198 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Thierry Pouplier	be9c02389a	hermes: add dashboard-cathou to s6 boot bundle (auto-start on recreate)	2026-09-18 17:12:26 -04:00
Thierry Pouplier	888523079f	hermes: route all dashboard/honcho secrets through age-backed env (no hardcoded values for public repo); add main-dash auth env	2026-09-18 16:23:28 -04:00
Thierry Pouplier	5e8d669a2c	hermes: add supervised dashboard-cathou service (:9120, own identity). Second s6 service reusing the main dashboard machinery, mounted read-only; env injected in compose. Runs the command directly to dodge the with-contenv env reset that would collapse it to the main service identity.	2026-09-18 16:04:06 -04:00
Thierry Pouplier	9b621c0410	honcho: disable app-level auth (blank JWT secret was crash-looping; internal+Authelia-ringfenced)	2026-09-16 15:36:43 -04:00
Thierry Pouplier	3353c6fba1	hermes: fix vpn_net networks syntax (map form) for compose v5; drop dead build ssh key	2026-09-15 17:18:28 -04:00
gortium	d57169ad3d	feat: attach hermes to vpn_net at 172.24.0.5 for desktop remote-gateway access	2026-09-15 15:28:51 -04:00
gortium	48c4c1b232	fix: remove stale COPY line for deleted run-multi-gateways.sh	2026-07-07 22:33:35 -04:00
Thierry Pouplier	53fcd59dff	Merge pull request 'Simplify: use native s6 multi-profile supervision, drop custom scripts' (#58) from fix/hermes-entrypoint-simple into master ... Reviewed-on: #58	2026-07-08 02:25:01 +00:00
gortium	3f82c9d321	Simplify: drop custom scripts, use native s6 multi-profile supervision ... - Remove patch_tts_tool.py (orphaned) - Remove run-multi-gateways.sh (replaced by s6 native profile supervision) - Remove start-hermes.sh (overengineered — the image does this natively) - compose.yml: command: gateway run, drop HERMES_PROFILES env var - Dockerfile: revert start-hermes.sh COPY addition Per-profile gateways are now managed by s6-overlay natively: profiles with desired_state=running in gateway_state.json are auto-started by the s6 reconciler on boot.	2026-07-07 22:21:36 -04:00
Thierry Pouplier	a7e463dcd6	Merge pull request 'fix: s6-overlay entrypoint crash — replace broken bash→tini→entrypoint.sh chain' (#56) from fix/hermes-s6-overlay-entrypoint-crash into master ... Reviewed-on: #56	2026-07-08 02:04:44 +00:00
Thierry Pouplier	59fc28401e	Merge pull request 'fix/hermes-gosu-honcho-ssh' (#57) from fix/hermes-gosu-honcho-ssh into master ... Reviewed-on: #57	2026-07-08 02:02:50 +00:00
gortium	f4dd57fa60	fix: add start-hermes.sh baked into image, replace broken ENTRYPOINT ... - New start-hermes.sh: multi-profile launcher that works with s6-overlay's main-program model (replaces bash->tini->entrypoint.sh chain) - Dockerfile: COPY start-hermes.sh into /usr/local/bin/ alongside run-multi-gateways.sh (which is now unused but kept for reference) - compose.yml: remove entrypoint override, CMD now points at /usr/local/bin/start-hermes.sh via the image default ENTRYPOINT Fixes the SIGTERM crash loop caused by S6_CMD_ARG0 being unset when the deprecated entrypoint.sh shim bypassed s6-overlay's /init.	2026-07-07 21:58:41 -04:00
gortium	a6b25ee84d	fix: replace broken ENTRYPOINT override with s6-overlay compatible CMD ... The custom ENTRYPOINT chained bash -> tini -g -> deprecated entrypoint.sh, bypassing s6-overlay's /init entirely. This left S6_CMD_ARG0 unset and the orphan -g flag crashed rc.init with '-g: not found' -> SIGTERM -> restart loop. Fix: - Remove the ENTRYPOINT override so the image default is used: ENTRYPOINT ['/init', '/opt/hermes/docker/main-wrapper.sh'] - Change CMD to point at /opt/data/start-hermes.sh, a new launcher that starts per-profile gateways in background then the default gateway in foreground (via s6-overlay's main-program model). The old /usr/local/bin/run-multi-gateways.sh is no longer called.	2026-07-07 21:56:33 -04:00
Hermes	8df60c2911	fix: update openconcho SHA (template literal for ReactNode)	2026-07-07 20:52:38 -04:00
Hermes	a79f0610ec	fix: update openconcho SHA (cast metadata.name to string)	2026-07-07 20:50:02 -04:00
Hermes	be757bc683	chore: update openconcho to upstream v0.16.0 (rebase feat/fix-openconcho on upstream/main) ... - rebased custom commits on upstream v0.16.0 - 125 upstream commits since fork base (e490d91) - includes dashboard, fleet, dark mode, deps consolidation - our TS fixes preserved on top	2026-07-07 20:43:02 -04:00
Hermes	3508ae2481	fix: update openconcho SHA to HEAD of feat/fix-openconcho branch (was force-pushed)	2026-07-07 20:09:16 -04:00
Hermes	eb5176949e	fix: add gosu to hermes SSH keyscan to honcho builder ... - Install gosu in hermes image so run-multi-gateways.sh can drop privileges when USER hermes is set at the end of the Dockerfile. - Add openssh-client + ssh-keyscan to the openconcho-builder stage so SSH host key verification passes during the first Gitea clone.	2026-07-07 19:48:59 -04:00
Hermes	5db33ddfd2	fix: bump llama.cpp from b9596 to b9890 for slot/stability fixes ... b9596 (Dec 2024) has known slot deadlock on first request causing container freeze. b9890 includes: - Slot selection consolidation (#24755) - HIP fast-math support (#23862) - Hundreds of stability and memory fixes Compatible with ROCm 6.1 + gfx906 (same build flags).	2026-07-07 16:57:22 -04:00
Thierry Pouplier	2d2787f404	Merge pull request 'fix: add missing USER hermes at end of Dockerfile' (#55) from local_changes into master ... Reviewed-on: #55	2026-07-07 19:41:28 +00:00
Hermes	dab1ecfdd7	Merge remote-tracking branch 'origin/master' into local_changes ... # Conflicts: # ai/compose.yml	2026-07-07 15:04:00 -04:00
Thierry Pouplier	e595381173	Merge pull request 'feat: add llama-cpp-hermes service with ROCm 6.1 + gfx906 support' (#54) from feat/hermes43-llamacpp into master ... Reviewed-on: #54	2026-07-07 19:00:03 +00:00
Hermes	54e0661396	fix: add missing USER hermes at end of Dockerfile ... The Dockerfile was switching to USER root for the final chown but never switched back to USER hermes. This caused ALL container processes to run as root (uid 0) instead of the hermes user (uid 10000). The entrypoint's gosu privilege drop only caught the main exec chain, leaving backgrounded subprocesses (dashboard PTY sessions, workers with start_new_session=True) running as root — creating files owned by root in ExoKortex and breaking Syncthing sync. Adding USER hermes at the end ensures the container runs unprivileged and ALL child processes inherit uid 10000 from the start.	2026-07-07 14:58:44 -04:00
Hermes	1e290410de	Merge branch 'master' into feat/hermes43-llamacpp ... Conflicts resolved: - hermes env: keep OLLAMA_HOST=ollama-cpu + master's new vars - ollama→ollama-cpu rename: keep our rename over master's ollama	2026-07-07 14:50:59 -04:00
Hermes	80c9906757	fix: rename ollama→ollama-cpu, fix llama-cpp-hermes YAML indentation ... - Rename ollama service to ollama-cpu (CPU-only for bge-m3 embeddings) - Fix llama-cpp-hermes indented under networks instead of as top-level service - Update hermes OLLAMA_HOST to point to ollama-cpu Part of PR #54 GPU/ROCm refactor	2026-07-07 14:29:23 -04:00
Thierry Pouplier	2571930efa	Local change dump	2026-07-07 14:11:31 -04:00
Thierry Pouplier	e525145057	Merge pull request 'feat: add Honcho memory provider with Traefik + Authelia' (#48) from feat/honcho-only into master ... Reviewed-on: #48	2026-06-15 17:08:20 +00:00
Thierry Pouplier	e5f1d98bd9	Merge remote-tracking branch 'origin/feat/honcho-only' into feat/honcho-only	2026-06-15 13:06:22 -04:00
Thierry Pouplier	82e3005d1f	Added opencode api key	2026-06-15 13:05:10 -04:00
Thierry Pouplier	d88db00f3f	deleted tmp files... fucking llm...	2026-06-15 13:04:18 -04:00
Thierry Pouplier	cf1e316af1	No more pre-created network, all bridge	2026-06-11 15:37:17 -04:00
Thierry Pouplier	0bff81bfa0	Fixed the honcho path	2026-06-11 15:30:59 -04:00
Hermes	3c92d93366	feat: add llama-cpp-hermes service with ROCm 6.1 + gfx906 support ... - Add custom llama.cpp Dockerfile with ROCm 6.1 + gfx906 (MI50) build - Add llama-cpp-hermes service serving Hermes 4.3 on dual MI50 GPUs - Strip GPU devices/ROCm env from ollama service (CPU-only for embeddings) Hermes 4.3 runs at ~19 t/s on dual MI50s with 160K context.	2026-06-11 11:41:42 -04:00
Hermes	b185d43d67	switch-openconcho-to-fork	2026-05-28 17:15:36 -04:00
Hermes	efaf3550b9	remove_temp_scratch_files	2026-05-25 16:52:13 -04:00
Thierry Pouplier	1460085718	Merge remote-tracking branch 'refs/remotes/origin/feat/honcho-only' into feat/honcho-only	2026-05-25 16:39:52 -04:00
Thierry Pouplier	6069ebd6a4	Removed version in compose	2026-05-25 16:37:25 -04:00
Hermes	5dd6e9a442	fix_embedding_dims_to_1024_match_db	2026-05-25 16:34:00 -04:00
Hermes	54e3868f94	fix_honcho_cmd_use_bash_instead_of_sh	2026-05-25 16:21:18 -04:00
Hermes	68009f05c1	fix_honcho_dockerfile_ssh_client_and_keyscan	2026-05-25 16:10:57 -04:00
Thierry Pouplier	87e546beae	merge commit	2026-05-25 16:08:19 -04:00
Thierry Pouplier	b4a0e4449d	Fixed the honcho name	2026-05-25 16:04:19 -04:00
Hermes	9635ed8e7e	fix_honcho_build_ssh	2026-05-25 16:03:12 -04:00
Hermes	2e8e0b4561	fix_honcho_traefik_network_label	2026-05-25 15:09:18 -04:00
Hermes	945d4e43a5	fix_compose_env_vars	2026-05-25 15:02:22 -04:00
Hermes	14eba26b6b	fix: add dream model_configs with api_key_env for HONCHO_OPENAI_API_KEY	2026-05-25 14:51:49 -04:00
Hermes	6774af7c13	fix: use HONCHO_OPENAI_API_KEY variable (user's existing secret)	2026-05-25 14:34:30 -04:00
Hermes	c9a3386138	fix: add HONCHO_OPENAI_API_KEY env to fix deriver/dream LLM calls	2026-05-25 14:11:54 -04:00
Hermes	51018024e9	fix: enable Honcho dream (ENABLED = true)	2026-05-25 13:18:12 -04:00
Hermes	c9b9f63a34	fix: disable kanban auto-dispatch for default gateway	2026-05-25 13:13:02 -04:00