Something went wrong. Try again.
The agent that grows with you
Something went wrong. Try again.
hermes-agent docker-compose.yml
2.2 kB · 59 lines
YAML
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960## docker-compose.yml for Hermes Agent## Usage:# HERMES_UID=$(id -u) HERMES_GID=$(id -g) docker compose up -d## Set HERMES_UID / HERMES_GID to the host user that owns ~/.hermes so# files created inside the container stay readable/writable on the host.# The entrypoint remaps the internal `hermes` user to these values via# usermod/groupmod + gosu.## Security notes:# - The dashboard service binds to 127.0.0.1 by default. It stores API# keys; exposing it on LAN without auth is unsafe. If you want remote# access, use an SSH tunnel or put it behind a reverse proxy that# adds authentication — do NOT pass --insecure --host 0.0.0.0.# - The gateway's API server is off unless you uncomment API_SERVER_KEY# and API_SERVER_HOST. See docs/user-guide/api-server.md before doing# this on an internet-facing host.#services: gateway: build: . image: hermes-agent container_name: hermes restart: unless-stopped network_mode: host volumes: - ~/.hermes:/opt/data environment: - HERMES_UID=${HERMES_UID:-10000} - HERMES_GID=${HERMES_GID:-10000} # To expose the OpenAI-compatible API server beyond localhost, # uncomment BOTH lines (API_SERVER_KEY is mandatory for auth): # - API_SERVER_HOST=0.0.0.0 # - API_SERVER_KEY=${API_SERVER_KEY} # Microsoft Teams — uncomment and fill in to enable Teams gateway. # Register your bot at https://dev.botframework.com/ to get these values. # - TEAMS_CLIENT_ID=${TEAMS_CLIENT_ID} # - TEAMS_CLIENT_SECRET=${TEAMS_CLIENT_SECRET} # - TEAMS_TENANT_ID=${TEAMS_TENANT_ID} # - TEAMS_ALLOWED_USERS=${TEAMS_ALLOWED_USERS} # - TEAMS_PORT=3978 command: ["gateway", "run"]
dashboard: image: hermes-agent container_name: hermes-dashboard restart: unless-stopped network_mode: host depends_on: - gateway volumes: - ~/.hermes:/opt/data environment: - HERMES_UID=${HERMES_UID:-10000} - HERMES_GID=${HERMES_GID:-10000} # Localhost-only. For remote access, tunnel via `ssh -L 9119:localhost:9119`. command: ["dashboard", "--host", "127.0.0.1", "--no-open"]