atlas
c32a9367e4
gateway: reject unmatched Host instead of serving the dashboard ...
The `_` vhost was serving the hive's own surface, so every dashboard and
agent-UI request matched the default server rather than a named vhost --
and so did a request for any name at all, including a raw IP.
Split it: `_` keeps only `return 444`, and the hive surface moves to a
vhost named for the hive domain. `_` is `mkDefault` so an operator can
claim default_server themselves, plus an assertion for the case where
they add one without turning ours off -- nginx refuses to start on a
duplicate default_server and nixpkgs asserts nothing, so that would
otherwise surface as a gateway outage at rebuild time.
2026-08-13 19:57:27 +02:00
fix(3191): let hive-c0re write the gateway conf dir under strict sandboxing
2026-08-12 16:39:58 +02:00
refactor(3202): the forge declares its own vhost and dns name
2026-08-13 16:14:36 +02:00
gateway: reject unmatched Host instead of serving the dashboard
2026-08-13 19:57:27 +02:00
feat(nix): issue each hive's CA under a swarm root CA
2026-08-05 15:57:50 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
refactor(3202): matrix declares its own vhost, dns name and SPA map
2026-08-13 16:14:37 +02:00
docs(3191): the gateway's comments describe a host service, not a container
2026-08-12 12:20:28 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
docs(3191): drop the migration history from the gateway comments
2026-08-12 13:26:58 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
refactor(3202): all-local asserts the host's own /etc/hosts entries
2026-08-13 17:26:08 +02:00
refactor: nix/host-modules + nix/agent-modules layout, update doc paths
2026-07-13 22:05:49 +02:00
refactor(3202): authelia declares its own vhost and dns name
2026-08-13 16:14:37 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
swarm-ui: real hive-roster overview page
2026-08-13 11:21:30 +02:00
refactor(nix): swarm.peers becomes swarm.hives, a directory of every hive
2026-08-05 20:44:16 +02:00
refactor(nix): make all-local a deployment mode, not a default
2026-08-05 19:41:11 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
refactor(3202): the swarm UI declares its own vhost and dns name
2026-08-13 16:19:08 +02:00
refactor(nix): swarm.peers becomes swarm.hives, a directory of every hive
2026-08-05 20:44:16 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
c32a9367e4