hermes memory

modules/hermes/default.nix

@@ -2,5 +2,6 @@
   imports = [
     ./sudo.nix
     ./hermes.nix
+    ./secrets
   ];
 }

modules/hermes/hermes.nix

@@ -1,12 +1,49 @@
+{ inputs, config, ... }:
+
 {
+  imports = [ inputs.hermes-agent.nixosModules.default ];
+
   services.hermes-agent = {
     enable = true;
     addToSystemPackages = true;
+    extraDependencyGroups = [
+      "messaging"
+      "bedrock"
+    ];
+    environmentFiles = [
+      config.age.secrets.hermes-env.path
+    ];
     container = {
+      image = "debian:bookworm";
+      backend = "docker";
       enable = true;
       hostUsers = [ "poslop" ];
     };
 
-    settings.model.base_url = "http://10.0.1.139:5000/v1";
+    settings = {
+      model = {
+        default = "Qwen3.6-35B-A3B-Uncensored-HauhauCS-Aggressive-Q4_K_P.gguf";
+        provider = "local";
+      };
+
+      memory = {
+        memory_enabled = true;
+        user_profile_enabled = true;
+      };
+
+      model_aliases = {
+        bedrock = {
+          model = "us.anthropic.claude-sonnet-4-6";
+          provider = "bedrock";
+        };
+      };
+
+      custom_providers = [
+        {
+          name = "local";
+          base_url = "http://10.0.1.139:5000/v1";
+        }
+      ];
+    };
   };
 }

modules/hermes/secrets/agenix.nix

@@ -0,0 +1,15 @@
+{
+  inputs,
+  pkgs,
+  username,
+  ...
+}:
+
+{
+  imports = [ inputs.agenix.nixosModules.default ];
+  age.secrets."hermes-env".file = ./hermes-env.age;
+
+  hjem.users.${username}.packages = with pkgs; [
+    inputs.agenix.packages."${system}".default
+  ];
+}

modules/hermes/secrets/default.nix

@@ -0,0 +1,5 @@
+{
+  imports = [
+    ./agenix.nix
+  ];
+}

modules/hermes/secrets/secrets.nix

@@ -0,0 +1,6 @@
+let
+  hermes-vm = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIFqtbtEYL4pPNvJV64FjDXT6zT2ew0IFK8XHJ9LP7ae";
+in
+{
+  "hermes-env.age".publicKeys = [ hermes-vm ];
+}