Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
damocles 9aa624d310 fix(#1159): set WorkingDirectory=/var/lib/hive-priv for hive-priv service ... With ProtectSystem=strict (added in the previous commit), / is read-only inside hive-priv. nix creates a temp result symlink in its cwd; without WorkingDirectory that cwd is / (systemd default), causing: error: creating symlink /.tmp.tmp-...: Read-only file system Point WorkingDirectory at the StateDirectory (/var/lib/hive-priv) which is always writable under strict. Nix drops its temp symlink there instead.		2026-06-03 17:44:37 +02:00
..
hive-c0re.nix	fix(#1159): set WorkingDirectory=/var/lib/hive-priv for hive-priv service	2026-06-03 17:44:37 +02:00
hive-ci.nix	fix(#981): validate runner credentials on every boot, purge stale .runner	2026-06-02 00:27:47 +02:00
hive-forge.nix	fix(#981): enable Forgejo Actions so runner registration token API works	2026-06-01 18:38:44 +02:00
hive-gateway.nix	fix(#1155): enable recommendedTlsSettings + recommendedGzipSettings in gateway nginx	2026-06-03 16:48:33 +02:00
hive-matrix.nix	fix(#1061): suppress tuwunel default displayname suffix	2026-06-02 11:18:38 +02:00
hive-network.nix	fix: assert gateway.enable when isolateContainers + forge.enable	2026-06-03 16:33:10 +02:00