atlas
4e17deada5
feat( #3517 ): let a machine authenticate to the authz endpoint with a bearer token ...
The gateway authenticates scrapers so services do not each grow a static
bearer of their own, but authelia's auth_request endpoint ran its default
strategies, which are cookie-only. A scraper's OAuth2 access token was
refused no matter how it was minted.
CookieSession is listed explicitly because authn_strategies replaces the
defaults rather than extending them. Omitting it evaluates, renders and
starts, and silently ends every operator session on the swarm UI, which
uses this same endpoint.
Unconditional rather than keyed to whichever service is scraped today:
this makes a scheme available, not an authorisation. Authelia refuses a
token carrying no audience for the requested URL and only issues a client
audiences it is registered for, so nothing passes until a client is
registered against a specific URL.
2026-08-24 12:06:51 +02:00
fix(otel): let the SDK resolve hive-c0re's OTLP endpoint
2026-08-19 01:38:54 +02:00
feat( #3517 ): publish forgejo's metrics behind the gateway
2026-08-24 12:06:51 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3527 ): a missing source must report as zero, not as empty
2026-08-19 20:27:00 +02:00
swarm-grafana /dashboards
feat( #3494 ): provision the claude-usage dashboard
2026-08-23 23:21:50 +02:00
feat( #3125 ): a swarm-tier OTEL collector, in its own container
2026-08-18 21:02:18 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
feat( #3162 ): warn when a hive with an existing homeserver has not pinned serverName
2026-08-18 12:29:31 +02:00
docs(network): drop the otel reasoning instead of restating it
2026-08-19 02:04:57 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
fix( #3462 ): apply the name check in the unit that runs on the deploy
2026-08-18 21:54:38 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
fix( #3343 ): move the all-local queue derivations into the deployment mode
2026-08-16 19:37:49 +02:00
feat( #3554 ): let a hive-owned service declare a scrape target
2026-08-23 22:45:56 +02:00
feat( #3517 ): let a machine authenticate to the authz endpoint with a bearer token
2026-08-24 12:06:51 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm-ui: show the swarm's name as the page title and top-left brand
2026-08-18 18:34:56 +02:00
feat( #3494 ): provision the claude-usage dashboard
2026-08-23 23:21:50 +02:00
fix( #3363 ): give the queue's auth responder the hive CA
2026-08-17 19:57:44 +02:00
feat( #3520 ): scrape swarm-service prometheus endpoints at the swarm tier
2026-08-19 21:40:40 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
feat( #3125 ): reshape the hive-to-swarm OTEL hop by domain
2026-08-18 21:02:18 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
swarm-ui: header profile menu — initials avatar, authelia settings + logout ( #3570 )
2026-08-24 00:01:30 +02:00
feat(swarm-victoriametrics): scrape the store's own prometheus endpoint
2026-08-19 21:40:40 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3462 ): the swarm-services leaf never covered grafana, metrics or otel
2026-08-18 21:54:38 +02:00
4e17deada5