Hard requirements: per-user isolation, admin-blind E2EE for health values (you as host cannot read friends’ metrics from Postgres/backups), TLS in transit, LUKS on the ThinkCentre, GDPR-style consent/export/delete. Study/Udemy is out of scope.
Status
- Design: active (HLD/LLD/security/ADRs/runbooks in this folder).
- Code:
~/Terraform/SAAS/SAAS-Lifebot(Next.js SaaS Boilerplate base). - Deploy target: ThinkCentre Ubuntu on the home network; develop on MacBook, port via git.
Docs
- SAAS-Lifebot/HLD — architecture, E2EE, GDPR, auth tiers
- SAAS-Lifebot/LLD — schema, APIs, crypto sequences, file map
- SAAS-Lifebot/security-design — controls before invite
- SAAS-Lifebot/security-review — post-build audit (fill after implement)
- ADRs: SAAS-Lifebot/adr/0001-multi-user-saas-on-home-linux · SAAS-Lifebot/adr/0002-admin-blind-e2ee-health-data · SAAS-Lifebot/adr/0003-clerk-auth-not-cognito · SAAS-Lifebot/adr/0004-anthropic-client-side-coach · SAAS-Lifebot/adr/0005-no-study-scope-fitness-only
- Runbooks: SAAS-Lifebot/runbooks/home-server-deploy · SAAS-Lifebot/runbooks/mac-to-thinkcentre-port · SAAS-Lifebot/runbooks/friend-invite-and-consent · SAAS-Lifebot/runbooks/vault-setup-and-recovery · SAAS-Lifebot/runbooks/hae-ingest-setup · SAAS-Lifebot/runbooks/pre-invite-security-gate
Stack
Next.js 16 · React 19 · TypeScript · Clerk · Drizzle + Postgres · Tailwind/Shadcn · next-intl · Anthropic (client-side coach preferred) · Docker Compose on Ubuntu.
Source
- Product:
~/Terraform/SAAS/SAAS-Lifebot - Origin (AWS single-user):
~/Terraform/Bobs-lifebot· Bobs-lifebot/README
Related
Bobs-lifebot/README — v1 serverless personal appTailscale · Cloudflare-Tunnel — home exposure optionsProject-Overview
Compiled from
wiki/projects/SAAS-Lifebot/README.md · git is the source of truth