Merge branch 'master' of https://git.kaleschke.info/Micha/homelab-infra

repair

ops/hermes-agent/docker-compose.yml

@@ -8,14 +8,18 @@ services:
       - no-new-privileges:true
     cap_drop:
       - ALL
+    cap_add:
+      - CHOWN
+      - SETUID
+      - SETGID
     pids_limit: 256
     environment:
       TZ: ${TZ:-Europe/Berlin}
       HERMES_HOME: /opt/data
     volumes:
       - /mnt/user/appdata/hermes-agent/data:/opt/data
-      - /mnt/user/appdata/hermes-agent/ssh:/root/.ssh
+      - /mnt/user/appdata/hermes-agent/ssh:/home/hermes/.ssh
-      - /mnt/user/appdata/secrets/hermes_runner_id_ed25519:/root/.ssh/id_ed25519:ro
+      - /mnt/user/appdata/secrets/hermes_runner_id_ed25519:/home/hermes/.ssh/id_ed25519:ro
       - ./config/hermes/config.yaml:/opt/data/config.yaml:ro
     expose:
       - "8642"

ops/hermes-agent/hermes.env.example

@@ -24,7 +24,7 @@ API_SERVER_KEY=replace-with-a-long-random-secret
 # Hermes requires at least 64k context window.
 # -----------------------------------------------------------------------------
 HERMES_MODEL_PROVIDER=custom
-HERMES_MODEL_NAME=your-openai-model-id
+HERMES_MODEL_NAME=gpt-5.4
 HERMES_MODEL_BASE_URL=https://api.openai.com/v1
 
 # Provider credentials
@@ -63,7 +63,7 @@ HASS_URL=http://homeassistant.local:8123
 # SSH terminal backend
 # Hermes will execute terminal commands on the dedicated runner.
 # -----------------------------------------------------------------------------
-TERMINAL_SSH_HOST=192.168.178.250
+TERMINAL_SSH_HOST=192.168.178.143
 TERMINAL_SSH_USER=hermes
 TERMINAL_SSH_PORT=22
-TERMINAL_SSH_KEY=/root/.ssh/id_ed25519
+TERMINAL_SSH_KEY=/home/hermes/.ssh/id_ed25519