updates and hermes changes

modules/hermes/hermes.nix

@@ -40,27 +40,15 @@
         user_profile_enabled = true;
       };
 
-      model_aliases = {
-        bedrock = {
-          model = "us.anthropic.claude-sonnet-4-6";
-          provider = "bedrock";
-        };
+      display = {
+        credits_notices = true;
       };
 
-      bedrock = {
-        discovery = {
-          enable = true;
-          provider_filter = [ "anthropic" ];
-        };
+      delegation = {
+        model = "openai/gpt-5.6-luna";
+        provider = "nous";
       };
 
-      custom_providers = [
-        {
-          name = "local";
-          base_url = "http://10.0.1.139:42069/v1";
-        }
-      ];
-
       discord = {
         group_sessions_per_user = false;
         reactions = false;
@@ -81,12 +69,12 @@
   ];
 
   systemd = {
-    paths.hermes-perms-watch = {
-      description = "Watch hermes data dir for permission changes";
-      wantedBy = [ "multi-user.target" ];
-      pathConfig = {
-        PathChanged = "/var/lib/hermes/.hermes";
-        Unit = "hermes-perms-fix.service";
+    timers.hermes-perms-maintenance = {
+      description = "Periodically fix hermes file permissions";
+      wantedBy = [ "timers.target" ];
+      timerConfig = {
+        OnBootSec = "10s";
+        OnUnitActiveSec = "30s";
       };
     };
 
@@ -106,11 +94,12 @@
         };
       };
 
-      hermes-perms-fix = {
-        description = "Fix hermes data dir permissions";
+      hermes-perms-maintenance = {
+        description = "Fix hermes file permissions for gateway access";
         serviceConfig = {
           Type = "oneshot";
-          ExecStart = "${pkgs.coreutils}/bin/chmod 770 -R /var/lib/hermes/.hermes";
+          ExecStartPre = "${pkgs.findutils}/bin/find /var/lib/hermes/.hermes/ -type d -not -perm -2770 -exec ${pkgs.coreutils}/bin/chmod 2770 {} +";
+          ExecStart = "${pkgs.findutils}/bin/find /var/lib/hermes/.hermes/ -type f -not -perm -0660 -exec ${pkgs.coreutils}/bin/chmod 660 {} +";
         };
       };
     };