fix: add WORKDIR and httpx dependency to Hermes Dockerfile

- Add explicit WORKDIR /opt/hermes after FROM instruction - Add httpx to pip install for OpenViking plugin support Acceptance: Docker image builds with WORKDIR=/opt/hermes and httpx available in the venv.
Merge PR #2 : fix Matrix bridge ModuleNotFoundError - install deps to venv with persistence
2026-05-20 14:18:41 -04:00 · 2026-05-20 14:07:59 -04:00 · 2026-05-20 14:05:45 -04:00
5 changed files with 55 additions and 227 deletions
--- a/ai/compose.yml
+++ b/ai/compose.yml
@@ -32,7 +32,7 @@ services:
        - default
    container_name: hermes
    entrypoint: ["/bin/bash", "-c",
-      "bash /opt/data/hermes-tools/install.sh && . /opt/hermes/.venv/bin/activate && uv pip install openai 'mautrix[encryption]' -q && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
+      "bash /opt/data/hermes-tools/install.sh && /opt/hermes/.venv/bin/uv pip install openai mautrix[encryption] --system -q && exec /usr/bin/tini -g -- /opt/hermes/docker/entrypoint.sh \"$@\"",
      "hermes-entrypoint"]
    restart: always
    # Gateway run enables the internal API server on port 8642
@@ -44,7 +44,7 @@ services:
      - API_SERVER_HOST=0.0.0.0
      - API_SERVER_KEY=hermes_local_key
      - GATEWAY_ALLOW_ALL_USERS=true
-      - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
+      - OPENROUTER_API_KEY=${OPEN...KEY}
      # ROCm for GPU-accelerated faster-whisper STT
      - HSA_OVERRIDE_GFX_VERSION=9.0.6
      - HCC_AMDGPU_TARGET=gfx906
@@ -58,7 +58,7 @@ services:
      - /mnt/HoardingCow_docker_data/Syncthing/telos-ro:/opt/data/telos-ro:ro
      # Syncthing-shared inbox — write tasks here, they sync to user's laptop
      - /mnt/HoardingCow_docker_data/Syncthing/telos-rw:/opt/data/telos-rw:rw
-      # Persist Python venv across container recreation (Matrix bridge deps, etc.)
+      # Persistent venv — Matrix bridge and other pip deps survive container rebuilds
      - /mnt/HoardingCow_docker_data/Hermes/venv:/opt/hermes/.venv
    devices:
      - /dev/kfd:/dev/kfd
@@ -68,8 +68,6 @@ services:
      - "26"
    networks:
      - ai_backend
-    depends_on:
-      - honcho

  syncthing:
    image: syncthing/syncthing:latest
@@ -133,65 +131,61 @@ services:
      - "303"
      - "26"

-  # --- Honcho: AI-native user modeling ---
-  honcho:
-    build: ./honcho
-    container_name: honcho
-    restart: unless-stopped
-    ports:
-      - "127.0.0.1:8000:8000"
+  paperclip-db:
+    image: postgres:17-alpine
+    container_name: paperclip-db
+    restart: always
    environment:
-      - DB_CONNECTION_URI=postgresql+psycopg://honcho:honcho_pass@honcho-db:5432/honcho
-      - CACHE_URL=redis://honcho-redis:6379/0
-      - CACHE_ENABLED=true
+      POSTGRES_USER: paperclip
+      POSTGRES_PASSWORD: ${PAPERCLIP_DB_PASSWORD:?PAPERCLIP_DB_PASSWORD must be set}
+      POSTGRES_DB: paperclip
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U paperclip -d paperclip"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
    volumes:
-      - /mnt/HoardingCow_docker_data/Honcho/data:/app/data
+      - /mnt/HoardingCow_docker_data/Paperclip/pgdata:/var/lib/postgresql/data
    networks:
      - ai_backend
+
+  paperclip:
+    image: ghcr.io/paperclipai/paperclip:v2026.517.0
+    container_name: paperclip
+    restart: always
+    ports:
+      - "127.0.0.1:3100:3100"
+    environment:
+      - HOST=0.0.0.0
+      - PORT=3100
+      - SERVE_UI=true
+      - DATABASE_URL=postgres://paperclip:***@paperclip-db:5432/paperclip
+      - BETTER_AUTH_SECRET=${PAPE...CRET must be set}
+      - PAPERCLIP_PUBLIC_URL=https://paperclip.lazyworkhorse.net
+      - PAPERCLIP_DEPLOYMENT_MODE=authenticated
+      - PAPERCLIP_DEPLOYMENT_EXPOSURE=private
+    volumes:
+      - /mnt/HoardingCow_docker_data/Paperclip/data:/paperclip
    depends_on:
-      honcho-db:
+      paperclip-db:
        condition: service_healthy
-      honcho-redis:
-        condition: service_healthy
-
-  honcho-db:
-    image: pgvector/pgvector:pg15
-    container_name: honcho-db
-    restart: unless-stopped
-    ports:
-      - "127.0.0.1:5432:5432"
-    command: ["postgres", "-c", "max_connections=200"]
-    environment:
-      - POSTGRES_DB=honcho
-      - POSTGRES_USER=honcho
-      - POSTGRES_PASSWORD=honcho_pass
-      - PGDATA=/var/lib/postgresql/data/pgdata
-    volumes:
-      - /mnt/HoardingCow_docker_data/Honcho/postgres:/var/lib/postgresql/data
-      - ./honcho/init-db.sql:/docker-entrypoint-initdb.d/init.sql:ro
    networks:
+      - ai_net
      - ai_backend
-    healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U honcho -d honcho"]
-      interval: 5s
-      timeout: 5s
-      retries: 5
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=ai_net"

-  honcho-redis:
-    image: redis:8
-    container_name: honcho-redis
-    restart: unless-stopped
-    ports:
-      - "127.0.0.1:6379:6379"
-    volumes:
-      - /mnt/HoardingCow_docker_data/Honcho/redis:/data
-    networks:
-      - ai_backend
-    healthcheck:
-      test: ["CMD-SHELL", "redis-cli ping"]
-      interval: 5s
-      timeout: 5s
-      retries: 5
+      - "traefik.http.routers.paperclip-http.rule=Host(`paperclip.lazyworkhorse.net`)"
+      - "traefik.http.routers.paperclip-http.entrypoints=web"
+      - "traefik.http.routers.paperclip-http.middlewares=redirect-to-https"
+
+      - "traefik.http.routers.paperclip-https.rule=Host(`paperclip.lazyworkhorse.net`)"
+      - "traefik.http.routers.paperclip-https.entrypoints=websecure"
+      - "traefik.http.routers.paperclip-https.tls=true"
+      - "traefik.http.routers.paperclip-https.tls.certresolver=njalla"
+
+      - "traefik.http.services.paperclip.loadbalancer.server.port=3100"

 networks:
  ai_net:
@@ -344,8 +338,8 @@ networks:
  #     - /home/gortium/infra:/data/workspace/infra
  #   environment:
  #     - TZ=America/Toronto
-  #     - OPENCLAW_GATEWAY_TOKEN=${OPENCLAW_GATEWAY_TOKEN}
-  #     - OPENROUTER_API_KEY=${OPENROUTER_API_KEY}
+  #     - OPENCLAW_GATEWAY_TOKEN=${OPEN...KEN}
+  #     - OPENROUTER_API_KEY=${OPEN...KEY}
  #     # Point to the sidecar browser
  #     - BROWSER_CDP_URL=http://openclaw-browser:9222
  #     - BROWSER_EVALUATE_ENABLED=true
@@ -390,7 +384,7 @@ networks:
  #     - PGID=1000
  #     - PUBLIC_KEY_FILE=/config/ssh/authorized_keys
  #     - SUDO_ACCESS=false
-  #     - PASSWORD_ACCESS=false
+  #     - PASSWORD_ACCESS=***
  #   volumes:
  #     - /mnt/HoardingCow_docker_data/openclaw/ssh-config:/config
  #     - /home/gortium/infra:/data/workspace/infra:ro
--- a/ai/hermes/Dockerfile
+++ b/ai/hermes/Dockerfile
@@ -9,6 +9,8 @@
 # ---------- Base: official Hermes image (system deps, npm, uv, Playwright) ----------
 FROM nousresearch/hermes-agent:latest

+WORKDIR /opt/hermes
+
 # ---------- Overlay our forked source ----------
 # Uses SSH agent forwarding from the build host (no key baked into image).
 # --exclude node_modules/.venv keeps the base image's pre-built layers intact.
@@ -48,17 +50,9 @@ RUN apt-get update && \
 # ---------- UV ----------
 COPY --chmod=0755 --from=ghcr.io/astral-sh/uv:latest /uv /usr/local/bin/

-WORKDIR /opt/hermes
-
-# ---------- Memory provider dependencies ----------
-# httpx: HTTP client for OpenViking plugin
-# honcho-ai: already installed in upstream image (v2.1.1+)
-RUN . /opt/hermes/.venv/bin/activate && \
-    uv pip install --no-cache-dir httpx
-
 # ---------- Piper TTS ----------
 RUN . /opt/hermes/.venv/bin/activate && \
-    uv pip install --no-cache-dir piper-tts sounddevice numpy && \
+    uv pip install --no-cache-dir piper-tts sounddevice numpy httpx && \
    mkdir -p /opt/hermes/.venv/share/piper/voices

 RUN /opt/hermes/.venv/bin/python3 /dev/stdin << 'PYEOF'
--- a/ai/honcho/Dockerfile
+++ b/ai/honcho/Dockerfile
@@ -1,42 +0,0 @@
-# build stage — fetches and builds Honcho from source
-# Using buildkit cache mounts for speed across rebuilds
-FROM python:3.13-slim-bookworm AS builder
-
-RUN apt-get update && \
-    apt-get install -y --no-install-recommends git && \
-    rm -rf /var/lib/apt/lists/*
-
-COPY --from=ghcr.io/astral-sh/uv:0.9.24 /uv /bin/uv
-
-# Clone Honcho at a pinned commit for reproducibility
-ARG HONCHO_REPO=https://github.com/plastic-labs/honcho
-ARG HONCHO_REF=main
-RUN git clone --depth 1 --branch ${HONCHO_REF} ${HONCHO_REPO} /app
-
-WORKDIR /app
-
-ENV UV_COMPILE_BYTECODE=1
-ENV UV_LINK_MODE=copy
-
-RUN --mount=type=cache,target=/root/.cache/uv \
-    uv sync --frozen --no-group dev
-
-# --- runtime stage ---
-FROM python:3.13-slim-bookworm
-
-RUN groupadd --system app && \
-    useradd --system --gid app --create-home app
-
-COPY --from=builder /app /app
-COPY --from=builder /root/.cache/uv /root/.cache/uv
-
-WORKDIR /app
-ENV PATH="/app/.venv/bin:$PATH"
-ENV HOME=/app
-
-COPY --chown=app:app config.toml /app/config.toml
-
-USER app
-EXPOSE 8000
-
-CMD ["fastapi", "run", "--host", "0.0.0.0", "src/main.py"]
--- a/ai/honcho/config.toml
+++ b/ai/honcho/config.toml
@@ -1,117 +0,0 @@
-[app]
-LOG_LEVEL = "INFO"
-MAX_MESSAGE_SIZE = 25000
-EMBED_MESSAGES = true
-NAMESPACE = "honcho"
-
-[db]
-CONNECTION_URI = "postgresql+psycopg://honcho:honcho_pass@honcho-db:5432/honcho"
-SCHEMA = "public"
-POOL_SIZE = 10
-MAX_OVERFLOW = 20
-
-[auth]
-USE_AUTH = false
-
-[sentry]
-ENABLED = false
-
-[telemetry]
-ENABLED = false
-
-[webhook]
-ENABLED = false
-
-[cache]
-ENABLED = true
-URL = "redis://honcho-redis:6379/0"
-
-[llm]
-DEFAULT_MAX_TOKENS = 4096
-
-# Embeddings via Ollama (nomic-embed-text recommended on this system)
-[embedding]
-VECTOR_DIMENSIONS = 768
-MAX_INPUT_TOKENS = 8192
-
-[embedding.model_config]
-transport = "openai"
-model = "nomic-embed-text"
-base_url = "http://ollama:11434/v1"
-
-# --- Deriver (user representation builder) ---
-[deriver]
-ENABLED = true
-WORKERS = 1
-POLLING_SLEEP_INTERVAL_SECONDS = 5.0
-FLUSH_ENABLED = true
-
-[deriver.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-# --- Dialectic ---
-[dialectic]
-MAX_INPUT_TOKENS = 4096
-SESSION_HISTORY_MAX_TOKENS = 8192
-
-[dialectic.levels.minimal]
-MAX_TOOL_ITERATIONS = 1
-MAX_OUTPUT_TOKENS = 512
-[dialectic.levels.minimal.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-[dialectic.levels.low]
-MAX_TOOL_ITERATIONS = 3
-[dialectic.levels.low.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-[dialectic.levels.medium]
-MAX_TOOL_ITERATIONS = 2
-[dialectic.levels.medium.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-[dialectic.levels.high]
-MAX_TOOL_ITERATIONS = 4
-[dialectic.levels.high.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-[dialectic.levels.max]
-MAX_TOOL_ITERATIONS = 10
-[dialectic.levels.max.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-# --- Summary ---
-[summary]
-ENABLED = true
-MESSAGES_PER_SHORT_SUMMARY = 20
-MESSAGES_PER_LONG_SUMMARY = 60
-
-[summary.model_config]
-transport = "openai"
-model = "hermes-3"
-base_url = "http://ollama:11434/v1"
-
-# --- Dream ---
-[dream]
-ENABLED = false
-
-# --- Peer Card ---
-[peer_card]
-ENABLED = true
-
-# --- Vector Store ---
-[vector_store]
-TYPE = "pgvector"
-DIMENSIONS = 768
--- a/ai/honcho/init-db.sql
+++ b/ai/honcho/init-db.sql
@@ -1 +0,0 @@
-CREATE EXTENSION IF NOT EXISTS vector;
Author	SHA1	Message	Date
Hermes	b8dc4783b6	fix: add WORKDIR and httpx dependency to Hermes Dockerfile Some checks failed Build Hermes agent / build (pull_request) Has been cancelled Details Build ollama (gfx906) / build (pull_request) Has been cancelled Details - Add explicit WORKDIR /opt/hermes after FROM instruction - Add httpx to pip install for OpenViking plugin support Acceptance: Docker image builds with WORKDIR=/opt/hermes and httpx available in the venv.	2026-05-20 14:18:41 -04:00
Hermes	8f09b43a5a	Merge PR #2 : fix Matrix bridge ModuleNotFoundError - install deps to venv with persistence - Integrate uv pip install of openai and mautrix[encryption] into entrypoint - Add persistent volume mount for /opt/hermes/.venv - Keep Syncthing volume mounts	2026-05-20 14:07:59 -04:00
Hermes	64acf2c859	Merge feat/add-paperclip into master: add Paperclip agent orchestrator services Brings in commits: `563ccc5` (paperclip), `37bf43c` (Dockerfile), `bce4032` (revert), `1eacc3c` (Traefik ai_net fix)	2026-05-20 14:05:45 -04:00