hermes-agent
Hermes Agent on Proxmox VM (multi-profile fleet) or Kubernetes (tenant GitOps): SOUL/skills, GitHub App, MCP (including WAHA), dashboard, s6 entrypoint…
Skill by giovannirco
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/giovannirco-hermes-agent
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: devops, data, agent-building
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/hermes-agent
What's inside
- Skill name
hermes-agent- Description
- Hermes Agent on Proxmox VM (multi-profile fleet) or Kubernetes (tenant GitOps): SOUL/skills, GitHub App, MCP (including WAHA), dashboard, s6 entrypoint footguns, OpenClaw migration. Triggers: /hermes-agent, Hermes, OpenClaw, SOUL.md, gateway run, hermes k8s, hermes VM.
- License
- MIT
- Instructions
- 57 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Hermes agent
Full dual-path write-up: `docs/agents/hermes-vm-vs-kubernetes.md`.
## VM fleet (day-1 learning)
1. Ubuntu VM on Proxmox (6–8G RAM, linger on)
2. Install Hermes per upstream; `hermes update`
3. One chat channel + allowlist
4. `bash scripts/install-skills.sh --hermes`
5. SOUL / USER / AGENTS present; secrets in `~/.hermes/.env` only
Optional: multiple profiles = multiple user systemd gateways (non-multiplex).
## Kubernetes tenant (after GitOps)
1. App under `platform-gitops/apps/hermes/`
2. Chart: community Helm that preserves image init/s6; pin image
3. PVC for `/opt/data`; internal HTTPRoute only
4. OOB Secrets: dashboard auth, GitHub App PEM, WAHA MCP key via `extraEnvFrom`
5. Do not override ENTRYPOINT with bare `hermes` — use gateway args only
### GitHub App verify
```bash
kubectl -n <ns> exec deploy/<hermes> -- sh -c 'echo $GITHUB_APP_ID; /opt/data/bin/github-app-token | wc -c'
```
### MCP
```bash
kubectl -n <ns> exec deploy/<hermes> -- hermes mcp list
kubectl -n <ns> exec deploy/<hermes> -- hermes mcp test waha-<name>
```
HTTP MCP example:
```yaml
waha-tenant:
url: "http://waha.<ns>.svc.cluster.local:3000/mcp"
headers:
X-Api-Key: "${WAHA_MCP_KEY}"
```
## Hard rules
- Never paste secrets into Discord/WhatsApp
- Prefer GitOps for k8s agents
- Scope GH App to lab/tenant repos only
- Explain-as-you-go in learning mode
## Related
- `skills/waha-mcp/`
- `docs/agents/waha-and-mcp.md`From giovannirco/agentic-homelab, MIT.
More from giovannirco/agentic-homelab
- 0.587score
long-session-goal
giovannirco
Keep a multi-hour agent session on track across context loss: a goal file with a checkable end, a resume routine, a checkpoint routine, a "waiting for the…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
local-ai-gpu-node
giovannirco
Run and measure local AI on a Talos GPU worker: storage off the node disk, one GPU app at a time, thermal profile per card, power limits from a privileged…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
omni-netboot
giovannirco
Self-hosted Omni with netboot enrolment: identity rules (domain, account ID, fixed IP), enrolment images, cluster templates in git, lab clusters on VMs, the…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
talos-upgrade
giovannirco
Sequential Talos + Kubernetes upgrades: compatibility gates, one minor at a time, CNI bootstrap caution, verify steps.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
cilium-networking
giovannirco
Cilium as cluster CNI with kube-proxy replacement, Cilium LB-IPAM + L2 Announcement for Service type LoadBalancer (not MetalLB), Gateway notes.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
lab-bootstrap
giovannirco
Bootstrap an agentic homelab: Proxmox, agent VM, Talos, Cilium, Argo CD, Cloudflare Tunnel, Technitium split-DNS, external-dns, agent GH App + kube access…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
home-network-controllers
giovannirco
UniFi, MikroTik, or Omada for lab networking: VLANs, DHCP DNS, DNS redirect footguns, reserve infra IPs, free LB pool.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
observability
giovannirco
Choose observability tier by hardware: Grafana Cloud Free + Alloy (light), self-hosted Grafana+Prometheus+Loki single, or full LGTM (Mimir/Loki/Tempo RF=1+).
SkillAFreshness: A★ 1Claude Code +9 - 0.544score
cloudflare-tunnel
giovannirco
Expose lab apps via Cloudflare Tunnel without opening home WAN ports; token hygiene; 301 loop footguns.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
multus-secondary-net
giovannirco
Multus CNI for secondary pod interfaces (macvlan NADs on LAN), when to use vs ClusterIP/LB VIP, static-IP footguns.
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
technitium-split-dns
giovannirco
Bootstrap and operate Technitium for LAN split-horizon DNS: primary zones, forwarders, optional catalog secondary, client DHCP/DNAT, diagnose public CF vs…
SkillBFreshness: B★ 1Claude Code +9 - 0.544score
explain-as-you-go
giovannirco
Narrate why before how on ops channels; link issues; keep scope tight.
SkillBFreshness: B★ 1Claude Code +9
Signals
- Stars
- 1
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Aug 3, 2026 (2 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- Repository
- github.com/giovannirco/agentic-homelab
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from giovannirco
- 0.587score
local-ai-gpu-node
giovannirco
Run and measure local AI on a Talos GPU worker: storage off the node disk, one GPU app at a time, thermal profile per card, power limits from a privileged…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
long-session-goal
giovannirco
Keep a multi-hour agent session on track across context loss: a goal file with a checkable end, a resume routine, a checkpoint routine, a "waiting for the…
SkillAFreshness: A★ 1Claude Code +9 - 0.587score
omni-netboot
giovannirco
Self-hosted Omni with netboot enrolment: identity rules (domain, account ID, fixed IP), enrolment images, cluster templates in git, lab clusters on VMs, the…
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
home-network-controllers
giovannirco
UniFi, MikroTik, or Omada for lab networking: VLANs, DHCP DNS, DNS redirect footguns, reserve infra IPs, free LB pool.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
cilium-networking
giovannirco
Cilium as cluster CNI with kube-proxy replacement, Cilium LB-IPAM + L2 Announcement for Service type LoadBalancer (not MetalLB), Gateway notes.
SkillAFreshness: A★ 1Claude Code +9 - 0.584score
talos-upgrade
giovannirco
Sequential Talos + Kubernetes upgrades: compatibility gates, one minor at a time, CNI bootstrap caution, verify steps.
SkillAFreshness: A★ 1Claude Code +9
Cite this page
hermes-agent skill. Agent Mart. https://agentmart.dev/skills/giovannirco-hermes-agent (last updated 2026-10-24)