From a1d6dcd6440871f863ae60e964addc29ab40804a Mon Sep 17 00:00:00 2001 From: atlas Date: Tue, 25 Aug 2026 23:30:37 +0200 Subject: [PATCH] swarm-authelia: collect the journal of the unit that actually runs journaldUnits named "authelia"; upstream derives the unit from the instance name, so the running unit is authelia-swarm and that entry matched nothing. The receiver's units list is an allowlist, so a name matching no journal entry is silently absent -- it reads as a service with nothing to say rather than as a misconfiguration, and it excluded the busiest source on the box. Use the unitName binding the rest of this module already uses, so the allowlist cannot drift from the unit again. --- nix/host-modules/swarm-authelia.nix | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/nix/host-modules/swarm-authelia.nix b/nix/host-modules/swarm-authelia.nix index dc0cb3e0..86d844f8 100644 --- a/nix/host-modules/swarm-authelia.nix +++ b/nix/host-modules/swarm-authelia.nix @@ -985,8 +985,14 @@ in # The bridge as well as authelia: it is the half that writes the identity # store, and its refusals are returned to callers as a bare 401. + # + # `unitName`, never a literal: upstream derives the unit from the instance + # name, so the running unit is `authelia-` and a hardcoded + # "authelia" matches nothing. Nothing reports that — the receiver's `units` + # is an allowlist, so a name that matches no journal entry is silently + # absent and reads exactly like a service with nothing to say. services.hyperhive.swarm.otel.journaldUnits = [ - "authelia" + unitName "swarm-authelia-bridge" ];