dtoro/oikos
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Use mcp/secrets.hubris.network for the canonical endpoints

Browse Source 
Caddy + split-horizon DNS now resolve these to LXC 105 (via 121).
Workstations off-LAN reach them via Netbird (192.168.8.0/24 is a
network resource routed through hubris).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
root
2026-05-20 17:17:19 +02:00
parent a7d2a7a08c
commit c5fa756c7d
23 changed files with 61 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
inventory.yaml
View File

@@ -99,16 +99,19 @@ services:
homelab_mcp:
backend: apps
port: 9810
netbird_host: apps.netbird.selfhosted
endpoint: http://apps.netbird.selfhosted:9810/sse
note: MCP server. Read-only context + management. Mesh-only.
public_host: mcp.hubris.network
endpoint: https://mcp.hubris.network/sse
note: MCP server. Read-only context + management. Reachable on the LAN
via Caddy and from off-LAN via Netbird (192.168.8.0/24 is a network
resource routed through hubris).
secrets_issuance:
backend: apps
port: 9820
netbird_host: apps.netbird.selfhosted
endpoint: http://apps.netbird.selfhosted:9820/issue
note: Issues per-client age private keys. Mesh-only.
public_host: secrets.hubris.network
endpoint: https://secrets.hubris.network/issue
note: Issues per-client age private keys. Gated at source-IP layer
(mesh + LAN subnets in MESH_SUBNETS).
# ---------------------------------------------------------------------------
# Hosts (Proxmox host + LXCs + VMs + workstations)