straylight: headless chromium-cdp user service for hermes browser tools

This commit is contained in:
2026-09-19 12:23:39 -07:00
parent b2ea7668cb
commit e4be9d2079
+19
View File
@@ -394,6 +394,25 @@ in
}; };
}; };
# Headless Chromium exposing a CDP endpoint for Hermes browser tools.
# Loopback only; browser.cdp_url in ~/.hermes/config.yaml points at it.
# Ungoogled-chromium (already in desktop-packages-light.nix), no ad-block
# extension so behavior stays stock; dedicated user-data-dir so this
# instance never touches kyle's browsing profile.
systemd.user.services.chromium-cdp = {
description = "Headless Chromium - CDP endpoint for Hermes browser tools";
after = [ "graphical-session.target" ];
wantedBy = [ "default.target" ];
serviceConfig = {
Type = "simple";
ExecStart =
let chromium = pkgs.ungoogled-chromium;
in "${chromium}/bin/chromium --headless=new --remote-debugging-port=9222 --remote-debugging-address=127.0.0.1 --user-data-dir=%h/.cache/chromium-cdp --no-first-run --no-default-browser-check --disable-background-networking";
Restart = "on-failure";
RestartSec = 5;
};
};
# Open ports: DNS (53), mc-proxy (443/8443/9443), agent (9444), master (9555), open-webui (8080). # Open ports: DNS (53), mc-proxy (443/8443/9443), agent (9444), master (9555), open-webui (8080).
networking.firewall.allowedTCPPorts = [ 53 443 8080 8443 9443 9444 9555 ]; networking.firewall.allowedTCPPorts = [ 53 443 8080 8443 9443 9444 9555 ];
networking.firewall.allowedUDPPorts = [ 53 ]; networking.firewall.allowedUDPPorts = [ 53 ];