feat: WireGuard VPN integration

- Add wg-up/wg-down/wg-status aliases to zshrc
- Add Super+Ctrl+V / Super+Ctrl+Shift+V keybinds to Hyprland
- Add Waybar custom module showing VPN status + traffic
- Add wireguard-status.sh script

Makefile

@@ -1,5 +1,5 @@
 # Define list of directories you want to stow
-CONFIG_DIRS := btop doom hypr kitty local nvim rclone starship tmux wallpapers waybar wireplumber wofi yazi zsh
+CONFIG_DIRS := btop doom hypr kitty nvim rclone starship tmux wallpapers waybar wireplumber wofi yazi zsh
 
 all: stow_all
 	wal -i ~/.config/wallpapers/green_yellow_forest.jpg -o ~/.config/waybar/launch.sh

doom/.config/doom/README.org

@@ -112,9 +112,7 @@ My current workflow consist in having the 3-5 files I work on open in vertical s
 #+begin_src emacs-lisp
 (map! :leader
       (:prefix ("w" . "window")
-       :desc "Minimize window" "O" #'minimize-window)
+       :desc "Minimize window" "O" #'minimize-window))
-      (:prefix ("z" . "Personal")
-       :desc "Hermes Agent" "h" #'gortium/hermes-vterm))
 #+end_src
 
 ** Ultra-scroll
@@ -1832,25 +1830,6 @@ Org-AI
   (org-ai-install-yasnippets)) ; if you are using yasnippet and want `ai` snippets
 #+end_src
 
-** +Hermes Agent+
-Hermes Agent runs on lazyworkhorse server. Launched via SSH in a vterm buffer.
-
-#+begin_src emacs-lisp
-(after! vterm
-  (defun gortium/hermes-vterm ()
-    "Launch Hermes Agent in vterm via SSH to lazyworkhorse (CLI mode)."
-    (interactive)
-    (let ((buf (get-buffer-create "*hermes*")))
-      (switch-to-buffer buf)
-      (unless (and (eq major-mode 'vterm-mode)
-                   (get-buffer-process buf))
-        (vterm-mode)
-        (let ((proc (get-buffer-process buf)))
-          (when proc
-            (process-send-string
-             proc "ssh -t lazyworkhorse 'docker exec -it hermes /opt/hermes/.venv/bin/hermes'\n")))))))
-#+end_src
-
 * Tramp
 Remote connection to server inside emacs (with all my config) <3
 

doom/.config/doom/config.el

@@ -18,9 +18,7 @@
 
 (map! :leader
       (:prefix ("w" . "window")
-       :desc "Minimize window" "O" #'minimize-window)
+       :desc "Minimize window" "O" #'minimize-window))
-      (:prefix ("z" . "Personal")
-       :desc "Hermes Agent" "h" #'gortium/hermes-vterm))
 
 (use-package! ultra-scroll
   :init
@@ -1055,20 +1053,6 @@ DIFF:
       :desc "GPT generate commit"
       "g" #'gortium/magit-gptel-generate-commit)
 
-(after! vterm
-  (defun gortium/hermes-vterm ()
-    "Launch Hermes Agent in vterm via SSH to lazyworkhorse (CLI mode)."
-    (interactive)
-    (let ((buf (get-buffer-create "*hermes*")))
-      (switch-to-buffer buf)
-      (unless (and (eq major-mode 'vterm-mode)
-                   (get-buffer-process buf))
-        (vterm-mode)
-        (let ((proc (get-buffer-process buf)))
-          (when proc
-            (process-send-string
-             proc "ssh -t lazyworkhorse 'docker exec -it hermes /opt/hermes/.venv/bin/hermes'\n")))))))
-
 ;; set `tramp-direct-async-process' locally in all ssh connections
 (connection-local-set-profile-variables
  'remote-direct-async-process

hypr/.config/hypr/hyprland.conf

@@ -227,7 +227,6 @@ bind = $mainMod, X, swapwindow
 bind = $mainMod, B, exec, python /home/tpouplier/ExoKortex/4-Automata/recordntrans/record_transcribe.py
 # bind = $mainMod, G, exec, nerd-dictation end
 bind = $mainMod, A, exec, $music
-bind = $mainMod, C, exec, emacsclient -n -c -e '(gortium/hermes-vterm)'
 
 # Full screen
 bind = SUPER, F, fullscreen 
@@ -318,6 +317,10 @@ bindl = , XF86AudioPause, exec, playerctl play-pause
 bindl = , XF86AudioPlay, exec, playerctl play-pause
 bindl = , XF86AudioPrev, exec, playerctl previous
 
+# WireGuard VPN toggle
+bind = $mainMod CTRL, V, exec, sudo wg-quick up ~/ExoKortex/1-Soma/2-Areas/IT/work-laptop.conf
+bind = $mainMod CTRL SHIFT, V, exec, sudo wg-quick down work-laptop
+
 # Emacs-everywhere
 bind = $mainMod, W, exec, emacsclient --eval '(thanos/type)'
 windowrule {

local/.local/share/applications/qet-xephyr.desktop

@@ -1,8 +0,0 @@
-[Desktop Entry]
-Name=QET (Xephyr)
-Comment=QElectroTech in nested X server for Wayland compatibility
-Exec=/home/tpouplier/ExoKortex/4-Automata/dotfiles/scripts/qet-xephyr.sh
-Icon=qelectrotech
-Type=Application
-Categories=Graphics;Engineering;
-Terminal=false

scripts/qet-xephyr.sh

@@ -1,21 +0,0 @@
-#!/bin/bash
-# Launch QElectroTech in a nested Xephyr X server with Openbox
-# Works around Wayland drag-and-drop issue in QET
-
-XEPHYR_PID=""
-
-cleanup() {
-    kill $XEPHYR_PID 2>/dev/null
-    exit 0
-}
-trap cleanup SIGINT SIGTERM
-
-Xephyr -screen 1920x1080 :1 -title QET -br &
-XEPHYR_PID=$!
-
-sleep 1
-DISPLAY=:1 openbox &
-sleep 0.5
-DISPLAY=:1 qelectrotech &
-
-wait $XEPHYR_PID

waybar/.config/waybar/config.jsonc

@@ -28,7 +28,17 @@
            "pulseaudio",
            "bluetooth",
            "network",
+           "custom/wireguard",
            "battery", 
            "custom/exit"
-        ]
+        ],
+    
+    // Custom modules
+    "custom/wireguard": {
+        "exec": "~/.config/waybar/scripts/wireguard-status.sh",
+        "interval": 10,
+        "return-type": "json"
+    },
+    
+    // Exit button
 }

waybar/.config/waybar/scripts/wireguard-status.sh

@@ -0,0 +1,31 @@
+#!/bin/bash
+# Waybar WireGuard status module
+# Checks if the wireguard interface is up by looking at /sys/class/net/
+
+INTERFACE="work-laptop"
+
+if [ -d "/sys/class/net/$INTERFACE" ]; then
+    # Interface exists - get transfer stats
+    RX=$(cat /sys/class/net/$INTERFACE/statistics/rx_bytes 2>/dev/null || echo 0)
+    TX=$(cat /sys/class/net/$INTERFACE/statistics/tx_bytes 2>/dev/null || echo 0)
+    
+    # Human readable
+    if [ $RX -gt 1048576 ]; then
+        RX_STR="$(echo $RX | awk '{printf "%.1f", $1/1048576}')M"
+    elif [ $RX -gt 1024 ]; then
+        RX_STR="$(echo $RX | awk '{printf "%.1f", $1/1024}')K"
+    else
+        RX_STR="${RX}B"
+    fi
+    if [ $TX -gt 1048576 ]; then
+        TX_STR="$(echo $TX | awk '{printf "%.1f", $1/1048576}')M"
+    elif [ $TX -gt 1024 ]; then
+        TX_STR="$(echo $TX | awk '{printf "%.1f", $1/1024}')K"
+    else
+        TX_STR="${TX}B"
+    fi
+    
+    echo "{\"text\": \"🔒 $RX_STR/$TX_STR\", \"class\": \"connected\", \"tooltip\": \"WireGuard: connected ($INTERFACE)\n▼ $RX_STR  ▲ $TX_STR\"}"
+else
+    echo "{\"text\": \"🔓\", \"class\": \"disconnected\", \"tooltip\": \"WireGuard: disconnected\"}"
+fi

zsh/.zshrc

@@ -19,33 +19,6 @@ alias emacs="emacsclient -c -a emacs"
 # Opencode
 alias oc="opencode"
 
-# Hermes Agent - SSH directly to remote server
-alias hermes="ssh -t lazyworkhorse 'docker exec -it hermes /opt/hermes/.venv/bin/hermes'"
-
-hermes-cp() { 
-  if [ $# -eq 0 ]; then
-    echo "Usage: hermes-cp <file_or_directory> [...]"
-    echo ""
-    echo "Copies files/directories from your Arch laptop into the Hermes"
-    echo "agent container at /opt/data/home/ preserving directory structure."
-    echo ""
-    echo "Examples:"
-    echo "  hermes-cp document.pdf              # single file"
-    echo "  hermes-cp *.pdf                      # multiple files (glob)"
-    echo "  hermes-cp manuals/                   # whole directory"
-    echo "  hermes-cp manuals/ keyence-docs/     # multiple items"
-    echo ""
-    echo "To copy to a different destination inside the container:"
-    echo "  tar -czf - . | ssh gortium@lazyworkhorse \\"
-    echo "    \"docker exec -i hermes sh -c 'cd /opt/data/projects && tar -xzf -'\""
-    return 1
-  fi
-  # tar everything into a single SSH pipe, extract inside container
-  # Supports: single files, directories, glob patterns, mixed args
-  tar -czf - "$@" | ssh gortium@lazyworkhorse \
-    "docker exec -i hermes sh -c 'cd /opt/data/home && tar -xzf -'"
-}
-
 # Yazi
 alias y="yazi"
 function yy() {
@@ -89,6 +62,11 @@ alias dpa="docker ps -a"
 alias dl="docker ps -l -q"
 alias dx="docker exec -it"
 
+# WireGuard VPN
+alias wg-up="sudo wg-quick up ~/ExoKortex/1-Soma/2-Areas/IT/work-laptop.conf"
+alias wg-down="sudo wg-quick down work-laptop"
+alias wg-status="sudo wg show"
+
 # Cd
 alias ..="cd .."
 alias ...="cd ../.."