@php
    $h = 'font-display text-base font-semibold text-ink';
    $p = 'text-sm leading-relaxed text-ink-2';
    $li = 'text-sm leading-relaxed text-ink-2';
    $code = 'rounded bg-inset px-1.5 py-0.5 font-mono text-[12px] text-accent-text';
@endphp

<div class="space-y-3">
    <h3 class="{{ $h }}">Servers &amp; SSH</h3>
    <p class="{{ $p }}">Clusev manages the fleet <span class="text-ink">agentless over SSH</span> — nothing is installed on the target servers. You add servers with host/IP, port and credentials; the dashboard and the server detail page show metrics, services, files and more.</p>
    <ul class="ml-4 list-disc space-y-1.5">
        <li class="{{ $li }}"><span class="text-ink">Credential vault:</span> SSH passwords/keys are stored encrypted (app key), never in plaintext.</li>
        <li class="{{ $li }}"><span class="text-ink">Hardening:</span> on the server detail page — UFW/firewalld rules, fail2ban status, and a one-click "generate an SSH key and safely disable password login" flow.</li>
        <li class="{{ $li }}"><span class="text-ink">SSH key provisioning:</span> generates a key pair, installs the public key on the target server and switches the connection to key auth afterwards.</li>
    </ul>
    <p class="{{ $p }}">Every action over <code class="{{ $code }}">SSH</code> is attributed to the acting user in the audit log.</p>
</div>