From 3db51deace30bd83ad7e9427100124ba91ccd1df Mon Sep 17 00:00:00 2001
From: atlas <atlas@pr1ma.darkest.space>
Date: Wed, 3 Jun 2026 01:18:13 +0200
Subject: [PATCH] network: default network.enable to services.hyperhive.enable

---
 nix/modules/hive-network.nix | 22 +++++++++++++---------
 1 file changed, 13 insertions(+), 9 deletions(-)

diff --git a/nix/modules/hive-network.nix b/nix/modules/hive-network.nix
index 8da7fe17..b64fb186 100644
--- a/nix/modules/hive-network.nix
+++ b/nix/modules/hive-network.nix
@@ -15,18 +15,22 @@ in
   options.services.hyperhive.network = {
     enable = lib.mkOption {
       type = lib.types.bool;
-      default = false;
-      example = true;
+      default = config.services.hyperhive.enable;
+      defaultText = lib.literalExpression "config.services.hyperhive.enable";
+      example = false;
       description = ''
         Stand up the hive-internal bridge + dnsmasq resolver.
-        Off by default while v1 phases in. When enabled:
-        a bridge interface (`bridgeName`) appears on the host with
-        `bridgeIp` assigned, and the hive-gateway container runs a
-        dnsmasq listening on that IP for `<hive-domain>` +
+        Defaults to `config.services.hyperhive.enable` so it comes
+        on automatically with the rest of hyperhive. Requires
+        `services.hyperhive.domain` to be set — the dnsmasq resolver
+        is authoritative for `<hive-domain>` and its sub-domains.
+        When enabled: a bridge interface (`bridgeName`) appears on the
+        host with `bridgeIp` assigned, and the hive-gateway container
+        runs a dnsmasq listening on that IP for `<hive-domain>` +
         sub-domains. Agent containers still default to shared host
-        netns at v1 — the endpoint is up but only used once #14
-        lands and flips containers to a private netns + veth peer
-        on this bridge.
+        netns — the endpoint is up but only used once
+        `isolateContainers = true` flips containers to private netns
+        + veth peers on this bridge.
       '';
     };