atlas
94204ac82b
fix(swarm-authelia): guard bearerAuthz against a silent no-op on kind ...
Review found that nothing stopped `bearerAuthz = true` on an interactive
client. `renderClient` reads the flag only in the machine branch, so the
scope is never emitted: the client authenticates, is authorised for
nothing, and the build is green. `kind` defaults to `interactive`, so it
is reached by forgetting a field rather than by writing a wrong one —
this module's own failure mode one level up.
The other half of the review asked to relax the method assertion to
accept `null`, on the strength of the option's doc calling `null`
authelia's default. Measured instead: under `authelia.bearer.authz`
authelia refuses the omission outright, so the assertion was right and
the DOC was wrong. The doc now carries the exception, and the assertion
message says null is refused rather than leaving a reader to infer it.
2026-08-24 13:35:14 +02:00
fix(otel): let the SDK resolve hive-c0re's OTLP endpoint
2026-08-19 01:38:54 +02:00
feat( #3517 ): register the swarm collector as an audienced oauth2 client
2026-08-24 13:35:14 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3527 ): a missing source must report as zero, not as empty
2026-08-19 20:27:00 +02:00
swarm-grafana /dashboards
feat( #3494 ): provision the claude-usage dashboard
2026-08-23 23:21:50 +02:00
feat( #3125 ): a swarm-tier OTEL collector, in its own container
2026-08-18 21:02:18 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
feat( #3162 ): warn when a hive with an existing homeserver has not pinned serverName
2026-08-18 12:29:31 +02:00
docs(network): drop the otel reasoning instead of restating it
2026-08-19 02:04:57 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
fix( #3462 ): apply the name check in the unit that runs on the deploy
2026-08-18 21:54:38 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
fix( #3343 ): move the all-local queue derivations into the deployment mode
2026-08-16 19:37:49 +02:00
feat( #3554 ): let a hive-owned service declare a scrape target
2026-08-23 22:45:56 +02:00
fix(swarm-authelia): guard bearerAuthz against a silent no-op on kind
2026-08-24 13:35:14 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm-ui: show the swarm's name as the page title and top-left brand
2026-08-18 18:34:56 +02:00
feat( #3494 ): provision the claude-usage dashboard
2026-08-23 23:21:50 +02:00
fix( #3363 ): give the queue's auth responder the hive CA
2026-08-17 19:57:44 +02:00
feat( #3517 ): register the swarm collector as an audienced oauth2 client
2026-08-24 13:35:14 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
feat( #3125 ): reshape the hive-to-swarm OTEL hop by domain
2026-08-18 21:02:18 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
swarm-ui: header profile menu — initials avatar, authelia settings + logout ( #3570 )
2026-08-24 00:01:30 +02:00
feat(swarm-victoriametrics): scrape the store's own prometheus endpoint
2026-08-19 21:40:40 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3462 ): the swarm-services leaf never covered grafana, metrics or otel
2026-08-18 21:54:38 +02:00
94204ac82b