switch hive forge domain

flake.lock

@@ -373,11 +373,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1787590410,
-        "narHash": "sha256-1u1lIQ1r45r7vF4yIB8lKAH0bDNCHIWs40r3CVAMKxg=",
+        "lastModified": 1787762084,
+        "narHash": "sha256-UsnVAWB3cw6zdpO1cqO1IrskYZUbVYhSKritpKHBuWI=",
         "ref": "refs/heads/main",
-        "rev": "d736be2071b076c05e6015f6d78b6dccd8a3317f",
-        "revCount": 3889,
+        "rev": "d702eeffe16c5a93cd835bce5cec579211a4f09a",
+        "revCount": 3910,
         "type": "git",
         "url": "https://forge.darkest.space/hyperhive/hyperhive.git"
       },

nixosConfigurations/muede-lpt2/default.nix

@@ -1,11 +1,17 @@
-{ pkgs, ... }:
+{ pkgs, config, lib, ... }:
 {
   imports = [
     ./containers.nix
     ./hardware.nix
   ];
 
-  config = {
+  config =
+    let
+      gw = config.services.hyperhive.gateway;
+      old = "forge.pr1ma.darkest.space";
+      new = "forge.constellation.darkest.space";
+    in
+    {
       my = {
         # keep-sorted start
         intelGraphics.enable = true;
@@ -67,5 +73,16 @@
         hiveName = "pr1ma";
       };
       services.hyperhive.enableAllLocalDefaults = true;
+      services.nginx.enable = true;
+
+      # DNS: the hive's resolver must still answer for the old name, or
+      # nothing ever reaches the redirect. The forge module drops it from
+      # this list the moment you change `swarm.forge.domain`.
+      services.hyperhive.gateway.localNames = [ old ];
+
+      services.nginx.virtualHosts.${old} = (gw.lib.tlsFor old) // {
+        listen = gw.lib.listen;
+        locations."/".return = "301 https://${new}$request_uri";
+      };
     };
 }

nixosModules/constellation-swarm.nix

@@ -37,20 +37,14 @@ in
       name = "constellation";
       domain = "constellation.darkest.space";
       enableRequiredServices = true;
-      forge = {
-        # not default - still on hive domain
-        domain = "forge.pr1ma.darkest.space";
-        ci = {
+      forge.ci = {
         enable = true;
         concurrency = 2;
       };
-        sso.enable = true;
-      };
       matrix = {
         # not default - both still on hive domain
         gatewayHost = "matrix.pr1ma.darkest.space";
         serverName = "pr1ma.darkest.space";
-        sso.enable = true;
       };
       hives = {
         "umbra" = {