mates
4340cb3b2a
Toto repo ma novou cistou historii (1 commit). Predchozi historie byla smazana, protoze obsahovala osobni udaje (IP, emaily, hesla, klice, tokeny, Volume cesty). Soubory v aktualnim commit uz tyto udaje neobsahuji (nahradeno placeholdery <server-ip>, CHANGE_ME, admin@example.com atd.). Pokud chces zpet kompletni seznam starych commitu, mas je ve svem lokalnim working tree - git log --all ukaze prazdno (protoze jsme smazali .git/ a zacali znovu).
70 lines
1.1 KiB
YAML
70 lines
1.1 KiB
YAML
# Hermes Agent – ukazkova konfigurace
|
||
# Zkopiruj na ~/.config/hermes/config.yml a dopln
|
||
|
||
# AI provider a model
|
||
provider: anthropic
|
||
model: claude-sonnet-4.5
|
||
api_key: ${HERMES_API_KEY}
|
||
|
||
# Pracovni adresare
|
||
workspace: ~/Skripty
|
||
memory_dir: ~/.hermes/memory
|
||
projects_dir: ~/git-repos
|
||
|
||
# Sandbox – bezpecnostni omezeni
|
||
sandbox:
|
||
enabled: true
|
||
allow:
|
||
- "ls"
|
||
- "cat"
|
||
- "grep"
|
||
- "find"
|
||
- "git"
|
||
- "docker"
|
||
- "docker compose"
|
||
- "kubectl"
|
||
- "ssh"
|
||
- "scp"
|
||
- "rsync"
|
||
- "curl"
|
||
- "jq"
|
||
deny:
|
||
- "rm -rf /"
|
||
- "rm -rf /*"
|
||
- "dd if="
|
||
- "mkfs"
|
||
|
||
# Integrace s existujicimi sluzbami
|
||
integrations:
|
||
gitea:
|
||
url: http://CHANGE_ME:3000
|
||
token_name: "gitea:api:CHANGE_ME"
|
||
docker:
|
||
socket: /var/run/docker.sock
|
||
ssh:
|
||
default_user: deploy
|
||
default_key: ~/.ssh/id_ed25519
|
||
|
||
# Vystup
|
||
output:
|
||
format: markdown
|
||
streaming: true
|
||
language: cs
|
||
color: true
|
||
|
||
# UI
|
||
ui:
|
||
theme: dark
|
||
icons: emoji
|
||
spinner: dots
|
||
|
||
# Bezpecnost
|
||
security:
|
||
audit_log: true
|
||
require_approval_for:
|
||
- "rm"
|
||
- "docker system prune"
|
||
- "kubectl delete"
|
||
- "git push --force"
|
||
api_key_storage: keychain # macOS keychain
|