hermes changes

modules/core/user.nix

@@ -4,7 +4,10 @@
   users.users.${username} = {
     isNormalUser = true;
     description = "${username}";
-    extraGroups = [ "wheel" ];
+    extraGroups = [
+      "wheel"
+      "docker"
+    ];
     shell = pkgs.zsh;
   };
   nix.settings.allowed-users = [ "@wheel" ];

modules/core/zsh/.zshrc

@@ -15,6 +15,8 @@ alias gc='git commit'
 alias gp='git push'
 alias gs='git status'
 
+alias hermes-age='cd /etc/rice-flakes/modules/hermes/secrets && sudo EDITOR=nvim agenix -e ./hermes-env.age -i /etc/ssh/ssh_host_ed25519_key'
+
 ga() {
   if [[ -z "$1" ]]; then
     git add -u

modules/hermes/hermes.nix

@@ -2,6 +2,7 @@
   inputs,
   config,
   pkgs,
+  username,
   ...
 }:
 
@@ -11,7 +12,6 @@
   services.hermes-agent = {
     enable = true;
     addToSystemPackages = true;
-    package = inputs.hermes-agent.packages.${pkgs.system}.full;
     environmentFiles = [
       config.age.secrets.hermes-env.path
     ];
@@ -21,14 +21,15 @@
       backend = "docker";
       enable = true;
       hostUsers = [ "poslop" ];
+      extraOptions = [
+        "-p"
+        "9119:9119"
+        "-p"
+        "8642:8642"
+      ];
     };
 
     settings = {
-      model = {
-        #default = "Qwen3.6-35B-A3B-Uncensored-HauhauCS-Aggressive-Q4_K_P.gguf";
-        provider = "local";
-      };
-
       approvals = {
         mode = "off";
         cron_mode = "deny";
@@ -47,12 +48,51 @@
         };
       };
 
+      bedrock = {
+        discovery = {
+          enable = true;
+          provider_filter = [ "anthropic" ];
+        };
+      };
+
       custom_providers = [
         {
           name = "local";
           base_url = "http://10.0.1.139:42069/v1";
         }
       ];
+
+      discord = {
+        group_sessions_per_user = false;
+        reactions = false;
+      };
+
+      dashboard = {
+        basic_auth = {
+          username = "poslop";
+          password_hash = "scrypt$16384$8$1$XpurTBPYAwR7lqHEXjmudg==$1tKObL9EWptqLNHjCyTX+phYB7Qp0RuIgF2X8C/jO0A=";
+        };
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    9119
+    8642
+  ];
+
+  systemd.services.hermes-dashboard = {
+    description = "Hermes Agent Web Dashboard";
+    after = [ "hermes-agent.service" ];
+    bindsTo = [ "hermes-agent.service" ];
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStart = "${pkgs.docker}/bin/docker exec -u hermes hermes-agent /data/current-package/bin/hermes dashboard --host 0.0.0.0 --port 9119 --no-open";
+      Restart = "on-failure";
+      RestartSec = 5;
+      StartLimitIntervalSec = 60;
+      StartLimitBurst = 3;
     };
   };
 }

modules/home/packages.nix

@@ -1,13 +1,11 @@
 {
   pkgs,
   username,
-  inputs,
   ...
 }:
 
 {
   hjem.users.${username}.packages = with pkgs; [
-    inputs.zen-browser.packages."${system}".default
     kitty
     foot
   ];