October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix NowOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Change the Hermes Agent Web Port (CLI and Docker)

Set Hermes Agent’s web dashboard to a different port with --port, or change HERMES_DASHBOARD_PORT and Docker publishing together. Learn how to avoid conflicts and why --insecure no longer disables authentication.
Length7 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Hermes Agent’s web dashboard listens on port 9119 by default. For a normal launch, set another port with hermes dashboard --port <number>, such as hermes dashboard --port 8080. In Docker, set HERMES_DASHBOARD_PORT and publish the same port on the host and in the container. Changing the port does not remove login protection: the current documentation says --insecure is a no-op, and any bind other than 127.0.0.1 requires a password or OAuth provider.

Choose the method that matches your installation

The setting depends on how Hermes Agent is started. A command-line launch uses a flag that applies to that run. A Docker deployment uses an environment variable inside the container and a port-publishing rule at the container runtime.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Deployment Setting Default What changes
Direct CLI launch hermes dashboard --port <number> 9119 The dashboard web server listens on the number supplied for that launch.
Docker HERMES_DASHBOARD_PORT=<number> plus port publishing 9119 The service port inside the container and the published host port must be changed together.

A port flag or environment variable is not a universal account setting. If a service manager, script, or container definition starts Hermes for you, update that launcher; changing a one-time interactive command will not alter a separate automated startup.

Change the port with the Hermes CLI

1. Stop the existing dashboard

End the currently running Hermes dashboard before starting another instance. Running two processes on the same address and port normally causes a bind error, and an old process can make it appear that the new value was ignored.

#1 Best Overall
Sale
UGREEN Cat 8 Ethernet Cable 6FT, High Speed Braided 40Gbps 2000Mhz Network Cord Cat8 RJ45 Shielded Indoor Heavy Duty LAN Cables Compatible with Gaming PC PS5 PS4 PS3 Xbox Modem Router 6FT
  • 40 Gbps 2000 Mhz High Speed: The Cat 8 ethernet cable support max. 40 Gbps data transfer and 2000 MHz Brandwith, ideal for gaming and streaming, greatly improving upload and download speed, sound, image and resolution quality
  • Excellent Anti-interference: The ethernet cable comes with 4 shielded foiled twisted pairs (F/FTP), pure copper core and gold-plated RJ45 connector, reducing interference, noise and crosstalk, making network speed faster and more stable
  • Marvelous Durability: Internet cable wrapped with quality cotton braided cord, which makes the LAN cable stronger and more durable. The test proves that this internet cable can be bent at least 10000 times without broken, very suitable for long-term use
  • PoE Supported: All lengths of ethernet cord can support the PoE power supply function except 65ft. You don't need additional power supply when installing a PoE camera, which is very convenient and safe
  • Wide Compatibility: With the RJ45 Connector, network cable can be perfectly compatible with computers, laptops, modems, routers, PS5, X-Box and other networking devices. It can also be fully backward compatible with Cat7, Cat6e, Cat6, Cat5e, Cat5

2. Start Hermes with --port

  1. Open the shell or terminal where you normally launch Hermes Agent.
  2. Run hermes dashboard --port 8080, replacing 8080 with the unused TCP port you want.
  3. Use the resulting dashboard address with the new port number. For example, a local service on port 8080 is reached at http://127.0.0.1:8080 when it is bound to the loopback interface.

The official option name is --port; do not substitute a configuration key from an older third-party guide. If you omit the flag, the documented default remains 9119.

3. Confirm that the process is using the requested value

Check the terminal output from the launch and open the address containing the new port. If the browser still reaches 9119, verify that you stopped the old process and that a wrapper script did not start a second Hermes instance with its own arguments. A browser bookmark, reverse proxy, or desktop shortcut can also retain the old URL even though Hermes is listening elsewhere.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

4. Repeat the flag whenever you relaunch

The CLI option is per-run. Unless your own startup automation supplies --port 8080 every time, the next plain hermes dashboard command returns to 9119. The current documentation does not establish a supported config-file or systemd setting that permanently stores this value, so treat persistence as a property of your launcher rather than an assumed Hermes feature.

Change the port in Docker

Set the container’s dashboard port

Docker deployments read HERMES_DASHBOARD_PORT. Set it to the port you want Hermes to use inside the container, for example:

Rank #2
Jadaol Cat6/Cat6A Ethernet Cable 50FT Flat with Clips 10Gbps Network, White | 1FT 3FT 5FT 10FT 15FT 20FT 25FT 30FT 35FT 50FT 60FT 75FT 100FT 150FT 200FT LAN Patch Cable for Router, Modem, Switch, Gaming
  • Cat 6 performance at a Cat5e price but with higher bandwidth
  • High Performance Cat6, 30 AWG, RJ45 Ethernet Patch Cable provides universal connectivity for LAN network components such as PCs,computer servers,printers,routers,switch boxes,network media players,NAS,VoIP phones
  • Jadaol cat6 standard cable support Cat8 and Cat7 network and provides performance of up to 250 MHz 10Gbps and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), 1000BASE-T/1000BASE-TX (Gigabit Ethernet) and 10GBASE-T (10-Gigabit Ethernet)
  • UTP(Unshielded Twisted Pair) patch cable with RJ45 gold-plated Connectors and are made of 100% bare copper wire, ensure minimal noise and interference
  • The unique flat cable shape allows for a cleaner and safer installation. You can easily and seamlessly make the cable run along walls, follow edges & corners or even make it completely invisible by sliding it under a carpet.
HERMES_DASHBOARD_PORT=8080

When the variable is absent, the documented container default is 9119.

Publish the same port

Docker’s -p option connects a host port to a container port. The documentation’s default example is -p 9119:9119. After changing the Hermes value, publish the new number on both sides, such as -p 8080:8080. The left number is the host port users enter in a browser; the right number must be the port on which Hermes listens in the container.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Hermes setting Port publishing Browser address on the Docker host
HERMES_DASHBOARD_PORT=9119 -p 9119:9119 http://127.0.0.1:9119 when bound locally
HERMES_DASHBOARD_PORT=8080 -p 8080:8080 http://127.0.0.1:8080 when bound locally

Do not change only the environment variable or only the -p rule. If Hermes listens on 8080 but Docker still publishes 9119:9119, requests sent to 9119 will not reach the service. Conversely, publishing 8080:8080 while Hermes remains on 9119 leaves port 8080 without a listener.

Recreate the container after editing the value

  1. Stop the existing container.
  2. Update HERMES_DASHBOARD_PORT in the command, compose definition, or deployment environment that creates it.
  3. Update the -p mapping so the host and container numbers match.
  4. Recreate the container rather than merely opening a new browser tab; environment changes take effect when the container is created.
  5. Open the host address with the new port and authenticate normally.

If a managed Docker tool generates the final run command, edit the tool’s environment and published-port fields there. A manual change made to a stopped container is not a substitute for changing the definition that will recreate it.

Rank #3
DbillionDa Cat 8 Ethernet Cable, 6FT 40Gbps 2000MHz RJ45 LAN Cable | 3FT 6FT 10FT 15FT 20FT 25FT 30FT 35FT 40FT 50FT 60FT 65FT 100FT 150FT Internet Cable for Router, Modem, Switch, PS5, Xbox
  • Designed for Outdoor & Direct Burial Installations – Heavy-duty double-shielded Cat8 Ethernet cable minimizes EMI/RFI interference and delivers stable long-distance performance. Waterproof, anti-corrosion PVC jacket allows safe direct burial and reliable use in outdoor or indoor environments.
  • 26AWG for Stable High-Load Networks – Thicker 26AWG conductors provide faster, more stable data transmission than standard 32AWG cables. Ideal for high-performance home networks, gaming setups, smart homes, and data-intensive applications.
  • F/FTP Shielding & Hyper-Speed Performance: Cat8 Ethernet cable constructed with 4 shielded foiled twisted pairs and 26AWG OFC conductors; supports bandwidth up to 2000 MHz and data transmission speeds up to 40 Gbps, effectively reducing signal interference and ensuring stable connections. Ideal for low-latency gaming, 4K/8K streaming, and high-speed internet connections.
  • RJ45 Connectors & Wide Compatibility: Cat8 Ethernet cable with two shielded RJ45 connectors; compatible with networking switches, IP cameras, routers, Nintendo Switch, modems, PS3, PS4, Xbox, patch panels, servers, smart TVs, and more; works with Cat7, Cat6, Cat5e, and Cat5 devices
  • Weatherproof & UV Resistant: Outdoor-rated Cat8 Ethernet cable with UV-resistant PVC jacket; withstands direct sunlight, extreme cold, humidity, and hot weather; anti-aging and durable; Includes 18-month support.

Authentication and network exposure after the change

--insecure does not disable authentication

Current official documentation describes --insecure as a no-op. Do not add it merely because the dashboard is on a non-default port or because an older guide says it is required for remote access. Changing the port and disabling authentication are separate concerns, and this flag does not perform the latter.

Localhost versus a public bind

A dashboard bound to 127.0.0.1 is reachable only from the same machine. A public bind means any bind address other than 127.0.0.1; the documentation states that this requires an authentication provider, either a password or OAuth. Select and configure one before exposing the dashboard beyond the local host.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Use localhost when you only need access from the machine running Hermes.
  • Use a public or LAN-reachable bind only when remote access is necessary and a password or OAuth provider is configured.
  • Do not infer safety from the port number. 8080, 9120, and 9119 have the same exposure implications for a given bind address.

The June 2026 hardening documentation is the reason older instructions that pair a remote bind with --insecure are misleading. Follow the current authentication requirement instead of copying that pattern.

Pick an available port

The new number must be a valid, unused TCP port on the relevant machine. If another process already owns it, Hermes cannot bind to it. Port 9119 is the documented default, not a guarantee that it is free.

Rank #4
Sale
Smolink Cat 8 Ethernet Cable, 50ft 40Gbps 2000MHz RJ45 LAN Cable
  • Cat 8 Speed, Cat 5/5e Value Enjoy Cat 8 Ethernet cable performance at a Cat 5/5e-level value. With up to 40Gbps speed and 2000MHz bandwidth, this high speed internet cable delivers more bandwidth than standard Cat 5 and Cat 5e cables, helping support smooth gaming, streaming, video calls, large file transfers and everyday wired network use.
  • 40Gbps Speed, Wide Compatibility This Cat 8 Ethernet cable supports up to 40Gbps data transfer and 2000MHz bandwidth for fast, reliable internet performance. Standard RJ45 connectors are backward compatible with Cat7, Cat6, Cat6a and Cat5e devices, including routers, modems, switches, gaming PCs, PS5, PS4, Xbox, smart TVs, laptops and printers.
  • Stable U/FTP Shielding Each of the 4 twisted pairs is individually wrapped with aluminum foil to help reduce crosstalk, noise, and signal interference. Combined with RJ45 connectors on both ends, the U/FTP design helps maintain cleaner signal transmission for a stable and reliable wired network connection.
  • Nylon Braided Durability The nylon braided jacket adds everyday durability while keeping the cable flexible and easy to route. Reinforced construction helps the cord handle bending, pulling and frequent plugging, making it a reliable choice for desks, gaming rooms, home offices and long-term network setups.
  • 50ft Reach for More Setups The 50 ft length makes it easier to connect devices across rooms, along walls, under desks or around corners. Great for router-to-PC connections, modem-to-TV setups, gaming consoles, workstations, printers and other home network equipment that needs a longer Ethernet cable.

When the default is occupied

  1. Identify the process already using 9119 and stop or reconfigure it if appropriate.
  2. Alternatively, choose another unused number and pass it to the CLI or set it in HERMES_DASHBOARD_PORT.
  3. Update bookmarks, reverse-proxy rules, firewall rules, health checks, and Docker publishing to use the same number.

A third-party guide uses --port 9120 as an example for a busy default. That is an example, not a rule or a reserved Hermes port; use any available port that fits your environment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recognize a port-conflict symptom

An immediate “address already in use” or bind failure indicates a conflict before the dashboard is serving requests. It is different from an authentication failure, a wrong browser URL, or a Docker publishing mismatch. Resolve the owner of the port or select another one, then restart Hermes.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Diagnose a dashboard that appears unchanged

The browser still opens 9119

  • Confirm the launch command actually contains --port and the intended number.
  • Close the previous Hermes process; an old instance may still be listening on 9119.
  • Check that you are opening the new URL instead of a saved bookmark.
  • If a script, service, or container manager starts Hermes, change that definition rather than only the command you typed interactively.

Docker reports a connection failure

  • Compare HERMES_DASHBOARD_PORT with the container side of the -p host:container mapping.
  • Compare the browser URL with the host side of that mapping.
  • Recreate the container after changing either value.
  • Check whether the host port is already occupied by another service.

Remote access stopped working after the move

  • Verify that the remote URL includes the new port.
  • Check firewall or security-group rules for the new number.
  • Confirm the service is intentionally bound beyond 127.0.0.1.
  • Make sure a password or OAuth provider is configured for that public bind; adding --insecure will not fix authentication.

The page loads but login behavior is unexpected

A port change does not alter the authentication policy. Treat a login prompt, rejected credentials, or missing provider as an authentication configuration issue, not evidence that the port setting failed. First test the exact new address locally; then troubleshoot the provider and bind exposure separately.

Persist the setting in your own startup system

For an interactive launch, persistence means retaining the flag in the command you run. For Docker, persistence means retaining both the environment variable and the matching published-port mapping in the definition that recreates the container. The available documentation does not specify a canonical Hermes config-file key or systemd unit directive for the web port, so do not assume that writing an arbitrary key will work.

Best Value
MORELECS Cat 7 Flat Ethernet Cable 6.6FT,10Gbps,Braided,Shielded(3FT-150FT)
  • [Flat Design, Zero Cable Clutter] - Lies perfectly flat against walls, under rugs, along baseboards, and through tight spaces without kinks, tangles, or messy coils. Customers praise it for effortless installation and clean cable management that blends into any room.
  • [REINFORCED BRAIDED CONSTRUCTION FOR LONG‑LASTING PERFORMANCE] - Premium cotton braided jacket paired with reinforced RJ45 connectors delivers outstanding durability, rigorously tested for over 15,000 bend cycles. Many customers describe this ethernet cable as rock‑solid and well‑crafted, ideal for long‑term daily use with no worries about premature wear‑and‑tear or connection failure
  • [10GBPS SPEED & 600MHZ BANDWIDTH — GAMING, STREAMING & FIBER READY] - Delivers 10Gbps data transfer rate with 600MHz bandwidth for PS5, Xbox, 4K streaming, and fiber internet. Customers report stable performance and fast speeds. Backward compatible with Cat 6 and Cat 5e devices
  • [STP SHIELDING & GOLD-PLATED RJ45 — MINIMIZES EMI/RFI INTERFERENCE] - 100% bare copper STP shielding helps protect signal integrity when routed near power cords. Gold-plated RJ45 connectors resist corrosion. Compatible with 2.5GB network card
  • [Works with Everything — Router, Modem, PS5, Xbox, PC, Smart TV, Printer More ] - Full backward compatibility with Cat7, Cat6, Cat6a, and Cat5e devices means this one cable works with all your home or office equipment today, and future upgrades tomorrow. Works with 10/100/1000/10G/40G BASE-T speeds. Includes 36-month warranty with free replacement support

Checklist for a service or script

  • Store the exact CLI argument, --port <number>, in the command used by the service.
  • Ensure only one startup definition owns the dashboard port.
  • Update monitoring, reverse proxies, and firewall rules at the same time.
  • Restart the service and verify the listening address after deployment.

Checklist for Docker automation

  • Store HERMES_DASHBOARD_PORT in the environment used to create the container.
  • Store a matching host:container publication, such as 8080:8080 for an 8080 deployment.
  • Recreate the container when the value changes.
  • Document whether the host port is local-only or reachable from other machines.

Safely move back to the default

To return a direct CLI launch to the documented default, stop the custom-port process and run hermes dashboard without --port. For Docker, remove the custom environment value, use HERMES_DASHBOARD_PORT=9119 if your deployment requires an explicit value, and publish 9119:9119. Then recreate the container and use the 9119 URL.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

After any move, test from the same network location your users will use, confirm the login flow, and update every saved URL that points to the old port. This final check catches the most common difference between a successful server change and a successful user migration.

The Bottom Line

Use hermes dashboard --port <number> for a one-run CLI change. In Docker, set HERMES_DASHBOARD_PORT and publish the identical host and container port. Keep authentication enabled—--insecure is currently a no-op, and any bind other than 127.0.0.1 requires password or OAuth authentication.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.