atlas
6c9c2cef45
grafana: the published vhost refuses /metrics
...
Grafana runs with metrics.enabled and no basic_auth_*, so its Prometheus
exposition was served to any anonymous client of grafana.<swarm> through
the published vhost's `location "/"`. Add an exact-match `= /metrics`
location returning 403 there. The loopback `grafana-metrics` vhost and
the collector's scrape of it are unchanged.
Comments on the metricsPort option and the loopback vhost now state that
the published vhost refuses /metrics; the gateway doc says the same.
A module-eval case pins the refusing location and that `/` still proxies.
2026-10-13 21:42:29 +02:00
..
agent-modules
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
container-modules
nix: move the in-container modules to nix/container-modules/
2026-09-29 19:51:46 +02:00
docs
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
host-modules
grafana: the published vhost refuses /metrics
2026-10-13 21:42:29 +02:00
module-eval
grafana: the published vhost refuses /metrics
2026-10-13 21:42:29 +02:00
packages
swarm-logs-auth: check agent tokens on the log store's query route
2026-10-13 08:38:05 +02:00
script-tests
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
templates
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
checks.nix
refresh-consumer: compare mtimes locale-independently so an unchanged secret doesn't restart its unit
2026-10-13 17:00:56 +02:00
devshell.nix
swarm-controller: end a dead replay, clamp stale resume ids, test on a real server
2026-10-11 23:26:24 +02:00
journald-severity.nix
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
reserved-hive-fragments.nix
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
reserved-names.nix
agents: remove send(operator) and the operator inbox; alert on turn failures
2026-10-12 08:50:06 +02:00
rust.nix
add review classifier rules for this repo
2026-10-12 21:05:38 +02:00
sources.nix
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt.nix
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00