atlas
bd79b58e78
log the agent bridge's forwarded flows in the hive_egress table ...
A forward chain in the hive-owned nft table logs each new flow from the agent bridge to the uplink (v4 and v6) and counts every packet. It never blocks. The mesh interface is skipped. Logging is rate limited per source address; a flow that limit cannot log gets one line from a shared limit with its own prefix. services.hyperhive.network.egress.forward selects accept, log (default) or drop; drop is refused at evaluation until the interception it needs exists.
2026-11-12 09:20:51 +01:00
remove the old snapshot store; tombstone its options
2026-11-10 06:48:54 +01:00
keep the mirror hint off forge errors, forward the hyperhive mirror from any controller host
2026-11-09 13:07:41 +01:00
gateway: per-vhost public flag, private listen addresses, and IPv6 listeners
2026-11-09 21:40:36 +01:00
swarm-archive: external s3 backend (options, prune path, docs, module-eval cases, vm fake s3)
2026-11-11 00:13:19 +01:00
swarm-grafana /dashboards
grafana: the egress board filters by domain as well as by agent
2026-11-11 15:28:13 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
load the agent-bridge to loopback drop in its own nft table
2026-11-11 16:54:07 +01:00
swarm-ui: set the review classifier's keys from the classifier settings
2026-11-11 19:01:01 +01:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
swarm-archive: back up every agent's state to an append-only restic repository per agent
2026-11-10 07:49:49 +01:00
swarm-archive: back up every agent's state to an append-only restic repository per agent
2026-11-10 07:49:49 +01:00
the operator's bao works on a store host without a hive
2026-11-11 09:10:50 +01:00
bao: OIDC login to the browser UI via authelia, as a metadata-only viewer
2026-09-28 19:56:38 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
swarmctl: add bao init and bao grant-bootstrap
2026-11-08 09:09:13 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep the mirror hint off forge errors, forward the hyperhive mirror from any controller host
2026-11-09 13:07:41 +01:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
hive-tls: the gateway leaf uses the services-issuer identity, not a hive's
2026-10-06 14:54:07 +02:00
agents fetch the hive CA from bao at boot instead of the meta flake embedding it
2026-10-19 20:15:13 +02:00
swarm-logs-auth: check agent tokens on the log store's query route
2026-10-13 08:38:05 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
add swarm-metrics, an agent CLI for the metrics store
2026-10-17 10:10:17 +02:00
swarm-nats: the auth responder's store identity path is its own, not the hive's
2026-10-06 10:04:30 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
glue: nats firewall on the wireguard interface moves out of the nats module
2026-10-14 10:15:19 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
name the mint, not the publisher, as the writer of the client secrets
2026-10-30 16:57:58 +01:00
ops: update option pointers after grafana/bao split
2026-10-01 09:53:04 +02:00
ops: update option pointers after otel split
2026-10-01 13:00:40 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-victoriametrics: forward the container's journal to the swarm collector
2026-10-16 14:47:31 +02:00
swarm-archive: grant only once an archive is up; keep logins across a gap in placements
2026-11-10 08:18:45 +01:00
log the agent bridge's forwarded flows in the hive_egress table
2026-11-12 09:20:51 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
docs: code comments point at the moved SSO and matrix sections
2026-11-11 01:47:20 +01:00
load the agent-bridge to loopback drop in its own nft table
2026-11-11 16:54:07 +01:00
publish operators' forge-profile pronouns to kv and list them in the agent prompt
2026-10-17 13:10:05 +02:00
nix trusts the swarm's root through its own CA bundle, so root's nix clients reach the cache
2026-11-08 18:37:34 +01:00
hive-c0re pulls closures through the nix daemon; hive-priv verifies the swarm signature before applying
2026-11-08 01:56:55 +01:00
order the store's readers after its container without wanting it
2026-11-01 13:35:52 +01:00
squid blocks a runtime deny list from the controller in every egress mode, ahead of the allow list
2026-11-04 22:16:35 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
remove the old snapshot store; tombstone its options
2026-11-10 06:48:54 +01:00
swarm-nats: take the callout issuer and user keys from the store
2026-10-06 14:53:33 +02:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
collectors: retry a failed start forever with a growing delay instead of hitting start-limit
2026-11-11 09:01:44 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
swarm-archive: external s3 backend (options, prune path, docs, module-eval cases, vm fake s3)
2026-11-11 00:13:19 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
attic-init: replace the stored public key with the one the cache reports
2026-11-07 10:40:07 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
docs: code comments point at the moved SSO and matrix sections
2026-11-11 01:47:20 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
swarm-ui: set the review classifier's keys from the classifier settings
2026-11-11 19:01:01 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
ci-runner: warn when the host has no nix store gc
2026-11-11 20:34:11 +01:00
docs: the claude login page keeps the operator steps and moves the minter detail out
2026-11-11 09:05:59 +01:00
remove the forge links from the hive dashboard and the agent page
2026-11-07 13:43:44 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
the classifier alert also fires on an undecodable request and an unpublished reply
2026-11-11 22:35:05 +01:00
nats and bao can listen on a routable address, opt-in
2026-11-09 17:42:20 +01:00
swarm-nats: the auth responder has no start limit, always restarts, and is started after the server's restarts
2026-11-12 07:42:25 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
collectors: retry a failed start forever with a growing delay instead of hitting start-limit
2026-11-11 09:01:44 +01:00
swarm-archive: back up every agent's state to an append-only restic repository per agent
2026-11-10 07:49:49 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
bao reader policy, responder units and docs for the per-surface grant
2026-11-01 18:40:35 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
bao reader policy, responder units and docs for the per-surface grant
2026-11-01 18:40:35 +01:00
remove the old snapshot store; tombstone its options
2026-11-10 06:48:54 +01:00
the operator's bao works on a store host without a hive
2026-11-11 09:10:50 +01:00
bd79b58e78