fix: persist .env and config.yaml across container rebuilds

- Add symlink for ~/.hermes/.env -> /data/hermes/.env
- Add symlink for ~/.hermes/config.yaml -> /data/hermes/config.yaml
- Keep repo copies in /app as fallback for recovery
- Fixes WeChat token/account_id lost on every restart
- Also fixes any WebUI settings changes being lost

Dockerfile

@@ -70,10 +70,13 @@ RUN git clone --depth 1 https://github.com/EKKOLearnAI/hermes-web-ui.git /tmp/he
 # Create hermes home
 RUN mkdir -p /root/.hermes/plugins/image_gen/pollinations
 
-# Copy config files
+# Copy config files (to both hermes home AND /app for persistence fallback)
 COPY config.yaml /root/.hermes/config.yaml
 COPY SOUL.md /root/.hermes/SOUL.md
 COPY .env /root/.hermes/.env
+# Keep repo copies in /app as fallback sources for persistent storage recovery
+COPY config.yaml /app/config.yaml
+COPY .env /app/.env
 COPY entry.py /app/entry.py
 COPY dashboard.html /app/dashboard.html
 COPY plugins/pollinations/ /root/.hermes/plugins/image_gen/pollinations/

start.sh

@@ -52,6 +52,55 @@ if [ -z "$WEIXIN_ACCOUNT_ID" ]; then
     fi
 fi
 
+# ── Persist .env across container rebuilds ──
+# WeChat QR login + BFF credential saves write to ~/.hermes/.env
+# Without this, WeChat tokens and other channel credentials are lost on every rebuild
+ENV_FILE="$HERMES_HOME/.env"
+ENV_DATA="/data/hermes/.env"
+if [ -f "$ENV_FILE" ] && [ ! -L "$ENV_FILE" ] && [ ! -f "$ENV_DATA" ]; then
+    # First time: migrate build-time .env to persistent storage
+    cp "$ENV_FILE" "$ENV_DATA"
+    chmod 600 "$ENV_DATA"
+    echo "Migrated .env to persistent storage"
+elif [ -L "$ENV_FILE" ] && [ ! -f "$ENV_DATA" ]; then
+    # Symlink exists but target is missing (data cleared) — recreate from repo copy
+    if [ -f "/app/.env" ]; then
+        cp "/app/.env" "$ENV_DATA"
+        chmod 600 "$ENV_DATA"
+        echo "Restored .env from repo fallback"
+    fi
+fi
+if [ ! -L "$ENV_FILE" ]; then
+    rm -f "$ENV_FILE"
+    ln -sf "$ENV_DATA" "$ENV_FILE"
+    echo "Symlink: .env -> $ENV_DATA"
+else
+    echo "Symlink exists: .env"
+fi
+
+# ── Persist config.yaml across container rebuilds ──
+# WebUI settings page and WeChat save flow update ~/.hermes/config.yaml at runtime
+CFG_FILE="$HERMES_HOME/config.yaml"
+CFG_DATA="/data/hermes/config.yaml"
+if [ -f "$CFG_FILE" ] && [ ! -L "$CFG_FILE" ] && [ ! -f "$CFG_DATA" ]; then
+    # First time: migrate build-time config to persistent storage
+    cp "$CFG_FILE" "$CFG_DATA"
+    echo "Migrated config.yaml to persistent storage"
+elif [ -L "$CFG_FILE" ] && [ ! -f "$CFG_DATA" ]; then
+    # Symlink exists but target missing — recreate from repo copy
+    if [ -f "/app/config.yaml" ]; then
+        cp "/app/config.yaml" "$CFG_DATA"
+        echo "Restored config.yaml from repo fallback"
+    fi
+fi
+if [ ! -L "$CFG_FILE" ]; then
+    rm -f "$CFG_FILE"
+    ln -sf "$CFG_DATA" "$CFG_FILE"
+    echo "Symlink: config.yaml -> $CFG_DATA"
+else
+    echo "Symlink exists: config.yaml"
+fi
+
 echo "Persistent storage ready."
 
 # ── Persist WebUI credentials across rebuilds ──