I built managed hosting for Hermes Agent so I could stop babysitting a VPS

Описание и применение

SEAOTTER предоставляет управляемую платформу для развертывания и управления агентом Hermes, устраняя необходимость SSH‑доступа и ручного управления секретами, обеспечивая изоляцию через gVisor и безопасное хранение секретов в Google Secret Manager.

Задача

Managing Hermes Agent on VPS required SSH access, manual secret handling, and exposed the system to security risks and operational overhead, especially for agencies handling multiple clients.

Результат

SEAOTTER reduces operational overhead, enhances security through isolation and secret management, and provides a 5‑minute deployment time for new agents, making it attractive for agencies, power users, and hobbyists.

Рабочий процесс

• 1. POST /api/v1/agents or use "Create Agent" UI to request a new agent.
• 2. SEAOTTER provisions a dedicated namespace and installs Hermes via Helm.
• 3. A gVisor sandbox is started for the agent, ensuring isolation.
• 4. DNS/TLS is configured and a dashboard URL is returned.
• 5. Users can pause, restart, restore, and view logs through the API or dashboard without SSH.

Доказательства

SEAOTTER is a managed control plane for Hermes Agent: Per-agent isolation – each agent runs in its own namespace with a gVisor sandbox, so one client's agent can't see or touch another's.

Источник

Operate without SSH — pause, restart, restore, and read logs through an API instead of a terminal.

Источник