fix: update Rommie MCP URL and allowed hosts for improved access and security

ansible/inventory/group_vars/all/vars.yml

@@ -54,7 +54,7 @@ huggingface_mcp_token: "{{ vault_huggingface_mcp_token }}"
 neo4j_mcp_url: http://circe.helu.ca:22034/mcp
 nike_mcp_url: http://puck.incus:22031/mcp
 korax_mcp_url: http://korax.helu.ca:22021/mcp
-rommie_mcp_url: http://caliban.incus:22031/mcp
+rommie_mcp_url: https://rommie.ouranos.helu.ca/mcp
 freecad_mcp_url: http://caliban.incus:22032/mcp
 
 # Monitoring and Logging (internal endpoints on Prospero)

ansible/inventory/host_vars/caliban.incus.yml

@@ -22,7 +22,7 @@ alloy_log_level: "warn"
 rommie_port: 22031
 rommie_host: "0.0.0.0"
 rommie_display: ":10"
-rommie_allowed_hosts: "caliban.incus"
+rommie_allowed_hosts: "caliban.incus,rommie.ouranos.helu.ca"
 rommie_model: "Qwen3-VL-30B-A3B-Instruct-UD-Q5_K_XL.gguf"
 rommie_model_url: "http://nyx.helu.ca:22078"
 rommie_provider: "openai"

ansible/inventory/host_vars/titania.incus.yml

@@ -188,6 +188,12 @@ haproxy_backends:
     health_path: "/api/"
     timeout_server: 300s  # WebSocket support for HA frontend
 
+  - subdomain: "rommie"
+    backend_host: "caliban.incus"
+    backend_port: 22031
+    health_path: "/mcp"
+    timeout_server: 300s  # SSE streaming support for MCP
+
   - subdomain: "smtp4dev"
     backend_host: "oberon.incus"
     backend_port: 22085