ca02340a4c
Replace the confused Profile abstraction with a dedicated Secret resource
following Kubernetes conventions. Servers now have env entries with inline
values or secretRef references. Env vars are resolved and passed to
containers at startup (fixes existing gap).
- Add Secret CRUD (model, repo, service, routes, CLI commands)
- Server env: {name, value} or {name, valueFrom: {secretRef: {name, key}}}
- Add env-resolver utility shared by instance startup and config generation
- Remove all profile-related code (models, services, routes, CLI, tests)
- Update backup/restore for secrets instead of profiles
- describe secret masks values by default, --show-values to reveal
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
servers:
|
|
- name: ha-mcp
|
|
description: "Home Assistant MCP - smart home control via MCP"
|
|
dockerImage: "ghcr.io/homeassistant-ai/ha-mcp:2.4"
|
|
transport: STREAMABLE_HTTP
|
|
containerPort: 3000
|
|
# For mcpd-managed containers:
|
|
command:
|
|
- python
|
|
- "-c"
|
|
- "from ha_mcp.server import HomeAssistantSmartMCPServer; s = HomeAssistantSmartMCPServer(); s.mcp.run(transport='sse', host='0.0.0.0', port=3000)"
|
|
# For connecting to an already-running instance (host.containers.internal for container-to-host):
|
|
externalUrl: "http://host.containers.internal:8086/mcp"
|
|
env:
|
|
- name: HOMEASSISTANT_URL
|
|
value: ""
|
|
- name: HOMEASSISTANT_TOKEN
|
|
valueFrom:
|
|
secretRef:
|
|
name: ha-secrets
|
|
key: token
|
|
|
|
profiles:
|
|
- name: production
|
|
server: ha-mcp
|
|
envOverrides:
|
|
HOMEASSISTANT_URL: "https://ha.itaz.eu"
|
|
HOMEASSISTANT_TOKEN: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiIyNjFlZTRhOWI2MGM0YTllOGJkNTIxN2Q3YmVmZDkzNSIsImlhdCI6MTc3MDA3NjYzOCwiZXhwIjoyMDg1NDM2NjM4fQ.17mAQxIrCBrQx3ogqAUetwEt-cngRmJiH-e7sLt-3FY"
|