mirror of https://github.com/EKKOLearnAI/hermes-web-ui.git synced 2026-05-25 21:40:13 +00:00

Files

T

ekko 477af66232 fix: auth bypass, SPA serving, and provider improvements (#97 )

* feat(chat): polish syntax highlighting and tool payload rendering (#94)

* [verified] feat(chat): polish syntax highlighting and tool payload rendering

* [verified] fix(chat): tighten large tool payload rendering

* docs: update data volume path in Docker docs

Align documentation with docker-compose.yml change:
hermes-web-ui-data -> hermes-web-ui, /app/dist/data -> /root/.hermes-web-ui

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* refactor: bundle server build and restructure service modules

- Add build-server.mjs script for standalone server compilation
- Add logger service with structured output
- Restructure auth, gateway-manager, hermes-cli, hermes services
- Update docker-compose volume mount path
- Update tsconfig and entry point for bundled server

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* refactor: separate controllers from routes and centralize route registration

- Extract business logic from route handlers into controllers/
- Add centralized route registry in routes/index.ts with public/auth/protected layers
- Replace global auth whitelist with sequential middleware registration
- Extract shared helpers to services/config-helpers.ts
- Allow custom provider name to be user-editable in ProviderFormModal
- Deduplicate custom providers by poolKey instead of base_url in getAvailable

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: auth bypass via path case, SPA serving, and provider improvements

- Fix auth bypass: path case-insensitive check for /api, /v1, /upload
- Fix SPA returning 401: skip auth for non-API paths (static files)
- Fix profile switch: use local loading state instead of shared store ref
- Auto-append /v1 to base_url when fetching models (frontend + backend)
- Guard .env writing to built-in providers only
- Add builtin field to provider presets, enable base_url input in form
- Print auth token to console on startup (pino only writes to file)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Zhicheng Han <43314240+hanzckernel@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-21 12:35:48 +08:00

3.0 KiB

Raw Blame History

Docker Compose Guide

This repository ships an environment-variable driven Docker Compose setup.

Quick Start

Pull pre-built image (Recommended)

WEBUI_IMAGE=ekkoye8888/hermes-web-ui:latest docker compose up -d hermes-agent hermes-webui
docker compose logs -f hermes-webui

Open: http://localhost:6060

Build from source

docker compose up -d --build hermes-agent hermes-webui
docker compose logs -f hermes-webui

Services

This compose file runs two services:

hermes-agent — Hermes Agent runtime (image: nousresearch/hermes-agent)
hermes-webui — Web UI dashboard (pre-built image or built from source)

Environment Variables

All key runtime settings are configured from compose variables.

Variable	Default	Description
`PORT`	`6060`	Web UI listen port
`UPSTREAM`	`http://hermes-agent:8642`	Hermes gateway URL (container internal)
`HERMES_BIN`	`/opt/hermes/.venv/bin/hermes`	Path to Hermes CLI binary
`HERMES_AGENT_IMAGE`	`nousresearch/hermes-agent:latest`	Hermes Agent base image
`WEBUI_IMAGE`	`hermes-web-ui-local:latest`	Web UI image (set to `ekkoye8888/hermes-web-ui:latest` to use pre-built)
`HERMES_DATA_DIR`	`./hermes_data`	Hermes runtime data directory
`AUTH_DISABLED`	`false`	Set to `true` to disable login authentication

Override variables directly from shell:

PORT=16060 \
AUTH_DISABLED=true \
docker compose up -d hermes-agent hermes-webui

Or create a .env file in the project root:

WEBUI_IMAGE=ekkoye8888/hermes-web-ui:latest
PORT=6060
AUTH_DISABLED=false

Data Persistence

Path	Description
`${HERMES_DATA_DIR}` (`./hermes_data`)	Hermes runtime data (sessions, config, profiles)
`${HERMES_DATA_DIR}/hermes-web-ui`	Web UI data (auth token, etc.)

Hermes data persists in ./hermes_data, mapped to /home/agent/.hermes in the container.
Web UI data persists in ./hermes_data/hermes-web-ui/, mapped to /root/.hermes-web-ui in the container.
When AUTH_DISABLED=false, the auth token is auto-generated on first run and printed to container logs.
Deleting the token file and restarting will generate a new one.

Port Mapping

Port	Service	Description
`${PORT}` (6060)	hermes-webui	Web UI dashboard
8642-8670	hermes-agent	Hermes Agent gateway ports (for multi-profile)

Code Runtime Behavior

Server upstream comes from UPSTREAM env (packages/server/src/config.ts).
Hermes CLI binary comes from HERMES_BIN env (packages/server/src/services/hermes-cli.ts).
If HERMES_BIN is not provided, code falls back to hermes in PATH.
Profile switching dynamically resolves upstream URLs via GatewayManager — the UPSTREAM env only sets the default profile gateway.

Common Operations

Recreate webui:

docker compose up -d --no-deps --force-recreate hermes-webui

View auth token:

docker compose logs hermes-webui | grep token
# or
cat ./hermes_data/hermes-web-ui/.token

Stop:

docker compose down

3.0 KiB Raw Blame History