527e07c5e0
An agent can verify that a unit was launched and never that it is working: container journals are not reachable, so a diagnosis stops at the first broken component -- which is precisely the component whose own instrument is least likely to be legible. This is the store half of collecting logs centrally so the question becomes answerable. Mirrors swarm-victoriametrics deliberately: same container shape, same loopback pin, same self-scrape arrangement. Two differences, both intentional. No gateway vhost. VictoriaLogs' ingest and query endpoints carry no authentication of their own, exactly like the metrics store's -- and the metrics store IS published under a resolvable name, which is an open question rather than a settled design. Publishing this one the same way would repeat that before the first instance is decided. Retention defaults to 30d against the metrics store's 5y. Logs are orders of magnitude larger per unit of time and their value decays much faster: a log line answers what happened during an incident, a metric answers whether this is worse than last quarter. Not wired into enableRequiredServices yet -- that lands with the collector pipeline, so we do not start a store nothing writes to.
40 lines
1.2 KiB
Nix
40 lines
1.2 KiB
Nix
# The full hyperhive host stack, pulled together in one place — this
|
|
# is what the flake exports as `nixosModules.default` (wrapped with
|
|
# the package/source wiring; see flake.nix). One import covers
|
|
# everything; `services.hyperhive.enable = true` turns the stack on.
|
|
#
|
|
# The forge is mandatory — hive-c0re mirrors every agent's applied
|
|
# config repo into it and it's the canonical store for the meta flake
|
|
# + `internal/*` repos, so there's no enable toggle; it deploys with
|
|
# hyperhive itself. hive-matrix is opt-in (off by default). All
|
|
# subsystems rely on `services.hyperhive.domain`, which is required
|
|
# (asserted in hive-network.nix) whenever hyperhive is enabled.
|
|
{
|
|
imports = [
|
|
./hyperhive.nix
|
|
./local-defaults.nix
|
|
./hive-c0re
|
|
./hive-ci.nix
|
|
./hive-forge
|
|
./hive-gateway
|
|
./hive-matrix.nix
|
|
./hive-network.nix
|
|
./hive-priv.nix
|
|
./hive-tls.nix
|
|
./otel.nix
|
|
./swarm-authelia.nix
|
|
./swarm-ca.nix
|
|
./swarm-nats.nix
|
|
./swarm-controller.nix
|
|
./swarm-grafana.nix
|
|
./swarm-otel.nix
|
|
./swarm-snapshot-store.nix
|
|
./swarm-ui.nix
|
|
./swarm-victorialogs.nix
|
|
./swarm-victoriametrics.nix
|
|
./swarm-wireguard.nix
|
|
./swarm.nix
|
|
./swarm-peers-removed.nix
|
|
./swarm-required-services.nix
|
|
];
|
|
}
|