atlas
d6d60ff06e
swarm-bao: the reader's identity is not a store-runner option
...
The block header says `deploy.bao.*` is what the host RUNNING the store
decides and that none of it means anything on a host that only reads
secrets. Three options in that block are exactly what a read-only host must
set, and their own descriptions say so a screen further down — so reading
the options never corrects the header.
It reads as though an off-host reader were inexpressible. It is already
supported: glue-matrix-bao-token gates on the identity rather than on
`enable`, and module-eval's baoRemoteReader is that deployment.
Also drops a sentence describing what used to be undeclarable.
2026-09-03 00:29:52 +02:00
..
hive-c0re
hive-c0re: hand the daemon the store identity it cannot open itself
2026-09-03 00:29:52 +02:00
hive-forge
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
hive-gateway
gateway: file nginx error lines at their own severity
2026-09-02 17:56:15 +02:00
lib
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-grafana /dashboards
treefmt: apply prettier
2026-09-02 15:25:07 +02:00
default.nix
glue-matrix-bao-token: the store's first reader
2026-08-30 19:01:10 +02:00
deploy.nix
deploy: move the hive CA's knobs to deploy.hive-controller.tls
2026-08-30 20:52:00 +02:00
glue-bao-tls.nix
swarm-bao: ship the store's logs and metrics
2026-08-31 21:25:00 +02:00
glue-matrix-bao-token.nix
swarm-bao: ship the store's logs and metrics
2026-08-31 21:25:00 +02:00
hive-ci.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
hive-matrix.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
hive-network.nix
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
hive-priv.nix
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
hive-tls.nix
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
hyperhive.nix
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
local-defaults.nix
deploy: rename enableAllLocalDefaults to deploy.singleHostSwarm
2026-08-30 20:12:16 +02:00
otel.nix
deploy: move the hive CA's knobs to deploy.hive-controller.tls
2026-08-30 20:52:00 +02:00
stylix-theme.nix
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
swarm-authelia.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-bao.nix
swarm-bao: the reader's identity is not a store-runner option
2026-09-03 00:29:52 +02:00
swarm-ca.nix
swarm-ca: state the store-is-world-readable rule once, not three times
2026-09-02 09:03:35 +02:00
swarm-container-resolver.nix
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm-controller.nix
swarm: remove swarm.ui.domain, serve the UI on the swarm domain
2026-08-31 19:00:52 +02:00
swarm-grafana.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-nats.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-otel.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-peers-removed.nix
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
swarm-required-services.nix
deploy: rename enableAllLocalDefaults to deploy.singleHostSwarm
2026-08-30 20:12:16 +02:00
swarm-snapshot-store.nix
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
swarm-ui.nix
swarm: remove swarm.ui.domain, serve the UI on the swarm domain
2026-08-31 19:00:52 +02:00
swarm-victorialogs.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-victoriametrics.nix
containers: put journal files on the host, where the collector looks
2026-09-02 23:00:30 +02:00
swarm-wireguard.nix
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
swarm.nix
swarm: remove swarm.ui.domain, serve the UI on the swarm domain
2026-08-31 19:00:52 +02:00