Dcntrlized/Maestro

T

Admin c916dd4ac8 feat(db): per-service role DSNs on an armed shared DB (M2 §4)

Database-capable services now get a per-service DATABASE_URL injected at
start (role = cert CN, sslmode=verify-full against the instance CA) when
the shared database runs mTLS-armed; one-off migrate/seed helpers get the
identity mount plus libpq SSL env under the same role. SyncAuthorization
grants each peer CREATE on public and USAGE + ALL on tables/sequences in
every user schema so per-service roles can run migrations and CRUD.

2026-08-21 20:59:42 +01:00

.gitea/workflows

fix: Tighten license autocommit bot to PRs, implement .licenseignore for ignoring specific files or directories

2026-08-04 23:34:46 +01:00

real init

2026-07-29 01:36:09 +01:00

feat(db): per-service role DSNs on an armed shared DB (M2 §4)

2026-08-21 20:59:42 +01:00

.dockerignore

real init

2026-07-29 01:36:09 +01:00

.gitignore

feat(security): trusted-services surface + auth mgmt client (M2 §3)

2026-08-15 23:27:21 +01:00

.license-header.tpl

feat(git): add license header file

2026-08-04 00:06:21 +01:00

.licenseignore

fix: Tighten license autocommit bot to PRs, implement .licenseignore for ignoring specific files or directories

2026-08-04 23:34:46 +01:00

docker-compose.debug.yaml

fix(containers): remap identity bind sources to host paths in dev

2026-08-16 16:34:46 +01:00

docker-compose.yaml

feat(dev): DCNTRLIZED_DEV drives dev mode; dev fleet runs real mTLS

2026-08-16 15:51:49 +01:00

Dockerfile

chore: add AGPL-3.0 license headers

2026-08-04 22:02:50 +00:00

Dockerfile.debug

fix(dev): serve web UI in debug mode — real frontend embed + data mounts in debug compose

2026-08-16 03:27:17 +01:00

LICENSE

Initial commit

2026-07-29 01:33:35 +01:00

README.md

Initial commit

2026-07-29 01:33:35 +01:00

services.json

real init

2026-07-29 01:36:09 +01:00

spec.yaml

feat(peers): full trust-store UI — accept, reject, revoke, re-authorize

2026-08-17 00:27:42 +01:00

README.md

Maestro

Dcntrlized project coordinator service