Gitea MCP connector: K8s manifests for public claude.ai integration

Shemot 28:3 — v'asu et bigdei Aharon l'kadesho l'chahano li.
The garments connect the service to those who approach.

- gitea-mcp-deployment.yaml: Official gitea-mcp server in HTTP mode
  Connects to Gitea at 185.19.29.94 via PAT
- gitea-mcp-ingress.yaml: TLS ingress at mcp.shorashim.ch
  cert-manager auto-provisions Let's Encrypt certificate
- gitea-mcp-secret.yaml: Template for Gitea PAT (never committed with value)
- cert-manager-issuer.yaml: Let's Encrypt ClusterIssuer

Architecture: claude.ai → OAuth → mcp.shorashim.ch → Gitea API

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

deploy/k8s/gitea-mcp-secret.yaml

@@ -0,0 +1,22 @@
+# Gitea MCP Server — secrets template
+# NEVER commit actual values. Fill in and apply manually.
+#
+# Two secrets needed:
+# 1. GITEA_TOKEN: Personal Access Token from Gitea
+#    Create at: http://185.19.29.94/user/settings/applications
+#    Permissions: repo (read/write)
+#
+# 2. OAuth Client ID/Secret: Registered OAuth app in Gitea
+#    Create at: http://185.19.29.94/user/settings/applications
+#    Redirect URI: https://claude.ai/api/mcp/auth_callback
+#    (These go into claude.ai connector settings, not this secret)
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: gitea-mcp-secrets
+  namespace: shorashim
+type: Opaque
+stringData:
+  # Gitea Personal Access Token for backend API access
+  GITEA_TOKEN: "REPLACE_WITH_GITEA_PAT"