mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

add external gitlab accounts: stored in bao, linked per agent, allowed in squid, usable with glab

Browse source
This commit is contained in:
atlas 2026-11-02 16:11:25 +01:00
commit d6e983995d
1 changed files with 1322 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

11
nix/agent-modules/network.nix
View file

@ -52,9 +52,9 @@
# `/etc/hyperhive-bridge-dns` (containing the gateway IP) since
# isolation is always on; the oneshot reads it and rewrites
# resolv.conf on every boot. Ordered before the first DNS consumers
# (the forge-token, bao-identity, github-token and forge-accounts
# oneshots) and the network targets so name resolution works for
# the very first turn.
# (the forge-token, bao-identity, github-token, forge-accounts and
# gitlab-accounts oneshots) and the network targets so name resolution
# works for the very first turn.
systemd.services.hyperhive-isolated-dns = {
description = "point resolv.conf at the hive bridge resolver (isolated containers)";
wantedBy = [ "multi-user.target" ];
@ -67,14 +67,15 @@
# first turn errors — self-heals next turn, but better not to flap).
# `hive-matrix-daemon` likewise syncs over the network; the `before`
# is a harmless no-op when matrix is disabled (the unit is absent);
# so are the bao-identity / github-token / forge-accounts edges on
# agents that don't enable those oneshots.
# so are the bao-identity / github-token / forge-accounts /
# gitlab-accounts edges on agents that don't enable those oneshots.
before = [
"network-online.target"
"hive-agent-forge-token.service"
"hive-agent-bao-identity.service"
"hive-agent-github-token.service"
"hive-agent-forge-accounts.service"
"hive-agent-gitlab-accounts.service"
"hive-agent.service"
"hive-matrix-daemon.service"
];