Open-source infrastructure for unions and worker-led organizations. Deploy your own self-hosted suite of collaboration tools with enterprise-grade identity management, monitoring, and automation.

What's Included

• Identity & Access: Authentik SSO with MFA, social login (Google, Apple), and fine-grained access control
• Collaboration Tools: Decidim (participatory democracy), Outline (wiki), Nextcloud (file sharing), and more
• Monitoring: Grafana, Prometheus, Loki, Zabbix - full observability stack
• Automation: n8n workflows, Wobbler script runner, automated backups
• Security: Fail2ban, UFW, Wazuh SIEM, automatic security updates

Architecture

federated-commons/
├── config/              # Central configuration (project.yml)
├── ansible/             # Server configuration & app deployment
├── terraform/
│   ├── infrastructure/  # Scaleway VPS, PostgreSQL, S3, DNS
│   ├── authentik/       # SSO configuration, flows, apps
│   └── grafana/         # Dashboards and alerts
├── docs/                # Documentation
└── scripts/             # Utility scripts

Quick Start

1. Configure

# Copy and edit the central configuration
cp config/project.yml.example config/project.yml
# Edit with your domains, org name, etc.

2. Provision Infrastructure (Terraform)

cd terraform/infrastructure
cp terraform.tfvars.example terraform.tfvars
# Edit with Scaleway credentials
terraform init && terraform apply

3. Deploy Applications (Ansible)

cd ansible
cp inventory.ini.example inventory.ini
# Edit with your server IPs

# Deploy in order:
ansible-playbook playbook-authentik.yml -i inventory.ini
ansible-playbook playbook-management.yml -i inventory.ini
ansible-playbook playbook-tools-prod.yml -i inventory.ini

See docs/ for detailed instructions.

Staging Environment

Save money by running staging on a single VPS with local PostgreSQL:

# Start staging
./ansible/scripts/staging-control.sh start

# Deploy to staging
ansible-playbook ansible/playbook-staging.yml -i inventory.ini

# Stop when done (Decreases billed amount!)
./ansible/scripts/staging-control.sh stop

Cost Estimate

Environment	Monthly Cost
Production (3 VPS + managed PostgreSQL)	~€80-150
Staging (1 VPS, stopped when idle)	~€30-50

Documentation

• Prerequisites
• Infrastructure Foundation
• Identity & Access
• Configuration Management
• Monitoring
• Quick Reference

License

MIT License - see LICENSE for details.

Third-party software attribution is documented in OPEN_SOURCE_INVENTORY.md.