Add Hermes Agent as reproducible second client

compose.yaml

@@ -784,6 +784,33 @@ services:
         condition: service_healthy
     security_opt: ["no-new-privileges:true"]
 
+  hermes:
+    image: ${HERMES_IMAGE:-nousresearch/hermes-agent@sha256:143bdb9086bb2db645346179f11091e621ef6b7f4f9e5049ae7454bfeb3a0495}
+    container_name: mike-ai-hermes
+    restart: unless-stopped
+    command: [gateway, run]
+    env_file:
+      - /data/hermes/.env
+    volumes:
+      - /data/hermes:/opt/data
+      - /data/hermes/workspace:/workspace
+    environment:
+      HERMES_HOME: /opt/data
+    dns: ["${AI_DNS:-1.1.1.1}"]
+    networks: [frontend, tools, tools-egress]
+    depends_on:
+      wireguard-gateway:
+        condition: service_healthy
+      router:
+        condition: service_healthy
+    security_opt: ["no-new-privileges:true"]
+    healthcheck:
+      test: [CMD, curl, -fsS, "http://127.0.0.1:8642/health"]
+      interval: 15s
+      timeout: 5s
+      retries: 20
+      start_period: 45s
+
 networks:
   frontend:
     internal: false