{% extends "base.html" %}
{% block title %}Private locations{% endblock %}
{% block content %}
<div class="hdr"><div><h1>Private locations</h1><p class="sub" style="margin:0">Run a tiny agent inside your own network, VPC or another region. It performs the request from there; Vigil evaluates the rules and alerts as usual. {{ rows|length }}/{{ limit }} used.</p></div></div>
{% if limit == 0 %}<div class="flash info">Private locations are included on Pro (1) and Enterprise (10), or as a Custom module. <a href="/app/billing">Upgrade</a> to monitor internal services behind your firewall.</div>{% endif %}
<div class="grid g2" style="align-items:start">
<div>
  {% for r in rows %}
  <div class="panel" style="margin-bottom:16px">
    <div class="hdr" style="margin-bottom:8px"><div><h3 style="margin:0">{% if r.online %}<span class="dot ok"></span>{% else %}<span class="dot {% if r.a.last_seen_at %}err{% endif %}"></span>{% endif %}{{ r.a.name }}</h3>
      <div class="small muted">{{ 'online' if r.online else ('offline since ' ~ (r.a.last_seen_at|timeago) if r.a.last_seen_at else 'never connected') }} · {{ r.monitors }} monitor{{ 's' if r.monitors != 1 }}{% if r.a.hostname %} · {{ r.a.hostname }}{% endif %}{% if r.a.version %} · agent v{{ r.a.version }}{% endif %}{% if r.a.last_ip %} · {{ r.a.last_ip }}{% endif %}</div></div>
      {% if user.can_edit %}<div class="actions"><form method="post" action="/app/locations/{{ r.a.id }}/rotate" class="inline"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm">Rotate token</button></form><form method="post" action="/app/locations/{{ r.a.id }}/delete" class="inline" onsubmit="return confirm('Remove this location? Its monitors move back to the cloud.')"><input type="hidden" name="csrf" value="{{ csrf }}"><button class="btn sm danger">Remove</button></form></div>{% endif %}</div>
    <div class="small muted">Run on any Linux/macOS/Windows box with Python 3.8+ and outbound HTTPS:</div>
    <pre class="code">curl -fsSL {{ base_url }}/vigil-agent.py -o vigil-agent.py
VIGIL_URL={{ base_url }} VIGIL_TOKEN={{ r.a.token }} python3 vigil-agent.py</pre>
    <details><summary>Docker, systemd and Kubernetes</summary>
<pre class="code"># Docker
docker run -d --name vigil-agent --restart unless-stopped -e VIGIL_URL={{ base_url }} -e VIGIL_TOKEN={{ r.a.token }} python:3.12-slim \
  sh -c "python3 -c \"import urllib.request;open('a.py','wb').write(urllib.request.urlopen('{{ base_url }}/vigil-agent.py').read())\" && python3 a.py"

# systemd (/etc/systemd/system/vigil-agent.service)
[Service]
Environment=VIGIL_URL={{ base_url }} VIGIL_TOKEN={{ r.a.token }}
ExecStart=/usr/bin/python3 /opt/vigil-agent.py
Restart=always
[Install]
WantedBy=multi-user.target

# Kubernetes: a Deployment with the Docker command above; one replica per location.</pre></details>
  </div>
  {% endfor %}
  {% if not rows %}<div class="panel empty"><h2>No private locations yet</h2><p>Create one, run the one-line agent where your internal services live, then assign monitors to it from the monitor form ("Check from").</p></div>{% endif %}
</div>
<div>
  {% if user.can_edit and rows|length < limit %}
  <div class="panel" style="margin-bottom:16px"><h2>Add a location</h2>
    <form method="post" action="/app/locations"><input type="hidden" name="csrf" value="{{ csrf }}">
      <div class="row"><label>Name</label><input type="text" name="name" placeholder="Mumbai office · AWS eu-west-1 · k8s prod" required></div>
      <button class="btn primary">Create location</button></form></div>
  {% endif %}
  <div class="panel"><h3>How it works</h3>
    <ul class="small muted" style="padding-left:18px;line-height:1.8;margin:0">
      <li>The agent polls Vigil every 10 s for monitors assigned to it and runs uptime, API, content, TCP and app-health checks from its own network.</li>
      <li>Only raw results travel back (status, headers, body, timing). Assertions, diffs, thresholds and alerting stay in Vigil, so changing a monitor never requires touching the agent.</li>
      <li>If an agent goes silent for 3 check intervals, its monitors are marked down and you're alerted, so a dead probe never looks like a healthy service.</li>
      <li>SSL expiry and security grading always run from the cloud (they describe your public edge).</li>
      <li>Same agent works as a second region: run it on any VPS to check from another country.</li>
    </ul></div>
</div>
</div>
{% endblock %}