hermes: remove module, secrets, flake input, and host entry (VM to be decommissioned)

This commit is contained in:
2026-09-04 15:05:49 -05:00
parent 804764f874
commit 8ac8e29256
8 changed files with 0 additions and 182 deletions
-7
View File
@@ -1,7 +0,0 @@
{
imports = [
./sudo.nix
./hermes.nix
./secrets
];
}
-134
View File
@@ -1,134 +0,0 @@
{
inputs,
config,
pkgs,
...
}:
{
imports = [ inputs.hermes-agent.nixosModules.default ];
services.hermes-agent = {
enable = true;
addToSystemPackages = true;
environmentFiles = [
config.age.secrets.hermes-env.path
];
environment = {
BW_SERVERURL = "https://vault.archfox.org";
};
container = {
image = "debian:bookworm";
backend = "docker";
enable = true;
hostUsers = [ "poslop" ];
extraOptions = [
"-p"
"9119:9119"
"-p"
"8642:8642"
"-p"
"9120:9120"
];
};
settings = {
approvals = {
mode = "off";
cron_mode = "deny";
mcp_reload_confirm = "false";
};
gateway = {
multiplex_profiles = true;
};
delegation = {
model = "z-ai/glm-5.3-flash";
provider = "nous";
};
memory = {
provider = "holographic";
memory_enabled = true;
user_profile_enabled = true;
};
display = {
credits_notices = true;
};
discord = {
group_sessions_per_user = false;
reactions = false;
};
};
};
systemd.services.hermes-serve = {
description = "Hermes Agent Serve (desktop remote backend)";
wantedBy = [ "multi-user.target" ];
after = [
"hermes-agent.service"
"network-online.target"
];
wants = [ "network-online.target" ];
requires = [ "hermes-agent.service" ];
serviceConfig = {
Type = "simple";
Restart = "always";
RestartSec = 5;
TimeoutStopSec = 15;
};
script = ''
exec ${pkgs.docker}/bin/docker exec -i -u hermes \
-e HERMES_HOME=/data/.hermes \
-e HOME=/home/hermes \
hermes-agent \
/data/current-package/bin/hermes serve \
--host 0.0.0.0 \
--port 9120
'';
};
systemd.services.hermes-dashboard = {
description = "Hermes Agent Dashboard (web UI)";
wantedBy = [ "multi-user.target" ];
after = [
"hermes-agent.service"
"network-online.target"
];
wants = [ "network-online.target" ];
requires = [ "hermes-agent.service" ];
serviceConfig = {
Type = "simple";
Restart = "always";
RestartSec = 5;
TimeoutStopSec = 15;
};
script = ''
exec ${pkgs.docker}/bin/docker exec -i -u hermes \
-e HERMES_HOME=/data/.hermes \
-e HOME=/home/hermes \
hermes-agent \
/data/current-package/bin/hermes dashboard \
--host 0.0.0.0 \
--port 9121 \
--no-open
'';
};
networking.firewall.allowedTCPPorts = [
8080
9119
9120
9121
8642
];
}
-15
View File
@@ -1,15 +0,0 @@
{
inputs,
pkgs,
username,
...
}:
{
imports = [ inputs.agenix.nixosModules.default ];
age.secrets."hermes-env".file = ./hermes-env.age;
hjem.users.${username}.packages = with pkgs; [
inputs.agenix.packages."${pkgs.stdenv.hostPlatform.system}".default
];
}
-5
View File
@@ -1,5 +0,0 @@
{
imports = [
./agenix.nix
];
}
Binary file not shown.
-6
View File
@@ -1,6 +0,0 @@
let
hermes-vm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIFqtbtEYL4pPNvJV64FjDXT6zT2ew0IFK8XHJ9LP7ae";
in
{
"hermes-env.age".publicKeys = [ hermes-vm ];
}
-13
View File
@@ -1,13 +0,0 @@
{
security.sudo.extraRules = [
{
users = [ "poslop" ];
commands = [
{
command = "/run/current-system/sw/bin/docker";
options = [ "NOPASSWD" ];
}
];
}
];
}