atlas-os/README.md

274 lines
10 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<div align="center">
![Atlas OS](./assets/header.svg)
# Atlas OS
[![Trial](https://img.shields.io/badge/free_trial-40_days-4ec98a?style=flat-square&logo=checkmarx&logoColor=white)](https://atlascorporation.nl)
[![Price](https://img.shields.io/badge/from-%E2%82%AC25%2Fmo-4a9fe2?style=flat-square&logo=stripe&logoColor=white)](./PRICING.md)
[![Apps](https://img.shields.io/badge/39_apps-all_included-4a9fe2?style=flat-square&logo=windowsterminal&logoColor=white)](./SERVICES.md)
[![Academy](https://img.shields.io/badge/Academy-3_months_free-9b8cf0?style=flat-square&logo=academia&logoColor=white)](./docs/academy.md)
[![Stack](https://img.shields.io/badge/stack-Caddy_%C2%B7_Authentik_%C2%B7_Docker-1c4fae?style=flat-square&logo=cloudflare&logoColor=white)](./ARCHITECTURE.md)
**Your entire business stack. One server. One login. €25/month.**
[🚀 Start 40-day free trial](https://atlascorporation.nl) · [💰 Pricing](./PRICING.md) · [🏢 For SMEs](./docs/for-smes.md) · [🛠 Self-host](./deploy/)
</div>
---
> **Replace Microsoft 365, HubSpot, Notion, Dropbox, and n8n — with one €25/month subscription.**
> 39 apps. One SSO login. Your data stays in the EU. No lock-in.
>
> **[→ Start free for 40 days at atlascorporation.nl](https://atlascorporation.nl)**
> No credit card required. Full access from day one. 3 months Atlas Academy included.
---
## 💰 Become a member
| Plan | Price | Users | Free trial | Academy |
|------|-------|-------|------------|---------|
| **Solo** | **€25 /mo** | 1 | 40 days | 3 months |
| **Team** | **€75 /mo** | up to 5 | 40 days | 6 months (team) |
| **Business** | **€199 /mo** | up to 25 | 40 days | 12 months |
| **White-label** | **€499 /mo** | unlimited | 40 days | unlimited |
| Self-host | free | — | — | — |
**[→ Full pricing, add-ons, and FAQ](./PRICING.md)**
### Included in every paid plan
```
✅ 39 production apps (CRM, finance, files, mail, AI, automation, git, ...)
✅ One SSO identity — sign in once, everything opens
✅ AI workspace (local models + Claude + Groq, unified gateway)
✅ Atlas Academy courses (Odoo, AI, Digital Sovereignty, BiSL, Startup Sprint)
✅ Hosted in the EU · GDPR/AVG compliant · encrypted backups
✅ Cancel anytime — export all data, no lock-in
```
---
## Who is this for?
### 🧑‍💻 Solo founders & freelancers
Replace your patchwork of SaaS tools with one dashboard. CRM, invoicing, files, email, and an AI assistant — all in one login. **€25/month covers everything.**
### 🎓 Students
€10/month with student ID. Real Odoo instance, Nextcloud drive, Git server, and Atlas Academy — tools you will actually use on the job.
Email **info@atlascorporation.nl** with `.edu` or student ID.
### 🏢 SMEs (525 people)
Stop paying €500+/month per 10 employees for fragmented tools. Atlas OS Business gives your team one sovereign workspace. **[See the SME ROI breakdown →](./docs/for-smes.md)**
### 🔧 Developers & sysadmins
Clone and self-host in ~30 minutes on any Debian server. Everything is Docker Compose + Caddy + open source. **[Deploy guide →](./deploy/)**
---
## What is Atlas OS?
Atlas OS is a self-hosted business operating system running on a single Linux server. One [Authentik](https://goauthentik.io) SSO identity unlocks **39 services** spanning CRM, finance, communications, AI, fleet management, document storage, and a full Linux remote desktop — all served behind [Caddy](https://caddyserver.com) with automatic HTTPS.
> Think of it as a Citrix-style workspace — but your server, your identity, your data.
<div align="center">
![Atlas OS desktop](./assets/desktop-preview.svg)
<sub>The Atlas OS desktop — categorized launcher, live cockpit panels.</sub>
</div>
---
## 📸 Screenshots
<div align="center">
| Desktop OS | Platform Overview | Workspace |
|:---:|:---:|:---:|
| [![Desktop](./assets/screenshots/hero.png)](./assets/screenshots/hero.png) | [![Platform](./assets/screenshots/platform.png)](./assets/screenshots/platform.png) | [![Workspace](./assets/screenshots/workspace.png)](./assets/screenshots/workspace.png) |
| *Space-themed launcher* | *39 services, one login* | *Cockpit + AI workspace* |
</div>
---
## 💡 Why Atlas OS?
> **Stop paying €500+/month for tools that don't talk to each other.**
| Tool | Atlas OS replaces |
|------|-----------------|
| Microsoft 365 (€12.50/user/mo) | Nextcloud + OnlyOffice + Stalwart Mail |
| HubSpot Starter (€45/mo) | Odoo CRM + n8n automations |
| Notion (€10/user/mo) | Nextcloud Notes + Forgejo wiki + Paperless DMS |
| Dropbox Business (€15/user/mo) | Nextcloud (EU, your server) |
| Zapier Starter (€20/mo) | n8n (self-hosted, unlimited flows) |
| 1Password (€7/user/mo) | Vaultwarden (self-hosted) |
| ChatGPT Team (€25/user/mo) | Atlas Chat + AI Gateway (local + cloud fallback) |
| Uptime Robot Pro (€6/mo) | Uptime Kuma (self-hosted) |
| **Total SaaS** | **~€140+/mo (1 user)** |
| **Atlas OS Solo** | **€25/mo — all included** |
---
## 🖥️ The Desktop
Open `https://command.YOUR_DOMAIN/os/` on any device. Space-themed boot screen → Authentik SSO login → live desktop with real data: categorized launcher (Cockpit · Identity · AI · Work · Files · Ops · Sites), drag-and-drop windows, cockpit panels that auto-refresh.
**Remote Linux desktop** (tailnet-only): real XFCE desktop in the browser with Claude Code and Chromium pre-installed.
---
## 🏗️ Architecture
One box. Caddy is the sole public entry point. Every service passes through Authentik `forward_auth`. Root-level access is Tailscale-only.
```mermaid
graph LR
subgraph Internet
U([User Browser])
end
subgraph server["Your Server"]
C[Caddy TLS] -->|forward_auth| A[Authentik SSO]
A -->|verified| OS[Atlas OS Desktop]
A -->|verified| OD[Odoo ERP]
A -->|verified| NC[Nextcloud]
A -->|verified| AI[AI Gateway]
A -->|verified| FG[Forgejo Git]
subgraph AIStack["AI Stack"]
AI --> OL[Ollama Local]
AI --> GR[Groq / Cerebras]
AI --> CL[Claude API]
AB[Atlas Brain] -->|15min| AI
end
end
U -->|HTTPS| C
```
Full detail in [ARCHITECTURE.md](./ARCHITECTURE.md).
---
## 📦 Service Catalog (39 apps)
### 🎯 Cockpit
Today (AI daily brief) · Money (bank PSD2) · Inbox · Pipeline (CRM) · Fleet (devices) · Control (AI limits)
### 🛡️ Identity
Authentik SSO `auth.YOUR_DOMAIN` · Vaultwarden `vault.YOUR_DOMAIN`
### 🤖 AI
Atlas Chat (Open-WebUI) · AI Gateway (LiteLLM) · Mindmap · Leeragent
See full AI routing (local → free cloud → paid) in [docs/ai-stack.md](./docs/ai-stack.md).
### 💼 Work
Odoo 19 ERP/CRM · Firefly III · Enable Banking PSD2 · Paperless-ngx · OnlyOffice · Nextcloud Calendar
### 📁 Files & Comms
Nextcloud · Stalwart Mail (SMTP/IMAP) · Message relay
### ⚙️ Ops
Forgejo Git · n8n automation · Uptime Kuma · MeshCentral · Command dashboard · Webtop remote desktop (tailnet-only)
### 🎓 Academy
Education arm: courses, coaching, ESF/BiSL/startup/AI curriculum. Free for 312 months depending on plan. See [docs/academy.md](./docs/academy.md).
> 📖 **[Digitale Soevereiniteit voor Ondernemers](https://atlasacademy.nl)** — 8 lessons: sovereign cloud → your first server → Docker + Caddy → SSO → AI → Atlas OS dashboard.
### 🕌 Islamic Layer
Family-safe DNS, Quran at logon, Adhan + screen lock at salah times, sunnah reminders. See [docs/islamic-layer.md](./docs/islamic-layer.md).
---
## 🤖 AI Stack
Four-tier routing — zero-cost local first, paid cloud only when needed.
| Tier | Model | Use |
|------|-------|-----|
| 0 — Local GPU | Ollama (LLaMA, Qwen, Hermes) | Copy, summaries, classification |
| 1 — Free Cloud | Groq 70B · Cerebras · Gemini 1M | Reasoning, bulk, vision |
| 2 — Paid | Claude Haiku / Sonnet / Opus | Code, planning, architecture |
Always-on: `atlas-brain` (15-min cycle) · `atlas-loop` (NATS nudges) · `atlas-meridian` (autonomous decisions) · Langfuse (LLM tracing)
Full stack: [docs/ai-stack.md](./docs/ai-stack.md)
---
## 🚀 Quick Deploy (self-host)
```bash
git clone https://git.atlascorporation.nl/chaib/atlas-os
cd atlas-os
chmod +x deploy/install.sh
sudo ./deploy/install.sh --domain yourdomain.com --email admin@yourdomain.com
```
Requires: Debian 12 · 4 vCPU / 8 GB RAM · domain pointing to server.
Full guide: [deploy/README.md](./deploy/README.md) · Prefer managed? [→ Managed workspace](./docs/managed-workspace.md)
---
## 📁 Repository Structure
```
atlas-os/
├── assets/ Animated header, desktop preview, architecture SVGs
├── web/os/index.html The browser OS desktop (production copy)
├── server/ Python services (atlas_brain, meridian, ...)
├── deploy/
│ ├── install.sh One-command installer
│ ├── compose/ atlas-core.yml, atlas-ai.yml
│ └── caddy/ Caddyfile.template
├── docs/ ai-stack · academy · for-smes · security · managed-workspace
├── PRICING.md Tiers, comparison, FAQ
├── ARCHITECTURE.md
├── SERVICES.md
└── CHANGELOG.md
```
---
## 🔒 Security Model
| Layer | Implementation |
|-------|---------------|
| Identity | Authentik SSO — single source of truth |
| TLS | Caddy automatic HTTPS on every endpoint |
| Network | Public services behind SSO · internal on Tailscale only |
| Secrets | Vaultwarden · age-encrypted vault · chmod 600 on disk |
| Remote desktop | Webtop tailnet-only — never public |
| Backups | Automated: Forgejo, Nextcloud, Authentik |
Full model: [docs/security.md](./docs/security.md)
---
## 🛠️ Tech Stack
[Caddy](https://caddyserver.com) · [Authentik](https://goauthentik.io) · Docker Compose · [Tailscale](https://tailscale.com) · [NATS](https://nats.io) · [Odoo 19](https://odoo.com) · [Nextcloud](https://nextcloud.com) · [Firefly III](https://firefly-iii.org) · [Stalwart](https://stalw.art) · [Forgejo](https://forgejo.org) · [n8n](https://n8n.io) · [Vaultwarden](https://github.com/dani-garcia/vaultwarden) · [LiteLLM](https://litellm.ai) · [Open-WebUI](https://openwebui.com) · [Langfuse](https://langfuse.com) · [MeshCentral](https://meshcentral.com) · [Uptime Kuma](https://uptime.kuma.pet) · [Ollama](https://ollama.com)
---
<div align="center">
**Ready to replace your SaaS stack?**
**[🚀 Start free for 40 days → atlascorporation.nl](https://atlascorporation.nl)**
*No credit card. No lock-in. 3 months Academy included.*
---
Built with obsession by **Chaib Aarab** · Atlas Corporation · Tilburg, NL
</div>