# Generated by oikos build-hosts from inventory.yaml.
# Do NOT edit by hand.

host: hubris
kind: lxc
lan_ip: 192.168.8.175
mcp_endpoint: https://mcp.hubris.network/mcp
mesh_globals:
  accepted:
    - netbird
    - tailscale
  primary: netbird
name: caddy
notes:
  - Terminates all *.hubris.network
  - /etc/caddy is a git checkout of dtoro/caddy-conf
os: linux
peers:
  - authentik
  - gitea
pve_id: 121
role: reverse-proxy
runs:
  - caddy
secrets_issuance_endpoint: https://secrets.hubris.network/issue
services_hosted:
  - backend: caddy
    config_repo: dtoro/caddy-conf
    doc_page: knowledge/wiki/containers/121-caddy.md
    name: caddy
    note: terminates all *.hubris.network
    risk_notes: wide blast radius — every *.hubris.network route rides on it (see oikos/policy.yaml service_overrides)
    role: reverse-proxy
state: active