atlas
8c2f81abad
hive-tls: say the root fetch uses the reader cert for the handshake only ...
`baoClientCertFile`'s description said the services-cert unit had no
business holding `deploy.bao.clientCertFile`. Under mara's ruling that
every hive has a store identity, the root fetch presents that reader
cert. It is used only for the mTLS handshake of `pki/ca/pem`, which takes
no token, and the unit never logs in with it. The description now says
so, and the fetch is marked interim until each hive has its own narrow
store identity.
Refs #4588 (review c88790).
2026-10-04 14:37:50 +02:00
swarm: show subagent terminals in the swarm UI
2026-10-03 01:34:01 +02:00
nix: move the in-container modules to nix/container-modules/
2026-09-29 19:51:46 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
hive-tls: say the root fetch uses the reader cert for the handshake only
2026-10-04 14:37:50 +02:00
hive-tls: skip the store root fetch on a hive with no store identity
2026-10-04 14:37:50 +02:00
swarm-matrix-ctl: one control binary for the matrix container, not one per job
2026-09-20 22:07:16 +02:00
hive-agent: read the per-agent queue secret from bao in process
2026-09-29 10:18:07 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
github: PATs live in swarm bao; the agent fetches them itself
2026-10-02 17:48:27 +02:00
Add shellcheck to devshell
2026-09-15 21:45:58 +02:00
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-controller: refuse a new agent name the forge would reject
2026-09-24 15:16:32 +02:00
docs(rust): the dep-cache comment no longer describes two consumers
2026-08-11 22:29:56 +02:00
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00
8c2f81abad