atlas
d30cb7d122
keep authelia's oidc client secrets in the store, not on disk ...
The mint creates each client's secret in the swarm secret store and writes only the digest to disk. It mints only when the store answers and holds none. A new unit moves the plaintext files an earlier release left into the store and removes each once the store holds the same value. The bridge reads its secret from the store into /run before each start. The secret publisher unit and its path unit are gone.
2026-10-30 16:57:58 +01:00
lint: tighten atomic-write-secret.nix's header comment; fix vale contractions in persistence.md
2026-09-26 21:50:03 +02:00
copy the cache's pull facts to each hive and create them in the in-swarm cache
2026-10-28 01:19:56 +01:00
keep the cache's key and pull token for hive-priv in a root-only directory
2026-10-28 10:23:01 +01:00
swarm-nats: the auth responder's store identity path is its own, not the hive's
2026-10-06 10:04:30 +02:00
run the platform containers' root check through a build-independent path
2026-10-30 11:13:16 +01:00
tls: a CA root change no longer restarts the store or bounces containers
2026-10-21 22:00:13 +02:00
keep each hive's otel oidc secret on /run, not /var/lib
2026-10-25 11:16:24 +01:00
swarm: refuse swarm.hives keys that are not valid hive identifiers
2026-10-12 21:45:50 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
nix: re-run the host's store fetches on a ten-minute timer
2026-10-13 00:03:20 +02:00
credential units: restart consumers on a changed credential; fix the ordering claim
2026-09-30 07:45:47 +02:00
keep authelia's keys in bao, seeded from the existing key files
2026-10-27 16:01:57 +01:00
d30cb7d122