vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

compare the seed file in the unit environment as a path string

Browse source
This commit is contained in:
atlas 2026-10-28 22:25:41 +01:00 • committed by mara
commit 2095bb2d0f
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/module-eval/hive-otel.nix
View file

@ -650,7 +650,9 @@ let
&& builtins.elem "f ${sq.agentAllowFile} 0640 hive-core squid - -" rules && builtins.elem "f ${sq.agentAllowFile} 0640 hive-core squid - -" rules
&& env.HIVE_SQUID_ALLOWED_FILE == sq.allowedFile && env.HIVE_SQUID_ALLOWED_FILE == sq.allowedFile
&& env.HIVE_SQUID_AGENT_ALLOW_FILE == sq.agentAllowFile && env.HIVE_SQUID_AGENT_ALLOW_FILE == sq.agentAllowFile
&& env.HIVE_SQUID_ALLOWED_SEED_FILE == toString sq.allowedSeedFile # The unit's environment holds the seed as a derivation until the unit file
# is rendered, so it is compared as a path string.
&& toString env.HIVE_SQUID_ALLOWED_SEED_FILE == toString sq.allowedSeedFile
&& &&
env.HIVE_SQUID_ALWAYS_ALLOWED == "api.anthropic.com claude.ai platform.claude.com cache.nixos.org"; env.HIVE_SQUID_ALWAYS_ALLOWED == "api.anthropic.com claude.ai platform.claude.com cache.nixos.org";
} }