From bc49391b4f67f1db5d9bfcd35a299367210da330 Mon Sep 17 00:00:00 2001
From: Thierry Pouplier <tpouplier@tdnde.com>
Date: Tue, 5 May 2026 02:11:37 +0000
Subject: [PATCH] chore: clean up WireGuard from Hermes Dockerfile, keep custom
 build

---
 ai/Dockerfile  | 3 +--
 ai/compose.yml | 2 --
 2 files changed, 1 insertion(+), 4 deletions(-)

diff --git a/ai/Dockerfile b/ai/Dockerfile
index edbb07f..1edd524 100644
--- a/ai/Dockerfile
+++ b/ai/Dockerfile
@@ -21,8 +21,7 @@ RUN apt-get update && \
         texlive-latex-base texlive-latex-extra texlive-fonts-recommended texlive-xetex texlive-science \
         qemu-user-static binfmt-support qemu-user-binfmt \
         emacs-nox \
-        libportaudio2 \
-        wireguard-tools openresolv && \
+        libportaudio2 && \
     rm -rf /var/lib/apt/lists/*
 
 # Non-root user for runtime; UID can be overridden via HERMES_UID at runtime
diff --git a/ai/compose.yml b/ai/compose.yml
index a612889..fa3b84c 100644
--- a/ai/compose.yml
+++ b/ai/compose.yml
@@ -29,8 +29,6 @@ services:
     build: ./
     container_name: hermes
     restart: always
-    cap_add:
-      - NET_ADMIN
     # Gateway run enables the internal API server on port 8642
     command: gateway run
     environment: