#SPDX-License-Identifier: MIT-0
---
# Namespace holding the MCP servers and their credential Secrets.
mcp_namespace: mcp

# Credentials are NOT managed here. Each server reads a pre-existing Secret in
# {{ mcp_namespace }} that belongs to the LDAP service user "localai":
#   mcp-gitea      GITEA_ACCESS_TOKEN (read:repository,issue,user,organization,misc)
#   mcp-grafana    GRAFANA_URL, GRAFANA_SERVICE_ACCOUNT_TOKEN (service account "localai", Viewer)
#   mcp-nextcloud  NEXTCLOUD_HOST, NEXTCLOUD_USERNAME, NEXTCLOUD_PASSWORD (app password)
#   mcp-discourse  discourse-profile.json (API key scoped global:read, allow_writes false)

mcp_gitea_image: gitea/gitea-mcp-server@sha256:7abff2c58718f80fc777b9b1a04885332e182814921cc61967313eea4136c3b2  # 1.12.0
mcp_gitea_host: http://gitea-http.gitea.svc.cluster.local:3000
# Read-only code/issue/PR tools only, to keep the tool list small for a 9B model.
mcp_gitea_tools: get_me,search_repos,repo_read,get_repository_tree,get_dir_contents,get_file_contents,branch_read,commit_read,list_issues,issue_read,search_issues,list_pull_requests,pull_request_read,release_read,actions_run_read

mcp_grafana_image: mcp/grafana@sha256:9362bcf6aa0e44e61f645b905cec03fb346a946a34a4dafecd7f3e28d3724014
mcp_grafana_enabled_tools: search,datasource,prometheus,loki,dashboard

mcp_nextcloud_image: ghcr.io/cbcoutinho/nextcloud-mcp-server@sha256:233c0fd48e617f68611ea5820a3f114a2279ee07e6fb5d32c4f893bd6c4e220e
mcp_nextcloud_apps: [calendar, notes]

# Discourse's own HTTP transport is loopback-only and single-session, so the
# stdio server runs behind supergateway (one child process per MCP session).
mcp_discourse_node_image: node:24-alpine
mcp_discourse_mcp_version: 0.3.1
mcp_supergateway_version: 4.2.1