jschoubben f476255284 supabase: own secrets, and unique ids for its containers ...

The manifest declared its secrets as secrets.secret.<name> and required a
"secret" provision, so the controller saw no own secrets and every accept
was refused (the influxdb defect of #180). The directories functions and
storage shared their ids with the containers of the same name, which the
host refuses as two resources with one identity. The containers are now
edge-functions and storage-api; the placed directories keep their ids and
paths.

2026-09-30 17:57:57 +02:00

..

anthropic-consumer

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

anthropic-manager

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

audit-logger

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

baserow

baserow: placed directories, the database password from a file, and the build ace runs

2026-09-30 12:16:04 +02:00

bazarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

bookshelf

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

builder

The Go base has to be 1.26 for what compiles the controller's code

2026-09-27 20:58:09 +02:00

ca-trust

ca-trust: a machine trusts the mesh's authority because a module put its root there

2026-09-29 15:07:40 +02:00

cloudflare-dns

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

confluence

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

de-spiegel

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

dhcpcd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

distribution

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

dnsmasq

dnsmasq: pass the DNSSEC bit down from the validating upstreams

2026-09-30 15:17:34 +02:00

fail2ban

fail2ban: ban through an action every machine has

2026-09-28 20:48:24 +02:00

gitea

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

gitlab

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

grafana

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

hello-web

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

home-assistant

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

icecast

icecast: its passwords are a file the mesh writes, not the image's environment

2026-09-29 23:39:36 +02:00

influxdb

influxdb: its admin password and operator token are its own secrets, so an existing instance's can be accepted

2026-09-30 16:18:59 +02:00

invoicing

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

jackett

jackett: provide its Torznab API as jackett-api

2026-09-30 13:05:36 +02:00

jira

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

keycloak

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

letta

letta: placed state, a route, accepted keys, and a runtime that can log in

2026-09-30 12:22:12 +02:00

lidarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

local-model-consumer

local model: an ollama provider + a local-model consumer (ADR 0055)

2026-09-07 05:25:21 +02:00

mailu

mailu: admin asks the machine's resolver, not Mailu's own

2026-09-30 15:13:25 +02:00

marrytts

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

matrix

matrix: Conduit and Element, told their own name by the route

2026-09-30 11:59:56 +02:00

mesh-catalog

The catalogue hears what it missed

2026-09-28 16:08:46 +02:00

mesh-console

mesh-console: the mesh's tools on the machine a person sits at

2026-09-30 16:20:06 +02:00

mesh-vault

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

minio

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

model-usage

Event names are local now, in the manifests and in the code

2026-09-27 14:42:28 +02:00

mongodb

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

mosquitto

mosquitto, influxdb: the provisioner sees its grants where the mesh writes them

2026-09-30 17:19:33 +02:00

mssql

mssql: place its directories and name the software's port, not a machine's

2026-09-30 11:57:45 +02:00

n8n

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nats

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

networkmanager

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nextcloud

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nftables

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

nodered

nodered: its MQTT broker comes from the mesh

2026-09-30 13:01:14 +02:00

novox.be

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

nzbget

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ollama

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

ombi

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

only-office

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

openai-consumer

The rest of the catalogue becomes mesh-buildable (issue 060, batch 2)

2026-09-18 02:14:09 +02:00

photos

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

photos-eef

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

photos-filip

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

plex

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

portainer

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

postgres

postgres: the provisioner dials the port the mesh gave the store

2026-09-30 14:01:53 +02:00

public-acme

public-acme: the roots field is named roots, not root

2026-09-25 18:08:28 +02:00

qbittorrent

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

radarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

records

records: the record is read where it is written

2026-09-30 17:45:39 +02:00

redis

redis: place its directories and run the build in use

2026-09-30 11:57:46 +02:00

resolv-conf

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

resolved-split-dns

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

route-adapter

route-adapter: write a body limit as the predecessor's buffering middleware

2026-09-26 16:01:23 +02:00

route-proxy

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

searxng

searxng: bind its route where its state now lives

2026-09-29 22:41:56 +02:00

showcase

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sonarr

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

sshd

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

step-ca

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

supabase

supabase: own secrets, and unique ids for its containers

2026-09-30 17:57:57 +02:00

systemd-networkd

Rename seat claims to the mesh-*/node-* convention; retire verdaccio (ADR 0121)

2026-09-27 14:30:56 +02:00

tautulli

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

umami

Every module names its endpoints, and every route names the one it serves

2026-09-29 11:51:39 +02:00

unifi

unifi: placed data, mesh-assigned ports, an https route, and its password as a file

2026-09-29 23:39:50 +02:00