ENCLAVR DOCS

Plan and deploy a host

Enclavr selects the current host by its exact hostname. A deployment does not choose a different host or a fallback configuration source.

  1. Refresh the checkout through your normal repository update process and confirm the intended version.
  2. Validate the namespace: ./enclavr config validate.
  3. Review the current-host plan: ./enclavr host plan. Check the selected actions, warnings, and exact host identity.
  4. Apply the plan: ./enclavr host deploy --yes. For a focused Caddy change use ./enclavr host deploy --only caddy-mask-proxy.deploy --yes on the Caddy owner host.
  5. Verify the affected service from its actual client path. A successful plan, container healthcheck, or local test is not proof that public DNS, TLS, or application access works end to end.
  6. Repeat unchanged to check convergence. A second run with the same authoritative inputs should preserve the effective state.

If validation fails, correct the authoritative document or service note and rerun the plan. Do not patch a generated host artifact as a substitute for updating its source.