atlas
aa719da571
nix: ship the journals of the units an apply can leave failed ...
The units on the path a deploy takes to TLS, the store's grants and the
swarm collector itself were not on the host collector's journald
allowlist, so an ingest outage one of them caused showed in the store
only as every source going quiet at once.
Each module names its own units, per the option's rule:
- hive-tls.nix: hive-tls-ca, swarm-services-cert
- hive-gateway: hive-gateway-self-signed-cert (self-signed mode only)
- swarm-bao.nix: the seven grant units beside
swarm-bao-services-issuer-policy
- swarm-otel.nix: container@<machine>, and
nixos-rebuild-switch-to-configuration, the transient unit nixos-rebuild
runs the activation in and whose syslog lines carry its status
The module-eval arm pins each unit as both listed and defined, since a
listed name that matches nothing is silent.
2026-09-24 15:14:44 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
nix: ship the journals of the units an apply can leave failed
2026-09-24 15:14:44 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-grafana /dashboards
swarm-grafana: replace busiest-agents bargauges with an actual table
2026-09-20 23:40:21 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
swarm-controller: make socketPath readOnly instead of asserting it
2026-09-17 19:27:30 +02:00
nix: unbreak the swarm-services leaf the gateway waits on
2026-09-23 21:36:46 +02:00
swarm-controller: hand the daemon the authority hives are issued from
2026-09-10 00:25:07 +02:00
swarm-grafana: deliver the OIDC client secret through the secret store
2026-09-13 19:57:28 +02:00
swarm-bao: refuse a remote reader that named seven of the eight leaves
2026-09-23 10:11:42 +02:00
swarm-matrix-ctl: one control binary for the matrix container, not one per job
2026-09-20 22:07:16 +02:00
swarm-bao: refuse a remote reader that named seven of the eight leaves
2026-09-23 10:11:42 +02:00
swarm: publish minted OIDC client secrets into the swarm store
2026-09-12 11:22:33 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
nix: the store's own collector scrapes its metrics listener
2026-09-21 17:19:52 +02:00
swarm-otel: deliver the OIDC client secret through the secret store
2026-09-14 00:58:58 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
nix: ship the journals of the units an apply can leave failed
2026-09-24 15:14:44 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
bao: write the swarm controller's policy from inside the store
2026-09-07 18:43:09 +02:00
otel.nix: trim the StartLimit comment block to the load-bearing points
2026-09-23 17:22:51 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
nix: ship the journals of the units an apply can leave failed
2026-09-24 15:14:44 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
swarm-bao: give each hive-cert consumer its own bao identity
2026-09-23 10:11:42 +02:00
nix: make swarm.authelia.url non-nullable, trim its docs
2026-09-21 18:14:28 +02:00
nix: ship the journals of the units an apply can leave failed
2026-09-24 15:14:44 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: the store's own collector scrapes its metrics listener
2026-09-21 17:19:52 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
nix: give the gateway, resolver and bridge their own enable
2026-09-19 13:53:10 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
nix: issue the swarm-services leaf from bao's pki mount
2026-09-23 21:00:02 +02:00
aa719da571