vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

agent store leaf: 7 days instead of 90

Browse source
This commit is contained in:
atlas 2026-10-25 01:55:59 +02:00
commit 4d9b7e0ca9
4 changed files with 8 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nix/host-modules/swarm-bao.nix
View file

@ -839,7 +839,7 @@ let
# The agent leaf's window, pinned on the role. `swarm-controller` re-issues a
# live agent's leaf once it is past half of it (`agent_renewal.rs`).
agentPkiLeafTtl = "2160h";
agentPkiLeafTtl = "168h";
# The agent CA's certificate, cached on this host by `swarm-bao-agent-pki`,
# so `swarm-bao-certs` can compose the listener's bundle before the store

4
nix/module-eval/bao-grants.nix
View file

@ -2246,8 +2246,8 @@ let
"client_flag=true"
"code_signing_flag=false"
"email_protection_flag=false"
"ttl=2160h"
"max_ttl=2160h"
"ttl=168h"
"max_ttl=168h"
]
&& lib.length roleWriters == 1;
}