Open Source App Cloud Marketplace

Wag is an authentication gateway for WireGuard that lets each device reach only the routes it should, and asks for a second factor before the sensitive ones open. Admins write access policies for everyone, groups, or single users, marking subnets, hosts, ports, and protocols as MFA-required, always allowed, or denied, and the most specific prefix wins, so one allowed address can sit inside a protected range. Devices join with a registration token, and the public endpoint answers with a finished WireGuard profile. Users then confirm a TOTP code, a WebAuthn security key, an OIDC single sign-on login that maps identity provider groups into Wag groups, or a PAM prompt, and repeated failures lock the account. Session lifetime and idle timeouts decide when they must prove themselves again. The browser portal lists users, devices, rules, registration tokens, and webhooks with real-time notifications, while a command line locks devices, resets MFA, and manages administrators. Webhooks turn JSON from an HR or identity system into new tokens or removed users and devices, and clients can fetch the list of guarded routes from a small API. Remote staff, contractors limited to one host, and homelabs are typical uses. When a server fails, the VPN remains reachable through clustering with witness nodes or an external etcd, and certificates arrive through ACME with HTTP-01 or Cloudflare DNS-01. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

dyrector.io gives teams a visual web interface for deploying and managing containerized applications across Docker, Kubernetes, and Podman environments, replacing repetitive CLI commands and YAML editing with point-and-click configuration. Lightweight Go agents installed on target infrastructure communicate with the central TypeScript platform, enabling deployments to AWS, GCP, Azure, and on-premises servers without requiring infrastructure migration. Unified configuration screens eliminate redundant YAML editing across environments with support for all three container runtimes. Version management lets teams configure OCI-compatible container images once and deploy them as versioned releases with auto-generated changelogs and release notes. Multi-instance deployment enables simultaneous rollouts to multiple nodes with environment-specific configuration overrides, secret management, and instant test environment provisioning from any branch. The fine-grained RBAC system controls user access at project and environment levels, while audit logging tracks every deployment action. Registry integrations support Docker Hub, GitLab, GitHub, Google, and Azure container registries for image sourcing. ChatOps notifications integrate with Slack, Discord, and Microsoft Teams for deployment status alerts. Scheduled releases and workflow support enable automated deployment pipelines triggered by CI events via the REST API with JWT authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

A single binary watches everything you care about and only bothers you when something breaks. EaseProbe is an open-source health and status checker that probes websites over HTTP, TCP ports, ping, TLS certificates, shell commands, SSH hosts, and native clients for MySQL, PostgreSQL, Redis, MongoDB, Kafka, Memcache, and ZooKeeper. Each target gets an interval, timeout, retry checks, and data validation, from HTTP status and XPath evaluation to a Redis key matching an expected value; SSH host probes also watch CPU, memory, and disk so slow saturation gets caught alongside hard failures. When a target flips state, edge-triggered notifications fan out to Slack, Discord, Telegram, Microsoft Teams, email, AWS SNS, WeCom, DingTalk, Lark, SMS providers, log files, syslog, or your own shell script, with repeat alerts and quiet recovery behavior under your control. Availability history accumulates into daily, weekly, or monthly SLA reports delivered through those same channels, plus a live SLA page and JSON endpoint served by the probe itself. Everything it measures also exits as Prometheus metrics with per-target status, latency, and uptime, ready for Grafana dashboards and alerting rules alongside the rest of your stack. Configuration is one YAML file, persistence is one local data file, and the same binary runs on a tiny VPS watching an entire fleet. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Anyone juggling several Oracle Cloud accounts knows the tab-switching ritual; OCI Core ends it by pulling every tenancy's instances into one self-hosted panel. The cross-account list shows state, shape, volumes, and public IPs for each machine, and you can start, stop, resize, rename, or terminate instances without opening Oracle's console. A creation wizard offers every shape in an availability domain, not just the free presets, while long operations such as IP swaps, resizes, and terminations run as background jobs with visible progress. Capacity hunting watches Oracle's read-only capacity reports and retries creation until a scarce shape appears, notifying you when it lands. Networking tools edit VCNs, subnets, and security rules visually, swap public IPs, enable IPv6, and manage extra network cards. Storage views resize boot and block volumes, and a rescue mode moves a broken system disk to a healthy machine for repair. Billing breaks spend down by service and region, tracks the monthly free egress allowance, and shows real usage for free-tier accounts. Accounts are checked for connectivity, quotas, and credential health, with emails, IPs, and OCIDs masked by default and revealed only on demand. Alerts reach Telegram, WeCom, DingTalk, email, or webhooks, and access is guarded by argon2id passwords, TOTP two-factor sign-in, session controls, and an audit log. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Damselfly puts a searchable brain over a folder-based photo archive, so a library of hundreds of thousands of images stays browsable from any browser. Point it at your existing folders and it indexes everything in the background, generating thumbnails and reading IPTC keywords, EXIF camera data, and file names into one catalogue. Search returns results in under a second even across 500,000 photographs, and advanced filters narrow by date range, camera or lens model, file size, orientation, detected objects, or recognized faces. Face detection and recognition run locally and offline, so you tag a person once and Damselfly finds them in other shots without sending family photos to a cloud service. Keyword tagging writes metadata with ExifTool without re-encoding JPEGs, keeping originals byte-identical while tags travel with the files into DigiKam, Photoshop, or other tools. The Picasa-style basket collects picks from search results for download, watermarked export for social media or email, or upload to WordPress, and baskets can be personal or shared between users. Photos with location metadata appear on a map, visually similar images can be found from a single example, and untagged shots can be listed so nothing stays unlabelled. Accounts with role-based permissions let everyone browse while only editors tag or reorganize, and an optional desktop client syncs basket selections to a laptop for editing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Talkyard combines five discussion formats in one platform: StackOverflow-style Q&A with accepted answers, Reddit-like upvote sorting for ideas, threaded forums, real-time chat channels, and embeddable blog comments. Running separate tools for each conversation type fragments community knowledge across disconnected systems, but Talkyard keeps it all searchable in one place. Question askers mark accepted answers, and community voting surfaces the best solutions for future visitors. Idea topics sort by upvotes for crowdsourced feedback prioritization and product decisions. Chat channels handle real-time day-to-day conversation, while forum threads preserve important discussions that need to remain findable months later. The embedding capability goes beyond blog comments: entire Talkyard forums can live inside iframes on your existing website with automatic deep-linking and iframe auto-resizing, adding community discussion to any page without rebuilding your site. Docker Compose containers run with dropped capabilities, no-new-privileges enforcement, non-root processes, health checks, and automatic log rotation. Multi-site hosting serves multiple communities from one installation with isolated databases and separate domains. Automated upgrades pull new images and restart services without intervention. ElasticSearch indexes every discussion format for instant full-text search. The Scala backend with TypeScript frontend stores data in PostgreSQL with automatic Let's Encrypt HTTPS. Runs on a RepoCloud VPS with guaranteed CPU, RAM, SSD, root SSH, and browser console. AGPL licensed.

Centralizing BorgBackup usually means hand-creating Unix users, wiring SSH keys, and remembering which machine stopped backing up three weeks ago; BorgWarehouse replaces that terminal work with a dashboard built for exactly this job. Add a repository and it provisions the dedicated user, authorized key, and storage quota for you, then hands back ready-to-paste client commands so a new machine is backing up in minutes. Every repository carries a freshness threshold: when no modification lands within the window you set, its status dot turns red and an alert goes out by SMTP email, through Apprise to Discord, Telegram, Slack, Gotify, or ntfy, or as a signed webhook POST to tools like n8n and Uptime Kuma, rate-limited to one alert per repository per day. Append-only mode is enforced on the server, so even a fully compromised client can add archives but never destroy existing ones, which is the property that keeps ransomware from eating your backup history. The monitoring view tracks storage consumption against each quota, a setup wizard walks new clients through onboarding (with a LAN variant for local transfers), and sign-in can delegate to GitHub, Google, Microsoft, GitLab, or any OIDC provider. A versioned REST API automates provisioning, and your passphrase never reaches the server: backups stay end-to-end encrypted on the clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A drag-and-drop task board that works fine on its own and can also hand cards to AI coding agents, Veritas Kanban shows what each agent is doing, what it changed, and what is waiting for your approval. Start with no agents at all. Cards move through To Do, In Progress, Blocked, and Done, and each one carries subtasks, dependencies, time tracking, comments, and an activity log. When you are ready, connect Codex, Claude Code, Copilot CLI, Hermes, or OpenClaw, give every agent an Intern, Specialist, or Lead permission level, and follow each agent's status and model on a live dashboard. Let a task run in its own Git worktree, read the diff, leave inline comments, approve or request changes, and open a GitHub pull request from the task panel. Squad Chat gives agents one shared channel that posts spawned, completed, and failed events. Workflows chain steps with parallel branches, loops, and human approval gates. Policy rules allow, deny, or hold agent actions for review. Assistants reach the board through an MCP server, a command-line client, or a REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Bookshelf turns a folder of EPUBs and PDFs you already own into a private library you can browse and read from any browser, at home or on your own server. Drop books into a folder, run the sync, and the shelf appears with covers extracted, titles searchable, and accents forgiven, so typing Bronte finds Brontë. Each reader in the house gets a profile that remembers their place in every book, and picking a book up on your phone resumes where the laptop left it, with a Continue button waiting on the shelf. EPUBs open chapter by chapter instead of downloading the whole archive, and PDFs stream in small ranged reads, so even a large scanned book opens quickly. Choose a two-page spread, a single page, or continuous scroll, then set paper, sepia, or night tints for longer sessions. E-readers join through the OPDS catalog, which lets a Kobo or Kindle-side client browse and download from the same shelf. There is no database to run and no account system to manage; the library is plain files you can back up with the volume. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Airstation turns your music folder into a radio station where every listener hears the same second of the same song at the same time. From the studio panel you upload tracks once, and they stay in a permanent library you can search and sort by date added, name, or duration. Build the broadcast queue by dragging tracks into order, reshuffle it whenever the mood changes, let it cycle endlessly, shuffle it randomly, or pause the station entirely when the day is done. Playlists group tracks for recurring shows, and the playback history shows listeners what has already aired. Anyone with the link opens the player page and is listening within seconds, no account and no app install, while a live counter tells you how many people are tuned in right now. The player page itself can be retitled to match your station's name. Friends get a shared listening moment instead of another playlist link, communities get a station that plays their own rotation around the clock, and collectors get to hear their library the way radio always felt: live, shared, and slightly out of your control once it starts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

HotHost answers the only two questions that matter about every server you own, is it up and is the disk about to fill, before your users ask them instead. One web container collects metrics from a tiny agent you paste onto each host as a Docker or shell snippet, and the fleet lands in a single table: hostname, public IP, RAM and disk usage, CPU model and cores, swap state, and country. Disk and RAM get loud ALERT badges at a configurable threshold, ninety percent by default, and notifications fire on failure and again on recovery, so a resolved incident closes its own loop. The same console watches your websites directly, requesting each URL on your interval and checking the status code, a required keyword in the response, or basic auth behavior. SSL certificates get an expiration reminder fourteen days out by default, long before the browser warnings start. When memory climbs, the top ten RAM-consuming processes are charted over the last two days, turning "something is eating the box" into a named culprit. Alerts route through Email, Slack, Telegram, or Gmail plugins, and the plugin system accepts your own notifiers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Open a new tab and the whole homelab should answer two questions instantly: where is everything, and is it still alive? Sites appear as large tappable icons with custom artwork, or Jump fetches each service's original favicon on its own. Green means up, red means down: real-time status monitoring paints every entry, so a failed service announces itself before anyone files a complaint. Tags spread links across multiple pages, and the tag panel jumps between home, media, admin, or any grouping you invent. A keyboard shortcut opens search, matching names, tags, and URLs as you type, and the same box can hand a query to your chosen search engines for everything beyond the lab. Weather and local time sit in the corner through OpenWeatherMap, backed by your own background photos or a fresh Unsplash image each visit. Greeting, clock format, and site name are all switchable, and the layout adapts to a phone screen held in one hand. Configuration lives in plain mapped folders for backgrounds, favicons, search engines, and sites, so a backup is just a copy. It serves on port 8080 in Docker, installs on Kubernetes with a community Helm chart, or runs directly under PHP on a web server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Define your tables once, and Daptin runs the backend around them: every schema becomes a permission-aware JSON:API resource with CRUD, relationships, filtering, and pagination, plus an optional GraphQL surface over the same model. Users, groups, and row-level permissions gate who can read or change each record, with JWT login, one-time codes, and OAuth and OIDC endpoints for sign-in. Files ride along as asset columns backed by local or cloud storage through rclone, with presigned uploads and storage sync. Actions chain validation, conditions, and ordered outcomes into reusable operations, scheduled tasks run them on a cron clock as a chosen user, and state machines track each record's lifecycle with an audit trail. Changes stream out live over WebSockets and feeds, while FTP, calendar and contacts routes, and an OpenAI-compatible LLM gateway expose the same model to other tools. Plans, quotas, and metering let you charge for API and model usage from the same server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-3.0 licensed.

SoftJL turns a system description into the UML diagrams, test cases, and Word specifications a software project is supposed to produce, and keeps every artifact traceable back to the requirement it came from. Describe your system in chat and confirm the extracted requirement rules, then work through feasibility analysis with system context, business and system flows, and implementation options weighed by cost, benefit, and risk. From the confirmed rules it builds requirement and design models: functional structure, use cases, domain concepts, architecture, design classes, database and deployment diagrams, all editable as PlantUML with SVG export. Tests follow the same thread, with normal, exceptional, and boundary cases mapped to requirement rules in coverage and traceability matrices that show exactly which requirements lack design or test support before you submit. When a requirement changes, dependencies and update status point at the models, tests, and documents that need review, instead of leaving you to rediscover them by hand. Specifications generate from the saved models as versioned, editable DOCX files, a feasibility report, a requirements specification, and a design description, ready to compare against the diagrams and revise. An optional read-only MCP endpoint lets a coding agent read your designs and acceptance criteria, and the whole workspace runs on your own OpenAI-compatible model service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Enterprise documentation discipline without enterprise infrastructure: Documize Community is the Confluence alternative built on exactly that trade. The entire platform - Go backend, Ember.js frontend - compiles to a single executable binary for Linux, Windows, and macOS with zero runtime dependencies: no Elasticsearch, no Redis, no JVM. Point it at PostgreSQL, MySQL, MariaDB, Percona, or Microsoft SQL Server (rare in open source, decisive in Microsoft shops), and schema migrations run on launch with native full-text search on whichever engine you chose. Content organization rejects nested-folder sprawl for Spaces, categories, and labels, and the section-based composable editor mixes rich text, Markdown, code blocks, PDFs, diagrams, and embedded Jira or Trello content in one document, with reusable blocks and templates so teams start from standards rather than blank pages. It deliberately unifies internal team docs and customer-facing documentation in one system with granular space-, document-, and action-level permissions deciding who sees what. Where wikis stop, Documize continues: content approval workflows (draft, review, approve, publish), version management, lifecycle control, feedback capture, PDF export, analytics showing what gets read and ignored, activity streams, and audit logs. Keycloak, LDAP, and SSO integrate for enterprise auth. AGPL-licensed.

CC Our Story gives a couple a private website of their own, a shared home for the timeline of small moments, anniversaries, wishes, and messages that no social platform gets to index, advertise against, or quietly delete. The home page shows the two of you, how long you have been together, and the memories you most recently added. Every photo and note lands on a moments timeline you scroll like a story, anniversaries count down so the next one never sneaks past, and a guestbook lets friends leave blessings without creating accounts, identified by a privacy-preserving fingerprint instead of a sign-up form. A wish shop turns promises into something playful: post the things you would do for each other as redeemable wishes, spend the heart points you earn, and have your partner confirm when the wish is fulfilled. Sensitive records can be locked, private extras include synchronized-answer compatibility tests and gentle cycle tracking with daily notes, and the database ever holds exactly two accounts, yours. Web Push and email notifications run as independent channels so a new post, comment, or heartbeat reaches the other phone even if one channel fails, while an optional AI companion group with named personas drops by occasionally to comment on new moments through any OpenAI-compatible endpoint, never seeing drafts or locked posts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A personal flight logbook you host yourself, Jetlog draws every route you have flown on a pannable world map and turns the totals into charts. The home page opens with counts of flights, airports, hours, distance, and countries above that map, where dots mark visited airports and lines trace each trajectory. Settings let markers and lines grow with visit frequency and shade the countries where you have landed. Logging a flight takes only two airports and a date. Type a flight number and press Fetch to pre-fill the origin, destination, and airline, and a utility links connection flights automatically. Duration and distance are calculated for you and stay editable, with an option to use airport time zones. The All Flights table lists route, times, duration, distance, seat, class, and airline with filters and configurable columns, and each flight opens a detail page with airport data, a route map, tail number, and aircraft. A Statistics page charts flights per month, cumulative distance, most visited airports, most common airlines, ticket class, and seat for any time frame. History arrives through MyFlightRadar24 or custom CSV imports and leaves as CSV or iCal. Family members can share one install with separate logbooks, an admin manages the accounts, and the responsive layout works on a phone at the gate. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

HabitSync treats habit tracking as a team sport, because willpower alone rarely survives February. Set each habit up the way life actually works: daily, weekly, monthly, on chosen weekdays, or at a custom interval, with a target value to reach or a ceiling to stay under for the habits you are trying to quit. Logging takes one tap, or a long press when today's effort deserves a custom number or a stopwatch. Share a habit with a partner, a sibling, or the whole household and everyone's progress sits side by side, which turns "did you go to the gym" into a question the dashboard answers. Monthly challenges raise the stakes with community voting, leaderboards, and medals for the top performers, while gentle automation watches your back: scheduled reminders when a habit goes unlogged, an alert when your completion slips under a threshold, and a quiet nudge when a friend overtakes you. Years of Loop Habit Tracker history import instead of being abandoned, and the installable web app keeps the streak one tap away on any device. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.