Watch
0
0
Fork
You've already forked hyperhive
0
hyperhive/nix/script-tests
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas d30cb7d122 keep authelia's oidc client secrets in the store, not on disk
The mint creates each client's secret in the swarm secret store and writes only the digest to disk. It mints only when the store answers and holds none. A new unit moves the plaintext files an earlier release left into the store and removes each once the store holds the same value. The bridge reads its secret from the store into /run before each start. The secret publisher unit and its path unit are gone.
2026-10-30 16:57:58 +01:00
..
agent-backend-env-fake-bao.sh fetch the agent's backend env file from the store, seeded from the existing file 2026-10-28 01:24:29 +01:00
agent-backend-env.nix fetch the agent's backend env file from the store, seeded from the existing file 2026-10-28 01:24:29 +01:00
agent-backend-env.sh fetch the agent's backend env file from the store, seeded from the existing file 2026-10-28 01:24:29 +01:00
agent-bao-fetch.nix send agent traffic through squid once its hive announces it 2026-10-28 17:24:34 +01:00
agent-bao-fetch.sh send agent traffic through squid once its hive announces it 2026-10-28 17:24:34 +01:00
agent-hive-facts.nix hand agents the dashboard port, pinned claude and otel labels at container start 2026-10-22 07:11:46 +02:00
agent-hive-facts.sh send agent traffic through squid once its hive announces it 2026-10-28 17:24:34 +01:00
agent-memory-cap.nix agents: hand over the kept drop-in's cap, warn at boot without one 2026-10-12 10:59:12 +02:00
agent-memory-cap.sh agents: always write the memory cap, infinity for none 2026-10-12 10:59:12 +02:00
attic-init.nix copy the cache's pull facts to each hive and create them in the in-swarm cache 2026-10-28 01:19:56 +01:00
attic-init.sh let the operator's oidc login write the cache's tokens and facts 2026-10-29 00:09:12 +01:00
attic-root-facts.nix keep the cache's key and pull token for hive-priv in a root-only directory 2026-10-28 10:23:01 +01:00
attic-root-facts.sh keep the cache's key and pull token for hive-priv in a root-only directory 2026-10-28 10:23:01 +01:00
nats-render-config.nix swarm-nats: take the callout issuer and user keys from the store 2026-10-06 14:53:33 +02:00
nats-render-config.sh swarm-nats: take the callout issuer and user keys from the store 2026-10-06 14:53:33 +02:00
oidc-client-secrets.nix keep authelia's oidc client secrets in the store, not on disk 2026-10-30 16:57:58 +01:00
oidc-client-secrets.sh keep authelia's oidc client secrets in the store, not on disk 2026-10-30 16:57:58 +01:00
refresh-consumer.nix swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare 2026-10-13 17:00:56 +02:00
refresh-consumer.sh swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare 2026-10-13 17:00:56 +02:00
store-seeded-secret.nix keep authelia's keys in bao, seeded from the existing key files 2026-10-27 16:01:57 +01:00
store-seeded-secret.sh keep authelia's keys in bao, seeded from the existing key files 2026-10-27 16:01:57 +01:00