atlas
d5782965db
refactor(3202): the gateway publishes its vhost construction kit ...
Slice 1 of #3202 . The listen set, the per-name TLS attrs and the
security headers move out of vhosts.nix into ./vhost-lib.nix and are
published as `services.hyperhive.gateway.lib` (internal, readOnly).
No behaviour change: vhosts.nix consumes the published value, so the
rendered vhost tree is identical.
The point is the next slice. Today a swarm service's vhost lives in
the gateway because only the gateway knows the port pair, the issuer
for a name, and the header block. Publishing those three is what lets
a service module declare its own vhost without the gateway having to
know that service by name.
2026-08-13 12:46:50 +02:00
fix(3191): let hive-c0re write the gateway conf dir under strict sandboxing
2026-08-12 16:39:58 +02:00
fix(3149): the forge container can resolve the authelia name
2026-08-12 21:09:21 +02:00
refactor(3202): the gateway publishes its vhost construction kit
2026-08-13 12:46:50 +02:00
feat(nix): issue each hive's CA under a swarm root CA
2026-08-05 15:57:50 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
docs(3191): drop the migration history from the gateway comments
2026-08-12 13:26:58 +02:00
docs(3191): the gateway's comments describe a host service, not a container
2026-08-12 12:20:28 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
docs(3191): drop the migration history from the gateway comments
2026-08-12 13:26:58 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
feat(3089): all-local asserts the swarm controller
2026-08-11 23:50:19 +02:00
refactor: nix/host-modules + nix/agent-modules layout, update doc paths
2026-07-13 22:05:49 +02:00
docs(3167): the setup guide gains a swarm UI step, and one group name
2026-08-12 17:57:52 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
swarm-ui: real hive-roster overview page
2026-08-13 11:21:30 +02:00
refactor(nix): swarm.peers becomes swarm.hives, a directory of every hive
2026-08-05 20:44:16 +02:00
refactor(nix): make all-local a deployment mode, not a default
2026-08-05 19:41:11 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
fix(3167): wire the swarm-ui package from the flake, not a pkgs attr
2026-08-12 17:49:21 +02:00
refactor(nix): swarm.peers becomes swarm.hives, a directory of every hive
2026-08-05 20:44:16 +02:00
feat(3167): options + certificate name for the swarm UI
2026-08-12 17:29:13 +02:00
d5782965db