[2026-09-04] eagle: family/how-to/arr-stack-kraken.md family/how-to/hermes-kraken-api.md family/how-to/kraken-access.md family/how-to/kraken-network.md family/how-to/kraken-portainer-access.md family/how-to/openmediavault-rpi5.md family/how-to/router-bishkek-asus.md family/projects/watchlist-automation.md personal/tech/cloudflare-tunnel-ssh-published-route.md

family/how-to/hermes-kraken-api.md

@@ -1,7 +1,7 @@
 ---
 title: Hermes Kraken — OpenAI-Compatible API Server
 created: '2026-05-29'
-updated: '2026-05-29'
+updated: '2026-09-04'
 type: tech
 namespace: personal
 tags: [hermes, kraken, infra, agent, how-to]
@@ -24,7 +24,7 @@ assistant.
 
 ```
 Android (Aide)
-  └── HTTPS → hermes.kraken.qentra.top/v1/chat/completions
+  └── HTTPS → kraken.qentra.top/v1/chat/completions
                     ↓ Cloudflare Tunnel
               cloudflared (Kraken, host network)
                     ↓ localhost:8642
@@ -67,8 +67,7 @@ Tunnel name: `kraken`. Public hostname (CF Zero Trust dashboard):
 - **Type:** HTTP (not SSH)
 - **URL:** `localhost:8642`
 
-SSH to Kraken still works via VPS reverse tunnel (port 2223) — the CF
-hostname change does not affect SSH access.
+`kraken.qentra.top` — HTTP-маршрут на Hermes API (8642). SSH через Cloudflare Tunnel идёт **отдельным** hostname **`ssh-kraken.qentra.top` → `ssh://localhost:22`** (рабочий с 2026-09-04; вход `ssh kraken@ssh-kraken.qentra.top`, разовый `cloudflared access login ssh-kraken.qentra.top`, см. [[kraken-access]]). Альтернативный SSH-путь — VPS reverse tunnel `91.207.28.205:2223`. ⚠️ Двухуровневый `ssh.kraken.qentra.top` НЕ работает (нет edge-TLS на 2-уровневом subdomain) — подробности/питфол в [[kraken-access]].
 
 ## Aide Android Client Config