feat: WireGuard VPN integration

- Add wg-up/wg-down/wg-status aliases to zshrc
- Add Super+Ctrl+V / Super+Ctrl+Shift+V keybinds to Hyprland
- Add Waybar custom module showing VPN status + traffic
- Add wireguard-status.sh script

doom/.config/doom/README.org

@@ -112,9 +112,7 @@ My current workflow consist in having the 3-5 files I work on open in vertical s
 #+begin_src emacs-lisp
 (map! :leader
       (:prefix ("w" . "window")
-       :desc "Minimize window" "O" #'minimize-window)
+       :desc "Minimize window" "O" #'minimize-window))
-      (:prefix ("z" . "Personal")
-       :desc "Hermes Agent" "h" #'gortium/hermes-vterm))
 #+end_src
 
 ** Ultra-scroll
@@ -1832,25 +1830,6 @@ Org-AI
   (org-ai-install-yasnippets)) ; if you are using yasnippet and want `ai` snippets
 #+end_src
 
-** +Hermes Agent+
-Hermes Agent runs on lazyworkhorse server. Launched via SSH in a vterm buffer.
-
-#+begin_src emacs-lisp
-(after! vterm
-  (defun gortium/hermes-vterm ()
-    "Launch Hermes Agent in vterm via SSH to lazyworkhorse (CLI mode)."
-    (interactive)
-    (let ((buf (get-buffer-create "*hermes*")))
-      (switch-to-buffer buf)
-      (unless (and (eq major-mode 'vterm-mode)
-                   (get-buffer-process buf))
-        (vterm-mode)
-        (let ((proc (get-buffer-process buf)))
-          (when proc
-            (process-send-string
-             proc "ssh -t lazyworkhorse 'docker exec -it hermes /opt/hermes/.venv/bin/hermes'\n")))))))
-#+end_src
-
 * Tramp
 Remote connection to server inside emacs (with all my config) <3
 

hypr/.config/hypr/hyprland.conf

@@ -227,7 +227,6 @@ bind = $mainMod, X, swapwindow
 bind = $mainMod, B, exec, python /home/tpouplier/ExoKortex/4-Automata/recordntrans/record_transcribe.py
 # bind = $mainMod, G, exec, nerd-dictation end
 bind = $mainMod, A, exec, $music
-bind = $mainMod, C, exec, emacsclient -n -c -e '(gortium/hermes-vterm)'
 
 # Full screen
 bind = SUPER, F, fullscreen 
@@ -318,6 +317,10 @@ bindl = , XF86AudioPause, exec, playerctl play-pause
 bindl = , XF86AudioPlay, exec, playerctl play-pause
 bindl = , XF86AudioPrev, exec, playerctl previous
 
+# WireGuard VPN toggle
+bind = $mainMod CTRL, V, exec, sudo wg-quick up ~/ExoKortex/1-Soma/2-Areas/IT/work-laptop.conf
+bind = $mainMod CTRL SHIFT, V, exec, sudo wg-quick down work-laptop
+
 # Emacs-everywhere
 bind = $mainMod, W, exec, emacsclient --eval '(thanos/type)'
 windowrule {

waybar/.config/waybar/config.jsonc

@@ -28,7 +28,17 @@
            "pulseaudio",
            "bluetooth",
            "network",
+           "custom/wireguard",
            "battery", 
            "custom/exit"
-        ]
+        ],
+    
+    // Custom modules
+    "custom/wireguard": {
+        "exec": "~/.config/waybar/scripts/wireguard-status.sh",
+        "interval": 10,
+        "return-type": "json"
+    },
+    
+    // Exit button
 }

waybar/.config/waybar/scripts/wireguard-status.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+# Waybar WireGuard status module
+# Checks if the wireguard interface is up by looking at /sys/class/net/
+
+INTERFACE="work-laptop"
+
+if [ -d "/sys/class/net/$INTERFACE" ]; then
+    # Interface exists - get transfer stats
+    RX=$(cat /sys/class/net/$INTERFACE/statistics/rx_bytes 2>/dev/null || echo 0)
+    TX=$(cat /sys/class/net/$INTERFACE/statistics/tx_bytes 2>/dev/null || echo 0)
+    
+    # Human readable
+    if [ $RX -gt 1048576 ]; then
+        RX_STR="$(echo $RX | awk '{printf "%.1f", $1/1048576}')M"
+    elif [ $RX -gt 1024 ]; then
+        RX_STR="$(echo $RX | awk '{printf "%.1f", $1/1024}')K"
+    else
+        RX_STR="${RX}B"
+    fi
+    if [ $TX -gt 1048576 ]; then
+        TX_STR="$(echo $TX | awk '{printf "%.1f", $1/1048576}')M"
+    elif [ $TX -gt 1024 ]; then
+        TX_STR="$(echo $TX | awk '{printf "%.1f", $1/1024}')K"
+    else
+        TX_STR="${TX}B"
+    fi
+    
+    echo "{\"text\": \"🔒 $RX_STR/$TX_STR\", \"class\": \"connected\", \"tooltip\": \"WireGuard: connected ($INTERFACE)\n▼ $RX_STR  ▲ $TX_STR\"}"
+else
+    echo "{\"text\": \"🔓\", \"class\": \"disconnected\", \"tooltip\": \"WireGuard: disconnected\"}"
+fi

zsh/.zshrc

@@ -19,9 +19,6 @@ alias emacs="emacsclient -c -a emacs"
 # Opencode
 alias oc="opencode"
 
-# Hermes Agent - SSH directly to remote server
-alias hermes="ssh -t lazyworkhorse 'docker exec -it hermes /opt/hermes/.venv/bin/hermes'"
-
 # Yazi
 alias y="yazi"
 function yy() {
@@ -65,6 +62,11 @@ alias dpa="docker ps -a"
 alias dl="docker ps -l -q"
 alias dx="docker exec -it"
 
+# WireGuard VPN
+alias wg-up="sudo wg-quick up ~/ExoKortex/1-Soma/2-Areas/IT/work-laptop.conf"
+alias wg-down="sudo wg-quick down work-laptop"
+alias wg-status="sudo wg show"
+
 # Cd
 alias ..="cd .."
 alias ...="cd ../.."