Merge branch 'develop'

Author: d4v3-rm

CHANGELOG.md

@@ -3,16 +3,57 @@
 Generated by `npm run set:version`.
 The local changelog is rebuilt from the available `v*` release tags and the current `HEAD` range.
 The script does not create tags locally.
-## v0.40.5 - 2026-04-16
+## v0.45.2 - 2026-04-19
 
 - Release source: local versioning run
+- Base ref: `v0.40.5`
+- Range: `v0.40.5..HEAD`
+- Included commits: 11
+
+### Features (5)
+
+- [ai-llm] add local n8n service and bootstrap (`00aa7e5`)
+- [atlas-dashboard] show n8n bootstrap access (`9fac427`)
+- [core] add bookstack and hedgedoc services (`79dc737`)
+- [cli] bootstrap bookstack and expand core checks (`4c4ad31`)
+- [atlas-dashboard] surface bookstack and hedgedoc (`27f8a78`)
+
+### Refactor (2)
+
+- [core] remove nextcloud aio stack (`deebdff`)
+- [atlas-dashboard] remove nextcloud aio card (`18d59c3`)
+
+### Documentation (3)
+
+- document local n8n access (`0120f7a`)
+- remove nextcloud aio references (`13ce184`)
+- [readme] align core services and bootstrap flow (`8915674`)
+
+### CI / Maintenance (1)
+
+- [release] v0.45.1 (`2978688`)
+
+## v0.40.5 - 2026-04-16
+
+- Release tag: `v0.40.5`
+- Base ref: `v0.38.0`
+- Range: `v0.38.0..v0.40.5`
+- Included commits: 0
+
+No relevant commits were detected for this release.
+
+## v0.38.0 - 2026-04-16
+
+- Release tag: `v0.38.0`
 - Base ref: `v0.36.4`
-- Range: `v0.36.4..HEAD`
-- Included commits: 13
+- Range: `v0.36.4..v0.38.0`
+- Included commits: 14
 
-### Features (2)
+### Features (4)
 
 - [atlas-dashboard] rename AI layer and add n8n card (`619c080`)
+- [atlas-dashboard] add Plane Penpot and Nextcloud AIO core cards (`1f7e6be`)
+- [core] add Plane Penpot and Nextcloud AIO services (`d370dc7`)
 - [core] bootstrap Plane and Penpot default admins (`676a690`)
 
 ### Fix (6)
@@ -24,11 +65,12 @@ The script does not create tags locally.
 - [runtime] harden startup bootstrap and image preparation (`dea735b`)
 - [ai-llm] avoid duplicate Ollama model sync (`ca3492d`)
 
-### CI / Maintenance (3)
+### CI / Maintenance (4)
 
 - [ollama] expand configured runtime model catalog (`f4e184f`)
 - [release] v0.37.2 (`132e3d2`)
 - [release] v0.38.0 (`b909006`)
+- [release] v0.40.5 (`5d5df3d`)
 
 ## v0.36.4 - 2026-04-11
 

README.md

@@ -1,6 +1,6 @@
 # Atlas Lab 🚀
 
-![Version](https://img.shields.io/badge/version-0.40.5-blue.svg)
+![Version](https://img.shields.io/badge/version-0.45.2-blue.svg)
 ![License](https://img.shields.io/badge/license-MIT-22c55e.svg)
 ![Docker Compose](https://img.shields.io/badge/Docker%20Compose-v2-2496ED?logo=docker&logoColor=white)
 ![Gateway](https://img.shields.io/badge/Gateway-Caddy-1F2937?logo=caddy&logoColor=white)
@@ -11,7 +11,7 @@
 ![Persistence](https://img.shields.io/badge/Persistence-Docker%20Volumes-CA8A04)
 
 > 🧭 **Atlas Lab** is a localhost-first self-hosted platform made of a Node.js/TypeScript CLI, a layered Docker Compose stack, and an operational React dashboard served by the gateway.
-> It is designed to provide Git hosting, optional local AI services with Open WebUI, Ollama, and n8n, browser-based development workbenches, and structured image/volume backup workflows on a single machine.
+> It is designed to provide Git hosting, project and design collaboration, internal documentation, collaborative markdown notes, optional local AI services with Open WebUI, Ollama, and n8n, browser-based development workbenches, and structured image/volume backup workflows on a single machine.
 
 ---
 
@@ -21,7 +21,7 @@ Atlas Lab is built for a practical goal: run a repeatable local engineering plat
 
 ### What it gives you
 
-- 🧱 An always-on **core layer** with Gitea, the gateway, and Atlas Dashboard
+- 🧱 An always-on **core layer** with Atlas Dashboard, Gitea, Plane, Penpot, BookStack, and HedgeDoc
 - 🧠 An optional **AI LLM layer** with Open WebUI, Ollama, and n8n
 - 🛠️ An optional **workbench layer** with browser-based Node and Python environments plus shared PostgreSQL
 - 🔐 HTTPS-only ingress on `localhost`
@@ -66,7 +66,7 @@ Atlas Lab is split into **three explicit layers**:
 
 | Layer | Status | Includes | Purpose |
 | --- | --- | --- | --- |
-| `core` | always on | gateway, Atlas Dashboard, Gitea, Gitea DB | baseline platform |
+| `core` | always on | gateway, Atlas Dashboard, Gitea, Plane, Penpot, BookStack, HedgeDoc, and their backing data services | baseline platform |
 | `ai-llm` | optional | Open WebUI, Ollama, n8n, AI gateway | local AI workflows and automation |
 | `workbench` | optional | Node Forge, Python Grid, shared PostgreSQL, workbench gateway | browser-based development |
 
@@ -95,9 +95,11 @@ The CLI:
 - runs host preflight checks
 - reconciles runtime state
 - bootstraps Gitea
+- bootstraps the initial BookStack admin
+- aligns the Plane instance admin
+- aligns the Penpot root profile
 - aligns the n8n owner bootstrap account when the AI LLM layer is enabled
 - reconciles Ollama only when the AI LLM layer is enabled
-- cleans up legacy runtime artifacts
 
 ---
 
@@ -110,11 +112,15 @@ The only host-level TCP service exposed directly is PostgreSQL from the workbenc
 | --- | --- | --- | --- |
 | Atlas Dashboard | `core` | `https://localhost:8443/` | operational dashboard |
 | Gitea | `core` | `https://localhost:8444/` | Git forge, issues, reviews |
+| Plane | `core` | `https://localhost:8445/` | project planning and issue tracking |
 | Open WebUI | `ai-llm` | `https://localhost:8446/` | only with `--with-ai-llm` |
 | Ollama | `ai-llm` | `https://localhost:8447/` | HTTPS API |
-| n8n | `ai-llm` | `https://localhost:8453/` | workflow automation and agent orchestration |
+| Penpot | `core` | `https://localhost:8448/` | collaborative design workspace |
+| BookStack | `core` | `https://localhost:8449/` | internal wiki and knowledge base |
 | Node Forge | `workbench` | `https://localhost:8450/` | Node / TypeScript workspace |
 | Python Grid | `workbench` | `https://localhost:8451/` | Python workspace |
+| HedgeDoc | `core` | `https://localhost:8452/` | collaborative markdown notes |
+| n8n | `ai-llm` | `https://localhost:8453/` | workflow automation and agent orchestration |
 | PostgreSQL | `workbench` | `localhost:15432` | host-side desktop access |
 
 ### Operational rules
@@ -130,7 +136,7 @@ The only host-level TCP service exposed directly is PostgreSQL from the workbenc
 | Network | Type | Purpose |
 | --- | --- | --- |
 | `edge-net` | exposed | published ingress ports |
-| `apps-net` | internal | Gitea and shared browser-facing services |
+| `apps-net` | internal | Gitea, BookStack, HedgeDoc, and shared browser-facing core services |
 | `ai-llm-net` | internal | Open WebUI, Ollama, and n8n |
 | `data-net` | internal | data services and infrastructure databases |
 | `workbench-net` | internal | workbenches and PostgreSQL |
@@ -158,11 +164,15 @@ Key volumes include:
 - `gateway-data`
 - `gitea-data`
 - `gitea-db`
+- `bookstack-config`
+- `bookstack-db`
+- `hedgedoc-db`
+- `hedgedoc-uploads`
 - `ollama-data`
 - `n8n-data`
 - `open-webui-data`
 - `postgres-dev-data`
-- workbench home/workspace volumes for Node, Python, AI, and C++
+- workbench home/workspace volumes for Node and Python
 
 Recreating containers does not wipe state. Removing the volumes does.
 
@@ -195,11 +205,15 @@ The AI LLM layer requires:
 
 - `8443`
 - `8444`
+- `8445`
 - `8446`
 - `8447`
-- `8453`
+- `8448`
+- `8449`
 - `8450`
 - `8451`
+- `8452`
+- `8453`
 - `15432` when `workbench` is enabled
 
 ### Windows PowerShell note
@@ -234,13 +248,16 @@ The main runtime configuration lives in:
 Key variables include:
 
 - `APP_VERSION`
-- `LAB_HTTPS_PORT`, `GITEA_HTTPS_PORT`
-- `OPENWEBUI_HTTPS_PORT`, `OLLAMA_HTTPS_PORT`, `N8N_HTTPS_PORT`
+- `LAB_HTTPS_PORT`, `GITEA_HTTPS_PORT`, `PLANE_HTTPS_PORT`, `PENPOT_HTTPS_PORT`
+- `BOOKSTACK_HTTPS_PORT`, `OPENWEBUI_HTTPS_PORT`, `OLLAMA_HTTPS_PORT`, `HEDGEDOC_HTTPS_PORT`, `N8N_HTTPS_PORT`
 - `NODE_DEV_HTTPS_PORT`, `PYTHON_DEV_HTTPS_PORT`
 - `POSTGRES_DEV_HOST_PORT`
 - `OLLAMA_CHAT_MODEL`, `OLLAMA_EMBEDDING_MODEL`, `OLLAMA_RUNTIME_MODELS`
 - `GITEA_ROOT_USERNAME`, `GITEA_ROOT_PASSWORD`
+- `BOOKSTACK_ROOT_NAME`, `BOOKSTACK_ROOT_EMAIL`, `BOOKSTACK_ROOT_PASSWORD`
+- `PLANE_ROOT_EMAIL`, `PLANE_ROOT_PASSWORD`
 - `OPENWEBUI_ROOT_EMAIL`, `OPENWEBUI_ROOT_PASSWORD`
+- `PENPOT_ROOT_EMAIL`, `PENPOT_ROOT_PASSWORD`
 - `N8N_ROOT_EMAIL`, `N8N_ROOT_PASSWORD`
 
 Rule of thumb:
@@ -424,7 +441,7 @@ npm run dev -- save-volumes --with-ai-llm --with-workbench
 npm run dev -- restore-volumes --input .\backups\volumes\atlas-lab-volumes.tar.gz
 ```
 
-Bootstrap is idempotent and reconciles Gitea, n8n, and Ollama when `ai-llm` is enabled.
+Bootstrap is idempotent and reconciles Gitea, BookStack, Plane, Penpot, and, when `ai-llm` is enabled, n8n and Ollama.
 
 ---
 
@@ -436,8 +453,12 @@ Bootstrap is idempotent and reconciles Gitea, n8n, and Ollama when `ai-llm` is e
 | --- | --- | --- |
 | Atlas Dashboard | `https://localhost:8443/` | no dedicated login |
 | Gitea | `https://localhost:8444/` | `root / RootGitea!2026` |
+| Plane | `https://localhost:8445/` | `root@plane.local / RootPlane!2026` |
 | Open WebUI | `https://localhost:8446/` | `root@openwebui.local / RootOpenWebUI!2026` |
 | Ollama | `https://localhost:8447/` | gateway basic auth `root / RootOllama!2026` |
+| Penpot | `https://localhost:8448/` | `root@penpot.local / RootPenpot!2026` |
+| BookStack | `https://localhost:8449/` | `root@bookstack.local / RootBookStack!2026` |
+| HedgeDoc | `https://localhost:8452/` | local email accounts enabled; create the first account in-app |
 | n8n | `https://localhost:8453/` | owner bootstrap `root@n8n.local / RootN8NApp!2026` |
 | PostgreSQL host-side | `localhost:15432` | `postgres / RootPostgresDev!2026` |
 
@@ -488,7 +509,7 @@ Expected behavior. The lab uses a self-signed certificate.
 
 ### `atlas-lab up` fails during port preflight
 
-One of the configured lab ports (`8443-8447`, `8450-8451`, or `15432`) is occupied or excluded by the system.
+One of the configured lab ports (`8443-8449`, `8450-8453`, or `15432`) is occupied or excluded by the system.
 
 ```powershell
 atlas-lab status
@@ -573,6 +594,21 @@ This project is distributed under the **MIT** license.
 - Install with Docker: https://docs.gitea.com/installation/install-with-docker
 - Admin CLI: https://docs.gitea.com/administration/command-line
 
+### n8n
+
+- Self-hosted user management: https://docs.n8n.io/hosting/configuration/user-management-self-hosted/
+- Docker install: https://docs.n8n.io/hosting/installation/docker/
+
+### BookStack
+
+- Installation: https://www.bookstackapp.com/docs/admin/installation
+- Commands: https://www.bookstackapp.com/docs/admin/commands/
+
+### HedgeDoc
+
+- Docker image: https://docs.hedgedoc.org/setup/docker/
+- Configuration: https://docs.hedgedoc.org/configuration/
+
 ### Open WebUI
 
 - Environment configuration: https://docs.openwebui.com/getting-started/env-configuration/

apps/atlas-dashboard/src/locales/en.json

@@ -123,10 +123,13 @@
     "directAppOnboarding": "direct app onboarding",
     "directAppLogin": "direct app login",
     "imageStudio": "image studio",
+    "knowledgeBase": "knowledge base",
     "localInferenceApi": "local inference API",
     "password": "password",
     "projectHub": "project hub",
     "protectedApi": "protected API",
+    "collaborativeMarkdown": "collaborative markdown",
+    "collaborativeNotes": "collaborative notes",
     "sharedDatabase": "shared database",
     "videoStudio": "video studio",
     "workflowControl": "workflow control",
@@ -253,12 +256,23 @@
         "description": "Internal Git forge for repositories, issues, review, and the lab's technical collaboration flow.",
         "title": "Gitea Forge"
       },
+      "bookStack": {
+        "action": "Open BookStack",
+        "description": "Self-hosted internal documentation and knowledge base with a deterministic initial admin aligned by the lab bootstrap.",
+        "title": "BookStack"
+      },
       "penpot": {
         "action": "Open Penpot",
         "description": "Self-hosted Penpot workspace for product design, shared libraries, and collaboration across design and code, with a bootstrap root profile aligned to the lab.",
         "title": "Penpot",
         "usage": "design and code collaboration"
       },
+      "hedgeDoc": {
+        "action": "Open HedgeDoc",
+        "description": "Self-hosted collaborative markdown workspace for shared notes, meeting pads, and lightweight documentation flows.",
+        "note": "Local email accounts are enabled and anonymous access is disabled. Create the first account directly in the app.",
+        "title": "HedgeDoc"
+      },
       "plane": {
         "action": "Open Plane",
         "description": "Self-hosted Plane workspace for issue tracking, planning, roadmaps, and internal project coordination, with a bootstrap instance admin aligned to the lab.",

apps/atlas-dashboard/src/locales/it.json

@@ -123,10 +123,13 @@
     "directAppOnboarding": "onboarding diretto in app",
     "directAppLogin": "login diretto applicazione",
     "imageStudio": "studio immagini",
+    "knowledgeBase": "knowledge base",
     "localInferenceApi": "API di inference locale",
     "password": "password",
     "projectHub": "hub progetti",
     "protectedApi": "API protetta",
+    "collaborativeMarkdown": "markdown collaborativo",
+    "collaborativeNotes": "note collaborative",
     "sharedDatabase": "database condiviso",
     "videoStudio": "studio video",
     "workflowControl": "controllo workflow",
@@ -253,12 +256,23 @@
         "description": "Forge Git interna per repository, issue, review e flusso di collaborazione tecnica del lab.",
         "title": "Gitea Forge"
       },
+      "bookStack": {
+        "action": "Apri BookStack",
+        "description": "Base di conoscenza e documentazione interna self-hosted, con admin iniziale deterministico allineato dal bootstrap del lab.",
+        "title": "BookStack"
+      },
       "penpot": {
         "action": "Apri Penpot",
         "description": "Workspace Penpot self-hosted per product design, librerie condivise e collaborazione tra design e codice, con profilo root allineato al bootstrap del lab.",
         "title": "Penpot",
         "usage": "design e code collaboration"
       },
+      "hedgeDoc": {
+        "action": "Apri HedgeDoc",
+        "description": "Workspace self-hosted di markdown collaborativo per note condivise, meeting pad e documentazione leggera.",
+        "note": "Gli account email locali sono abilitati e l accesso anonimo e disattivato. Crea il primo account direttamente nell app.",
+        "title": "HedgeDoc"
+      },
       "plane": {
         "action": "Apri Plane",
         "description": "Workspace Plane self-hosted per issue tracking, planning, roadmap e coordinamento interno dei progetti, con instance admin iniziale allineato al bootstrap del lab.",