lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Next Workspace - Self-hosted workspace platform
310 commits 1 branch 55 tags 12 MiB
Go 81.6%
Shell 16.8%
HTML 1.6%
Find a file
cclohmar 2999f5da47 nextwks.sh: fix SIGPIPE crash on password gen and Go version fetch under pipefail
2026-07-11 00:17:07 +01:00
compose fix: inject AUTHELIA_SECRET into launcher compose env 2026-07-10 22:48:05 +01:00
config fix: podman network with fixed IPs, remove host networking 2026-07-10 13:54:33 +01:00
lng feat: global settings, multi-language (en/de), company branding on launcher + www 2026-07-08 15:32:17 +01:00
tools nextwks.sh: fix SIGPIPE crash on password gen and Go version fetch under pipefail 2026-07-11 00:17:07 +01:00
.gitignore chore: remove committed binary, add to gitignore 2026-07-08 08:51:31 +01:00
AGENT.md Unified install/update/destroy script with ephemeral build dir 2026-07-11 00:02:55 +01:00
CHANGELOG.md Unified install/update/destroy script with ephemeral build dir 2026-07-11 00:02:55 +01:00
go.mod feat: Caddy + Authelia replace Zoraxy 2026-07-08 09:54:39 +01:00
go.sum feat: Caddy + Authelia replace Zoraxy 2026-07-08 09:54:39 +01:00
main.go fix: version display in admin header 2026-07-10 23:34:10 +01:00
README.md README: add explicit curl download command before install 2026-07-11 00:07:56 +01:00
VERSION Unified install/update/destroy script with ephemeral build dir 2026-07-11 00:02:55 +01:00

README.md

NextWorkspace

A self-hosted productivity suite for startups. One binary + Caddy + Authelia.

Architecture

app.nextwks.eu :443                    auth.nextwks.eu :443
       │                                         │
   Caddy (TLS + forward auth)          Caddy → Authelia :9091
       │                                         │
       ├── /home/       → launcher page          └── authelia-api :8080
       ├── /drive/*     → OpenCloud :9100
       ├── /office/*    → Euro Office :9200
       ├── /erp/*       → ERPNext :9300
       ├── /chat/*      → Matrix :9400
       ├── /meet/*      → Jitsi :9500
       ├── /mail/*      → Alps :9600
       ├── /ai/*        → Open WebUI :9700
       └── /admin/*     → Portainer :9800
  • Caddy: Reverse proxy, TLS (auto LE), subdomain routing, forward auth to Authelia
  • Authelia: OIDC provider, 2FA, identity store
  • Binary: Go launcher + path-based reverse proxy to upstream apps

Quick Start (Bare VM)

# Download the script to your home folder
curl -o ~/nextwks.sh https://git.lohmar.co.uk/lexton-it/NextWks/raw/branch/main/tools/nextwks.sh
chmod +x ~/nextwks.sh

# Run the installer
sudo bash ~/nextwks.sh --install

Prompts for domain, TLS email, and admin credentials. Installs deps (Go, Podman, git), clones repo to /tmp/nextwks-build/, builds binary, generates configs, deploys stack. The script stays in ~/nextwks.sh for future updates.

Directory Layout

/opt/nextworkspace/            # Runtime (freshly populated on every deploy)
├── config/
│   ├── caddy/Caddyfile
│   ├── authelia/configuration.yml
│   ├── authelia/users_database.yml
│   └── nextworkspace/{config,apps}.yaml
├── data/
│   ├── caddy/ (certs + runtime)
│   └── authelia/ (database)
├── compose/stack.yaml
├── www/ (landing page)
├── lng/ (translations)
└── nextworkspace (static Go binary)

/opt/backup/                   # Secrets vault (survives --destroy)
├── .env
└── certificates/

/tmp/nextwks-build/            # Ephemeral build dir (git clone --depth 1)

Operations

# Smart update (pull, build, copy, restart)
sudo bash ~/nextwks.sh --update

# Full redeploy (tear down, rebuild from scratch with saved secrets)
sudo bash ~/nextwks.sh --destroy

Workflow (Development)

  1. Edit code in your clone.
  2. Bump VERSION, update CHANGELOG.md.
  3. git commit -m "message" && git tag v$(cat VERSION) && git push origin main --tags
  4. On the server: sudo bash ~/nextwks.sh --update

The script clones fresh from git every time — no stale repos, no permissions issues.

Version

Current: 0.1.0.0032 — see CHANGELOG.md