fix: use mautrix[encryption] instead of matrix-nio for Matrix bridge

The Hermes Matrix gateway uses the mautrix SDK, not matrix-nio.
This fixes E2EE support by installing the correct library.

Refs: PR #2

ai/Dockerfile

@@ -1,23 +0,0 @@
-FROM debian:13.4
-
-# Install uv (Python package manager), curl, poppler-utils, and imagemagick
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-        curl \
-        poppler-utils \
-        imagemagick && \
-    rm -rf /var/lib/apt/lists/*
-
-# Install uv if not already present (debian:13.4 doesn't ship it)
-COPY --from=ghcr.io/astral-sh/uv:latest /usr/local/bin/uv /usr/local/bin/uv
-RUN uv --version
-
-# Verify all expected tools are available
-RUN curl --version && \
-    pdftotext -v 2>&1 | head -1 && \
-    pdfinfo -v 2>&1 | head -1 && \
-    pdftoppm -v 2>&1 | head -1 && \
-    convert --version | head -1 && \
-    identify --version | head -1
-
-CMD ["/bin/bash"]

ai/compose.yml

@@ -30,7 +30,10 @@ services:
     container_name: hermes
     restart: always
     # Gateway run enables the internal API server on port 8642
-    command: gateway run
+    # Install openai and mautrix[encryption] for Matrix bridge with E2EE support on startup
+    # Uses uv (modern Python package manager) with --system flag for venv installation
+    entrypoint: >
+      sh -c "/opt/hermes/.venv/bin/uv pip install openai mautrix[encryption] --system -q && /opt/hermes/.venv/bin/hermes gateway run"
     environment:
       - OLLAMA_HOST=http://ollama:11434
       - API_SERVER_ENABLED=true
@@ -41,6 +44,7 @@ services:
       - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
     volumes:
       - /mnt/HoardingCow_docker_data/Hermes/data:/opt/data
+      - /mnt/HoardingCow_docker_data/Hermes/venv:/opt/hermes/.venv
     devices:
       - /dev/kfd:/dev/kfd
       - /dev/dri:/dev/dri

env/.env.example.paperclip

@@ -1,26 +0,0 @@
-# Paperclip Environment Variables
-# Copy this file to your .env (at the compose root or docker-compose working directory)
-# and fill in the secrets.
-#
-#   cp env/.env.example.paperclip .env
-#
-# Then reference it from compose.yml:
-#   env_file:
-#     - path: .env
-#       required: true
-
-# ---------------------------------------------------------------------------
-# Database
-# ---------------------------------------------------------------------------
-# PostgreSQL password for the paperclip-db service.
-# Generate a strong random password:
-#   openssl rand -base64 32
-PAPERCLIP_DB_PASSWORD=change_me_to_a_strong_random_password
-
-# ---------------------------------------------------------------------------
-# Authentication
-# ---------------------------------------------------------------------------
-# Secret key used by Better Auth for signing and verifying tokens.
-# Generate a strong random secret:
-#   openssl rand -base64 32
-PAPERCLIP_AUTH_SECRET=change_me_to_a_strong_random_secret