diff --git a/Home.md b/Home.md index 14b554e..f1e0354 100644 --- a/Home.md +++ b/Home.md @@ -1,63 +1,26 @@ -# Atlas OS +# Atlas OS Wiki -**One login. One sovereign machine. 39 apps in your browser.** +Your entire business on one hardened Linux server — one SSO identity, one browser login, one OS. -Atlas OS is a browser-based desktop for running an entire company from a single, EU-sovereign server. No US Cloud Act exposure, no scattered SaaS logins — every tool lives behind one identity at **command.atlascorporation.nl/os/**, fronted by Caddy (TLS) with Authentik single sign-on. +![Atlas OS](https://git.atlascorporation.nl/chaib/atlas-os/raw/branch/main/assets/header.svg) -It runs on **one Hetzner VPS** (NL/DE), hosting roughly **55 Docker containers** and **~24 public services**. Behind the desktop sits an autonomous AI core — the Atlas Brain — gated so that money, external comms, and self-modification always require a human to approve. +## Browse + +- **[Architecture](Architecture)** — the one-box design, network topology, SSO path +- **[Services](Services)** — full catalog of 55 containers and 39 apps +- **[AI-Stack](AI-Stack)** — local → free cloud → paid routing +- **[Deploy](Deploy)** — one-command install on a fresh server +- **[Academy](Academy)** — atlasacademy.nl + Odoo lead relay +- **[Islamic-Layer](Islamic-Layer)** — Adhan, Quran at logon, family-safe DNS +- **[Security](Security)** — the trust model + +## The desktop + +![Desktop](https://git.atlascorporation.nl/chaib/atlas-os/raw/branch/main/assets/desktop-preview.svg) + +## Architecture at a glance + +![Architecture](https://git.atlascorporation.nl/chaib/atlas-os/raw/branch/main/assets/architecture.svg) --- - -## What it is - -| | | -|---|---| -| **Access** | Browser desktop at `command.atlascorporation.nl/os/` | -| **Apps** | 39, grouped into Cockpit, Identity, AI, Work, Files & Comms, Ops, and Sites | -| **Identity** | Authentik SSO (forward_auth on the embedded outpost); admin: `atlasshb` | -| **Hosting** | Single Hetzner VPS, EU-sovereign (NL/DE) — no US Cloud Act reach | -| **Edge** | Caddy reverse proxy with automatic TLS | -| **Private spine** | Tailscale + NATS mesh; internal services never exposed publicly | -| **AI core** | Atlas Brain (reviewed-execution) on a `kernel.sqlite` decision spine | - ---- - -## Map of the wiki - -| Page | What's inside | -|---|---| -| [[Architecture]] | The single-VPS topology — Docker, Caddy, Authentik, how a request flows from browser to service | -| [[App-Catalog]] | All 39 apps by category, what each one is, and where it lives | -| [[AI-Stack]] | Atlas Brain, the `kernel.sqlite` spine, the policy gate, and the cheapest-model-first LLM router | -| [[Fleet-and-Mesh]] | MeshCentral device management, the Tailscale spine, and the NATS node-to-node mesh | -| [[Remote-Desktop]] | The Webtop XFCE desktop with Claude Code + Chromium, behind Authentik SSO | -| [[Academy]] | Atlas Academy — BiSL, startup, AI and ESF-funded tracks, coaching, and Odoo lead relay | -| [[Security]] | EU-sovereign hosting, MFA, nightly backups, and where secrets actually live | -| [[Deploy]] | How changes ship to the box | - ---- - -## How it fits together - -```mermaid -%%{init:{'theme':'base','themeVariables':{'primaryColor':'#0c1428','primaryTextColor':'#cfe2ff','primaryBorderColor':'#1F6FE0','lineColor':'#4EA0FF'}}}%% -flowchart TD - U([Browser]) --> C[Caddy + TLS] - C --> A[Authentik SSO] - A --> OS[Atlas OS desktop
39 apps] - OS --> AI[AI stack
Brain + router] - OS --> WK[Work + Files
Odoo, Firefly, Nextcloud] - OS --> OPS[Ops
Forgejo, n8n, MeshCentral] - AI --> K[(kernel.sqlite)] - OPS -. private spine .-> MESH[Tailscale + NATS] -``` - ---- - -## Start here - -- New to the system? Read [[Architecture]] first, then browse the [[App-Catalog]]. -- Curious about the autonomous core and how cost is controlled? Go to [[AI-Stack]]. -- Need to ship a change? See [[Deploy]]. - -> **Principle:** sovereign by default, approved by a human where it matters. EU hosting, one identity, and a policy gate that never lets the Brain move money or talk to the outside world on its own. +Repo: [chaib/atlas-os](https://git.atlascorporation.nl/chaib/atlas-os) · Built by Chaib Aarab · Atlas Corporation, Tilburg NL