Torjus Håkestad
e2dd21c994
Add new auditor agent for security-focused audit log analysis: - SSH session tracking, command execution, sudo usage - Suspicious activity detection patterns - Can be used standalone or as sub-agent by investigate-alarm Update investigate-alarm to delegate audit analysis to auditor and add git-explorer MCP for configuration drift detection. Add git-explorer to .mcp.json for repository inspection. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
47 lines
1.5 KiB
JSON
47 lines
1.5 KiB
JSON
{
|
|
"mcpServers": {
|
|
"nixpkgs-options": {
|
|
"command": "nix",
|
|
"args": ["run", "git+https://git.t-juice.club/torjus/labmcp#nixpkgs-search", "--", "options", "serve"],
|
|
"env": {
|
|
"NIXPKGS_SEARCH_DATABASE": "sqlite:///run/user/1000/labmcp/nixpkgs-search.db"
|
|
}
|
|
},
|
|
"nixpkgs-packages": {
|
|
"command": "nix",
|
|
"args": ["run", "git+https://git.t-juice.club/torjus/labmcp#nixpkgs-search", "--", "packages", "serve"],
|
|
"env": {
|
|
"NIXPKGS_SEARCH_DATABASE": "sqlite:///run/user/1000/labmcp/nixpkgs-search.db"
|
|
}
|
|
},
|
|
"lab-monitoring": {
|
|
"command": "nix",
|
|
"args": ["run", "git+https://git.t-juice.club/torjus/labmcp#lab-monitoring", "--", "serve", "--enable-silences"],
|
|
"env": {
|
|
"PROMETHEUS_URL": "https://prometheus.home.2rjus.net",
|
|
"ALERTMANAGER_URL": "https://alertmanager.home.2rjus.net",
|
|
"LOKI_URL": "http://monitoring01.home.2rjus.net:3100"
|
|
}
|
|
},
|
|
"homelab-deploy": {
|
|
"command": "nix",
|
|
"args": [
|
|
"run",
|
|
"git+https://git.t-juice.club/torjus/homelab-deploy",
|
|
"--",
|
|
"mcp",
|
|
"--nats-url", "nats://nats1.home.2rjus.net:4222",
|
|
"--nkey-file", "/home/torjus/.config/homelab-deploy/test-deployer.nkey"
|
|
]
|
|
},
|
|
"git-explorer": {
|
|
"command": "nix",
|
|
"args": ["run", "git+https://git.t-juice.club/torjus/labmcp#git-explorer", "--", "serve"],
|
|
"env": {
|
|
"GIT_REPO_PATH": "/home/torjus/git/nixos-servers"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|