diff --git a/hermers/deploy.yaml b/hermes/deploy.yaml
similarity index 82%
rename from hermers/deploy.yaml
rename to hermes/deploy.yaml
index 2d3e96d..6e8a7c8 100644
--- a/hermers/deploy.yaml
+++ b/hermes/deploy.yaml
@@ -1,24 +1,24 @@
 kind: Deployment
 apiVersion: apps/v1
 metadata:
-  name: hermers
-  namespace: hermers
+  name: hermes
+  namespace: hermes
 spec:
   strategy:
     type: Recreate
   replicas: 1
   selector:
     matchLabels:
-      app: hermers
+      app: hermes
   template:
     metadata:
       labels:
-        app: hermers
+        app: hermes
     spec:
       volumes:
       - name: data
         hostPath:
-          path: /data/hermers
+          path: /data/hermes
           type: DirectoryOrCreate
       containers:
       - name: gateway
@@ -36,9 +36,13 @@ spec:
         - name: API_SERVER_ENABLED
           value: "true"
         - name: API_SERVER_HOST
-          value: "[::]"
+          value: "::"
         - name: API_SERVER_CORS_ORIGINS
           value: '*'
+        envFrom:
+        - secretRef:
+            name: hermes
+            optional: true
         volumeMounts:
         - name: data
           mountPath: /opt/data
@@ -64,11 +68,14 @@ spec:
         - name: GATEWAY_HEALTH_TIMEOUT
           value: "3"
         - name: HERMES_DASHBOARD_HOST
-          value: "[::]"
+          value: "::"
+        envFrom:
+        - secretRef:
+            name: hermes
+            optional: true
         volumeMounts:
           - name: data
             mountPath: /opt/data
-            readOnly: true
         resources:
           requests:
             memory: "256Mi"
diff --git a/hermers/kustomization.yaml b/hermes/kustomization.yaml
similarity index 50%
rename from hermers/kustomization.yaml
rename to hermes/kustomization.yaml
index abab4cb..4b03ba8 100644
--- a/hermers/kustomization.yaml
+++ b/hermes/kustomization.yaml
@@ -1,6 +1,6 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 kind: Kustomization
-namespace: hermers
+namespace: hermes
 resources:
 - deploy.yaml
 - services.yaml
@@ -8,3 +8,12 @@ images:
 - name: image
   newName: cr.wetofu.me/nousresearch/hermes-agent
   newTag: v2026.5.16
+secretGenerator:
+- name: hermes
+  files:
+  - secrets/TELEGRAM_REACTIONS
+  - secrets/TELEGRAM_BOT_TOKEN
+  - secrets/DEEPSEEK_API_KEY
+  - secrets/API_SERVER_KEY
+  - secrets/GATEWAY_ALLOW_ALL_USERS
+  type: Opaque
\ No newline at end of file
diff --git a/hermes/secrets/API_SERVER_KEY b/hermes/secrets/API_SERVER_KEY
new file mode 100644
index 0000000..9d8b742
--- /dev/null
+++ b/hermes/secrets/API_SERVER_KEY
@@ -0,0 +1 @@
+2RPjfv9Q62vjgr3Vshe4fxrqnaMRxp1jSuvZxr0WORBo10sjJX28DJu9rcM1euvG
\ No newline at end of file
diff --git a/hermes/secrets/DEEPSEEK_API_KEY b/hermes/secrets/DEEPSEEK_API_KEY
new file mode 100644
index 0000000..50e5fc4
--- /dev/null
+++ b/hermes/secrets/DEEPSEEK_API_KEY
@@ -0,0 +1 @@
+sk-11ae8b4f84274f8c90f72d4fb2254c6b
\ No newline at end of file
diff --git a/hermes/secrets/GATEWAY_ALLOW_ALL_USERS b/hermes/secrets/GATEWAY_ALLOW_ALL_USERS
new file mode 100644
index 0000000..f32a580
--- /dev/null
+++ b/hermes/secrets/GATEWAY_ALLOW_ALL_USERS
@@ -0,0 +1 @@
+true
\ No newline at end of file
diff --git a/hermes/secrets/TELEGRAM_BOT_TOKEN b/hermes/secrets/TELEGRAM_BOT_TOKEN
new file mode 100644
index 0000000..2ed933f
--- /dev/null
+++ b/hermes/secrets/TELEGRAM_BOT_TOKEN
@@ -0,0 +1 @@
+8764216236:AAHwaI7PX7FN-5E77Y6hvpxePcKkPxMTUTw
\ No newline at end of file
diff --git a/hermes/secrets/TELEGRAM_REACTIONS b/hermes/secrets/TELEGRAM_REACTIONS
new file mode 100644
index 0000000..f32a580
--- /dev/null
+++ b/hermes/secrets/TELEGRAM_REACTIONS
@@ -0,0 +1 @@
+true
\ No newline at end of file
diff --git a/hermers/services.yaml b/hermes/services.yaml
similarity index 88%
rename from hermers/services.yaml
rename to hermes/services.yaml
index a710967..50d8580 100644
--- a/hermers/services.yaml
+++ b/hermes/services.yaml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: hermers
+  name: hermes
 spec:
   selector:
-    app: hermers
+    app: hermes
   ports:
   - port: 8642
     targetPort: gateway