Hermes System Architecture Blueprint

Complete reference · All environments, services, connections · v1.1 · Last updated 2026-07-30
☁️ Hostinger VPS · 187.124.239.68 Docker Host · Debian 13 · 4 bot environments · Tailscale 🐳 PRIMARY Docker Container (70a3d558b129) — 172.19.0.2 Running via /opt/hermes/docker-compose.yml · build: . · network_mode: host (compile-time) 🤖 Hermes Gateway v0.19.0 · 8642 · DeepSeek 🖥️ Hermes TUI ttyd :4860 · Node entry.js 📊 Dashboard SPA Node (:8083) · hermes dashboard 🌐 Reverse Proxy port 80 · routes→9119/8766/8082 ☁️ Cloud Dashboard :8082 · cloud-dashboard.py 🔌 Grafana Bridge :8766 · P&L · Positions · Alerts 🤖 Jarvis Dashboard Mission Control · Env Cards 🔧 MCP Servers GitHub · Zapier · LSP ⏰ Local Cron Swamp P&L 19:30 · Keepalives 📈 TRADING ENVIRONMENTS 🔴 LIVE — DISABLED (sentinel) 🟢 DEV — paper · 5 strats 🟢 QA — paper · 5 strats 🟢 PROD — paper · 5 strats Alpaca Paper ×3 + LIVE key 🐊 Swamp Agent Bridge :4877 · Signed posts → IPFS 🔁 Backup Profile (H2) ~/.hermes-profile/ Config v33 · 135 sessions OpenRouter fallback Gemini Personal tasks · spawned via H2 💾 /opt/data/ SHARED FILESYSTEM config.yaml .env (secrets) state.db skills/ (29 categories) hermes-workspace/ shared-kb/ scripts/ backups/ ⚡ heartbeat.json cron/ profiles/ .credentials.env 🐊 swamp-agent/ 🔑 .ssh-backup-key 🔄 service-keepalive.sh Restarts dead bots/services 🛡️ Tailscale 100.96.62.37 · maha-cloud userspace-networking mode 🖥️ Windows Backup (maha-desktop) — 100.97.27.88 · l6x4 REMOVED Aug 2026 Tailnet: maha-cloud ↔ maha-desktop · Watchdog probes VPS ports · git/OneDrive mirror 🛡️ Watchdog (Task Sched) Probes 80·4860·8766·8742·8083 every 2min 📲 Telegram Alerts DOWN → runbook · RECOVERED → ✅ 🗄️ Git Mirror + OneDrive configs · scripts · dashboards · state ⚠️ l6x4 container REMOVED — Windows is now the backup ☁️ Cloud Services & External 🐙 GitHub github.com/mahadevanmani/hermes-workspace Bidirectional sync · every 5min (market) / 30min (off) 📈 Grafana Cloud mahadevanmani1.grafana.net Dashboards · Alerts · Bridge API data source 📊 Grafana (Self-hosted) 187.124.239.68:8742 admin · v13.0.2 OSS 🗄️ PostgreSQL — REMOVED Aug 2 2026 · postgresql-ial6 decommissioned No dependency · sync scripts guarded no-ops · bridge uses trades.csv + Alpaca 🧩 Dify · ⚡ n8n — REMOVED Jul 31 / Aug 1 2026 · see removed-apps-record.md ⏰ Local Cron → Swamp Bridge swamp-daily-pnl · 19:30 UTC weekdays (was n8n) POST 127.0.0.1:4877/swamp/post-pnl 🏢 Hostinger hPanel Manage VPS · restart containers · firewall 🪟 Windows Local (maha-desktop) Tailscale 100.97.27.88 C:\Users\mahad\OneDrive\MY PROJECT\HERMES\ C:\Users\mahad\OneDrive\MY PROJECT\Grafana\ C:\Users\mahad\OneDrive\MY PROJECT\OBSIDIAN\ Windows Docker Desktop · Hermes (docker-compose.windows.yml) Dashboard editing · report viewing · OneDrive sync git push Bridge data trading-pg-sync Tailscale VPN (direct connection) git push/pull 📤 rclone → OneDrive · daily backup 22:00 UTC 📋 LEGEND Frontend/Agent Backend/Trading Database/API Cloud/Infra Security/Backup Middleware/Proxy Direct connection Broken/missing Async/scheduled ⚠️ LIVE DISABLED· l6x4 REMOVED · backup = Windows 🟢 DEV/QA/PROD paper active · Tailnet: maha-cloud ↔ maha-desktop ↔ iPhone/iPad

VPS Network & Ports

PortServiceAccess
22SSH (Docker host)187.124.239.68
80Reverse ProxyRoutes /dashboard, /api/*
4860ttyd Terminal (TUI)Web browser
8082Cloud DashboardWeb browser
8083Hermes Dashboard SPAWeb browser
8642Hermes Gateway APILocalhost only
8742Grafana (self-hosted)187.124.239.68
8766Bridge API (P&L data)Grafana data source
9119Dashboard (hermes dashboard)Via :80 proxy
32772PostgreSQL — REMOVED⛔ Aug 2 2026
4877🐊 Swamp Agent BridgeLocalhost only

Trading Environments

EnvDirModeBudgetStatus
🔴 LIVElive/paper$4,000DISABLED — sentinel
🟢 DEVdev/paper$4,000Active
🟢 QAqa/paper$4,000Active
🟢 PRODprod/paper$4,000Active
ParameterLIVE disabledDEV/QA/PROD
Concurrent7 (needs 5)5
Leverage1.5x (needs 1.0x)1.0x
Daily loss $1010
Profit target $2020

Tailscale Network

NodeTailscale IPDeviceStatus
maha-cloud100.96.62.37Linux VPS (this)✅ Online
maha-desktop100.97.27.88Windows (BACKUP)✅ Online
maha-iphone100.125.52.105iPhone✅ Online
maha-ipad100.111.242.67iPad✅ Online
maha-macbook-pro100.67.66.37macOSOffline (last seen 1h)

Cron Jobs Reference

CronScheduleDeliver
workspace-git-syncEvery 5min (market) / 30min—
trader-heartbeat*/5 13-20 * * 1-5local
pre-market-summary13:00 UTCTelegram
post-market-summary20:10 UTCTelegram
bot-watchdogEvery 2min (market)local
service-keepaliveEvery 30slocal
auto-improve-postmarket12:45 + 20:45 UTCTelegram
live-readiness-scorecard16:30 ETTelegram
daily-backup22:00 UTClocal
news-watchdogEvery 2min (market)Telegram
swamp-daily-pnl19:30 UTC weekdays🐊 Swamp (IPFS) · local cron (was n8n)

Known Issues & Hotspots

#IssueImpact
ℹ️l6x4 backup container REMOVED Aug 2026 — backup role moved to Windows (maha-desktop)Windows watchdog (windows-backup-watchdog.ps1) monitors + alerts; recovery via ttyd/hPanel
🔴LIVE disabled via /tmp/LIVE_DISABLED_BY_MI2 sentinelNo real trading; re-enable after 5 profitable PROD days
✅Postgres removed Aug 2 2026 — cron jobs paused, scripts guardedpostgresql-ial6 decommissioned — no dependency
⚠️DeepSeek API key issue on backup profileShows "invalid API key" in doctor
ℹ️Docker socket not mounted — no docker CLI from inside containerCan't manage containers; operations need host SSH or hPanel
ℹ️Alpaca API timeout from this container (bot itself works)Some scripts fail but trading continues
Hermes System Blueprint · Created 2026-07-28 · Update when new services are added or architecture changes