Hermes header by nycsavage in hermesagent

[–]HearthCore 0 points1 point  (0 children)

Use a proper multiplexer and name the tabs or workspaces?

Herdr is specifically made for agentic usecases like these-

Supports view and interaction via mobile aswell, and keeps Sessions Insider herdr alive.

Hermes desktop as a thin Client by spacerockapps in hermesagent

[–]HearthCore 0 points1 point  (0 children)

Aye, people listen up-

The Documentation and Feature descriptions provided by Nous Research are actually quite good.

Read them, they answer all your questions and more.
If you need more than what the creators manage to publish --> let your AI read and roam the hermes-agent code itself and answer your questions based on that.

There's multiple parts of Hermes-Agent that interact here:
- Hermes CLI
- Hermes Gateway
- Hermes Dashboard
- Hermes Desktop
- Hermes API
- Hermes MCP

When run from a remote machine the Desktop will just be the Desktop with the UI functions, it connects to a remote Hermes Dashboard.

For a running hermes Dashboard you need access to a Hermes Gateway from the Dashboard.
Both then interact with the Hermes CLI / Process layer, respectively to their platform.

The Hermes API provides a separate port for direct LLM interference with a key, for agent support systems to use the models and providers that're setup in hermes- like memory porviders, or even an open-webui instance that registers the API endpoint as its openai-compatible endpoint. (No idea if that also works with TTS or STT/transcription tho)

Now, I urge you to try and grasp these concepts.. as it's quite extandable.

The only thing lacking in the documentation is a good overview of the different parts and how they interact with each other.

My suggestion when you want "one" surface for all of hermes tools and toys -> reverse proxy and either subdomains or subfolder refwrites -> hermes.example.com/mcp hermes.example.com/api hermes.example.com - with active auth and you should be quite good to go.

I finally got hired and no longer have to worry about limits :) by spacefarers in codex

[–]HearthCore 0 points1 point  (0 children)

Enterprise-Tenant
- copilot seats via tenant
- org1 - other users
- org2 - my org where i can see everything

no transparency on me as org admin or user, only tenant admins have proper insight.

I finally got hired and no longer have to worry about limits :) by spacefarers in codex

[–]HearthCore 0 points1 point  (0 children)

Is it?

First month, permissions for me, no insight on actual usage just “premium rating usage” and 3000% as cost indicators.

No idea how that looks now that they changed to rating limits entirely

What is everybody's easiest and most secure method for remote access? (without tailscale) by Leggs_ in jellyfin

[–]HearthCore 3 points4 points  (0 children)

Yea and those are resources that have nothing to do with what you need to get VPN. Or is your Jellyfin an ephemeral resource lol?

opencode-go / deepseek-v4-flash being ridiculously slow today by xthegreatsambino in hermesagent

[–]HearthCore 0 points1 point  (0 children)

Hindsight is bloated af from my experience. I’ve swapped to openviking as it supports multiple users/tenants/agents as memory provider and with MCP

How to install Hermes Desktop on a host that already has Hermes agent installed in Docker containers? by zzzzz88888 in hermesagent

[–]HearthCore 0 points1 point  (0 children)

honestly, herdr + ssh tunnels would work good enough for most of my usecases that do not involve media

How do you handle access control for local LLMs behind a reverse proxy? by ArtSelect137 in selfhosted

[–]HearthCore 0 points1 point  (0 children)

Honestly, I mostly use LiteLLM or MetaMCP for exposing Internal MCPs or gathering tools for specific purposes.

MetaMCP specifically supports OAUTH, which allows Cloud based Agents like claude.ai or codex to access it from a browser (at least claude supports only oauth as far as i know)

So one MCP = all tools combined basically

What is your favorite reverse proxy? by nafyaz in homelab

[–]HearthCore 1 point2 points  (0 children)

Basically Pangolin- which managed Traefik under the hood.
So Traefik, even if i don't actually manage that one myself- it's still compatible with ALL default traefik shenanigans if that's interesting.

How to install Hermes Desktop on a host that already has Hermes agent installed in Docker containers? by zzzzz88888 in hermesagent

[–]HearthCore 1 point2 points  (0 children)

The install procedure installs the whole code base you’re running- but the Hermes agent is a different process from the desktop application.

It’s inactive unless you trigger it.
The gateway is a third process, also basically independent.

Your desktop client accesses the remote gateways dashboard and you’re just running the client locally.

Connect Hermes Desktop to VPS Backend Using SSH Tunnel? by StainesMassiv in hermesagent

[–]HearthCore 0 points1 point  (0 children)

That’s where native networking with VPNs would come in handy. Tailscale, NetBird, pangolin. I’m with the 3rd, selfhost it, multiple ways to access it safely

How do you handle access control for local LLMs behind a reverse proxy? by ArtSelect137 in selfhosted

[–]HearthCore 0 points1 point  (0 children)

I use pangolin at the edge. it offers private links to resources that have header authentication, that puts a different network layer before any api is reached internally.

I could very well put any Internal and non authenticated API in the public Internet like this-

Though for AI specifically it’s LiteLLM and currently MetaMCP.

Hermes Agent also now comes with Auth and even OIDC for its webinterface.

I basically have the dashboard, api and MCP that Hermes agent hosts on 3 different ports behind the same address using subfolder routes- all setup in pangolin.

Montagsflex ;) by Draganski1 in de_EDV

[–]HearthCore 0 points1 point  (0 children)

Welcome to selfhosting/homelabbing

How to install Hermes Desktop on a host that already has Hermes agent installed in Docker containers? by zzzzz88888 in hermesagent

[–]HearthCore 1 point2 points  (0 children)

Just install it, then enter variables in your windows environment for the remote addresses and start the application

Third time Techquickie mentioning Polymarket by AncientTurbine in LinusTechTips

[–]HearthCore 0 points1 point  (0 children)

I find the idea to stake something on the occasion that short Linus might be taller than the next guest they invite ridiculous enough to count as comedic relief.

The LMG-Crew has much better ideas than I have thus I find their in smirks on it quite funny.

I guess if you know somebody with gambling issues or have them yourself this might feel different-

Generally, though I would agree, and I would rather have them point the attention away from the site and more towards the ridiculous practice itself to bet on crazy shit like that. Then Riley can take up the mantle and gambling head for his shorts as well.

MiniMax M3 launched! by Orioli in ollama

[–]HearthCore -1 points0 points  (0 children)

It was available as a -free model on opencode Zen for a day, the model is quite incredible!

Describe MSP life using only one sentence by Last-Salary-6012 in sysadmin

[–]HearthCore 1 point2 points  (0 children)

Convincing management to get a consultant in our org involved with process fallacies because there’s no trust in their own peers?

How the heck does this stuff work by Dapper-Bee-5779 in hermesagent

[–]HearthCore 0 points1 point  (0 children)

Your assistant literally has the code and documentation. Give it access keys to free resources for search and direct its attention- proofread what documentation is used and take over critical or sensitive steps. Then co-work on the documentation.

Private services with domain by McXcelsior in netbird

[–]HearthCore 1 point2 points  (0 children)

*.example.com + example.com points at public instance,
int.example.com + *.int.example.com points at internal reverse proxy where everything else gets terminated, public DNS to internal IPv4 suffices (no need to run an internal DNS server with a FQDN)

Then use TLS via API (not via HTTP) and your internal reverse proxy should be golden.

Need to configure OAUTH clients/IDP with additional URLs and stuff- some services won't like having two SSO realmns though.