Install hermes agent

modules/hermes-agent.nix

@@ -0,0 +1,21 @@
+{ config, ... }:
+
+{
+  sops.secrets."hermes-env" = {};
+
+  services.hermes-agent = {
+    enable = true;
+
+    container = {
+      enable = true;
+      backend = "podman";
+      hostUsers = [ "tobi" ];
+    };
+
+    settings.model.default = "openrouter/anthropic/claude-sonnet-4";
+
+    environmentFiles = [ config.sops.secrets."hermes-env".path ];
+
+    addToSystemPackages = true;
+  };
+}