atlas
41f0d7e036
fix( #3462 ): apply the name check in the unit that runs on the deploy ...
hive-tls-ca re-signs at service activation -- the rebuild itself --
while hive-tls-resign only fires from a weekly timer. The previous commit
put the coverage check in the timer unit, so a corrected serviceDomains
would not have taken effect until up to a week after the deploy that
changed it. Same bug one level along: found a trigger, not the trigger.
Two guards now share one definition rather than each carrying their own,
because a rule enforced in one and not the other is worse than one
enforced in neither -- it looks fixed and only fires on whichever path
you did not take.
Also widens hive-tls-ca's condition to the services leaf. Both leaves are
signed inside that block but only the hive leaf gated it, so a fresh
gateway.pem suppressed the re-signing of a swarm-services.pem that was
missing or stale.
2026-08-18 21:54:38 +02:00
fix( #3442 ): give hive-c0re hive-CA trust
2026-08-18 20:34:44 +02:00
fix( #3396 ): move the forge onto the shared trust-bundle helper
2026-08-17 20:35:56 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3391 ): give the swarm controller hive-CA trust
2026-08-18 17:49:57 +02:00
feat( #3125 ): a swarm-tier OTEL collector, in its own container
2026-08-18 21:02:18 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
feat( #3162 ): warn when a hive with an existing homeserver has not pinned serverName
2026-08-18 12:29:31 +02:00
docs(3191): the gateway's comments describe a host service, not a container
2026-08-12 12:20:28 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
fix( #3462 ): apply the name check in the unit that runs on the deploy
2026-08-18 21:54:38 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
fix( #3343 ): move the all-local queue derivations into the deployment mode
2026-08-16 19:37:49 +02:00
feat( #3125 ): reshape the hive-to-swarm OTEL hop by domain
2026-08-18 21:02:18 +02:00
fix( #3422 ): stop pointing the bridge at a second user store
2026-08-18 10:31:48 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm-ui: show the swarm's name as the page title and top-left brand
2026-08-18 18:34:56 +02:00
feat( #3405 ): declarative grafana plugins for the swarm dashboard
2026-08-17 22:24:07 +02:00
fix( #3363 ): give the queue's auth responder the hive CA
2026-08-17 19:57:44 +02:00
feat( #3125 ): reshape the hive-to-swarm OTEL hop by domain
2026-08-18 21:02:18 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
feat( #3125 ): reshape the hive-to-swarm OTEL hop by domain
2026-08-18 21:02:18 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
feat( #3255 ): expose the controller's webhook endpoint through the swarm vhost
2026-08-18 12:28:09 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3462 ): the swarm-services leaf never covered grafana, metrics or otel
2026-08-18 21:54:38 +02:00
41f0d7e036