atlas
d30cb7d122
keep authelia's oidc client secrets in the store, not on disk ...
The mint creates each client's secret in the swarm secret store and writes only the digest to disk. It mints only when the store answers and holds none. A new unit moves the plaintext files an earlier release left into the store and removes each once the store holds the same value. The bridge reads its secret from the store into /run before each start. The secret publisher unit and its path unit are gone.
2026-10-30 16:57:58 +01:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
drop the shared hive agent login
2026-10-24 14:00:26 +02:00
add rea agent module and reverse-engineer archetype
2026-10-27 11:33:04 +01:00
keep the backend file order case independent of the proxy file
2026-10-28 17:24:34 +01:00
run agent containers on an ephemeral root, salvaging the old one first
2026-10-28 20:00:12 +01:00
force each container's unit configs in the checks about it
2026-10-25 21:50:35 +01:00
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep the matrix appservice registration in bao, with the host file as the last copy
2026-10-27 17:33:06 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
container collectors scrape their own telemetry and push it up their hop
2026-10-28 23:02:18 +01:00
egress dashboard: match squid's result codes by prefix
2026-10-30 16:15:19 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
drop the hive-side matrix code: sweep, hivectl matrix and the apiUrl option
2026-10-28 23:04:55 +01:00
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
queue collector exports on disk and retry without a time limit
2026-10-26 23:19:59 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
declare the root-check link on hosts without a controller too
2026-10-30 11:18:53 +01:00
d30cb7d122