From ed9630a783bfa50dc1400f01a8cdb0f2a8bcd07a Mon Sep 17 00:00:00 2001 From: Stephen Chin Date: Sat, 2 May 2026 08:08:23 -0700 Subject: [PATCH] fix(hermes-agent): enable secret redaction by default HERMES_REDACT_SECRETS is off by default, exposing API keys in chat output and session JSON files. Add HERMES_REDACT_SECRETS=true to the .env file created by the installer. Ref: https://github.com/NousResearch/hermes-agent/issues/17691 --- install/hermes-agent-install.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/install/hermes-agent-install.sh b/install/hermes-agent-install.sh index c1a67bd4..3a2fb520 100644 --- a/install/hermes-agent-install.sh +++ b/install/hermes-agent-install.sh @@ -52,6 +52,7 @@ API_SERVER_ENABLED=true API_SERVER_HOST=0.0.0.0 API_SERVER_PORT=8642 API_SERVER_KEY=${API_SERVER_KEY} +HERMES_REDACT_SECRETS=true EOF chmod 600 /home/hermes/.hermes/.env chown hermes:hermes /home/hermes/.hermes/.env