gortium/infra
1
1
Fork 0
Code Issues 13 Pull Requests 24 Actions Packages Projects 1 Releases Wiki Activity

fix: Honcho auth, deepseek LLM config, and container rename #68

Open
Hermes wants to merge 11 commits from fix/honcho-vector-dim-empty into master
pull from: fix/honcho-vector-dim-empty
merge into: gortium:master
Conversation 0 Commits 11 Files Changed 5 +616 -1
Hermes commented 2026-05-23 12:34:57 +00:00
Collaborator
Copy Link

Changes

Honcho container fixes:

  1. Auth: Enabled JWT authentication (AUTH_USE_AUTH=true) with AUTH_JWT_SECRET from env vars. All profiles now have workspace-scoped JWTs for API access.

  2. LLM: Switched from hermes-3 via Ollama (model didn't exist → silent failures) to deepseek-v4-flash via https://opencode.ai/zen/go/v1. Embeddings stay on nomic-embed-text via Ollama.

  3. Container name: Changed from honcho-ui → honcho so Docker DNS resolves honcho properly (honcho.json files updated to match).

  4. Removed deprecated VECTOR_STORE_DIMENSIONS env var.

Required .env additions:

Add to the infra .env file:

OPENAI_API_KEY=sk-S0...  # opencode.ai API key for LLM
AUTH_JWT_SECRET=honcho-jwt-c69a3e4c32c57474c1e2aa57a5a32bf8

Testing:

  • Honcho API health check: 200 OK
  • Workspace create/list via admin JWT: working
  • Hermes Honcho plugin connection: configured with per-profile JWTs
## Changes ### Honcho container fixes: 1. **Auth**: Enabled JWT authentication (`AUTH_USE_AUTH=true`) with `AUTH_JWT_SECRET` from env vars. All profiles now have workspace-scoped JWTs for API access. 2. **LLM**: Switched from `hermes-3` via Ollama (model didn't exist → silent failures) to `deepseek-v4-flash` via `https://opencode.ai/zen/go/v1`. Embeddings stay on `nomic-embed-text` via Ollama. 3. **Container name**: Changed from `honcho-ui` → `honcho` so Docker DNS resolves `honcho` properly (honcho.json files updated to match). 4. **Removed** deprecated `VECTOR_STORE_DIMENSIONS` env var. ### Required .env additions: Add to the infra `.env` file: ``` OPENAI_API_KEY=sk-S0... # opencode.ai API key for LLM AUTH_JWT_SECRET=honcho-jwt-c69a3e4c32c57474c1e2aa57a5a32bf8 ``` ### Testing: - [x] Honcho API health check: 200 OK - [x] Workspace create/list via admin JWT: working - [x] Hermes Honcho plugin connection: configured with per-profile JWTs
Hermes added 8 commits 2026-05-23 12:34:58 +00:00
feat: add uConsole CM5 host configuration with Reticulum mesh stack db2bd1d157 
- New NixOS host 'uConsole' for ClockworkPi CM5 portable terminal
- flake.nix: add nixos-uconsole and nixos-raspberrypi inputs
- Imports: nixos-uconsole.nixosModules.uconsole-cm5,
  nixos-raspberrypi.nixosModules.raspberry-pi-5.base
- Full package list: base tools, HAM radio, SDR/RF, mesh/LoRa,
  security tools, GPS/maps
- Reticulum stack (rns 1.2.9, lxmf 0.9.8, nomadnet 1.1.1) built
  from PyPI via overlays/reticulum.nix
- systemd services: rnsd (Reticulum daemon), kismet (Wi-Fi IDS)
- Kernel modules for SDR (rtl-sdr, dvb) and USB WiFi
- Follows existing host config conventions (cyt-pi as template)
fix: update compose submodule for Matrix bridge deps + persistent venv 8b9a144254 
Updates assets/compose submodule to 8adbbf0 (compose fix/matrix-bridge-deps).

Compose commit adds:
- uv pip install openai mautrix[encryption] to hermes entrypoint
- Persistent venv volume at /opt/hermes/.venv
- Empty-volume first-boot handling (venv recreation)

This ensures Matrix bridge dependencies survive container recreation.
chore: update compose submodule (fix VECTOR_STORE_DIMENSIONS empty value) b43c6794b3
chore: update compose submodule (expose Honcho via Traefik + fix VECTOR_STORE_DIMENSIONS) 6f18071198
chore: update compose submodule (merge Honcho+OpenConcho into single container) 8d7afecb6e
chore: update compose submodule (fix nginx permissions) 33d1d860fb
chore: update compose submodule (fix nginx permissions - run as root) cd817c7fd2
fix: update compose submodule for honcho auth + LLM config 690873d0e4
Hermes added 1 commit 2026-05-23 20:43:29 +00:00
fix: update compose submodule to fix honcho config corrupted values 6be4076372
Hermes added 1 commit 2026-05-23 20:51:27 +00:00
fix: update compose submodule - honcho config fixes 2b4b2e2216
Hermes added 1 commit 2026-05-23 22:55:02 +00:00
fix: update compose submodule - honcho embedding config fix + deriver in CMD e216c8edac
Hermes added 1 commit 2026-05-25 04:08:47 +00:00
feat: integrate rollback sentinel as NixOS module 15f70019d5 
Add rollback-sentinel NixOS module that:
- Deploys sentinel-check.sh (inline) and nixos-rollback.sh (from file) as
  system packages
- Runs a boot-time systemd oneshot service after multi-user.target with
  configurable delay — checks Tier-1 services, triggers rollback on failure
- Runs a post-rebuild service via activation script after every
  nixos-rebuild switch
- Exposes options for tier1Services, tier2Services, tier3InfoServices,
  bootDelay, rollbackMode (set-default/rollback-now/dry-run), and
  enablePostRebuild

Module wired into flake.nix for lazyworkhorse and enabled in
configuration.nix with standard Tier-1/2 service lists and 120s delay.
This pull request has changes conflicting with the target branch.
  • assets/compose
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin fix/honcho-vector-dim-empty:fix/honcho-vector-dim-empty
git checkout fix/honcho-vector-dim-empty
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
Kind/Bug
Something is not working
Kind/Documentation
Documentation changes
Kind/Enhancement
Improve existing functionality
Kind/Feature
New functionality
Kind/Security
This is security issue
Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Hermes gortium
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: gortium/infra#68
No description provided.
Delete Branch "fix/honcho-vector-dim-empty"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?