Self-hosted infrastructure management

Anchras

A control plane for instances, clusters, applications, private networking, and governed AI workloads.

Control fabric

One operating surface

Host ownership
Cluster placement
Tailnet access
Catalog provenance
AI policy
Audit trail

Private cloud

Bring the machines. Keep the control.

Register Proxmox instances, track agent state, and place clusters on infrastructure you own.

Chapter 01

Private cloud

Resource

Host

Value

pve-prod-01

State

online

Resource

Agent

Value

v0.8.0

State

heartbeat 22s

Resource

Cluster

Value

k3s-edge

State

ready

policy
placement
audit

Applications

Deploy software with provenance in view.

Catalog entries show ownership signals, resource needs, Helm releases, and private endpoint state.

Chapter 02

Applications

Resource

Catalog

Value

Grafana

State

strong

Resource

Release

Value

observability

State

revision 4

Resource

Endpoint

Value

grafana.tailnet

State

private

policy
placement
audit

One fabric

Every workload passes through the same control plane.

Networking

Exposure is explicit, never accidental.

Tailnet enrollment, ACL policy, DNS, and Funnel posture sit beside the workloads they protect.

Chapter 03

Networking

Resource

Tailnet

Value

anchras-dev

State

primary

Resource

ACL

Value

tag:server

State

applied

Resource

Funnel

Value

disabled

State

private

policy
placement
audit

Governed AI

AI runs as infrastructure, not as a separate toy.

Model gateways, agents, memory, workspaces, usage, and audit inherit the same operating model.

Chapter 04

Governed AI

Resource

Gateway

Value

provider policy

State

next

Resource

Agent

Value

tool access

State

planned

Resource

Audit

Value

model calls

State

planned

policy
placement
audit

AI belongs in the control plane

Govern model access with the same posture as infrastructure.

Routes, tools, memory, workspaces, and usage events become governed resources instead of a detached chat layer.

AI policy

Gateway

Provider routing

Agents

Tool policy

Workspaces

Isolated runs

Private network

Tailnet access

Start with the control plane

Make private infrastructure legible.