dtoro/caddy-conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

oikos: remove old mcp+secrets blocks pointing to decommissioned apps/105

Browse Source
This commit is contained in:
authentik Default Admin
2026-07-08 11:58:12 +02:00
parent 5401d77bab
commit fc50aa3bda
1 changed files with 1 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
Caddyfile
View File

@@ -236,23 +236,8 @@ zimaos.hubris.network {
# Homelab MCP server (read-only context + management tools). # Homelab MCP server (read-only context + management tools).
# Mesh+LAN-gated by the service itself + nftables; no SSO so agent clients work. # Mesh+LAN-gated by the service itself + nftables; no SSO so agent clients work.
# ─── Oikos MCP (mac-mini Docker) ───
mcp.hubris.network { mcp.hubris.network {
tls {
dns ionos {env.IONOS_AUTH_API_TOKEN}
}
reverse_proxy 192.168.8.205:9810
}
# Per-client age-key issuance (mesh-only via source-IP gating in the service).
# No SSO — agents call this during bootstrap; identity is mesh peer + hostname.
secrets.hubris.network {
tls {
dns ionos {env.IONOS_AUTH_API_TOKEN}
}
reverse_proxy 192.168.8.205:9820
}
# Authentik LAN forward-auth outpost (external_host for domain-level providers)
sso.hubris.network { sso.hubris.network {
tls { tls {
dns ionos {env.IONOS_AUTH_API_TOKEN} dns ionos {env.IONOS_AUTH_API_TOKEN}