Air-gapped mode

Air-gapped mode runs Vupt with no outbound internet. All models are local (Ollama or a custom on-prem endpoint), telemetry is disabled, and license verification is offline. This mode is required by some customer environments (defense, healthcare, regulated finance) and is supported on the Business and Enterprise tiers.

Configuration

Set the air-gapped flag in your Helm values or compose env:

# values.yaml
airGapped:
  enabled: true
  # Optional allowlist proxy for narrow allowed egress (e.g. internal package mirror)
  allowlistProxy: "http://proxy.internal:3128"

This disables the auto-update channel, the telemetry endpoint, the Clerk SaaS auth (forcing OIDC against your IdP), and any cloud-only features that require Vupt-managed infrastructure.

Model providers

Air-gapped mode requires at least one local model provider. The two supported options:

Ollama (recommended for getting started)

# On the air-gapped host
ollama pull qwen2.5-coder:32b
ollama pull nomic-embed-text:v1.5    # for the MCP embeddings store

Configure Vupt to use it:

[providers.ollama]
endpoint = "http://localhost:11434"
default_model = "qwen2.5-coder:32b"

Custom on-prem endpoint

Any OpenAI-compatible HTTP endpoint works (vLLM, TGI, llama.cpp server, internal proxy to Bedrock, Azure OpenAI Private Link).

[providers.custom]
endpoint = "https://llm.internal/v1"
default_model = "your-internal-model-id"
api_key_keychain_ref = "vupt/internal-llm"

License verification

Air-gapped license keys carry an extended validity window (typically 12 months) signed by the same Ed25519 keypair. Vupt verifies signatures locally; no network call is required. Renewal artifacts are delivered out-of-band by your account manager.

What you give up

Feature	Air-gapped behavior
Auto-update	Disabled; updates are manual via the published OCI artifact
SaaS auth (Clerk)	Disabled; OIDC against your IdP only
Cloud sync	Disabled
Cloud MCP	Disabled
Telemetry	Already opt-in; air-gapped forces it off

The desktop application, local MCP server, kanban, conflict prediction, cost analytics, and signed audit log all work unchanged.