jschoubben d8ee88e487 grafana: log in through keycloak's oidc-client provision ...

HAL's grafana logged in through a hand-made Keycloak client whose secret sat
in its .env. Requiring oidc-client gives it a client the mesh makes and keeps:
the id and URLs come from the binding, the secret arrives as a file grafana
reads itself (__FILE), and the callback it contributes is what keycloak
registers as its redirect.

GF_SERVER_ROOT_URL is still a literal: a module cannot yet learn the public
name the mesh composes for its own endpoint (hq issue 122), and without it
grafana sends a redirect Keycloak refuses.

2026-09-30 00:39:16 +02:00

..

anthropic-consumer

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

anthropic-manager

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

audit-logger

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

baserow

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

bazarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

bookshelf

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

builder

The Go base has to be 1.26 for what compiles the controller's code

2026-09-27 20:58:09 +02:00

ca-trust

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

cloudflare-dns

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

confluence

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

de-spiegel

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

dhcpcd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

distribution

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

dnsmasq

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

fail2ban

fail2ban: ban through an action every machine has

2026-09-28 20:48:24 +02:00

gitea

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

gitlab

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

grafana

grafana: log in through keycloak's oidc-client provision

2026-09-30 00:39:16 +02:00

hello-web

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

home-assistant

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

icecast

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

influxdb

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

invoicing

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

jackett

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

jira

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

keycloak

keycloak: provide oidc-client, one mesh-made client per consumer

2026-09-30 00:39:16 +02:00

letta

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

lidarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

mailu

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

marrytts

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mesh-catalog

The catalogue hears what it missed

2026-09-28 16:08:46 +02:00

mesh-vault

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

minio

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

model-usage

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

mongodb

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mosquitto

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mssql

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

n8n

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nats

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

networkmanager

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nextcloud

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nftables

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nodered

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

novox.be

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nzbget

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ollama

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ombi

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

only-office

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

photos

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

photos-eef

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

photos-filip

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

plex

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

portainer

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

postgres

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

public-acme

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

qbittorrent

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

radarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

redis

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

resolv-conf

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

route-adapter

route-adapter: write a body limit as the predecessor's buffering middleware

2026-09-26 16:01:23 +02:00

route-proxy

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

searxng

searxng: bind its route where its state now lives

2026-09-29 22:41:56 +02:00

showcase

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sonarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sshd

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

step-ca

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

systemd-networkd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

tautulli

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

umami

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

unifi

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00