Setup (the things you do to Vigia, never to a server)
An overview, then a page per row. Setup is the button in the bar at the top, beside the version. It opens on an Overview, one card per page saying how that part of this Vigia stands, and a click opens the page: Encrypted Backup, Accessing Vigia and Server Licenses, then Notifications and Themis AI. Each page opens with its state and its buttons; the editors are side sheets.
Encrypted Backup. Turn On… takes a folder that leaves this computer (a USB drive, a NAS share, a folder Dropbox, iCloud Drive or OneDrive keeps in sync — never Vigia's own) and a passphrase of your own; everything Vigia keeps is encrypted under it and rewritten within a minute of any change, beside the account and in that folder. Restore… puts back an earlier version — one an hour for a day, then one a day for 30 days — always as a full restore of the whole account. Back Up Now, Change Folder…, Save Backup File… and Turn Off… sit beside it. The passphrase cannot be recovered.
Accessing Vigia. Change Password… for the password that opens Vigia (the current one is asked first), and, on a computer with Touch ID or Windows Hello, whether the sensor is asked after the password or not at all — saved with Save, and turned off only after the sensor confirms it.
Licenses. The account — the email hint of the license pasted under Add Slots, or none yet, with the button that gets it — then every slot key with its slots from–to, its expiry and what is in use, and the slots table: the ten free ones and every slot a key added, each with the server on it. Add Slots from here as well as from Add a server. A text file of them all. A key leaves only while no server sits on its slots.
File Repositories live in the Files sidebar now (§13), New Repository at their foot and a pencil on each row: storage described once and given a name (≤40), so every screen that has to put a file somewhere — backup plans, database dumps, exports, the Files chair — offers the name. Kinds: S3-compatible (AWS, R2, Backblaze, Wasabi, MinIO, Spaces, Hetzner, Scaleway, Storj… as presets that fill an endpoint and a region — one kind, not nine), Azure Blob, Google Cloud Storage, SFTP, FTP/FTPS, WebDAV, SMB, NFS, a server on this map, a folder on this computer. Secrets sealed like the saved logins and carried in the encrypted backup; there is no Test button on purpose — Browse is the test, offered where there is a driver.
Notifications. One mail server described once and sealed; set up on any box from its Backups so the box can tell you when something goes wrong. Send a Test… sends one from a connected server you pick, setting the mail server up there first if it is not yet.
Themis AI. The provider (Anthropic, OpenAI, xAI, or a local server that speaks the OpenAI chat API), the model typed exactly as the provider spells it — no list is shipped — the API key, kept encrypted, the answer length and the steps before she answers.