Hermes

Hermes serves email templates to the lichess-gmail browser extension. It also provides a small web UI for viewing and managing those templates. The email templates are publicly readable but require auth via Authentik to edit.

Development

Install dependencies and start the dev server (Vite + React Router):

npm install
npm run dev

The app is served at http://localhost:5173 by default.

Configuration

Copy .env.example to .env and set at least APP_URL, SESSION_SECRET, and the Authentik values (AUTHENTIK_ISSUER, AUTHENTIK_CLIENT_ID, AUTHENTIK_CLIENT_SECRET). Optional: DATABASE_PATH for the SQLite file, PORT in production. See inline comments in .env.example for details.

Production

Build and run:

npm run build
npm start

Database backups

Currently done manually. Run this inside the running app container:

node -e "const db = require('better-sqlite3')('/data/hermes.db'); db.backup(\`/data/hermes-backup-\${new Date().toISOString().slice(0,10)}.db\`).then(() => console.log('done'));"

The backup file is written next to the live DB on the same volume, e.g. /data/hermes-backup-2026-04-28.db.

Stack

React Router 7, React 19, TypeScript, Tailwind CSS, SQLite (via better-sqlite3).