Configure Hermes access to small LLM

docs/Dankclaw/Hermes-Dashboard.md

@@ -22,7 +22,7 @@ The gateway container runs `hermes gateway run` (the Signal platform). That entr
 
 The dashboard refuses to bind to a non-loopback address without an auth provider. There is no unauthenticated public bind. This repo uses basic auth:
 
-- `dashboard.basic_auth.username` and `dashboard.basic_auth.password_hash` live in the git-ignored `/home/dank/hermes-data/config.yaml`.
+- `dashboard.basic_auth.username` and `dashboard.basic_auth.password_hash` live in the live `/home/dank/hermes-data/config.yaml`; the tracked backup at `dankclaw/hermes/config.yaml.example` intentionally omits the password hash.
 - The stored value is a one-way scrypt hash. The plaintext password is never written to a file or the repo.
 - The hash is generated with `plugins.dashboard_auth.basic.hash_password`.
 

docs/Dankclaw/Hermes.md

@@ -4,6 +4,10 @@ Hermes is the self-improving AI agent from Nous Research. It runs in a terminal,
 
 **Host:** Dankclaw — **Hostname:** `hermes.dankclaw.local` — **Docs:** https://hermes-agent.nousresearch.com/docs
 
+**Persistent state:** `/home/dank/hermes-data` on Dankclaw, mounted as `/data` in
+both containers. The tracked, sanitized configuration baseline is
+[`dankclaw/hermes/config.yaml.example`](../../dankclaw/hermes/config.yaml.example).
+
 ## Facts (from research, primary source)
 
 | Item | Value |
@@ -17,15 +21,20 @@ Hermes is the self-improving AI agent from Nous Research. It runs in a terminal,
 
 ## Configuration
 
-- Point Hermes at the local model endpoint (`http://localhost:7770/v1`) or an external provider through its provider config.
+- Point Hermes at the local model endpoint or an external provider through its provider config.
 - The gateway process exposes one port for chat integration; the exact port is set in the Hermes config (`8090` convention in this repo).
 - The data volume persists skills, memory, and session history.
+- The configured `dankserver-small` provider reaches `http://192.168.0.235:7770/v1`
+  and exposes the `frank-default-small` alias. It is a named provider, so it can
+  coexist with the existing `custom` provider for the large model.
+- The live `config.yaml` contains secrets and user state and is not committed;
+  the tracked example is the sanitized backup of its non-secret settings.
 
 ## Volumes
 
 | Container path | Host path (convention) |
 |----------------|------------------------|
-| `/data` | `/opt/hermes/data` |
+| `/data` | `/home/dank/hermes-data` |
 
 ## Gotchas