Files
appstore/apps/hermes-agent/latest/docker-compose.yml
T
okxlin 87843f7c77 Fix Hermes 2026.7.20 runtime security
Enable and protect the gateway API, replace the removed dashboard insecure mode with Basic Auth, preserve old-user settings through idempotent upgrade migrations, and refresh the app documentation.
2026-07-21 21:24:04 +08:00

93 lines
3.7 KiB
YAML
Executable File

services:
hermes-agent:
image: "nousresearch/hermes-agent:latest"
container_name: ${CONTAINER_NAME}
command:
- gateway
- run
environment:
- TZ=${TZ}
- HERMES_UID=${HERMES_UID:-10000}
- HERMES_GID=${HERMES_GID:-10000}
- API_SERVER_ENABLED=true
- API_SERVER_HOST=0.0.0.0
- API_SERVER_KEY=${API_SERVER_KEY}
- API_SERVER_CORS_ORIGINS=${API_SERVER_CORS_ORIGINS:-*}
- OPENROUTER_API_KEY=${OPENROUTER_API_KEY:-}
- OPENAI_API_KEY=${OPENAI_API_KEY:-}
- GOOGLE_API_KEY=${GOOGLE_API_KEY:-}
- GLM_API_KEY=${GLM_API_KEY:-}
- GLM_BASE_URL=${GLM_BASE_URL:-}
- KIMI_API_KEY=${KIMI_API_KEY:-}
- KIMI_BASE_URL=${KIMI_BASE_URL:-}
- MINIMAX_API_KEY=${MINIMAX_API_KEY:-}
- MINIMAX_BASE_URL=${MINIMAX_BASE_URL:-}
- ANTHROPIC_TOKEN=${ANTHROPIC_TOKEN:-}
- GROQ_API_KEY=${GROQ_API_KEY:-}
- MISTRAL_API_KEY=${MISTRAL_API_KEY:-}
- COHERE_API_KEY=${COHERE_API_KEY:-}
- DEEPSEEK_API_KEY=${DEEPSEEK_API_KEY:-}
- TOGETHER_API_KEY=${TOGETHER_API_KEY:-}
- PERPLEXITY_API_KEY=${PERPLEXITY_API_KEY:-}
- FIREWORKS_API_KEY=${FIREWORKS_API_KEY:-}
- XAI_API_KEY=${XAI_API_KEY:-}
- HF_TOKEN=${HF_TOKEN:-}
- EXA_API_KEY=${EXA_API_KEY:-}
- PARALLEL_API_KEY=${PARALLEL_API_KEY:-}
- FIRECRAWL_API_KEY=${FIRECRAWL_API_KEY:-}
- TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN:-}
- TELEGRAM_ALLOWED_USERS=${TELEGRAM_ALLOWED_USERS:-}
- TELEGRAM_HOME_CHANNEL=${TELEGRAM_HOME_CHANNEL:-}
- ANTHROPIC_BASE_URL=${ANTHROPIC_BASE_URL:-}
- TELEGRAM_HOME_CHANNEL_NAME=${TELEGRAM_HOME_CHANNEL_NAME:-}
- DISCORD_HOME_CHANNEL=${DISCORD_HOME_CHANNEL:-}
- DISCORD_HOME_CHANNEL_NAME=${DISCORD_HOME_CHANNEL_NAME:-}
- DISCORD_REQUIRE_MENTION=${DISCORD_REQUIRE_MENTION:-}
- DISCORD_FREE_RESPONSE_CHANNELS=${DISCORD_FREE_RESPONSE_CHANNELS:-}
- DISCORD_AUTO_THREAD=${DISCORD_AUTO_THREAD:-}
- SLACK_HOME_CHANNEL=${SLACK_HOME_CHANNEL:-}
- SLACK_HOME_CHANNEL_NAME=${SLACK_HOME_CHANNEL_NAME:-}
- SLACK_ALLOWED_USERS=${SLACK_ALLOWED_USERS:-}
- WHATSAPP_ENABLED=${WHATSAPP_ENABLED:-}
- WHATSAPP_MODE=${WHATSAPP_MODE:-}
- WHATSAPP_ALLOWED_USERS=${WHATSAPP_ALLOWED_USERS:-}
- SIGNAL_HTTP_URL=${SIGNAL_HTTP_URL:-}
- SIGNAL_ACCOUNT=${SIGNAL_ACCOUNT:-}
- SIGNAL_ALLOWED_USERS=${SIGNAL_ALLOWED_USERS:-}
- SIGNAL_GROUP_ALLOWED_USERS=${SIGNAL_GROUP_ALLOWED_USERS:-}
- SIGNAL_HOME_CHANNEL=${SIGNAL_HOME_CHANNEL:-}
- SIGNAL_HOME_CHANNEL_NAME=${SIGNAL_HOME_CHANNEL_NAME:-}
- SIGNAL_IGNORE_STORIES=${SIGNAL_IGNORE_STORIES:-}
- HASS_URL=${HASS_URL:-}
- HASS_TOKEN=${HASS_TOKEN:-}
- HELICONE_API_KEY=${HELICONE_API_KEY:-}
- FIRECRAWL_API_URL=${FIRECRAWL_API_URL:-}
- GH_TOKEN=${GH_TOKEN:-}
- GITHUB_APP_ID=${GITHUB_APP_ID:-}
- GITHUB_APP_PRIVATE_KEY_PATH=${GITHUB_APP_PRIVATE_KEY_PATH:-}
- GITHUB_APP_INSTALLATION_ID=${GITHUB_APP_INSTALLATION_ID:-}
- EMAIL_ADDRESS=${EMAIL_ADDRESS:-}
- EMAIL_PASSWORD=${EMAIL_PASSWORD:-}
- EMAIL_IMAP_HOST=${EMAIL_IMAP_HOST:-}
- EMAIL_SMTP_HOST=${EMAIL_SMTP_HOST:-}
- EMAIL_HOME_ADDRESS=${EMAIL_HOME_ADDRESS:-}
- EMAIL_HOME_ADDRESS_NAME=${EMAIL_HOME_ADDRESS_NAME:-}
- GATEWAY_ALLOWED_USERS=${GATEWAY_ALLOWED_USERS:-}
- MODAL_TOKEN_ID=${MODAL_TOKEN_ID:-}
- MODAL_TOKEN_SECRET=${MODAL_TOKEN_SECRET:-}
- DAYTONA_API_KEY=${DAYTONA_API_KEY:-}
networks:
1panel-network:
ipv4_address: ${GATEWAY_STATIC_IP}
ports:
- "${PANEL_APP_PORT_API}:8642"
volumes:
- "${APP_DATA_DIR}:/opt/data"
restart: unless-stopped
labels:
createdBy: "Apps"
networks:
1panel-network:
external: true