FROM ghcr.io/nesquena/hermes-webui:latest

USER root

# 1. 系统依赖
RUN apt-get update && apt-get install -y git curl && \
    rm -rf /var/lib/apt/lists/*

# 2. 核心环境变量
ENV PORT=7860
ENV HERMES_WEBUI_PORT=7860
ENV PYTHONPATH=/apptoo
ENV HERMES_HOME=/home/hermeswebui/.hermes
ENV HERMES_WEBUI_STATE_DIR=/home/hermeswebui/state
ENV HERMES_WEBUI_DEFAULT_WORKSPACE=/home/hermeswebui/workspace
ENV HERMES_WEBUI_AGENT_DIR=/home/hermeswebui/.hermes/agent

# 3. 【解密开关】：允许在远程服务器上进行初始化
ENV HERMES_WEBUI_ONBOARDING_OPEN=1

# 4. 安装依赖
RUN pip install --no-cache-dir uvicorn fastapi python-multipart && \
    pip install --no-cache-dir git+https://github.com/NousResearch/hermes-agent.git

# 5. 权限预设
RUN mkdir -p $HERMES_HOME/agent $HERMES_WEBUI_STATE_DIR $HERMES_WEBUI_DEFAULT_WORKSPACE && \
    touch $HERMES_HOME/.env $HERMES_HOME/config.yaml && \
    chown -R 1000:1000 /home/hermeswebui /apptoo

ENTRYPOINT []
USER 1000
WORKDIR /apptoo

# 6. 启动
CMD ["python3", "server.py", "--port", "7860", "--host", "0.0.0.0"]