vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

nix: finish the current-behaviour comment sweep in touched files

Browse source 
Rewrite the remaining narration in files the previous commit touched:
"moved"/"sat"/"was REMOVED"/"old default" comments in swarm-bao,
swarm-otel, glue-bao-tls, nats-authelia, swarm-controller, swarm-ui,
swarm-otel-service, swarm-authelia-service, the deploy.nix rename table,
hive-ci, hive-forge/service, hive-tls, hyperhive, swarm-nats, swarm.nix
and a few module-eval fixtures, so each says where a thing is or why it
is so now.

Revert the comment edits inside shell script strings in hive-tls,
swarm-nats and the forge token mint to their previous text, so those
generated units are unchanged. The only unit still changing is
swarm-bao-pki (two comment lines in its script). Refs #3902
This commit is contained in:
atlas 2026-10-05 03:13:02 +02:00
commit e990e9a0be
21 changed files with 102 additions and 103 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nix/host-modules/swarm-bao.nix
View file

@ -2914,9 +2914,8 @@ in
# difference between a mount nobody may issue from and one the gateway's
# certificate comes out of.
#
# The policy text moved here from the controller's unit, where it sat
# while it attached to nothing — a policy and the role that carries it
# belong in one place, and now there is a principal to put them with.
# The policy text lives beside the role that carries it: a policy and
# its role belong in one place, with the principal they grant.
systemd.services.swarm-bao-services-issuer-policy = lib.mkIf haveGranter {
description = "write the swarm services issuer's bao policy and cert-auth role";
after = [