Add hermes

modules/nixos/server/auth2api.nix

@@ -50,6 +50,11 @@ let
     # off | errors | verbose
     debug: "${cfg.debug}"
 
+    thinking:
+      # Default reasoning effort for requests without reasoning_effort set.
+      # none | minimal | low | medium | high | xhigh
+      default-effort: "${cfg.thinking.defaultEffort}"
+
     cloaking:
       cli-version: "2.1.88"
       entrypoint: "cli"
@@ -110,6 +115,23 @@ with lib; {
       description = "Log level: off | errors | verbose.";
     };
 
+    thinking = {
+      defaultEffort = mkOption {
+        type = types.enum [ "none" "minimal" "low" "medium" "high" "xhigh" ];
+        default = "medium";
+        description = ''
+          Default Claude extended-thinking budget injected into every request
+          that doesn't already carry a reasoning_effort field.
+          none     = thinking disabled
+          minimal  = 512 tokens
+          low      = 1 024 tokens
+          medium   = 8 192 tokens  (default)
+          high     = 24 576 tokens
+          xhigh    = 32 768 tokens
+        '';
+      };
+    };
+
     openFirewall = mkOption {
       type = types.bool;
       default = false;