Self-hosted edition

All of Vigil, on your own host.

For teams who need their monitoring data to stay inside their network: banks, hospitals, government, air-gapped sites, or anyone who just prefers it. One command to install, one to update. $49 per month per instance with Enterprise limits.

Get a licence Annual invoice or air-gapped

Install in one command

curl -fsSL https://puzaricloud.in/selfhosted/install.sh | sudo sh -s -- \
  --domain vigil.yourcompany.com --email you@company.com \
  --license 'VGL1.…'

Ubuntu, Debian, RHEL or Alpine · 2 CPU, 4 GB RAM, 40 GB disk · ports 80 and 443. Docker is installed if missing. Postgres, two web containers, the worker and HTTPS via Caddy come up automatically; the first account you create is the admin.

Private network or air-gapped

# self-signed HTTPS for an internal hostname or IP
… --internal-tls
# no internet on the host: fetch the bundle elsewhere, copy it, then
… --bundle /tmp/vigil-latest.tar.gz --no-phone-home

Download the bundle (source, Dockerfile, scripts). Licences are verified offline with a signed key; air-gapped sites get a yearly key by email.

Day two

vigil update	rolling update with automatic rollback if the new version is unhealthy
vigil backup	database + config to /opt/vigil/backups (also every 6 h by cron)
vigil logs / status / restart	operations
vigil license <key>	renew offline; online instances renew themselves

Activation & security

Approval per installation. Your licence key is a claim key. On first start the installation generates its own Ed25519 identity and registers with PuzariCloud; monitoring runs immediately, editing unlocks once we approve that exact installation (usually within the hour, by email for air-gapped sites). The approved key is bound to the installation's fingerprint, so a leaked key is worthless elsewhere.
Signed releases. Every bundle and the installer are signed with PuzariCloud's Ed25519 release key; the installer and vigil update verify the signature with openssl before touching anything. Public key: /selfhosted/pubkey.
Offline by design. Licences verify locally with the embedded public key; phone-home is only used to fetch approvals and renewals and can be switched off (--no-phone-home).
Revocable. We can revoke a single installation or a whole licence; a revoked installation becomes read-only at its next check-in while monitoring continues.

What's included

Every feature of the Enterprise plan: monitors, server agent with APM, logs, dashboards, status pages, SLOs, SSO, audit
Your own agents, SDKs, status pages and API served from your domain
Optional email (Brevo or SMTP), Google sign-in and AI analysis using your own keys
14 days of grace after a licence lapses; monitoring never stops, only editing
Email support within one business day