My main personal agentic workflow is hermes. I have an old desktop set up as a homelab. One VM is a dedicated Hermes VM. I use Openrouter for the LLM, mainly deepseek flash v4.1. The agent has restricted access to my Nexcloud, Github and the Proxmox VE / Proxmox PBS servers. I can specify its access, so it has read only access to some of my nextcloud, and my Proxmox Server for monitoring, and a Nextcloud folder it can write to.

As I continue to use this setup it continues to get better, which is my favourite thing about hermes.