bugfishtm/ai-everything repository overview

⁠Everything Studio (ai-everything)

A self-hosted creative workspace in one container: music, images, 3D models, video, browser games, Android apps, Windows programs, web apps and WordPress sites, built by an AI coding agent that runs with each user's own AI account.

⁠🚀 What's inside

• The Studio website and API (Node.js) on port 8080
• Its own database (MariaDB, MySQL compatible). Nothing to set up.
• Text-driven creative tools the AI uses and extends: a DAW (studio-daw), a 3D editor (studio-3d), studio-image, studio-video and studio-stickman
• Toolchains: Node.js, Python, JDK + Gradle (Android), .NET + mingw-w64 + NSIS (Windows), PHP-FPM + WP-CLI (WordPress), Playwright + Chromium (headless browser)
• A website server on ports 8081 / 8443 that publishes projects on your own domains, with HTTPS certificates from Let's Encrypt requested and renewed by itself
• One Linux account per user, sandboxed previews, confined PHP per WordPress site, per-user limits and an admin area

Downloaded at runtime, not part of the image: Claude Code, the other AI agents (OpenAI Codex, Gemini CLI, OpenCode), the Android SDK (after an admin accepts Google's license) and WordPress.

⁠🗒️ Requirements

⁠🐳 Quick start

⁠docker run

docker run -d --name ai-everything \
  -p 127.0.0.1:8080:8080 -p 127.0.0.1:8081:8081 -p 127.0.0.1:8443:8443 \
  --shm-size=1g --restart unless-stopped \
  -v studio-data:/data -v studio-db:/var/lib/mysql \
  bugfishtm/ai-everything:latest

Open http://localhost:8080⁠. The first account you create becomes the administrator. Then connect your AI under Account & AI.

⁠Docker Compose

A ready-to-use docker-compose.yml and .env are below the variable tables: Deploy with Docker Compose⁠.

⁠Recommended run options

⁠🔌 Ports

Bind to 127.0.0.1 for a single computer. On a public server map 80 → 8081 and 443 → 8443, set SITES_PORT=80 and SITES_HTTPS_PORT=443, and keep 8080 on 127.0.0.1 (reach the Studio over HTTPS under STUDIO_DOMAIN).

⁠💾 Volumes

Everything persistent lives in two volumes. They survive updates, container re-creation and docker compose down. Only docker compose down -v or docker volume rm deletes them.

Use named volumes, not bind mounts from Windows or macOS folders: the Studio sets Linux owners and permissions per user, which those file systems don't keep.

Backups: back up both volumes together, ideally with the container stopped, or use scripts/backup.sh from the repository (database dump + data volume).

⁠⚙️ Environment variables

Every variable is optional. Without any, the Studio runs with the defaults below.

⁠Website and access

⁠First administrator

Optional. Without these, the first person who opens the website creates the admin account (from the internet that needs the setup code printed in the container log: docker logs ai-everything | grep "setup code").

⁠AI agents

⁠Limits

⁠Project servers (Node.js backends)

Projects can run their own Node.js servers (multiplayer, saves, APIs), each as the owner's sandbox user, reachable at <Studio address>/srv/<name>/.

⁠Websites and HTTPS

⁠WordPress

Each WordPress project is a real site with its own database and its own PHP, running as the owner's sandbox user. WordPress itself is downloaded from wordpress.org when a site is set up.

⁠Android SDK

Installed at runtime into /data, never baked into the image. Normally an admin installs it in Admin → Android SDK and accepts Google's license there.

⁠External database (optional)

Leave MYSQL_HOST empty to use the built-in database.

⁠🧩 Deploy with Docker Compose

Create a folder with these two files, edit .env, then run:

docker compose up -d
docker compose logs -f studio

⁠docker-compose.yml

name: ai-everything

services:
  studio:
    image: bugfishtm/ai-everything:latest
    restart: unless-stopped
    ports:
      # the Studio website
      - "${STUDIO_BIND:-127.0.0.1}:${STUDIO_PORT:-8080}:8080"
      # published websites of projects (HTTP and HTTPS)
      - "${SITES_BIND:-127.0.0.1}:${SITES_PORT:-8081}:8081"
      - "${SITES_BIND:-127.0.0.1}:${SITES_HTTPS_PORT:-8443}:8443"
    env_file: .env
    environment:
      # the ports users see in website addresses (the container ports above stay 8081/8443)
      SITES_PORT: ${SITES_PORT:-8081}
      SITES_HTTPS_PORT: ${SITES_HTTPS_PORT:-8443}
    volumes:
      - studio-data:/data
      - studio-db:/var/lib/mysql
    # headless Chromium needs more shared memory than Docker's 64 MB default
    shm_size: "1gb"
    # time for AI runs and the database to shut down cleanly
    stop_grace_period: 30s
    security_opt:
      - no-new-privileges:true
    pids_limit: ${STUDIO_PIDS_LIMIT:-16384}
    logging:
      driver: json-file
      options:
        max-size: "20m"
        max-file: "5"

volumes:
  studio-data:
  studio-db:

⁠.env (local computer or home network)

# --- Ports -------------------------------------------------------------------
# 127.0.0.1 = only this computer, 0.0.0.0 = reachable from your network
STUDIO_BIND=127.0.0.1
STUDIO_PORT=8080
SITES_BIND=127.0.0.1
SITES_PORT=8081
SITES_HTTPS_PORT=8443

# --- Website -----------------------------------------------------------------
APP_NAME=Everything Studio
REGISTRATION=closed

# --- First admin (optional: otherwise the first person to register is admin) --
ADMIN_EMAIL=
ADMIN_USERNAME=admin
ADMIN_PASSWORD=

# --- AI ----------------------------------------------------------------------
CLAUDE_CODE_VERSION=latest
DEFAULT_PERMISSION_MODE=bypass
DEFAULT_MODEL=
# more AIs switched on at the first start, e.g. codex,gemini,opencode
AGENTS=

# --- Limits ------------------------------------------------------------------
MAX_RUNS_PER_USER=2
MAX_TERMINALS_PER_USER=4
MAX_SERVICES_PER_USER=3
MAX_SITES_PER_USER=10
MAX_WORDPRESS_PER_USER=5
UPLOAD_LIMIT_MB=500
STUDIO_PIDS_LIMIT=16384

Then open http://localhost:8080⁠.

⁠.env (public server with HTTPS)

Use the same docker-compose.yml. Point the DNS record of STUDIO_DOMAIN at the server and open ports 80 and 443 in the firewall.

# --- Ports: websites and HTTPS on 80/443, the Studio's own port stays local ----
STUDIO_BIND=127.0.0.1
STUDIO_PORT=8080
SITES_BIND=0.0.0.0
SITES_PORT=80
SITES_HTTPS_PORT=443

# --- The Studio's own address (served over HTTPS on port 443) -----------------
STUDIO_DOMAIN=studio.example.com
PUBLIC_URL=https://studio.example.com
COOKIE_SECURE=true

# --- Let's Encrypt -------------------------------------------------------------
[email protected]
ACME_AGREE_TOS=yes

# --- First admin -----------------------------------------------------------------
[email protected]
ADMIN_USERNAME=admin
ADMIN_PASSWORD=
REGISTRATION=closed

# --- Optional: every website gets <name>.apps.example.com (wildcard DNS record) ---
SITES_BASE_DOMAIN=

# --- Limits worth a look on a shared server -------------------------------------
MAX_RUNS_PER_USER=2
MAX_SERVICES_PER_USER=3
MAX_SITES_PER_USER=10
MAX_WORDPRESS_PER_USER=5
STUDIO_PIDS_LIMIT=16384

Wait for certificate for studio.example.com issued in the log, then open https://studio.example.com. Any variable from the tables above can be added to .env.

⁠🌍 Public server

docker run -d --name ai-everything \
  -p 127.0.0.1:8080:8080 -p 80:8081 -p 443:8443 \
  --shm-size=1g --restart unless-stopped \
  -e STUDIO_DOMAIN=studio.example.com \
  -e PUBLIC_URL=https://studio.example.com \
  -e SITES_PORT=80 -e SITES_HTTPS_PORT=443 \
  -e COOKIE_SECURE=true \
  -e [email protected] -e ACME_AGREE_TOS=yes \
  -v studio-data:/data -v studio-db:/var/lib/mysql \
  bugfishtm/ai-everything:latest

1. DNS: an A record (and AAAA for IPv6) for the Studio's host name. Optionally a wildcard record on a separate domain (*.apps.example.com) together with SITES_BASE_DOMAIN.
2. Firewall: ports 80 and 443 open. Port 8080 stays on the server (use an SSH tunnel for maintenance).
3. Watch the log for certificate for studio.example.com issued, then open https://studio.example.com.

Behind your own reverse proxy instead: route the Studio's host name to 8080 and every other host name to 8081, pass Host, X-Forwarded-* and WebSocket upgrades, and set TRUST_PROXY=true, PUBLIC_URL and SITES_HTTPS=true. Full guide: Server & HTTPS⁠.

⁠🔄 Updating

docker pull bugfishtm/ai-everything:latest
docker stop ai-everything && docker rm ai-everything
# run the same docker run command again — the volumes keep all data

With Compose: docker compose pull && docker compose up -d.

⁠🩺 Health check

The image has a built-in health check on http://127.0.0.1:8080/api/health. The first start can take a minute or two while the database initializes and Claude Code is downloaded.

⁠📄 Legal

• Claude Code is not in this image. It is downloaded from the official npm package at the first start and used by each person with their own account under Anthropic's terms⁠. The Studio never stores subscription credentials.
• Other AIs, the Android SDK and WordPress are downloaded unmodified from their official sources; their own licenses and terms apply.
• If you run the Studio for other people, the providers' terms for operators apply to you.
• Third-party software in the image and its licenses: docs/LICENSES.md⁠.

What you make is yours. The GPL-3.0 covers the Studio itself, not the songs, pictures, models, games, apps and sites you create with it.

🐟 Bugfish · GitHub⁠ · Documentation⁠ · Security issues: [email protected]⁠