Vilice is a proof of concept. Run it on a box you can afford to lose.

vilice uninstall

Remove the gate and the scribe (apps keep running).

root recorded before it runs

vilice uninstall --help
vilice uninstall — Remove the gate and the scribe (apps keep running)

Removes Vilice: the snapshot timer, every scoped key, the sudoers
grant, the binary authorization, and the binary itself. What it does
not remove is anything that is running. Your apps are ordinary systemd
units behind ordinary Caddy config, and Vilice is not a runtime — so
uninstalling stops the gate and the record, and nothing else.

The _vilice user and /var/lib/vilice stay. The record is the box's
history and outlives the tool that wrote it.

If backups are configured it points at the restic repo and its
password file on the way out — the repo outlives the box, and without
the password every snapshot is unreadable ciphertext. It prints where
that password is, never the password itself.

Usage:
  vilice uninstall [--yes] [--remove-apps]

Flags:
  -y, --yes      Skip the confirmation.
  --remove-apps  Take the apps down too. Without this they keep running.

Examples:
  Remove Vilice. The apps carry on serving.
    sudo vilice uninstall

  Remove Vilice and everything it deployed.
    sudo vilice uninstall --remove-apps --yes

Scope:  root — run on the box as root; never reachable over scoped SSH
Record: written before the command runs