# Generated by mcp/build_host_files.py from inventory.yaml.
# Do NOT edit by hand — your changes will be overwritten.
# Source of truth: ../inventory.yaml
name: apps
kind: lxc
os: linux
role: docker-apps
host: hubris
pve_id: 105
lan_ip: 192.168.8.205
mesh:
  tailscale:
    ip: 100.121.171.122
    fqdn: apps
mesh_globals:
  primary: netbird
  accepted:
  - netbird
  - tailscale
mounts:
- /mnt/library
public_hosts:
- artifacto.hubris.network
runs:
- artifacto
- plantuml
- homelab-mcp
- secrets-issuance
- artifacto
- homelab_mcp
- secrets_issuance
services_hosted:
- name: artifacto
  backend: apps
  url: https://artifacto.hubris.network
- name: homelab_mcp
  backend: apps
  port: 9810
  systemd_unit: homelab-mcp
  public_host: mcp.hubris.network
  endpoint: https://mcp.hubris.network/sse
  note: MCP server. Read-only context + management. Reachable on the LAN via Caddy and from off-LAN via
    Netbird (192.168.8.0/24 is a network resource routed through hubris).
- name: secrets_issuance
  backend: apps
  port: 9820
  systemd_unit: secrets-issuance
  public_host: secrets.hubris.network
  endpoint: https://secrets.hubris.network/issue
  note: Issues per-client age private keys. Gated at source-IP layer (mesh + LAN subnets in MESH_SUBNETS).
age_pubkey: age1duyl8mkpgu80uv934dy8q7enqjms6yvdz264hme8uryuxmvvqesq6rusq0
see_also:
- containers/105-apps.md
mcp_endpoint: https://mcp.hubris.network/sse
secrets_issuance_endpoint: https://secrets.hubris.network/issue