Restore kai-server host Caddy shortcut for skillsmp MCP #542

New issue

Open

opened 2026-07-10 23:32:50 +00:00 by coilyco-ops · 0 comments

coilyco-ops commented

2026-07-10 23:32:50 +00:00

Member

Problem

The deploy repo documents a tailnet-only shortcut at http://kai-server/skillsmp/mcp, but the live probe still returns 404 while the direct NodePort and public gate behave correctly.

Observed from the director surface on 2026-07-10 UTC:

POST http://kai-server.tail09a41b.ts.net/skillsmp/mcp
Host: kai-server
result: HTTP 404 Not Found

POST http://kai-server.tail09a41b.ts.net:30081/mcp
result: HTTP 200, serverInfo skillsmp

GET https://skillsmp.coilysiren.me/mcp without bearer
result: HTTP 401

The deploy docs now point at the host-owned Caddy snippet in caddy/sites-manual/skillsmp.caddy, which contains:

handle_path /skillsmp/* {
    reverse_proxy 127.0.0.1:30081
}

Do

Check why the host Caddy shortcut is not serving /skillsmp/mcp even though the file exists in the infrastructure repo.
Verify the host-side config deployment path or reload path is actually applying caddy/sites-manual/skillsmp.caddy on kai-server.
Keep the public Authelia-gated route unchanged.
Keep the direct NodePort path working.

Acceptance

POST http://kai-server.tail09a41b.ts.net/skillsmp/mcp with Host: kai-server and MCP initialize headers returns HTTP 200 with serverInfo skillsmp.
POST http://kai-server.tail09a41b.ts.net:30081/mcp still returns HTTP 200.
Unauthenticated https://skillsmp.coilysiren.me/mcp still returns 401.

## Problem The deploy repo documents a tailnet-only shortcut at `http://kai-server/skillsmp/mcp`, but the live probe still returns 404 while the direct NodePort and public gate behave correctly. Observed from the director surface on 2026-07-10 UTC: ```text POST http://kai-server.tail09a41b.ts.net/skillsmp/mcp Host: kai-server result: HTTP 404 Not Found POST http://kai-server.tail09a41b.ts.net:30081/mcp result: HTTP 200, serverInfo skillsmp GET https://skillsmp.coilysiren.me/mcp without bearer result: HTTP 401 ``` The deploy docs now point at the host-owned Caddy snippet in `caddy/sites-manual/skillsmp.caddy`, which contains: ```caddy handle_path /skillsmp/* { reverse_proxy 127.0.0.1:30081 } ``` ## Do - Check why the host Caddy shortcut is not serving `/skillsmp/mcp` even though the file exists in the infrastructure repo. - Verify the host-side config deployment path or reload path is actually applying `caddy/sites-manual/skillsmp.caddy` on kai-server. - Keep the public Authelia-gated route unchanged. - Keep the direct NodePort path working. ## Acceptance - `POST http://kai-server.tail09a41b.ts.net/skillsmp/mcp` with `Host: kai-server` and MCP initialize headers returns HTTP 200 with serverInfo `skillsmp`. - `POST http://kai-server.tail09a41b.ts.net:30081/mcp` still returns HTTP 200. - Unauthenticated `https://skillsmp.coilysiren.me/mcp` still returns 401.