From a reading of the gate's documents (2026-10-21): - AGENTS.md: Steps 14 and 15 shown Pending while the Port and both sockets have carried live traffic since the gate was built → Done, with what carries them; "next build task" now points at the open items, the phase tables being complete. - README.md: the repository tree omitted azazel_processor, kushya_generator, mesorah, src/tools and scripts → listed, each in a line. - deploy/ARCHITECTURE.md: the judgment path holds no model, said in writing — the examination is Python patterns and Prolog rules, the judges consult that Prolog; kushya_generator (a fine-tuned model in this repo, not deployed, not wired) is an OFFERER whose output is examined, never a component the bedikah, the engine or a judge consults. The kohen is not the offerer. azazel_processor listed. - The map: the repository is public; eleven files named the ingress NLB's literal address and five the kohen's kubeconfig path. Docs now use the domains (git.bikoret.ch, bikoret.ch) or "<NLB-IP>" with the kubectl query that answers it; the kubeconfig is "$KUBECONFIG" / "$HOME/.kube/<your-cluster>.yaml". gitea-public-apply.sh takes NLB from the environment. None of it was a secret; all of it was a map. - OTP pin: checked, not changed — the segfault in the build log was a source-built OTP 26.2.1 on macOS; the image is hexpm's 26.2.1 with ERL_FLAGS +JMsingle. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
# Gitea MCP Server — secrets template
|
|
# NEVER commit actual values. Fill in and apply manually.
|
|
#
|
|
# Since 2026-10-19 the MCP server runs in OAuth mode and uses NO static
|
|
# token: users authorize with their own Gitea account. This secret is
|
|
# kept only for a rollback to static-token mode (see the deployment).
|
|
#
|
|
# Two secrets needed (static-token mode):
|
|
# 1. GITEA_TOKEN: Personal Access Token from Gitea
|
|
# Create at: https://git.bikoret.ch/user/settings/applications
|
|
# Permissions: repo (read/write)
|
|
#
|
|
# 2. OAuth Client ID/Secret: Registered OAuth app in Gitea
|
|
# Create at: https://git.bikoret.ch/user/settings/applications
|
|
# Redirect URIs: https://claude.ai/api/mcp/auth_callback
|
|
# http://127.0.0.1/callback (Claude Code)
|
|
# Confidential Client: UNCHECKED (PKCE). Only the Client ID is needed;
|
|
# it goes into the claude.ai connector's Advanced settings, not here.
|
|
---
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: gitea-mcp-secrets
|
|
namespace: shorashim
|
|
type: Opaque
|
|
stringData:
|
|
# Gitea Personal Access Token for backend API access
|
|
GITEA_TOKEN: "REPLACE_WITH_GITEA_PAT"
|