Watch
0
0
Fork
You've already forked hyperhive
0
hyperhive/nix/host-modules
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas f3c0a87c0f hand agents the queue address at container start
HIVE_AGENT_NATS_URL now reaches each container in its hive facts, from
the host's deploy.hive-controller.queue.agentNatsUrl, instead of being
rendered into the meta flake. The agent option
services.hyperhive.agent.queue.natsUrl is removed; the harness unit
imports the queue credential whenever the token endpoint is set.

On deploy every agent rebuilds once (the rendered flake loses the
address), and the harness reads the address from the facts file
hive-priv writes before each start.

Refs #4857
2026-10-24 21:13:24 +02:00
..
hive-c0re hand agents the queue address at container start 2026-10-24 21:13:24 +02:00
hive-forge Revert "drop port-collision checks against swarm.otel.telemetryPort" 2026-10-24 15:09:11 +02:00
hive-gateway every hive runs its otel collector, and agents export to it by default 2026-10-19 18:35:17 +02:00
lib tls: a CA root change no longer restarts the store or bounces containers 2026-10-21 22:00:13 +02:00
swarm-grafana/dashboards rename claude.md to agents.md for agents and the repo 2026-10-18 02:33:06 +02:00
bao-bootstrap-policy.hcl bao: disable the unused approle auth method, declaratively 2026-09-28 22:58:36 +02:00
default.nix drop the shared hive agent login 2026-10-24 14:00:26 +02:00
deploy.nix Revert "swarm-otel: run in its own network namespace, receivers on unix sockets" 2026-10-24 15:09:11 +02:00
glue-bao-readers-policy-order.nix drop the shared hive agent login 2026-10-24 14:00:26 +02:00
glue-bao-readers-store-order.nix every hive runs its otel collector, and agents export to it by default 2026-10-19 18:35:17 +02:00
glue-bao-tls.nix drop the shared hive agent login 2026-10-24 14:00:26 +02:00
glue-bao-ui-oidc-client.nix bao: OIDC login to the browser UI via authelia, as a metadata-only viewer 2026-09-28 19:56:38 +02:00
glue-builder-oidc-client.nix swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector 2026-10-16 09:10:04 +02:00
glue-ci-metrics-otel-oidc-client.nix push ci run metrics to victoriametrics, with a grafana board 2026-10-16 20:43:11 +02:00
glue-ci-runner-otel-oidc-client.nix swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector 2026-10-16 11:22:51 +02:00
glue-claude-login-oidc-client.nix swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector 2026-10-16 09:10:04 +02:00
glue-controller-bao-identity.nix nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable 2026-09-26 01:19:49 +02:00
glue-controller-env.nix glue-controller-env: the controller always exports otlp to the swarm's collector 2026-10-17 16:33:52 +02:00
glue-controller-oidc-client.nix swarm-controller: get its otlp pushes past the collector, log failures 2026-10-17 09:44:33 +02:00
glue-forge-controller.nix glue: forge's controller-dependent settings move out of the forge module 2026-10-13 22:14:28 +02:00
glue-forge-oidc-client.nix nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable 2026-09-26 01:19:49 +02:00
glue-forge-otel-oidc-client.nix hive-forge, hive-matrix: forward each container's journal to the swarm collector 2026-10-16 13:50:23 +02:00
glue-grafana-oidc-client.nix nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable 2026-09-26 01:19:49 +02:00
glue-grafana-otel-oidc-client.nix swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector 2026-10-16 11:22:51 +02:00
glue-hive-otel-authelia.nix every hive runs its otel collector, and agents export to it by default 2026-10-19 18:35:17 +02:00
glue-hive-tls-bao-identity.nix hive-tls: the gateway leaf uses the services-issuer identity, not a hive's 2026-10-06 14:54:07 +02:00
glue-hive-tls-controllers.nix agents fetch the hive CA from bao at boot instead of the meta flake embedding it 2026-10-19 20:15:13 +02:00
glue-logs-auth-bao-identity.nix swarm-logs-auth: check agent tokens on the log store's query route 2026-10-13 08:38:05 +02:00
glue-matrix-ctl-bao-identity.nix swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's 2026-10-06 12:04:48 +02:00
glue-matrix-hive-discovery.nix move the hive's vhosts and matrix discovery out of the gateway 2026-10-17 15:07:33 +02:00
glue-matrix-oidc-client.nix swarm: OIDC clients registered wherever authelia runs; nats + matrix secrets from bao 2026-10-05 09:58:02 +02:00
glue-matrix-otel-oidc-client.nix hive-forge, hive-matrix: forward each container's journal to the swarm collector 2026-10-16 13:50:23 +02:00
glue-metrics-auth-bao-identity.nix add swarm-metrics, an agent CLI for the metrics store 2026-10-17 10:10:17 +02:00
glue-nats-auth-bao-identity.nix swarm-nats: the auth responder's store identity path is its own, not the hive's 2026-10-06 10:04:30 +02:00
glue-nats-bao-identity.nix swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's 2026-10-06 12:04:48 +02:00
glue-nats-oidc-client.nix swarm-nats: forward the queue container's journal to the swarm collector 2026-10-16 09:08:21 +02:00
glue-nats-wireguard.nix glue: nats firewall on the wireguard interface moves out of the nats module 2026-10-14 10:15:19 +02:00
glue-notify-router-oidc-client.nix agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close 2026-10-22 07:28:53 +02:00
glue-review-classifier-oidc-client.nix swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector 2026-10-16 09:10:04 +02:00
glue-secret-publisher-authelia.nix swarm-authelia: run the secret publisher and a journal forwarder inside the container 2026-10-17 00:28:16 +02:00
glue-secret-publisher-bao-identity.nix swarm-authelia: run the secret publisher and a journal forwarder inside the container 2026-10-17 00:28:16 +02:00
glue-swarm-bao-otel-oidc-client.nix ops: update option pointers after grafana/bao split 2026-10-01 09:53:04 +02:00
glue-swarm-otel-oidc-client.nix ops: update option pointers after otel split 2026-10-01 13:00:40 +02:00
glue-victorialogs-otel-oidc-client.nix swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector 2026-10-16 11:22:51 +02:00
glue-victoriametrics-otel-oidc-client.nix swarm-victoriametrics: forward the container's journal to the swarm collector 2026-10-16 14:47:31 +02:00
hive-matrix-service.nix drop option renames and removals older than two weeks 2026-10-16 22:04:57 +02:00
hive-matrix.nix swarm-authelia: run the secret publisher and a journal forwarder inside the container 2026-10-17 00:28:16 +02:00
hive-network.nix every hive runs its otel collector, and agents export to it by default 2026-10-19 18:35:17 +02:00
hive-options-removed.nix publish operators' forge-profile pronouns to kv and list them in the agent prompt 2026-10-17 13:10:05 +02:00
hive-priv.nix hive-priv: lock personality, deny realtime, kernel logs and module loading 2026-10-16 16:06:49 +02:00
hive-tls.nix tls: a CA root change no longer restarts the store or bounces containers 2026-10-21 22:00:13 +02:00
host-ca-removed.nix drop option renames and removals older than two weeks 2026-10-16 22:04:57 +02:00
hyperhive.nix hyperhive: make the values the meta-flake render reads swarm-wide 2026-10-17 13:43:16 +02:00
local-defaults.nix swarm-nats: take the callout issuer and user keys from the store 2026-10-06 14:53:33 +02:00
nats-callout-removed.nix nats-callout-removed: remove the container's OIDC secret copy here, ungated 2026-10-06 15:25:29 +02:00
otel.nix Revert "drop port-collision checks against swarm.otel.telemetryPort" 2026-10-24 15:09:11 +02:00
stylix-theme.nix swarm-ui: apply the operator's stylix theme, same as the dashboard already does 2026-08-24 14:28:25 +02:00
swarm-authelia-service.nix swarm: drop the -agent client suffix refusal from authelia and the queue responder 2026-10-24 15:02:32 +02:00
swarm-authelia.nix swarm: drop the -agent client suffix refusal from authelia and the queue responder 2026-10-24 15:02:32 +02:00
swarm-bao-service.nix Revert "drop port-collision checks against swarm.otel.telemetryPort" 2026-10-24 15:09:11 +02:00
swarm-bao.nix drop the shared hive agent login 2026-10-24 14:00:26 +02:00
swarm-builder.nix the meta flake takes docs from the pinned hyperhive input 2026-10-18 20:09:14 +02:00
swarm-ci-metrics.nix trust the swarm services ca in swarm-ci-metrics 2026-10-17 23:28:03 +02:00
swarm-ci-runner.nix swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector 2026-10-16 11:22:51 +02:00
swarm-claude-login.nix move dashboardPort, claudeCodePackage and extraResourceAttributes to deploy.hive-controller 2026-10-17 13:43:16 +02:00
swarm-controller.nix swarm-controller: chgrp the runtime dir in ExecStartPost, ExecStart's setup undid the ExecStartPre one 2026-10-18 15:32:35 +02:00
swarm-grafana-service.nix swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector 2026-10-16 11:22:51 +02:00
swarm-grafana.nix drop the shared hive agent login 2026-10-24 14:00:26 +02:00
swarm-nats-service.nix Revert "drop port-collision checks against swarm.otel.telemetryPort" 2026-10-24 15:09:11 +02:00
swarm-nats.nix Revert "drop port-collision checks against swarm.otel.telemetryPort" 2026-10-24 15:09:11 +02:00
swarm-notify-router.nix agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close 2026-10-22 07:28:53 +02:00
swarm-otel-service.nix Revert "swarm-otel: run in its own network namespace, receivers on unix sockets" 2026-10-24 15:09:11 +02:00
swarm-otel.nix Revert "swarm-otel: run in its own network namespace, receivers on unix sockets" 2026-10-24 15:09:11 +02:00
swarm-required-services.nix agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close 2026-10-22 07:28:53 +02:00
swarm-review-classifier.nix every hive runs its otel collector, and agents export to it by default 2026-10-19 18:35:17 +02:00
swarm-secret-publisher.nix drop the shared hive agent login 2026-10-24 14:00:26 +02:00
swarm-snapshot-store.nix snapshot store: bound the transfer on both ends 2026-10-16 11:45:58 +02:00
swarm-ui.nix move the hive's vhosts and matrix discovery out of the gateway 2026-10-17 15:07:33 +02:00
swarm-victorialogs-service.nix swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector 2026-10-16 11:22:51 +02:00
swarm-victorialogs.nix Revert "drop port-collision checks against swarm.otel.telemetryPort" 2026-10-24 15:09:11 +02:00
swarm-victoriametrics-service.nix swarm-victoriametrics: forward the container's journal to the swarm collector 2026-10-16 14:47:31 +02:00
swarm-victoriametrics.nix victorialogs and victoriametrics: own the package for each auth responder they run 2026-10-17 18:38:25 +02:00
swarm-wireguard.nix swarm options: no swarm.* value depends on a deploy option or this host's hive 2026-10-04 18:13:47 +02:00
swarm.nix swarm: drop the -agent client suffix refusal from authelia and the queue responder 2026-10-24 15:02:32 +02:00