Merge branch 'develop'

Author: d4v3-rm

CHANGELOG.md

@@ -3,12 +3,27 @@
 Generated by `npm run set:version`.
 The local changelog is rebuilt from the available `v*` release tags and the current `HEAD` range.
 The script does not create tags locally.
-## v0.50.1 - 2026-04-29
+## v0.51.0 - 2026-04-29
 
 - Release source: local versioning run
+- Base ref: `v0.50.1`
+- Range: `v0.50.1..HEAD`
+- Included commits: 2
+
+### Features (1)
+
+- [core] replace Obsidian with TriliumNext (`07b208b`)
+
+### Fix (1)
+
+- [obsidian] remove wrapper basic auth (`83a4577`)
+
+## v0.50.1 - 2026-04-29
+
+- Release tag: `v0.50.1`
 - Base ref: `v0.48.2`
-- Range: `v0.48.2..HEAD`
-- Included commits: 8
+- Range: `v0.48.2..v0.50.1`
+- Included commits: 9
 
 ### Features (2)
 
@@ -21,11 +36,12 @@ The script does not create tags locally.
 - [gitlab] harden root login credentials (`e85c4ea`)
 - [workbench] add smoke coverage for dev services (`c6cc58e`)
 
-### CI / Maintenance (3)
+### CI / Maintenance (4)
 
 - [release] v0.49.0 (`1fd5e16`)
 - [release] v0.49.2 (`fd02bb0`)
 - [release] v0.49.4 (`42b5f48`)
+- [release] v0.50.1 (`caeb53d`)
 
 ## v0.48.2 - 2026-04-24
 

README.md

@@ -1,6 +1,6 @@
 # Atlas Lab
 
-![Version](https://img.shields.io/badge/version-0.50.1-blue.svg)
+![Version](https://img.shields.io/badge/version-0.51.0-blue.svg)
 ![License](https://img.shields.io/badge/license-MIT-22c55e.svg)
 ![Docker Compose](https://img.shields.io/badge/Docker%20Compose-v2-2496ED?logo=docker&logoColor=white)
 ![Gateway](https://img.shields.io/badge/Gateway-Caddy-1F2937?logo=caddy&logoColor=white)
@@ -12,15 +12,15 @@
 
 Atlas Lab is a localhost-first self-hosted platform made of a Node.js/TypeScript CLI, a layered Docker Compose stack, and an operational React dashboard served by Caddy.
 
-It provides a core collaboration layer with GitLab CE, Obsidian, and Penpot, plus optional AI and development layers. Everything is reachable through dedicated HTTPS ports on `localhost`, with persistent state stored in Docker volumes.
+It provides a core collaboration layer with GitLab CE, TriliumNext, and Penpot, plus optional AI and development layers. Everything is reachable through dedicated HTTPS ports on `localhost`, with persistent state stored in Docker volumes.
 
 ---
 
 ## Overview
 
 ### What It Gives You
 
-- Always-on core layer with Atlas Dashboard, GitLab CE, Obsidian, and Penpot.
+- Always-on core layer with Atlas Dashboard, GitLab CE, TriliumNext, and Penpot.
 - Optional AI LLM layer with Open WebUI, Ollama, and n8n.
 - Optional workbench layer with browser-based Node and Python environments plus shared PostgreSQL.
 - HTTPS-only browser ingress on `localhost`.
@@ -43,7 +43,7 @@ Atlas Lab is split into three explicit layers.
 
 | Layer | Status | Includes | Purpose |
 | --- | --- | --- | --- |
-| `core` | always on | gateway, Atlas Dashboard, GitLab CE, Obsidian, Penpot, and backing data services | baseline self-hosted platform |
+| `core` | always on | gateway, Atlas Dashboard, GitLab CE, TriliumNext, Penpot, and backing data services | baseline self-hosted platform |
 | `ai-llm` | optional | Open WebUI, Ollama, n8n, AI gateway | local AI workflows and automation |
 | `workbench` | optional | Node Forge, Python Grid, shared PostgreSQL, workbench gateway | browser-based development |
 
@@ -77,7 +77,7 @@ All browser entry points are exposed over HTTPS on `localhost`.
 | Open WebUI | `ai-llm` | `https://localhost:8446/` | only with `--with-ai-llm` |
 | Ollama | `ai-llm` | `https://localhost:8447/` | HTTPS API with gateway auth |
 | Penpot | `core` | `https://localhost:8448/` | collaborative design workspace |
-| Obsidian | `core` | `https://localhost:8449/` | browser knowledge vault |
+| TriliumNext | `core` | `https://localhost:8449/` | server-side knowledge base |
 | Node Forge | `workbench` | `https://localhost:8450/` | Node / TypeScript workspace |
 | Python Grid | `workbench` | `https://localhost:8451/` | Python workspace |
 | n8n | `ai-llm` | `https://localhost:8453/` | workflow automation |
@@ -96,7 +96,7 @@ Operational rules:
 | Network | Type | Purpose |
 | --- | --- | --- |
 | `edge-net` | exposed | published ingress ports |
-| `apps-net` | internal | GitLab CE, Obsidian, and gateway-routed browser services |
+| `apps-net` | internal | GitLab CE, TriliumNext, and gateway-routed browser services |
 | `penpot-net` | internal | Penpot application services |
 | `ai-llm-net` | internal | Open WebUI, Ollama, and n8n |
 | `workbench-net` | internal | workbenches and PostgreSQL |
@@ -121,7 +121,7 @@ Core volumes:
 - `gitlab-config`
 - `gitlab-logs`
 - `gitlab-data`
-- `obsidian-config`
+- `trilium-data`
 - `penpot-assets`
 - `penpot-postgres`
 
@@ -189,12 +189,11 @@ The main runtime configuration lives in:
 
 Key variables include:
 
-- `LAB_HTTPS_PORT`, `GITLAB_HTTPS_PORT`, `PENPOT_HTTPS_PORT`, `OBSIDIAN_HTTPS_PORT`
+- `LAB_HTTPS_PORT`, `GITLAB_HTTPS_PORT`, `PENPOT_HTTPS_PORT`, `TRILIUM_HTTPS_PORT`
 - `OPENWEBUI_HTTPS_PORT`, `OLLAMA_HTTPS_PORT`, `N8N_HTTPS_PORT`
 - `NODE_DEV_HTTPS_PORT`, `PYTHON_DEV_HTTPS_PORT`, `POSTGRES_DEV_HOST_PORT`
 - `GITLAB_EXTERNAL_URL`, `GITLAB_URL`
 - `GITLAB_ROOT_USERNAME`, `GITLAB_ROOT_PASSWORD`, `GITLAB_ROOT_EMAIL`
-- `OBSIDIAN_USERNAME`, `OBSIDIAN_PASSWORD`
 - `PENPOT_ROOT_EMAIL`, `PENPOT_ROOT_PASSWORD`
 - `N8N_ROOT_EMAIL`, `N8N_ROOT_PASSWORD`
 - `OLLAMA_CHAT_MODEL`, `OLLAMA_EMBEDDING_MODEL`, `OLLAMA_RUNTIME_MODELS`
@@ -348,7 +347,7 @@ These credentials are intended for trusted local environments and are configurab
 | Open WebUI | `https://localhost:8446/` | `root@openwebui.local / RootOpenWebUI!2026` |
 | Ollama | `https://localhost:8447/` | gateway basic auth `root / RootOllama!2026` |
 | Penpot | `https://localhost:8448/` | `root@penpot.local / RootPenpot!2026` |
-| Obsidian | `https://localhost:8449/` | basic auth `atlas / RootObsidian!2026` |
+| TriliumNext | `https://localhost:8449/` | first-run app setup |
 | n8n | `https://localhost:8453/` | owner bootstrap `root@n8n.local / RootN8NApp!2026` |
 | PostgreSQL host-side | `localhost:15432` | `postgres / RootPostgresDev!2026` |
 
@@ -481,10 +480,11 @@ For stronger hardening:
 - Self-hosted user management: https://docs.n8n.io/hosting/configuration/user-management-self-hosted/
 - Docker install: https://docs.n8n.io/hosting/installation/docker/
 
-### Obsidian
+### TriliumNext
 
-- Docker Hub image: https://hub.docker.com/r/linuxserver/obsidian
-- Source repository: https://github.com/linuxserver/docker-obsidian
+- Docker Hub image: https://hub.docker.com/r/triliumnext/trilium
+- Source repository: https://github.com/TriliumNext/Trilium
+- Docker installation: https://docs.triliumnotes.org/user-guide/setup/server/installation/docker
 
 ### Open WebUI
 

apps/atlas-dashboard/src/entities/dashboard/model/builders/dashboard-core.builder.ts

@@ -57,39 +57,29 @@ export function createCoreServices(
     },
     {
       action: {
-        href: config.services.obsidian.url,
-        label: t('dashboard.services.obsidian.action')
+        href: config.services.trilium.url,
+        label: t('dashboard.services.trilium.action')
       },
       credentials: [
         {
           label: labels.endpoint,
-          value: config.services.obsidian.url
+          value: config.services.trilium.url
         },
         {
-          label: labels.username,
-          value: config.services.obsidian.username,
-          concealed: true
-        },
-        {
-          label: labels.password,
-          value: config.services.obsidian.password,
-          concealed: true
-        },
-        {
-          label: labels.authMode,
-          value: t('values.basicAuth')
+          label: labels.accessMode,
+          value: t('values.directAppLogin')
         },
         {
           label: labels.usage,
           value: t('values.knowledgeVault')
         }
       ],
-      description: t('dashboard.services.obsidian.description'),
+      description: t('dashboard.services.trilium.description'),
       icon: 'host',
-      id: 'obsidian',
-      note: t('dashboard.services.obsidian.note'),
+      id: 'trilium',
+      note: t('dashboard.services.trilium.note'),
       status: t('values.knowledgeVault'),
-      title: t('dashboard.services.obsidian.title'),
+      title: t('dashboard.services.trilium.title'),
       tone: 'core'
     },
     {

apps/atlas-dashboard/src/entities/network-map/model/create-network-graph-view-model.ts

@@ -78,16 +78,16 @@ export function createNetworkGraphViewModel(
     }),
     createNode({
       active: true,
-      description: t('dashboard.services.obsidian.description'),
-      id: 'obsidian',
+      description: t('dashboard.services.trilium.description'),
+      id: 'trilium',
       kind: 'service',
       labels: [
-        config.services.obsidian.url,
+        config.services.trilium.url,
         t('values.knowledgeVault'),
         t('networkMapDialog.labels.browser')
       ],
       position: [-64, -20, 12],
-      title: t('dashboard.services.obsidian.title'),
+      title: t('dashboard.services.trilium.title'),
       tone: 'core'
     }),
     createNode({
@@ -239,7 +239,7 @@ export function createNetworkGraphViewModel(
     createLink('gateway', 'deck', 'core', true),
     createLink('gateway', 'core-layer', 'core', true),
     createLink('core-layer', 'gitlab', 'core', true),
-    createLink('core-layer', 'obsidian', 'core', true),
+    createLink('core-layer', 'trilium', 'core', true),
     createLink('core-layer', 'penpot', 'core', true),
     createLink('gateway', 'ai-layer', 'ai', aiActive),
     createLink('ai-layer', 'open-webui', 'ai', aiActive),

apps/atlas-dashboard/src/entities/runtime-config/model/lab-runtime-config.schema.ts

@@ -10,10 +10,8 @@ const namedAccountSchema = z.object({
   url: nonEmptyString
 });
 
-const basicAuthServiceSchema = z.object({
-  password: nonEmptyString,
-  url: nonEmptyString,
-  username: nonEmptyString
+const urlOnlyServiceSchema = z.object({
+  url: nonEmptyString
 });
 
 export const labRuntimeConfigSchema = z.object({
@@ -52,7 +50,7 @@ export const labRuntimeConfigSchema = z.object({
       url: nonEmptyString
     }),
     openWebUi: namedAccountSchema,
-    obsidian: basicAuthServiceSchema,
+    trilium: urlOnlyServiceSchema,
     penpot: namedAccountSchema
   }),
   workbenches: z.object({

apps/atlas-dashboard/src/locales/en.json

@@ -205,7 +205,7 @@
     "alwaysOnForge": "always-on forge"
   },
   "dashboard": {
-    "coreLayerSummary": "GitLab CE, Obsidian, and Penpot form the always-on core layer of the lab.",
+    "coreLayerSummary": "GitLab CE, TriliumNext, and Penpot form the always-on core layer of the lab.",
     "accessNotes": {
       "aiDisabled": "The AI layer no longer starts by default: the deck marks it as optional instead of pretending that it is online.",
       "aiEnabled": "Open WebUI, Ollama, and n8n are online and reachable on the dedicated AI gateway ports.",
@@ -257,7 +257,7 @@
         "label": "segmentation"
       },
       "usage": {
-        "body": "GitLab CE, Obsidian, and Penpot stay on as the core layer; the AI and workbench layers are enabled only when they are actually needed.",
+        "body": "GitLab CE, TriliumNext, and Penpot stay on as the core layer; the AI and workbench layers are enabled only when they are actually needed.",
         "label": "usage"
       }
     },
@@ -325,11 +325,11 @@
         "description": "Self-hosted GitLab CE for repositories, issues, merge requests, CI-ready project governance, and the lab's technical collaboration flow.",
         "title": "GitLab CE"
       },
-      "obsidian": {
-        "action": "Open Obsidian",
-        "description": "Browser-delivered Obsidian workspace for a local markdown vault, protected with deterministic lab credentials and persisted in a named Docker volume.",
-        "note": "Obsidian runs through the LinuxServer web container. Use the browser session for vault work, plugins, and markdown editing inside the persisted config volume.",
-        "title": "Obsidian"
+      "trilium": {
+        "action": "Open TriliumNext",
+        "description": "Self-hosted TriliumNext knowledge base for hierarchical notes, backlinks, protected notes, and long-lived personal documentation.",
+        "note": "TriliumNext runs as a real server-side web application with its database and backups persisted in the trilium-data Docker volume.",
+        "title": "TriliumNext"
       },
       "penpot": {
         "action": "Open Penpot",

apps/atlas-dashboard/src/locales/it.json

@@ -205,7 +205,7 @@
     "alwaysOnForge": "forge sempre accesa"
   },
   "dashboard": {
-    "coreLayerSummary": "GitLab CE, Obsidian e Penpot formano il layer core sempre acceso del lab.",
+    "coreLayerSummary": "GitLab CE, TriliumNext e Penpot formano il layer core sempre acceso del lab.",
     "accessNotes": {
       "aiDisabled": "Il layer AI non viene piu acceso di default: il deck lo marca come opzionale invece di fingere che sia online.",
       "aiEnabled": "Open WebUI, Ollama e n8n sono online e raggiungibili sulle porte dedicate del gateway AI.",
@@ -257,7 +257,7 @@
         "label": "segmentazione"
       },
       "usage": {
-        "body": "GitLab CE, Obsidian e Penpot restano sempre attivi nel layer core; i layer AI e workbench vengono abilitati solo quando servono davvero.",
+        "body": "GitLab CE, TriliumNext e Penpot restano sempre attivi nel layer core; i layer AI e workbench vengono abilitati solo quando servono davvero.",
         "label": "uso"
       }
     },
@@ -325,11 +325,11 @@
         "description": "GitLab CE self-hosted per repository, issue, merge request, governance progetto pronta per CI e collaborazione tecnica del lab.",
         "title": "GitLab CE"
       },
-      "obsidian": {
-        "action": "Apri Obsidian",
-        "description": "Workspace Obsidian via browser per un vault markdown locale, protetto con credenziali deterministiche del lab e persistito in un volume Docker nominato.",
-        "note": "Obsidian gira tramite il container web LinuxServer. Usa la sessione browser per vault, plugin e modifica markdown dentro il volume config persistente.",
-        "title": "Obsidian"
+      "trilium": {
+        "action": "Apri TriliumNext",
+        "description": "Knowledge base TriliumNext self-hosted per note gerarchiche, backlink, note protette e documentazione personale persistente.",
+        "note": "TriliumNext gira come vera web application server-side con database e backup persistiti nel volume Docker trilium-data.",
+        "title": "TriliumNext"
       },
       "penpot": {
         "action": "Apri Penpot",

config/gateway/templates/Caddyfile.template

@@ -62,6 +62,6 @@ https://${LAB_PUBLIC_HOST}:${PENPOT_HTTPS_PORT}, https://${LAB_GATEWAY_IP}:${PEN
   import service_proxy penpot-frontend:8080
 }
 
-https://${LAB_PUBLIC_HOST}:${OBSIDIAN_HTTPS_PORT}, https://${LAB_GATEWAY_IP}:${OBSIDIAN_HTTPS_PORT} {
-  import service_proxy obsidian:3000
+https://${LAB_PUBLIC_HOST}:${TRILIUM_HTTPS_PORT}, https://${LAB_GATEWAY_IP}:${TRILIUM_HTTPS_PORT} {
+  import service_proxy trilium:8080
 }

config/gateway/templates/content/network-map.md.template

@@ -4,7 +4,7 @@
 
 The deck remains available locally at `${LAB_LOCAL_URL}`. The lab is split into three layers:
 
-- `core`: deck, GitLab CE, Penpot, Obsidian, and the base gateway
+- `core`: deck, GitLab CE, Penpot, TriliumNext, and the base gateway
 - `ai-llm`: Open WebUI, Ollama, and n8n
 - `workbench`: Postgres and code-server environments
 
@@ -15,7 +15,7 @@ Each layer publishes its HTTPS endpoints on `localhost` through a dedicated gate
 - Local deck: `${LAB_LOCAL_URL}`
 - GitLab CE: `${GITLAB_URL}`
 - Penpot: `${PENPOT_URL}`
-- Obsidian: `${OBSIDIAN_URL}`
+- TriliumNext: `${TRILIUM_URL}`
 - Open WebUI: `${OPENWEBUI_URL}` only when the `ai-llm` layer is enabled
 - Ollama: `${OLLAMA_URL}` only when the `ai-llm` layer is enabled
 - n8n: `${N8N_URL}` only when the `ai-llm` layer is enabled
@@ -30,7 +30,7 @@ Each layer publishes its HTTPS endpoints on `localhost` through a dedicated gate
 - `8446`: Open WebUI, layer `ai-llm`
 - `8447`: Ollama, layer `ai-llm`
 - `8448`: Penpot
-- `8449`: Obsidian
+- `8449`: TriliumNext
 - `8450`: Node workbench, layer `workbench`
 - `8451`: Python workbench, layer `workbench`
 - `8453`: n8n, layer `ai-llm`
@@ -44,7 +44,7 @@ The gateway generates a self-signed SAN certificate that covers `localhost` and
 
 ## Internal segmentation
 
-- `apps-net`: GitLab CE, Obsidian, and Atlas gateway-routed browser services
+- `apps-net`: GitLab CE, TriliumNext, and Atlas gateway-routed browser services
 - `ai-llm-net`: n8n, Ollama, and Open WebUI
 - `data-net`: infrastructure databases
 - `penpot-net`: Penpot application services

config/gateway/templates/runtime/lab-config.json.template

@@ -45,10 +45,8 @@
       "rootEmail": "${PENPOT_ROOT_EMAIL}",
       "rootPassword": "${PENPOT_ROOT_PASSWORD}"
     },
-    "obsidian": {
-      "url": "${OBSIDIAN_URL}",
-      "username": "${OBSIDIAN_USERNAME}",
-      "password": "${OBSIDIAN_PASSWORD}"
+    "trilium": {
+      "url": "${TRILIUM_URL}"
     }
   },
   "workbenches": {