How it runs
A dedicated LXC on the AI VLAN runs thehermes gateway daemon under systemd
(Restart=on-failure). The gateway drives the built-in cron scheduler and the
Kanban task board, so the agent keeps working unattended — no laptop, no cloud.
- Brain: an always-on local GPU model (OpenAI-compatible), so the agent never depends on an external API or a sleeping laptop.
- Memory: the built-in
MEMORY.md/USER.mdplus the local Hindsight provider (knowledge-graph recall, fully self-hosted). Everything lives under$HERMES_HOMEon a dedicated volume that is snapshotted and replicated off-node. - Containment: the LXC is the blast-radius boundary — Hermes profiles isolate agent state, not OS access — with deliberately narrow egress.
Reaching it
Headless: SSH in and runhermes for the terminal UI, or drive it through its gateway.
A messaging gateway (Telegram, Discord, …) and multi-agent profiles + Kanban teams
can be layered on later — the agent home is already provisioned for them.
Configuring it
Everything is in$HERMES_HOME/config.yaml (secrets in .env), set non-interactively
with hermes config set <key> <value>:
hermes model; check memory with hermes memory status.
Deployment is fully IaC — a Terraform-managed container plus an Ansible hermes_agent
role install and configure it, with updates managed declaratively through Ansible to prevent configuration drift.