Merge branch 'develop'

Author: d4v3-rm

CHANGELOG.md

@@ -3,12 +3,23 @@
 Generated by `npm run set:version`.
 The local changelog is rebuilt from the available `v*` release tags and the current `HEAD` range.
 The script does not create tags locally.
-## v1.0.1 - 2026-04-30
+## v1.1.0 - 2026-05-02
 
 - Release source: local versioning run
+- Base ref: `v1.0.1`
+- Range: `v1.0.1..HEAD`
+- Included commits: 1
+
+### Features (1)
+
+- [core] add drawDB service (`64690b5`)
+
+## v1.0.1 - 2026-05-01
+
+- Release tag: `v1.0.1`
 - Base ref: `v0.51.0`
-- Range: `v0.51.0..HEAD`
-- Included commits: 4
+- Range: `v0.51.0..v1.0.1`
+- Included commits: 5
 
 ### Features (1)
 
@@ -22,9 +33,10 @@ The script does not create tags locally.
 
 - [readme] add index and service tags (`5dc5132`)
 
-### CI / Maintenance (1)
+### CI / Maintenance (2)
 
 - [release] v0.52.0 (`ee2ffa1`)
+- [release] v1.0.1 (`fd0b161`)
 
 ## v0.51.0 - 2026-04-29
 

README.md

@@ -1,6 +1,6 @@
 # Atlas Lab
 
-![Version](https://img.shields.io/badge/version-1.0.1-blue.svg)
+![Version](https://img.shields.io/badge/version-1.1.0-blue.svg)
 ![License](https://img.shields.io/badge/license-MIT-22c55e.svg)
 ![Docker Compose](https://img.shields.io/badge/Docker%20Compose-v2-2496ED?logo=docker&logoColor=white)
 ![Gateway](https://img.shields.io/badge/Gateway-Caddy-1F2937?logo=caddy&logoColor=white)
@@ -12,7 +12,7 @@
 
 Atlas Lab is a localhost-first self-hosted platform made of a Node.js/TypeScript CLI, a layered Docker Compose stack, and an operational React dashboard served by Caddy.
 
-It provides a core collaboration layer with GitLab CE, BookStack, and Penpot, plus optional AI and development layers. Everything is reachable through dedicated HTTPS ports on `localhost`, with persistent state stored in Docker volumes.
+It provides a core collaboration layer with GitLab CE, drawDB, BookStack, and Penpot, plus optional AI and development layers. Everything is reachable through dedicated HTTPS ports on `localhost`, with persistent state stored in Docker volumes.
 
 ---
 
@@ -43,7 +43,7 @@ It provides a core collaboration layer with GitLab CE, BookStack, and Penpot, pl
 
 ### What It Gives You
 
-- Always-on core layer with Atlas Dashboard, GitLab CE, BookStack, and Penpot.
+- Always-on core layer with Atlas Dashboard, GitLab CE, drawDB, BookStack, and Penpot.
 - Optional AI LLM layer with Open WebUI, Ollama, and n8n.
 - Optional workbench layer with browser-based Node and Python environments plus shared PostgreSQL.
 - HTTPS-only browser ingress on `localhost`.
@@ -66,7 +66,7 @@ Atlas Lab is split into three explicit layers.
 
 | Layer | Status | Includes | Purpose |
 | --- | --- | --- | --- |
-| `core` | always on | gateway, Atlas Dashboard, GitLab CE, BookStack, Penpot, and backing data services | baseline self-hosted platform |
+| `core` | always on | gateway, Atlas Dashboard, GitLab CE, drawDB, BookStack, Penpot, and backing data services | baseline self-hosted platform |
 | `ai-llm` | optional | Open WebUI, Ollama, n8n, AI gateway | local AI workflows and automation |
 | `workbench` | optional | Node Forge, Python Grid, shared PostgreSQL, workbench gateway | browser-based development |
 
@@ -98,6 +98,7 @@ All browser entry points are exposed over HTTPS on `localhost`.
 | --- | --- | --- | --- |
 | Atlas Dashboard | `core` | `https://localhost:8443/` | operational dashboard |
 | GitLab CE | `core` | `https://localhost:8444/` | repositories, issues, merge requests |
+| drawDB | `core` | `https://localhost:8445/` | database diagrams and SQL generation |
 | Open WebUI | `ai-llm` | `https://localhost:8446/` | only with `--with-ai-llm` |
 | Ollama | `ai-llm` | `https://localhost:8447/` | HTTPS API with gateway auth |
 | Penpot | `core` | `https://localhost:8448/` | collaborative design workspace |
@@ -120,7 +121,7 @@ Operational rules:
 | Network | Type | Purpose |
 | --- | --- | --- |
 | `edge-net` | exposed | published ingress ports |
-| `apps-net` | internal | GitLab CE, BookStack, and gateway-routed browser services |
+| `apps-net` | internal | GitLab CE, drawDB, BookStack, and gateway-routed browser services |
 | `bookstack-net` | internal | BookStack and its MariaDB database |
 | `penpot-net` | internal | Penpot application services |
 | `ai-llm-net` | internal | Open WebUI, Ollama, and n8n |
@@ -196,6 +197,7 @@ Ports that should be free:
 
 - `8443`
 - `8444`
+- `8445`
 - `8446`
 - `8447`
 - `8448`
@@ -215,10 +217,10 @@ The main runtime configuration lives in:
 
 Key variables include:
 
-- `LAB_HTTPS_PORT`, `GITLAB_HTTPS_PORT`, `PENPOT_HTTPS_PORT`, `BOOKSTACK_HTTPS_PORT`
+- `LAB_HTTPS_PORT`, `GITLAB_HTTPS_PORT`, `DRAWDB_HTTPS_PORT`, `PENPOT_HTTPS_PORT`, `BOOKSTACK_HTTPS_PORT`
 - `OPENWEBUI_HTTPS_PORT`, `OLLAMA_HTTPS_PORT`, `N8N_HTTPS_PORT`
 - `NODE_DEV_HTTPS_PORT`, `PYTHON_DEV_HTTPS_PORT`, `POSTGRES_DEV_HOST_PORT`
-- `GITLAB_EXTERNAL_URL`, `GITLAB_URL`
+- `GITLAB_EXTERNAL_URL`, `GITLAB_URL`, `DRAWDB_URL`
 - `GITLAB_ROOT_USERNAME`, `GITLAB_ROOT_PASSWORD`, `GITLAB_ROOT_EMAIL`
 - `BOOKSTACK_URL`, `BOOKSTACK_ROOT_EMAIL`, `BOOKSTACK_ROOT_PASSWORD`
 - `PENPOT_ROOT_EMAIL`, `PENPOT_ROOT_PASSWORD`
@@ -371,6 +373,7 @@ These credentials are intended for trusted local environments and are configurab
 | --- | --- | --- |
 | Atlas Dashboard | `https://localhost:8443/` | no dedicated login |
 | GitLab CE | `https://localhost:8444/` | `root / Qv7N4pL9xT2rB6Z8` |
+| drawDB | `https://localhost:8445/` | no dedicated login |
 | Open WebUI | `https://localhost:8446/` | `root@openwebui.local / RootOpenWebUI!2026` |
 | Ollama | `https://localhost:8447/` | gateway basic auth `root / RootOllama!2026` |
 | Penpot | `https://localhost:8448/` | `root@penpot.local / RootPenpot!2026` |
@@ -554,6 +557,10 @@ For stronger hardening:
 - Self-hosted user management: https://docs.n8n.io/hosting/configuration/user-management-self-hosted/
 - Docker install: https://docs.n8n.io/hosting/installation/docker/
 
+### drawDB
+
+- GitHub project and Docker build: https://github.com/drawdb-io/drawdb
+
 ### BookStack
 
 - Official documentation: https://www.bookstackapp.com/docs/

apps/atlas-dashboard/src/entities/dashboard/lib/dashboard-icon-map.tsx

@@ -25,6 +25,7 @@ export const dashboardIconMap: Record<DashboardIconKey, DashboardIconComponent>
   ai: ApiOutlined,
   book: ReadOutlined,
   certificate: SafetyCertificateOutlined,
+  schema: NodeIndexOutlined,
   forge: BranchesOutlined,
   host: GlobalOutlined,
   network: NodeIndexOutlined,

apps/atlas-dashboard/src/entities/dashboard/model/builders/dashboard-core.builder.ts

@@ -55,6 +55,29 @@ export function createCoreServices(
       title: t('dashboard.services.gitLab.title'),
       tone: 'core'
     },
+    {
+      action: {
+        href: config.services.drawDb.url,
+        label: t('dashboard.services.drawDb.action')
+      },
+      credentials: [
+        {
+          label: labels.endpoint,
+          value: config.services.drawDb.url
+        },
+        {
+          label: labels.accessMode,
+          value: t('values.directAppOnboarding')
+        }
+      ],
+      description: t('dashboard.services.drawDb.description'),
+      icon: 'schema',
+      id: 'drawdb',
+      note: t('dashboard.services.drawDb.note'),
+      status: t('values.schemaEditor'),
+      title: t('dashboard.services.drawDb.title'),
+      tone: 'core'
+    },
     {
       action: {
         href: config.services.bookStack.url,

apps/atlas-dashboard/src/entities/dashboard/model/dashboard-view-model.types.ts

@@ -4,6 +4,7 @@ export type DashboardIconKey =
   | 'ai'
   | 'book'
   | 'certificate'
+  | 'schema'
   | 'forge'
   | 'host'
   | 'network'

apps/atlas-dashboard/src/entities/network-map/model/create-network-graph-view-model.ts

@@ -90,6 +90,20 @@ export function createNetworkGraphViewModel(
       title: t('dashboard.services.bookStack.title'),
       tone: 'core'
     }),
+    createNode({
+      active: true,
+      description: t('dashboard.services.drawDb.description'),
+      id: 'drawdb',
+      kind: 'service',
+      labels: [
+        config.services.drawDb.url,
+        t('values.schemaEditor'),
+        t('networkMapDialog.labels.browser')
+      ],
+      position: [-62, -6, -18],
+      title: t('dashboard.services.drawDb.title'),
+      tone: 'core'
+    }),
     createNode({
       active: true,
       description: t('dashboard.services.penpot.description'),
@@ -240,6 +254,7 @@ export function createNetworkGraphViewModel(
     createLink('gateway', 'core-layer', 'core', true),
     createLink('core-layer', 'gitlab', 'core', true),
     createLink('core-layer', 'bookstack', 'core', true),
+    createLink('core-layer', 'drawdb', 'core', true),
     createLink('core-layer', 'penpot', 'core', true),
     createLink('gateway', 'ai-layer', 'ai', aiActive),
     createLink('ai-layer', 'open-webui', 'ai', aiActive),

apps/atlas-dashboard/src/entities/runtime-config/model/lab-runtime-config.schema.ts

@@ -28,6 +28,9 @@ export const labRuntimeConfigSchema = z.object({
   }),
   services: z.object({
     bookStack: namedAccountSchema,
+    drawDb: z.object({
+      url: nonEmptyString
+    }),
     gitLab: z.object({
       externalUrl: nonEmptyString,
       rootEmail: nonEmptyString,

apps/atlas-dashboard/src/locales/en.json

@@ -118,7 +118,7 @@
     "gatewayBody": "Single localhost ingress that publishes the dashboard and browser-facing services over HTTPS.",
     "deckTitle": "Atlas Deck",
     "deckBody": "Local command deck served through the same edge posture as the rest of the lab.",
-    "coreLayerBody": "Always-on operating layer for repository work, documentation, knowledge base publishing, and design collaboration.",
+    "coreLayerBody": "Always-on operating layer for repository work, schema modeling, documentation, knowledge base publishing, and design collaboration.",
     "aiLayerBody": "Optional AI layer with dedicated published routes for conversational UI, inference, and automation flows.",
     "workbenchLayerBody": "Optional workbench layer for browser workspaces and shared data access.",
     "hostAccessTitle": "Host Access",
@@ -198,13 +198,14 @@
     "protectedApi": "protected API",
     "collaborativeMarkdown": "collaborative markdown",
     "collaborativeNotes": "collaborative notes",
+    "schemaEditor": "database schema editor",
     "sharedDatabase": "shared database",
     "videoStudio": "video studio",
     "workflowControl": "workflow control",
     "alwaysOnForge": "always-on forge"
   },
   "dashboard": {
-    "coreLayerSummary": "GitLab CE, BookStack, and Penpot form the always-on core layer of the lab.",
+    "coreLayerSummary": "GitLab CE, drawDB, BookStack, and Penpot form the always-on core layer of the lab.",
     "accessNotes": {
       "aiDisabled": "The AI layer no longer starts by default: the deck marks it as optional instead of pretending that it is online.",
       "aiEnabled": "Open WebUI, Ollama, and n8n are online and reachable on the dedicated AI gateway ports.",
@@ -256,7 +257,7 @@
         "label": "segmentation"
       },
       "usage": {
-        "body": "GitLab CE, BookStack, and Penpot stay on as the core layer; the AI and workbench layers are enabled only when they are actually needed.",
+        "body": "GitLab CE, drawDB, BookStack, and Penpot stay on as the core layer; the AI and workbench layers are enabled only when they are actually needed.",
         "label": "usage"
       }
     },
@@ -315,6 +316,7 @@
     },
     "operatingCharter": {
       "ai": "The AI section groups Open WebUI, Ollama, and n8n into an optional dashboard layer.",
+      "drawDb": "drawDB stays in core for browser-based relational schema modeling and SQL generation.",
       "gitLab": "GitLab CE governs repositories, merge requests, issues, and Git collaboration for the project.",
       "workbench": "Code-server and Postgres stay in a workbench layer separated from the core."
     },
@@ -324,6 +326,12 @@
         "description": "Self-hosted GitLab CE for repositories, issues, merge requests, CI-ready project governance, and the lab's technical collaboration flow.",
         "title": "GitLab CE"
       },
+      "drawDb": {
+        "action": "Open drawDB",
+        "description": "Browser-based ERD editor for designing database schemas, importing or exporting SQL, and preparing migrations without a required account.",
+        "note": "drawDB stores projects in the browser through IndexedDB; the container serves the static app from the core gateway.",
+        "title": "drawDB"
+      },
       "bookStack": {
         "action": "Open BookStack",
         "description": "Self-hosted documentation library for structured books, chapters, pages, and internal knowledge publishing, with an initial admin aligned by the lab bootstrap.",

apps/atlas-dashboard/src/locales/it.json

@@ -118,7 +118,7 @@
     "gatewayBody": "Singolo ingresso localhost che pubblica dashboard e servizi browser tramite HTTPS.",
     "deckTitle": "Atlas Deck",
     "deckBody": "Control deck locale servito con la stessa postura edge del resto del lab.",
-    "coreLayerBody": "Layer operativo sempre attivo per repository, documentazione, pubblicazione knowledge base e collaborazione design.",
+    "coreLayerBody": "Layer operativo sempre attivo per repository, modellazione schema, documentazione, pubblicazione knowledge base e collaborazione design.",
     "aiLayerBody": "Layer AI opzionale con route dedicate per UI conversazionale, inference e flussi di automazione.",
     "workbenchLayerBody": "Layer workbench opzionale per workspace browser-based e accesso dati condivisi.",
     "hostAccessTitle": "Host Access",
@@ -198,13 +198,14 @@
     "protectedApi": "API protetta",
     "collaborativeMarkdown": "markdown collaborativo",
     "collaborativeNotes": "note collaborative",
+    "schemaEditor": "editor schema DB",
     "sharedDatabase": "database condiviso",
     "videoStudio": "studio video",
     "workflowControl": "controllo workflow",
     "alwaysOnForge": "forge sempre accesa"
   },
   "dashboard": {
-    "coreLayerSummary": "GitLab CE, BookStack e Penpot formano il layer core sempre acceso del lab.",
+    "coreLayerSummary": "GitLab CE, drawDB, BookStack e Penpot formano il layer core sempre acceso del lab.",
     "accessNotes": {
       "aiDisabled": "Il layer AI non viene piu acceso di default: il deck lo marca come opzionale invece di fingere che sia online.",
       "aiEnabled": "Open WebUI, Ollama e n8n sono online e raggiungibili sulle porte dedicate del gateway AI.",
@@ -256,7 +257,7 @@
         "label": "segmentazione"
       },
       "usage": {
-        "body": "GitLab CE, BookStack e Penpot restano sempre attivi nel layer core; i layer AI e workbench vengono abilitati solo quando servono davvero.",
+        "body": "GitLab CE, drawDB, BookStack e Penpot restano sempre attivi nel layer core; i layer AI e workbench vengono abilitati solo quando servono davvero.",
         "label": "uso"
       }
     },
@@ -316,6 +317,7 @@
     "operatingCharter": {
       "ai": "La sezione AI raccoglie Open WebUI, Ollama e n8n in un layer opzionale del dashboard.",
       "gitLab": "GitLab CE governa repository, merge request, issue e collaborazione Git del progetto.",
+      "drawDb": "drawDB resta nel core per modellare schema relazionali e generare SQL direttamente dal browser.",
       "workbench": "Code-server e Postgres restano in un layer workbench separato dal core."
     },
     "services": {
@@ -324,6 +326,12 @@
         "description": "GitLab CE self-hosted per repository, issue, merge request, governance progetto pronta per CI e collaborazione tecnica del lab.",
         "title": "GitLab CE"
       },
+      "drawDb": {
+        "action": "Apri drawDB",
+        "description": "Editor ERD browser-based per disegnare schemi database, importare o esportare SQL e preparare migrazioni senza account obbligatorio.",
+        "note": "drawDB conserva i progetti nel browser tramite IndexedDB; il container serve l applicazione statica dal gateway core.",
+        "title": "drawDB"
+      },
       "bookStack": {
         "action": "Apri BookStack",
         "description": "Libreria documentale self-hosted per libri, capitoli, pagine e pubblicazione interna della conoscenza, con admin iniziale allineato dal bootstrap del lab.",

config/gateway/templates/Caddyfile.template

@@ -58,6 +58,10 @@ https://${LAB_PUBLIC_HOST}:${GITLAB_HTTPS_PORT}, https://${LAB_GATEWAY_IP}:${GIT
   import gitlab_proxy
 }
 
+https://${LAB_PUBLIC_HOST}:${DRAWDB_HTTPS_PORT}, https://${LAB_GATEWAY_IP}:${DRAWDB_HTTPS_PORT} {
+  import service_proxy drawdb:80
+}
+
 https://${LAB_PUBLIC_HOST}:${PENPOT_HTTPS_PORT}, https://${LAB_GATEWAY_IP}:${PENPOT_HTTPS_PORT} {
   import service_proxy penpot-frontend:8080
 }