Extract reusable Paseo daemon host module #179

New issue

Closed

opened 2026-08-16 23:56:06 +01:00 by nimmo · 1 comment

nimmo commented

2026-08-16 23:56:06 +01:00

Owner

Context

Vega and Lyra repeat the same Paseo secret, SOPS template, daemon defaults, relay parsing, environment, and firewall configuration in their host roots.

Scope

Add a reusable service/capability module for the shared Paseo daemon contract.
Keep host-specific data such as enablement, data paths, addresses, and hostnames declarative.
Remove the duplicated host implementation without changing runtime behavior.

Completion criteria

Vega and Lyra consume the shared module.
Existing host-specific relay/container behavior remains intact.
nix flake check passes.

## Context Vega and Lyra repeat the same Paseo secret, SOPS template, daemon defaults, relay parsing, environment, and firewall configuration in their host roots. ## Scope - Add a reusable service/capability module for the shared Paseo daemon contract. - Keep host-specific data such as enablement, data paths, addresses, and hostnames declarative. - Remove the duplicated host implementation without changing runtime behavior. ## Completion criteria - Vega and Lyra consume the shared module. - Existing host-specific relay/container behavior remains intact. - `nix flake check` passes.

nimmo added this to the Fleet Configuration Boundary Cleanup milestone

2026-08-16 23:56:06 +01:00

nimmo added the

phase:module

project:fleet-boundary-cleanup

host:fleet

labels

2026-08-16 23:56:06 +01:00

nimmo referenced this issue

2026-08-17 00:05:45 +01:00

refactor: clarify fleet configuration boundaries #181

nimmo referenced this issue from a commit

2026-08-17 00:21:12 +01:00

fix: validate shared Paseo relay endpoint

nimmo commented

2026-08-17 07:17:35 +01:00

Author

Owner

Implemented by #181 (4a50fd8), with relay-endpoint validation strengthened in b074ac8. Vega and Lyra now consume the shared Paseo daemon module while retaining host-specific relay/container policy. nix flake check passed on 2026-08-17. Two automated update cycles have completed since the merge, satisfying the required live deployment and no-op follow-up evidence.

Implemented by #181 (4a50fd8), with relay-endpoint validation strengthened in b074ac8. Vega and Lyra now consume the shared Paseo daemon module while retaining host-specific relay/container policy. `nix flake check` passed on 2026-08-17. Two automated update cycles have completed since the merge, satisfying the required live deployment and no-op follow-up evidence.

nimmo closed this issue

2026-08-17 07:17:37 +01:00