Enclavr documentation

Step by step procedures for configuring and operating an Enclavr namespace. Start with a procedure, then use the context articles to understand the contracts behind it.

Procedures

1. Prepare a host — establish the protected bootstrap inputs and check the exact host identity.
2. Plan and deploy — validate, inspect the current-host plan, deploy, and verify the result.
3. Update a Caddy mask and its directory — edit the protected site definition and refresh the namespace landing page.

Context and references

• How a namespace works explains the assets, service notes, host selection, and private data boundary.
• Key dependencies links to the upstream documentation for 1Password, Caddy, Docker, and Tailscale.

This site contains reviewed public guidance. Namespace secrets, live host inventories, and operator recovery material are not published here.