Add Hermes Agent as reproducible second client

install.sh

@@ -315,6 +315,7 @@ WEBUI_SECRET_KEY=$(<$SECRETS_DIR/webui-secret)
 OPENWEBUI_IMAGE=${OPENWEBUI_IMAGE:-mike-ai/openwebui:main-01f4282-tool-final-v3}
 OPENWEBUI_ENABLE_SIGNUP=${OPENWEBUI_ENABLE_SIGNUP:-false}
 OPENWEBUI_ENABLE_FOLLOW_UP_GENERATION=${OPENWEBUI_ENABLE_FOLLOW_UP_GENERATION:-false}
+HERMES_IMAGE=${HERMES_IMAGE:-nousresearch/hermes-agent@sha256:143bdb9086bb2db645346179f11091e621ef6b7f4f9e5049ae7454bfeb3a0495}
 PIPER_TTS_VERSION=${PIPER_TTS_VERSION:-1.6.0}
 PIPER_VOICE=${PIPER_VOICE:-de_DE-thorsten-high}
 XTTS_IMAGE=${XTTS_IMAGE:-ghcr.io/coqui-ai/xtts-streaming-server:latest-cuda121@sha256:f7fb3b1f9d4bc88af94da1b5959d8002f1e0b003c97557164034eb8a29f01b90}
@@ -478,11 +479,12 @@ build_and_start() {
   # Web search always starts; HA/ARR/Unraid only start when their root-only
   # secret files and required local artifacts are present.
   "$STACK_DIR/platform/mcp/install-tools.sh"
+  "$STACK_DIR/platform/hermes/install-hermes.sh"
   docker compose --env-file "$SECRETS_DIR/stack.env" --profile inference create \
     llama-fast llama-medium llama-large llama-ultra llama-experimental
   docker compose --env-file "$SECRETS_DIR/stack.env" --profile image create flux-worker
   docker compose --env-file "$SECRETS_DIR/stack.env" up -d --build \
-    xtts piper tts-gateway profile-controller router open-webui
+    xtts piper tts-gateway profile-controller router open-webui hermes
 
   if [[ ${WIREGUARD_MODE:-container} == container ]]; then
     systemctl restart mike-ai-container-vpn-guard.service
@@ -558,6 +560,7 @@ fi
 cat <<EOF
 OpenWebUI:  http://${vpn_address}:8080
 Router-API: http://${vpn_address}:8081
+Hermes:     http://${vpn_address}:9119
 
 Die geheimen Schlüssel liegen ausschließlich unter $SECRETS_DIR (0600).
 Im Container-Modus stammen Peer, Adresse und Heimrouten vollständig aus dem