feat(mibook): add Hermes Agent profile module

2026-09-08 17:20:40 +02:00
parent 32e0faa82c
commit 731678ecac
7 changed files with 201 additions and 6 deletions
@@ -2,11 +2,10 @@
 # via machines/core/sops.nix.
 { ... }:
 {
-  # Pipeline smoke test — proves host-key decryption works end to end.
-  # Safe to delete once a real secret is in place.
-  sops.secrets.placeholder = {
+  sops.secrets.hermes-env = {
+    owner = "hermes";
+    group = "hermes";
    mode = "0400";
-    owner = "root";
-    group = "root";
+    restartUnits = [ "hermes-agent.service" ]; # confirmed/fixed in Task 4 if the unit name differs
  };
 }