爱马仕用过了，有点过于活跃，暂停使用

hermes/deploy.yaml

@@ -1,24 +1,24 @@
 kind: Deployment
 apiVersion: apps/v1
 metadata:
-  name: hermers
-  namespace: hermers
+  name: hermes
+  namespace: hermes
 spec:
   strategy:
     type: Recreate
   replicas: 1
   selector:
     matchLabels:
-      app: hermers
+      app: hermes
   template:
     metadata:
       labels:
-        app: hermers
+        app: hermes
     spec:
       volumes:
       - name: data
         hostPath:
-          path: /data/hermers
+          path: /data/hermes
           type: DirectoryOrCreate
       containers:
       - name: gateway
@@ -36,9 +36,13 @@ spec:
         - name: API_SERVER_ENABLED
           value: "true"
         - name: API_SERVER_HOST
-          value: "[::]"
+          value: "::"
         - name: API_SERVER_CORS_ORIGINS
           value: '*'
+        envFrom:
+        - secretRef:
+            name: hermes
+            optional: true
         volumeMounts:
         - name: data
           mountPath: /opt/data
@@ -64,11 +68,14 @@ spec:
         - name: GATEWAY_HEALTH_TIMEOUT
           value: "3"
         - name: HERMES_DASHBOARD_HOST
-          value: "[::]"
+          value: "::"
+        envFrom:
+        - secretRef:
+            name: hermes
+            optional: true
         volumeMounts:
           - name: data
             mountPath: /opt/data
-            readOnly: true
         resources:
           requests:
             memory: "256Mi"

hermes/kustomization.yaml

@@ -1,6 +1,6 @@
 # yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
 kind: Kustomization
-namespace: hermers
+namespace: hermes
 resources:
 - deploy.yaml
 - services.yaml
@@ -8,3 +8,12 @@ images:
 - name: image
   newName: cr.wetofu.me/nousresearch/hermes-agent
   newTag: v2026.5.16
+secretGenerator:
+- name: hermes
+  files:
+  - secrets/TELEGRAM_REACTIONS
+  - secrets/TELEGRAM_BOT_TOKEN
+  - secrets/DEEPSEEK_API_KEY
+  - secrets/API_SERVER_KEY
+  - secrets/GATEWAY_ALLOW_ALL_USERS
+  type: Opaque

hermes/secrets/API_SERVER_KEY

@@ -0,0 +1 @@
+2RPjfv9Q62vjgr3Vshe4fxrqnaMRxp1jSuvZxr0WORBo10sjJX28DJu9rcM1euvG

hermes/secrets/DEEPSEEK_API_KEY

@@ -0,0 +1 @@
+sk-11ae8b4f84274f8c90f72d4fb2254c6b

hermes/secrets/GATEWAY_ALLOW_ALL_USERS

@@ -0,0 +1 @@
+true

hermes/secrets/TELEGRAM_BOT_TOKEN

@@ -0,0 +1 @@
+8764216236:AAHwaI7PX7FN-5E77Y6hvpxePcKkPxMTUTw

hermes/secrets/TELEGRAM_REACTIONS

@@ -0,0 +1 @@
+true

hermes/services.yaml

@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: hermers
+  name: hermes
 spec:
   selector:
-    app: hermers
+    app: hermes
   ports:
   - port: 8642
     targetPort: gateway