m3ta-chiron 20bd28d567 feat(m3-hermes): add Hermes Dashboard as systemd service with Netbird-only firewall ...

- New hermes-dashboard.service: runs 'hermes dashboard' on 0.0.0.0:9119
- Firewall restricts port 9119 to Netbird mesh VPN range (100.64.0.0/16)
- Runs as hermes user with NoNewPrivileges + ProtectSystem hardening
- Depends on hermes-agent.service (starts after gateway)
- Added placeholder hermes-api-server-key.age (needs real encryption on host)

2026-05-11 11:19:21 +02:00

..

default.nix

feat(m3-hermes): add Hermes Dashboard as systemd service with Netbird-only firewall

2026-05-11 11:19:21 +02:00

hermes-agent.nix

feat(m3-hermes): add Netbird mesh VPN + enable API server for Hermes Desktop

2026-05-10 11:46:21 +02:00

hermes-dashboard.nix

feat(m3-hermes): add Hermes Dashboard as systemd service with Netbird-only firewall

2026-05-11 11:19:21 +02:00

netbird.nix

feat(m3-hermes): add Netbird mesh VPN + enable API server for Hermes Desktop

2026-05-10 11:46:21 +02:00