wiki: update Home
chaib
parent
43da932a67
commit
6919f57d58
1 changed files with 21 additions and 58 deletions
79
Home.md
79
Home.md
|
|
@ -1,63 +1,26 @@
|
||||||
# Atlas OS
|
# Atlas OS Wiki
|
||||||
|
|
||||||
**One login. One sovereign machine. 39 apps in your browser.**
|
Your entire business on one hardened Linux server — one SSO identity, one browser login, one OS.
|
||||||
|
|
||||||
Atlas OS is a browser-based desktop for running an entire company from a single, EU-sovereign server. No US Cloud Act exposure, no scattered SaaS logins — every tool lives behind one identity at **command.atlascorporation.nl/os/**, fronted by Caddy (TLS) with Authentik single sign-on.
|
|
||||||
|
|
||||||
It runs on **one Hetzner VPS** (NL/DE), hosting roughly **55 Docker containers** and **~24 public services**. Behind the desktop sits an autonomous AI core — the Atlas Brain — gated so that money, external comms, and self-modification always require a human to approve.
|
## Browse
|
||||||
|
|
||||||
|
- **[Architecture](Architecture)** — the one-box design, network topology, SSO path
|
||||||
|
- **[Services](Services)** — full catalog of 55 containers and 39 apps
|
||||||
|
- **[AI-Stack](AI-Stack)** — local → free cloud → paid routing
|
||||||
|
- **[Deploy](Deploy)** — one-command install on a fresh server
|
||||||
|
- **[Academy](Academy)** — atlasacademy.nl + Odoo lead relay
|
||||||
|
- **[Islamic-Layer](Islamic-Layer)** — Adhan, Quran at logon, family-safe DNS
|
||||||
|
- **[Security](Security)** — the trust model
|
||||||
|
|
||||||
|
## The desktop
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
## Architecture at a glance
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
---
|
---
|
||||||
|
Repo: [chaib/atlas-os](https://git.atlascorporation.nl/chaib/atlas-os) · Built by Chaib Aarab · Atlas Corporation, Tilburg NL
|
||||||
## What it is
|
|
||||||
|
|
||||||
| | |
|
|
||||||
|---|---|
|
|
||||||
| **Access** | Browser desktop at `command.atlascorporation.nl/os/` |
|
|
||||||
| **Apps** | 39, grouped into Cockpit, Identity, AI, Work, Files & Comms, Ops, and Sites |
|
|
||||||
| **Identity** | Authentik SSO (forward_auth on the embedded outpost); admin: `atlasshb` |
|
|
||||||
| **Hosting** | Single Hetzner VPS, EU-sovereign (NL/DE) — no US Cloud Act reach |
|
|
||||||
| **Edge** | Caddy reverse proxy with automatic TLS |
|
|
||||||
| **Private spine** | Tailscale + NATS mesh; internal services never exposed publicly |
|
|
||||||
| **AI core** | Atlas Brain (reviewed-execution) on a `kernel.sqlite` decision spine |
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Map of the wiki
|
|
||||||
|
|
||||||
| Page | What's inside |
|
|
||||||
|---|---|
|
|
||||||
| [[Architecture]] | The single-VPS topology — Docker, Caddy, Authentik, how a request flows from browser to service |
|
|
||||||
| [[App-Catalog]] | All 39 apps by category, what each one is, and where it lives |
|
|
||||||
| [[AI-Stack]] | Atlas Brain, the `kernel.sqlite` spine, the policy gate, and the cheapest-model-first LLM router |
|
|
||||||
| [[Fleet-and-Mesh]] | MeshCentral device management, the Tailscale spine, and the NATS node-to-node mesh |
|
|
||||||
| [[Remote-Desktop]] | The Webtop XFCE desktop with Claude Code + Chromium, behind Authentik SSO |
|
|
||||||
| [[Academy]] | Atlas Academy — BiSL, startup, AI and ESF-funded tracks, coaching, and Odoo lead relay |
|
|
||||||
| [[Security]] | EU-sovereign hosting, MFA, nightly backups, and where secrets actually live |
|
|
||||||
| [[Deploy]] | How changes ship to the box |
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## How it fits together
|
|
||||||
|
|
||||||
```mermaid
|
|
||||||
%%{init:{'theme':'base','themeVariables':{'primaryColor':'#0c1428','primaryTextColor':'#cfe2ff','primaryBorderColor':'#1F6FE0','lineColor':'#4EA0FF'}}}%%
|
|
||||||
flowchart TD
|
|
||||||
U([Browser]) --> C[Caddy + TLS]
|
|
||||||
C --> A[Authentik SSO]
|
|
||||||
A --> OS[Atlas OS desktop<br/>39 apps]
|
|
||||||
OS --> AI[AI stack<br/>Brain + router]
|
|
||||||
OS --> WK[Work + Files<br/>Odoo, Firefly, Nextcloud]
|
|
||||||
OS --> OPS[Ops<br/>Forgejo, n8n, MeshCentral]
|
|
||||||
AI --> K[(kernel.sqlite)]
|
|
||||||
OPS -. private spine .-> MESH[Tailscale + NATS]
|
|
||||||
```
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Start here
|
|
||||||
|
|
||||||
- New to the system? Read [[Architecture]] first, then browse the [[App-Catalog]].
|
|
||||||
- Curious about the autonomous core and how cost is controlled? Go to [[AI-Stack]].
|
|
||||||
- Need to ship a change? See [[Deploy]].
|
|
||||||
|
|
||||||
> **Principle:** sovereign by default, approved by a human where it matters. EU hosting, one identity, and a policy gate that never lets the Brain move money or talk to the outside world on its own.
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue