Upstream references

The Enclavr procedures on this site define repository policy. These primary upstream sources explain the products underneath that policy; upstream examples do not override Enclavr's provider, credential, platform, or safety boundaries.

OpenBao

• Integrated Storage — Raft-backed durable storage and high availability.
• KV v2 — versioned key/value semantics and check-and-set support.
• AppRole — machine authentication used by accepted Enclavr connections.
• Policies — capability-based access control.
• Health API — active, standby, sealed, and initialization status.
• Static seal — the mechanism used with the existing pinned seal delivered in protected local config/seal.json. Recovery custody stays with the operator.

The retained op:// syntax identifies logical OpenBao namespace items. It does not add an external secret-store dependency. See external backups.

Delivery and networking

• Caddyfile concepts and reverse proxy — site routing.
• Caddy templates — server-side rendering for this reviewed Markdown site.
• Docker Compose — service build, healthcheck, and internal-network behavior.
• Tailscale grants — tailnet access-control concepts.

Return to the documentation map or use the command reference for Enclavr-specific behavior.