vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

nix: leave unit-script comments untouched outside swarm-bao-pki

Browse source
This commit is contained in:
atlas 2026-10-05 08:35:43 +02:00
commit 40d6f30834
2 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

4
nix/host-modules/hive-forge/default.nix
View file

@ -938,8 +938,8 @@ in
# its token file deleted to force a re-mint with the new
# scope.
#
# Token name carries a timestamp suffix rather than a fixed
# `swarm-controller-boot` — a real
# Token name carries a timestamp suffix rather than the
# fixed `swarm-controller-boot` this used to be — a real
# incident, not a hypothetical: deleting the token *file*
# (the remediation above) doesn't delete the token Forgejo
# already has under that name, so re-running this unit hit

2
nix/host-modules/hive-tls.nix
View file

@ -131,7 +131,7 @@ let
# than a stale one — its own vhosts are covered by the hive leaf
# above. Anywhere else it is expected: the leaf comes from the
# secret store's `pki` mount now, not from a sub-CA that exists on
# one host in the swarm, so "this host cannot issue it" is not
# one host in the swarm, so "this host cannot issue it" is no longer
# one of the answers.
want_svc=${if localServiceDomains == [ ] then "0" else "1"}