# One machine that becomes a mesh and then assigns itself plex's tool runtime.
#
# The audit-node bed proved an assigned *consumer* (novox/hq ADR 0048). This proves an assigned
# module that *serves tools* (ADR 0052): the same first-node substrate, plus plex's tool runtime on
# top. The node enrols itself, the mesh issues plex a broker account scoped to serve.plex.* and
# assigns it, the host runs the runtime container, and a caller invokes plex.plex_reachable over the
# mesh — proof the module runs its own code as its own process under its own scoped account.
scenario: plex-node

segments:
  hosting:
    kind: public
    cidr: [192.0.2.0/24]

machines:
  anchor:
    at: { segment: hosting, address: [192.0.2.10] }
    inbound: allow
    memory: 3GiB
    cpus: 2

images:
  - postgres:17-alpine
  - cloudamqp/lavinmq:latest
  - mesh-control:development
  # Plex's tool runtime, built by scripts/build-module-runtime.sh plex into the local daemon and
  # stocked into the scenario's own registry, which is where the host pulls it from.
  - mesh-runtime-plex:development

place:
  all: [host, runtime]