This repository has no description
configs.hermes-proxy: serve hermes-voice on voice.lassul.us
author
lassulus
date
(Oct 9, 2026, 11:00 PM CEST)
commit
f581f215
f581f2155e1281d0d6ac76c2968af6a9b701358f
parent
46943c86
46943c86e634a4334cf10f46a735570ef90958a6
+18
+17
configs/hermes-proxy.nix
+17
configs/hermes-proxy.nix
···
75
75
};
76
76
};
77
77
78
+
# Public door to hermes-voice on coaxmetal (machines/coaxmetal/hermes-voice.nix):
79
+
# the voice page for the phone. hermes-voice gates every API route with its
80
+
# own access token, so nothing is filtered by path here. /delegate streams
81
+
# NDJSON for the length of a Hermes turn, so the streaming settings apply.
82
+
services.nginx.virtualHosts."voice.lassul.us" = {
83
+
enableACME = true;
84
+
forceSSL = true;
85
+
extraConfig = ''
86
+
client_max_body_size 256k;
87
+
'';
88
+
locations."/" = {
89
+
recommendedProxySettings = true;
90
+
proxyPass = "http://coaxmetal.r:8790";
91
+
extraConfig = streamingProxy;
92
+
};
93
+
};
94
+
78
95
# One phone driving one agent needs a trickle of requests; a turn is a single
79
96
# long-lived request, not a stream of them. This is sized to absorb the
80
97
# settings screens refreshing (hence the burst) while making credential