From 91104fe71c20d84898f9e8d5534adfb4a52ad286 Mon Sep 17 00:00:00 2001
From: Stephen Chin <steveonjava@gmail.com>
Date: Sun, 10 May 2026 19:40:45 -0700
Subject: [PATCH] set security.redact_secrets: true in config.yaml on install

---
 install/hermesagent-install.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install/hermesagent-install.sh b/install/hermesagent-install.sh
index 99c92f94..e0d67381 100644
--- a/install/hermesagent-install.sh
+++ b/install/hermesagent-install.sh
@@ -66,6 +66,12 @@ API_SERVER_KEY=${API_SERVER_KEY}
 HERMES_REDACT_SECRETS=true
 EOF
 chmod 600 /home/hermes/.hermes/.env
+cat <<EOF >/home/hermes/.hermes/config.yaml
+security:
+  redact_secrets: true
+EOF
+chmod 600 /home/hermes/.hermes/config.yaml
+chown hermes:hermes /home/hermes/.hermes/config.yaml
 msg_ok "Configured API Server"
 
 msg_info "Creating Dashboard Service"