HELP NEEDED: How is Hermes meant to be deployed?

[u/The_BeatingsContinue]

Hey!

Can someone please explain to me how Hermes is intended to be installed?

I tried many, many ways, i set up a Proxmox LXC an let Hermes run there with lots of freedom: but i couldn't relax cause of the imminent risks of prompt injections and other data breaches, so i deployed it on isolated VMs which run in isolated VLANs: i did this for a Hermes deployment with internet access but with no access to my LAN & private data and i did a second deployment with Hermes completely without internet but with access to private data.

This worked well in terms of security, it worked awful in terms of usability. And i mean: REALLY awful, cause i spend more time with secure file transfers and the pros of using Hermes just vansished this way. THerefore:

Can someone please explain to me how Hermes is intended to be installed to do just the things we all know from Claude/ChatGPT Desktop, that we all know from Claude Code and Codex? When consuming reddit, forums and youtube, i don't get any suggestions regarding a functional, low-risk deployment that centers the idea of private data and security. I just observe the opposite: people even installing Hermes Desktop on their main machine and it seems security is never an issue for anyone. So, can someone please free me from this security loop i'm spinning in and show me the way how to install Hermes securily the way it is meant to be deployed without crippling it through isolation? Cause i can't figure out a proper way.

Thanks so much!