atlas
3e5587dd4d
fix( #3150 ): let an SSO login adopt the matrix account it names ...
An SSO login whose derived localpart already exists silently gets a
random one instead: the candidate must be *available*, an existing
unlinked account is not, and `unique_id_fallbacks` defaults to true.
The operator's own login minted a stray account this way.
Fill the three identity_provider fields that decide which account a
login lands on: `trusted` (upstream's precondition -- self-hosted and
fully controlled -- is structural here, the issuer is always the swarm's
own authelia), `userid_claims` pinned to preferred_username so the
default ladder cannot fall through to an email local part, and
`unique_id_fallbacks = false` so a collision errors instead of
succeeding as the wrong user.
2026-08-16 18:28:57 +02:00
feat(swarm): wire a hive's queue coordinates for status publishing
2026-08-16 13:14:03 +02:00
fix(hive-forge): give the SSO-source unit the same TLS trust as forgejo
2026-08-15 22:01:46 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
feat(nix): issue each hive's CA under a swarm root CA
2026-08-05 15:57:50 +02:00
feat(3112): the swarm-nats container, fail-closed
2026-08-14 16:26:12 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
fix( #3150 ): let an SSO login adopt the matrix account it names
2026-08-16 18:28:57 +02:00
docs(3191): the gateway's comments describe a host service, not a container
2026-08-12 12:20:28 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
docs(3191): drop the migration history from the gateway comments
2026-08-12 13:26:58 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
feat(swarm-nats): mint the auth-callout nkeys on all-local hives
2026-08-16 15:59:06 +02:00
docs(otel): validateConfigFile is a parser, not a wiring check
2026-08-15 12:13:48 +02:00
swarm-authelia: let a client declare its token-endpoint auth method
2026-08-16 17:48:52 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
swarm-nats: cut the comments back to what the code cannot say
2026-08-16 16:19:30 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
refactor(nix): make all-local a deployment mode, not a default
2026-08-05 19:41:11 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
swarm-controller: serve swarm-wide service quick links (hyperhive#3289)
2026-08-15 14:24:52 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
feat(swarm): wire a hive's queue coordinates for status publishing
2026-08-16 13:14:03 +02:00
3e5587dd4d