fix(security): gate spoofable X-Forwarded-Host + the vm-create config path

.dockerignore

@@ -0,0 +1,53 @@
+# Keep the build context small — ship only what's needed to build the wheel.
+
+# VCS & editors
+.git
+.gitignore
+.github
+.vscode
+.idea
+
+# Python caches
+__pycache__
+*.pyc
+*.pyo
+*.pyd
+.pytest_cache
+.mypy_cache
+.ruff_cache
+.coverage
+htmlcov
+*.egg-info
+build
+dist
+
+# Local venvs and env files — never bake secrets into the image
+.venv
+venv
+env
+.env
+.env.*
+!.env.example
+
+# Runtime state that should NOT go into the image
+clients.json
+dashboard.db
+*.sqlite
+*.sqlite3
+
+# Local config (user-specific — built image uses /config at runtime)
+beaconmcp.yaml
+
+# Docs / tooling / ops extras that aren't needed at runtime
+docs
+deploy/install.sh
+deploy/beaconmcp.service
+.playwright-mcp
+.assistant
+
+# OS cruft
+.DS_Store
+Thumbs.db
+
+# Tests aren't shipped in the wheel
+tests

.env.example

@@ -0,0 +1,40 @@
+# BeaconMCP secrets.
+#
+# Topology lives in beaconmcp.yaml (see beaconmcp.yaml.example). This file
+# only holds the values the YAML references as ${VAR}. Every variable below
+# is optional — include only the secrets your topology actually uses.
+
+# --- Proxmox API tokens ----------------------------------------------------
+# One secret per entry under proxmox.nodes[] in beaconmcp.yaml.
+PVE1_TOKEN_SECRET=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+PVE2_TOKEN_SECRET=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
+
+# --- BMC credentials -------------------------------------------------------
+# One secret per entry under bmc.devices[]. Name the env vars after the
+# device id for clarity.
+RACK1_ILO_PASSWORD=change-me
+RACK2_IPMI_PASSWORD=change-me
+
+# --- SSH fallback ----------------------------------------------------------
+SSH_PASSWORD=change-me
+
+# --- Dashboard -------------------------------------------------------------
+# Omit GEMINI_API_KEY to disable the integrated chat (the tokens page still works).
+# GEMINI_API_KEY=...
+
+# Auto-generated by deploy/install.sh on first run. Encrypts client_secret
+# at rest for dashboard sessions. Regenerating invalidates every session.
+# BEACONMCP_SESSION_KEY=<base64 32 bytes>
+
+# --- Legacy env-var overrides (deprecated, removed in 2.1) -----------------
+# Only used when no beaconmcp.yaml is found. Prefer the YAML file.
+# BEACONMCP_CONFIG=/etc/beaconmcp/config.yaml
+# BEACONMCP_CLIENTS_FILE=/opt/beaconmcp/clients.json
+# BEACONMCP_PORT=8420
+# BEACONMCP_HOST=0.0.0.0
+# BEACONMCP_ALLOWED_HOSTS=mcp.example.com,127.0.0.1:*,localhost:*,[::1]:*
+# BEACONMCP_ALLOWED_ORIGINS=https://assistant.ai,https://chat.openai.com,https://gemini.google.com
+# BEACONMCP_DASHBOARD_ENABLED=true
+# BEACONMCP_DASHBOARD_PUBLIC_URL=https://mcp.example.com
+# BEACONMCP_DASHBOARD_LIMIT_5H_USD=2.0
+# BEACONMCP_DASHBOARD_LIMIT_WEEK_USD=10.0

.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+    commit-message:
+      prefix: "chore(ci)"
+
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: monthly
+    commit-message:
+      prefix: "chore(deps)"

.github/workflows/ci.yml

@@ -0,0 +1,127 @@
+name: CI
+
+on:
+  # Branch-scoped so a push to a branch with an open PR doesn't run twice.
+  push:
+    branches: [main]
+  pull_request:
+
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        # 3.13 is what the Docker image runs on.
+        python-version: ["3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v7
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+
+      - name: Install dependencies
+        run: pip install -e ".[wizard,dev]"
+
+      - name: Lint
+        run: ruff check src/ tests/
+
+      - name: Test
+        run: pytest -q
+
+  # beaconmcp.yaml.example is the documented schema. If a config key is renamed
+  # in the loader without updating the template, this catches it.
+  config:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install
+        run: pip install -e .
+
+      - name: Validate the example config
+        # The template references secrets as ${VAR} and the loader rejects
+        # unset ones, so feed it throwaway values.
+        env:
+          BEACONMCP_SESSION_KEY: MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDA=
+          GEMINI_API_KEY: ci-dummy
+          PVE1_TOKEN_SECRET: ci-dummy
+          PVE2_TOKEN_SECRET: ci-dummy
+          RACK1_ILO_PASSWORD: ci-dummy
+          RACK2_IPMI_PASSWORD: ci-dummy
+          RACK3_IDRAC_PASSWORD: ci-dummy
+          VPS2_PW: ci-dummy
+        run: beaconmcp validate-config --config beaconmcp.yaml.example
+
+  # Templates, static files and the logo ride along implicitly with the package
+  # directory. A missing one only surfaces when the dashboard renders, so assert
+  # on the built artifact here.
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: actions/setup-python@v7
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Build sdist + wheel
+        run: |
+          pip install build
+          python -m build
+
+      - name: Assert packaged data files are present
+        run: |
+          python - <<'PY'
+          import pathlib, sys, zipfile
+
+          names = zipfile.ZipFile(next(pathlib.Path("dist").glob("*.whl"))).namelist()
+          for prefix in ("beaconmcp/assets/logo.webp",
+                         "beaconmcp/dashboard/templates/",
+                         "beaconmcp/dashboard/static/"):
+              if not any(n.startswith(prefix) for n in names):
+                  sys.exit(f"wheel is missing {prefix}")
+          PY
+
+      - name: Install the wheel in a clean env and smoke-test the CLI
+        run: |
+          python -m venv /tmp/smoke
+          /tmp/smoke/bin/pip install dist/*.whl
+          /tmp/smoke/bin/beaconmcp --help
+
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - uses: docker/setup-buildx-action@v4
+
+      - name: Build the image (no push)
+        uses: docker/build-push-action@v7
+        with:
+          context: .
+          push: false
+          load: true
+          tags: beaconmcp:ci
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Smoke-test the entrypoint
+        run: docker run --rm beaconmcp:ci --help