Open Source App Cloud Marketplace

PenX delivers an open-source structured note-taking application that functions as a personal database disguised as an elegant editor — combining the outline workflow of Workflowy and Roam Research with the structured data capabilities of Tana through MetaTags that transform every note into a queryable database record. The local-first architecture stores all data on-device using PGLite, an in-process PostgreSQL-compatible engine, ensuring data ownership regardless of cloud connectivity. End-to-end encryption protects all synchronized data so that even the sync server cannot read your notes, tasks, ideas, or documents. GitHub-based version control provides out-of-the-box backup and history with full commit-level recovery. MetaTags are the core innovation — attaching structured tags to any note converts it into a database entry with typed fields, enabling table views, filters, and queries across your knowledge base without imposing rigid folder hierarchies. The daily notes workflow encourages free-form capture while MetaTags handle organization automatically, letting you record thoughts without deciding physical location upfront. AI-driven features assist with content generation, summarization, and intelligent search across your personal data hub. Real-time sync keeps web, desktop, and mobile in perfect alignment. Cross-platform availability includes web, desktop for Windows, macOS, and Linux, iOS, and Chrome extension. Deploy the web service via Next.js with pnpm using tRPC and Prisma. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

CAPTCHAs make every visitor solve a puzzle to prove they are human; Mosparo takes the opposite route and checks the submitted content itself, no challenges, no image grids, and no tracking cookies. Drop the customizable checkbox widget into any form and Mosparo inspects each field separately, scoring the entry against your rules the way an email spam filter scores a message. Build field rules for banned words, domains, email addresses, IP addresses and subnets, providers, Unicode blocks, user agents, and websites, each with its own rating weight, or subscribe to shared rule packages that refresh themselves automatically. Every submission lands in an admin inbox with its spam rating, IP address, and verification status, and dashboard charts show valid versus spam traffic plus delayed or blocked requests over time. Legitimate users notice nothing but a plain checkbox, which stays fully usable with assistive technology, while everything Mosparo stores is encrypted and automatically deleted after 14 days. Run one instance for many sites with separate projects, project groups, and member roles, and connect your forms over the documented API from any stack that can send an HTTP request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Talkyard combines five discussion formats in one platform: StackOverflow-style Q&A with accepted answers, Reddit-like upvote sorting for ideas, threaded forums, real-time chat channels, and embeddable blog comments. Running separate tools for each conversation type fragments community knowledge across disconnected systems, but Talkyard keeps it all searchable in one place. Question askers mark accepted answers, and community voting surfaces the best solutions for future visitors. Idea topics sort by upvotes for crowdsourced feedback prioritization and product decisions. Chat channels handle real-time day-to-day conversation, while forum threads preserve important discussions that need to remain findable months later. The embedding capability goes beyond blog comments: entire Talkyard forums can live inside iframes on your existing website with automatic deep-linking and iframe auto-resizing, adding community discussion to any page without rebuilding your site. Docker Compose containers run with dropped capabilities, no-new-privileges enforcement, non-root processes, health checks, and automatic log rotation. Multi-site hosting serves multiple communities from one installation with isolated databases and separate domains. Automated upgrades pull new images and restart services without intervention. ElasticSearch indexes every discussion format for instant full-text search. The Scala backend with TypeScript frontend stores data in PostgreSQL with automatic Let's Encrypt HTTPS. Runs on a RepoCloud VPS with guaranteed CPU, RAM, SSD, root SSH, and browser console. AGPL licensed.

A Misago forum comes with threads, polls, private conversations, nested categories, and the moderation tools to keep them in order. Categories nest to any depth. Permissions follow rank, role, and category. Registration can require e-mail activation or administrator approval, and a Q&A challenge, reCAPTCHA, Stop Forum Spam, or an IP blacklist can turn away spam sign-ups. More than 50 OAuth providers, including Google, GitHub, Steam, and Facebook, can handle sign-in. Posts accept GitHub-flavoured Markdown, a BBCode subset, or both, and attachments get thumbnails. Polls allow public or private voters, multiple choices, vote changes, and deadlines. Question threads let one reply be marked as the best answer. A post-accurate read tracker flags threads with new replies. Private threads stay visible only to the people invited. Presence shows who is online, and members can hide their own activity from non-admins. Custom profile fields get their own display and validation rules. Features and settings for GDPR compliance are included. Themes restyle the forum from the admin panel, and plugins extend it through action and filter hooks. Moderators can edit, move, hide, approve, delete, or close content, and a moderation queue holds new submissions for review before other members see them. If someone empties a post, the edit log shows the original wording and can restore it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Ralph tracks thousands of assets across data centers and back offices through a unified CMDB, DCIM, and asset management platform, providing the same capabilities as ServiceNow, Device42, and Sunbird dcTrack without per-asset licensing fees. Used by Allegro in production and backed by over 2,500 GitHub stars, it is built on Python 3 with Django and Django REST Framework. Interactive data center floor plans support drag-and-drop rack placement, front and rear rack views showing U-level asset positioning, power consumption tracking per PDU, and ethernet and fiber connection mapping. The back office module manages laptops, desktops, printers, mobile phones, and accessories with user assignment tracking, warehouse inventory, stock-taking audits, and automated loan workflows. IP address management handles network environments with DHCP and DNS integration alongside network topology visualization. Software license tracking monitors per-user and per-core allocations with usage calculations, compliance reporting, and expiration alerts, while vendor support contracts track SLA agreements and warranty renewal dates. The transitions system automates asset lifecycle processes through configurable workflows that trigger HTTP webhooks, custom Python scripts, email notifications, and Puppet and Ansible configuration management integration. Custom fields extend the data model with text, numbers, dates, choices, and URLs per asset type, accessible via the REST API. Multi-tenant architecture organizes assets by regions, data centers, service environments, and business units. Deploy via Docker with the allegro/ralph image alongside MySQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Write your knowledge as plain Markdown files, and WikiDocs turns the folder into a searchable, versioned wiki with no database to set up or back up. Pages carry YAML front matter, so the whole wiki can be copied, archived, or opened in any text editor. An editor with a formatting toolbar handles headings, lists, task lists, links, and images, and pictures can be pasted straight from the clipboard. Math is typeset with KaTeX, Mermaid renders diagrams such as ER models and mind maps, and code blocks get syntax highlighting. Every save keeps a revision, a versions dialog lists them, and deleted pages wait in a trash where they can be restored or erased. Attachments upload and download from any page, namespaces build a page tree in the sidebar with pinned pages on top, and full-text search highlights every match. Public mode publishes a read-only knowledge base, private mode requires sign-in, and administrator and user accounts are managed in the app. Settings cover the wiki title, owner notice, privacy banner, language, timezone, light or dark template, and accent color, and every page has a print button. A desktop app keeps files on your computer and syncs with your self-hosted instance, while a REST API with Swagger documentation lets other tools read and write pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Teams that ship one app in many languages keep every string, translator, and reviewer in a single workspace by hosting their own Traduora translation management platform. Developers import the files they already have: JSON, YAML, PO, XLIFF, CSV, Android XML, iOS Strings, Java properties, PHP array, or RESX. Each string becomes a term that can carry a context note and colored labels. A search bar and a label filter narrow long lists in seconds. Translators open a locale and type inline beside a reference language, with per-locale progress showing how much is finished and a toggle that hides what is already done. Colleagues join by email invitation as admins, editors, or viewers, with optional Google sign-in. Build pipelines get their own API clients, each with a role, to fetch and push translations over a REST API. Exports go back out in whichever format each platform wants, with fallback-locale and untranslated-key options. Mobile and web teams can keep iOS, Android, and website copy in sync from a single source of truth. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Audio lectures become structured, Markdown-formatted notes in about a minute with ScribeWizard (also known as GroqNotes). Upload an MP3, WAV, or M4A file - or paste a YouTube link - and the app runs a three-stage pipeline on Groq's LPU inference hardware: Whisper Large v3 transcribes the audio, a larger Llama model drafts a comprehensive outline of the material, and a faster Llama model fills each section with detailed content. This scaffolded prompting strategy is the core idea: the strong model handles structure where quality matters most, the fast model handles volume, and Groq's 1200+ tokens-per-second inference keeps the whole process near real time. Output renders as clean Markdown with support for tables and code blocks, and finished notes download as text or PDF. Model selection is configurable - swap in other Groq-hosted open models like Mixtral or Gemma to trade speed against quality or work around rate limits. Built as a single Streamlit app by Benjamin Klieger at Groq, it needs only a Groq API key to run, making it one of the simplest self-hosted AI tools to operate.

Written in optimized C++ where competitors use Python or Java, NZBGet saturates fast connections while idling on CPU and RAM - which is why the performance-obsessed Usenet downloader has long been the client of choice for NAS boxes, Raspberry Pis, and routers as much as full servers. The engineering shows in the recovery pipeline. Instead of shelling out to par2cmdline, NZBGet integrates the par2 source directly and exploits its knowledge of exactly which articles failed - quick par-verification checks only what needs checking, and its own multicore repair implementation runs 2-3x faster than the external tool on the same hardware. Fast par-rename deobfuscates scrambled filenames in seconds without a full verification pass, and rar-rename recovers names for multivolume archives even when no par2 files exist. DirectWrite assembles articles straight into sparse destination files, skipping temporary-file churn entirely, with an article cache and queue-pausing options to eliminate disk contention. Automation is complete: a remote web interface, full JSON-RPC API, RSS feeds with duplicate detection, scheduling and prioritization, and an extension manager for Python and Bash scripts triggered by download events. Sonarr, Radarr, and every major indexer integrate natively.

Usulnet packs container management, Trivy security scanning, Nginx reverse proxy, scheduled backups, WireGuard VPN, firewall rules, and multi-node orchestration into a single 70MB Go binary with zero external runtime dependencies. Every module ships in one download with no paid tiers, no telemetry, and no edition gating. Container lifecycle management covers creation, start, stop, restart, pause, kill, and removal with bulk operations, real-time resource statistics, filesystem browsing, and settings editing. Trivy integration scans images and running containers for CVEs with severity scoring, generates SBOMs, and validates CIS benchmarks. The multi-node architecture supports standalone, master, or agent modes where agents connect over NATS JetStream with mTLS encryption, enabling remote Docker host management from a central dashboard. Reverse proxy configuration handles Nginx with automatic Let's Encrypt certificates, TCP/UDP stream proxying, access lists, and dead host detection. Backup operations capture container volumes and Compose stacks on configurable schedules with retention policies and full restore capabilities. A built-in application catalog provides 60+ one-click templates for common services. JWT license validation uses an RSA-4096 public key embedded in the binary, requiring no call-home and working entirely offline. For teams tired of maintaining separate tools for each infrastructure concern, Usulnet collapses the entire stack into a single point of management with Docker Compose deployment alongside PostgreSQL, Redis, and NATS.

100% portability is Nanote's one non-negotiable principle as a self-hosted note-taking app. There is no database - notebooks are plain folders and notes are plain Markdown files on your filesystem, so the same notes remain fully manageable from a terminal, Notepad, or any other editor, and walking away from Nanote costs nothing because your data was never in a proprietary format to begin with. Built with Nuxt and TypeScript around the Milkdown editor, it layers modern conveniences on that plain-file foundation: fast content search across all notes using OS-optimized tooling (ugrep), native Markdown rendering, image and file attachments, and a mobile-friendly layout for reading and editing on a phone. Clever remark directives make plain text interactive - typing ::file inserts an inline upload picker, while ::today, ::now, and ::tomorrow expand to live dates and times. A fully typed REST API with validation covers automation, and access is protected by a configurable secret key. Deployment is one container with three env vars: paths for notes, uploads, and config, all bind-mountable so your Markdown lives wherever you want it - including inside an existing sync setup. AGPL-licensed and actively daily-driven by its author.

"Somewhat lightweight, low-friction" is how Silicon Notes' author describes the personal knowledge base - written after DokuWiki's editor "drove me mad" and no existing wiki quite fit. The philosophy is that small frequent annoyances compound into cognitive load with no return, so everything here is optimized for frictionless daily use. Notes are written in plaintext Markdown and rendered as clean HTML with Pygments syntax highlighting for code blocks; pages get bi-directional relationships (backlinks), so the knowledge base becomes a connected web rather than a folder tree; and full-text plus title search retrieves anything fast. A table of contents lives in the left sidebar - "where it belongs" - editable while you read without scrolling away. Page history tracks revisions for auditing and rollback, JSON export/import keeps everything portable, and the mobile layout is genuinely usable. The stack is deliberately minimal: Python and Flask with Mistune for Markdown and SQLite for storage - no big frameworks, just a few small dependencies. One honest caveat: there is no built-in authentication, so deploy it behind a VPN, private network, or reverse-proxy auth layer. For a solo engineer's brain, it is exactly enough.

Buyers now ask an AI assistant before they ever visit your website, and Cited tells you whether your brand made it into the answer. Verify your domain with a DNS record, choose the buyer-like prompts worth watching, and Cited checks them on schedule across ChatGPT, Claude, Gemini, Perplexity, Google AI Mode, and Google AI Overviews. Every meaningful appearance becomes a durable evidence note in your citation inbox: open one to see the exact prompt, the response snapshot, where your domain appeared, and the first-seen history. It distinguishes a true source citation from a brand mention without a link, an explicit recommendation, and the uncomfortable one, a missed opportunity where a competitor got cited and you did not. Competitor tracking runs continuously, so you see rivals earning answers in your category while there is still time to respond. Notes can be annotated, organized through new, seen, saved, and resolved states, and exported for reporting. Email alerts flag meaningful new events and a weekly digest summarizes what changed, so checking becomes a habit instead of another dashboard to babysit. Workspace roles and local credentials keep a small marketing team organized on your own PostgreSQL database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 3,900 GitHub stars, 140 contributors, and 380 releases since its 2022 launch, Grafana OnCall delivers developer-friendly incident response that routes alerts from any monitoring system to the right engineer at the right time through the right channel. The platform accepts alerts via unique API URLs from Alertmanager, Grafana Alerting, Zabbix, Datadog, Pagerduty-compatible sources, Jira, inbound email, and generic HTTP webhooks, then applies routing templates to direct each alert to the appropriate escalation chain. Escalation chains define notification sequences — notify the primary on-call via Slack, wait 5 minutes, escalate to SMS and phone, wait 10 minutes, page the secondary on-call and notify the engineering manager — continuing until acknowledgment or resolution. On-call schedules support multi-layer rotations with overrides, shift swaps, and timezone-aware handoffs rendered directly inside Grafana dashboards. ChatOps integration publishes alert groups to Slack channels and Telegram groups with interactive buttons for acknowledge, resolve, and silence actions. Template engines based on Jinja2 control alert grouping, appearance rendering, and behavioral automation. The REST API enables programmatic management of integrations, schedules, and escalation policies. Deploy via Docker Compose with PostgreSQL, Redis, and Celery workers alongside your existing Grafana instance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3 licensed.

dyrector.io gives teams a visual web interface for deploying and managing containerized applications across Docker, Kubernetes, and Podman environments, replacing repetitive CLI commands and YAML editing with point-and-click configuration. Lightweight Go agents installed on target infrastructure communicate with the central TypeScript platform, enabling deployments to AWS, GCP, Azure, and on-premises servers without requiring infrastructure migration. Unified configuration screens eliminate redundant YAML editing across environments with support for all three container runtimes. Version management lets teams configure OCI-compatible container images once and deploy them as versioned releases with auto-generated changelogs and release notes. Multi-instance deployment enables simultaneous rollouts to multiple nodes with environment-specific configuration overrides, secret management, and instant test environment provisioning from any branch. The fine-grained RBAC system controls user access at project and environment levels, while audit logging tracks every deployment action. Registry integrations support Docker Hub, GitLab, GitHub, Google, and Azure container registries for image sourcing. ChatOps notifications integrate with Slack, Discord, and Microsoft Teams for deployment status alerts. Scheduled releases and workflow support enable automated deployment pipelines triggered by CI events via the REST API with JWT authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Writing docs should feel like editing a modern document, not wrangling Markdown files - CodeX Docs delivers that on Editor.js, the block-styled editor its CodeX team builds and thousands of products use. Content is composed from clean blocks (headings, lists, code, images, embeds) with a UI that reads well on both desktop and mobile, and pages render statically with human-readable, SEO-friendly URLs. Structure is free-form: pages nest to any depth, so a flat FAQ and a deep product manual coexist in one instance, and the UI tunes to fit - collapse sections, hide the sidebar. The operational footprint is deliberately tiny. No database is required: the default driver persists to a local folder, with MongoDB available when you want it, and the whole app configures through one YAML file (overridable with APP_CONFIG_ environment variables) covering title, start page, auth password, and JWT secret. Editing mode sits behind password authentication. Thoughtful extras are wired in: readers can report misprints straight to your Telegram or Slack, Hawk error tracking catches frontend and backend exceptions, and Yandex Metrica analytics is a one-line config. A ready-made Helm chart covers Kubernetes. Written in TypeScript.

Database administrators and backend engineers managing production PostgreSQL, MySQL, MariaDB, MongoDB, and Redis instances use Velld to centralize scheduled backups, storage retention, and disaster recovery in a single self-hosted control plane. You can register multiple database connections across staging and production environments, test connectivity with one click, and route traffic through encrypted SSH bastion tunnels using password or private-key authentication to reach isolated private subnets. Flexible cron schedules and preset hourly, daily, weekly, or monthly intervals automate snapshot creation, while configurable retention policies purge expired archives from local volumes or S3-compatible object storage buckets after seven, fourteen, thirty, or ninety days. An integrated backup comparison tool renders split or unified line-by-line diffs between any two snapshots so you can inspect schema changes or data drift before triggering a guided database restore or downloading compressed dump files. The real-time monitoring dashboard tracks backup completion rates, total storage consumption, and execution histories alongside automated email and webhook alerts that notify your team immediately if a scheduled job fails. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ClientSt0r is a self-hosted operations platform for managed service providers that keeps client documentation, IT assets, credentials, and the service desk in one multi-tenant system running on your own infrastructure. Open any ticket and the client's active contract, the asset it concerns, the runbook that covers it, and the vault entries you are allowed to use appear alongside the conversation, so nobody switches between four products during an outage. Readiness scoring grades every client against what should be documented, explains each gap, and queues the fixes, while versioned documents with owners and review dates keep runbooks from quietly going stale. The credential vault encrypts secrets with AES-256-GCM, isolates them per client, enforces IP, geography, and time-of-day access rules, logs every reveal, generates TOTP codes, checks passwords against known breaches, and imports existing Bitwarden or Vaultwarden libraries. Asset records cover hardware inventory, IP address management, rack layouts, and printable QR labels. The service desk adds queues, SLA timers, dispatch views, time entries, quotes with electronic signatures, invoices, contracts, approvals, a workflow rule builder, a threading email engine, and guided client portal forms, while procurement, profitability reporting, CVE scanning, SSL expiry tracking, and uptime monitoring round out daily operations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.