Turn the server the user reached with ssh hermes into their own agent that runs 24/7: it gets their GitHub and Cloudflare access, runs Hermes on their Claude subscription, answers them on Telegram or Discord, and shows its dashboard at https://hermes.<domain>, where every page the server puts online sits behind one gate: a sign-in page (email and password) open to every address, locked after repeated failures, where the user can save their home or office IP to skip it next time. The first argument is the domain (ask if missing and they have several in cf zones list), the second the alias (default hermes; use it everywhere below). Do every step yourself and only ask for what needs a human (signing in, creating a bot, choosing a password). Talk to the user in their language, short messages, no jargon (never say "token", "tunnel", "reverse proxy" or "systemd" to them; say "access", "the secure link" and "the service"). Write every rule you add (the style block, the ## VPS blocks) in English, whatever language you talk in.

If you got this skill from a link instead of a local folder, install nothing else from the repo: download a file it links only when a step needs it, with curl -fsSL https://raw.githubusercontent.com/Melvynx/ai-maxxing-skills/main/skills/setup-vps/<path> -o <scratch>/<file> (for example scripts/expose.sh), and read another skill it names only when you reach it, from https://raw.githubusercontent.com/Melvynx/ai-maxxing-skills/main/skills/<skill-name>/SKILL.md.

Never print a token, a key or a password from the Mac or the server, except the one gate password the user needs to save. Tokens travel through pipes from one machine to the other, and anything the user must type (a bot token, an API key, their own password) they type in their own Terminal, never in the chat. Run every remote command as ssh hermes '<command>' < /dev/null; when the login user is not root, prefix install and expose with sudo, never hermes-setup (it asks for sudo itself). Never open a port on the server's firewall and never publish a page any other way than expose add.