From 285870baa94e8be96aa1b5fdec929aeb5ac54af6 Mon Sep 17 00:00:00 2001
From: Stephen Chin <steveonjava@gmail.com>
Date: Sun, 10 May 2026 21:36:17 -0700
Subject: [PATCH] fix(hermes-agent): remove redundant redact_secrets
 workarounds
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

hermes-agent v2026.5.7 (PR #21193, merged 2026-05-07) flipped
HERMES_REDACT_SECRETS and DEFAULT_CONFIG security.redact_secrets to
true by default. The explicit HERMES_REDACT_SECRETS=true in .env and
the config.yaml creation block added in commit 1420682e are now
redundant — Hermes writes the same values itself on a fresh install.

Verified on CT 900 (v2026.5.7): _REDACT_ENABLED=True with no env
override; Hermes self-writes redact_secrets: true to config.yaml.

Ref: NousResearch/hermes-agent#17691
---
 install/hermesagent-install.sh | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/install/hermesagent-install.sh b/install/hermesagent-install.sh
index e0d67381..28f6f85e 100644
--- a/install/hermesagent-install.sh
+++ b/install/hermesagent-install.sh
@@ -63,15 +63,8 @@ API_SERVER_ENABLED=true
 API_SERVER_HOST=0.0.0.0
 API_SERVER_PORT=8642
 API_SERVER_KEY=${API_SERVER_KEY}
-HERMES_REDACT_SECRETS=true
 EOF
 chmod 600 /home/hermes/.hermes/.env
-cat <<EOF >/home/hermes/.hermes/config.yaml
-security:
-  redact_secrets: true
-EOF
-chmod 600 /home/hermes/.hermes/config.yaml
-chown hermes:hermes /home/hermes/.hermes/config.yaml
 msg_ok "Configured API Server"
 
 msg_info "Creating Dashboard Service"