vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(3083): getting into the SSO provider the first time

Browse source 
The vhost half of this change is only useful with an account behind it,
and the provider is generated with an empty user set on purpose. Document
the `swarmctl user add` step rather than automating it: bootstrapping an
IdP non-interactively means a secret arriving from a file, an env var or a
nix expression, all worse than one command typed once.

The gateway and network pages gain the rows they would otherwise be
missing — vhost map, local-dev hosts entry, and the resolver's
authoritative-name list.
This commit is contained in:
atlas 2026-08-11 22:41:41 +02:00 • committed by mara
commit 660629a7c6
3 changed files with 38 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/network.md
View file

@ -113,7 +113,8 @@ schemes pick their own.
## Resolver behaviour
dnsmasq is **authoritative** for the hive's own zones — answers
`<hive-domain>`, `forge.<hive-domain>`, `matrix.<hive-domain>`
`<hive-domain>`, `forge.<hive-domain>`, `matrix.<hive-domain>` and —
on the host running it — the swarm's `auth.<swarm-domain>`
queries with the bridge IP (where nginx is reachable). Everything
else is forwarded to the host's own resolvers: dnsmasq runs on the host
and reads the host's `/etc/resolv.conf` directly. Containers don't need