{% extends "base.html" %}
{% block title %}Self-hosted{% endblock %}
{% block content %}
<section class="hero" style="padding:40px 0 20px"><span class="pill info">Self-hosted edition</span><h1 style="margin-top:18px">All of Vigil, on your own host.</h1><p>For teams who need their monitoring data to stay inside their network: banks, hospitals, government, air-gapped sites, or anyone who just prefers it. One command to install, one to update. $49 per month per instance with Enterprise limits.</p>
<div class="cta"><a class="btn primary" href="{% if user %}/app/billing/license{% else %}/signup{% endif %}">Get a licence</a><a class="btn" href="mailto:hello@puzaricloud.in?subject=Self-hosted Vigil">Annual invoice or air-gapped</a></div></section>
<div class="grid g2" style="align-items:start">
<div class="panel"><h2>Install in one command</h2><pre class="code">curl -fsSL {{ base_url }}/selfhosted/install.sh | sudo sh -s -- \
  --domain vigil.yourcompany.com --email you@company.com \
  --license 'VGL1.…'</pre>
<p class="small muted">Ubuntu, Debian, RHEL or Alpine · 2 CPU, 4 GB RAM, 40 GB disk · ports 80 and 443. Docker is installed if missing. Postgres, two web containers, the worker and HTTPS via Caddy come up automatically; the first account you create is the admin.</p>
<h3>Private network or air-gapped</h3><pre class="code"># self-signed HTTPS for an internal hostname or IP
… --internal-tls
# no internet on the host: fetch the bundle elsewhere, copy it, then
… --bundle /tmp/vigil-latest.tar.gz --no-phone-home</pre>
<p class="small muted"><a href="/selfhosted/vigil-latest.tar.gz">Download the bundle</a> (source, Dockerfile, scripts). Licences are verified offline with a signed key; air-gapped sites get a yearly key by email.</p></div>
<div><div class="panel" style="margin-bottom:16px"><h2>Day two</h2><table><tr><td class="mono">vigil update</td><td class="small muted">rolling update with automatic rollback if the new version is unhealthy</td></tr><tr><td class="mono">vigil backup</td><td class="small muted">database + config to /opt/vigil/backups (also every 6 h by cron)</td></tr><tr><td class="mono">vigil logs / status / restart</td><td class="small muted">operations</td></tr><tr><td class="mono">vigil license &lt;key&gt;</td><td class="small muted">renew offline; online instances renew themselves</td></tr></table></div>
<div class="panel" style="margin-bottom:16px"><h2>Activation &amp; security</h2><ul class="small muted" style="padding-left:18px;line-height:1.8;margin:0">
<li><b>Approval per installation.</b> Your licence key is a claim key. On first start the installation generates its own Ed25519 identity and registers with PuzariCloud; monitoring runs immediately, editing unlocks once we approve that exact installation (usually within the hour, by email for air-gapped sites). The approved key is bound to the installation's fingerprint, so a leaked key is worthless elsewhere.</li>
<li><b>Signed releases.</b> Every bundle and the installer are signed with PuzariCloud's Ed25519 release key; the installer and <span class="mono">vigil update</span> verify the signature with openssl before touching anything. Public key: <a href="/selfhosted/pubkey">/selfhosted/pubkey</a>.</li>
<li><b>Offline by design.</b> Licences verify locally with the embedded public key; phone-home is only used to fetch approvals and renewals and can be switched off (<span class="mono">--no-phone-home</span>).</li>
<li><b>Revocable.</b> We can revoke a single installation or a whole licence; a revoked installation becomes read-only at its next check-in while monitoring continues.</li></ul></div>
<div class="panel"><h2>What's included</h2><ul class="small muted" style="padding-left:18px;line-height:1.8;margin:0"><li>Every feature of the Enterprise plan: monitors, server agent with APM, logs, dashboards, status pages, SLOs, SSO, audit</li><li>Your own agents, SDKs, status pages and API served from your domain</li><li>Optional email (Brevo or SMTP), Google sign-in and AI analysis using your own keys</li><li>14 days of grace after a licence lapses; monitoring never stops, only editing</li><li>Email support within one business day</li></ul></div></div>
</div>
{% endblock %}