Hermes Agent
v1.2.1
Nous Research's AI agent with 30+ tools, web dashboard, 16 messaging platforms, and all coding agents
What's included
- Hermes Agent v2026.7.7.2 (pinned) -- 30+ native tools, web dashboard, fast mode, 16 messaging platforms, pluggable context engine
- Claude Code -- Anthropic's CLI coding agent
- OpenAI Codex -- OpenAI's CLI coding agent
- Gemini CLI -- Google's CLI coding agent
- OpenCode -- open-source coding agent
- Caddy reverse proxy with auto-HTTPS and basic auth
- Docker, Go, Rust, Node.js 22, Python + uv
- Playwright with Chromium and Firefox
- ripgrep, fd, fzf, jq, yq, bat, tmux, htop, btop
- Hardening: ufw (22/80/443 only), fail2ban, unattended security upgrades, nightly state backups -- validated on Ubuntu, best-effort on RHEL
After install
- SSH in and switch to the hermes user: su - hermes
- Configure Hermes: hermes setup
- Web dashboard: systemd service hermes-dashboard, bound to 127.0.0.1 behind Caddy basic auth
- Backup/restore: hermes backup, hermes import
- Telegram: set TELEGRAM_ALLOWED_USERS in ~/.hermes/.env BEFORE connecting a bot
- Other agents: claude, codex, gemini, opencode
Supported Operating Systems
Ubuntu 24Ubuntu 25Debian 12Debian 13Rocky 9Rocky 10Alma 9Alma 10
Requirements
- RAM
- 512MB minimum
- Disk
- 5GB minimum
Configuration
| Variable | Default | Description |
|---|---|---|
| VIRTUA_USER | hermes | System user for the agent |
| VIRTUA_PASS | random 24-char | User password (for su - hermes). Auto-generated if not set. |
| HERMES_HOST | server hostname | Hostname or IP for the web dashboard. Caddy reverse proxy with basic auth. Hostnames get auto-HTTPS via Let's Encrypt. |
| HERMES_AUTH_USER | hermes | Username for dashboard basic auth |
| HERMES_AUTH_PASS | random 24-char | Password for dashboard basic auth. Auto-generated if not set. |
702 installsOfficial website →
Changelog
v1.2.12026-07-12
- Hermes Agent pinned to release v2026.7.7.2 (weekly pin-bump loop)
v1.2.02026-07-07
- Hermes Agent pinned to release v2026.7.1 (weekly pin-bump loop, smoke-tested)
- Tool-loop guardrails hard-stop enabled by default in ~/.hermes/config.yaml (circuit breaker for unattended/cron sessions)
- Pre-staged ~/.hermes/.env (mode 600) with Telegram allow-list guidance
- One-click hardening: ufw default-deny (22/80/443 only), fail2ban, unattended security upgrades (Ubuntu-validated)
- Nightly backup of Hermes state (config, sessions, memories, skills, cron, hooks) to /var/backups/agent (7-day rotation) and log rotation
- Dashboard systemd unit restarts on failure, bound to 127.0.0.1
v1.1.02026-04-14
- Updated for Hermes Agent 0.9.0 (The Everywhere Release)
- Git submodules support for complete clone
- Pre-created ~/.hermes directory structure
- WhatsApp bridge Node.js dependencies
- New features: web dashboard, fast mode, backup/restore, 16 messaging platforms
- Optional Caddy reverse proxy with basic auth for web dashboard (HERMES_HOST)
v1.0.02026-04-02
- Initial release
- Full dev environment: Docker, Go, Rust, Node.js, Python
- Playwright with Chromium and Firefox
- Developer tools: ripgrep, fd, fzf, jq, bat, tmux, htop