# Hermes Web Dashboard & Browser Access — Options

Three ways Rocky can access Hermes from his laptop browser:

---

## Option 1: `hermes dashboard` (built-in, native Hermes)

**What it is:** Hermes's own web UI — session management, config, API keys.

**Status:** Not currently running. Must be started first.

**Command to start:**
```bash
hermes dashboard --host 0.0.0.0 --port 9119 --insecure
```
- `--insecure` binds to all interfaces (needed over Tailscale)
- Default without flags: `127.0.0.1:9119` (localhost only — inaccessible from laptop)

**Access URL from laptop browser:**
```
http://<server-tailscale-ip>:9119
```
e.g. `http://100.108.207.15:9119`

**Stop:**
```bash
hermes dashboard --stop
```

**Security note:** `--insecure` exposes the dashboard on the network. Acceptable on Tailscale (private network). Do NOT expose to raw internet.

**Startup latency:** ~10-15 seconds after command runs.

---

## Option 2: AionUi (full-featured agent dashboard)

See `references/aion-ui-audit.md` for full research.

**What it is:** 24.3k-star GitHub project, Apache 2.0, supports Hermes + Claude Code + OpenClaw, Team Mode + cron, remote access.

**Rocky's status:** Downloaded, installed, parked warm on laptop. Not yet configured/connected.

**Setup sequence (2-step, needs Rocky at keyboard):**
1. Start AionUi server on VPS: `ssh mclou@laptop "cmd /c start AionUi"`
2. Connect laptop browser to AionUi

**Why it matters:** Better UX than `hermes dashboard` — designed for multi-agent team observation, not just config.

**Rocky's preference:** Simple/stable over feature-rich. If `hermes dashboard` works for him, it may be sufficient and avoid the AionUi complexity.

---

## Option 3: Hermes Electron Desktop App

See `hermes-agent` skill — `hermes desktop` command.

**What it is:** Full Electron desktop app that runs the dashboard locally on laptop and connects to the Hermes backend.

**Security model:** Sensitive stuff (API keys, config) stays on the local laptop — only connects to the agent over the network. Cleaner than `--insecure` dashboard.

**Install:** `hermes desktop` from a terminal on the laptop (after Hermes CLI is installed there).

---

## Comparison

| | hermes dashboard | AionUi | hermes desktop |
|---|---|---|---|
| Complexity | Low | Medium | Medium |
| Security | `--insecure` required | Custom | Best (local) |
| Feature richness | Config only | Full team dash | Config + local UI |
| Setup needed | Start command | Full install | CLI install |
| Rocky's fit | ✅ Quick test | Parked warm | Good long-term |

**Recommendation for Rocky:** Try `hermes dashboard` first — one command, see if the concept works for him. If he wants more (team view, multiple agents visible), AionUi is already on his machine and waiting.

---

## Tailscale Access

All options require the laptop to reach the VPS via Tailscale IP (100.108.207.15). If Tailscale is down on the VPS, none of these work remotely.

Check Tailscale on VPS:
```bash
tailscale status
```

**Tailscale on Windows laptop:** Use plain SSH via hostname, NOT `tailscale ssh` — `tailscale ssh` returns 502 Bad Gateway on Windows. Use:
```bash
ssh -i /root/.ssh/id_hermes_ed25519 mclou@laptop-cd8df7fs "<command>"
```