Files
ouranos/ansible/kernos/.env.j2
Robert Helewka b01cfe7430 feat(kernos): implement optional API key authentication for MCP
Added kernos_api_keys configuration variable to enable optional
request authentication via Bearer or X-Api-Key headers. Updated
Kernos documentation with setup instructions and usage examples.
Also corrected FastAPI project port assignments in Ouranos docs.
2026-04-07 14:12:48 +00:00

28 lines
1.2 KiB
Django/Jinja

# Kernos Environment Configuration
# HTTP-enabled MCP shell server using FastMCP
# ============================================================================
# Server Configuration
# ============================================================================
HOST={{ kernos_host | default('0.0.0.0') }}
PORT={{ kernos_port }}
# ============================================================================
# Logging Configuration
# ============================================================================
LOG_FORMAT={{ kernos_log_format | default('json') }}
LOG_LEVEL={{ kernos_log_level | default('INFO') }}
ENVIRONMENT={{ kernos_environment | default('production') }}
# ============================================================================
# Security Configuration
# ============================================================================
# Comma-separated whitelist of allowed commands
# Commands after shell operators (;, &&, ||, |) are also validated
ALLOW_COMMANDS={{ kernos_allow_commands }}
# Optional API keys for authentication (comma-separated)
# When set, all MCP requests require authentication
# Leave empty to disable authentication
API_KEYS={{ kernos_api_keys | default('') }}