Ship Herman chat, Hermes KPI explorer, and intelligence analytics.

Adds floating Herman assistant with voice, Hermes technical KPI dashboard with file explorer, and a wins/kansen analytics pulse with Hermes findings hooks. Includes optional local HTTPS via Caddy for mic permissions (public certs only).

docker-compose.yml

@@ -47,6 +47,18 @@ services:
       - "foodlinkk_db:10.4.7.18"
     restart: unless-stopped
 
+  whisper:
+    image: fedirz/faster-whisper-server:latest-cpu
+    container_name: foodlinkk_whisper
+    environment:
+      WHISPER__MODEL: Systran/faster-whisper-base
+      WHISPER__INFERENCE_DEVICE: cpu
+    ports:
+      - "8877:8000"
+    volumes:
+      - whisper_models:/root/.cache/huggingface
+    restart: unless-stopped
+
   cockpit:
     build: ./cockpit
     container_name: foodlinkk_cockpit
@@ -73,21 +85,41 @@ services:
       HERMES_API_BASE: ${HERMES_API_BASE:-http://10.4.7.10:8642/v1}
       HERMES_API_KEY: ${HERMES_API_KEY:-}
       HERMES_API_MODEL: ${HERMES_API_MODEL:-hermes-agent}
+      HERMES_FEED_URL: ${HERMES_FEED_URL:-http://10.4.7.10:8755}
+      WHISPER_API_URL: ${WHISPER_API_URL:-http://whisper:8000/v1/audio/transcriptions}
+      WHISPER_MODEL: ${WHISPER_MODEL:-Systran/faster-whisper-base}
+      WHISPER_LANGUAGE: ${WHISPER_LANGUAGE:-nl}
       HERMES_BUILD_URL: http://10.4.7.27:8798
       HERMES_PREVIEW_BASE: http://10.4.7.27:8080
       NAS_CLIENTS_ROOT: /data/nas-clients
       NAS_SHARE_ROOT: /data/nas-share
     ports:
-      - "8600:8600"
+      - "8610:8600"
     volumes:
       - /home/aissa/nas-clients:/data/nas-clients
       - /mnt/synology:/data/nas-share:ro
     depends_on:
       - tools-api
+      - whisper
     extra_hosts:
       - "foodlinkk_db:10.4.7.18"
     restart: unless-stopped
 
+
+  cockpit-tls:
+    image: caddy:2-alpine
+    container_name: foodlinkk_cockpit_tls
+    depends_on:
+      - cockpit
+    ports:
+      - "8643:8643"
+    volumes:
+      - ./cockpit/caddy/Caddyfile:/etc/caddy/Caddyfile:ro
+      - ./cockpit/caddy/certs:/certs:ro
+      - cockpit_caddy_data:/data
+      - cockpit_caddy_config:/config
+    restart: unless-stopped
+
   browser-agent:
     build: ./browser-agent
     container_name: foodlinkk_browser_agent
@@ -162,3 +194,6 @@ services:
 
 volumes:
   gitea_data:
+  cockpit_caddy_data:
+  cockpit_caddy_config:
+  whisper_models: