A sovereign, browser-native AI operating system. Log in with your identity → your entire operation as apps on one desktop. No install. Any device. One login.

---

What it is

Atlas OS is what happens when one operator builds an entire private cloud and then puts one front door on it. Log in once with Authentik SSO and a desktop boots in your browser — your bank feed, CRM, mail, files, documents, fleet of POS terminals, automation engine and a real Linux remote desktop, all as apps on a single screen.

Not a SaaS. Not a dashboard mockup. A reviewed execution layer above the tools you already run — sovereign by design, hostable in our EU cloud or fully on-premise on your own server, in the spirit of Citrix / ServiceNow but built for the solo founder and the small team.

Every department, one screen — apps on a sovereign desktop.

---

✦ The experience

One partner for every system — ERP, POS, webshop, hardware, AI as one seamless whole.	The Atlas platform — surfaces → workspace → data sources, one reviewed control layer.

---

🗺️ Architecture

One box. One identity. Everything behind it.

%%{init: {'theme':'base','themeVariables':{'primaryColor':'#0c1428','primaryTextColor':'#cfe2ff','primaryBorderColor':'#1F6FE0','lineColor':'#4EA0FF','fontFamily':'monospace'}}}%%
graph TB
    User([Any device]):::u --> Caddy[Caddy · TLS + edge]:::edge
    Caddy --> Auth{{Authentik SSO}}:::id
    Auth --> OS[Atlas OS desktop]:::os
    Auth --> Apps[39 apps]:::os
    OS --> Mind[The Mind · cockpit + spine]:::ai
    Mind --> Brain[Atlas Brain · reviewed execution]:::ai
    Brain --> Router[LLM router · local → Groq → Claude]:::ai
    Apps --> Stack[Odoo · Nextcloud · Firefly · Paperless · n8n · Forgejo · Vault · Stalwart]:::svc
    Caddy --> Fleet[Fleet · MeshCentral + Tailscale + NATS mesh]:::fleet
    Caddy --> Sites[Client sites · WordPress · POS · Academy]:::site

    classDef u fill:#050810,stroke:#4EA0FF,color:#8EC2FF
    classDef edge fill:#0c1428,stroke:#1F6FE0,color:#cfe2ff
    classDef id fill:#145ED2,stroke:#4EA0FF,color:#fff
    classDef os fill:#0c1428,stroke:#4EA0FF,color:#cfe2ff
    classDef ai fill:#0c1428,stroke:#8EC2FF,color:#cfe2ff
    classDef svc fill:#080c18,stroke:#1F6FE0,color:#9fb8e0
    classDef fleet fill:#080c18,stroke:#1F6FE0,color:#9fb8e0
    classDef site fill:#080c18,stroke:#145ED2,color:#9fb8e0

Full write-up → ARCHITECTURE.md · every container & service → SERVICES.md · the AI layer → docs/ai-stack.md

---

🧩 The app catalog

39 apps, live-verified (no dead tiles), grouped into a categorized launcher:

Group	Apps
Cockpit	Today · Money · Inbox · Pipeline · Fleet · Control
Identity	Authentik SSO · Vaultwarden
AI	Atlas Chat (Open WebUI) · AI Gateway · Mindmap · Leeragent
Work	Odoo 19 · CFO · Bank (Firefly) · Paperless · Office · Calendar
Files & Comms	Nextcloud · Mail Admin (Stalwart) · Relay
Ops	Git (Forgejo) · n8n · Uptime Kuma · MeshCentral · Command · Remote Desktop · Architecture
Sites	AtlasWorks · Atlas Corp · Agency · Academy · AtlasPOS · Hub + client sites

Remote Desktop is a genuine Ubuntu XFCE desktop in the browser (Webtop) with Claude Code + Chromium pre-installed — boot Claude or any app, on a sovereign desktop. → docs/remote-desktop.md

---

🛰️ Fleet, mesh & sovereignty

• MeshCentral — remote management of every client POS terminal and device.
• Tailscale — the private spine; internal services (tailscale serve) never touch the public internet.
• NATS mesh — node-to-node messaging across the Atlas estate (round-trip proven).
• EU-sovereign — Hetzner (NL/DE), no US Cloud Act exposure, MFA, nightly backups. → docs/security.md

---

🎓 Atlas Academy

atlasacademy.nl — the training arm. BiSL, startup, AI and ESF-funded tracks, coaching and a course catalog, with leads relayed straight into Odoo CRM. Part of the same one-identity estate; surfaced as a desktop app.

🕌 Atlas Islamic layer

A personal-sovereignty layer for the operator: Adhan at El Feth (Tilburg) salah times, Qur'an at logon, AdGuard Family DNS + content filtering, and sunnah reminders — proof that "sovereign" includes values, not just data residency.

---

🚀 Deploy your own

git clone https://git.atlascorporation.nl/chaib/atlas-os.git
cd atlas-os
sudo bash deploy/install.sh        # Debian/Ubuntu, Docker + Caddy

Bring your own domain; point it at the box; Caddy issues certs and Authentik gates everything. Core stack compose lives in deploy/compose/atlas-core.yml. Full guide → docs/deployment.md.

---

📚 Docs & wiki

ARCHITECTURE.md	One-box philosophy, topology, data flows
SERVICES.md	All 55 containers + systemd services
docs/ai-stack.md	The Mind, the Brain, the LLM router
docs/remote-desktop.md	Webtop desktop + Claude inside
docs/security.md	SSO gate, sovereignty, secrets model
docs/deployment.md	Stand up the whole stack
Wiki ↗	Browsable, page-per-topic

---

Built by Chaib Aarab — Atlas Corporation, Tilburg NL Built incrementally, on the go, while running real client projects. The architecture emerged from constraints, not slides.

_{MIT licensed · EU-sovereign · one login for all of it}