atlas
b422367942
deploy: separate "what this host deploys" from swarm-wide truth ...
`services.hyperhive.swarm.*` is meant to be identical on every host in a
swarm — it describes the swarm, and every hive needs all of it to be a
client. But it also carried the `enable` toggles, which are precisely the
values that must differ per machine. The namespace that should be the
same everywhere held the one thing that cannot be.
Adds `services.hyperhive.deploy.*` for a host's deployment decisions, and
moves the first of them (`swarm.grafana.enable` -> `deploy.grafana`) as
the pattern for the rest. Flat and named for the thing deployed rather
than grouped under a "swarm services" attribute: from the deploy side it
does not matter what kind of thing each one is, and a grouping by service
kind would re-encode the service-side taxonomy into a layer that does not
care about it.
Behaviour is unchanged. The move is a rename in the strict sense — same
type, same meaning, new path — so `mkRenamedOptionModule` carries it and
existing configs keep evaluating with one warning naming both paths. The
renames live in the new module rather than the service modules, so the
whole migration has a single home and a single file to delete when the
deprecation window closes.
2026-08-30 04:23:22 +02:00
types: let nix own the reserved-name blacklist
2026-08-27 16:36:42 +02:00
gateway: pin the Host header when dialing swarm services by name
2026-08-27 20:04:40 +02:00
gateway: move verifiedProxyTo's 42-line rationale comment to docs/gateway.md
2026-08-28 10:48:26 +02:00
fix( #3527 ): a missing source must report as zero, not as empty
2026-08-19 20:27:00 +02:00
swarm-grafana /dashboards
grafana: rank the by-label panel as bars, and stop calling it open issues
2026-08-28 13:23:25 +02:00
deploy: separate "what this host deploys" from swarm-wide truth
2026-08-30 04:23:22 +02:00
deploy: separate "what this host deploys" from swarm-wide truth
2026-08-30 04:23:22 +02:00
nix, hive-sh4re: name modules that exist in the stale harness-base refs
2026-08-30 04:19:11 +02:00
forge, matrix: SSO is not optional
2026-08-24 23:06:25 +02:00
require network isolation, deleting the residual non-isolated branch
2026-08-30 03:32:08 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
fix( #3462 ): apply the name check in the unit that runs on the deploy
2026-08-18 21:54:38 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
fix( #3343 ): move the all-local queue derivations into the deployment mode
2026-08-16 19:37:49 +02:00
otel: give host metrics a host identity via resourcedetection
2026-08-27 10:49:30 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
swarm-authelia: stop answering machine callers with a 200 error page
2026-08-27 14:04:18 +02:00
swarm-otel: collect only the units the swarm's services declare
2026-08-24 22:05:45 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm-otel/swarm-controller: authenticate + route the swarm-tier OTLP producer through the gateway
2026-08-29 11:17:24 +02:00
deploy: separate "what this host deploys" from swarm-wide truth
2026-08-30 04:23:22 +02:00
swarm-nats: manual callout needs all four keys, not two
2026-08-24 23:06:59 +02:00
swarm-otel/swarm-controller: authenticate + route the swarm-tier OTLP producer through the gateway
2026-08-29 11:17:24 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
deploy: separate "what this host deploys" from swarm-wide truth
2026-08-30 04:23:22 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
gateway: pin the Host header when dialing swarm services by name
2026-08-27 20:04:40 +02:00
gateway: pin the Host header when dialing swarm services by name
2026-08-27 20:04:40 +02:00
swarm-otel: collect only the units the swarm's services declare
2026-08-24 22:05:45 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
deploy: separate "what this host deploys" from swarm-wide truth
2026-08-30 04:23:22 +02:00
b422367942