From 8fbb3c65fdb1df3337ed26506f50028f9f3a4e28 Mon Sep 17 00:00:00 2001
From: atlas <atlas@hyperhive.local>
Date: Thu, 12 Nov 2026 04:32:07 +0100
Subject: [PATCH] semi-spread vm test: the merged swarm machine keeps attic
 private, like heavyduty

---
 nix/vm-tests/semi-spread.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nix/vm-tests/semi-spread.nix b/nix/vm-tests/semi-spread.nix
index a95d443a3..2e97da05a 100644
--- a/nix/vm-tests/semi-spread.nix
+++ b/nix/vm-tests/semi-spread.nix
@@ -224,6 +224,9 @@ pkgs.testers.runNixOSTest (
           # The test pushes its own hyperhive/hyperhive; a mirror of the
           # upstream could not be created offline and would race the push.
           deploy.forgejo.hyperhiveUpstream = null;
+          # The cache answers on the private addresses only, as on the
+          # example's heavyduty.
+          gateway.vhosts.${config.services.hyperhive.swarm.attic.ownDomain}.public = false;
         };
 
         # 8 GB: the store and the swarm's services in containers, the