872bb00666
- assets/header.svg: rebuilt in true Atlas blue (#4EA0FF/#1F6FE0/#145ED2) on deep-space gradient, animated starfield + orbital system; gold demoted to 1 accent - assets/screenshots/: 3 real captures (hero, Atlas Workspace, platform diagram) - README.md: blue-branded, embeds header + screenshots + blue Mermaid diagrams, full 39-app catalog, Fleet/Mesh/Tailscale, Academy + Islamic layer, wiki links - docs/ai-stack.md: NEW — fixes the dead AI badge link (spine/Brain/router)
142 lines
6.8 KiB
Markdown
142 lines
6.8 KiB
Markdown
<div align="center">
|
|
|
|
<img src="./assets/header.svg" alt="Atlas OS" width="100%"/>
|
|
|
|
**A sovereign, browser-native AI operating system.**
|
|
Log in with your identity → your entire operation as apps on one desktop. No install. Any device. One login.
|
|
|
|
[](https://command.atlascorporation.nl/os/)
|
|
[](#-the-app-catalog)
|
|
[](./docs/security.md)
|
|
[](https://auth.atlascorporation.nl)
|
|
[](./LICENSE)
|
|
|
|
</div>
|
|
|
|
---
|
|
|
|
## What it is
|
|
|
|
Atlas OS is what happens when one operator builds an entire private cloud and then puts **one front door** on it. Log in once with [Authentik](https://goauthentik.io) SSO and a desktop boots in your browser — your bank feed, CRM, mail, files, documents, fleet of POS terminals, automation engine and a real Linux remote desktop, all as apps on a single screen.
|
|
|
|
Not a SaaS. Not a dashboard mockup. A **reviewed execution layer** above the tools you already run — sovereign by design, hostable in our EU cloud **or fully on-premise on your own server**, in the spirit of Citrix / ServiceNow but built for the solo founder and the small team.
|
|
|
|
<div align="center">
|
|
<img src="./assets/screenshots/workspace.png" alt="Atlas Workspace — every department, one screen" width="80%"/>
|
|
<br/><em>Every department, one screen — apps on a sovereign desktop.</em>
|
|
</div>
|
|
|
|
---
|
|
|
|
## ✦ The experience
|
|
|
|
| | |
|
|
|---|---|
|
|
| <img src="./assets/screenshots/hero.png" width="100%"/> | <img src="./assets/screenshots/platform.png" width="100%"/> |
|
|
| **One partner for every system** — ERP, POS, webshop, hardware, AI as one seamless whole. | **The Atlas platform** — surfaces → workspace → data sources, one reviewed control layer. |
|
|
|
|
---
|
|
|
|
## 🗺️ Architecture
|
|
|
|
One box. One identity. Everything behind it.
|
|
|
|
```mermaid
|
|
%%{init: {'theme':'base','themeVariables':{'primaryColor':'#0c1428','primaryTextColor':'#cfe2ff','primaryBorderColor':'#1F6FE0','lineColor':'#4EA0FF','fontFamily':'monospace'}}}%%
|
|
graph TB
|
|
User([Any device]):::u --> Caddy[Caddy · TLS + edge]:::edge
|
|
Caddy --> Auth{{Authentik SSO}}:::id
|
|
Auth --> OS[Atlas OS desktop]:::os
|
|
Auth --> Apps[39 apps]:::os
|
|
OS --> Mind[The Mind · cockpit + spine]:::ai
|
|
Mind --> Brain[Atlas Brain · reviewed execution]:::ai
|
|
Brain --> Router[LLM router · local → Groq → Claude]:::ai
|
|
Apps --> Stack[Odoo · Nextcloud · Firefly · Paperless · n8n · Forgejo · Vault · Stalwart]:::svc
|
|
Caddy --> Fleet[Fleet · MeshCentral + Tailscale + NATS mesh]:::fleet
|
|
Caddy --> Sites[Client sites · WordPress · POS · Academy]:::site
|
|
|
|
classDef u fill:#050810,stroke:#4EA0FF,color:#8EC2FF
|
|
classDef edge fill:#0c1428,stroke:#1F6FE0,color:#cfe2ff
|
|
classDef id fill:#145ED2,stroke:#4EA0FF,color:#fff
|
|
classDef os fill:#0c1428,stroke:#4EA0FF,color:#cfe2ff
|
|
classDef ai fill:#0c1428,stroke:#8EC2FF,color:#cfe2ff
|
|
classDef svc fill:#080c18,stroke:#1F6FE0,color:#9fb8e0
|
|
classDef fleet fill:#080c18,stroke:#1F6FE0,color:#9fb8e0
|
|
classDef site fill:#080c18,stroke:#145ED2,color:#9fb8e0
|
|
```
|
|
|
|
Full write-up → **[ARCHITECTURE.md](./ARCHITECTURE.md)** · every container & service → **[SERVICES.md](./SERVICES.md)** · the AI layer → **[docs/ai-stack.md](./docs/ai-stack.md)**
|
|
|
|
---
|
|
|
|
## 🧩 The app catalog
|
|
|
|
39 apps, live-verified (no dead tiles), grouped into a categorized launcher:
|
|
|
|
| Group | Apps |
|
|
|---|---|
|
|
| **Cockpit** | Today · Money · Inbox · Pipeline · Fleet · Control |
|
|
| **Identity** | Authentik SSO · Vaultwarden |
|
|
| **AI** | Atlas Chat (Open WebUI) · AI Gateway · Mindmap · Leeragent |
|
|
| **Work** | Odoo 19 · CFO · Bank (Firefly) · Paperless · Office · Calendar |
|
|
| **Files & Comms** | Nextcloud · Mail Admin (Stalwart) · Relay |
|
|
| **Ops** | Git (Forgejo) · n8n · Uptime Kuma · MeshCentral · Command · **Remote Desktop** · Architecture |
|
|
| **Sites** | AtlasWorks · Atlas Corp · Agency · **Academy** · AtlasPOS · Hub + client sites |
|
|
|
|
> **Remote Desktop** is a genuine Ubuntu XFCE desktop in the browser (Webtop) with Claude Code + Chromium pre-installed — boot Claude or any app, on a sovereign desktop. → [docs/remote-desktop.md](./docs/remote-desktop.md)
|
|
|
|
---
|
|
|
|
## 🛰️ Fleet, mesh & sovereignty
|
|
|
|
- **MeshCentral** — remote management of every client POS terminal and device.
|
|
- **Tailscale** — the private spine; internal services (`tailscale serve`) never touch the public internet.
|
|
- **NATS mesh** — node-to-node messaging across the Atlas estate (round-trip proven).
|
|
- **EU-sovereign** — Hetzner (NL/DE), no US Cloud Act exposure, MFA, nightly backups. → [docs/security.md](./docs/security.md)
|
|
|
|
---
|
|
|
|
## 🎓 Atlas Academy
|
|
|
|
[atlasacademy.nl](https://atlasacademy.nl) — the training arm. BiSL, startup, AI and ESF-funded tracks, coaching and a course catalog, with leads relayed straight into Odoo CRM. Part of the same one-identity estate; surfaced as a desktop app.
|
|
|
|
## 🕌 Atlas Islamic layer
|
|
|
|
A personal-sovereignty layer for the operator: Adhan at El Feth (Tilburg) salah times, Qur'an at logon, AdGuard Family DNS + content filtering, and sunnah reminders — proof that "sovereign" includes values, not just data residency.
|
|
|
|
---
|
|
|
|
## 🚀 Deploy your own
|
|
|
|
```bash
|
|
git clone https://git.atlascorporation.nl/chaib/atlas-os.git
|
|
cd atlas-os
|
|
sudo bash deploy/install.sh # Debian/Ubuntu, Docker + Caddy
|
|
```
|
|
|
|
Bring your own domain; point it at the box; Caddy issues certs and Authentik gates everything. Core stack compose lives in [`deploy/compose/atlas-core.yml`](./deploy/compose/atlas-core.yml). Full guide → **[docs/deployment.md](./docs/deployment.md)**.
|
|
|
|
---
|
|
|
|
## 📚 Docs & wiki
|
|
|
|
| | |
|
|
|---|---|
|
|
| [ARCHITECTURE.md](./ARCHITECTURE.md) | One-box philosophy, topology, data flows |
|
|
| [SERVICES.md](./SERVICES.md) | All 55 containers + systemd services |
|
|
| [docs/ai-stack.md](./docs/ai-stack.md) | The Mind, the Brain, the LLM router |
|
|
| [docs/remote-desktop.md](./docs/remote-desktop.md) | Webtop desktop + Claude inside |
|
|
| [docs/security.md](./docs/security.md) | SSO gate, sovereignty, secrets model |
|
|
| [docs/deployment.md](./docs/deployment.md) | Stand up the whole stack |
|
|
| **[Wiki ↗](https://git.atlascorporation.nl/chaib/atlas-os/wiki)** | Browsable, page-per-topic |
|
|
|
|
---
|
|
|
|
<div align="center">
|
|
|
|
**Built by [Chaib Aarab](https://atlascorporation.nl) — Atlas Corporation, Tilburg NL**
|
|
Built incrementally, on the go, while running real client projects. The architecture emerged from constraints, not slides.
|
|
|
|
<sub>MIT licensed · EU-sovereign · one login for all of it</sub>
|
|
|
|
</div>
|