Hermes Agent: 部署模式

# Alice 的选择：
# 开发调试 → 本地模式（省钱方便）
# 团队使用 → Docker 部署在服务器（24/7在线）
# 高并发场景 → 集群模式（水平扩展）

# 安装
pip install hermes-agent[all]

# 启动
hermes serve --host 0.0.0.0 --port 8080

# 后台运行（Linux/macOS）
nohup hermes serve &

# 使用 systemd（Linux）
cat > /etc/systemd/system/hermes.service << EOF
[Unit]
Description=Hermes Agent
After=network.target

[Service]
Type=simple
User=alice
WorkingDirectory=/home/alice
ExecStart=/usr/local/bin/hermes serve
Restart=always
RestartSec=10

[Install]
WantedBy=multi-user.target
EOF

systemctl enable hermes
systemctl start hermes

# ~/.hermes/config.yaml
deployment:
  mode: "local"
  host: "0.0.0.0"
  port: 8080
  
  # 本地模型支持（离线运行）
  local_model:
    enabled: true
    provider: "ollama"
    fallback_to_cloud: true

# 拉取镜像
docker pull nousresearch/hermes-agent:latest

# 运行
docker run -d \
  --name hermes \
  -p 8080:8080 \
  -v ~/.hermes:/root/.hermes \
  -e OPENAI_API_KEY="${OPENAI_API_KEY}" \
  --restart unless-stopped \
  nousresearch/hermes-agent:latest

# docker-compose.yml
version: "3.8"

services:
  hermes:
    image: nousresearch/hermes-agent:latest
    container_name: hermes-agent
    restart: unless-stopped
    ports:
      - "8080:8080"
    volumes:
      - ./data:/root/.hermes
      - ./projects:/root/projects
    environment:
      - OPENAI_API_KEY=${OPENAI_API_KEY}
      - ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}
      - HERMES_MODEL_DEFAULT=gpt-4o
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
      interval: 30s
      timeout: 10s
      retries: 3

  # Ollama 本地模型
  ollama:
    image: ollama/ollama:latest
    container_name: ollama
    restart: unless-stopped
    ports:
      - "11434:11434"
    volumes:
      - ./ollama-data:/root/.ollama
    deploy:
      resources:
        reservations:
          devices:
            - capabilities: ["gpu"]

  # Web UI
  web-ui:
    image: nousresearch/hermes-web:latest
    container_name: hermes-web
    restart: unless-stopped
    ports:
      - "3000:3000"
    environment:
      - HERMES_API_URL=http://hermes:8080

# 使用 AWS EC2
# 1. 启动 EC2 实例（推荐 t3.medium）
# 2. 安装 Docker
# 3. 运行 Hermes

ssh ec2-user@your-instance

# 安装 Docker
sudo yum install -y docker
sudo systemctl start docker

# 运行 Hermes
docker run -d \
  -p 8080:8080 \
  -v /data/hermes:/root/.hermes \
  -e OPENAI_API_KEY="sk-..." \
  --restart unless-stopped \
  nousresearch/hermes-agent:latest

# 云部署安全加固
security:
  # API 认证
  api:
    auth_enabled: true
    auth_type: "jwt"           # jwt / api_key / oauth
    jwt_secret: "${JWT_SECRET}"
    rate_limit: 100            # RPM

  # TLS
  tls:
    enabled: true
    cert: "/etc/ssl/hermes.crt"
    key: "/etc/ssl/hermes.key"

  # 网络隔离
  network:
    allowed_origins:
      - "https://your-domain.com"
    blocked_ips: []

# docker-compose.cluster.yml
version: "3.8"

services:
  hermes-master:
    image: nousresearch/hermes-agent:latest
    environment:
      - HERMES_ROLE=master
      - HERMES_WORKERS=3
      - REDIS_URL=redis://redis:6379
      - DATABASE_URL=postgresql://hermes:pass@postgres:5432/hermes
    depends_on:
      - redis
      - postgres

  hermes-worker:
    image: nousresearch/hermes-agent:latest
    environment:
      - HERMES_ROLE=worker
      - REDIS_URL=redis://redis:6379
    deploy:
      replicas: 3
    depends_on:
      - redis

  redis:
    image: redis:7-alpine
    volumes:
      - redis-data:/data

  postgres:
    image: postgres:16-alpine
    environment:
      - POSTGRES_DB=hermes
      - POSTGRES_USER=hermes
      - POSTGRES_PASSWORD=pass
    volumes:
      - pg-data:/var/lib/postgresql/data