Update Dockerfile

Dockerfile

@@ -1,53 +1,97 @@
 FROM nousresearch/hermes-agent:latest
 
-# 1. Installation de Node.js et npm
 USER root
+
+# 1. Installation des dépendances
 RUN apt-get update && \
-    apt-get install -y nodejs npm ffmpeg && \
+    apt-get install -y nginx nodejs npm ffmpeg && \
     rm -rf /var/lib/apt/lists/*
 
-# 2. Préparation du répertoire de données
-RUN mkdir -p /opt/data/logs && chmod -R 777 /opt/data
-
-# 3. Script d'initialisation au boot
+# 2. Correction stricte des permissions (s'exécute au boot)
 RUN mkdir -p /etc/cont-init.d && \
-    cat << 'EOF' > /etc/cont-init.d/99-fix-perms.sh
+    cat << 'EOF' > /etc/cont-init.d/00-fix-logs
 #!/bin/sh
-rm -f /opt/data/*.lock /opt/data/*.db.init.lock
+echo "=== Création et application des droits pour l'utilisateur 10000 (Hermes) ==="
 mkdir -p /opt/data/logs
-chown -hR 10000:10000 /opt/data 2>/dev/null || true
-chmod -R 777 /opt/data 2>/dev/null || true
+chown -R 10000:10000 /opt/data
+chmod -R 777 /opt/data
 EOF
-RUN chmod +x /etc/cont-init.d/99-fix-perms.sh
+RUN chmod +x /etc/cont-init.d/00-fix-logs
+
+# 3. Configuration Nginx (Reverse Proxy)
+RUN cat << 'EOF' > /etc/nginx/nginx.conf
+worker_processes auto;
+pid /tmp/nginx.pid;
+error_log /tmp/error.log warn;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+    
+    client_body_temp_path /tmp/client_body;
+    proxy_temp_path /tmp/proxy;
+    fastcgi_temp_path /tmp/fastcgi;
+    uwsgi_temp_path /tmp/uwsgi;
+    scgi_temp_path /tmp/scgi;
+    access_log /tmp/access.log;
 
-# 4. Configuration Gateway & API Server (Port 7860 pour Hugging Face)
+    server {
+        listen 7860;
+        server_name _;
+
+        location /v1/ {
+            proxy_pass http://127.0.0.1:8642;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $host;
+        }
+
+        location /webhook/ {
+            proxy_pass http://127.0.0.1:8642;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+        }
+
+        location / {
+            proxy_pass http://127.0.0.1:9119;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $host;
+        }
+    }
+}
+EOF
+
+# 4. Ajout de Nginx comme service natif (Démarrera en même temps qu'Hermes)
+RUN mkdir -p /etc/services.d/nginx && \
+    cat << 'EOF' > /etc/services.d/nginx/run
+#!/bin/sh
+mkdir -p /tmp/client_body /tmp/proxy /tmp/fastcgi /tmp/uwsgi /tmp/scgi
+exec nginx -g "daemon off;"
+EOF
+RUN chmod +x /etc/services.d/nginx/run
+
+# 5. Variables d'environnement
 ENV HERMES_HOME=/opt/data \
     HOME=/opt/data \
     API_SERVER_ENABLED=true \
-    API_SERVER_HOST=0.0.0.0 \
+    API_SERVER_HOST=127.0.0.1 \
     API_SERVER_PORT=8642 \
     HERMES_DASHBOARD=1 \
-    HERMES_DASHBOARD_HOST=0.0.0.0 \
-    HERMES_DASHBOARD_PORT=7860 \
+    HERMES_DASHBOARD_HOST=127.0.0.1 \
+    HERMES_DASHBOARD_PORT=9119 \
+    API_SERVER_KEY=hermes_2026_8QvL9mN2XpR7kTw5YcH4ZaU1EfD8JsP6BgW3NrKyLxV9 \
+    TELEGRAM_ENABLED=true
 
-    API_SERVER_KEY=hermes_2026_8QvL9mN2XpR7kTw5YcH4ZaU1EfD8JsP6BgW3NrKyLxV9
-
-# 5. Activation des messageries
-ENV TELEGRAM_ENABLED=true \
-    WHATSAPP_ENABLED=false \
-    DISCORD_ENABLED=false \
-    SLACK_ENABLED=false \
-    MATRIX_ENABLED=false
-
-# 6. Sécurité et comportement
-ENV HERMES_TOOL_LOOP_HARD_STOP_ENABLED=true \
-    HERMES_TOOL_LOOP_EXACT_FAILURE_LIMIT=5 \
-    HERMES_TOOL_LOOP_IDEMPOTENT_LIMIT=5 \
-    HERMES_LOG_LEVEL=INFO
-
-EXPOSE 7860 8642
+EXPOSE 7860
 
 WORKDIR /opt/data
 
-CMD ["gateway", "run"]
-
+# IMPORTANT : AUCUN CMD NI ENTRYPOINT ICI. 
+# On laisse l'image de base gérer le démarrage de s6-overlay qui lancera Hermes ET Nginx.