From 7614a68027175963eb2909ef3e175085d591b804 Mon Sep 17 00:00:00 2001
From: tux <t@tux.rs>
Date: Wed, 12 Aug 2026 20:51:18 +0530
Subject: [PATCH] feat(arcturus): enable hermes-agent service

---
 modules/hosts/arcturus/config.nix   | 9 +++++++++
 modules/hosts/arcturus/secrets.yaml | 5 +++--
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/modules/hosts/arcturus/config.nix b/modules/hosts/arcturus/config.nix
index 7406137..8427386 100644
--- a/modules/hosts/arcturus/config.nix
+++ b/modules/hosts/arcturus/config.nix
@@ -49,6 +49,11 @@
         };
 
         services = {
+          hermes-agent = {
+            enable = true;
+            environmentFiles = [ innerArgs.config.sops.secrets.hermes.path ];
+          };
+
           cyber-tux = {
             enable = true;
             environmentFile = innerArgs.config.sops.secrets.discord-token.path;
@@ -122,6 +127,10 @@
           sopsFile = ./secrets.yaml;
           owner = innerArgs.config.services.copyparty.user;
         };
+
+        hermes = {
+          sopsFile = ./secrets.yaml;
+        };
       };
 
       # --- Networking ---
diff --git a/modules/hosts/arcturus/secrets.yaml b/modules/hosts/arcturus/secrets.yaml
index 67aafaf..82d06b4 100644
--- a/modules/hosts/arcturus/secrets.yaml
+++ b/modules/hosts/arcturus/secrets.yaml
@@ -6,6 +6,7 @@ opencode-go-api-key: ENC[AES256_GCM,data:dmeRKn7TWHnqvpyPQpcEG6yHTb2bRby/rh10ytL
 netbird-key: ENC[AES256_GCM,data:q6eKisca04qn/CvALrvXF79MsToDhvLRLv2JTiUBAZglCC9m,iv:jj0/ZD7IDgopprTVUgSfJmdAJmUP3iqewU3dqssGYbk=,tag:6IPRdCm2FGdlTEIX7jt3qA==,type:str]
 copyparty: ENC[AES256_GCM,data:QXt8IgTekg9rzFyuzpg=,iv:vJYfHqCiheq290K9TGACHNHyOWzIn60j1Kz502SE27w=,tag:ECt7Wavlqw1V6zgXiRZtUg==,type:str]
 newt: ENC[AES256_GCM,data:r5Rd81ZrzrIYbXtFkypbJltoGCOYrW6P4IpwGCtaH7lqCg7wD/WMboMx13HN4Mm0J4qbBpDakpfVv9qUTrisYP1xwpKkmY1kqPlFWRZN8hzuuNS2Tv3qUjavTp5XGotVPLHj1Cg/cwGcf8EAssYTwTy7H0PgdQKwqigQD1f1s/j4iXQ=,iv:1xP38/Ayt1xvn2fJGa5zgOrVNOw2J5taG1Orx6uNgZI=,tag:H9JXu9gzyyvTPWgXaoTsiw==,type:str]
+hermes: ENC[AES256_GCM,data:9A2T2LIeVGo805k5E8wPHmqfjqQ6Dp7srQrVXHLsJRk+9N9bo2pMZUvAZm9FI89zPyK7tMnmLd56Jwf+W+mmQqbupnmN66jxOxOaB0MQ9/6/1oNHvaii337ed6fviLy6hx24pEOpY3OXwSEdNftwJqzc7YXLZK3UX8thhDDdxd0TSj3VUBd0ZHDWd4NpsgtjRRyVDBjHsnF0vzSZXtomithnHqeVHpp/jWPc+ZGrpnVvU8wxNMGLlDtr4A==,iv:dYCaTygVp1hqunPmBcNaYr7JxrdxfH1pcBE6B5HMgzk=,tag:/fddnR3n6+erzWF+m/bgGQ==,type:str]
 sops:
     age:
         - enc: |
@@ -26,7 +27,7 @@ sops:
             TLKEYsPQgOJ7s8P9gw2uPUY6HRz86CtiC6EbO27u0+8BbI85x1QScg==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1huqa3hc7wcxk4dpelrzny437nzrx4fnll3d8g9ahznzk268yju5qufapxy
-    lastmodified: "2026-08-12T09:47:06Z"
-    mac: ENC[AES256_GCM,data:gh5vEo25SDm0lymsnhJJAl3LhbdJunAjAd01bauFwn13vlLGKITUvYbCUd7iSxTMGg9emTiTueSTTFeIaFF7VEuZbuRPfBb3tGpY0OQJqc8IR1GrzoyvjHFEJfOj7orqPxim2YoRcKEBMOBVIkTDiNP/7HSvAucbfw1mfUVxzHQ=,iv:u3tBnR53UHk4wTPrMClE3eQUwdAlbNEvwWdSnaobrOU=,tag:Us9qZToS53IabsA6O6otpg==,type:str]
+    lastmodified: "2026-08-12T13:48:51Z"
+    mac: ENC[AES256_GCM,data:0GyC8VW0qoPaIcKfGKto8wDF64gDmiIhczok8oiJ0l5B7+ZUCVAKmWkMaXHyrU7kqg06WSiIixsnclEjIMxlyZVBOcfQaXeSO51uom/ax+4CfzxSGxgnpySarWRfCHgkcGUeO/eci5MzmZPgAHy7b8IBcJWzVUCS7XBIMMyYwNs=,iv:yUsltZZ1y4fzi3Kakwt/ji/J+r/P1/3mLEQqZiN2pm4=,tag:6Fwo34LOX+jCXF9DoYUv/A==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3