Hermes

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

★ 46 Open GitHub ↗

Hermes Video Downloader — Self-hosted video downloader compatible with 1,000+ sites. yt-dlp api.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Hermes — Self-Hosted Video Downloader

[![codecov](https://codecov.io/gh/TechSquidTV/Hermes/branch/main/graph/badge.svg)](https://codecov.io/gh/TechSquidTV/Hermes)

**Download videos from YouTube and 1000+ sites with a robust API and beautiful, modern interface**

Hermes is a self-hosted video downloader built on [yt-dlp](https://github.com/yt-dlp/yt-dlp).

_This tool is designed for content creators who wish to **lawfully** use freely available media under [fair use](https://en.wikipedia.org/wiki/Fair_use) (best explained by [Tom Scott](https://www.youtube.com/watch?v=1Jwo5qc78QU)).
Hermes **does not endorse** piracy, freebooting, or using downloads to bypass advertising._

https://github.com/user-attachments/assets/7d9c6b96-d966-4989-a8b3-d5d49af463ae

## Key Features

- 🎥 **Universal Support** - Download from YouTube, Vimeo, TikTok, and 1000+ sites
- ⚡ **Background Processing** - Queue downloads and process them asynchronously
- ▶️ **Playlists** - Download entire playlists asynchronously
- 🔒 **Secure Authentication** - JWT tokens with API key management and admin user control
- 👥 **User Management** - Admin controls for self-hosted deployments with configurable signup

## Quick Start

### Pre-built Images (Recommended)

```bash
# Clone the repository
git clone https://github.com/techsquidtv/hermes.git
cd hermes

# Copy environment template (all environment variables are configured in the root .env file)
cp .env.example .env

# Edit .env and set a secure HERMES_SECRET_KEY
nano .env

# Start all services using pre-built images
docker compose -f docker-compose.example.yml up -d
```

**That's it!** 🎉 Your Hermes instance will be available at:
- **Web App**: http://localhost:3000
- **API Docs**: http://localhost:3000/api/v1/docs

**For development with hot reload:**
```bash
docker compose -f docker-compose.dev.yml up
```
- **Dev Server**: http://localhost:5173 (Vite with hot reload)
- **API**: http://localhost:8000 (direct access)

### Building from Source

If you prefer to build the images from source or want to modify the code:

```bash
# Use the standard docker-compose.yml (builds from source)
docker compose up -d
```

### Deployment Options

Hermes offers two deployment approaches:

#### **Pre-built Images (Recommended)**
- **Faster startup** - No build time required
- **Stable releases** - Uses tested, published versions
- **Smaller downloads** - Only pulls necessary images
- **Version-accurate UI** - The frontend image serves its own built assets, so the running image tag controls the displayed app version
- **File**: `docker-compose.example.yml`
- **Public packages** - No authentication required

```bash
# Uses ghcr.io/techsquidtv/hermes-app:latest and ghcr.io/techsquidtv/hermes-api:latest
docker compose -f docker-compose.example.yml up -d
```

#### **Build from Source**
- **Full customization** - Modify code and rebuild
- **Latest changes** - Access to unreleased features
- **Development** - Perfect for contributors
- **File**: `docker-compose.yml`

```bash
# Builds images from local Dockerfiles
docker compose up -d
```

### Preparing Directories for Docker Volumes

Before starting Docker containers, create the required directories with proper permissions. The API container runs as a non-root user (UID 1000), so mounted volumes must be writable:

```bash
# Create directories (paths should match your docker-compose volumes)
mkdir -p ./data ./downloads ./temp

# Set ownership for container user (default UID 1000)
sudo chown -R 1000:1000 ./data ./downloads ./temp

# Or match your current host user (useful for development)
sudo chown -R $(id -u):$(id -g) ./data ./downloads ./temp

# Or use permissive permissions (less secure)
chmod -R 777 ./data ./downloads ./temp
```

**Required directories:**
- `data/` - SQLite database and persistent data
- `downloads/` - Downloaded video files
- `temp/` - Temporary files during download

> **Note:** Directory paths depend on your docker-compose configuration. Check the `volumes` section in your compose file to see where these are mounted from. For example, `docker-compose.example.yml` might use `./services/hermes/data` instead of `./data`.

### Using a Reverse Proxy

The default setup exposes the `hermes-app` nginx container on port 3000. That container serves the UI and proxies `/api/*` to the internal API service, so no bundled reverse proxy is required.

For production HTTPS, put your existing reverse proxy in front of the app container and forward traffic to port 80. Preserve the `Host` header and pass `X-Forwarded-Proto`.

#### Domain Configuration Options

**Single Domain** (Recommended for most users):
- Frontend and API on same domain: `hermes.example.com`
- API accessible at: `hermes.example.com/api/`

**Separate Domains** (Advanced):
- Frontend at: `hermes.example.com`
- API at: `hermes-api.example.com`

#### Environment Configuration

Copy `.env.example` to `.env` and configure:

```bash
# For single domain
HERMES_ALLOWED_ORIGINS=https://hermes.example.com
VITE_API_BASE_URL=/api/v1

# For separate domains
HERMES_ALLOWED_ORIGINS=https://hermes.example.com,https://hermes-api.example.com
VITE_API_BASE_URL=https://hermes-api.example.com/api/v1
```

See our [Proxy & Deployment Guide](docs/PROXY_DEPLOYMENT.md) for integrating with existing setups (Traefik, nginx, etc.) and deploying with separate subdomains.

## 🔒 Self-Hosting Security

Hermes includes security features designed specifically for self-hosted deployments:

### Signup Control

By default, anyone with access to your Hermes instance can create an account. For self-hosted deployments, you can restrict signup:

**Option 1: First User Becomes Admin** (Default)
- The first user to sign up automatically gets admin privileges
- Subsequent users can only sign up if public signup is enabled
- Simple for personal deployments

**Option 2: Disable Public Signup**
```bash
# In your .env file:
HERMES_ALLOW_PUBLIC_SIGNUP=false
```
- Only administrators can create new accounts via admin panel
- Prevents unauthorized account creation
- Recommended for shared/exposed deployments

**Option 3: Pre-seed Initial Admin** (Docker-friendly)
```bash
# In your .env file:
HERMES_INITIAL_ADMIN_USERNAME=admin
HERMES_INITIAL_ADMIN_EMAIL=admin@example.com
HERMES_INITIAL_ADMIN_PASSWORD=changeme123
```
- Admin account created automatically on first startup
- Perfect for Docker deployments and automation
- **Important**: Change the password after first login!

### Admin User Management

Administrators have access to user management features:
- **Create users** - Add accounts when public signup is disabled
- **Promote/demote admins** - Grant admin privileges to trusted users
- **Activate/deactivate accounts** - Disable access without deleting users
- **Delete users** - Permanently remove accounts
- **Safety checks** - Cannot delete yourself or the last admin

Access admin features via: **API endpoints at `/api/v1/users`** (see [API docs](http://localhost:3000/api/v1/docs))

### Security Best Practices

1. **Set a strong secret key**: Generate with `python3 -c "import secrets; print(secrets.token_urlsafe(32))"`
2. **Disable public signup** for non-personal deployments: `HERMES_ALLOW_PUBLIC_SIGNUP=false`
3. **Change default credentials** if using pre-seeded admin
4. **Use HTTPS** in production with your reverse proxy or load balancer
5. **Restrict CORS origins** to your actual domains in `.env`
6. **Keep Hermes updated** to get the latest security patches

### 🐛 Having Issues?

If you run into problems, please use our [issue templates](https://github.com/techsquidtv/hermes/issues/new/choose) instead of generic issues:
- **[🐛 Bug Report](https://github.com/techsquidtv/hermes/issues/new?template=bug_report.yml)** - For unexpected behavior
- **[🔧 API Issues](https://github.com/techsquidtv/hermes/issues/new?template=hermes-api-issue.yml)** - Backend problems
- **[🎨 Frontend Issues](https://github.com/techsquidtv/hermes/issues/new?template=hermes-app-issue.yml)** - UI/UX problems
- **[🐳 DevOps Issues](https://github.com/techsquidtv/hermes/issues/new?template=devops-issue.yml)** - Docker/deployment issues

These templates help us help you faster!

### Manual Installation (Development)

For development and contribution purposes:

```bash
# Install dependencies
pnpm install

# Set up environment (all environment variables are configured in the root .env file)
cp .env.example .env
# Edit .env with your settings

# Start development servers
pnpm dev
```

## 📚 Documentation

- **[Configuration Guide](docs/CONFIGURATION.md)** - Complete environment variables and settings reference
- **[Deployment Guide](docs/DEPLOYMENT.md)** - Docker volumes, production deployment, and troubleshooting
- **[Contributing Guide](docs/CONTRIBUTING.md)** - Development workflow, branch strategy, and how to contribute
- **[Release Process](docs/RELEASE_PROCESS.md)** - Version management and release workflow
- **[API Documentation](packages/hermes-api/README.md)** - Complete API reference and examples
- **[Frontend Guide](packages/hermes-app/README.md)** - React app development guide
- **[Interactive API Docs](http://localhost:3000/api/v1/docs)** - Live Swagger documentation
- **[docker-compose.example.yml](docker-compose.example.yml)** - Pre-built images deployment configuration

### 🔀 Branch Strategy

- **`main`** - Stable production releases (Docker: `latest`)
- **`develop`** - Integration branch for testing (Docker: `develop`)
- **Feature branches** - Your contributions (merge to `develop`)

Contributors: Open PRs to `develop`, not `main`. See the [Contributing Guide](docs/CONTRIBUTING.md) for details.
---

## Hosting Partner

This could be you! Bring Hermes to the world by hosting a public instance and getting featured here!

Hermes

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README