Hermes<\/a> After that, it did work very well, but soon a real problem was discovered:<\/p>\nAs soon as the computer was shut down, Hermes went off duty<\/p>\n
As Hermes' \"boss,\" who doesn't want to sleep or go out to play, has 24 hours to stand by and help me on time, monitor information and process work<\/p>\n
NO. 24 HOURS RUNNING A COMPUTER AND WASTING POWER? THE MOST IMMEDIATE WAY IS TO DEPLOY TO THE VPS<\/p>\n
But this brings with it new security risks:<\/p>\n
Hermes and OpenClaw have very large AI Agent privileges to operate almost any file on the server. If the VPS contains SSH private keys, wallet keys, important documents who dares to let it access<\/p>\n
Of course, if you want to buy an empty VPS just run Hermes, you can ignore this. People usually have only one VPS. What do we do<\/p>\n
My solution is: VPS + Docker + Non root users run Hermes<\/p>\n
Docker can completely isolate Hermes in a container so it doesn't touch other important host files<\/p>\n
It created a general user-run container, which further reduced access and significantly improved safety<\/p>\n
I'm going to teach you how to securely deploy Hermes on VPS<\/p>\n
ABOUT VPS<\/strong><\/p>\nIt's recommended that we buy a VPS overseas so we don't worry about the internal walling problem<\/p>\n
Hermes Agent (especially Docker deployment) is very light in itself, mainly from the Python process + SQLite memory database + Gateway, without GPU<\/p>\n
You can refer to this form<\/p>\n
![\"cfe2fe0bj00teatwf0020d000iw005kp\"](\"https:\/\/www.1ai.net\/wp-content\/uploads\/2026\/04\/cfe2fe0bj00teatwf0020d000iw005kp.jpg\" "\\"cfe2fe0bj00teatwf0020d000iw005kp\\"")
<\/p>\n
1. create a dedicated user (user name: hermes)<\/p>\n
if you can't do it, you can't do it.\nSudo usermod - aG sudo hermes # join the sudo group\nSet password for sudo passwd hermes #\nsu - hermes # switch to hermes user<\/code><\/pre>\n2. Install Docker (Ubuntu\/ Debian example)<\/p>\n
install docker-ce +docker-compose-plugin with an official one-key script or apt<\/p>\n
3. Cloning and activation of Docker<\/p>\n
i'm not sure I'm going to be able to do that, right?\n\nI'd like to ask you a few questions.\n\nHERMES_UID=$(id-u) HERMES_GID=$(id-g)docker company up-d<\/code><\/pre>\nnote that these are operated under hermes, and now docker copose ps can see two containers running:<\/p>\n
![\"55f17e0cp00teatwp001ud000v9003fp\"](\"https:\/\/www.1ai.net\/wp-content\/uploads\/2026\/04\/55f17e0cp00teatwp001ud000v9003fp.png\" "\\"55f17e0cp00teatwp001ud000v9003fp\\"")
<\/p>\n
gateway and dashboard<\/p>\n
4. Initialization Settings<\/p>\n
..evenv\/bin\/activate & hermes setup.\"<\/code><\/pre>\nHere's the Hermes setup, big model according to your preferences, Telegram, Wisdom<\/p>\n
Note that large models need to open browser links when selecting Nos Portal because the VPS is not graphical and only has to be certified in another computer's browser (desktop or laptop)<\/p>\n
5. Resolution of questions of competence<\/p>\n
You think this is the end of it<\/p>\n
Sending messages to Hermes via Telegram or Twitter reveals an authentication error:<\/p>\n
![\"f3b2f95ej00teatwx0027d000iw08ap\"](\"https:\/\/www.1ai.net\/wp-content\/uploads\/2026\/04\/f3b2f95ej00teatwx0027d000iw008ap.jpg\" "\\"f3b2f95ej00teatwx0027d000iw08ap\\"")
<\/p>\n
use the following command to get into the docker to start hermes and find a large model to work<\/p>\n
i'm not going to do that, but i'm not going to do that.\nsource \/opt\/hermes\/.venv\/bin\/activate & hermes<\/code><\/pre>\nit's a question of authority<\/p>\n
...drewx-- 18 10000 10000 4.0K Apr 27 15:31<\/p>\n
the other files are user names and group names<\/p>\n
Restore user and group names first<\/p>\n
i don't know what to do.\nChmod-R755 ~.hermes<\/code><\/pre>\nexecute the following commands and save the results: userid, groupid<\/p>\n
![\"87b5e7e2p00teatx7010d000iw003up\"](\"https:\/\/www.1ai.net\/wp-content\/uploads\/2026\/04\/87b5e7e2p00teatx70010d000iw003up.png\" "\\"87b5e7e2p00teatx7010d000iw003up\\"")
<\/p>\n
edit ~\/hermes-agent\/.env add at the bottom:<\/p>\n
For HERMES_UID=1001 # read just acquired \"id-u hermes\"<\/p>\n
edit ~\/hermes-atent\/docker-compose.yml<\/p>\n
![\"19ce96a7j00teatxm00cwd000iw00inp\"](\"https:\/\/www.1ai.net\/wp-content\/uploads\/2026\/04\/19ce96a7j00teatxm00cwd000iw00inp.jpg\" "\\"19ce96a7j00teatxm00cwd000iw00inp\\"")
<\/p>\n
Most should be like mine<\/p>\n
restart now docker<\/p>\n
docker company down\ndocker copose up-d<\/code><\/pre>\nNow try to communicate with Telegram and Wireless<\/p>\n
congratulations to you<\/p>\n
now you can call hermes wherever you want<\/p>\n
Appendix<\/p>\n
some commonly used docker commands<\/p>\n
docker mirror down #\n\nDocker copose up-d # start mirror\n\nDocker command up-d-build # force recreate mirror + start\n\nDocker contact exit-it gateway bash # restart gateway\n\nDocker company restart gateway # enter docker\n\nDocker logs gateway displays last 30 pages of the Gateway Log\n\n..evenv\/bin\/activate & hermes status\"\n\n..evenv\/bin\/activate & hermes model\"<\/code><\/pre>\nupdate hermes<\/p>\n
cd ~\/hermes-agent\n\nlet's get this over with.\n\nokay, let's go.\n\ndocker copose up-d-build<\/code><\/pre>\nOfficial documentation:<\/p>\n
https:\/\/hermes-agent.nousresearch.com\/docs\/user-guide\/docker<\/p>","protected":false},"excerpt":{"rendered":"
When I put Hermes on the personal computer, it did work very well, but soon I found a real problem: once the computer was shut down and shut down, Hermes followed \"off from work\" as Hermes' \"boss,\" who didn't want to sleep and go out, and it could still be on 24 hours' standby to help me with timing, surveillance information, and work planned? No. 24 hours running a computer and wasting power? The most immediate way to do this is to deploy to VPS, but this brings with it new security risks: Hermes and OpenClaw, such as AI Agent, have very large access to almost any file on the server. If the VPS contains SSH private key, wallet key, important<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[149,144],"tags":[786,8462,8480],"collection":[],"class_list":["post-52607","post","type-post","status-publish","format-standard","hentry","category-jiaocheng","category-baike","tag-ai","tag-hermes"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/posts\/52607","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/comments?post=52607"}],"version-history":[{"count":0,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/posts\/52607\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/media?parent=52607"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/categories?post=52607"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/tags?post=52607"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/www.1ai.net\/en\/wp-json\/wp\/v2\/collection?post=52607"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"f073ad12j00teatxz0037000iw007kp\"](\"https:\/\/www.1ai.net\/wp-content\/uploads\/2026\/04\/f073ad12j00teatxz0037d000iw007kp.jpg\" "\\"f073ad12j00teatxz0037000iw007kp\\"")
<\/p>\n