diff --git a/nix/host-modules/hive-network.nix b/nix/host-modules/hive-network.nix index 6d4bc871..ff182902 100644 --- a/nix/host-modules/hive-network.nix +++ b/nix/host-modules/hive-network.nix @@ -100,9 +100,15 @@ in firewall, so an agent can connect to `''${bridgeIp}:P` (default `10.42.0.1:P`). - Use this to let agents reach a host-local service — e.g. an - OpenTelemetry collector for `services.hyperhive.otel.endpoint` (set - `endpoint = "http://''${bridgeIp}:P"`). + Use this to let agents reach a host-local service you run yourself — + a database, a scratch HTTP endpoint, anything listening on + `''${bridgeIp}:P`. + + Not needed for hyperhive's own telemetry: `services.hyperhive.otel.enable` + contributes its collector's port here itself and derives the + agent-facing endpoint from the bridge address. `otel.endpoint` names + where telemetry goes *after it leaves the swarm*, and is read by the + swarm's collector — it is not a bridge address. **The host service must bind an address reachable from the bridge** — `0.0.0.0` or the bridge IP (`bridgeIp`) — not loopback-only. The