mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-07-20 15:33:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

Harden hosted Docker install tree against self-modification (#47490)

Browse source 
* Harden hosted Docker install tree

* Document hosted Docker immutable install tree
This commit is contained in:
shannonsands 2026-06-18 09:09:21 +10:00 • committed by GitHub
parent f8098c6b6f
commit 6092be413d
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 240 additions and 289 deletions
Download patch file Download diff file Expand all files Collapse all files

1
website/docs/reference/environment-variables.md
View file

@ -623,6 +623,7 @@ Advanced per-platform knobs for throttling the outbound message batcher. Most us
| `HERMES_ALLOW_PRIVATE_URLS` | `true`/`false` — allow tools to fetch localhost/private-network URLs. Off by default in gateway mode. |
| `HERMES_REDACT_SECRETS` | `true`/`false` — control secret redaction in tool output, logs, and chat responses (default: `true`). |
| `HERMES_WRITE_SAFE_ROOT` | Optional directory prefix that restricts `write_file`/`patch` writes; paths outside require approval. |
| `HERMES_DISABLE_LAZY_INSTALLS` | Internal bridge var set automatically in the official Docker image to prevent runtime dependency installs into the immutable `/opt/hermes` tree. The user-facing equivalent is `security.allow_lazy_installs: false` in `config.yaml`; do not set this in `.env`. |
| `HERMES_DISABLE_FILE_STATE_GUARD` | Set to `1` to turn off the "file changed since you read it" guard on `patch`/`write_file`. |
| `HERMES_CORE_TOOLS` | Comma-separated override for the canonical core tool list (advanced; rarely needed). |
| `HERMES_BUNDLED_SKILLS` | Comma-separated override for the list of bundled skills loaded at startup. |