Hermes Agent 21bd4bb283 security: add restricted sudo for ai-worker with security audit commands ...

- Deployment: nh os switch, nixos-rebuild switch (flake path locked)
- Firewall checks: iptables -L, iptables -S
- Fail2ban: status, banned IPs
- Logs: journalctl for kernel and fail2ban
- SSH config: sshd -T for verification
- Docker: ps, inspect (service health)
- Network: ss -tlnp, /proc/net/tcp

All commands are whitelisted with NOPASSWD.
No shell access, no ALL command - principle of least privilege.

2026-04-30 17:46:39 +00:00

..

ai-worker.nix

security: add restricted sudo for ai-worker with security audit commands

2026-04-30 17:46:39 +00:00

gortium.nix

chore: add n8n-worker user and update authentication configuration

2026-01-01 02:25:34 -05:00