Hermes Agent 24/7 no seu bolso.

docker ps
docker exec -it NOME_DO_CONTAINER bash

apt update
apt full-upgrade -y
apt install -y ca-certificates curl gnupg ufw fail2ban unattended-upgrades
timedatectl set-timezone America/Sao_Paulo
reboot

ufw default deny incoming
ufw default allow outgoing
ufw allow OpenSSH
ufw enable
ufw status verbose

systemctl enable --now fail2ban
fail2ban-client status sshd

sudo apt install -y ca-certificates curl
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
sudo chmod a+r /etc/apt/keyrings/docker.asc

sudo tee /etc/apt/sources.list.d/docker.sources >/dev/null <<EOF
Types: deb
URIs: https://download.docker.com/linux/ubuntu
Suites: $(. /etc/os-release && echo "${UBUNTU_CODENAME:-$VERSION_CODENAME}")
Components: stable
Architectures: $(dpkg --print-architecture)
Signed-By: /etc/apt/keyrings/docker.asc
EOF

sudo apt update
apt-cache policy docker-ce   # deve mostrar um "Candidate:" com versão

sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
sudo systemctl enable --now docker
sudo docker run --rm hello-world
sudo docker compose version

sudo install -d -m 700 /opt/hermes/data
cd /opt/hermes
sudo nano compose.yaml

services:
  hermes:
    image: nousresearch/hermes-agent:v2026.7.30
    container_name: hermes-agent
    restart: unless-stopped
    command: gateway run
    environment:
      TZ: America/Sao_Paulo
    volumes:
      - /opt/hermes/data:/opt/data
    cpus: 2.0
    mem_limit: 4g
    stop_grace_period: 60s
    logging:
      driver: json-file
      options:
        max-size: "10m"
        max-file: "5"

sudo docker compose config
sudo docker compose pull
sudo docker compose run --rm hermes --version
sudo docker compose run --rm hermes setup

hermes setup

cd /opt/hermes
sudo docker compose run --rm hermes model

hermes chat -q "Responda somente: HERMES OK" -Q --max-turns 1

new - Iniciar uma conversa nova
status - Ver modelo e sessão
model - Ver ou trocar o modelo configurado
stop - Interromper a tarefa atual
help - Mostrar os comandos disponíveis

hermes gateway setup

cd /opt/hermes
sudo docker compose run --rm hermes gateway setup

TELEGRAM_BOT_TOKEN=SEU_TOKEN_REAL
TELEGRAM_ALLOWED_USERS=SEU_ID_NUMERICO
TELEGRAM_ALLOW_ALL_USERS=false
GATEWAY_ALLOW_ALL_USERS=false

chmod 600 CAMINHO_DO_SEU_ENV

sudo awk -F= '
/^TELEGRAM_BOT_TOKEN=/{t=length($2)>20}
/^TELEGRAM_ALLOWED_USERS=/{u=$2 ~ /^[0-9]+(,[0-9]+)*$/}
/^GATEWAY_ALLOW_ALL_USERS=/{a=tolower($2)}
END {
  print "token:", t ? "OK" : "FALTA";
  print "allowlist:", u ? "OK" : "FALTA/INVALIDA";
  print "acesso global:", (a=="" || a=="false" || a=="0") ? "FECHADO" : "PERIGO";
}' /opt/hermes/data/.env

hermes gateway run
hermes gateway status

cd /opt/hermes
sudo docker compose up -d
sudo docker compose ps
sudo docker compose logs --tail=120 hermes

docker ps
hermes doctor
sudo ss -lntup
sudo ufw status verbose

curl -fsSL https://tailscale.com/install.sh | sh
sudo tailscale up --hostname=hermes-vps
tailscale ip -4
tailscale status

{
  "tagOwners": {
    "tag:hermes-server": ["SEU_EMAIL_DE_OWNER"],
    "tag:hermes-client": ["SEU_EMAIL_DE_OWNER"]
  },
  "grants": [
    {
      "src": ["tag:hermes-client"],
      "dst": ["tag:hermes-server"],
      "ip": ["tcp:9119"]
    }
  ]
}