docs/integrations/matrix.md: clear write-good.Passive hits from the rebase

Three hits the recent write-good.Passive=error flip (hyperhive#4546) now
catches on this branch's content:
- "stored password is gone" -> "has lost its stored password"
- "the ordinary appservice re-login above is unaffected" -> named the
  actual actor (the admin-sender limitation) instead of leaving it
  passive
- "Federation is enabled" -> "tuwunel enables federation" (tuwunel is
  already named one clause earlier in the same paragraph)

No suppressions, no content dropped.
This commit is contained in:
iris 2026-09-20 18:28:32 +02:00 committed by mara
commit 637b308d4d

View file

@ -178,9 +178,9 @@ rehomed to the swarm tier rather than granted here; from the hive,
`@hive:` has no admin sender to make that call with, so both get the `@hive:` has no admin sender to make that call with, so both get the
admin room's refusal rather than an over-privileged credential that admin room's refusal rather than an over-privileged credential that
every other call site would also carry. The one hive-side path that every other call site would also carry. The one hive-side path that
depends on them is the automatic password recovery for an agent whose depends on them is the automatic password recovery for an agent that
stored password is gone — the ordinary appservice re-login above is has lost its stored password — the admin-sender limitation doesn't
unaffected. touch the ordinary appservice re-login above.
<details><summary>Upgrading a hive that used the registration token</summary> <details><summary>Upgrading a hive that used the registration token</summary>
@ -287,9 +287,9 @@ services.hyperhive.swarm.matrix = {
``` ```
**`trustedServers`** (default `[]`) — list of peer homeserver names **`trustedServers`** (default `[]`) — list of peer homeserver names
whose signing keys tuwunel fetches and trusts. Federation is enabled whose signing keys tuwunel fetches and trusts. tuwunel enables
at the protocol level from first boot (`allow_federation = true`) but federation at the protocol level from first boot (`allow_federation =
trusts no remote homeserver until you list it here. For a closed true`) but trusts no remote homeserver until you list it here. For a closed
single-hive deployment the default empty list is correct — add peer single-hive deployment the default empty list is correct — add peer
hive domains here when connecting hives into a swarm (see hive domains here when connecting hives into a swarm (see
[`docs/swarm/`](../swarm/README.md)). [`docs/swarm/`](../swarm/README.md)).