Files
hermes-mcp/hermes-k8s.yaml
Garfield 6604ab5d2b feat(connect): dedicated Claude.ai / ChatGPT browser connect picker
- Replace single 'Connect to Claude / ChatGPT' button with a modal picker
  offering Claude.ai web, Claude Desktop, Codex CLI, and ChatGPT/GPT Actions.
- Add /oauth/connect-claude-ai backend route that redirects to Anthropic's
  official https://claude.ai/api/mcp/auth_callback OAuth callback.
- Update MCP callback result page with browser-specific instructions for
  Claude.ai web, Claude Desktop, ChatGPT/GPT Actions, and Codex CLI.
- Deploy new app and hermes images to K8s.
2026-06-12 14:55:36 -04:00

237 lines
8.7 KiB
YAML

apiVersion: apps/v1
kind: Deployment
metadata:
name: hermes-mcp
namespace: fetcherpay
spec:
replicas: 1
strategy:
type: Recreate
selector:
matchLabels:
app: hermes-mcp
template:
metadata:
labels:
app: hermes-mcp
spec:
hostNetwork: true
securityContext:
runAsUser: 1000
runAsGroup: 1000
fsGroup: 1000
containers:
- name: hermes-mcp
image: localhost:32000/hermes-mcp@sha256:e5dec7b23a64f2f2d7977d24ca789dbcc077bcffb86a5b623d6ec64ff2436e06
imagePullPolicy: Always
securityContext:
allowPrivilegeEscalation: false
ports:
- containerPort: 3456
env:
- name: PORT
value: "3456"
- name: SERVER_URL
value: "https://hermes.squaremcp.com"
- name: MCP_API_KEY
value: "114521f3f9e6858480d6269446a446ef"
- name: YAHOO_EMAIL
value: "gheron01@yahoo.com"
- name: YAHOO_APP_PASSWORD
value: "lzlleytmslxocxae"
- name: FETCHERPAY_EMAIL
value: "garfield.heron@fetcherpay.com"
- name: FETCHERPAY_PASSWORD
value: "onelove"
- name: FETCHERPAY_IMAP_HOST
value: "23.120.207.35"
- name: FETCHERPAY_IMAP_PORT
value: "30993"
- name: FETCHERPAY_SMTP_HOST
value: "23.120.207.35"
- name: FETCHERPAY_SMTP_PORT
value: "30587"
- name: GARFIELD_EMAIL
value: "garfield@fetcherpay.com"
- name: GARFIELD_PASSWORD
value: "onelove"
- name: SALES_EMAIL
value: "sales@fetcherpay.com"
- name: SALES_PASSWORD
value: "onelove"
- name: LEADS_EMAIL
value: "leads@fetcherpay.com"
- name: LEADS_PASSWORD
value: "onelove"
- name: FOUNDER_EMAIL
value: "founder@fetcherpay.com"
- name: FOUNDER_PASSWORD
value: "onelove"
- name: OBSIDIAN_VAULT_PATH
value: "/vaults"
- name: SYNCTHING_URL
value: "http://10.1.58.192:8384"
- name: SYNCTHING_API_KEY
value: "PRWss5jFKX7VaHRr5LcJnbJHyFWuWuMH"
- name: SYNCTHING_FOLDER_ID
value: "obsidian-vault"
- name: GMAIL_EMAIL
value: "garfield.heron@gmail.com"
- name: GMAIL_APP_PASSWORD
value: "ldmk duee movy hruy"
- name: SQCP_GARFIELD_EMAIL
value: "garfield@squaremcp.com"
- name: SQCP_GARFIELD_PASSWORD
value: "onelove"
- name: SQCP_INFO_EMAIL
value: "info@squaremcp.com"
- name: SQCP_INFO_PASSWORD
value: "onelove"
- name: SQCP_SALES_EMAIL
value: "sales@squaremcp.com"
- name: SQCP_SALES_PASSWORD
value: "onelove"
- name: SQCP_SUPPORT_EMAIL
value: "support@squaremcp.com"
- name: SQCP_SUPPORT_PASSWORD
value: "onelove"
- name: SQCP_FOUNDER_EMAIL
value: "founder@squaremcp.com"
- name: SQCP_FOUNDER_PASSWORD
value: "onelove"
- name: SQCP_CONTACT_EMAIL
value: "contact@squaremcp.com"
- name: SQCP_CONTACT_PASSWORD
value: "onelove"
- name: SQCP_SMTP_HOST
value: "smtp.azurecomm.net"
- name: SQCP_SMTP_PORT
value: "587"
- name: SQCP_SMTP_USER
value: "fetcherpay-comm-prod.628d0126-984a-436a-8920-fcc877f5481a.57af0299-f395-4cf7-8fc5-3017211b2879"
- name: SQCP_SMTP_PASS
value: "5SH8Q~aPvVVvFeSoXAfPB0MhDqNny_AwmjeQLbXf"
- name: SQCP_ADMIN_EMAIL
value: "admin@squaremcp.com"
- name: SQCP_ADMIN_PASSWORD
value: "onelove"
- name: SQCP_REVIEWER_EMAIL
value: "reviewer@squaremcp.com"
- name: SQCP_REVIEWER_PASSWORD
value: "onelove"
- name: MYSQL_HOST
value: "127.0.0.1"
- name: MYSQL_PORT
value: "3306"
- name: MYSQL_USER
value: "root"
- name: MYSQL_PASSWORD
value: "fetcherpay"
- name: REDIS_URL
value: "redis://:redis_secure_2024@10.152.183.80:6379"
- name: CREDENTIAL_ENCRYPTION_KEY
value: "4ef9c48e9f4e5dfa843d4bfcc3a8f69c5ad5738326c8b0e878076853ae4b8416"
- name: JWT_SECRET
value: "7a3f9d2e1c8b5a4f6e0d3c7b9a2e5f8d1c4b7a0e3f6d9c2b5a8e1f4d7c0b3a"
- name: OAUTH_CLIENT_ID
value: "fecb863c9aa334aba93c9017f4b9bee8"
- name: OAUTH_CLIENT_SECRET
value: "761c17a9a49670489ccf93ccffd344dbfc642ae994ac2ee991dbb42de3f6c3af"
- name: SLACK_DEFAULT_BOT_TOKEN
value: "xoxb-11134355044818-11132324783798-shAhtLsZT2GpTUI0pJlYsmrE"
- name: WHATSAPP_DEFAULT_PHONE_NUMBER_ID
value: "1075667822304648"
- name: WHATSAPP_DEFAULT_WABA_ID
value: "996304809563412"
- name: WHATSAPP_DEFAULT_BUSINESS_ACCOUNT_ID
value: "996304809563412"
- name: TWILIO_ACCOUNT_SID
value: "AC2a5ef8e87800b4fde36b577b76a4f1bf"
- name: TWILIO_AUTH_TOKEN
value: "bf9285c863263d06efbb1b56827d351a"
- name: TWILIO_WHATSAPP_NUMBER
value: "+19547385805"
- name: PUBLIC_WEBHOOK_BASE_URL
value: "https://hermes.squaremcp.com"
- name: WHATSAPP_APP_SECRET
value: "04d52724efa5f3ac5eb3f2b673c3d70a"
- name: PILOT_CUSTOMER_ID
value: "9a3f1a23-3080-4f9f-932c-02dae813ee96"
- name: FACEBOOK_DEFAULT_ACCESS_TOKEN
value: "EAAYG3FLDWzMBRmZBDhn1rePtuKDCLUkzHLyJHNJA7yXXdcNUPXmyZA36BwLp7vXHhOxguCIGZB3JfJIhgX2ZBRZBTmZCDfdAYeZBrFAye2L5cIUKvYdjYYA3mlT3ZAacEQgmbhYuKBp4eCOQz0rrNUwLZB2qspvO9wczZAM3tWqFctYBP10oGfgOJIQ8ITweRU2Bgdte2hod66"
- name: FACEBOOK_DEFAULT_PAGE_ID
value: "1152192567968569"
- name: INSTAGRAM_DEFAULT_ACCESS_TOKEN
value: "EAAYG3FLDWzMBRmZBDhn1rePtuKDCLUkzHLyJHNJA7yXXdcNUPXmyZA36BwLp7vXHhOxguCIGZB3JfJIhgX2ZBRZBTmZCDfdAYeZBrFAye2L5cIUKvYdjYYA3mlT3ZAacEQgmbhYuKBp4eCOQz0rrNUwLZB2qspvO9wczZAM3tWqFctYBP10oGfgOJIQ8ITweRU2Bgdte2hod66"
- name: INSTAGRAM_DEFAULT_BUSINESS_ACCOUNT_ID
value: "17841422623735880"
- name: WHATSAPP_DEFAULT_ACCESS_TOKEN
value: "EAAYG3FLDWzMBRV4qrRvksNnVzCI4wGUvF4R8jjy6pusWBxriRwP9B3ZCRcd3VpDsjoURhJMEQJiNZCcSIJZCcQGsusZANzTpQF9hWrhHgLXUU9tJZCuoEAWTUYA9C29JgQ9BPblpUxEQRKE3p9tZBsl9ChngJy45kXJ9apOYreJclyya0ebgCxZBmndBpCPuAZDZD"
- name: WA_VERIFY_TOKEN
value: "hermes-wa-2026"
- name: SLACK_PILOT_WEBHOOK_URL
value: "https://hooks.slack.com/services/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"
- name: ANTHROPIC_API_KEY
value: "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"
volumeMounts:
- name: vaults
mountPath: /vaults
readinessProbe:
httpGet:
path: /health
port: 3456
initialDelaySeconds: 5
periodSeconds: 10
livenessProbe:
httpGet:
path: /health
port: 3456
initialDelaySeconds: 10
periodSeconds: 30
volumes:
- name: vaults
hostPath:
path: /home/garfield/obsidian/vaults
type: Directory
---
apiVersion: v1
kind: Service
metadata:
name: hermes-mcp
namespace: fetcherpay
spec:
selector:
app: hermes-mcp
ports:
- protocol: TCP
port: 3456
targetPort: 3456
---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: hermes-ingress
namespace: fetcherpay
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
nginx.ingress.kubernetes.io/proxy-read-timeout: "3600"
nginx.ingress.kubernetes.io/proxy-send-timeout: "3600"
nginx.ingress.kubernetes.io/proxy-buffering: "off"
spec:
ingressClassName: nginx
rules:
- host: hermes.squaremcp.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: hermes-mcp
port:
number: 3456
tls:
- hosts:
- hermes.squaremcp.com
secretName: hermes-squaremcp-tls