Docker on a box, run from one place. Every part of it.

Docker from docker.com — the distribution's docker.io lags a year and ships no compose plugin — with compose and buildx, enabled at boot. Before the first start Vigia seeds daemon.json with log rotation and live-restore, so a box set up here never fills a disk with container logs and never drops its containers when the daemon restarts. The service and the docker group (offered, not assumed: it is root in all but name), the daemon's keys that decide whether the box is still standing in six months, and the registries the box is logged in to — the login itself typed in the terminal, so the token never passes through Vigia — are read and set on one screen.

Ready compose files for a small developer: pick the app, answer the three things that matter, running. Every choice is a ${VAR} written into a mode-600 .env, so no password ever sits in the YAML; databases are bound to 127.0.0.1, admin passwords are generated, logs are rotated, and the note on the card says which ports face the world. A stack already on the box is a compose project like any other: pull-and-up, the update check, the effective config read back, the editor for the file itself.

Running first, then the trouble. A row opens to its details, its stats — Monitor's charts for one process tree, every number a rate between two samples — and its top. Its logs read in place, with the lines in hand for Themis when something in them needs explaining, or followed live in a terminal tab with docker logs -f typed in. A shell into a container is a real terminal tab with docker exec typed in. The run form carries the long tail of docker run, one control a row; any container reads back into it, and Recreate steps the old one aside under a temporary name until the new one is up.

A full disk is how most Docker boxes die: dangling images, stopped containers, build cache, logs nobody rotated. Vigia shows what takes the room by kind and offers the cleanups one at a time, each saying afterwards what the disk looks like now — and a prune schedule the box runs on its own, so the same box does not fill up again in a month.