{ config, ... }: { sops.secrets."hermes-env" = {}; services.hermes-agent = { enable = true; container = { enable = true; backend = "podman"; hostUsers = [ "tobi" ]; }; settings.model.default = "openrouter/anthropic/claude-sonnet-4"; environmentFiles = [ config.sops.secrets."hermes-env".path ]; addToSystemPackages = true; }; }