# Hermes Agent – ukazkova konfigurace
# Zkopiruj na ~/.config/hermes/config.yml a dopln

# AI provider a model
provider: anthropic
model: claude-sonnet-4.5
api_key: ${HERMES_API_KEY}

# Pracovni adresare
workspace: ~/Skripty
memory_dir: ~/.hermes/memory
projects_dir: ~/git-repos

# Sandbox – bezpecnostni omezeni
sandbox:
  enabled: true
  allow:
    - "ls"
    - "cat"
    - "grep"
    - "find"
    - "git"
    - "docker"
    - "docker compose"
    - "kubectl"
    - "ssh"
    - "scp"
    - "rsync"
    - "curl"
    - "jq"
  deny:
    - "rm -rf /"
    - "rm -rf /*"
    - "dd if="
    - "mkfs"

# Integrace s existujicimi sluzbami
integrations:
  gitea:
    url: http://CHANGE_ME:3000
    token_name: "gitea:api:CHANGE_ME"
  docker:
    socket: /var/run/docker.sock
  ssh:
    default_user: deploy
    default_key: ~/.ssh/id_ed25519

# Vystup
output:
  format: markdown
  streaming: true
  language: cs
  color: true

# UI
ui:
  theme: dark
  icons: emoji
  spinner: dots

# Bezpecnost
security:
  audit_log: true
  require_approval_for:
    - "rm"
    - "docker system prune"
    - "kubectl delete"
    - "git push --force"
  api_key_storage: keychain  # macOS keychain