{
  inputs,
  config,
  ...
}:

{
  imports = [ inputs.hermes-agent.nixosModules.default ];

  services.hermes-agent = {
    enable = true;
    addToSystemPackages = true;
    environmentFiles = [
      config.age.secrets.hermes-env.path
    ];

    container = {
      image = "debian:bookworm";
      backend = "docker";
      enable = true;
      hostUsers = [ "poslop" ];
      extraOptions = [
        "-p"
        "9119:9119"
        "-p"
        "8642:8642"
      ];
    };

    settings = {
      approvals = {
        mode = "off";
        cron_mode = "deny";
        mcp_reload_confirm = "false";
      };

      memory = {
        memory_enabled = true;
        user_profile_enabled = true;
      };

      display = {
        credits_notices = true;
      };

      delegation = {
        model = "us.anthropic.claude-sonnet-5";
        provider = "bedrock";
      };

      discord = {
        group_sessions_per_user = false;
        reactions = false;
      };
    };
  };

  networking.firewall.allowedTCPPorts = [
    8080
    9119
    8642
  ];
}