hermes helm

No introduction found. Create it?

More popular helm chart found

hermes from bjw-s-labs/charts is more popular with 16 repositories.

Install

Install with:

helm repo add app-template oci://ghcr.io/bjw-s-labs/charts/
helm install hermes app-template/app-template -f values.yaml

Examples

See examples from other people.

Top Repositories (2 out of 12)

NameRepoStarsVersionTimestamp
hermesdrag0n141/home-ops655.1.0a day ago
hermesm00nwtchr/homelab-cluster395.1.0a month ago

Values

See the most popular values for this chart:

KeyTypes
controllers.hermes.annotations."reloader.stakater.com/auto" (12)
true
string
controllers.hermes.containers.app.envFrom[].secretRef.name (12)
hermes-secret
string
controllers.hermes.containers.app.envFrom[].configMapRef.name (1)
cluster-vars
string
controllers.hermes.containers.app.image.repository (12)
docker.io/nousresearch/hermes-agent
string
controllers.hermes.containers.app.image.tag (12)
v2026.9.14@sha256:99641e57ec762c59e54cb44aa6746b7fc68c18b3c5ddb088af54234c613d9294
string
controllers.hermes.containers.app.resources.limits.memory (12)
4Gi
string
controllers.hermes.containers.app.resources.limits.cpu (3)
2000m
number, string
controllers.hermes.containers.app.resources.requests.cpu (12)
500m
string
controllers.hermes.containers.app.resources.requests.memory (11)
1Gi
string
controllers.hermes.containers.app.env.HERMES_HOME (11)
/opt/data
string
controllers.hermes.containers.app.env.TZ (10)
${TIMEZONE}
string
controllers.hermes.containers.app.env.HOME (9)
/opt/data
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD (8)
1
string, boolean
controllers.hermes.containers.app.env.API_SERVER_ENABLED (7)
true
boolean, string
controllers.hermes.containers.app.env.API_SERVER_HOST (7)
0.0.0.0
string
controllers.hermes.containers.app.env.HERMES_GID (5)
1000
string
controllers.hermes.containers.app.env.HERMES_UID (5)
1000
string
controllers.hermes.containers.app.env.API_SERVER_PORT (4)
8642
number
controllers.hermes.containers.app.env.HERMES_DASHBOARD_HOST (4)
0.0.0.0
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_PORT (4)
9119
number, string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_PUBLIC_URL (4)
https://hermes.drmoo.io
string
controllers.hermes.containers.app.env.SEARXNG_URL (4)
http://searxng.default.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.TERM (4)
xterm-256color
string
controllers.hermes.containers.app.env.OBSIDIAN_VAULT_PATH (3)
/vault
string
controllers.hermes.containers.app.env.PATH (3)
/opt/hermes/.venv/bin:/opt/data/.local/bin:/opt/data/.local/go/bin:/opt/data/.local/homebrew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
string
controllers.hermes.containers.app.env.API_SERVER_CORS_ORIGINS (2)
*
string
controllers.hermes.containers.app.env.HERMES_CRON_TIMEOUT (2)
900
string, number
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (2)
hermes
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_ISSUER (2)
https://sso.hayden.moe/oauth2/openid/hermes
string
controllers.hermes.containers.app.env.LIGHTRAG_URL (2)
http://lightrag.ai.svc.cluster.local:9621
string
controllers.hermes.containers.app.env.MEMINI_NAMESPACE (2)
hermes
string
controllers.hermes.containers.app.env.MEMINI_URL (2)
http://memini.ai:8080
string
controllers.hermes.containers.app.env.OPENAI_API_KEY (2)
sk-noauth-local-vllm
string
controllers.hermes.containers.app.env.VLLM_API_KEY (2)
sk-noauth-local-vllm
string
controllers.hermes.containers.app.env.AGENT_BROWSER_ARGS (1)
--no-sandbox,--disable-dev-shm-usage
string
controllers.hermes.containers.app.env.CAMOFOX_URL (1)
http://camofox.ai.svc.cluster.local:9377
string
controllers.hermes.containers.app.env.DEVELOPER_PATH (1)
/mnt/developer
string
controllers.hermes.containers.app.env.DISCORD_AUTO_THREAD (1)
false
string
controllers.hermes.containers.app.env.DISCORD_REQUIRE_MENTION (1)
false
string
controllers.hermes.containers.app.env.EMAIL_ALLOWED_USERS (1)
obshane96@gmail.com,superbud9123@gmail.com
string
controllers.hermes.containers.app.env.EMAIL_HOME_ADDRESS (1)
obshane96@gmail.com
string
controllers.hermes.containers.app.env.EMAIL_IMAP_HOST (1)
imap.gmail.com
string
controllers.hermes.containers.app.env.EMAIL_IMAP_PORT (1)
993
number
controllers.hermes.containers.app.env.EMAIL_POLL_INTERVAL (1)
15
number
controllers.hermes.containers.app.env.EMAIL_SMTP_HOST (1)
smtp.gmail.com
string
controllers.hermes.containers.app.env.EMAIL_SMTP_PORT (1)
587
number
controllers.hermes.containers.app.env.FLIGHT_DISCORD_ENV (1)
dev
string
controllers.hermes.containers.app.env.GIT_COMMITTER_EMAIL (1)
704600+yvigara@users.noreply.github.com
string
controllers.hermes.containers.app.env.GIT_COMMITTER_NAME (1)
yvigara
string
controllers.hermes.containers.app.env.GIT_SSH_COMMAND (1)
ssh -F /opt/data/.ssh/config
string
controllers.hermes.containers.app.env.GOPATH (1)
/opt/data/go
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_BASIC_AUTH_USERNAME (1)
admin
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_INSECURE (1)
1
string
controllers.hermes.containers.app.env.HERMES_DASHBOARD_OIDC_SCOPES (1)
openid profile email offline_access
string
controllers.hermes.containers.app.env.HERMES_ENV (1)
prod
string
controllers.hermes.containers.app.env.HERMES_RESTART_DRAIN_TIMEOUT (1)
45
string
controllers.hermes.containers.app.env.HINDSIGHT_API_URL (1)
http://hindsight-api
string
controllers.hermes.containers.app.env.HOMEBREW_CELLAR (1)
/opt/data/.local/homebrew/Cellar
string
controllers.hermes.containers.app.env.HOMEBREW_PREFIX (1)
/opt/data/.local/homebrew
string
controllers.hermes.containers.app.env.HOMEBREW_REPOSITORY (1)
/opt/data/.local/homebrew
string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.key (1)
MEMINI_API_KEY
string
controllers.hermes.containers.app.env.MEMINI_API_KEY.valueFrom.secretKeyRef.name (1)
hermes-secret
string
controllers.hermes.containers.app.env.MEMINI_BASE_URL (1)
http://memini.ai.svc.cluster.local:8080
string
controllers.hermes.containers.app.env.PIP_BREAK_SYSTEM_PACKAGES (1)
1
string
controllers.hermes.containers.app.env.S6_CMD_RECEIVE_SIGNALS (1)
1
string
controllers.hermes.containers.app.env.S6_SERVICES_GRACETIME (1)
80000
string
controllers.hermes.containers.app.env.SEERR_URL (1)
http://jellyseerr.default.svc.cluster.local
string
controllers.hermes.containers.app.env.WHATSAPP_ENABLED (1)
true
boolean
controllers.hermes.containers.app.env.WHATSAPP_MODE (1)
bot
string
controllers.hermes.containers.app.env.WIKI_PATH (1)
/mnt/wiki
string
controllers.hermes.containers.app.args[] (10)
- gateway
- run
string
controllers.hermes.containers.app.ports[].containerPort (6)
8642
number
controllers.hermes.containers.app.ports[].name (6)
http
string
controllers.hermes.containers.app.ports[].protocol (6)
TCP
string
controllers.hermes.containers.app.securityContext.allowPrivilegeEscalation (6)
false
boolean
controllers.hermes.containers.app.securityContext.readOnlyRootFilesystem (6)
false
boolean
controllers.hermes.containers.app.securityContext.seccompProfile.type (2)
RuntimeDefault
string
controllers.hermes.containers.app.securityContext.capabilities.add[] (1)
- CHOWN
- DAC_OVERRIDE
- FOWNER
- FSETID
- SETGID
- SETUID
string
controllers.hermes.containers.app.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.containers.app.probes.liveness.enabled (4)
true
boolean
controllers.hermes.containers.app.probes.liveness.custom (3)
true
boolean
controllers.hermes.containers.app.probes.liveness.spec.periodSeconds (3)
30
number
controllers.hermes.containers.app.probes.liveness.spec.timeoutSeconds (3)
5
number
controllers.hermes.containers.app.probes.liveness.spec.failureThreshold (2)
5
number
controllers.hermes.containers.app.probes.liveness.spec.initialDelaySeconds (2)
90
number
controllers.hermes.containers.app.probes.liveness.spec.tcpSocket.port (2)
8642
number
controllers.hermes.containers.app.probes.liveness.spec.httpGet.path (1)
/api/status
string
controllers.hermes.containers.app.probes.liveness.spec.httpGet.port (1)
9119
number
controllers.hermes.containers.app.probes.readiness.enabled (4)
true
boolean
controllers.hermes.containers.app.probes.readiness.custom (3)
true
boolean
controllers.hermes.containers.app.probes.readiness.spec.timeoutSeconds (3)
5
number
controllers.hermes.containers.app.probes.readiness.spec.failureThreshold (2)
3
number
controllers.hermes.containers.app.probes.readiness.spec.initialDelaySeconds (2)
45
number
controllers.hermes.containers.app.probes.readiness.spec.periodSeconds (2)
15
number
controllers.hermes.containers.app.probes.readiness.spec.tcpSocket.port (2)
8642
number
controllers.hermes.containers.app.probes.readiness.spec.httpGet.path (1)
/api/status
string
controllers.hermes.containers.app.probes.readiness.spec.httpGet.port (1)
9119
number
controllers.hermes.containers.app.probes.startup.enabled (4)
true
boolean
controllers.hermes.containers.app.probes.startup.custom (3)
true
boolean
controllers.hermes.containers.app.probes.startup.spec.failureThreshold (3)
60
number
controllers.hermes.containers.app.probes.startup.spec.initialDelaySeconds (3)
30
number
controllers.hermes.containers.app.probes.startup.spec.periodSeconds (3)
10
number
controllers.hermes.containers.app.probes.startup.spec.timeoutSeconds (3)
5
number
controllers.hermes.containers.app.probes.startup.spec.tcpSocket.port (2)
8642
number
controllers.hermes.containers.app.probes.startup.spec.httpGet.path (1)
/api/status
string
controllers.hermes.containers.app.probes.startup.spec.httpGet.port (1)
9119
number
controllers.hermes.containers.app.command[] (1)
- hermes
- gateway
- run
- --no-supervise
string
controllers.hermes.containers.dashboard.env.TZ (4)
${TIMEZONE}
string
controllers.hermes.containers.dashboard.env.GATEWAY_HEALTH_URL (3)
http://localhost:8642
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_ISSUER (3)
https://sso.hayden.moe/oauth2/openid/hermes
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_PUBLIC_URL (2)
https://hermes.hayden.moe
string
controllers.hermes.containers.dashboard.env.HERMES_HOME (2)
/data
string
controllers.hermes.containers.dashboard.env.HOME (2)
/data
string
controllers.hermes.containers.dashboard.env.API_SERVER_CORS_ORIGINS (1)
*
string
controllers.hermes.containers.dashboard.env.API_SERVER_ENABLED (1)
true
string
controllers.hermes.containers.dashboard.env.API_SERVER_HOST (1)
0.0.0.0
string
controllers.hermes.containers.dashboard.env.HERMES_CRON_TIMEOUT (1)
0
number
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD (1)
1
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_CLIENT_ID (1)
hermes
string
controllers.hermes.containers.dashboard.env.HERMES_DASHBOARD_OIDC_SCOPES (1)
openid profile email offline_access
string
controllers.hermes.containers.dashboard.env.HERMES_GID (1)
1000
string
controllers.hermes.containers.dashboard.env.HERMES_UID (1)
1000
string
controllers.hermes.containers.dashboard.env.PATH (1)
$(HOME)/.local/bin:$(HOME)/.local/share/mise/shims:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin:/app/.venv/bin:/app/node_modules/.bin
string
controllers.hermes.containers.dashboard.env.SEARXNG_URL (1)
http://searxng.selfhosted.svc.cluster.local:8080
string
controllers.hermes.containers.dashboard.env.SEERR_URL (1)
http://jellyseerr.default.svc.cluster.local
string
controllers.hermes.containers.dashboard.image.repository (4)
nousresearch/hermes-agent
string
controllers.hermes.containers.dashboard.image.tag (4)
v2026.9.7-15c3ac5@sha256:22822b8a782598a7dbbd224cb202882fc062d4b74a6f8ac6986984135707c7f2
string
controllers.hermes.containers.dashboard.ports[].containerPort (4)
9119
number
controllers.hermes.containers.dashboard.ports[].name (4)
http
string
controllers.hermes.containers.dashboard.ports[].protocol (4)
TCP
string
controllers.hermes.containers.dashboard.resources.limits.memory (4)
1Gi
string
controllers.hermes.containers.dashboard.resources.limits.cpu (1)
1000m
string
controllers.hermes.containers.dashboard.resources.requests.cpu (4)
500m
string
controllers.hermes.containers.dashboard.resources.requests.memory (3)
512Mi
string
controllers.hermes.containers.dashboard.args[] (3)
- dashboard
- --host
- ::
- --insecure
string
controllers.hermes.containers.dashboard.envFrom[].secretRef.name (3)
hermes-config-env
hermes-litellm
string
controllers.hermes.containers.dashboard.securityContext.allowPrivilegeEscalation (2)
false
boolean
controllers.hermes.containers.dashboard.securityContext.readOnlyRootFilesystem (2)
true
boolean
controllers.hermes.containers.dashboard.securityContext.capabilities.add[] (1)
- CHOWN
- DAC_OVERRIDE
- FOWNER
- FSETID
- SETGID
- SETUID
string
controllers.hermes.containers.dashboard.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.containers.dashboard.command[] (1)
- hermes
- dashboard
- --host=0.0.0.0
string
controllers.hermes.containers.codeserver.args[] (3)
- --auth
- none
- --user-data-dir
- /opt/data/.vscode
- --extensions-dir
- /opt/data/.vscode
- --port
- "12321"
- /opt/data
string
controllers.hermes.containers.codeserver.env.TZ (3)
Asia/Kuala_Lumpur
string
controllers.hermes.containers.codeserver.env.DEVELOPER_PATH (1)
/mnt/developer
string
controllers.hermes.containers.codeserver.env.GIT_SSH_COMMAND (1)
ssh -F /opt/data/.ssh/config
string
controllers.hermes.containers.codeserver.env.HOME (1)
/opt/data
string
controllers.hermes.containers.codeserver.env.OBSIDIAN_VAULT_PATH (1)
/mnt/defaultvault
string
controllers.hermes.containers.codeserver.image.repository (3)
ghcr.io/coder/code-server
string
controllers.hermes.containers.codeserver.image.tag (3)
4.133.0@sha256:e073a441c61c85821a7f16b64cf93b4e77b4092899bb1f3bed906fbd558afd62
string
controllers.hermes.containers.codeserver.ports[].containerPort (3)
12321
number
controllers.hermes.containers.codeserver.ports[].name (3)
codeserver
string
controllers.hermes.containers.codeserver.ports[].protocol (3)
TCP
string
controllers.hermes.containers.codeserver.resources.limits.memory (3)
1Gi
string
controllers.hermes.containers.codeserver.resources.requests.cpu (3)
10m
string
controllers.hermes.containers.codeserver.resources.requests.memory (1)
512Mi
string
controllers.hermes.containers.codeserver.securityContext.runAsGroup (1)
10000
number
controllers.hermes.containers.codeserver.securityContext.runAsNonRoot (1)
true
boolean
controllers.hermes.containers.codeserver.securityContext.runAsUser (1)
10000
number
controllers.hermes.containers.vault-bridge.args[] (2)
- --settings
- /config/settings.json
- --vault
- /vault
- daemon
string
controllers.hermes.containers.vault-bridge.env.LIVESYNC_DB_PATH (2)
/db
string
controllers.hermes.containers.vault-bridge.env.TZ (2)
America/New_York
string
controllers.hermes.containers.vault-bridge.image.repository (2)
ghcr.io/vrtmrz/livesync-cli
string
controllers.hermes.containers.vault-bridge.image.tag (2)
1.0.28-cli
string
controllers.hermes.containers.vault-bridge.resources.limits.memory (2)
512Mi
string
controllers.hermes.containers.vault-bridge.resources.requests.cpu (2)
25m
string
controllers.hermes.containers.vault-bridge.resources.requests.memory (2)
128Mi
string
controllers.hermes.containers.ha-mcp.args[] (1)
- fastmcp
- run
- fastmcp-http.json
string
controllers.hermes.containers.ha-mcp.env.HOME (1)
/tmp
string
controllers.hermes.containers.ha-mcp.env.HOMEASSISTANT_TOKEN.valueFrom.secretKeyRef.key (1)
HOMEASSISTANT_TOKEN
string
controllers.hermes.containers.ha-mcp.env.HOMEASSISTANT_TOKEN.valueFrom.secretKeyRef.name (1)
hermes-secret
string
controllers.hermes.containers.ha-mcp.env.HOMEASSISTANT_URL (1)
http://home-assistant.home-automation.svc.cluster.local:8123
string
controllers.hermes.containers.ha-mcp.env.TZ (1)
${TIME_ZONE}
string
controllers.hermes.containers.ha-mcp.env.UV_NO_CACHE (1)
1
string
controllers.hermes.containers.ha-mcp.image.repository (1)
ghcr.io/homeassistant-ai/ha-mcp
string
controllers.hermes.containers.ha-mcp.image.tag (1)
8.4.3
string
controllers.hermes.containers.ha-mcp.resources.limits.cpu (1)
500m
string
controllers.hermes.containers.ha-mcp.resources.limits.memory (1)
512Mi
string
controllers.hermes.containers.ha-mcp.resources.requests.cpu (1)
50m
string
controllers.hermes.containers.ha-mcp.resources.requests.memory (1)
128Mi
string
controllers.hermes.containers.ha-mcp.securityContext.runAsGroup (1)
1000
number
controllers.hermes.containers.ha-mcp.securityContext.runAsUser (1)
1000
number
controllers.hermes.initContainers.init.command[] (7)
- sh
- -c
- set -euo pipefail mkdir -p /opt/data cp /run/config/config.yaml /opt/data/config.yaml chown 10000:10000 /opt/data/config.yaml
string
controllers.hermes.initContainers.init.image.repository (7)
docker.io/library/alpine
string
controllers.hermes.initContainers.init.image.tag (7)
3.24
string
controllers.hermes.initContainers.init.env.GIT_COMMITTER_EMAIL (1)
704600+yvigara@users.noreply.github.com
string
controllers.hermes.initContainers.init.env.GIT_COMMITTER_NAME (1)
yvigara
string
controllers.hermes.initContainers.init.env.HERMES_HOME (1)
/opt/data
string
controllers.hermes.initContainers.init.env.HOME (1)
/opt/data
string
controllers.hermes.initContainers.init.env.MISE_INSTALL_PATH (1)
/opt/data/.local/bin/mise
string
controllers.hermes.initContainers.init.env.MISE_INSTALL_SKIP_IF_EXISTS (1)
1
string
controllers.hermes.initContainers.init.env.MISE_VERSION (1)
v2026.9.8
string
controllers.hermes.initContainers.init.env.MISE_YES (1)
1
string
controllers.hermes.initContainers.init.envFrom[].secretRef.name (1)
hermes-github-app
hermes-signing-key
string
controllers.hermes.initContainers.init.securityContext.allowPrivilegeEscalation (1)
false
boolean
controllers.hermes.initContainers.init.securityContext.capabilities.drop[] (1)
- ALL
string
controllers.hermes.initContainers.init.securityContext.runAsGroup (1)
1000
number
controllers.hermes.initContainers.init.securityContext.runAsUser (1)
1000
number
controllers.hermes.initContainers.claude-cli-install.command[] (2)
- sh
- -c
- test -x /opt/data/.local/bin/claude || npm install -g --prefix /opt/data/.local --cache /tmp/.npm @anthropic-ai/claude-code
string
controllers.hermes.initContainers.claude-cli-install.image.repository (2)
docker.io/nousresearch/hermes-agent
string
controllers.hermes.initContainers.claude-cli-install.image.tag (2)
v2026.9.14
string
controllers.hermes.initContainers.config-seed.command[] (2)
- sh
- -c
- set -e cp -f /seed/config.yaml /opt/data/config.yaml cp -f /seed/shell-hooks-allowlist.json /opt/data/shell-hooks-allowlist.json for p in orchestrator generalist ml network observability smart-home storage librarian; do mkdir -p "/opt/data/profiles/${p}" done cp -f /seed-profiles/orchestrator-config.yaml /opt/data/profiles/orchestrator/config.yaml # librarian is a worker (wiki maintainer) — same self-contained worker-config # (local pin + gate); its identity is librarian.SOUL.md, seeded cp -n below. for p in generalist ml network observability smart-home storage librarian; do cp -f /seed-profiles/worker-config.yaml "/opt/data/profiles/${p}/config.yaml" done for p in orchestrator generalist ml network observability smart-home storage librarian; do cp -n "/seed-profiles/${p}.SOUL.md" "/opt/data/profiles/${p}/SOUL.md" || true done # LightRAG skill (operator-owned, cp -f authoritative). mkdir -p /opt/data/skills/lightrag/scripts cp -f /seed-skills/SKILL.md /opt/data/skills/lightrag/SKILL.md cp -f /seed-skills/query.py /opt/data/skills/lightrag/scripts/query.py cp -f /seed-skills/ingest.py /opt/data/skills/lightrag/scripts/ingest.py chmod +x /opt/data/skills/lightrag/scripts/query.py /opt/data/skills/lightrag/scripts/ingest.py # Wiki skill (the LLM-Wiki bookkeeping helper + playbook) — the # Librarian profile drives it against the vault's raw/ + wiki/ subtrees. mkdir -p /opt/data/skills/wiki/scripts cp -f /seed-skills-wiki/SKILL.md /opt/data/skills/wiki/SKILL.md cp -f /seed-skills-wiki/wiki.py /opt/data/skills/wiki/scripts/wiki.py chmod +x /opt/data/skills/wiki/scripts/wiki.py
string
controllers.hermes.initContainers.config-seed.image.repository (2)
docker.io/nousresearch/hermes-agent
string
controllers.hermes.initContainers.config-seed.image.tag (2)
v2026.9.14
string
controllers.hermes.initContainers.install-tools.command[] (1)
- /bin/sh
- -c
- set -e mkdir -p /opt/data/.local/bin /opt/data/.local/go rm -f /opt/data/.local/bin/hermes /opt/data/.local/bin/docker if [ ! -f /opt/data/.local/bin/gh ]; then cd /tmp curl -fsSL https://github.com/cli/cli/releases/download/v2.61.0/gh_2.61.0_linux_amd64.tar.gz -o gh.tar.gz tar xzf gh.tar.gz cp gh_2.61.0_linux_amd64/bin/gh /opt/data/.local/bin/ rm -rf gh.tar.gz gh_2.61.0_linux_amd64 fi if [ ! -f /opt/data/.local/go/bin/go ]; then cd /tmp curl -fsSL https://go.dev/dl/go1.23.5.linux-amd64.tar.gz -o go.tar.gz tar xzf go.tar.gz mv go /opt/data/.local/ rm -rf go.tar.gz fi if [ ! -f /opt/data/.local/homebrew/bin/brew ]; then export HOMEBREW_PREFIX=/opt/data/.local/homebrew mkdir -p $HOMEBREW_PREFIX git clone --depth 1 https://github.com/Homebrew/brew $HOMEBREW_PREFIX fi
string
controllers.hermes.initContainers.install-tools.image.repository (1)
docker.io/nousresearch/hermes-agent
string
controllers.hermes.initContainers.install-tools.image.tag (1)
v2026.9.14@sha256:99641e57ec762c59e54cb44aa6746b7fc68c18b3c5ddb088af54234c613d9294
string
controllers.hermes.strategy (3)
Recreate
string
controllers.hermes.type (3)
statefulset
string
controllers.hermes.pod.securityContext.fsGroup (2)
10000
number
controllers.hermes.pod.securityContext.fsGroupChangePolicy (2)
OnRootMismatch
string
controllers.hermes.pod.securityContext.runAsGroup (2)
0
number
controllers.hermes.pod.securityContext.runAsUser (2)
0
number
controllers.hermes.labels.nfsMount (1)
true
string
controllers.hermes.replicas (1)
1
number
controllers.hermes.serviceAccount.identifier (1)
hermes
string
persistence.data.existingClaim (11)
hermes
string
persistence.data.globalMounts[].path (7)
/opt/data
string
persistence.data.advancedMounts.hermes.app[].path (3)
/opt/data
string
persistence.data.advancedMounts.hermes.claude-cli-install[].path (2)
/opt/data
string
persistence.data.advancedMounts.hermes.config-seed[].path (2)
/opt/data
string
persistence.data.enabled (1)
true
boolean
persistence.config.defaultMode (6)
493
number
persistence.config.name (6)
hermes-configmap
string
persistence.config.type (6)
configMap
string
persistence.config.advancedMounts.hermes.init[].path (4)
/run/config/config.yaml
string
persistence.config.advancedMounts.hermes.init[].subPath (4)
config.yaml
string
persistence.config.globalMounts[].path (3)
/tmp/config.yaml
string
persistence.config.globalMounts[].subPath (2)
config.yaml
string
persistence.config.existingClaim (1)
{{ .Release.Name }}
string
persistence.tmp.globalMounts[].path (3)
/tmp
string
persistence.tmp.type (3)
emptyDir
string
persistence.tmpfs.globalMounts[].path (3)
/tmp
string
persistence.tmpfs.globalMounts[].subPath (3)
tmp
string
persistence.tmpfs.type (3)
emptyDir
string
persistence.vault.advancedMounts.hermes.app[].path (3)
/vault
string
persistence.vault.advancedMounts.hermes.app[].subPath (2)
vault
string
persistence.vault.advancedMounts.hermes.vault-bridge[].path (2)
/vault
/db
string
persistence.vault.advancedMounts.hermes.vault-bridge[].subPath (2)
vault
db
string
persistence.vault.existingClaim (3)
hermes-vault-data
string
persistence.vault.enabled (1)
true
boolean
persistence.config-seed.advancedMounts.hermes.config-seed[].path (2)
/seed
string
persistence.config-seed.advancedMounts.hermes.config-seed[].readOnly (2)
true
boolean
persistence.config-seed.name (2)
hermes-config
string
persistence.config-seed.type (2)
configMap
string
persistence.hooks.advancedMounts.hermes.app[].path (2)
/opt/hooks
string
persistence.hooks.advancedMounts.hermes.app[].readOnly (2)
true
boolean
persistence.hooks.name (2)
hermes-hooks
string
persistence.hooks.type (2)
configMap
string
persistence.profiles-seed.advancedMounts.hermes.config-seed[].path (2)
/seed-profiles
string
persistence.profiles-seed.advancedMounts.hermes.config-seed[].readOnly (2)
true
boolean
persistence.profiles-seed.name (2)
hermes-profiles
string
persistence.profiles-seed.type (2)
configMap
string
persistence.run.advancedMounts.hermes.app[].path (2)
/var/lib/hermes/run
string
persistence.run.type (2)
emptyDir
string
persistence.skills-seed.advancedMounts.hermes.config-seed[].path (2)
/seed-skills
string
persistence.skills-seed.advancedMounts.hermes.config-seed[].readOnly (2)
true
boolean
persistence.skills-seed.name (2)
hermes-skills-lightrag
string
persistence.skills-seed.type (2)
configMap
string
persistence.skills-wiki-seed.advancedMounts.hermes.config-seed[].path (2)
/seed-skills-wiki
string
persistence.skills-wiki-seed.advancedMounts.hermes.config-seed[].readOnly (2)
true
boolean
persistence.skills-wiki-seed.name (2)
hermes-skills-wiki
string
persistence.skills-wiki-seed.type (2)
configMap
string
persistence.vault-bridge-config.advancedMounts.hermes.vault-bridge[].path (2)
/config
string
persistence.vault-bridge-config.advancedMounts.hermes.vault-bridge[].readOnly (2)
true
boolean
persistence.vault-bridge-config.name (2)
hermes-vault-bridge-secret
string
persistence.vault-bridge-config.type (2)
secret
string
persistence.configmap.advancedMounts.hermes.app[].path (1)
/root/.ssh/config
string
persistence.configmap.advancedMounts.hermes.app[].subPath (1)
ssh_config
string
persistence.configmap.advancedMounts.hermes.init[].path (1)
/tmp/config.yaml
/tmp/ssh_config
string
persistence.configmap.advancedMounts.hermes.init[].subPath (1)
config.yaml
ssh_config
string
persistence.configmap.defaultMode (1)
755
number
persistence.configmap.name (1)
{{ .Release.Name }}-config
string
persistence.configmap.type (1)
configMap
string
persistence.default-vault.globalMounts[].path (1)
/mnt/defaultvault
string
persistence.default-vault.path (1)
/tank/Apps/Obsidian/DefaultVault
string
persistence.default-vault.server (1)
smb.cloudjur.com
string
persistence.default-vault.type (1)
nfs
string
persistence.developer.globalMounts[].path (1)
/mnt/developer
string
persistence.developer.path (1)
/tank/Developer
string
persistence.developer.server (1)
smb.cloudjur.com
string
persistence.developer.type (1)
nfs
string
persistence.dshm.globalMounts[].path (1)
/dev/shm
string
persistence.dshm.medium (1)
Memory
string
persistence.dshm.sizeLimit (1)
1Gi
string
persistence.dshm.type (1)
emptyDir
string
persistence.env.advancedMounts.hermes.init[].path (1)
/tmp/env
string
persistence.env.advancedMounts.hermes.init[].subPath (1)
env
string
persistence.env.defaultMode (1)
256
number
persistence.env.name (1)
hermes
string
persistence.env.type (1)
secret
string
persistence.gallery.globalMounts[].path (1)
/mnt/gallery
string
persistence.gallery.path (1)
/tank/Apps/comfyui/output
string
persistence.gallery.server (1)
smb.cloudjur.com
string
persistence.gallery.type (1)
nfs
string
persistence.nfs.globalMounts[].path (1)
/nfs-data
string
persistence.nfs.path (1)
/mnt/data/openclaw
string
persistence.nfs.server (1)
nas01.${SECRET_DOMAIN_INT}
string
persistence.nfs.type (1)
nfs
string
persistence.profile-amy.advancedMounts.hermes.init[].path (1)
/run/config/profiles/amy
string
persistence.profile-amy.defaultMode (1)
644
number
persistence.profile-amy.name (1)
hermes-profile-amy
string
persistence.profile-amy.type (1)
configMap
string
persistence.profile-bender.advancedMounts.hermes.init[].path (1)
/run/config/profiles/bender
string
persistence.profile-bender.defaultMode (1)
644
number
persistence.profile-bender.name (1)
hermes-profile-bender
string
persistence.profile-bender.type (1)
configMap
string
persistence.profile-conrad.advancedMounts.hermes.init[].path (1)
/run/config/profiles/conrad
string
persistence.profile-conrad.defaultMode (1)
644
number
persistence.profile-conrad.name (1)
hermes-profile-conrad
string
persistence.profile-conrad.type (1)
configMap
string
persistence.profile-farnsworth.advancedMounts.hermes.init[].path (1)
/run/config/profiles/farnsworth
string
persistence.profile-farnsworth.defaultMode (1)
644
number
persistence.profile-farnsworth.name (1)
hermes-profile-farnsworth
string
persistence.profile-farnsworth.type (1)
configMap
string
persistence.profile-fry.advancedMounts.hermes.init[].path (1)
/run/config/profiles/fry
string
persistence.profile-fry.defaultMode (1)
644
number
persistence.profile-fry.name (1)
hermes-profile-fry
string
persistence.profile-fry.type (1)
configMap
string
persistence.profile-leela.advancedMounts.hermes.init[].path (1)
/run/config/profiles/leela
string
persistence.profile-leela.defaultMode (1)
644
number
persistence.profile-leela.name (1)
hermes-profile-leela
string
persistence.profile-leela.type (1)
configMap
string
persistence.profile-mom.advancedMounts.hermes.init[].path (1)
/run/config/profiles/mom
string
persistence.profile-mom.defaultMode (1)
644
number
persistence.profile-mom.name (1)
hermes-profile-mom
string
persistence.profile-mom.type (1)
configMap
string
persistence.profile-morbo.advancedMounts.hermes.init[].path (1)
/run/config/profiles/morbo
string
persistence.profile-morbo.defaultMode (1)
644
number
persistence.profile-morbo.name (1)
hermes-profile-morbo
string
persistence.profile-morbo.type (1)
configMap
string
persistence.profile-nibbler.advancedMounts.hermes.init[].path (1)
/run/config/profiles/nibbler
string
persistence.profile-nibbler.defaultMode (1)
644
number
persistence.profile-nibbler.name (1)
hermes-profile-nibbler
string
persistence.profile-nibbler.type (1)
configMap
string
persistence.profile-nixon.advancedMounts.hermes.init[].path (1)
/run/config/profiles/nixon
string
persistence.profile-nixon.defaultMode (1)
644
number
persistence.profile-nixon.name (1)
hermes-profile-nixon
string
persistence.profile-nixon.type (1)
configMap
string
persistence.profile-wernstrom.advancedMounts.hermes.init[].path (1)
/run/config/profiles/wernstrom
string
persistence.profile-wernstrom.defaultMode (1)
644
number
persistence.profile-wernstrom.name (1)
hermes-profile-wernstrom
string
persistence.profile-wernstrom.type (1)
configMap
string
persistence.profiles-env.advancedMounts.hermes.init[].path (1)
/run/secrets/hermes-profiles
string
persistence.profiles-env.defaultMode (1)
400
number
persistence.profiles-env.name (1)
hermes-profile-env
string
persistence.profiles-env.type (1)
secret
string
persistence.share.globalMounts[].path (1)
/mnt/share
string
persistence.share.path (1)
/mnt/tank/ai/share
string
persistence.share.server (1)
nas.${PUBLIC_DOMAIN}
string
persistence.share.type (1)
nfs
string
persistence.shm.advancedMounts.hermes.app[].path (1)
/dev/shm
string
persistence.shm.enabled (1)
true
boolean
persistence.shm.medium (1)
Memory
string
persistence.shm.sizeLimit (1)
1Gi
string
persistence.shm.type (1)
emptyDir
string
persistence.skills.globalMounts[].path (1)
/mnt/skills
string
persistence.skills.path (1)
/mnt/tank/ai/skills
string
persistence.skills.server (1)
nas.${PUBLIC_DOMAIN}
string
persistence.skills.type (1)
nfs
string
persistence.ssh.advancedMounts.hermes.app[].path (1)
/root/.ssh/id_ed25519
/root/.ssh/id_ed25519.pub
string
persistence.ssh.advancedMounts.hermes.app[].subPath (1)
id_ed25519
id_ed25519.pub
string
persistence.ssh.advancedMounts.hermes.init[].path (1)
/tmp/ssh
string
persistence.ssh.defaultMode (1)
256
number
persistence.ssh.name (1)
hermes-ssh
string
persistence.ssh.type (1)
secret
string
persistence.tts.globalMounts[].path (1)
/mnt/tts
string
persistence.tts.path (1)
/mnt/tank/ai/tts
string
persistence.tts.server (1)
nas.${PUBLIC_DOMAIN}
string
persistence.tts.type (1)
nfs
string
persistence.vaults.globalMounts[].path (1)
/mnt/vaults
string
persistence.vaults.path (1)
/mnt/tank/ai/vaults
string
persistence.vaults.server (1)
nas.${PUBLIC_DOMAIN}
string
persistence.vaults.type (1)
nfs
string
persistence.voice-recordings.advancedMounts.hermes.app[].path (1)
/opt/data/home/voice-recordings
string
persistence.voice-recordings.enabled (1)
true
boolean
persistence.voice-recordings.existingClaim (1)
molt-voice-recordings
string
persistence.wikis.globalMounts[].path (1)
/mnt/wikis
string
persistence.wikis.path (1)
/mnt/tank/ai/wikis
string
persistence.wikis.server (1)
nas.${PUBLIC_DOMAIN}
string
persistence.wikis.type (1)
nfs
string
defaultPodOptions.securityContext.fsGroup (10)
10000
number
defaultPodOptions.securityContext.fsGroupChangePolicy (10)
OnRootMismatch
string
defaultPodOptions.securityContext.seccompProfile.type (6)
RuntimeDefault
string
defaultPodOptions.securityContext.runAsGroup (1)
1000
number
defaultPodOptions.securityContext.runAsNonRoot (1)
true
boolean
defaultPodOptions.securityContext.runAsUser (1)
1000
number
defaultPodOptions.automountServiceAccountToken (2)
false
boolean
defaultPodOptions.hostAliases[].hostnames[] (1)
- auth.cloudjur.com
string
defaultPodOptions.hostAliases[].ip (1)
10.10.30.26
string
defaultPodOptions.imagePullSecrets[].name (1)
imp-forgejo
string
defaultPodOptions.terminationGracePeriodSeconds (1)
90
number
service.app.ports.http.port (10)
8642
number
service.app.ports.http.targetPort (1)
8642
number
service.app.ports.dashboard.port (5)
9119
number
service.app.ports.codeserver.port (4)
12321
number
service.app.ports.agent.port (2)
8642
number
service.app.ports.gateway.port (2)
8642
number
service.app.controller (9)
hermes
string
service.app.ipFamilies[] (1)
- IPv4
string
service.dashboard.ports.http.port (3)
9119
number
service.dashboard.ports.http.targetPort (1)
9119
number
service.dashboard.controller (2)
hermes
string
route.app.hostnames[] (7)
- {{ .Release.Name }}.${SECRET_DOMAIN}
string
route.app.parentRefs[].name (7)
envoy-internal
string
route.app.parentRefs[].namespace (7)
network
string
route.app.parentRefs[].sectionName (2)
https
string
route.app.rules[].backendRefs[].identifier (6)
app
string
route.app.rules[].backendRefs[].port (6)
http
string
route.app.annotations."gethomepage.dev/enabled" (3)
true
string
route.app.annotations."gethomepage.dev/group" (3)
Home
string
route.app.annotations."gethomepage.dev/name" (3)
Hermes
string
route.app.annotations."gethomepage.dev/description" (2)
Nous Hermes agent
string
route.app.annotations."gethomepage.dev/icon" (2)
mdi-robot-outline
string
route.app.annotations."gatus.home-operations.com/enabled" (1)
false
string
route.app.annotations."gethomepage.dev/app" (1)
hermes
string
route.app.annotations."gethomepage.dev/instance" (1)
homepage-internal
string
route.codeserver.hostnames[] (3)
- hermes-code.cloudjur.com
string
route.codeserver.parentRefs[].name (3)
envoy-internal
string
route.codeserver.parentRefs[].namespace (3)
network
string
route.codeserver.parentRefs[].sectionName (1)
websecure
string
route.codeserver.rules[].backendRefs[].identifier (3)
app
string
route.codeserver.rules[].backendRefs[].port (3)
codeserver
string
route.codeserver.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1)
true
string
route.dashboard.hostnames[] (2)
- hermes.${SECRET_DOMAIN}
string
route.dashboard.parentRefs[].name (2)
internal
string
route.dashboard.parentRefs[].namespace (2)
kube-system
string
route.dashboard.parentRefs[].sectionName (2)
https
string
route.dashboard.rules[].backendRefs[].identifier (2)
dashboard
string
route.dashboard.rules[].backendRefs[].port (2)
http
string
route.api.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1)
true
string
route.api.hostnames[] (1)
- hermes-api.${DOMAIN}
string
route.api.parentRefs[].name (1)
traefik-public
string
route.api.parentRefs[].namespace (1)
network
string
route.api.parentRefs[].sectionName (1)
websecure
string
route.api.rules[].backendRefs[].identifier (1)
app
string
route.api.rules[].backendRefs[].port (1)
gateway
string
route.public-dashboard.annotations."external-dns.alpha.kubernetes.io/cloudflare-proxied" (1)
true
string
route.public-dashboard.hostnames[] (1)
- hermes.${DOMAIN}
string
route.public-dashboard.parentRefs[].name (1)
traefik-public
string
route.public-dashboard.parentRefs[].namespace (1)
network
string
route.public-dashboard.parentRefs[].sectionName (1)
websecure
string
route.public-dashboard.rules[].backendRefs[].identifier (1)
app
string
route.public-dashboard.rules[].backendRefs[].port (1)
dashboard
string
rbac.bindings.hermes-read-all.roleRef.identifier (3)
hermes-read-all
string
rbac.bindings.hermes-read-all.subjects[].identifier (3)
hermes
string
rbac.bindings.hermes-read-all.subjects[].serviceAccount (3)
hermes
string
rbac.bindings.hermes-read-all.type (3)
ClusterRoleBinding
string
rbac.roles.hermes-read-all.rules[].apiGroups[] (3)
-
- apps
- batch
- networking.k8s.io
- storage.k8s.io
- autoscaling
- policy
- coordination.k8s.io
- rbac.authorization.k8s.io
- apiextensions.k8s.io
- apiregistration.k8s.io
- metrics.k8s.io
- helm.toolkit.fluxcd.io
- kustomize.toolkit.fluxcd.io
- source.toolkit.fluxcd.io
- external-secrets.io
- monitoring.coreos.com
- snapshot.storage.k8s.io
string
rbac.roles.hermes-read-all.rules[].resources[] (3)
- pods
- pods/log
- nodes
- services
- namespaces
- configmaps
- persistentvolumes
- persistentvolumeclaims
- endpoints
- resourcequotas
- limitranges
- serviceaccounts
- events
- deployments
- daemonsets
- statefulsets
- replicasets
- controllerrevisions
- jobs
- cronjobs
- ingresses
- ingressclasses
- networkpolicies
- storageclasses
- csinodes
- csidrivers
- volumeattachments
- horizontalpodautoscalers
- poddisruptionbudgets
- leases
- roles
- rolebindings
- clusterroles
- clusterrolebindings
- customresourcedefinitions
- apiservices
- nodes
- pods
- helmreleases
- kustomizations
- gitrepositories
- helmrepositories
- ocirepositories
- buckets
- helmcharts
- externalsecrets
- secretstores
- clustersecretstores
- prometheuses
- alertmanagers
- servicemonitors
- podmonitors
- prometheusrules
- thanosrulers
- probes
- volumesnapshots
- volumesnapshotcontents
- volumesnapshotclasses
string
rbac.roles.hermes-read-all.rules[].verbs[] (3)
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
- get
- list
- watch
string
rbac.roles.hermes-read-all.type (3)
ClusterRole
string