**A sovereign, browser-native AI operating system.**
Log in with your identity → your entire operation as apps on one desktop. No install. Any device. One login.
[](https://command.atlascorporation.nl/os/)
[](#-the-app-catalog)
[](./docs/security.md)
[](https://auth.atlascorporation.nl)
[](./LICENSE)
---
## What it is
Atlas OS is what happens when one operator builds an entire private cloud and then puts **one front door** on it. Log in once with [Authentik](https://goauthentik.io) SSO and a desktop boots in your browser — your bank feed, CRM, mail, files, documents, fleet of POS terminals, automation engine and a real Linux remote desktop, all as apps on a single screen.
Not a SaaS. Not a dashboard mockup. A **reviewed execution layer** above the tools you already run — sovereign by design, hostable in our EU cloud **or fully on-premise on your own server**, in the spirit of Citrix / ServiceNow but built for the solo founder and the small team.
Every department, one screen — apps on a sovereign desktop.
---
## ✦ The experience
| | |
|---|---|
| 
| 
|
| **One partner for every system** — ERP, POS, webshop, hardware, AI as one seamless whole. | **The Atlas platform** — surfaces → workspace → data sources, one reviewed control layer. |
---
## 🗺️ Architecture
One box. One identity. Everything behind it.
```mermaid
%%{init: {'theme':'base','themeVariables':{'primaryColor':'#0c1428','primaryTextColor':'#cfe2ff','primaryBorderColor':'#1F6FE0','lineColor':'#4EA0FF','fontFamily':'monospace'}}}%%
graph TB
User([Any device]):::u --> Caddy[Caddy · TLS + edge]:::edge
Caddy --> Auth{{Authentik SSO}}:::id
Auth --> OS[Atlas OS desktop]:::os
Auth --> Apps[39 apps]:::os
OS --> Mind[The Mind · cockpit + spine]:::ai
Mind --> Brain[Atlas Brain · reviewed execution]:::ai
Brain --> Router[LLM router · local → Groq → Claude]:::ai
Apps --> Stack[Odoo · Nextcloud · Firefly · Paperless · n8n · Forgejo · Vault · Stalwart]:::svc
Caddy --> Fleet[Fleet · MeshCentral + Tailscale + NATS mesh]:::fleet
Caddy --> Sites[Client sites · WordPress · POS · Academy]:::site
classDef u fill:#050810,stroke:#4EA0FF,color:#8EC2FF
classDef edge fill:#0c1428,stroke:#1F6FE0,color:#cfe2ff
classDef id fill:#145ED2,stroke:#4EA0FF,color:#fff
classDef os fill:#0c1428,stroke:#4EA0FF,color:#cfe2ff
classDef ai fill:#0c1428,stroke:#8EC2FF,color:#cfe2ff
classDef svc fill:#080c18,stroke:#1F6FE0,color:#9fb8e0
classDef fleet fill:#080c18,stroke:#1F6FE0,color:#9fb8e0
classDef site fill:#080c18,stroke:#145ED2,color:#9fb8e0
```
Full write-up → **[ARCHITECTURE.md](./ARCHITECTURE.md)** · every container & service → **[SERVICES.md](./SERVICES.md)** · the AI layer → **[docs/ai-stack.md](./docs/ai-stack.md)**
---
## 🧩 The app catalog
39 apps, live-verified (no dead tiles), grouped into a categorized launcher:
| Group | Apps |
|---|---|
| **Cockpit** | Today · Money · Inbox · Pipeline · Fleet · Control |
| **Identity** | Authentik SSO · Vaultwarden |
| **AI** | Atlas Chat (Open WebUI) · AI Gateway · Mindmap · Leeragent |
| **Work** | Odoo 19 · CFO · Bank (Firefly) · Paperless · Office · Calendar |
| **Files & Comms** | Nextcloud · Mail Admin (Stalwart) · Relay |
| **Ops** | Git (Forgejo) · n8n · Uptime Kuma · MeshCentral · Command · **Remote Desktop** · Architecture |
| **Sites** | AtlasWorks · Atlas Corp · Agency · **Academy** · AtlasPOS · Hub + client sites |
> **Remote Desktop** is a genuine Ubuntu XFCE desktop in the browser (Webtop) with Claude Code + Chromium pre-installed — boot Claude or any app, on a sovereign desktop. → [docs/remote-desktop.md](./docs/remote-desktop.md)
---
## 🛰️ Fleet, mesh & sovereignty
- **MeshCentral** — remote management of every client POS terminal and device.
- **Tailscale** — the private spine; internal services (`tailscale serve`) never touch the public internet.
- **NATS mesh** — node-to-node messaging across the Atlas estate (round-trip proven).
- **EU-sovereign** — Hetzner (NL/DE), no US Cloud Act exposure, MFA, nightly backups. → [docs/security.md](./docs/security.md)
---
## 🎓 Atlas Academy
[atlasacademy.nl](https://atlasacademy.nl) — the training arm. BiSL, startup, AI and ESF-funded tracks, coaching and a course catalog, with leads relayed straight into Odoo CRM. Part of the same one-identity estate; surfaced as a desktop app.
## 🕌 Atlas Islamic layer
A personal-sovereignty layer for the operator: Adhan at El Feth (Tilburg) salah times, Qur'an at logon, AdGuard Family DNS + content filtering, and sunnah reminders — proof that "sovereign" includes values, not just data residency.
---
## 🚀 Deploy your own
```bash
git clone https://git.atlascorporation.nl/chaib/atlas-os.git
cd atlas-os
sudo bash deploy/install.sh # Debian/Ubuntu, Docker + Caddy
```
Bring your own domain; point it at the box; Caddy issues certs and Authentik gates everything. Core stack compose lives in [`deploy/compose/atlas-core.yml`](./deploy/compose/atlas-core.yml). Full guide → **[docs/deployment.md](./docs/deployment.md)**.
---
## 📚 Docs & wiki
| | |
|---|---|
| [ARCHITECTURE.md](./ARCHITECTURE.md) | One-box philosophy, topology, data flows |
| [SERVICES.md](./SERVICES.md) | All 55 containers + systemd services |
| [docs/ai-stack.md](./docs/ai-stack.md) | The Mind, the Brain, the LLM router |
| [docs/remote-desktop.md](./docs/remote-desktop.md) | Webtop desktop + Claude inside |
| [docs/security.md](./docs/security.md) | SSO gate, sovereignty, secrets model |
| [docs/deployment.md](./docs/deployment.md) | Stand up the whole stack |
| **[Wiki ↗](https://git.atlascorporation.nl/chaib/atlas-os/wiki)** | Browsable, page-per-topic |
---
**Built by [Chaib Aarab](https://atlascorporation.nl) — Atlas Corporation, Tilburg NL**
Built incrementally, on the go, while running real client projects. The architecture emerged from constraints, not slides.
MIT licensed · EU-sovereign · one login for all of it