atlas
68e30957e2
gateway: declare the gateway's own vhosts under gateway.vhosts
...
The catch-all, the dashboard and the hive-domain vhost were built in
vhosts.nix with the listen set, TLS attrs and headers applied by hand.
They are declared under services.hyperhive.gateway.vhosts now, so every
vhost behind the gateway goes through declared-vhosts.nix.
Two gateway-side rules cover what the catch-all needed: a vhost can set
securityHeaders = false (the catch-all only returns 444), and `default`
is rendered at mkDefault priority so an operator's own default vhost
still wins. The matrix discovery locations are unchanged.
The rendered nginx vhosts are unchanged.
2026-10-16 13:51:20 +02:00
..
agent-modules
permissions: drop the capability and tool-group wording left after the rework
2026-10-15 18:01:40 +02:00
builder /check-flake
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
container-modules
swarm-nats: forward the queue container's journal to the swarm collector
2026-10-16 09:08:21 +02:00
docs
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
host-modules
gateway: declare the gateway's own vhosts under gateway.vhosts
2026-10-16 13:51:20 +02:00
module-eval
gateway: declare the gateway's own vhosts under gateway.vhosts
2026-10-16 13:51:20 +02:00
packages
reference-docs: build again with 40 workspace crates
2026-10-15 15:32:20 +02:00
script-tests
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
templates
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
checks.nix
module-eval: three duplicate nixosSystem fixtures come from shared.nix
2026-10-15 08:29:58 +02:00
devshell.nix
CI and devshell comments say what the config does: jobTimeout bounds jobs, coverage runs nightly, dead timeout keys removed
2026-10-15 08:27:32 +02:00
journald-severity.nix
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
reserved-hive-fragments.nix
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
reserved-names.nix
swarm-builder: scope the forge token to the forge, one build at a time, opt-in
2026-10-14 03:30:46 +02:00
rust.nix
add review classifier rules for this repo
2026-10-12 21:05:38 +02:00
sources.nix
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt.nix
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00