Phase 6a: per-container web UI (axum); per-agent port hashed from name
This commit is contained in:
parent
14cb107125
commit
d0f954bbc1
9 changed files with 112 additions and 4 deletions
|
|
@ -31,6 +31,17 @@ in
|
|||
config = lib.mkIf cfg.enable {
|
||||
environment.systemPackages = [ cfg.package ];
|
||||
|
||||
# Per-container web UIs share the host's network namespace and need their
|
||||
# ports reachable. Manager: 8000. Sub-agents: 8100..8999 (deterministic
|
||||
# hash; see `lifecycle::agent_web_port`).
|
||||
networking.firewall.allowedTCPPorts = [ 8000 ];
|
||||
networking.firewall.allowedTCPPortRanges = [
|
||||
{
|
||||
from = 8100;
|
||||
to = 8999;
|
||||
}
|
||||
];
|
||||
|
||||
systemd.services.hive-c0re = {
|
||||
description = "hyperhive coordinator daemon";
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue