# yaml-language-server: $schema=https://json.schemastore.org/kustomization.json
kind: Kustomization
namespace: hermes
replicas:
- name: hermes
  count: 1
resources:
- deploy.yaml
- services.yaml
- cronjob.yaml
images:
- name: image
  newName: cr.wetofu.me/nousresearch/hermes-agent
  newTag: v2026.5.29
- name: package
  newName: cr.wetofu.me/library/busybox
  newTag: '1.28'
- name: aws
  newName: cr.wetofu.me/amazon/aws-cli
  newTag: '2.34.57'
secretGenerator:
- name: hermes
  files:
  - secrets/TELEGRAM_REACTIONS
  - secrets/TELEGRAM_BOT_TOKEN
  - secrets/DEEPSEEK_API_KEY
  - secrets/XIAOMI_API_KEY
  - secrets/API_SERVER_KEY
  - secrets/SIYUAN_TOKEN
  type: Opaque
- name: backup-env
  type: Opaque
  files:
  - secrets/AWS_ACCESS_KEY_ID
  - secrets/AWS_SECRET_ACCESS_KEY
configMapGenerator:
- name: hermes
  files:
  - config/GATEWAY_ALLOW_ALL_USERS
  - config/TELEGRAM_OBSERVE_UNMENTIONED_GROUP_MESSAGES
  - config/TELEGRAM_REQUIRE_MENTION
  - config/SIYUAN_URL
  - config/PATH
  - config/NPM_CONFIG_REGISTRY
  - config/UV_INDEX_URL
  - config/PIP_INDEX_URL
- name: hermes-start
  files:
  - config/stage2-hook.sh
- name: backup-script
  files:
  - config/backup.sh
- name: backup-env
  files:
  - config/AWS_REGION
  - config/AWS_ENDPOINT_URL_S3