diff --git a/Notes/hermes-container-vault-sync.md b/Notes/hermes-container-vault-sync.md
new file mode 100644
index 0000000..992d7e9
--- /dev/null
+++ b/Notes/hermes-container-vault-sync.md
@@ -0,0 +1,17 @@
+---
+date: 2026-08-10
+type: system
+tags: [system, sync, hermes]
+---
+
+# Hermes container ↔ vault sync
+
+Hermes Agent (Docker container) has a working clone of this vault at `/opt/data/obsidian-vault`.
+
+- **Remote:** `https://git.gutcanet.duckdns.org/agutca/obsidian-vault.git` (HTTPS — SSH :2222 not forwarded)
+- **Auth:** Gitea PAT `hermes-container` (scope: `write:repository`), stored as `GITEA_TOKEN` in `/opt/data/.env`
+- **Credential helper:** configured in the repo's local `.git/config`, reads token from `.env`
+- **Flow:** screenshot → OCR → write note → `git pull --rebase` → commit → push → Obsidian Git plugin pulls here within 15 min
+- **Commit identity:** `Hermes Agent <hermes@agent.local>` (distinct from Gutca's own commits)
+
+First write test: 2026-08-10.