docs/gateway.md: add host-side-services.forgejo conflict-avoidance to container-shape section (argus #793 🟡)
This commit is contained in:
parent
2ada0e22ca
commit
ba5a6181fc
1 changed files with 6 additions and 1 deletions
|
|
@ -118,7 +118,12 @@ agent's nspawn doesn't have DNS for the external hostname.
|
||||||
|
|
||||||
Private Forgejo wrapped in a nixos-container (`hive-forge`, not
|
Private Forgejo wrapped in a nixos-container (`hive-forge`, not
|
||||||
`h-*` — keeps c0re's lifecycle scanner out of the picture; the
|
`h-*` — keeps c0re's lifecycle scanner out of the picture; the
|
||||||
operator manages it via the standard `nixos-container` CLI).
|
operator manages it via the standard `nixos-container` CLI). The
|
||||||
|
container also keeps hive-forge from fighting any `services.forgejo`
|
||||||
|
the operator already runs on the host — separate systemd namespace,
|
||||||
|
separate state dir, separate port unless the operator deliberately
|
||||||
|
collides.
|
||||||
|
|
||||||
Container shares the host network namespace
|
Container shares the host network namespace
|
||||||
(`privateNetwork = false`) so agents reach the forge at
|
(`privateNetwork = false`) so agents reach the forge at
|
||||||
`http://localhost:<httpPort>` without extra plumbing — nixos-container
|
`http://localhost:<httpPort>` without extra plumbing — nixos-container
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue