hermes installation

hermes
2026-04-20 19:10:28 +02:00
parent edf5b4fda8
commit fc38fb2ab6
6 changed files with 639 additions and 0 deletions
@@ -0,0 +1,70 @@
+services:
+  hermes-gateway:
+    image: nousresearch/hermes-agent:v2026.4.16
+    container_name: hermes-gateway
+    restart: unless-stopped
+    init: true
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    pids_limit: 256
+    environment:
+      TZ: ${TZ:-Europe/Berlin}
+      HERMES_HOME: /opt/data
+    volumes:
+      - /mnt/user/appdata/hermes-agent/data:/opt/data
+      - /mnt/user/appdata/hermes-agent/ssh:/root/.ssh
+      - /mnt/user/appdata/secrets/hermes_runner_id_ed25519:/root/.ssh/id_ed25519:ro
+      - ./config/hermes/config.yaml:/opt/data/config.yaml:ro
+    expose:
+      - "8642"
+    networks:
+      - hermes_net
+    healthcheck:
+      test: ["CMD", "python3", "-c", "import urllib.request; urllib.request.urlopen('http://127.0.0.1:8642/health', timeout=3).read()"]
+      interval: 30s
+      timeout: 5s
+      retries: 5
+      start_period: 60s
+
+  hermes-dashboard:
+    image: nousresearch/hermes-agent:v2026.4.16
+    container_name: hermes-dashboard
+    restart: unless-stopped
+    init: true
+    command: dashboard --host 0.0.0.0
+    security_opt:
+      - no-new-privileges:true
+    cap_drop:
+      - ALL
+    pids_limit: 128
+    depends_on:
+      hermes-gateway:
+        condition: service_healthy
+    environment:
+      TZ: ${TZ:-Europe/Berlin}
+      HERMES_HOME: /opt/data
+      GATEWAY_HEALTH_URL: http://hermes-gateway:8642
+    volumes:
+      - /mnt/user/appdata/hermes-agent/data:/opt/data:ro
+      - ./config/hermes/config.yaml:/opt/data/config.yaml:ro
+    networks:
+      - hermes_net
+      - frontend_net
+    labels:
+      - traefik.enable=true
+      - traefik.docker.network=frontend_net
+      - traefik.http.routers.hermes-dashboard.rule=Host(`${HERMES_DASHBOARD_HOST}`)
+      - traefik.http.routers.hermes-dashboard.entrypoints=websecure
+      - traefik.http.routers.hermes-dashboard.tls=true
+      - traefik.http.routers.hermes-dashboard.tls.certresolver=le
+      - traefik.http.routers.hermes-dashboard.middlewares=authelia@file,secure-headers@file
+      - traefik.http.services.hermes-dashboard.loadbalancer.server.port=9119
+
+networks:
+  frontend_net:
+    external: true
+  hermes_net:
+    name: hermes_net
+    driver: bridge