{{define "content"}}
{{template "nav" .}}

<main id="main">

    <!-- Hero -->
    <section class="hero hero-page">
        <div class="hero-inner">
            <h1>Arcline <span class="hero-highlight">Server</span></h1>
            <p class="tagline">
                A hardened, production-ready host for SOC and production use — built-in
                SIEM agent and network IDS on top of the hardened Debian base, with
                zero telemetry.
            </p>
            <div class="hero-actions">
                <a href="#get-started" class="cta">Get Early Access</a>
                <a href="/" class="cta-secondary">See all editions</a>
            </div>
        </div>
    </section>

    <!-- Overview -->
    <section class="section">
        <div class="section-inner">
            <div class="section-label">Overview</div>
            <h2>A production host that starts<br>defense-ready.</h2>
            <p class="section-desc">
                Arcline Server gives SOC teams and production workloads a hardened base and the
                tooling to watch it — configured the way you'd do it yourself, if you had the weekend.
            </p>
            <div class="principles-grid">
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="3" y="3" width="18" height="18" rx="3"/>
                            <path d="M8 12l2.5 2.5L16 9"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Hardened by default</h3>
                        <p>Lockdown-mode kernel, seccomp, AppArmor profiles, and a default-deny nftables firewall. You opt in to exposure — never out.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <path d="M2 12h20"/>
                            <path d="M12 2a15.3 15.3 0 014 10 15.3 15.3 0 01-4 10"/>
                        </svg>
                    </div>
                    <div>
                        <h3>SIEM-ready</h3>
                        <p>A pre-configured Wazuh agent ships host and integrity telemetry straight to your SIEM out of the box.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="3"/>
                            <path d="M12 2L22 8.5v7L12 22 2 15.5v-7L12 2z"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Network IDS</h3>
                        <p>Suricata (or Zeek) watches for malicious traffic — not just uptime.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <rect x="2" y="2" width="20" height="20" rx="3"/>
                            <rect x="6" y="6" width="12" height="12" rx="1.5" stroke-dasharray="3 2"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Rollback built in</h3>
                        <p>btrfs root with subvolume snapshots, compression, and boot-to-snapshot rollback.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="10"/>
                            <path d="M12 6v6l4 2"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Observable</h3>
                        <p>Prometheus node_exporter, Grafana dashboards, and Loki log aggregation — pre-configured.</p>
                    </div>
                </div>
                <div class="principle">
                    <div class="principle-icon">
                        <svg width="22" height="22" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
                            <circle cx="12" cy="12" r="10"/>
                            <path d="M2 12h20"/>
                        </svg>
                    </div>
                    <div>
                        <h3>Zero telemetry</h3>
                        <p>No analytics, no phone-home, no cloud integration you didn't ask for. Your host talks to you, and no one else.</p>
                    </div>
                </div>
            </div>
        </div>
    </section>

    <!-- What's Included -->
    <section class="section section-alt">
        <div class="section-inner">
            <div class="section-label">What's Included</div>
            <h2>Everything a defended server needs.</h2>
            <p class="section-desc">
                Arcline Server ships the base, the watchdogs, and the dashboards — pre-configured and documented.
            </p>
            <div class="security-grid">
                <div class="stack-card">
                    <div class="stack-header">Base System</div>
                    <ul>
                        <li>Hardened Debian base</li>
                        <li>Lockdown-mode kernel + seccomp</li>
                        <li>btrfs root + snapshot rollback</li>
                        <li>nftables firewall (default-deny)</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Security Stack</div>
                    <ul>
                        <li>Wazuh agent (pre-configured)</li>
                        <li>Suricata / Zeek network IDS</li>
                        <li>OpenSCAP + CIS Benchmark profiles</li>
                        <li>Lynis hardening score</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Observability</div>
                    <ul>
                        <li>Prometheus node_exporter</li>
                        <li>Grafana dashboards</li>
                        <li>Loki log aggregation</li>
                        <li>Pre-built alerting rules</li>
                    </ul>
                </div>
                <div class="stack-card">
                    <div class="stack-header">Containers</div>
                    <ul>
                        <li>Docker + Podman</li>
                        <li>syft + grype SBOM / CVE scanning</li>
                        <li>ClamAV baseline scanning</li>
                    </ul>
                </div>
            </div>
            <div class="compliance-callout">
                <div class="compliance-badge">Compliance-ready by default</div>
                <p>
                    Arcline Server ships CIS Benchmark-aligned by default, with OpenSCAP
                    scanning mapped toward <strong>HIPAA</strong>, <strong>PCI-DSS</strong>, and
                    <strong>SOC 2</strong> control families. The OS itself isn't certified —
                    only audited deployments can be — but the defaults give you a running start.
                </p>
            </div>
        </div>
    </section>

    <!-- Other Editions -->
    <section class="section">
        <div class="section-inner">
            <div class="section-label">Other Editions</div>
            <h2>One hardened base. Three editions.</h2>
            <p class="section-desc">
                Every edition shares the same hardened Debian base and zero-telemetry guarantee.
            </p>
            <div class="edition-switcher">
                <a href="/server" class="card-btn card-btn-primary" aria-current="page">Server</a>
                <a href="/workstation" class="card-btn card-btn-secondary">Workstation</a>
                <a href="/cloud" class="card-btn card-btn-secondary">Cloud</a>
            </div>
        </div>
    </section>

    <!-- Get Started -->
    <section id="get-started" class="section section-alt">
        <div class="section-inner">
            <div class="section-label">Get Started</div>
            <h2>Arcline Server is in active development.<br>Be there at the start.</h2>
            <p class="section-desc">
                We're building the ISO pipeline and hardening the defaults.
                Sign up to receive early access and help shape the first release.
            </p>
            {{template "waitlistForm" .}}
        </div>
    </section>

</main>

{{template "footer" .}}
{{end}}