Files
Alexander Whitestone 5d6b2a4572
Some checks failed
Docker Build and Publish / build-and-push (pull_request) Failing after 8s
Secret Scan / Scan for secrets (pull_request) Failing after 1s
Supply Chain Audit / Scan PR for supply chain risks (pull_request) Failing after 1s
Tests / test (pull_request) Failing after 2s
feat: sovereign deployment runbook and infrastructure (#146)
Implements the full Bezalel Epic-002 deployment suite:

- deploy/docker-compose.yml: Docker Compose stack for hermes-agent
  with healthcheck, named volume, resource limits, and log rotation.
- deploy/docker-compose.override.yml.example: Local dev override template.
- deploy/hermes-agent.service: systemd unit for headless CLI/agent.
- deploy/hermes-gateway.service: systemd unit for messaging gateway
  with pre/post hooks for deploy audit logging.
- scripts/deploy-validate: Dry-run pre-flight validator that checks .env
  completeness, LLM key presence, gateway runtime state, port conflicts,
  and secret hygiene. Exit code 1 on blocking errors.
- DEPLOY.md: Full deployment runbook — bare OS to running Hermes in < 30
  min, covering secret injection, health checks, zero-downtime restart
  (systemd reload + blue/green), rollback with data backup, and Docker
  Compose update procedure.
- gateway/platforms/api_server.py: Enhanced /health endpoint to return
  meaningful status: version, uptime_seconds, gateway_state, and per-
  platform connection states sourced from gateway_state.json.

Fixes #146

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-06 22:01:17 -04:00
..