Web Dashboard

4.4. Web Dashboard — Managing from the Browser

Role

The dashboard runs on the web, letting you manage Hermes from any browser — including a phone — without installing a dedicated app. This is also the interface of the admin ports (9119) mentioned in 1.4/2.3.

Security is a hard requirement, not an option

This is the most important point to restate in this section: if the dashboard is bound outside loopback with no authentication provider registered, Hermes refuses to start rather than silently running unprotected. The safe way to access it, exactly as presented in 1.5, is to keep the dashboard on loopback and reach it over an SSH tunnel or Tailscale, or to enable one of the authentication providers (Basic Auth for trusted networks, OAuth/OIDC for broader access).

Notes

• Do not expose the dashboard to 0.0.0.0 even when authentication is in place — combining a Tailscale/SSH tunnel with authentication is a two-layer defense; either one alone is not enough.
• On a phone, the dashboard in the browser (combined with Tailscale) is usually the most compact way to check the agent’s status quickly without installing another app.