--- title: "Deploy a Private Hermes Agent on Render Securely with Pulumi, Modal, and Tailscale" url: https://daily.dev/posts/deploy-a-private-hermes-agent-on-render-securely-with-pulumi-modal-and-tailscale-13lcneovc source_url: https://www.pulumi.com/blog/deploy-a-hermes-agent-with-pulumi type: article source: "Pulumi" published: 2026-06-24T11:30:48.467Z updated: 2026-06-24T11:31:14.884Z tags: ["docker", "ai-agents", "iac", "pulumi", "tailscale"] reading_time: 31 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Deploy a Private Hermes Agent on Render Securely with Pulumi, Modal, and Tailscale **[Pulumi](https://daily.dev/sources/pulumi)** · 31 min read · 0 upvotes · 0 comments ## Summary A step-by-step guide to deploying a self-hosted Hermes AI agent (from Nous Research) as a single Pulumi program across Render, Modal, and Tailscale. The architecture keeps both the agent gateway and its chat UI (Open WebUI) as private Render services with no public URLs. Tailscale exposes the UI exclusively to devices on your tailnet via `tailscale serve`, while Modal runs the agent's code in ephemeral sandboxes. Secrets are managed through Pulumi ESC, the Render SDK is bridged from its official Terraform provider, and Docker images are built and pushed during `pulumi up`. The post covers the full TypeScript, Python, and YAML program, cost breakdown (~$50/month), security trade-offs, and extension patterns like cron scheduling and Telegram integration. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Deploy Hermes Agent on OpenShift AI with vLLM model serving](https://daily.dev/posts/deploy-hermes-agent-on-openshift-ai-with-vllm-model-serving-weuzzfsos) · Red Hat Developer · 0 upvotes · 0 comments - [Deploy Self-Evolving Agents for Faster, More Secure Research with a Hermes Agent and NVIDIA NemoClaw](https://daily.dev/posts/deploy-self-evolving-agents-for-faster-more-secure-research-with-a-hermes-agent-and-nvidia-nemoclaw-wvyg5va2e) · NVIDIA Developer · 0 upvotes · 0 comments --- Tags: [#docker](https://daily.dev/tags/docker), [#ai-agents](https://daily.dev/tags/ai-agents), [#iac](https://daily.dev/tags/iac), [#pulumi](https://daily.dev/tags/pulumi), [#tailscale](https://daily.dev/tags/tailscale) [View this post on daily.dev](https://daily.dev/posts/deploy-a-private-hermes-agent-on-render-securely-with-pulumi-modal-and-tailscale-13lcneovc)