Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
iris ab30c3dc7d builds board: a Grafana dashboard of the container builds, from the lines hive-c0re logs ... A builds tab (counts, failures, longest, builds over time by outcome, a table of each build) and an output tab (every line of the build picked in the Build filter). The table joins its grouped stats by labels, one row per build.		2026-11-01 17:18:58 +01:00
..
hive-c0re	remove the hive-c0re forge-credential chain nothing reads any more	2026-10-29 22:55:31 +01:00
hive-forge	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
hive-gateway	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
lib	run opted-in agents in a user namespace with a dedicated data owner	2026-11-01 17:06:18 +01:00
swarm-grafana/dashboards	builds board: a Grafana dashboard of the container builds, from the lines hive-c0re logs	2026-11-01 17:18:58 +01:00
bao-bootstrap-policy.hcl	bao: disable the unused approle auth method, declaratively	2026-09-28 22:58:36 +02:00
default.nix	run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template	2026-10-28 23:50:58 +01:00
deploy.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-attic-otel-oidc-client.nix	forward the attic container's journal to the swarm collector	2026-10-27 16:03:23 +01:00
glue-bao-readers-policy-order.nix	copy the cache's pull facts to each hive and create them in the in-swarm cache	2026-10-28 01:19:56 +01:00
glue-bao-readers-store-order.nix	order the store's readers after its container without wanting it	2026-11-01 13:35:52 +01:00
glue-bao-tls.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
glue-bao-ui-oidc-client.nix	bao: OIDC login to the browser UI via authelia, as a metadata-only viewer	2026-09-28 19:56:38 +02:00
glue-builder-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-ci-metrics-otel-oidc-client.nix	push ci run metrics to victoriametrics, with a grafana board	2026-10-16 20:43:11 +02:00
glue-ci-runner-otel-oidc-client.nix	swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector	2026-10-16 11:22:51 +02:00
glue-claude-login-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-controller-bao-identity.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
glue-controller-env.nix	service urls carry no gateway port, httpsPort is listen-only	2026-10-25 10:45:54 +01:00
glue-controller-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-forge-controller.nix	glue: forge's controller-dependent settings move out of the forge module	2026-10-13 22:14:28 +02:00
glue-forge-oidc-client.nix	nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable	2026-09-26 01:19:49 +02:00
glue-forge-otel-oidc-client.nix	hive-forge, hive-matrix: forward each container's journal to the swarm collector	2026-10-16 13:50:23 +02:00
glue-grafana-oidc-client.nix	nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable	2026-09-26 01:19:49 +02:00
glue-grafana-otel-oidc-client.nix	swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector	2026-10-16 11:22:51 +02:00
glue-hive-otel-authelia.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
glue-hive-tls-bao-identity.nix	hive-tls: the gateway leaf uses the services-issuer identity, not a hive's	2026-10-06 14:54:07 +02:00
glue-hive-tls-controllers.nix	agents fetch the hive CA from bao at boot instead of the meta flake embedding it	2026-10-19 20:15:13 +02:00
glue-logs-auth-bao-identity.nix	swarm-logs-auth: check agent tokens on the log store's query route	2026-10-13 08:38:05 +02:00
glue-matrix-ctl-bao-identity.nix	swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's	2026-10-06 12:04:48 +02:00
glue-matrix-hive-discovery.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
glue-matrix-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-matrix-otel-oidc-client.nix	hive-forge, hive-matrix: forward each container's journal to the swarm collector	2026-10-16 13:50:23 +02:00
glue-metrics-auth-bao-identity.nix	add swarm-metrics, an agent CLI for the metrics store	2026-10-17 10:10:17 +02:00
glue-nats-auth-bao-identity.nix	swarm-nats: the auth responder's store identity path is its own, not the hive's	2026-10-06 10:04:30 +02:00
glue-nats-bao-identity.nix	swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's	2026-10-06 12:04:48 +02:00
glue-nats-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-nats-wireguard.nix	glue: nats firewall on the wireguard interface moves out of the nats module	2026-10-14 10:15:19 +02:00
glue-notify-router-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-review-classifier-oidc-client.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
glue-secret-publisher-authelia.nix	swarm-authelia: run the secret publisher and a journal forwarder inside the container	2026-10-17 00:28:16 +02:00
glue-secret-publisher-bao-identity.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
glue-swarm-bao-otel-oidc-client.nix	ops: update option pointers after grafana/bao split	2026-10-01 09:53:04 +02:00
glue-swarm-otel-oidc-client.nix	ops: update option pointers after otel split	2026-10-01 13:00:40 +02:00
glue-victorialogs-otel-oidc-client.nix	swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector	2026-10-16 11:22:51 +02:00
glue-victoriametrics-otel-oidc-client.nix	swarm-victoriametrics: forward the container's journal to the swarm collector	2026-10-16 14:47:31 +02:00
hive-matrix-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
hive-matrix.nix	containers reach network-online only with a dhcp lease, and bao users wait for it	2026-11-01 11:06:41 +01:00
hive-network.nix	deploy squid on every hive host, with exporter, journal forwarding and self-check	2026-10-27 20:59:06 +01:00
hive-options-removed.nix	publish operators' forge-profile pronouns to kv and list them in the agent prompt	2026-10-17 13:10:05 +02:00
hive-priv-cache.nix	order the store's readers after its container without wanting it	2026-11-01 13:35:52 +01:00
hive-priv.nix	read privateUsers from the closure record at start, and move the data owner option under hive-controller	2026-11-01 17:06:18 +01:00
hive-squid-credential.nix	order the store's readers after its container without wanting it	2026-11-01 13:35:52 +01:00
hive-squid.nix	leave squid's and hive-c0re's journals to the swarm tier when both run on one host	2026-11-01 17:05:40 +01:00
hive-tls.nix	order the store's readers after its container without wanting it	2026-11-01 13:35:52 +01:00
host-ca-removed.nix	drop option renames and removals older than two weeks	2026-10-16 22:04:57 +02:00
hyperhive.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
local-defaults.nix	swarm-nats: take the callout issuer and user keys from the store	2026-10-06 14:53:33 +02:00
nats-callout-removed.nix	docs: put the credentials prose on the overview and the tables on the reference	2026-10-26 18:10:01 +01:00
otel.nix	pin that the hive collector keeps file_storage for its exporter queue without a journald receiver	2026-11-01 17:05:40 +01:00
stylix-theme.nix	swarm-ui: apply the operator's stylix theme, same as the dashboard already does	2026-08-24 14:28:25 +02:00
swarm-attic-options.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-attic.nix	warn when the in-swarm cache runs under another domain	2026-10-29 08:24:44 +01:00
swarm-authelia-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-authelia.nix	retry the authelia mint and the appservice render until the store answers, and let tuwunel retry	2026-11-01 10:47:50 +01:00
swarm-bao-service.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-bao.nix	outlast openbao's cold restart in the agent ca unit's start limit	2026-11-01 15:09:13 +01:00
swarm-builder.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-ci-metrics.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-ci-runner.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-claude-login.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-controller.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-grafana-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-grafana.nix	builds board: a Grafana dashboard of the container builds, from the lines hive-c0re logs	2026-11-01 17:18:58 +01:00
swarm-nats-service.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-nats.nix	order the store's readers after its container without wanting it	2026-11-01 13:35:52 +01:00
swarm-notify-router.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-otel-service.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-otel.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-required-services.nix	default swarm.attic domain and cache to the swarm's own cache on every host	2026-10-27 22:16:26 +01:00
swarm-review-classifier.nix	name the mint, not the publisher, as the writer of the client secrets	2026-10-30 16:57:58 +01:00
swarm-secret-publisher.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-snapshot-store.nix	snapshot store: bound the transfer on both ends	2026-10-16 11:45:58 +02:00
swarm-ui.nix	repeat the security headers in the swarm api 401 location	2026-10-28 23:37:22 +01:00
swarm-victorialogs-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-victorialogs.nix	move the small per-service host options to deploy.<service>	2026-10-29 08:44:11 +01:00
swarm-victoriametrics-service.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00
swarm-victoriametrics.nix	run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template	2026-10-28 23:50:58 +01:00
swarm-wireguard.nix	move hiveName to deploy.hive-controller; only a hive host needs a name	2026-10-26 18:47:49 +01:00
swarm.nix	keep authelia's oidc client secrets in the store, not on disk	2026-10-30 16:57:58 +01:00