From acf45acdd961a99c7b3edc3134009e5c1f9d9407 Mon Sep 17 00:00:00 2001
From: Thierry Pouplier <tpouplier@tdnde.com>
Date: Tue, 5 May 2026 01:48:21 +0000
Subject: [PATCH] feat: enable NET_ADMIN for Hermes container to support
 WireGuard

---
 ai/compose.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/ai/compose.yml b/ai/compose.yml
index 460d44d..a612889 100644
--- a/ai/compose.yml
+++ b/ai/compose.yml
@@ -26,9 +26,11 @@ services:
       - "traefik.http.routers.webui-https.tls.certresolver=njalla"
 
   hermes:
-    image: nousresearch/hermes-agent:latest
+    build: ./
     container_name: hermes
     restart: always
+    cap_add:
+      - NET_ADMIN
     # Gateway run enables the internal API server on port 8642
     command: gateway run
     environment: