Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
atlas 2fc63d844b name the mint, not the publisher, as the writer of the client secrets ... Finishes the sweep of prose that said the publisher unit writes or carries the OIDC client secrets: rust docs, nix comments and option descriptions, test names and docs.		2026-10-30 16:57:58 +01:00
..
hive-c0re	remove the hive-c0re forge-credential chain nothing reads any more	2026-10-29 22:55:31 +01:00
hive-forge	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
hive-gateway	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
lib	derive a missing client digest from the secret that exists	2026-10-30 16:57:58 +01:00
swarm-grafana/dashboards	egress dashboard: match squid's result codes by prefix	2026-10-30 16:15:19 +01:00
bao-bootstrap-policy.hcl	bao: disable the unused approle auth method, declaratively	2026-09-28 22:58:36 +02:00
default.nix	run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template	2026-10-28 23:50:58 +01:00
deploy.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-attic-otel-oidc-client.nix	forward the attic container's journal to the swarm collector	2026-10-27 16:03:23 +01:00
glue-bao-readers-policy-order.nix	copy the cache's pull facts to each hive and create them in the in-swarm cache	2026-10-28 01:19:56 +01:00
glue-bao-readers-store-order.nix	run attic as a swarm service with deploy.attic.enable	2026-10-27 13:04:17 +01:00
glue-bao-tls.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
glue-bao-ui-oidc-client.nix	bao: OIDC login to the browser UI via authelia, as a metadata-only viewer	2026-09-28 19:56:38 +02:00
glue-builder-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-ci-metrics-otel-oidc-client.nix	push ci run metrics to victoriametrics, with a grafana board	2026-10-16 20:43:11 +02:00
glue-ci-runner-otel-oidc-client.nix	swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector	2026-10-16 11:22:51 +02:00
glue-claude-login-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-controller-bao-identity.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
glue-controller-env.nix	service urls carry no gateway port, httpsPort is listen-only	2026-10-25 10:45:54 +01:00
glue-controller-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-forge-controller.nix	glue: forge's controller-dependent settings move out of the forge module	2026-10-13 22:14:28 +02:00
glue-forge-oidc-client.nix	nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable	2026-09-26 01:19:49 +02:00
glue-forge-otel-oidc-client.nix	hive-forge, hive-matrix: forward each container's journal to the swarm collector	2026-10-16 13:50:23 +02:00
glue-grafana-oidc-client.nix	nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable	2026-09-26 01:19:49 +02:00
glue-grafana-otel-oidc-client.nix	swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector	2026-10-16 11:22:51 +02:00
glue-hive-otel-authelia.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
glue-hive-tls-bao-identity.nix	hive-tls: the gateway leaf uses the services-issuer identity, not a hive's	2026-10-06 14:54:07 +02:00
glue-hive-tls-controllers.nix	agents fetch the hive CA from bao at boot instead of the meta flake embedding it	2026-10-19 20:15:13 +02:00
glue-logs-auth-bao-identity.nix	swarm-logs-auth: check agent tokens on the log store's query route	2026-10-13 08:38:05 +02:00
glue-matrix-ctl-bao-identity.nix	swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's	2026-10-06 12:04:48 +02:00
glue-matrix-hive-discovery.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
glue-matrix-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-matrix-otel-oidc-client.nix	hive-forge, hive-matrix: forward each container's journal to the swarm collector	2026-10-16 13:50:23 +02:00
glue-metrics-auth-bao-identity.nix	add swarm-metrics, an agent CLI for the metrics store	2026-10-17 10:10:17 +02:00
glue-nats-auth-bao-identity.nix	swarm-nats: the auth responder's store identity path is its own, not the hive's	2026-10-06 10:04:30 +02:00
glue-nats-bao-identity.nix	swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's	2026-10-06 12:04:48 +02:00
glue-nats-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-nats-wireguard.nix	glue: nats firewall on the wireguard interface moves out of the nats module	2026-10-14 10:15:19 +02:00
glue-notify-router-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-review-classifier-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-secret-publisher-authelia.nix	swarm-authelia: run the secret publisher and a journal forwarder inside the container	2026-10-17 00:28:16 +02:00
glue-secret-publisher-bao-identity.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
glue-swarm-bao-otel-oidc-client.nix	ops: update option pointers after grafana/bao split	2026-10-01 09:53:04 +02:00
glue-swarm-otel-oidc-client.nix	ops: update option pointers after otel split	2026-10-01 13:00:40 +02:00
glue-victorialogs-otel-oidc-client.nix	swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector	2026-10-16 11:22:51 +02:00
glue-victoriametrics-otel-oidc-client.nix	swarm-victoriametrics: forward the container's journal to the swarm collector	2026-10-16 14:47:31 +02:00
hive-matrix-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
hive-matrix.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
hive-network.nix	deploy squid on every hive host, with exporter, journal forwarding and self-check	2026-10-27 20:59:06 +01:00
hive-options-removed.nix	publish operators' forge-profile pronouns to kv and list them in the agent prompt	2026-10-17 13:10:05 +02:00
hive-priv-cache.nix	keep the cache's key and pull token for hive-priv in a root-only directory	2026-10-28 10:23:01 +01:00
hive-priv.nix	declare the root-check link on hosts without a controller too	2026-10-30 11:18:53 +01:00
hive-squid-credential.nix	move the squid host options to deploy.hive-controller.squid	2026-10-29 09:53:20 +01:00
hive-squid.nix	add a per-agent egress log mode	2026-10-30 08:52:22 +01:00
hive-tls.nix	keep the cache's key and pull token for hive-priv in a root-only directory	2026-10-28 10:23:01 +01:00
host-ca-removed.nix	drop option renames and removals older than two weeks	2026-10-16 22:04:57 +02:00
hyperhive.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
local-defaults.nix	swarm-nats: take the callout issuer and user keys from the store	2026-10-06 14:53:33 +02:00
nats-callout-removed.nix	docs: put the credentials prose on the overview and the tables on the reference	2026-10-26 18:10:01 +01:00
otel.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
stylix-theme.nix	swarm-ui: apply the operator's stylix theme, same as the dashboard already does	2026-08-24 14:28:25 +02:00
swarm-attic-options.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-attic.nix	warn when the in-swarm cache runs under another domain	2026-10-29 08:24:44 +01:00
swarm-authelia-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-authelia.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-bao-service.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-bao.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-builder.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-ci-metrics.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-ci-runner.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-claude-login.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-controller.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-grafana-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-grafana.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-nats-service.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-nats.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-notify-router.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-otel-service.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-otel.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-required-services.nix	default swarm.attic domain and cache to the swarm's own cache on every host	2026-10-27 22:16:26 +01:00
swarm-review-classifier.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-secret-publisher.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-snapshot-store.nix	snapshot store: bound the transfer on both ends	2026-10-16 11:45:58 +02:00
swarm-ui.nix	repeat the security headers in the swarm api 401 location	2026-10-28 23:37:22 +01:00
swarm-victorialogs-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-victorialogs.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-victoriametrics-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-victoriametrics.nix	run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template	2026-10-28 23:50:58 +01:00
swarm-wireguard.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
swarm.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00