From 8ac8e29256b24a862324891258d491193eeda53a Mon Sep 17 00:00:00 2001 From: poslop Date: Fri, 4 Sep 2026 15:05:49 -0500 Subject: [PATCH] hermes: remove module, secrets, flake input, and host entry (VM to be decommissioned) --- flake.nix | 2 - modules/hermes/default.nix | 7 -- modules/hermes/hermes.nix | 134 -------------------------- modules/hermes/secrets/agenix.nix | 15 --- modules/hermes/secrets/default.nix | 5 - modules/hermes/secrets/hermes-env.age | Bin 1162 -> 0 bytes modules/hermes/secrets/secrets.nix | 6 -- modules/hermes/sudo.nix | 13 --- 8 files changed, 182 deletions(-) delete mode 100644 modules/hermes/default.nix delete mode 100644 modules/hermes/hermes.nix delete mode 100644 modules/hermes/secrets/agenix.nix delete mode 100644 modules/hermes/secrets/default.nix delete mode 100644 modules/hermes/secrets/hermes-env.age delete mode 100644 modules/hermes/secrets/secrets.nix delete mode 100644 modules/hermes/sudo.nix diff --git a/flake.nix b/flake.nix index 3109786..fb1ceef 100644 --- a/flake.nix +++ b/flake.nix @@ -3,7 +3,6 @@ nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable"; hyprland.url = "github:hyprwm/Hyprland"; - hermes-agent.url = "github:NousResearch/hermes-agent"; agenix.url = "github:ryantm/agenix"; hjem = { @@ -60,7 +59,6 @@ nixos-vm2 = mkHost "nixos-vm2" [ "core" ]; qemu-vm = mkHost "qemu-vm" [ "core" ]; goyplex-vm = mkHost "goyplex-vm" [ "k3s-server" ]; - hermes-vm = mkHost "hermes-vm" [ "hermes" ]; }; }; } diff --git a/modules/hermes/default.nix b/modules/hermes/default.nix deleted file mode 100644 index b68e8b4..0000000 --- a/modules/hermes/default.nix +++ /dev/null @@ -1,7 +0,0 @@ -{ - imports = [ - ./sudo.nix - ./hermes.nix - ./secrets - ]; -} diff --git a/modules/hermes/hermes.nix b/modules/hermes/hermes.nix deleted file mode 100644 index 0ed2df7..0000000 --- a/modules/hermes/hermes.nix +++ /dev/null @@ -1,134 +0,0 @@ -{ - inputs, - config, - pkgs, - ... -}: - -{ - imports = [ inputs.hermes-agent.nixosModules.default ]; - - services.hermes-agent = { - enable = true; - addToSystemPackages = true; - environmentFiles = [ - config.age.secrets.hermes-env.path - ]; - - environment = { - BW_SERVERURL = "https://vault.archfox.org"; - }; - - container = { - image = "debian:bookworm"; - backend = "docker"; - enable = true; - hostUsers = [ "poslop" ]; - extraOptions = [ - "-p" - "9119:9119" - "-p" - "8642:8642" - "-p" - "9120:9120" - ]; - }; - - settings = { - approvals = { - mode = "off"; - cron_mode = "deny"; - mcp_reload_confirm = "false"; - }; - - gateway = { - multiplex_profiles = true; - }; - - delegation = { - model = "z-ai/glm-5.3-flash"; - provider = "nous"; - }; - - memory = { - provider = "holographic"; - memory_enabled = true; - user_profile_enabled = true; - }; - - display = { - credits_notices = true; - }; - - discord = { - group_sessions_per_user = false; - reactions = false; - }; - }; - }; - - systemd.services.hermes-serve = { - description = "Hermes Agent Serve (desktop remote backend)"; - wantedBy = [ "multi-user.target" ]; - after = [ - "hermes-agent.service" - "network-online.target" - ]; - wants = [ "network-online.target" ]; - requires = [ "hermes-agent.service" ]; - - serviceConfig = { - Type = "simple"; - Restart = "always"; - RestartSec = 5; - TimeoutStopSec = 15; - }; - - script = '' - exec ${pkgs.docker}/bin/docker exec -i -u hermes \ - -e HERMES_HOME=/data/.hermes \ - -e HOME=/home/hermes \ - hermes-agent \ - /data/current-package/bin/hermes serve \ - --host 0.0.0.0 \ - --port 9120 - ''; - }; - - systemd.services.hermes-dashboard = { - description = "Hermes Agent Dashboard (web UI)"; - wantedBy = [ "multi-user.target" ]; - after = [ - "hermes-agent.service" - "network-online.target" - ]; - wants = [ "network-online.target" ]; - requires = [ "hermes-agent.service" ]; - - serviceConfig = { - Type = "simple"; - Restart = "always"; - RestartSec = 5; - TimeoutStopSec = 15; - }; - - script = '' - exec ${pkgs.docker}/bin/docker exec -i -u hermes \ - -e HERMES_HOME=/data/.hermes \ - -e HOME=/home/hermes \ - hermes-agent \ - /data/current-package/bin/hermes dashboard \ - --host 0.0.0.0 \ - --port 9121 \ - --no-open - ''; - }; - - networking.firewall.allowedTCPPorts = [ - 8080 - 9119 - 9120 - 9121 - 8642 - ]; -} diff --git a/modules/hermes/secrets/agenix.nix b/modules/hermes/secrets/agenix.nix deleted file mode 100644 index 02925cd..0000000 --- a/modules/hermes/secrets/agenix.nix +++ /dev/null @@ -1,15 +0,0 @@ -{ - inputs, - pkgs, - username, - ... -}: - -{ - imports = [ inputs.agenix.nixosModules.default ]; - age.secrets."hermes-env".file = ./hermes-env.age; - - hjem.users.${username}.packages = with pkgs; [ - inputs.agenix.packages."${pkgs.stdenv.hostPlatform.system}".default - ]; -} diff --git a/modules/hermes/secrets/default.nix b/modules/hermes/secrets/default.nix deleted file mode 100644 index 6d00db9..0000000 --- a/modules/hermes/secrets/default.nix +++ /dev/null @@ -1,5 +0,0 @@ -{ - imports = [ - ./agenix.nix - ]; -} diff --git a/modules/hermes/secrets/hermes-env.age b/modules/hermes/secrets/hermes-env.age deleted file mode 100644 index 8c8124db450569b6bb24e4bcd1a8343129887f70..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 1162 zcmV;51ahgmc5g&sacp-^HCRD!GH^_3LS}h5XfSa?NqA>QMPpcaQ)PHsZZryaRZ?v)XJv3? zcvEyVY)4^aWifJ6Sv5^IZboBQOHogBY*k@7Vs%PLRBs9`EiE81Y&Lj8XhL~LXjx)I zOm%2OPIpH+LN<0!cWyQ|IZi}#Vq{cfH*-W~OLGcpbT)>K==QpoYW`EQLhZ*lv3$V| z$0Q4uhdw*X?FG6(P`h%X5T0yYR&CtcIS*(7wQCRh$FM}|B9xm}mda1HlFt!Uk(qN% z$yjhJCOl7i&PcRudncYDP!*Yq4RQhid)9NOi~wxi0p<-gAVhh^U)~fbzc{AL>&9WH zfQ(g{cU=^$JP`I_-yP+(s!r2-9kg4BJg%U}vpr{EoxZWm-b{-N7u?vbn)dP)^chxw z>WD3F+VDpNL`x3JP1H}4CRRFBTbk&wC0ceO`hC?!yBx9(EU3q~C*p~xUiC~0m;|D| zaaC1r64o!<;px4Qb#pV2%w3D(md*N>$;vQxGi^C(--omf1M}s;)Bh`3 zB-cnW!WC}lg5`dP+Lgd39##m-%`4$KxzL}ng26h&ip`>&3y@;*@02kZBsM1pn=|y= zYbG_oom!3iV6Yogpia&0rwKC3FMGvc1?_)eL0Ury9qOawV5({hSkIX z$R(##tEsr`mjjR$^F;x$|E>z7bygJbGR>G&%wm59AwGT9!xj$#oB_%Y+E+?M|u)4>cQ%#gtF)i~gZiwxCzEq1iwulg$T_iFE z3U4YU*5)5?V0WacLx1bXRzx{6I{4WGN%S99Sj?t1`}V+?ypZ)&IpIBI%C0Y4^$#XQ z;+)j6HOeU<)K!T_SF68}Sijodz>;j*l72uf!cugG*08_2DBQkF1{e!^3>J=Pe@UBV zMdo&s&^5#<%JOYJZxG6QAvaUR0A*h(GUXsOW`q*^R|N6S*vUm)Z}BrJ@^e>bM(iTw z)cqxLh@rYL>qhYORb-JeE|Y;K<0Up1xO+qA8?rR{K1sf({Ln#yNPt&hqV60|ts@`< zY?1z&!n4_*YAoD^_I*2DF!wVo^#d=Qg>7GtoHXWMc`~>C#Pl_ztTsDg7F5Ggh#YT(b)DV&EGfxN=5 zGo*o0w&$yU2uqF{--s98m9P`We87!sL^N_c3abP=5ITBX+Y+gJwe>lqgRSo5U5;Ow c&7{{&slQzG@%z