fix hermes params

Author: ngalaiko

flake.nix

@@ -87,10 +87,7 @@
                 };
                 # agent-browser uses this instead of downloading its own chromium.
                 environment.AGENT_BROWSER_EXECUTABLE_PATH = "/bin/chromium";
-                ports = [
-                  9999
-                  8644
-                ];
+                ports = [ 8644 ];
                 # exe.dev LLM integration (llm.int.exe.xyz, attached auto:all).
                 settings =
                   let

modules/exedev/services/hermes.nix

@@ -45,16 +45,21 @@ in
       default = "hermes";
       description = "Account to run Hermes as; declared by this module.";
     };
-    ports = mkOption {
-      type = types.listOf types.port;
-      default = [ 9999 ];
-      description = "Public ports to expose; the first is used for the dashboard proxy.";
+    publicPort = mkOption {
+      type = types.port;
+      default = 9999;
+      description = "Public port the dashboard proxy binds.";
     };
     internalPort = mkOption {
-      type = types.listOf types.port;
+      type = types.port;
       default = 9119;
       description = "Loopback port hermes itself binds.";
     };
+    ports = mkOption {
+      type = types.listOf types.port;
+      default = [ ];
+      description = "Additional public ports to expose.";
+    };
     settings = mkOption {
       type = settingsFormat.type;
       default = { };
@@ -117,7 +122,7 @@ in
         exec /command/s6-setuidgid ${cfg.user} \
           env HOME=${user.home} XDG_DATA_HOME=/run/caddy XDG_CONFIG_HOME=/run/caddy \
           ${pkgs.caddy}/bin/caddy reverse-proxy \
-            --from http://:${toString (builtins.head cfg.ports)} \
+            --from http://:${toString cfg.publicPort} \
             --to 127.0.0.1:${toString cfg.internalPort} \
             --change-host-header \
             --header-up "Origin: http://127.0.0.1:${toString cfg.internalPort}"
@@ -136,7 +141,7 @@ in
     };
 
     image.packages = [ cfg.package ];
-    image.exposedPorts.tcp = cfg.ports;
+    image.exposedPorts.tcp = [ cfg.publicPort ] ++ cfg.ports;
     image.labels."exe.dev/install-shelley" = "true";
   };
 }