Hermes Agent (Nous Research + Telegram)

One dedicated VM, three containers: traefik (TLS via Let's Encrypt), web-terminal (ttyd browser shell behind basic auth) and hermes-agent (Telegram long polling — no public port).

1. Gather configuration

Reuse the VM already created by cloud-weaver-vm-setup (env_name, public_ip, vm_name from the report). Ask exactly one question at a time:

Pré-requisito: A VM deve ter sido provisionada com --ports 80,443
(além da porta 22 padrão). O Traefik precisa dessas portas para o desafio
ACME e para servir o terminal web via HTTPS.
Se a VM foi provisionada sem essas portas, rode vm-provision com --ports 80,443 antes de prosseguir.