From 35924c7b01024cbee5954a4d318e187bd322a8e3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Torjus=20H=C3=A5kestad?= <torjus@usit.uio.no>
Date: Tue, 17 Feb 2026 20:35:14 +0100
Subject: [PATCH] mcp: move config to .mcp.json.example, gitignore real config

The real .mcp.json now contains Loki credentials for basic auth,
so it should not be committed. The example file has placeholders.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitignore                     | 3 +++
 .mcp.json => .mcp.json.example | 5 +++--
 2 files changed, 6 insertions(+), 2 deletions(-)
 rename .mcp.json => .mcp.json.example (88%)

diff --git a/.gitignore b/.gitignore
index 567ee61..18fbe70 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,6 +2,9 @@
 result
 result-*
 
+# MCP config (contains secrets)
+.mcp.json
+
 # Terraform/OpenTofu
 terraform/.terraform/
 terraform/.terraform.lock.hcl
diff --git a/.mcp.json b/.mcp.json.example
similarity index 88%
rename from .mcp.json
rename to .mcp.json.example
index f5d61f6..ff4fb40 100644
--- a/.mcp.json
+++ b/.mcp.json.example
@@ -20,7 +20,9 @@
       "env": {
         "PROMETHEUS_URL": "https://prometheus.home.2rjus.net",
         "ALERTMANAGER_URL": "https://alertmanager.home.2rjus.net",
-        "LOKI_URL": "http://monitoring01.home.2rjus.net:3100"
+        "LOKI_URL": "https://loki.home.2rjus.net",
+        "LOKI_USERNAME": "promtail",
+        "LOKI_PASSWORD": "<password from: bao kv get -field=password secret/shared/loki/push-auth>"
       }
     },
     "homelab-deploy": {
@@ -44,4 +46,3 @@
     }
   }
 }
-