atlas
bd79b58e78
log the agent bridge's forwarded flows in the hive_egress table
...
A forward chain in the hive-owned nft table logs each new flow from the agent bridge to the uplink (v4 and v6) and counts every packet. It never blocks. The mesh interface is skipped. Logging is rate limited per source address; a flow that limit cannot log gets one line from a shared limit with its own prefix. services.hyperhive.network.egress.forward selects accept, log (default) or drop; drop is refused at evaluation until the interception it needs exists.
2026-11-12 09:20:51 +01:00
..
agent-forge-bao.nix
start the forge and github pollers when their token lands late
2026-11-07 08:40:05 +01:00
agent-github-bao.nix
start the forge and github pollers when their token lands late
2026-11-07 08:40:05 +01:00
agent-icon.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-matrix.nix
back off the matrix daemon's restarts so a homeserver outage can't flood the store with logins
2026-11-01 11:36:55 +01:00
agent-memory.nix
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
agent-otel.nix
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
agent-plugins.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
agent-queue-bao.nix
containers reach network-online only with a dhcp lease, and bao users wait for it
2026-11-01 11:06:41 +01:00
agent-rea.nix
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
agent-runtime.nix
agent: pull in and allow claude-code only for the claude runtime
2026-11-04 20:52:49 +01:00
agent-user.nix
move nixBuilds into its own agent module, and have the vm test's agent import it
2026-11-06 09:18:42 +01:00
bao-basics.nix
outlast openbao's cold restart in the agent ca unit's start limit
2026-11-01 15:09:13 +01:00
bao-controller.nix
the operator's bao works on a store host without a hive
2026-11-11 09:10:50 +01:00
bao-grants.nix
swarm-ui: set the review classifier's keys from the classifier settings
2026-11-11 19:01:01 +01:00
bao-matrix-reader.nix
containers reach network-online only with a dhcp lease, and bao users wait for it
2026-11-01 11:06:41 +01:00
bao-otel-collector.nix
nats and bao can listen on a routable address, opt-in
2026-11-09 17:42:20 +01:00
boot-wait.nix
sum the boot-wait budgets of units that start one after another in a container, and check it
2026-11-02 17:22:37 +01:00
builder.nix
add a triage archetype: haiku, a triage prompt, flows for new issues and prs
2026-11-11 23:25:59 +01:00
ci-metrics.nix
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
core-toggle.nix
log the agent bridge's forwarded flows in the hive_egress table
2026-11-12 09:20:51 +01:00
forge-placement.nix
ci-runner: warn when the host has no nix store gc
2026-11-11 20:34:11 +01:00
grafana.nix
the classifier alert also fires on an undecodable request and an unpublished reply
2026-11-11 22:35:05 +01:00
hive-otel.nix
collectors: retry a failed start forever with a growing delay instead of hitting start-limit
2026-11-11 09:01:44 +01:00
hive-tls.nix
swarm-archive: back up every agent's state to an append-only restic repository per agent
2026-11-10 07:49:49 +01:00
journald-severity.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
lib.nix
module-eval: give the Grafana stand-in a mainProgram, so upstream's getExe stops warning
2026-11-05 09:55:53 +01:00
matrix-core.nix
hive-matrix: prefill the chat client with the server name, not the hive domain
2026-11-11 00:31:20 +01:00
name-guards.nix
the operator's bao works on a store host without a hive
2026-11-11 09:10:50 +01:00
nats-authelia.nix
swarm-nats: the auth responder has no start limit, always restarts, and is started after the server's restarts
2026-11-12 07:42:25 +01:00
nats-tls.nix
swarm-nats: the auth responder has no start limit, always restarts, and is started after the server's restarts
2026-11-12 07:42:25 +01:00
secret-publisher.nix
module-eval: give the Grafana stand-in a mainProgram, so upstream's getExe stops warning
2026-11-05 09:55:53 +01:00
semi-spread.nix
semi-spread example: name the store's CA on the machines without the store
2026-11-11 00:14:24 +01:00
shared.nix
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
swarm-otel-core.nix
collectors: retry a failed start forever with a growing delay instead of hitting start-limit
2026-11-11 09:01:44 +01:00
swarm-otel-identity.nix
move links, adminSync.ignoreUsers and scrapeTargets under their service's deploy namespace
2026-11-01 20:47:23 +01:00
swarm-services-switch.nix
keep the mirror hint off forge errors, forward the hyperhive mirror from any controller host
2026-11-09 13:07:41 +01:00