mesh-controller

Archived

This repository has been archived on 2026-11-02. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

jschoubben f996a6707e a route composes its internal-network alias too, not only its public name

Every cutover done on novox tonight (drive, files, files-api, git,
keycloak, umami) dropped the <label>.<node>.internal alias HAL always
paired with the public hostname — found only when the operator tested it
by hand. Not a security boundary (a predecessor proxy served both as a
convenience, reaching a service over the VPN without a public TLS round
trip, not as access control), so restoring it is composing the same
convenience the same way the public name already is: <label> joined to
the node's own private address (r.At), independently of whether a public
domain exists to join the other half to.

composeName's signature changes (publicDomain, internalDomain) but its
shape does not — additive, label-gated, apex-aware, exactly mirroring the
public half it already did. A contribution the mesh writes both names
into is the entire fix; route-adapter and route-proxy pick up internal-
name whenever they're updated to serve it, not before, so this alone
changes nothing about what is live on any node yet.

2026-09-25 16:51:38 +02:00

broker

An address is read from the node's settings where it is used, never recorded with a port

2026-09-23 23:49:31 +02:00

builder

The control plane's recipe starts FROM the base its manifest declares, and an undeclared base is refused

2026-09-21 22:16:10 +02:00

catalogue

a route composes its internal-network alias too, not only its public name

2026-09-25 16:51:38 +02:00

envfile

An address is read from the node's settings where it is used, never recorded with a port