hermes changes

modules/hermes/hermes.nix

@@ -2,6 +2,7 @@
   inputs,
   config,
   pkgs,
+  username,
   ...
 }:
 
@@ -11,7 +12,6 @@
   services.hermes-agent = {
     enable = true;
     addToSystemPackages = true;
-    package = inputs.hermes-agent.packages.${pkgs.system}.full;
     environmentFiles = [
       config.age.secrets.hermes-env.path
     ];
@@ -21,14 +21,15 @@
       backend = "docker";
       enable = true;
       hostUsers = [ "poslop" ];
+      extraOptions = [
+        "-p"
+        "9119:9119"
+        "-p"
+        "8642:8642"
+      ];
     };
 
     settings = {
-      model = {
-        #default = "Qwen3.6-35B-A3B-Uncensored-HauhauCS-Aggressive-Q4_K_P.gguf";
-        provider = "local";
-      };
-
       approvals = {
         mode = "off";
         cron_mode = "deny";
@@ -47,12 +48,51 @@
         };
       };
 
+      bedrock = {
+        discovery = {
+          enable = true;
+          provider_filter = [ "anthropic" ];
+        };
+      };
+
       custom_providers = [
         {
           name = "local";
           base_url = "http://10.0.1.139:42069/v1";
         }
       ];
+
+      discord = {
+        group_sessions_per_user = false;
+        reactions = false;
+      };
+
+      dashboard = {
+        basic_auth = {
+          username = "poslop";
+          password_hash = "scrypt$16384$8$1$XpurTBPYAwR7lqHEXjmudg==$1tKObL9EWptqLNHjCyTX+phYB7Qp0RuIgF2X8C/jO0A=";
+        };
+      };
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    9119
+    8642
+  ];
+
+  systemd.services.hermes-dashboard = {
+    description = "Hermes Agent Web Dashboard";
+    after = [ "hermes-agent.service" ];
+    bindsTo = [ "hermes-agent.service" ];
+    wantedBy = [ "multi-user.target" ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStart = "${pkgs.docker}/bin/docker exec -u hermes hermes-agent /data/current-package/bin/hermes dashboard --host 0.0.0.0 --port 9119 --no-open";
+      Restart = "on-failure";
+      RestartSec = 5;
+      StartLimitIntervalSec = 60;
+      StartLimitBurst = 3;
     };
   };
 }