From 69a95536ad6885ac6ab36e3d4aca71d1f5653a5c Mon Sep 17 00:00:00 2001
From: yuanrengu <heyonggang0811@126.com>
Date: Sun, 24 May 2026 11:25:43 +0800
Subject: [PATCH] fix: add missing api_key field for custom provider in
 Dockerfile.hermes

The CMD script writes MODEL_API_KEY to .env as OPENAI_API_KEY but
does not include it in config.yaml's model section. Hermes with
provider: custom reads api_key from model.api_key in config.yaml,
not from OPENAI_API_KEY in .env. This causes 401 Authentication
Fails when users start a conversation inside the container.

Fix: add api_key field to the generated config.yaml model section.
---
 CHANGELOG.md                        | 8 ++++++++
 docker/opensource/Dockerfile.hermes | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 850ea71..b6609e7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,14 @@
 
 ---
 
+## [Unreleased]
+
+### 🐛 修复
+
+- **Hermes Docker 镜像 `config.yaml` 缺少 `api_key` 字段**：`Dockerfile.hermes` 的 CMD 脚本将 API Key 写入了 `.env` 的 `OPENAI_API_KEY`，但未写入 `config.yaml` 的 `model.api_key`，导致 `provider: custom` 时 Hermes 无法找到认证凭据（报 401 Authentication Fails）。现修复为在 `config.yaml` 的 `model` 段同步写入 `api_key: "${MODEL_API_KEY}"`。
+
+---
+
 ## [0.3.5] - 2026-05-15
 
 ### 🐛 修复
diff --git a/docker/opensource/Dockerfile.hermes b/docker/opensource/Dockerfile.hermes
index c7e92e6..27cba48 100644
--- a/docker/opensource/Dockerfile.hermes
+++ b/docker/opensource/Dockerfile.hermes
@@ -96,7 +96,7 @@ CMD ["bash", "-c", "\
   export TDAI_LLM_MODEL=\"${MODEL_NAME}\" && \
   export TDAI_LLM_BASE_URL=\"${MODEL_BASE_URL}\" && \
   export TDAI_LLM_API_KEY=\"${MODEL_API_KEY}\" && \
-  printf \"model:\\n  default: \\\"${MODEL_NAME}\\\"\\n  provider: \\\"${MODEL_PROVIDER}\\\"\\n  base_url: \\\"${MODEL_BASE_URL}\\\"\\n\\nmemory:\\n  provider: memory_tencentdb\\n\" > \"$CFG\" && \
+  printf \"model:\\n  default: \\\"${MODEL_NAME}\\\"\\n  provider: \\\"${MODEL_PROVIDER}\\\"\\n  base_url: \\\"${MODEL_BASE_URL}\\\"\\n  api_key: \\\"${MODEL_API_KEY}\\\"\\n\\nmemory:\\n  provider: memory_tencentdb\\n\" > \"$CFG\" && \
   printf \"OPENAI_API_KEY=${MODEL_API_KEY}\\n\" > \"$ENVFILE\" && \
   echo \"=== Config: model=${MODEL_NAME}, provider=${MODEL_PROVIDER}, url=${MODEL_BASE_URL} ===\" && \
   echo \"=== Gateway starting... ===\" && \