atlas
793d987a88
swarm-archive: forget future-dated snapshots before each prune; fix the grants case ...
A client chooses a snapshot's time, so snapshots dated ahead could fill
--keep-last and push the real ones out of a prune. The prune now forgets
snapshots dated more than an hour after now first, and logs their ids. The
VM test forges one and checks the real snapshot stays. The bao-grants case
that read a + path as a glob now names the literal path, and two cases that
pinned 'nothing else' list the archive grants. The ciRunner stanza is back
at its original indent.
2026-11-10 08:32:54 +01:00
swarm-archive: grant only once an archive is up; keep logins across a gap in placements
2026-11-10 08:18:45 +01:00
swarm-archive: forget future-dated snapshots before each prune; fix the grants case
2026-11-10 08:32:54 +01:00
lint: tighten atomic-write-secret.nix's header comment; fix vale contractions in persistence.md
2026-09-26 21:50:03 +02:00
attic-init: replace the stored public key with the one the cache reports
2026-11-07 10:40:07 +01:00
nix trusts the swarm's root through its own CA bundle, so root's nix clients reach the cache
2026-11-08 18:37:34 +01:00
swarm-nats: the auth responder's store identity path is its own, not the hive's
2026-10-06 10:04:30 +02:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
run the platform containers' root check through a build-independent path
2026-10-30 11:13:16 +01:00
matrix: report homeserver up, latency and database size through existing collectors
2026-11-05 08:30:06 +01:00
read grafana's datasource key from the store into /run, seeding an empty store from the old file
2026-10-30 16:59:07 +01:00
docs: sort the top-level directories into five sections by what the reader wants
2026-11-06 18:46:57 +01:00
tls: a CA root change no longer restarts the store or bounces containers
2026-10-21 22:00:13 +02:00
keep each hive's otel oidc secret on /run, not /var/lib
2026-10-25 11:16:24 +01:00
swarm: refuse swarm.hives keys that are not valid hive identifiers
2026-10-12 21:45:50 +02:00
run authelia's digest under a real shell, not the service user's nologin
2026-11-09 15:50:23 +01:00
pull swarm closures through the nix daemon: substituters in the fragment, merged root-only netrc
2026-11-08 11:06:28 +01:00
agent trust bundle: retry the root fetch inside its start job so a dns blip at boot queues the harness instead of failing it
2026-11-01 13:35:01 +01:00
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
nix: re-run the host's store fetches on a ten-minute timer
2026-10-13 00:03:20 +02:00
credential units: restart consumers on a changed credential; fix the ordering claim
2026-09-30 07:45:47 +02:00
fetch the secrets unit's store leaves concurrently and log how long each phase takes
2026-11-04 17:04:35 +01:00
run opted-in agents in a user namespace with a dedicated data owner
2026-11-01 17:06:18 +01:00
793d987a88