vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

swarm-authelia: collect the journal of the unit that actually runs

Browse source 
journaldUnits named "authelia"; upstream derives the unit from the instance
name, so the running unit is authelia-swarm and that entry matched nothing.
The receiver's units list is an allowlist, so a name matching no journal
entry is silently absent -- it reads as a service with nothing to say rather
than as a misconfiguration, and it excluded the busiest source on the box.

Use the unitName binding the rest of this module already uses, so the
allowlist cannot drift from the unit again.
This commit is contained in:
atlas 2026-08-25 23:30:37 +02:00 • committed by mara
commit a1d6dcd644
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nix/host-modules/swarm-authelia.nix
View file

@ -985,8 +985,14 @@ in
# The bridge as well as authelia: it is the half that writes the identity
# store, and its refusals are returned to callers as a bare 401.
#
# `unitName`, never a literal: upstream derives the unit from the instance
# name, so the running unit is `authelia-<instance>` and a hardcoded
# "authelia" matches nothing. Nothing reports that — the receiver's `units`
# is an allowlist, so a name that matches no journal entry is silently
# absent and reads exactly like a service with nothing to say.
services.hyperhive.swarm.otel.journaldUnits = [
"authelia"
unitName
"swarm-authelia-bridge"
];