---
# Hermes service user
hermes_user: hermes
hermes_group: hermes
hermes_home: /home/hermes

# Install flags
# Set to true if you don't need browser automation (skips Playwright/Chromium)
hermes_skip_browser: false

# systemd service name (gateway)
hermes_service_name: hermes

# Path where hermes binary will be accessible system-wide
hermes_bin_symlink: /usr/local/bin/hermes

# -----------------------------------------------------------------------------
# Hermes Web UI (dashboard) — fronted by Traefik on lightning-lane via the
# 'jarvis' service. Binds to 0.0.0.0 so Traefik can reach it from upstream;
# --insecure is acceptable because TLS + auth are terminated at Traefik.
# -----------------------------------------------------------------------------
hermes_dashboard_enabled: true
hermes_dashboard_service_name: hermes-dashboard
hermes_dashboard_host: 0.0.0.0
hermes_dashboard_port: 9119
hermes_dashboard_insecure: true