product: SaaS pricing, SME docs, managed workspace offer

- README rewritten as product landing page: 40-day trial CTA, pricing
  table, audience segmentation (solo/student/SME/dev), Academy bonus
- PRICING.md: full tier table (Solo 25eu -> White-label 499eu), what
  is included, vs-alternatives comparison, student discount, FAQ
- docs/for-smes.md: SME ROI breakdown, M365/Google migration paths,
  case study (5-person consultancy saves 2880eu/yr), AtlasPOS bundle
- docs/managed-workspace.md: managed vs self-host, onboarding flow,
  backup policy, SLA table, add-on menu
This commit is contained in:
Atlas Developer 2026-06-23 01:29:14 +02:00
parent dd50e29c2d
commit d45c3f9a75
4 changed files with 491 additions and 124 deletions

137
PRICING.md Normal file
View file

@ -0,0 +1,137 @@
# Atlas OS — Pricing
> **Your entire business stack, one monthly invoice.**
> Sovereign cloud, 39 apps, AI included. Hosted in the Netherlands.
---
## Plans
| | **Free Trial** | **Solo** | **Team** | **Business** | **White-label** |
|---|---|---|---|---|---|
| **Price** | €0 | **€25 /mo** | **€75 /mo** | **€199 /mo** | **€499 /mo** |
| **Duration** | 40 days | monthly | monthly | monthly | monthly |
| **Users** | 1 | 1 | up to 5 | up to 25 | unlimited |
| **All 39 apps** | ✅ | ✅ | ✅ | ✅ | ✅ |
| **SSO identity** | ✅ | ✅ | ✅ | ✅ | ✅ |
| **AI workspace** | ✅ | ✅ | ✅ | ✅ | ✅ |
| **Atlas Academy** | 40 days | **3 months** | **6 months** | **12 months** | unlimited |
| **Custom domain** | — | — | ✅ | ✅ | ✅ |
| **Dedicated instance** | — | shared | shared | ✅ | ✅ |
| **Priority support** | — | — | ✅ | ✅ | ✅ |
| **Onboarding call** | — | — | — | ✅ (2 h) | ✅ (4 h) |
| **SLA** | — | — | — | 99.5% | 99.9% |
| **Rebrand / resell** | — | — | — | — | ✅ |
| **Credit card required** | ❌ | ✅ | ✅ | ✅ | ✅ |
[→ Start free trial at atlascorporation.nl](https://atlascorporation.nl)
---
## What you get: all 39 apps
| Category | Apps |
|---|---|
| **Cockpit** | Daily Brief, Money, Inbox, CRM Pipeline, Fleet, Autonomy settings |
| **Identity** | Authentik SSO, Vaultwarden password manager |
| **AI** | Atlas Chat (open-webui), AI Gateway (LiteLLM), Mindmap, AI tutor |
| **Work** | Odoo ERP/CRM, Firefly III, Enable Banking PSD2, Paperless DMS, OnlyOffice, Calendar |
| **Files & Comms** | Nextcloud, Stalwart mail, Relay |
| **Ops** | Forgejo Git, n8n automation, Uptime Kuma, MeshCentral, Command dashboard |
| **Sites** | Managed website stack (3 sites on Business, unlimited on White-label) |
---
## Atlas Academy — included in every paid plan
| Course | Duration | Language |
|--------|----------|----------|
| AI for Founders | 6 weeks | NL / EN |
| Odoo for SMEs | 4 weeks | NL |
| Digital Sovereignty | 8 lessons | NL |
| BiSL Foundation | 3 weeks | NL |
| Startup Sprint | 12 weeks | NL / EN |
ESF-funded tracks available for qualifying businesses.
---
## Compared to what you are replacing
| Tool | Atlas OS equivalent | Typical cost |
|---|---|---|
| Microsoft 365 Business | OnlyOffice + Stalwart + Nextcloud | €1222 /user/mo |
| HubSpot CRM | Odoo CRM + Pipeline cockpit | €4590 /mo |
| Notion / Confluence | Nextcloud + Forgejo wiki | €810 /user/mo |
| Dropbox / Google Drive | Nextcloud | €1015 /user/mo |
| Zapier / Make | n8n (unlimited) | €1949 /mo |
| 1Password / Keeper | Vaultwarden | €48 /user/mo |
| Uptime monitoring | Uptime Kuma | €729 /mo |
| **Total stack (5 users)** | | **€350500+ /mo** |
| **Atlas OS Team (5 users)** | | **€75 /mo** |
**You save 7585% of your SaaS spend. And you own the data.**
---
## Self-host option
The entire stack is open in this repo. Clone and deploy on your own server:
```bash
git clone <this-repo>
cd atlas-os
sudo ./deploy/install.sh --domain yourdomain.com --email admin@yourdomain.com
```
Requires: Debian 12 · 4 vCPU / 8 GB RAM · domain
Want help with setup? **Setup Call — €49 one-time**, we configure everything on a call.
---
## Add-ons (Business and White-label)
| Add-on | Price |
|---|---|
| Extra managed domain | €5 /mo |
| AtlasPOS integration (horeca/retail kassa) | from €79 /mo per terminal |
| Custom n8n workflow | €150 /workflow |
| Monthly health report | €25 /mo |
| Extra onboarding call (1 hour) | €75 |
| Atlas Academy seat (extra user) | €X /seat (see Academy pricing) |
---
## FAQ
**Can I cancel anytime?**
Yes. Monthly billing, cancel in one click. Your data is yours — export at any time.
**Is my data stored in the EU?**
Yes. Hosted on Hetzner Nuremberg (Germany) with backups in Amsterdam. Full GDPR/AVG compliance. We never train models on your data.
**What happens after the 40-day trial?**
Choose a plan or export all your data. No lock-in, no forced upgrade.
**Can I use Atlas OS for my team of 12?**
Business plan (€199/mo, up to 25 users) covers you. Each user gets their own SSO identity and isolated workspace.
**Is there an iDEAL / SEPA payment option?**
Yes. We accept iDEAL and SEPA direct debit. No interest, no hidden fees.
**I am a student. Can I get a discount?**
Yes. Students get Solo plan for **€10/mo** with valid student ID. Email info@atlascorporation.nl.
**Can I white-label this for my clients?**
Yes. White-label plan (€499/mo): full rebrand, your domain, resell as your own product. Used by agencies to offer a sovereign workspace service to SME clients.
---
## Start your 40-day free trial
No credit card. No setup fee. Full access from day one.
**[→ atlascorporation.nl](https://atlascorporation.nl)**
For enterprise or white-label: **info@atlascorporation.nl**

233
README.md
View file

@ -4,30 +4,67 @@
# Atlas OS # Atlas OS
[![Status](https://img.shields.io/badge/status-live-4ec98a?style=flat-square&logo=checkmarx&logoColor=white)](#-quick-deploy) [![Trial](https://img.shields.io/badge/free_trial-40_days-4ec98a?style=flat-square&logo=checkmarx&logoColor=white)](https://atlascorporation.nl)
[![Containers](https://img.shields.io/badge/containers-55-4a9fe2?style=flat-square&logo=docker&logoColor=white)](./SERVICES.md) [![Price](https://img.shields.io/badge/from-%E2%82%AC25%2Fmo-4a9fe2?style=flat-square&logo=stripe&logoColor=white)](./PRICING.md)
[![Apps](https://img.shields.io/badge/apps-39-4a9fe2?style=flat-square&logo=windowsterminal&logoColor=white)](./SERVICES.md) [![Apps](https://img.shields.io/badge/39_apps-all_included-4a9fe2?style=flat-square&logo=windowsterminal&logoColor=white)](./SERVICES.md)
[![Academy](https://img.shields.io/badge/Academy-3_months_free-9b8cf0?style=flat-square&logo=academia&logoColor=white)](./docs/academy.md)
[![Stack](https://img.shields.io/badge/stack-Caddy_%C2%B7_Authentik_%C2%B7_Docker-1c4fae?style=flat-square&logo=cloudflare&logoColor=white)](./ARCHITECTURE.md) [![Stack](https://img.shields.io/badge/stack-Caddy_%C2%B7_Authentik_%C2%B7_Docker-1c4fae?style=flat-square&logo=cloudflare&logoColor=white)](./ARCHITECTURE.md)
[![AI](https://img.shields.io/badge/AI-LiteLLM_%C2%B7_Ollama_%C2%B7_Claude-9b8cf0?style=flat-square&logo=openai&logoColor=white)](./docs/ai-stack.md)
**Your entire business running on one hardened Linux server.** **Your entire business stack. One server. One login. €25/month.**
**One SSO identity. One browser login. One OS.**
[📐 Architecture](./ARCHITECTURE.md) · [📦 Services](./SERVICES.md) · [🛠 Deploy](./deploy/) · [🤖 AI Stack](./docs/ai-stack.md) [🚀 Start 40-day free trial](https://atlascorporation.nl) · [💰 Pricing](./PRICING.md) · [🏢 For SMEs](./docs/for-smes.md) · [🛠 Self-host](./deploy/)
</div> </div>
--- ---
> **🚀 Live deployment showcase.** This documents a real running installation. > **Replace Microsoft 365, HubSpot, Notion, Dropbox, and n8n — with one €25/month subscription.**
> All `YOUR_DOMAIN` references map to the actual domain. To clone and adapt: > 39 apps. One SSO login. Your data stays in the EU. No lock-in.
> ```bash >
> git clone <this-repo-url> > **[→ Start free for 40 days at atlascorporation.nl](https://atlascorporation.nl)**
> cd atlas-os > No credit card required. Full access from day one. 3 months Atlas Academy included.
> grep -rl 'YOUR_DOMAIN' . | xargs sed -i 's/YOUR_DOMAIN/yourdomain.com/g'
> sudo ./deploy/install.sh --domain yourdomain.com --email admin@yourdomain.com ---
> ```
> Full guide → [deploy/README.md](./deploy/README.md) ## 💰 Become a member
| Plan | Price | Users | Free trial | Academy |
|------|-------|-------|------------|---------|
| **Solo** | **€25 /mo** | 1 | 40 days | 3 months |
| **Team** | **€75 /mo** | up to 5 | 40 days | 6 months (team) |
| **Business** | **€199 /mo** | up to 25 | 40 days | 12 months |
| **White-label** | **€499 /mo** | unlimited | 40 days | unlimited |
| Self-host | free | — | — | — |
**[→ Full pricing, add-ons, and FAQ](./PRICING.md)**
### Included in every paid plan
```
✅ 39 production apps (CRM, finance, files, mail, AI, automation, git, ...)
✅ One SSO identity — sign in once, everything opens
✅ AI workspace (local models + Claude + Groq, unified gateway)
✅ Atlas Academy courses (Odoo, AI, Digital Sovereignty, BiSL, Startup Sprint)
✅ Hosted in the EU · GDPR/AVG compliant · encrypted backups
✅ Cancel anytime — export all data, no lock-in
```
---
## Who is this for?
### 🧑‍💻 Solo founders & freelancers
Replace your patchwork of SaaS tools with one dashboard. CRM, invoicing, files, email, and an AI assistant — all in one login. **€25/month covers everything.**
### 🎓 Students
€10/month with student ID. Real Odoo instance, Nextcloud drive, Git server, and Atlas Academy — tools you will actually use on the job.
Email **info@atlascorporation.nl** with `.edu` or student ID.
### 🏢 SMEs (525 people)
Stop paying €500+/month per 10 employees for fragmented tools. Atlas OS Business gives your team one sovereign workspace. **[See the SME ROI breakdown →](./docs/for-smes.md)**
### 🔧 Developers & sysadmins
Clone and self-host in ~30 minutes on any Debian server. Everything is Docker Compose + Caddy + open source. **[Deploy guide →](./deploy/)**
--- ---
@ -35,15 +72,13 @@
Atlas OS is a self-hosted business operating system running on a single Linux server. One [Authentik](https://goauthentik.io) SSO identity unlocks **39 services** spanning CRM, finance, communications, AI, fleet management, document storage, and a full Linux remote desktop — all served behind [Caddy](https://caddyserver.com) with automatic HTTPS. Atlas OS is a self-hosted business operating system running on a single Linux server. One [Authentik](https://goauthentik.io) SSO identity unlocks **39 services** spanning CRM, finance, communications, AI, fleet management, document storage, and a full Linux remote desktop — all served behind [Caddy](https://caddyserver.com) with automatic HTTPS.
Built by and for a solo founder who needed a private cloud they actually own, styled like a space-grade command console. > Think of it as a Citrix-style workspace — but your server, your identity, your data.
> Think of it as a Citrix-style desktop — but it is your own server, your own identity, your own data.
<div align="center"> <div align="center">
![Atlas OS desktop](./assets/desktop-preview.svg) ![Atlas OS desktop](./assets/desktop-preview.svg)
<sub>The Atlas OS desktop — categorized launcher, live cockpit panels. Served at <code>command.YOUR_DOMAIN/os/</code> behind SSO.</sub> <sub>The Atlas OS desktop — categorized launcher, live cockpit panels.</sub>
</div> </div>
@ -51,143 +86,91 @@ Built by and for a solo founder who needed a private cloud they actually own, st
## 🖥️ The Desktop ## 🖥️ The Desktop
Open `https://command.YOUR_DOMAIN/os/` on any device. You get a space-themed boot screen → Authentik SSO login → a live desktop with your real data: a categorized launcher (Cockpit · Identity · AI · Work · Files · Ops · Sites), drag-and-drop windows, and cockpit panels that auto-refresh. Open `https://command.YOUR_DOMAIN/os/` on any device. Space-themed boot screen → Authentik SSO login → live desktop with real data: categorized launcher (Cockpit · Identity · AI · Work · Files · Ops · Sites), drag-and-drop windows, cockpit panels that auto-refresh.
**Remote Linux desktop** (tailnet-only, Webtop): **Remote Linux desktop** (tailnet-only): real XFCE desktop in the browser with Claude Code and Chromium pre-installed.
A real XFCE desktop in the browser. Claude Code and Chromium are pre-installed — OAuth login works because the browser is *inside* the desktop. Requires Tailscale to be active on your device.
--- ---
## 🏗️ Architecture ## 🏗️ Architecture
One box. Caddy is the **sole** public entry point. Every public service passes through Authentik `forward_auth` before it is reached. Root-level access (SSH, the remote desktop) is Tailscale-only and never exposed to the public internet. One box. Caddy is the sole public entry point. Every service passes through Authentik `forward_auth`. Root-level access is Tailscale-only.
<details>
<summary>Interactive Mermaid diagram</summary>
```mermaid ```mermaid
graph LR graph LR
subgraph Internet subgraph Internet
U([User Browser]) U([User Browser])
iOS([iOS / Mobile])
end end
subgraph server["Your Server"] subgraph server["Your Server"]
direction TB C[Caddy TLS] -->|forward_auth| A[Authentik SSO]
C[Caddy TLS]
A[Authentik SSO]
C -->|forward_auth| A
A -->|verified| OS[Atlas OS Desktop] A -->|verified| OS[Atlas OS Desktop]
A -->|verified| OD[Odoo ERP] A -->|verified| OD[Odoo ERP]
A -->|verified| NC[Nextcloud] A -->|verified| NC[Nextcloud]
A -->|verified| AI[AI Gateway] A -->|verified| AI[AI Gateway]
A -->|verified| FG[Forgejo Git] A -->|verified| FG[Forgejo Git]
A -->|verified| MC[MeshCentral]
subgraph AIStack["AI Stack"] subgraph AIStack["AI Stack"]
AI --> OL[Ollama Local] AI --> OL[Ollama Local]
AI --> GR[Groq / Cerebras] AI --> GR[Groq / Cerebras]
AI --> CL[Claude API] AI --> CL[Claude API]
AB[Atlas Brain] -->|15min| AI AB[Atlas Brain] -->|15min| AI
end end
subgraph MeshNet["Mesh"]
NATS[NATS Event Bus] --> TS[Tailscale Devices]
end
end end
U -->|HTTPS| C U -->|HTTPS| C
iOS -->|Tailscale| TS
``` ```
</details>
Full detail in [ARCHITECTURE.md](./ARCHITECTURE.md). Full detail in [ARCHITECTURE.md](./ARCHITECTURE.md).
--- ---
## 📦 Service Catalog ## 📦 Service Catalog (39 apps)
### 🎯 Cockpit (live data panels) ### 🎯 Cockpit
| App | Description | Today (AI daily brief) · Money (bank PSD2) · Inbox · Pipeline (CRM) · Fleet (devices) · Control (AI limits)
|-----|-------------|
| Today | AI daily brief + accountability level |
| Money | Bank transactions via Enable Banking PSD2 |
| Inbox | Email + WhatsApp drafts, flagged items |
| Pipeline | Odoo CRM leads and deal status |
| Fleet | POS terminals, health, last-seen (MeshCentral) |
| Control | AI kill-switch, autonomy level, daily spend cap |
### 🛡️ Identity ### 🛡️ Identity
| App | URL | Authentik SSO `auth.YOUR_DOMAIN` · Vaultwarden `vault.YOUR_DOMAIN`
|-----|-----|
| Authentik — SSO, OIDC, MFA | `auth.YOUR_DOMAIN` |
| Vaultwarden — self-hosted Bitwarden | `vault.YOUR_DOMAIN` |
### 🤖 AI ### 🤖 AI
| App | URL | Atlas Chat (Open-WebUI) · AI Gateway (LiteLLM) · Mindmap · Leeragent
|-----|-----|
| Atlas Chat (Open-WebUI) | `chat.YOUR_DOMAIN` |
| AI Gateway (LiteLLM proxy) | `llm.YOUR_DOMAIN` |
| Mindmap | `mindmap.YOUR_DOMAIN` |
| Leeragent | `leeragent.YOUR_DOMAIN` |
See the full AI routing stack (local → free cloud → paid) in [docs/ai-stack.md](./docs/ai-stack.md). See full AI routing (local → free cloud → paid) in [docs/ai-stack.md](./docs/ai-stack.md).
### 💼 Work ### 💼 Work
| App | URL | Odoo 19 ERP/CRM · Firefly III · Enable Banking PSD2 · Paperless-ngx · OnlyOffice · Nextcloud Calendar
|-----|-----|
| Odoo 19 ERP/CRM | `odoo.YOUR_DOMAIN` |
| Firefly III (bookkeeping) | `cfo.YOUR_DOMAIN` |
| Enable Banking (PSD2 feed) | `fidi.YOUR_DOMAIN` |
| Paperless-ngx (documents) | `paperless.YOUR_DOMAIN` |
| OnlyOffice | `office.YOUR_DOMAIN` |
| Nextcloud Calendar | `cloud.YOUR_DOMAIN` |
### 📁 Files & Comms ### 📁 Files & Comms
| App | URL | Nextcloud · Stalwart Mail (SMTP/IMAP) · Message relay
|-----|-----|
| Nextcloud | `cloud.YOUR_DOMAIN` |
| Stalwart Mail (SMTP/IMAP/JMAP) | `stalwart.YOUR_DOMAIN` |
| Message relay | `relay.YOUR_DOMAIN` |
### ⚙️ Ops ### ⚙️ Ops
| App | URL | Forgejo Git · n8n automation · Uptime Kuma · MeshCentral · Command dashboard · Webtop remote desktop (tailnet-only)
|-----|-----|
| Forgejo (self-hosted git) | `git.YOUR_DOMAIN` |
| n8n (automation) | `n8n.YOUR_DOMAIN` |
| Uptime Kuma | `uptime.YOUR_DOMAIN` |
| MeshCentral (fleet) | `mesh.YOUR_DOMAIN` |
| Command dashboard | `command.YOUR_DOMAIN` |
| Remote Desktop (Webtop) | tailnet-only |
### 🎓 Academy ### 🎓 Academy
An education arm running on the same box — courses, coaching, ESF/BiSL/startup/AI curriculum. Lead capture posts straight into Odoo CRM. See [docs/academy.md](./docs/academy.md). Education arm: courses, coaching, ESF/BiSL/startup/AI curriculum. Free for 312 months depending on plan. See [docs/academy.md](./docs/academy.md).
**📖 Course: [Digitale Soevereiniteit voor Ondernemers](https://atlasacademy.nl/slides/digitale-soevereiniteit-voor-ondernemers-10)** — 8 lessons: why sovereign cloud → your first server → Docker + Caddy → Authentik SSO → files/mail/calendar → free local AI → the Atlas OS dashboard → security & backups. Built in Odoo eLearning, linked to Odoo CRM for lead capture. > 📖 **[Digitale Soevereiniteit voor Ondernemers](https://atlasacademy.nl)** — 8 lessons: sovereign cloud → your first server → Docker + Caddy → SSO → AI → Atlas OS dashboard.
### 🕌 Islamic Layer ### 🕌 Islamic Layer
A first-class part of the OS: family-safe DNS (AdGuard Family), Quran at logon, Adhan + screen lock at configured mosque salah times, sunnah reminders across the device fleet. See [docs/islamic-layer.md](./docs/islamic-layer.md). Family-safe DNS, Quran at logon, Adhan + screen lock at salah times, sunnah reminders. See [docs/islamic-layer.md](./docs/islamic-layer.md).
### 🌐 Managed Sites
Atlas OS manages multiple sites (own brands + client sites) on the same box. Each is an isolated Docker stack or static HTML, registered in Caddy with its own Authentik proxy provider if needed.
--- ---
## 🤖 AI Stack ## 🤖 AI Stack
Four-tier routing — zero-cost local first, paid cloud only when needed. Full table in **[docs/ai-stack.md](./docs/ai-stack.md)**. Four-tier routing — zero-cost local first, paid cloud only when needed.
| Tier | Example | Use | | Tier | Model | Use |
|------|---------|-----| |------|-------|-----|
| 0 — Local | Ollama on local GPU | Classification, copy, code, summaries | | 0 — Local GPU | Ollama (LLaMA, Qwen, Hermes) | Copy, summaries, classification |
| 1 — Free Cloud | Groq / Cerebras 70B · Gemini (1M ctx) | Fast reasoning, bulk tasks, vision | | 1 — Free Cloud | Groq 70B · Cerebras · Gemini 1M | Reasoning, bulk, vision |
| 2 — Paid | Claude Haiku / Sonnet / Opus | Code, multi-step reasoning, architecture | | 2 — Paid | Claude Haiku / Sonnet / Opus | Code, planning, architecture |
**Always-on AI services:** `atlas-brain` (15-min signal cycle), `atlas-loop` (NATS nudges), `atlas-meridian` (autonomous decisions), `atlas-litellm` (unified proxy), Langfuse (full LLM tracing). Always-on: `atlas-brain` (15-min cycle) · `atlas-loop` (NATS nudges) · `atlas-meridian` (autonomous decisions) · Langfuse (LLM tracing)
Full stack: [docs/ai-stack.md](./docs/ai-stack.md)
--- ---
## 🚀 Quick Deploy ## 🚀 Quick Deploy (self-host)
> **Requirements:** Debian 12 or Ubuntu 24.04 · a domain with DNS → server · Tailscale account (free tier)
```bash ```bash
git clone <this-repo-url> git clone <this-repo-url>
@ -196,12 +179,9 @@ chmod +x deploy/install.sh
sudo ./deploy/install.sh --domain yourdomain.com --email admin@yourdomain.com sudo ./deploy/install.sh --domain yourdomain.com --email admin@yourdomain.com
``` ```
1. Open `https://auth.yourdomain.com` → complete Authentik setup Requires: Debian 12 · 4 vCPU / 8 GB RAM · domain pointing to server.
2. Log in to `https://command.yourdomain.com/os/` — desktop boots
3. Add the AI stack: `docker compose -f deploy/compose/atlas-ai.yml up -d`
4. Configure `server/atlas_brain.py` with your mail accounts
Full guide: [deploy/README.md](./deploy/README.md) Full guide: [deploy/README.md](./deploy/README.md) · Prefer managed? [→ Managed workspace](./docs/managed-workspace.md)
--- ---
@ -209,18 +189,17 @@ Full guide: [deploy/README.md](./deploy/README.md)
``` ```
atlas-os/ atlas-os/
├── assets/ # Animated header, desktop preview, architecture SVGs ├── assets/ Animated header, desktop preview, architecture SVGs
├── web/os/index.html # The browser OS desktop (production copy) ├── web/os/index.html The browser OS desktop (production copy)
├── server/ # Python services (atlas_brain, meridian, ...) ├── server/ Python services (atlas_brain, meridian, ...)
│ └── systemd/ # Service unit files
├── scripts/ # Export + automation scripts
├── deploy/ ├── deploy/
│ ├── install.sh # One-command installer │ ├── install.sh One-command installer
│ ├── compose/ # atlas-core.yml, atlas-ai.yml │ ├── compose/ atlas-core.yml, atlas-ai.yml
│ └── caddy/ # Caddyfile.template (Authentik SSO pattern) │ └── caddy/ Caddyfile.template
├── docs/ # ai-stack · academy · islamic-layer · security · deployment ├── docs/ ai-stack · academy · for-smes · security · managed-workspace
├── ARCHITECTURE.md # One-box philosophy, topology, data flows ├── PRICING.md Tiers, comparison, FAQ
├── SERVICES.md # All containers + systemd services ├── ARCHITECTURE.md
├── SERVICES.md
└── CHANGELOG.md └── CHANGELOG.md
``` ```
@ -230,27 +209,33 @@ atlas-os/
| Layer | Implementation | | Layer | Implementation |
|-------|---------------| |-------|---------------|
| Identity | Authentik SSO — single source of truth for all services | | Identity | Authentik SSO — single source of truth |
| TLS | Caddy automatic HTTPS on every public endpoint | | TLS | Caddy automatic HTTPS on every endpoint |
| Network | Public services behind SSO · internal services on Tailscale only | | Network | Public services behind SSO · internal on Tailscale only |
| Secrets | Vaultwarden (E2E) · age-encrypted vault for sync · chmod 600 on disk | | Secrets | Vaultwarden · age-encrypted vault · chmod 600 on disk |
| Remote desktop | Webtop is tailnet-only — never exposed to the public internet | | Remote desktop | Webtop tailnet-only — never public |
| Backups | Automated backup services for Forgejo, Nextcloud, Authentik | | Backups | Automated: Forgejo, Nextcloud, Authentik |
**Rule:** anything root-level stays tailnet-only. Public services must pass Authentik `forward_auth`. No bare basic-auth on the public internet. Full model in [docs/security.md](./docs/security.md). Full model: [docs/security.md](./docs/security.md)
--- ---
## 🛠️ Tech Stack ## 🛠️ Tech Stack
[Caddy](https://caddyserver.com) · [Authentik](https://goauthentik.io) · Docker Compose · [Tailscale](https://tailscale.com) · [NATS](https://nats.io) · [Odoo 19](https://odoo.com) · [Nextcloud](https://nextcloud.com) · [Firefly III](https://firefly-iii.org) · [Paperless-ngx](https://docs.paperless-ngx.com) · [Stalwart](https://stalw.art) · [Forgejo](https://forgejo.org) · [n8n](https://n8n.io) · [Vaultwarden](https://github.com/dani-garcia/vaultwarden) · [LiteLLM](https://litellm.ai) · [Open-WebUI](https://openwebui.com) · [Langfuse](https://langfuse.com) · [Webtop](https://docs.linuxserver.io/images/docker-webtop/) · [MeshCentral](https://meshcentral.com) · [Uptime Kuma](https://uptime.kuma.pet) · [Ollama](https://ollama.com) [Caddy](https://caddyserver.com) · [Authentik](https://goauthentik.io) · Docker Compose · [Tailscale](https://tailscale.com) · [NATS](https://nats.io) · [Odoo 19](https://odoo.com) · [Nextcloud](https://nextcloud.com) · [Firefly III](https://firefly-iii.org) · [Stalwart](https://stalw.art) · [Forgejo](https://forgejo.org) · [n8n](https://n8n.io) · [Vaultwarden](https://github.com/dani-garcia/vaultwarden) · [LiteLLM](https://litellm.ai) · [Open-WebUI](https://openwebui.com) · [Langfuse](https://langfuse.com) · [MeshCentral](https://meshcentral.com) · [Uptime Kuma](https://uptime.kuma.pet) · [Ollama](https://ollama.com)
--- ---
<div align="center"> <div align="center">
**Ready to replace your SaaS stack?**
**[🚀 Start free for 40 days → atlascorporation.nl](https://atlascorporation.nl)**
*No credit card. No lock-in. 3 months Academy included.*
---
Built with obsession by **Chaib Aarab** · Atlas Corporation · Tilburg, NL Built with obsession by **Chaib Aarab** · Atlas Corporation · Tilburg, NL
*"Your business on one box — space grade."*
</div> </div>

155
docs/for-smes.md Normal file
View file

@ -0,0 +1,155 @@
# Atlas OS for SMEs
> **Replace your entire SaaS stack with one monthly invoice.**
> Built for small and medium businesses tired of paying per-seat for tools that do not talk to each other.
---
## The problem with your current stack
A typical 10-person SME pays:
| Tool | Annual cost |
|---|---|
| Microsoft 365 Business Standard (10 users) | €2,200 /yr |
| HubSpot CRM Starter | €1,080 /yr |
| Notion Business | €960 /yr |
| Dropbox Business | €1,800 /yr |
| Zapier Starter | €588 /yr |
| Password manager (1Password, 10 users) | €480 /yr |
| **Total** | **€7,108 /yr — €593 /mo** |
**With Atlas OS Business (25 users): €199 /mo = €2,388 /yr.**
You save **€4,720 a year** — enough to hire a part-time employee.
---
## What you get instead
### One login for everything
Your team signs in once via SSO. Every tool — CRM, files, mail, finance, project boards — opens with the same identity. No more "reset password" tickets. No more 12 different subscription portals.
### Real ERP, not a toy CRM
Odoo is a full ERP used by 12 million companies worldwide. Sales pipeline, invoicing, inventory, project management, HR — all wired together. Atlas Academy teaches your team how to use it during onboarding.
### Own your data
When you use Microsoft 365 or Google Workspace, your data lives on their servers. With Atlas OS, your data lives on a server in your name. We manage the server — you own the data. Switch providers tomorrow without losing anything.
### GDPR / AVG by design
Hosted in the EU (Hetzner Nuremberg). No tracking, no ads, no data sharing. Customer data never leaves the EU. Data Processing Agreement (DPA) included out of the box.
---
## Perfect for
| Type | Why Atlas OS fits |
|---|---|
| **Accountancy & legal** | Paperless DMS + Nextcloud client files + Odoo projects + secure portal |
| **Marketing agencies** | Forgejo for design/code versioning + n8n automation + CRM pipeline |
| **Retail / horeca** | Odoo inventory + integrates with AtlasPOS (physical kassa from €79/mo) |
| **Consultancies** | Odoo timetracking + invoicing + Nextcloud client vault |
| **Tech startups** | Forgejo Git + CI/CD + Nextcloud + AI Gateway + full dev environment |
| **Healthcare / care** | GDPR-compliant file storage + Stalwart mail + Paperless patient docs |
---
## Migration from Microsoft 365
| Microsoft tool | Atlas OS equivalent |
|---|---|
| Outlook / Exchange | Stalwart mail + Nextcloud Calendar |
| Teams | Nextcloud Talk (included) |
| SharePoint / OneDrive | Nextcloud |
| Office apps | OnlyOffice (full Word/Excel/PowerPoint compat) |
| Planner / To-do | Odoo Project |
We help you migrate on the **Business onboarding call (2 hours, included)**. Contact import, calendar sync, and file migration are handled by our setup script.
---
## Migration from Google Workspace
| Google tool | Atlas OS equivalent |
|---|---|
| Gmail | Stalwart mail |
| Drive | Nextcloud |
| Docs / Sheets | OnlyOffice |
| Calendar | Nextcloud Calendar |
| Meet | Nextcloud Talk |
| Forms | Odoo Surveys |
---
## Pricing for SMEs
| Users | Plan | Monthly | Annual (save 2 months) |
|---|---|---|---|
| 1 | Solo | €25 | €250 |
| up to 5 | Team | €75 | €750 |
| up to 25 | Business | €199 | €1,990 |
| unlimited | White-label | €499 | €4,990 |
**All plans include:** 40-day free trial · Atlas Academy · encrypted backups · GDPR/AVG · cancel anytime
---
## Case study: 5-person consultancy
**Before Atlas OS:**
- Microsoft 365 (5 users): €110 /mo
- Notion (team): €40 /mo
- HubSpot CRM: €90 /mo
- Dropbox Business: €75 /mo
- **Total: €315 /mo**
**After Atlas OS Team (€75 /mo):**
- 39 apps, SSO, AI workspace, 6 months Academy for all 5 team members
- **Monthly saving: €240 — Annual saving: €2,880**
- Setup time: one 2-hour onboarding call. Migration: included.
---
## Atlas OS + AtlasPOS for retail and horeca
Running a shop or café? Combine Atlas OS with **AtlasPOS** (€79/mo per terminal) and get:
- Kassa + PIN terminal (certified)
- Real-time sales sync to Odoo inventory
- Daily revenue in your Atlas OS Money cockpit
- Fleet control of all terminals from Atlas OS Fleet panel
Ask about the **SME bundle**: Atlas OS Business + 2 AtlasPOS terminals = custom pricing.
---
## What the onboarding looks like
```
Day 1 Sign up → instance provisioned in < 4 hours
Day 1 Receive login credentials for your team
Day 2 Onboarding call (2 hours):
- Configure your domain and mail
- Add your team members
- Set up Odoo for your business (company info, chart of accounts)
- Import contacts and calendar
- Assign Academy courses to team members
Week 1 Your team is operational
Week 2 Atlas Academy: AI for your workflows (first course)
Day 40 Trial ends → we invoice monthly, or you export everything
```
---
## Start free for 40 days
No credit card. No lock-in. Full Business features during trial.
**[→ atlascorporation.nl](https://atlascorporation.nl)**
Book a demo: **info@atlascorporation.nl**
For Dutch-language onboarding, setup, and support — we are based in Tilburg, NL.

90
docs/managed-workspace.md Normal file
View file

@ -0,0 +1,90 @@
# Managed Atlas OS Workspace
> We run the server. You run the business.
Atlas OS is open-source and fully self-hostable. But if you would rather not manage a Linux VPS, we offer a fully managed workspace — same 39 apps, same sovereign data, zero server headaches.
---
## What managed means
| You handle | We handle |
|---|---|
| Using the apps | Server provisioning and hardening |
| Adding users in Authentik | Caddy TLS certificates (auto-renewed) |
| Configuring Odoo for your business | Docker stack updates |
| Setting up your n8n workflows | Security patches (applied within 24 h) |
| Your data and content | Daily encrypted backups |
| | Uptime monitoring + alerting |
| | Incident response |
---
## Onboarding flow
```
Day 1 Sign up -> instance provisioned in < 4 hours
Day 2 Onboarding call (Business/White-label): domain, users, mail, Odoo
Day 3 Your team logs in for the first time
Week 1 Academy modules assigned to team members
Day 40 Trial ends -> choose plan or export
```
---
## Your instance
**Business and White-label** customers get a **dedicated server** (not shared):
- Hetzner CPX32: 8 vCPU / 16 GB RAM / 200 GB SSD (Nuremberg, Germany)
- Your domain, your SSL certificates, your DNS records
- Isolated Docker stack — no other customer workloads on your machine
- SSH access available on request (Business+)
- Full root access available (White-label)
Solo and Team plans run on Atlas shared infrastructure with isolated Docker networks, encrypted volumes, and separate Authentik realms per tenant.
---
## Backup policy
| | Solo | Team | Business | White-label |
|---|---|---|---|---|
| Daily snapshots | ✅ | ✅ | ✅ | ✅ |
| Retention | 7 days | 14 days | 30 days | 90 days |
| Off-site backup | — | — | ✅ | ✅ |
| Point-in-time restore | — | — | ✅ | ✅ |
| Backup encryption | ✅ | ✅ | ✅ | ✅ |
---
## Add-ons
| Add-on | Price |
|---|---|
| Extra managed domain | €5 /mo |
| AtlasPOS integration | from €79 /mo per terminal |
| Custom n8n workflow build | €150 /workflow |
| Monthly health report (PDF) | €25 /mo |
| Extra onboarding call (1 hour) | €75 |
| Atlas Academy seat (extra user) | contact for pricing |
---
## SLA
| Plan | Uptime SLA | Response time |
|---|---|---|
| Solo / Team | best effort | next business day |
| Business | 99.5% monthly | 4 business hours |
| White-label | 99.9% monthly | 2 business hours |
Measured on the Uptime Kuma dashboard included in every instance.
---
## Start free for 40 days
**[→ atlascorporation.nl](https://atlascorporation.nl)**
For enterprise or white-label inquiries: **info@atlascorporation.nl**