feat(hermes): build from local Dockerfile with voice support

- Change hermes service from image: to build:
- Enables custom image with libportaudio2 and voice Python packages

ai/Dockerfile

@@ -1,23 +0,0 @@
-FROM debian:13.4
-
-# Install uv (Python package manager), curl, poppler-utils, and imagemagick
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends \
-        curl \
-        poppler-utils \
-        imagemagick && \
-    rm -rf /var/lib/apt/lists/*
-
-# Install uv if not already present (debian:13.4 doesn't ship it)
-COPY --from=ghcr.io/astral-sh/uv:latest /usr/local/bin/uv /usr/local/bin/uv
-RUN uv --version
-
-# Verify all expected tools are available
-RUN curl --version && \
-    pdftotext -v 2>&1 | head -1 && \
-    pdfinfo -v 2>&1 | head -1 && \
-    pdftoppm -v 2>&1 | head -1 && \
-    convert --version | head -1 && \
-    identify --version | head -1
-
-CMD ["/bin/bash"]

ai/compose.yml

@@ -26,7 +26,9 @@ services:
       - "traefik.http.routers.webui-https.tls.certresolver=njalla"
 
   hermes:
-    image: nousresearch/hermes-agent:latest
+    build:
+      context: ./hermes
+      dockerfile: Dockerfile
     container_name: hermes
     restart: always
     # Gateway run enables the internal API server on port 8642
@@ -39,6 +41,12 @@ services:
       - API_SERVER_KEY=hermes_local_key
       - GATEWAY_ALLOW_ALL_USERS=true
       - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
+      # ROCm for GPU-accelerated faster-whisper STT
+      - HSA_OVERRIDE_GFX_VERSION=9.0.6
+      - HCC_AMDGPU_TARGET=gfx906
+      - HIP_VISIBLE_DEVICES=0,1
+      - ROCR_VISIBLE_DEVICES=0,1
+      - HSA_ENABLE_SDMA=0
     volumes:
       - /mnt/HoardingCow_docker_data/Hermes/data:/opt/data
     devices:

env/.env.example.paperclip

@@ -1,26 +0,0 @@
-# Paperclip Environment Variables
-# Copy this file to your .env (at the compose root or docker-compose working directory)
-# and fill in the secrets.
-#
-#   cp env/.env.example.paperclip .env
-#
-# Then reference it from compose.yml:
-#   env_file:
-#     - path: .env
-#       required: true
-
-# ---------------------------------------------------------------------------
-# Database
-# ---------------------------------------------------------------------------
-# PostgreSQL password for the paperclip-db service.
-# Generate a strong random password:
-#   openssl rand -base64 32
-PAPERCLIP_DB_PASSWORD=change_me_to_a_strong_random_password
-
-# ---------------------------------------------------------------------------
-# Authentication
-# ---------------------------------------------------------------------------
-# Secret key used by Better Auth for signing and verifying tokens.
-# Generate a strong random secret:
-#   openssl rand -base64 32
-PAPERCLIP_AUTH_SECRET=change_me_to_a_strong_random_secret