Ulysses — a hardened fork of Odysseus AI. Self-hosted AI model management for the Helm home server.
Find a file
Alexandre Teixeira 2412db1583
fix(security): harden gallery endpoint URL checks (#4981)
Replace substring OpenAI endpoint detection with exact parsed-host matching.

Route gallery image endpoint construction through a constant path allowlist.

Remove client-visible exception and upstream response body leaks from gallery image flows while preserving diagnostics in server logs.

Add focused regression tests for OpenAI host matching, checked endpoint joining, harmonize SSRF hardening, and sanitized client errors.
2026-06-30 19:16:34 +02:00
.github chore(deps): bump actions/checkout in the actions group (#4559) 2026-06-18 20:49:58 +02:00
companion fix(companion): require chat scope for model inventory (#4319) 2026-06-16 01:15:05 +02:00
config/searxng Generate SearXNG secret on first boot 2026-06-01 11:03:02 +09:00
core Reject non-string atomic text writes (#1819) 2026-06-29 14:36:21 +01:00
docker fix: Real-ESRGAN install + Cookbook deps-panel crash on the Python 3.14 image (#4694) 2026-06-23 19:31:00 +02:00
docs docs(setup): add a self-host troubleshooting cookbook of common traps (#4834) 2026-06-26 20:24:02 +02:00
integrations Add Codex and Claude document draft integration 2026-06-09 14:27:53 +09:00
licenses feat(a11y): add a Text size control and an OpenDyslexic font option (#4210) 2026-06-22 13:53:46 +02:00
mcp_servers fix(ai): offload model resolution from async paths 2026-06-28 00:48:35 +01:00
routes fix(security): harden gallery endpoint URL checks (#4981) 2026-06-30 19:16:34 +02:00
scripts Skip invalid notes CLI item rows (#2005) 2026-06-29 14:26:46 +01:00
services Ignore invalid serve profile inputs (#1827) 2026-06-29 18:47:19 +01:00
specs docs(architecture): add Phase 0 runtime inventory document (#4148) 2026-06-16 04:57:24 +01:00
src fix(model-context): read real context window for unknown proxy models (#4909) 2026-06-30 18:04:29 +01:00
static Ignore invalid harmonize mask layers (#1829) 2026-06-29 19:16:26 +01:00
tests fix(security): harden gallery endpoint URL checks (#4981) 2026-06-30 19:16:34 +02:00
.dockerignore fix(devops): harden docker config defaults (#4349) 2026-06-16 04:03:43 +01:00
.env.example Parameterize Docker Compose volume host paths (#3907) 2026-06-15 20:30:18 +09:00
.gitattributes Add native Windows compatibility layer 2026-06-01 15:09:47 +09:00
.gitignore pwa missing icons added (#428) 2026-06-15 16:00:13 +09:00
ACKNOWLEDGMENTS.md feat(a11y): add a Text size control and an OpenDyslexic font option (#4210) 2026-06-22 13:53:46 +02:00
app.py refactor(routes): move memory domain into routes/memory/ subpackage (#5007) 2026-06-30 17:52:14 +02:00
build-macos-app.sh macOS app: force native arm64 uvicorn on Apple Silicon 2026-06-02 20:56:53 +09:00
build-windows-portable.ps1 feat(launcher): add portable windows launcher (#976) 2026-06-16 04:58:16 +01:00
CONTRIBUTING.md Change host from 0.0.0.0 to 127.0.0.1 in CONTRIBUTING.md (#4422) 2026-06-16 13:40:47 +00:00
docker-compose.gpu-amd.yml CI fixes for cookbook workflow sync 2026-06-22 02:08:25 +00:00
docker-compose.gpu-nvidia.yml CI fixes for cookbook workflow sync 2026-06-22 02:08:25 +00:00
docker-compose.yml Merge origin/dev into main 2026-06-21 11:08:50 +00:00
Dockerfile fix(docker): install python-magic and libmagic for upload MIME sniffing 2026-06-27 17:31:46 +01:00
install-service.sh Odysseus v1.0 2026-05-31 23:58:26 +09:00
launch-windows.ps1 feat(launcher): add portable windows launcher (#976) 2026-06-16 04:58:16 +01:00
launcher.py feat(launcher): add portable windows launcher (#976) 2026-06-16 04:58:16 +01:00
LICENSE chore: backport main-only changes to dev AGPL relicense + Cookbook serve fix (#3704) 2026-06-09 23:20:34 +02:00
odysseus-ui.service fix: systemd service should serve on port 7000 to match Docker/setup/README (#1297) 2026-06-03 02:04:37 +09:00
Odysseus.spec feat(launcher): add portable windows launcher (#976) 2026-06-16 04:58:16 +01:00
package-lock.json chore(deps): remove unused @anthropic-ai/sdk dependency (#4566) 2026-06-19 09:40:35 +02:00
package.json chore(deps): remove unused @anthropic-ai/sdk dependency (#4566) 2026-06-19 09:40:35 +02:00
pyproject.toml test: add fast lane and duration visibility (#3659) 2026-06-09 20:11:47 +02:00
README.md Refresh README screenshot 2026-06-22 04:54:15 +00:00
requirements-optional.txt chore(deps): bump the python group with 3 updates (#3991) 2026-06-15 19:25:15 +09:00
requirements.txt chore(deps): bump the python group with 3 updates (#3991) 2026-06-15 19:25:15 +09:00
ROADMAP.md Fix typos in the ROADMAP intro (#1421) 2026-06-03 14:12:10 +09:00
SECURITY.md Clarify private deployment hardening docs 2026-06-02 13:01:12 +09:00
setup.py fix(setup): load .env so a pre-seeded admin password is honored on native installs (#4787) 2026-06-23 20:08:05 +02:00
start-macos.sh fix(macos): rebuild incomplete venv instead of failing on re-run (#3106) 2026-06-15 16:12:19 +09:00
THREAT_MODEL.md docs: add THREAT_MODEL.md (#1111) 2026-06-02 22:40:37 +09:00
update_windows.bat Windows: add Docker update script 2026-06-02 20:45:32 +09:00

Odysseus

A self-hosted AI workspace for chat, agents, research, documents, email, notes, calendar, and local model workflows.

Quick Start · Setup Guide · Contributing · Roadmap

Packaging status

Odysseus interface


Quick Start

dev is the default branch and gets the newest changes first. Use main if you want the more curated branch.

git clone https://github.com/pewdiepie-archdaemon/odysseus.git
cd odysseus
cp .env.example .env
docker compose up -d --build

Open http://localhost:7000 when the containers are healthy. The first admin password is printed in docker compose logs odysseus.

Native installs, GPU notes, Windows/macOS instructions, HTTPS, and configuration live in the setup guide.

Features

  • Chat + Agents — local/API models, tools, MCP, files, shell, skills, and memory.
  • Cookbook — hardware-aware model recommendations, downloads, and serving.
  • Deep Research — multi-step web research with source reading and report generation.
  • Compare — blind side-by-side model testing and synthesis.
  • Documents — writing-first editor with AI edits, suggestions, Markdown, HTML, CSV, and syntax highlighting.
  • Email — IMAP/SMTP inbox with triage, tags, summaries, reminders, and reply drafts.
  • Notes, Tasks + Calendar — reminders, todos, scheduled agent tasks, and CalDAV sync.
  • Extras — gallery/image editor, themes, uploads, web search, presets, sessions, and 2FA.

Demo

A full hover-to-play tour lives on the landing page: docs/index.html.

Contributing

Help is welcome. The best entry points are fresh-install testing, provider setup bugs, mobile/editor polish, docs, and small focused refactors. See CONTRIBUTING.md and ROADMAP.md.

Security

Odysseus is a self-hosted workspace with powerful local tools. Keep auth enabled, keep private data out of Git, and do not expose raw model/service ports publicly. Deployment details are in the setup guide.

Star History

Star History Chart

License

AGPL-3.0-or-later -- see LICENSE and ACKNOWLEDGMENTS.md.