novox/mesh-host
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Compare commits

merge into: novox/mesh-host:feat/one-bus
Branches Tags
novox/mesh-host:main novox/mesh-host:fix/genesis-lets-the-controller-ask novox/mesh-host:feat/one-bus novox/mesh-host:fix/genesis-follows-the-forge novox/mesh-host:feat/a-host-adopts-a-membership-at-start novox/mesh-host:fix/genesis-accounts-hear-and-have-jetstream novox/mesh-host:fix/a-host-uses-its-own-inbox novox/mesh-host:fix/a-host-logs-in-as-its-node-user novox/mesh-host:feat/a-machine-moves-to-the-bus-it-is-told novox/mesh-host:feat/nats-genesis
...
pull from: novox/mesh-host:fix/genesis-follows-the-forge
Branches Tags
novox/mesh-host:main novox/mesh-host:fix/genesis-lets-the-controller-ask novox/mesh-host:feat/one-bus novox/mesh-host:fix/genesis-follows-the-forge novox/mesh-host:feat/a-host-adopts-a-membership-at-start novox/mesh-host:fix/genesis-accounts-hear-and-have-jetstream novox/mesh-host:fix/a-host-uses-its-own-inbox novox/mesh-host:fix/a-host-logs-in-as-its-node-user novox/mesh-host:feat/a-machine-moves-to-the-bus-it-is-told novox/mesh-host:feat/nats-genesis
1 Commits
feat/one-bus ... fix/genesis-follows-the-forge
Author SHA1 Message Date
jschoubben e212da6bd2 Genesis: the first user list lets the controller hear the forge's merges 2026-09-28 03:13:16 +02:00
1 changed files with 1 additions and 1 deletions
Expand all files Collapse all files
examples/foundation-first-node-nats.lock
+1 -1
View File
@@ -152,7 +152,7 @@
"type": "file",
"path": "/var/lib/mesh-bus-conf/accounts.conf",
"mode": "0600",
"content": "// The first user list, carried by the installer because at genesis there is no mesh to\n// compose one. A bootstrap credential, rotated with the store's and replaced by the\n// controller's own composition from its first start onward.\naccounts {\n MESH {\n jetstream: enabled\n users = [\n { user: \"controller\", password: \"$2a$10$AHqJgOifIVbU41KmATiMhuXFs8xa7Wl2HuN4UVBCXdN2jIQzjqApy\", permissions: {\n publish: { allow: [\"$JS.API.>\", \"$JS.ACK.CONTROL.controller.>\", \"$JS.ACK.EVENTS.controller.>\", \"_INBOX.enrol.>\", \"mesh.control.>\", \"mesh.node.>\", \"mesh.seat.mesh-build-machine.accept.>\"] }\n subscribe: { allow: [\"$JS.API.>\", \"_DELIVER.controller\", \"_DELIVER.controller.>\", \"_INBOX.controller.>\", \"mesh.control.>\", \"mesh.mod.mesh-catalog.event.catching-up\", \"mesh.mod.mesh-catalog.event.upgraded\", \"mesh.seat.mesh-build-machine.event.built\"] }\n allow_responses: { max: 1, ttl: \"1m\" }\n } }\n ]\n }\n}\n"
"content": "// The first user list, carried by the installer because at genesis there is no mesh to\n// compose one. A bootstrap credential, rotated with the store's and replaced by the\n// controller's own composition from its first start onward.\naccounts {\n MESH {\n jetstream: enabled\n users = [\n { user: \"controller\", password: \"$2a$10$AHqJgOifIVbU41KmATiMhuXFs8xa7Wl2HuN4UVBCXdN2jIQzjqApy\", permissions: {\n publish: { allow: [\"$JS.API.>\", \"$JS.ACK.CONTROL.controller.>\", \"$JS.ACK.EVENTS.controller.>\", \"_INBOX.enrol.>\", \"mesh.control.>\", \"mesh.node.>\", \"mesh.seat.mesh-build-machine.accept.>\"] }\n subscribe: { allow: [\"$JS.API.>\", \"_DELIVER.controller\", \"_DELIVER.controller.>\", \"_INBOX.controller.>\", \"mesh.control.>\", \"mesh.mod.mesh-catalog.event.catching-up\", \"mesh.mod.mesh-catalog.event.upgraded\", \"mesh.mod.gitea.event.pull.merged\", \"mesh.seat.mesh-build-machine.event.built\"] }\n allow_responses: { max: 1, ttl: \"1m\" }\n } }\n ]\n }\n}\n"
},
{
"id": "broker",