bedfa786a7
A local time-series database rather than only an external sink, so the swarm dashboard stays readable when the outside world is not: a view of the system must not depend on the system it views being healthy. listenAddress is pinned to loopback. Upstream defaults it to every interface, and the OTLP ingest path this exists to receive on is unauthenticated — the gateway is the only intended client and it is on this host, so a wider bind would publish a write endpoint to whatever the host is reachable on. retentionPeriod defaults high rather than being required, because the two failure directions are not symmetric: too long fills a disk, which is visible and recoverable by lowering it, while too short destroys history silently and permanently. The operator lowers it once they have measured how fast this swarm accumulates. OTLP needs no flag. Measured against the pinned 1.146.0 rather than inferred from the module's option list, which has no OTLP switch and so reads as though the feature were missing: the running server answers POST /opentelemetry/api/v1/push with 200, where a nonexistent path answers 400.
37 lines
1.2 KiB
Nix
37 lines
1.2 KiB
Nix
# The full hyperhive host stack, pulled together in one place — this
|
|
# is what the flake exports as `nixosModules.default` (wrapped with
|
|
# the package/source wiring; see flake.nix). One import covers
|
|
# everything; `services.hyperhive.enable = true` turns the stack on.
|
|
#
|
|
# The forge is mandatory — hive-c0re mirrors every agent's applied
|
|
# config repo into it and it's the canonical store for the meta flake
|
|
# + `internal/*` repos, so there's no enable toggle; it deploys with
|
|
# hyperhive itself. hive-matrix is opt-in (off by default). All
|
|
# subsystems rely on `services.hyperhive.domain`, which is required
|
|
# (asserted in hive-network.nix) whenever hyperhive is enabled.
|
|
{
|
|
imports = [
|
|
./hyperhive.nix
|
|
./local-defaults.nix
|
|
./hive-c0re
|
|
./hive-ci.nix
|
|
./hive-forge
|
|
./hive-gateway
|
|
./hive-matrix.nix
|
|
./hive-network.nix
|
|
./hive-priv.nix
|
|
./hive-tls.nix
|
|
./otel.nix
|
|
./swarm-authelia.nix
|
|
./swarm-ca.nix
|
|
./swarm-nats.nix
|
|
./swarm-controller.nix
|
|
./swarm-snapshot-store.nix
|
|
./swarm-ui.nix
|
|
./swarm-victoriametrics.nix
|
|
./swarm-wireguard.nix
|
|
./swarm.nix
|
|
./swarm-peers-removed.nix
|
|
./swarm-required-services.nix
|
|
];
|
|
}
|