Buzz Relay Self-Host (+ Hermes gateway)

Repeatable workflow for Block Buzz — a Nostr-based human+agent workspace relay — and optional Hermes Agent native gateway integration.

All examples use placeholders only (no real hostnames, IPs, keys, channel IDs, or operator identities). Keep site inventory in a private runbook outside this skill.

What it is

• One Rust service: WebSocket relay + REST + web UI.
• Production deps: Postgres, Redis, MinIO (S3), git data volume.
• Official prod bundle: repo deploy/compose/ (not the root dev docker-compose.yml).
• Image: ghcr.io/block/buzz — pin a digest/tag after first healthy boot.

Placement policy

• Run the relay in a dedicated utility guest (VM/LXC), not on the bare hypervisor host.
• Publish only the relay HTTP port (default 3000) to the edge proxy.
• Never expose Postgres / Redis / MinIO ports publicly.
• Prefer a non-root operator account on the guest (ops or similar) with docker group access.