claude-botandClaude Opus 5.5 dfb2f71c85 feat(hermes): push and open PRs on Gitea as hermes-bot ...

The owner placed hermes-bot's API token at OpenBao apps/hermes/gitea
(api-token). ExternalSecret hermes-gitea mounts it as a file at
/var/run/secrets/gitea/api-token.

git is configured through GIT_CONFIG_* env on the container, so nothing
lives on the PVC: a credential helper for https://gitea.renner.uno that
answers with hermes-bot and the token read from the file, plus the
commit identity hermes-bot <hermes-bot@konstantin-renner.de>. Hermes'
subprocess env scrub only strips its own provider/messaging secrets, so
GIT_* reaches the terminal tool.

SOUL.md drops "no write access" and tells the agent how to use git and
the REST API (no tea in the image) without printing the token; the
existing feature-branch/PR/no-self-merge rules apply.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-19 09:48:05 +02:00

..

apps

feat(hermes): push and open PRs on Gitea as hermes-bot

2026-10-19 09:48:05 +02:00

clusters/homelab

feat(hermes): run Hermes Agent in the cluster

2026-10-19 08:02:56 +02:00

cnpg-object-stores

feat(cnpg): every cluster incarnation archives to a new prefix; recovery reads the newest

2026-10-17 22:18:14 +02:00

infrastructure

Merge pull request 'feat(hermes): give the agent the homelab house rules and the wiki' (#1360) from feat/hermes-homelab-context into master

2026-10-19 06:55:15 +00:00

infrastructure-inhouse

fix(flux): in-house-image infrastructure waits for Gitea; bird runs only where table 47 exists

2026-10-17 22:13:48 +02:00

restore

feat(velero): the cluster restores its app volumes itself, Gitea first

2026-10-17 22:15:55 +02:00

restore-test

chore(deps): pin dependencies

2026-10-19 02:01:50 +00:00

talos

feat(restore-test): hcloudtest boots production's config on Hetzner, contained, and Flux restores into it

2026-10-17 22:19:40 +02:00

.sops.yaml

feat: Switch to SOPS + age for secret management

2026-04-05 20:28:22 +02:00

bootstrap.sh

feat(restore-test): hcloudtest boots production's config on Hetzner, contained, and Flux restores into it

2026-10-17 22:19:40 +02:00

e2e-test.sh

fix(flux): in-house-image infrastructure waits for Gitea; bird runs only where table 47 exists

2026-10-17 22:13:48 +02:00

MIGRATION-sops-openbao.md

feat(bootstrap): OpenBao restore and bring-up under the static seal

2026-09-08 08:23:08 +02:00

NETWORK-traffic-classes.md

docs(network): traffic classes as built, node-to-node on VLAN 46 (#576)

2026-09-23 14:48:12 +02:00

PROPOSAL-cilium-single-owner.md

fix(talos): move cni: none and proxy: disabled into cluster.yaml

2026-08-28 16:21:18 +02:00

PROPOSAL-wiki-web-api.md

chore(wiki): build.1790250017; proposal: the store creates documents, no fact-sink port

2026-09-24 13:42:53 +02:00

RECOVERY.md

feat(cnpg): every cluster incarnation archives to a new prefix; recovery reads the newest

2026-10-17 22:18:14 +02:00

RUNBOOK-baremetal-conversion.md

feat(talos): role-named links, and the pod and ingress VLANs

2026-09-08 11:43:33 +02:00

RUNBOOK-cold-rebuild.md

feat(velero): the cluster restores its app volumes itself, Gitea first

2026-10-17 22:15:55 +02:00

RUNBOOK-home-assistant-image-rollback.md

docs: HA change window, HA-impact review, HA image rollback runbook (REN-243)

2026-09-27 16:41:07 +00:00

vmtest-job.yaml

feat(bootstrap): OpenBao restore and bring-up under the static seal

2026-09-08 08:23:08 +02:00