Hermes Web UI

Browser-based dashboard for managing Hermes Agent.

Access

• URL: http://tai.asslorde.com (via Caddy reverse proxy on port 80)
• Direct: http://localhost:8787 (bound to 0.0.0.0)
• Auth: Password auth enabled (HERMES_WEBUI_PASSWORD set in the unit file; auth_enabled: true). Bind is still 0.0.0.0 — loopback-bind hardening is open.
• Session: 30-day login cookies

Setup

# Auth
export HERMES_WEBUI_PASSWORD="..."
export HERMES_WEBUI_HOST=0.0.0.0   # bind to network
export HERMES_WEBUI_AGENT_DIR=/usr/local/lib/hermes-agent  # agent features

Rendering Support

• Full Markdown (headings, bold, italic, code, tables)
• LaTeX math
• Mermaid diagrams
• Media inline via MEDIA:/absolute/path prefix
  • Images, audio (with speed controls), video, PDF, HTML, CSV, diffs
• VRM avatar behind toggle (mobile: hidden by default)

Service Management

systemctl status hermes-webui
systemctl restart hermes-webui

Important Notes

• TTS uses browser speechSynthesis (system voices) — not the Kokoro server
• Workspace indicator [Workspace::v1: /path] in every user message
• Caddy config uses http:// prefix if port 443 is taken (e.g., by Tailscale)

Related

• Hermes Setup Profiles
• Caddy Routes