cherry picked changes from Valentin Gagarin part 3
All checks were successful
buildbot/nix-eval Build done.
check / test (push) Successful in 14s
deploy / test (push) Successful in 15s

This commit is contained in:
Luis Hebendanz 2024-07-08 21:11:57 +02:00
parent d72a88cd3a
commit 7910e332be

View File

@ -65,38 +65,48 @@
<div id="main">
<header class="major container medium">
<h2>What is Clan?</h2>
<p id="highlight">Clan is a setup tool that centralizes machine configurations for peer-to-peer self-hosted networks.</p>
<p id="highlight">
Clan is a configuration management, secret provisioning, and backup automation framework.
</p>
</header>
<div class="box alt container content-section">
<details>
<summary><b>Unified Git Repository</b>: Centralize secrets & configurations in a single repository</summary>
<p>Clan uses a single Git repository to define everything about your machines. This central repository utilizes Nix or JSON files to specify configurations, including disk formatting. This streamlined and unified approach gives you the power to manage your servers from a central point without relying on a centralized provider, scaling your IT infrastructure on your own terms.</p>
<summary><b>Uniform interface</b> Manage your networks from a single source of truth</summary>
<p>
Clan allows you specify everything about the machines you control, using a single Git repository.
Declare disk layout, service configuration, access control, backup strategies, and more in the <a href="https://nix.dev/manual/nix/stable/language/">Nix language</a> or <a href="https://www.json.org">JSON</a>.
Scale your IT infrastructure on your own terms.
No need to rely on a centralized provider.
</p>
</details>
<details>
<summary><b>Automated Secret Management</b>: Auto-generate and share secrets with your peers</summary>
<p>Passwords and other sensitive information are encrypted within the Git repository and automatically decrypted during deployment. This keeps your secrets safe while also simplifying their management. Clan supports sharing secrets between admins, fostering collaboration and maintaining reproducibility and convenience without sacrificing security.</p>
<summary><b>Automated secret management</b> Automatically generate and provision secrets</summary>
<p>
Passwords and other sensitive information are encrypted next to your configuration data, and automatically decrypted during deployment of services and their clients.
This keeps your secrets safe while also simplifying their management.
</p>
</details>
<details>
<summary><b>Automated Service Setup</b>: Install services as if they were applications</summary>
<summary><b>Automated Service Setup</b> Install services as if they were applications</summary>
<p>Setting up a service can be quite complex: many server adjustments need to be made, from setting up a database to adjusting webserver configurations and generating the correct private keys. Clan aims to make setting up a service as easy as installing an application. Through the <a href="https://docs.clan.lol/reference/clanModules/borgbackup-static/">Modules</a> system, everything down to secrets can be set up through a smooth automated process.</p>
</details>
<details>
<summary><b>Automated Backups</b>: Synchronize state and backup to other peers automatically</summary>
<summary><b>Automated Backups</b> Synchronize state and backup to other peers automatically</summary>
<p>Each clan service designates a state directory where all service state data is stored. This setup enables the automatic backup of every service to other peers, including Postgres databases. Using the <a href="https://docs.clan.lol/reference/clanModules/syncthing/">Syncthing</a> clan module, you can create perfect replicas of your laptop.</p>
</details>
<details>
<summary><b>Peer-to-peer Mesh VPN</b>: Securely connect machines over a private network.</summary>
<summary><b>Peer-to-peer Mesh VPN</b> Securely connect machines over a private network.</summary>
<p>All machines in your Clan are interconnected through a self-configuring peer-to-peer mesh VPN. This additional layer of protection ensures that sensitive services, which might have too much attack surface to be hosted on the public internet, can still be made available on your Clan's network.</p>
</details>
<details>
<summary><b>Live Overwrites</b>: Deploy configurations over existing Linux distributions via SSH.</summary>
<summary><b>Live Overwrites</b> Deploy configurations over existing Linux distributions via SSH.</summary>
<p>With Clan, you can skip the cumbersome task of bootstrapping specific installation images. Clan allows you to overwrite any existing Linux distribution live over SSH, eliminating time-consuming setup processes. Deploy updates or new configurations swiftly and efficiently, maximizing uptime and minimizing hassle.</p>
</details>
@ -116,6 +126,7 @@
</footer>
</div>
<!-- Footer -->
<div id="footer">
<div class="container medium">