Add read-only Sentinel MCP server

2026-08-01 02:07:17 +02:00
parent a494bc4ba3
commit 7009596efc
7 changed files with 605 additions and 0 deletions
--- a/infra/mcp-server/compose.yml
+++ b/infra/mcp-server/compose.yml
@@ -0,0 +1,23 @@
+services:
+  ocsentinel-mcp:
+    build: .
+    container_name: ocsentinel-mcp
+    restart: unless-stopped
+    env_file: .env
+    # The first version is intentionally only reachable through an SSH tunnel.
+    ports:
+      - "127.0.0.1:8091:8080"
+    networks:
+      - ocsentinel-network
+    read_only: true
+    tmpfs:
+      - /tmp
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+
+networks:
+  ocsentinel-network:
+    external: true
+    name: n8n_n8n-network