chaib/atlas-os
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

wiki: update Home

chaib 2026-06-22 20:29:12 +00:00
parent 43da932a67
commit 6919f57d58
1 changed files with 21 additions and 58 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

79
Home.md

@ -1,63 +1,26 @@
# Atlas OS
# Atlas OS Wiki
**One login. One sovereign machine. 39 apps in your browser.**
Your entire business on one hardened Linux server — one SSO identity, one browser login, one OS.
Atlas OS is a browser-based desktop for running an entire company from a single, EU-sovereign server. No US Cloud Act exposure, no scattered SaaS logins — every tool lives behind one identity at **command.atlascorporation.nl/os/**, fronted by Caddy (TLS) with Authentik single sign-on.
![Atlas OS](https://git.atlascorporation.nl/chaib/atlas-os/raw/branch/main/assets/header.svg)
It runs on **one Hetzner VPS** (NL/DE), hosting roughly **55 Docker containers** and **~24 public services**. Behind the desktop sits an autonomous AI core — the Atlas Brain — gated so that money, external comms, and self-modification always require a human to approve.
## Browse
- **[Architecture](Architecture)** — the one-box design, network topology, SSO path
- **[Services](Services)** — full catalog of 55 containers and 39 apps
- **[AI-Stack](AI-Stack)** — local → free cloud → paid routing
- **[Deploy](Deploy)** — one-command install on a fresh server
- **[Academy](Academy)** — atlasacademy.nl + Odoo lead relay
- **[Islamic-Layer](Islamic-Layer)** — Adhan, Quran at logon, family-safe DNS
- **[Security](Security)** — the trust model
## The desktop
![Desktop](https://git.atlascorporation.nl/chaib/atlas-os/raw/branch/main/assets/desktop-preview.svg)
## Architecture at a glance
![Architecture](https://git.atlascorporation.nl/chaib/atlas-os/raw/branch/main/assets/architecture.svg)
---
## What it is
| | |
|---|---|
| **Access** | Browser desktop at `command.atlascorporation.nl/os/` |
| **Apps** | 39, grouped into Cockpit, Identity, AI, Work, Files & Comms, Ops, and Sites |
| **Identity** | Authentik SSO (forward_auth on the embedded outpost); admin: `atlasshb` |
| **Hosting** | Single Hetzner VPS, EU-sovereign (NL/DE) — no US Cloud Act reach |
| **Edge** | Caddy reverse proxy with automatic TLS |
| **Private spine** | Tailscale + NATS mesh; internal services never exposed publicly |
| **AI core** | Atlas Brain (reviewed-execution) on a `kernel.sqlite` decision spine |
---
## Map of the wiki
| Page | What's inside |
|---|---|
| [[Architecture]] | The single-VPS topology — Docker, Caddy, Authentik, how a request flows from browser to service |
| [[App-Catalog]] | All 39 apps by category, what each one is, and where it lives |
| [[AI-Stack]] | Atlas Brain, the `kernel.sqlite` spine, the policy gate, and the cheapest-model-first LLM router |
| [[Fleet-and-Mesh]] | MeshCentral device management, the Tailscale spine, and the NATS node-to-node mesh |
| [[Remote-Desktop]] | The Webtop XFCE desktop with Claude Code + Chromium, behind Authentik SSO |
| [[Academy]] | Atlas Academy — BiSL, startup, AI and ESF-funded tracks, coaching, and Odoo lead relay |
| [[Security]] | EU-sovereign hosting, MFA, nightly backups, and where secrets actually live |
| [[Deploy]] | How changes ship to the box |
---
## How it fits together
```mermaid
%%{init:{'theme':'base','themeVariables':{'primaryColor':'#0c1428','primaryTextColor':'#cfe2ff','primaryBorderColor':'#1F6FE0','lineColor':'#4EA0FF'}}}%%
flowchart TD
U([Browser]) --> C[Caddy + TLS]
C --> A[Authentik SSO]
A --> OS[Atlas OS desktop<br/>39 apps]
OS --> AI[AI stack<br/>Brain + router]
OS --> WK[Work + Files<br/>Odoo, Firefly, Nextcloud]
OS --> OPS[Ops<br/>Forgejo, n8n, MeshCentral]
AI --> K[(kernel.sqlite)]
OPS -. private spine .-> MESH[Tailscale + NATS]
```
---
## Start here
- New to the system? Read [[Architecture]] first, then browse the [[App-Catalog]].
- Curious about the autonomous core and how cost is controlled? Go to [[AI-Stack]].
- Need to ship a change? See [[Deploy]].
> **Principle:** sovereign by default, approved by a human where it matters. EU hosting, one identity, and a policy gate that never lets the Brain move money or talk to the outside world on its own.
Repo: [chaib/atlas-os](https://git.atlascorporation.nl/chaib/atlas-os) · Built by Chaib Aarab · Atlas Corporation, Tilburg NL