docs/gateway.md: add host-side-services.forgejo conflict-avoidance to container-shape section (argus #793 🟡)

This commit is contained in:
atlas 2026-05-31 15:03:17 +02:00 committed by mara
commit ba5a6181fc

View file

@ -118,7 +118,12 @@ agent's nspawn doesn't have DNS for the external hostname.
Private Forgejo wrapped in a nixos-container (`hive-forge`, not
`h-*` — keeps c0re's lifecycle scanner out of the picture; the
operator manages it via the standard `nixos-container` CLI).
operator manages it via the standard `nixos-container` CLI). The
container also keeps hive-forge from fighting any `services.forgejo`
the operator already runs on the host — separate systemd namespace,
separate state dir, separate port unless the operator deliberately
collides.
Container shares the host network namespace
(`privateNetwork = false`) so agents reach the forge at
`http://localhost:<httpPort>` without extra plumbing — nixos-container