novox/mesh-catalog
3
0
Fork 0
Code Issues Pull Requests 3 Packages Projects Releases Wiki Activity
Files
e3246fa11e8d83ed37819a2c45a5649115120906
mesh-catalog/modules
T
History
jschoubben e3246fa11e A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173) 
Consumers read `${bound:smtp:domain}` and `${bound:oidc-client:issuer}`, and both keys reached
them only because a module's settings were laid over everything it served. Issue 173 stops that: a
setting overrides a key a served fact declares and adds none. So the two providers declare the keys
their consumers read, as the operator's value (`${setting:…}`, ADR 0155), and the setting that
already carries each fills it. Nothing a consumer reads changes.

Merges first: under the controller that still merges settings over served facts this is the same
value, and the controller that stops merging (mesh-controller, feat/the-mesh-places-its-own-files)
needs these declared before it rolls out.
2026-09-30 22:33:19 +02:00
..
anthropic-consumer
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
anthropic-manager
Event names are local now, in the manifests and in the code
2026-09-27 14:42:28 +02:00
audit-logger
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
baserow
baserow: placed directories, the database password from a file, and the build ace runs
2026-09-30 12:16:04 +02:00
bazarr
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
bookshelf
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
builder
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
ca-trust
ca-trust: a machine trusts the mesh's authority because a module put its root there
2026-09-29 15:07:40 +02:00
cloudflare-dns
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
confluence
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
de-spiegel
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
dhcpcd
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
2026-09-27 14:30:56 +02:00
distribution
distribution claims mesh-artifact-store, the seat's name for its scope (novox/hq ADR 0156)
2026-09-30 21:14:40 +02:00
dnsmasq
dnsmasq: pass the DNSSEC bit down from the validating upstreams
2026-09-30 15:17:34 +02:00
fail2ban
fail2ban: ban through an action every machine has
2026-09-28 20:48:24 +02:00
gitea
gitea: the tools' token carries write:admin, and a kept token is re-minted when it lacks a scope
2026-09-30 21:05:52 +02:00
gitlab
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
grafana
grafana: its InfluxDB data source comes from the influxdb-api provision
2026-09-30 13:02:11 +02:00
hello-web
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
home-assistant
The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts of that stack
2026-09-30 21:42:42 +02:00
icecast
icecast: its passwords are a file the mesh writes, not the image's environment
2026-09-29 23:39:36 +02:00
influxdb
influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted
2026-09-30 16:18:59 +02:00
invoicing
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
jira
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
keycloak
A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173)
2026-09-30 22:33:19 +02:00
letta
letta: placed state, a route, accepted keys, and a runtime that can log in
2026-09-30 12:22:12 +02:00
lidarr
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
local-model-consumer
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
mailu
A provider declares what it serves: mail's domain, the identity provider's issuer (issue 173)
2026-09-30 22:33:19 +02:00
marrytts
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
matrix
No definition names this installation
2026-09-30 20:49:21 +02:00
mesh-catalog
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
mesh-console
mesh-console: the mesh's tools on the machine a person sits at
2026-09-30 16:20:06 +02:00
mesh-vault
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
minio
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
model-usage
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
mongodb
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
mosquitto
mosquitto, influxdb: the provisioner sees its grants where the mesh writes them
2026-09-30 17:19:33 +02:00
mssql
mssql: place its directories and name the software's port, not a machine's
2026-09-30 11:57:45 +02:00
n8n
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
nats
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
networkmanager
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
2026-09-27 14:30:56 +02:00
nextcloud
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
nftables
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
2026-09-27 14:30:56 +02:00
nodered
nodered: settings.json sits beside settings.js, which reads it from its own directory
2026-09-30 18:32:11 +02:00
nzbget
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
ollama
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
ombi
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
only-office
No definition names this installation
2026-09-30 20:49:21 +02:00
openai-consumer
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
photos
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
photos-eef
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
photos-filip
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
plex
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
portainer
portainer: publish its software ports; the machine side is the mesh's to assign
2026-09-30 20:54:29 +02:00
postgres
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
public-acme
public-acme: the roots field is named roots, not root
2026-09-25 18:08:28 +02:00
qbittorrent
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
radarr
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
records
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
redis
redis: place its directories and run the build in use
2026-09-30 11:57:46 +02:00
resolv-conf
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
2026-09-27 14:30:56 +02:00
resolved-split-dns
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
2026-09-27 14:30:56 +02:00
route-adapter
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
route-proxy
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
searxng
The media chain moves to novox/mesh-media-catalog; home-assistant and searxng keep their parts of that stack
2026-09-30 21:42:42 +02:00
showcase
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
sonarr
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
sshd
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
step-ca
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
supabase
supabase: own secrets, and unique ids for its containers
2026-09-30 17:57:57 +02:00
systemd-networkd
Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)
2026-09-27 14:30:56 +02:00
tautulli
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
umami
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
unifi
unifi: placed data, mesh-assigned ports, an https route, and its password as a file
2026-09-29 23:39:50 +02:00
website
website: it listens on the port its container publishes
2026-09-30 21:01:47 +02:00