atlas
4b6214305f
nix: address the swarm IdP by its domain, not by who runs it
...
`swarm.authelia.url` defaulted to `https://<domain>` only when this host
ran the container, and to `null` otherwise — so the address a client is
given was a statement about co-location rather than about the swarm. A
swarm has one SSO provider; every hive addresses the same name and
resolution decides which address that reaches, exactly as
`swarm.otel.domain` already works.
The option stays nullable: "this swarm has no IdP" is still expressible,
it is just now something an operator states rather than something not
running the container produces. The Grafana fixture that exercised the
no-IdP refusal says it explicitly.
Closes #4536
2026-09-21 18:14:28 +02:00
..
agent-icon.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-matrix.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-memory.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-otel.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
agent-plugins.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-queue-bao.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
bao-basics.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
bao-controller.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
bao-grants.nix
matrix: one sender account and one sender token per hive
2026-09-20 22:07:16 +02:00
bao-matrix-reader.nix
matrix: one sender account and one sender token per hive
2026-09-20 22:07:16 +02:00
bao-otel-collector.nix
nix: the store's own collector scrapes its metrics listener
2026-09-21 17:19:52 +02:00
core-toggle.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
grafana.nix
nix: address the swarm IdP by its domain, not by who runs it
2026-09-21 18:14:28 +02:00
hive-otel.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
journald-severity.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
lib.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
matrix-core.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
name-guards.nix
swarm-matrix-ctl: one control binary for the matrix container, not one per job
2026-09-20 22:07:16 +02:00
nats-authelia.nix
nix: address the swarm IdP by its domain, not by who runs it
2026-09-21 18:14:28 +02:00
secret-publisher.nix
nix: the store's own collector scrapes its metrics listener
2026-09-21 17:19:52 +02:00
swarm-otel-core.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
swarm-otel-identity.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
swarm-services-switch.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00