atlas
7a9fadc21a
host-modules: convert swarm-bao's HSM-PIN env writer to atomic_write_secret ...
swarm-bao-token's pin.env write (the BAO_HSM_PIN EnvironmentFile for
openbao's pkcs11 seal) had the same write-then-chmod-on-live-path
shape as the sites already converted: printf > path directly on the
live file, chmod after. Same fix, same helper. Content
("BAO_HSM_PIN=<user-pin>\n") and final mode (0400, root-owned — no
chown, same as before) are unchanged; pin.env stays at the same path,
so openbao's EnvironmentFile= reference needs no change.
Refs #4723
2026-09-26 21:50:03 +02:00
host-modules: write credential files atomically; agent-modules: retry a failed .claude migration
2026-09-26 21:50:03 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
host-modules: convert swarm-bao's HSM-PIN env writer to atomic_write_secret
2026-09-26 21:50:03 +02:00
module-eval: read the services-leaf narrowing off a forge host
2026-09-26 01:39:22 +02:00
swarm-matrix-ctl: one control binary for the matrix container, not one per job
2026-09-20 22:07:16 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
hive-tls: renew the swarm-services leaf on a daily timer
2026-09-25 23:38:36 +02:00
Add shellcheck to devshell
2026-09-15 21:45:58 +02:00
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-controller: refuse a new agent name the forge would reject
2026-09-24 15:16:32 +02:00
docs(rust): the dep-cache comment no longer describes two consumers
2026-08-11 22:29:56 +02:00
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00
7a9fadc21a