hermes: remove module, secrets, flake input, and host entry (VM to be decommissioned)

flake.nix

@@ -3,7 +3,6 @@
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
 
     hyprland.url = "github:hyprwm/Hyprland";
-    hermes-agent.url = "github:NousResearch/hermes-agent";
     agenix.url = "github:ryantm/agenix";
 
     hjem = {
@@ -60,7 +59,6 @@
         nixos-vm2 = mkHost "nixos-vm2" [ "core" ];
         qemu-vm = mkHost "qemu-vm" [ "core" ];
         goyplex-vm = mkHost "goyplex-vm" [ "k3s-server" ];
-        hermes-vm = mkHost "hermes-vm" [ "hermes" ];
       };
     };
 }

modules/hermes/default.nix

@@ -1,7 +0,0 @@
-{
-  imports = [
-    ./sudo.nix
-    ./hermes.nix
-    ./secrets
-  ];
-}

modules/hermes/hermes.nix

@@ -1,134 +0,0 @@
-{
-  inputs,
-  config,
-  pkgs,
-  ...
-}:
-
-{
-  imports = [ inputs.hermes-agent.nixosModules.default ];
-
-  services.hermes-agent = {
-    enable = true;
-    addToSystemPackages = true;
-    environmentFiles = [
-      config.age.secrets.hermes-env.path
-    ];
-
-    environment = {
-      BW_SERVERURL = "https://vault.archfox.org";
-    };
-
-    container = {
-      image = "debian:bookworm";
-      backend = "docker";
-      enable = true;
-      hostUsers = [ "poslop" ];
-      extraOptions = [
-        "-p"
-        "9119:9119"
-        "-p"
-        "8642:8642"
-        "-p"
-        "9120:9120"
-      ];
-    };
-
-    settings = {
-      approvals = {
-        mode = "off";
-        cron_mode = "deny";
-        mcp_reload_confirm = "false";
-      };
-
-      gateway = {
-        multiplex_profiles = true;
-      };
-
-      delegation = {
-        model = "z-ai/glm-5.3-flash";
-        provider = "nous";
-      };
-
-      memory = {
-        provider = "holographic";
-        memory_enabled = true;
-        user_profile_enabled = true;
-      };
-
-      display = {
-        credits_notices = true;
-      };
-
-      discord = {
-        group_sessions_per_user = false;
-        reactions = false;
-      };
-    };
-  };
-
-  systemd.services.hermes-serve = {
-    description = "Hermes Agent Serve (desktop remote backend)";
-    wantedBy = [ "multi-user.target" ];
-    after = [
-      "hermes-agent.service"
-      "network-online.target"
-    ];
-    wants = [ "network-online.target" ];
-    requires = [ "hermes-agent.service" ];
-
-    serviceConfig = {
-      Type = "simple";
-      Restart = "always";
-      RestartSec = 5;
-      TimeoutStopSec = 15;
-    };
-
-    script = ''
-      exec ${pkgs.docker}/bin/docker exec -i -u hermes \
-        -e HERMES_HOME=/data/.hermes \
-        -e HOME=/home/hermes \
-        hermes-agent \
-        /data/current-package/bin/hermes serve \
-          --host 0.0.0.0 \
-          --port 9120
-    '';
-  };
-
-  systemd.services.hermes-dashboard = {
-    description = "Hermes Agent Dashboard (web UI)";
-    wantedBy = [ "multi-user.target" ];
-    after = [
-      "hermes-agent.service"
-      "network-online.target"
-    ];
-    wants = [ "network-online.target" ];
-    requires = [ "hermes-agent.service" ];
-
-    serviceConfig = {
-      Type = "simple";
-      Restart = "always";
-      RestartSec = 5;
-      TimeoutStopSec = 15;
-    };
-
-    script = ''
-      exec ${pkgs.docker}/bin/docker exec -i -u hermes \
-        -e HERMES_HOME=/data/.hermes \
-        -e HOME=/home/hermes \
-        hermes-agent \
-        /data/current-package/bin/hermes dashboard \
-          --host 0.0.0.0 \
-          --port 9121 \
-          --no-open
-    '';
-  };
-
-  networking.firewall.allowedTCPPorts = [
-    8080
-    9119
-    9120
-    9121
-    8642
-  ];
-}

modules/hermes/secrets/agenix.nix

@@ -1,15 +0,0 @@
-{
-  inputs,
-  pkgs,
-  username,
-  ...
-}:
-
-{
-  imports = [ inputs.agenix.nixosModules.default ];
-  age.secrets."hermes-env".file = ./hermes-env.age;
-
-  hjem.users.${username}.packages = with pkgs; [
-    inputs.agenix.packages."${pkgs.stdenv.hostPlatform.system}".default
-  ];
-}

modules/hermes/secrets/default.nix

@@ -1,5 +0,0 @@
-{
-  imports = [
-    ./agenix.nix
-  ];
-}

modules/hermes/secrets/secrets.nix

@@ -1,6 +0,0 @@
-let
-  hermes-vm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIFqtbtEYL4pPNvJV64FjDXT6zT2ew0IFK8XHJ9LP7ae";
-in
-{
-  "hermes-env.age".publicKeys = [ hermes-vm ];
-}

modules/hermes/sudo.nix

@@ -1,13 +0,0 @@
-{
-  security.sudo.extraRules = [
-    {
-      users = [ "poslop" ];
-      commands = [
-        {
-          command = "/run/current-system/sw/bin/docker";
-          options = [ "NOPASSWD" ];
-        }
-      ];
-    }
-  ];
-}