Watch
0
0
Fork
You've already forked hyperhive
0
hyperhive/nix/module-eval
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas bd79b58e78 log the agent bridge's forwarded flows in the hive_egress table
A forward chain in the hive-owned nft table logs each new flow from the agent bridge to the uplink (v4 and v6) and counts every packet. It never blocks. The mesh interface is skipped. Logging is rate limited per source address; a flow that limit cannot log gets one line from a shared limit with its own prefix. services.hyperhive.network.egress.forward selects accept, log (default) or drop; drop is refused at evaluation until the interception it needs exists.
2026-11-12 09:20:51 +01:00
..
agent-forge-bao.nix start the forge and github pollers when their token lands late 2026-11-07 08:40:05 +01:00
agent-github-bao.nix start the forge and github pollers when their token lands late 2026-11-07 08:40:05 +01:00
agent-icon.nix nix: split module-eval into per-subsystem checks 2026-09-20 04:25:54 +02:00
agent-matrix.nix back off the matrix daemon's restarts so a homeserver outage can't flood the store with logins 2026-11-01 11:36:55 +01:00
agent-memory.nix subagent, bash: run each subagent run and bash task in its own cgroup 2026-10-13 12:25:27 +02:00
agent-otel.nix container collectors scrape their own telemetry and push it up their hop 2026-10-28 23:02:18 +01:00
agent-plugins.nix module-eval: drop 18 redundant cases and merge assertion-only hosts 2026-10-17 08:00:29 +02:00
agent-queue-bao.nix containers reach network-online only with a dhcp lease, and bao users wait for it 2026-11-01 11:06:41 +01:00
agent-rea.nix add rea agent module and reverse-engineer archetype 2026-10-27 11:33:04 +01:00
agent-runtime.nix agent: pull in and allow claude-code only for the claude runtime 2026-11-04 20:52:49 +01:00
agent-user.nix move nixBuilds into its own agent module, and have the vm test's agent import it 2026-11-06 09:18:42 +01:00
bao-basics.nix outlast openbao's cold restart in the agent ca unit's start limit 2026-11-01 15:09:13 +01:00
bao-controller.nix the operator's bao works on a store host without a hive 2026-11-11 09:10:50 +01:00
bao-grants.nix swarm-ui: set the review classifier's keys from the classifier settings 2026-11-11 19:01:01 +01:00
bao-matrix-reader.nix containers reach network-online only with a dhcp lease, and bao users wait for it 2026-11-01 11:06:41 +01:00
bao-otel-collector.nix nats and bao can listen on a routable address, opt-in 2026-11-09 17:42:20 +01:00
boot-wait.nix sum the boot-wait budgets of units that start one after another in a container, and check it 2026-11-02 17:22:37 +01:00
builder.nix add a triage archetype: haiku, a triage prompt, flows for new issues and prs 2026-11-11 23:25:59 +01:00
ci-metrics.nix keep authelia's oidc client secrets in the store, not on disk 2026-10-30 16:57:58 +01:00
core-toggle.nix log the agent bridge's forwarded flows in the hive_egress table 2026-11-12 09:20:51 +01:00
forge-placement.nix ci-runner: warn when the host has no nix store gc 2026-11-11 20:34:11 +01:00
grafana.nix the classifier alert also fires on an undecodable request and an unpublished reply 2026-11-11 22:35:05 +01:00
hive-otel.nix collectors: retry a failed start forever with a growing delay instead of hitting start-limit 2026-11-11 09:01:44 +01:00
hive-tls.nix swarm-archive: back up every agent's state to an append-only restic repository per agent 2026-11-10 07:49:49 +01:00
journald-severity.nix module-eval: assert the severity table once, not once per tier 2026-09-20 14:23:56 +02:00
lib.nix module-eval: give the Grafana stand-in a mainProgram, so upstream's getExe stops warning 2026-11-05 09:55:53 +01:00
matrix-core.nix hive-matrix: prefill the chat client with the server name, not the hive domain 2026-11-11 00:31:20 +01:00
name-guards.nix the operator's bao works on a store host without a hive 2026-11-11 09:10:50 +01:00
nats-authelia.nix swarm-nats: the auth responder has no start limit, always restarts, and is started after the server's restarts 2026-11-12 07:42:25 +01:00
nats-tls.nix swarm-nats: the auth responder has no start limit, always restarts, and is started after the server's restarts 2026-11-12 07:42:25 +01:00
secret-publisher.nix module-eval: give the Grafana stand-in a mainProgram, so upstream's getExe stops warning 2026-11-05 09:55:53 +01:00
semi-spread.nix semi-spread example: name the store's CA on the machines without the store 2026-11-11 00:14:24 +01:00
shared.nix move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace 2026-11-01 20:47:23 +01:00
swarm-otel-core.nix collectors: retry a failed start forever with a growing delay instead of hitting start-limit 2026-11-11 09:01:44 +01:00
swarm-otel-identity.nix move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace 2026-11-01 20:47:23 +01:00
swarm-services-switch.nix keep the mirror hint off forge errors, forward the hyperhive mirror from any controller host 2026-11-09 13:07:41 +01:00