novox/mesh-catalog
6
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity
Files
f9f27d48788d6179eae022470801fbb00eb25b12
mesh-catalog/modules
T
History
jochen f9f27d4878 letta: keep its database and server passwords out of its log (hq issue 268) 
letta 0.6.8 prints LETTA_PG_URI whole (startup.sh, alembic, server.py)
and its server password when it starts in secure mode, so both were in
the container's log on every one of its restarts. Newer letta still
prints both, and neither is a log level.

The URI now names no password: libpq reads it from a mounted pgpass
file (PGPASSFILE). The one print of the server password is rewritten by
a start script before the server starts, and the script refuses to start
letta if that print, or a password in the URI, is still there - a letta
that does not start says why; one that leaks says nothing.

Both own secrets say they are read at start, so `rotate` can replace the
server password the mesh made.
2026-10-06 02:13:42 +02:00
..
adwaita
adwaita: the theme as a module, dark by default, for GTK, Qt, the portal and the cursor (hq ADR 0208)
2026-10-04 13:21:47 +02:00
asus-zephyrus-g14
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
audit-logger
audit-logger: its test subscribes as the module does and expects local event names
2026-10-04 01:21:40 +02:00
avahi
avahi: the discovery daemon declared, and why it hears nothing reported
2026-10-04 12:50:20 +02:00
baserow
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
blueman
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
bluetooth
Add nextcloud-client and blueman: the two tray apps get an owner and tools, each with one start
2026-10-05 11:47:38 +02:00
build-agent
build-agent serves its seat's verbs: current, kill, pause, resume (hq ADR 0219)
2026-10-05 19:23:30 +02:00
ca-trust
ca-trust: a machine trusts the mesh's authority because a module put its root there
2026-09-29 15:07:40 +02:00
claude-code
claude-code: say what a registration wrote here, whichever took it first
2026-10-05 14:33:53 +02:00
claude-licence-manager
Apply a binding that differs, and never repeat a generation a node passed
2026-10-05 09:59:19 +02:00
clipmenu
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
cloudflare-dns
cloudflare-dns: its tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
confluence
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
cups
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
dbus
dbus: hold node-message-bus, and never restart the bus live (hq ADR 0215)
2026-10-05 11:50:52 +02:00
de-spiegel
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
dhcpcd
Give /etc/resolv.conf to the uplink's holder (hq ADR 0223)
2026-10-05 23:39:13 +02:00
distribution
distribution: collect for real now that every kept archive is held
2026-10-05 18:34:37 +02:00
dmenu
dmenu: the package, which makes the notifier's menu work, and a menu tool (hq to-be 42 phase 2.7)
2026-10-04 13:02:23 +02:00
dnsmasq
List every mesh resolver and no public one in resolv.conf
2026-10-05 22:42:54 +02:00
docker
docker: trust the mesh's registry from the runtime's own module (hq issue 190)
2026-10-05 22:17:16 +02:00
docker-compose
docker-compose: the package, and its projects as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
dunst
dunst: the notifier as a module, claiming node-notifier and serving send and history (hq ADR 0208)
2026-10-04 13:15:39 +02:00
fail2ban
fail2ban: its tools in Go
2026-10-05 12:01:25 +02:00
feh
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
flatpak
flatpak: the package, Flathub with it, and the installations as tools (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
fonts
fonts: the five decided faces as packages, and what the generic families mean (hq to-be 42 phase 2.1)
2026-10-04 13:02:23 +02:00
forticlient
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
gitea
gitea: a merge poll looks only at repositories that moved, one pass at a time
2026-10-05 18:12:11 +02:00
gitlab
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
gnome-keyring
gnome-keyring: the secret service as a module, claiming node-secret-service (hq ADR 0208, ADR 0102)
2026-10-04 13:15:39 +02:00
grafana
grafana: its handlers and tools run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
hello-web
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
home-assistant
home-assistant: the runtime serves its code, and its provisions step is a run-once process (hq ADR 0198)
2026-10-03 23:33:51 +02:00
hostname
Rename hosts to hostname, which also writes /etc/hostname (hq ADR 0223)
2026-10-05 23:43:14 +02:00
i3
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
i3status-rust
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
icecast
icecast: its handlers and tools run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:51 +02:00
influxdb
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
invoicing
minio declares the bucket it derives; its consumers stop transcribing it (hq ADR 0188)
2026-10-04 02:34:06 +02:00
jira
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
keycloak
keycloak repair: remove the temporary admin even when the bootstrap failed after making it
2026-10-06 00:17:35 +02:00
lab
sudo: declare the operator account's passwordless escalation as a module
2026-10-04 12:50:20 +02:00
lemurs
lemurs, clipmenu: X keeps its resources, and an image in the clipboard is never read as text
2026-10-04 16:34:02 +02:00
letta
letta: keep its database and server passwords out of its log (hq issue 268)
2026-10-06 02:13:42 +02:00
local-model-consumer
A definition names no host path for its own data
2026-09-30 21:10:18 +02:00
localization
localization: locale, time zone and console keymap as one module
2026-10-04 12:50:20 +02:00
logrotate
logrotate: rotation on every machine, its base configuration owned
2026-10-04 12:50:20 +02:00
mailu
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
marrytts
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
matrix
No definition names this installation
2026-09-30 20:49:21 +02:00
memory-pressure
Phase 3: asus-zephyrus-g14 and memory-pressure, with Go tools and long-running code
2026-10-04 15:42:56 +02:00
mesh-catalog
mesh-catalog: its consumer and tools run in the node's runtime, and its preparation is a run-once process (hq ADR 0198)
2026-10-04 01:17:41 +02:00
mesh-vault
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
minio
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
model-usage
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
mongodb
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
mosquitto
mosquitto: run mosquitto_ctrl inside the broker's container
2026-10-04 01:00:51 +02:00
mssql
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
n8n
n8n: its media library is an access placed by the assignment
2026-10-01 02:02:30 +02:00
nats
nats: run 2.11.17, which hands a consumer with several filters every message (hq issue 266)
2026-10-06 01:29:20 +02:00
netcheck
netcheck: one module, a Go tools bundle and a TypeScript one (hq ADR 0188, 0193)
2026-10-04 00:34:31 +02:00
networkmanager
Give the uplink modules short slugs, so their identity fits a backend's limit
2026-10-06 00:03:40 +02:00
nextcloud
Back up every store: the restic module holds node-backup, the stores contribute their dumps
2026-10-05 11:47:59 +02:00
nextcloud-client
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
nftables
The packet filter's tools are a bundle the node's runtime serves; its container goes (hq to-be 38 WP4)
2026-10-03 12:59:07 +02:00
nm-applet
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
node-env
node-env: the account's environment as one module's two files
2026-10-04 03:59:50 +02:00
nodered
nodered: the runtime serves its tools, and its mqtt step is a run-once process (hq ADR 0198)
2026-10-03 23:33:51 +02:00
ollama
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
only-office
No definition names this installation
2026-09-30 20:49:21 +02:00
openai-consumer
openai-consumer: its apply is a scheduled process (hq ADR 0198)
2026-10-04 00:52:31 +02:00
openrazer
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
pacman
pacman: the package manager's configuration, mirrors and cache as a module
2026-10-04 12:50:20 +02:00
photos-eef
The photo clients publish the endpoint they declare (hq issue 227)
2026-10-04 12:25:28 +02:00
photos-filip
The photo clients publish the endpoint they declare (hq issue 227)
2026-10-04 12:25:28 +02:00
picom
picom: the compositor as a module, claiming node-compositor (hq ADR 0208)
2026-10-04 13:15:39 +02:00
polychromatic
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
postgres
postgres: announce a consumer failed for minutes, and its recovery
2026-10-06 00:13:42 +02:00
power
power: a lock problem is no longer said once the lock is held
2026-10-05 10:03:30 +02:00
powerlevel10k
powerlevel10k: the prompt as a pinned archive of the module's own, loaded from a slot
2026-10-04 04:04:10 +02:00
public-acme
public-acme: the roots field is named roots, not root
2026-09-25 18:08:28 +02:00
records
records: port to Go, and keep the checkout in a directory it owns
2026-10-05 17:42:08 +02:00
redis
redis: its handlers, tools and provisioner run in the node's runtime (hq ADR 0198)
2026-10-03 23:33:50 +02:00
restic
restic: restore a single kept file, not only a directory
2026-10-05 14:05:52 +02:00
rofi
i3: other modules' lines are contributions to node-display-session (hq ADR 0212)
2026-10-05 10:11:27 +02:00
route-adapter
route-adapter: its step is a run-once process (hq ADR 0198)
2026-10-04 00:52:31 +02:00
route-proxy
The proxy's jail reads both refusals, each pattern naming the host once
2026-10-02 17:23:42 +02:00
screen-lock
screen-lock: recognise the colour build by its version scheme; its version line never says color
2026-10-04 17:07:40 +02:00
searxng
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
showcase
The mesh's own files for a module are placed by the mesh, not the definition (issue 174)
2026-09-30 22:29:28 +02:00
slack
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
snapd
snapd: tools for the snaps, the package blocked on the mesh's AUR repository (hq to-be 42 phase 2.9)
2026-10-04 13:02:23 +02:00
ssh-client
ssh-client: the mesh's region first in ~/.ssh/config, its hosts in config.d, tools in Go
2026-10-04 12:38:40 +02:00
sshd
Every module names its endpoints, and every route names the one it serves
2026-09-29 11:51:39 +02:00
step-ca
step-ca: stop offering acme-ca, so public names are certified by public-acme
2026-10-03 10:54:43 +02:00
sudo
sudo: declare the operator account's passwordless escalation as a module
2026-10-04 12:50:20 +02:00
supabase
Studio listens on every address, so its health check reaches it
2026-10-05 23:20:35 +02:00
systemd
systemd: port to Go, and read a system unit's journal as root
2026-10-05 18:09:42 +02:00
systemd-networkd
Give the uplink modules short slugs, so their identity fits a backend's limit
2026-10-06 00:03:40 +02:00
time-sync
time-sync: one time daemon, timesyncd, with its servers declared
2026-10-04 12:50:20 +02:00
triggerhappy
triggerhappy: the machine's hotkeys as a module holding node-hotkeys (hq ADR 0212)
2026-10-04 16:50:57 +02:00
umami
A withdrawn consumer keeps its data, in every provider that holds some (hq issue 241)
2026-10-05 00:34:40 +02:00
unifi
The seven say what the runtime loads from their tools bundle (hq ADR 0192)
2026-10-03 15:58:19 +02:00
website
website: it listens on the port its container publishes
2026-09-30 21:01:47 +02:00
xclip
xclip: the package, and the operator's clipboard from the mesh (hq to-be 42 phase 2.7)
2026-10-04 13:02:23 +02:00
xdg
Give the remaining tray applets their modules, each with one start
2026-10-05 15:10:30 +02:00
xorg
xorg: the display server holds node-display-server and writes the session's start (hq ADR 0208)
2026-10-04 13:21:47 +02:00
xterm
xterm: the terminal holds node-terminal-emulator; its resources through xorg's slot (hq ADR 0208)
2026-10-04 13:21:47 +02:00
zsh
zsh: keep each PATH directory once
2026-10-04 11:34:36 +02:00
zsh-autosuggestions
zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each
2026-10-04 04:04:35 +02:00
zsh-syntax-highlighting
zsh-autosuggestions, zsh-syntax-highlighting: the plugins as packages and one line each
2026-10-04 04:04:35 +02:00