declare (hq issue 227)
2026-10-04 12:25:28 +02:00
photos-filip
The photo clients publish the endpoint they declare (hq issue 227)
2026-10-04 12:25:28 +02:00
picom
picom: the compositor as a module, claiming node-compositor (hq ADR 0208)
2026-10-04 13:15:39 +02:00
postgres
postgres: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:50 +02:00
power
power: the sleep hooks are wanted by the sleep targets, not declared as services
2026-10-04 17:22:35 +02:00
powerlevel10k
powerlevel10k: the prompt as a pinned archive of the module's own, loaded from a slot
2026-10-04 04:04:10 +02:00
public-acme
public-acme: the roots field is named roots, not root
2026-09-25 18:08:28 +02:00
records
records: its consumer and tools run in the node's runtime (hq ADR 0198)
2026-10-04 00:52:31 +02:00
redis
redis: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:50 +02:00
resolv-conf
The mesh's one resolver, what every node asks, and a node's hosts file (hq ADR 0194, 0196, 0199)
2026-10-04 17:32:15 +02:00
resolved-split-dns
The mesh's one resolver, what every node asks, and a node's hosts file (hq ADR 0194, 0196, 0199)
2026-10-04 17:32:15 +02:00
rofi
rofi: the launcher as a module, claiming node-launcher and serving menu (hq ADR 0208)
2026-10-04 13:15:39 +02:00
route-adapter
route-adapter: its step is a run-once process (hq ADR 0198)
2026-10-04 00:52:31 +02:00
route-proxy
The proxy's jail reads both refusals, each pattern naming the host once
2026-10-02 17:23:42 +02:00
screen-lock
screen-lock: recognise the colour build by its version scheme; its version line never says color
2026-10-04 17:07:40 +02:00
searxng
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
showcase
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
snapd
snapd: tools for the snaps, the package blocked on the mesh's AUR repository (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
ssh-client
ssh-client: the mesh's region first in ~/.ssh/config, its hosts in config.d, tools in Go
2026-10-04 12:38:40 +02:00
sshd
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
step-ca
step-ca: stop offering acme-ca, so public names are certified by public-acme
2026-10-03 10:54:43 +02:00
sudo
sudo: declare the operator account's passwordless escalation as a module
2026-10-04 12:50:20 +02:00
supabase
supabase: own secrets, and unique ids for its containers
2026-09-30 17:57:57 +02:00
systemd
systemd owns its package; systemd-networkd configures networkd and claims none
2026-10-04 12:17:08 +02:00
systemd-networkd
systemd owns its package; systemd-networkd configures networkd and claims none
2026-10-04 12:17:08 +02:00
time-sync
time-sync: one time daemon, timesyncd, with its servers declared
2026-10-04 12:50:20 +02:00
triggerhappy
triggerhappy: the machine's hotkeys as a module holding node-hotkeys (hq ADR 0212)
2026-10-04 16:50:57 +02:00
umami
umami: its tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
unifi
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
website
website: it listens on the port its container publishes
2026-09-30 21:01:47 +02:00
xclip
xclip: the package, and the operator's clipboard from the mesh (hq to-be 42 phase 2.7)
2026-10-04 13:02:23 +02:00
xorg
xorg: the display server holds node-display-server and writes the session's start (hq ADR 0208)
2026-10-04 13:21:47 +02:00
xterm
xterm: the terminal holds node-terminal-emulator; its resources through xorg's slot (hq ADR 0208)
2026-10-04 13:21:47 +02:00
zsh
zsh: keep each PATH directory once
2026-10-04 11:34:36 +02:00
zsh-autosuggestions
zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each
2026-10-04 04:04:35 +02:00
zsh-syntax-highlighting
zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each
2026-10-04 04:04:35 +02:00