atlas
8371e1ca62
glue-matrix-bao-token: state the bound the comment claims ...
The comment said it bounds the wait rather than hanging the boot, and
nothing in the unit bounded anything. What actually held was systemd's
default start timeout plus the homeserver only Wants= this unit — both
true, neither stated here, so a reader had to already know them.
TimeoutStartSec puts the number a boot waits on in the file that waits,
and the comment now names the degradation: hitting it keeps the locally
minted token, same as every other failure path in this unit.
Caught by argus reviewing the slice it shipped in.
2026-08-30 19:10:48 +02:00
matrix: forward the homeserver URL from client hives too
2026-08-30 15:17:02 +02:00
deploy: move the forge CI runner toggle out of swarm
2026-08-30 16:07:21 +02:00
gateway: move verifiedProxyTo's 42-line rationale comment to docs/gateway.md
2026-08-28 10:48:26 +02:00
fix( #3527 ): a missing source must report as zero, not as empty
2026-08-19 20:27:00 +02:00
swarm-grafana /dashboards
grafana: rank the by-label panel as bars, and stop calling it open issues
2026-08-28 13:23:25 +02:00
glue-matrix-bao-token: the store's first reader
2026-08-30 19:01:10 +02:00
deploy: which host runs the secret store is its own decision
2026-08-30 18:54:35 +02:00
glue-bao-tls: mint the store an identity it can hold before it is up
2026-08-30 19:01:10 +02:00
glue-matrix-bao-token: state the bound the comment claims
2026-08-30 19:10:48 +02:00
deploy: move the forge CI runner toggle out of swarm
2026-08-30 16:07:21 +02:00
deploy: move the matrix homeserver toggle out of swarm
2026-08-30 15:17:02 +02:00
require network isolation, deleting the residual non-isolated branch
2026-08-30 03:32:08 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
deploy: give every option an enable, and name the controller one
2026-08-30 04:23:22 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
local-defaults: assert the controller through deploy, not the old alias
2026-08-30 04:23:22 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
swarm-bao: the cert paths do have a default, from the glue
2026-08-30 19:10:48 +02:00
swarm-otel: collect only the units the swarm's services declare
2026-08-24 22:05:45 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
deploy: which host runs the secret store is its own decision
2026-08-30 18:54:35 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
deploy: give every option an enable, and name the controller one
2026-08-30 04:23:22 +02:00
deploy: retention is the store host's decision, not the swarm's
2026-08-30 16:23:48 +02:00
deploy: retention is the store host's decision, not the swarm's
2026-08-30 16:23:48 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
deploy: name the swarm collector swarm-otel, not otel
2026-08-30 04:23:22 +02:00
8371e1ca62