atlas
600fa15afe
feat(3167): publish the swarm UI's name to agents and to local dev ...
Four wiring sites, same as forge/matrix/authelia: vhost, cert name, DNS,
local-dev hosts. This commit is the last two.
The apex is a SIBLING of forge./chat./auth., not a child of anything
dnsmasq already answers for, so the /<hive domain>/ rule does not cover
it - without an explicit record the name is unresolvable from every
agent netns while working fine from the host, which is the shape that
nearly shipped when authelia's name moved.
Published to agents deliberately (mara: publishing it is fine).
Reachability is not the access control: the vhost's auth_request plus
authelia's group:operators rule are, and an agent that resolves the name
still cannot open the page.
2026-08-12 17:43:35 +02:00
fix(3191): let hive-c0re write the gateway conf dir under strict sandboxing
2026-08-12 16:39:58 +02:00
fix(3149): pass the oauth flags as an array, and verify the source exists
2026-08-12 15:04:18 +02:00
feat(3167): publish the swarm UI's name to agents and to local dev
2026-08-12 17:43:35 +02:00
feat(nix): issue each hive's CA under a swarm root CA
2026-08-05 15:57:50 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
docs(3191): drop the migration history from the gateway comments
2026-08-12 13:26:58 +02:00
docs(3191): the gateway's comments describe a host service, not a container
2026-08-12 12:20:28 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
docs(3191): drop the migration history from the gateway comments
2026-08-12 13:26:58 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
feat(3089): all-local asserts the swarm controller
2026-08-11 23:50:19 +02:00
refactor: nix/host-modules + nix/agent-modules layout, update doc paths
2026-07-13 22:05:49 +02:00
feat(3167): authelia gates the swarm UI on an operators group
2026-08-12 17:31:30 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
docs(3191): the gateway's comments describe a host service, not a container
2026-08-12 12:20:28 +02:00
refactor(nix): swarm.peers becomes swarm.hives, a directory of every hive
2026-08-05 20:44:16 +02:00
refactor(nix): make all-local a deployment mode, not a default
2026-08-05 19:41:11 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
refactor(nix): swarm.peers becomes swarm.hives, a directory of every hive
2026-08-05 20:44:16 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
600fa15afe