atlas
3a4b0ffabf
render the matrix appservice registration from the store onto tmpfs ...
swarm-matrix-ctl appservice render now reads the registration's tokens
from the store and renders swarm.yaml under /run/swarm-matrix-appservice,
which tuwunel loads through LoadCredential. It mints a pair only when the
store answers and holds none; a host that has the old files stores their
pair once instead. A store that does not answer fails the unit and keeps
tuwunel down; sync starts it once the store answers.
Refs #4998 (item 3)
2026-10-30 17:38:29 +01:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
keep the backend file order case independent of the proxy file
2026-10-28 17:24:34 +01:00
run agent containers on an ephemeral root, salvaging the old one first
2026-10-28 20:00:12 +01:00
force each container's unit configs in the checks about it
2026-10-25 21:50:35 +01:00
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
name the mint, not the publisher, as the writer of the client secrets
2026-10-30 16:57:58 +01:00
render the matrix appservice registration from the store onto tmpfs
2026-10-30 17:38:29 +01:00
name the mint, not the publisher, as the writer of the client secrets
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
read grafana's datasource key from the store into /run, seeding an empty store from the old file
2026-10-30 16:59:07 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
drop the hive-side matrix code: sweep, hivectl matrix and the apiUrl option
2026-10-28 23:04:55 +01:00
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
drop the one-time migration: seed the store from a leftover file once, leave the file
2026-10-30 16:57:58 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
name the mint, not the publisher, as the writer of the client secrets
2026-10-30 16:57:58 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
declare the root-check link on hosts without a controller too
2026-10-30 11:18:53 +01:00
3a4b0ffabf