Sovereign DevOps
Simpler than Kamal. More Secure than Coolify. No Cloud like Vercel.
Arcane is the sovereign DevOps toolkit for developers who want encrypted secrets, zero-downtime deployments, and AI-powered Git—without complex infrastructure or monthly fees.
Why Does This Exist?
❌ The Problem
- .env files in .gitignore create secret sprawl
- Doppler, Infisical, Vault require cloud accounts
- Coolify/Dokku need a control plane on your server
- Kubernetes is overkill for 99% of projects
✅ Arcane's Solution
- Commit encrypted secrets directly to Git
- No cloud. Everything stored in your repo.
- No server agent. Just SSH.
- Docker Compose + SSH. Done.
🔐 Zero Developer Access to Production
The only DevOps toolkit that mathematically prevents developers from seeing production secrets. Servers have their own keys. Devs never see prod secrets — even with full repo access.
(plaintext .env)
(encrypted .env)
(decrypts at runtime)
Core Features
Encrypted Secrets in Git
Commit your .env files safely. Encrypted on commit, decrypted on checkout—transparently.
One-Command Deploys
Push Docker images or entire Compose stacks to any server with a single command: arcane deploy.
AI Git Intelligence
Auto-commits with semantic messages, smart squash, and automatic versioning via local Ollama.
Premium TUI Dashboard
A keyboard-driven dashboard for Git status, deploys, AI config, and vault management. Command your empire over SSH.
How We Compare
| Feature | Kamal | Coolify | Arcane |
|---|---|---|---|
| Build location | Server | Server | Your laptop |
| Control plane | Traefik | Full Web UI | Nothing (SSH) |
| Secret handling | 1Password | Web form | Encrypted in Git |
Deploy in 30 Seconds
# Initialize encryption in your repo
arcane init
# Deploy a Docker Compose stack
arcane deploy --target production --compose docker-compose.yaml
# That's it. Secrets encrypted. App deployed. Zero config.Take Back Control
Free for individuals and teams under 5.