iris
24f6690fe5
swarm-ui vhost: cache by name, 404 a missing file, carry a content security policy ...
After a deploy a browser could keep the old entry document, which named a
bundle that no longer exists, and the missing script was answered with the
entry document, so the page was blank with only a MIME-type error to say why.
The hashed bundle is immutable and a missing file is a 404; the entry document,
the worker, the manifest, the icons and the theme's colors.css are revalidated.
The pages carry a content security policy. The service worker fetches its shell
past the HTTP cache, logs a failed install, refreshes the cached entry document
on each navigation and holds cache writes open with waitUntil. The proxy test
pins the cache rules, the 404s and the policy; docs/swarm/ui.md says what the
browser keeps.
2026-10-28 19:56:55 +01:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
hand agents the dashboard port, pinned claude and otel labels at container start
2026-10-22 07:11:46 +02:00
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
keep the backend file order case independent of the proxy file
2026-10-28 17:24:34 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
force each container's unit configs in the checks about it
2026-10-25 21:50:35 +01:00
force each container's unit configs in the checks about it
2026-10-25 21:50:35 +01:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
keep the matrix appservice registration in bao, with the host file as the last copy
2026-10-27 17:33:06 +01:00
force each container's unit configs in the checks about it
2026-10-25 21:50:35 +01:00
ship the cache host init units' journal through the hive collector
2026-10-28 08:49:14 +01:00
trust the swarm services ca in swarm-ci-metrics
2026-10-17 23:28:03 +02:00
swarm-ui vhost: cache by name, 404 a missing file, carry a content security policy
2026-10-28 19:56:55 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
swarm-grafana: the bao dashboard reads openbao's journal
2026-10-28 19:28:12 +01:00
squid: base allow list for every authed user, and no start limit on the list reload
2026-10-28 19:44:26 +01:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
serve matrix discovery at the swarm apex, keep the pinned hive case
2026-10-25 12:15:22 +01:00
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
drop port-collision checks against swarm.otel.telemetryPort
2026-10-24 23:02:37 +02:00
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
queue collector exports on disk and retry without a time limit
2026-10-26 23:19:59 +01:00
swarm-authelia: run in its own network namespace
2026-10-21 22:10:23 +02:00
default swarm.attic domain and cache to the swarm's own cache on every host
2026-10-27 22:16:26 +01:00
24f6690fe5