fix: switch to linuxserver/wireguard instead of wg-easy

ai/compose.yml

@@ -26,9 +26,7 @@ services:
       - "traefik.http.routers.webui-https.tls.certresolver=njalla"
 
   hermes:
-    build:
+    image: nousresearch/hermes-agent:latest
-      context: ./hermes
-      dockerfile: Dockerfile
     container_name: hermes
     restart: always
     # Gateway run enables the internal API server on port 8642
@@ -41,12 +39,6 @@ services:
       - API_SERVER_KEY=hermes_local_key
       - GATEWAY_ALLOW_ALL_USERS=true
       - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
-      # ROCm for GPU-accelerated faster-whisper STT
-      - HSA_OVERRIDE_GFX_VERSION=9.0.6
-      - HCC_AMDGPU_TARGET=gfx906
-      - HIP_VISIBLE_DEVICES=0,1
-      - ROCR_VISIBLE_DEVICES=0,1
-      - HSA_ENABLE_SDMA=0
     volumes:
       - /mnt/HoardingCow_docker_data/Hermes/data:/opt/data
     devices:

vpn/compose.yml

@@ -0,0 +1,28 @@
+version: "3.8"
+
+services:
+  wireguard:
+    image: ghcr.io/linuxserver/wireguard:latest
+    container_name: wireguard
+    cap_add:
+      - NET_ADMIN
+      - SYS_MODULE
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=America/Montreal
+    ports:
+      - "51820:51820/udp"
+    volumes:
+      - /mnt/HoardingCow_docker_data/WireGuard:/config:rw
+    sysctls:
+      - net.ipv4.conf.all.src_valid_mark=1
+      - net.ipv4.ip_forward=1
+    restart: unless-stopped
+    networks:
+      - vpn_net
+
+networks:
+  vpn_net:
+    external: true
+    name: vpn_net