NextWorkspace

A self-hosted productivity suite for startups. One binary + Caddy + Authelia.

Architecture

app.nextwks.eu :443                    auth.nextwks.eu :443
       │                                         │
   Caddy (TLS + forward auth)          Caddy → Authelia :9091
       │                                         │
       ├── /home/       → launcher page          └── authelia-api :8080
       ├── /drive/*     → OpenCloud :9100
       ├── /office/*    → Euro Office :9200
       ├── /erp/*       → ERPNext :9300
       ├── /chat/*      → Matrix :9400
       ├── /meet/*      → Jitsi :9500
       ├── /mail/*      → Alps :9600
       ├── /ai/*        → Open WebUI :9700
       └── /admin/*     → Portainer :9800

• Caddy: Reverse proxy, TLS (auto LE), subdomain routing, forward auth to Authelia
• Authelia: OIDC provider, 2FA, identity store
• Binary: Go launcher + path-based reverse proxy to upstream apps

Quick Start

sudo ./install.sh

Prompts for domain, TLS email, and admin credentials. Installs dependencies, generates configs, deploys Caddy + Authelia + launcher.

Directory Layout

/opt/nextworkspace/
├── config/
│   ├── caddy/Caddyfile
│   ├── authelia/configuration.yml
│   ├── authelia/users_database.yml
│   └── nextworkspace/{config,apps}.yaml
├── data/
│   ├── caddy/ (certs + runtime data)
│   └── authelia/ (database)
├── compose/
│   ├── caddy.yaml
│   └── authelia.yaml
├── www/ (landing page)
└── nextworkspace (binary)

/opt/backup/
├── .env (secrets vault)
└── certficates/ (LE cert backup)

Deployment

sudo ./deploy.sh          # Smart update (swap binary, restart)
sudo ./deploy.sh --destroy # Full rebuild (certs backed up)

Version

Current: 0.1.0.0007 — see CHANGELOG.md