atlas
ddb583cc22
gateway: service modules declare their vhost under gateway.vhosts
...
Ten service modules (forge, matrix chat, authelia, grafana, otel, nats,
swarm-ui, victorialogs, victoriametrics, bao UI) wrote
services.nginx.virtualHosts themselves, each applying the gateway's
listen set, per-name TLS attrs and security headers by hand. They now
declare services.hyperhive.gateway.vhosts.<name> with only their own
locations and options; ./declared-vhosts.nix renders it into the nginx
vhost with listen, TLS and headers added.
An eval assertion refuses a declared vhost that sets listen, addSSL,
onlySSL, enableACME, useACMEHost, sslCertificate or sslCertificateKey,
and one declared while the gateway is off. nats' own leaf is the new
`certificate` field. The rendered nginx vhosts are unchanged.
2026-10-16 12:47:03 +02:00
..
agent-forge-bao.nix
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agent-github-bao.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-icon.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-matrix.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-memory.nix
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
agent-otel.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-plugins.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-queue-bao.nix
module-eval: restore agentWith in agent-queue-bao.nix
2026-10-13 14:56:25 +02:00
agent-runtime.nix
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
agent-user.nix
module-eval: agent-user test asserts the heal_own_dir form
2026-10-09 11:30:30 +02:00
bao-basics.nix
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
bao-controller.nix
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
bao-grants.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
bao-matrix-reader.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
bao-otel-collector.nix
swarm-bao: keep the store forwarder's OIDC secret on the host's /run, not in the container's root
2026-10-15 22:39:39 +02:00
builder.nix
swarm-bao-pki: enabling a service mints its client leaf on the same switch
2026-10-15 08:31:33 +02:00
core-toggle.nix
otel: agents reach their hive's collector by a swarm-wide name
2026-10-16 09:06:41 +02:00
forge-placement.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
grafana.nix
gateway: service modules declare their vhost under gateway.vhosts
2026-10-16 12:47:03 +02:00
hive-otel.nix
gateway: send nginx stub_status to VictoriaMetrics, add a gateway dashboard
2026-10-16 10:01:58 +02:00
hive-tls.nix
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
journald-severity.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
lib.nix
swarm-ui: package option moves to deploy.swarm-controller.ui.package
2026-10-16 00:35:16 +02:00
matrix-core.nix
hive-matrix: keep tuwunel's OIDC secret on the host's /run, not in the container's root
2026-10-15 23:31:32 +02:00
name-guards.nix
swarm: refuse swarm.hives keys that are not valid hive identifiers
2026-10-12 21:45:50 +02:00
nats-authelia.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
nats-tls.nix
forge: hand the OIDC client secret to forgejo from /run, not from the container's disk
2026-10-15 21:21:50 +02:00
secret-publisher.nix
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
shared.nix
module-eval: three duplicate nixosSystem fixtures come from shared.nix
2026-10-15 08:29:58 +02:00
snapshot-store.nix
snapshot store: test the sender deadlines and the receiver bounds
2026-10-16 11:45:58 +02:00
swarm-otel-core.nix
swarm-otel: keep the collector's OIDC secret on the host's /run, not in the container's root
2026-10-15 21:45:48 +02:00
swarm-otel-identity.nix
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
swarm-services-switch.nix
swarm containers: run the claude-code the hive pins for agents
2026-10-16 01:29:15 +02:00