Draw it, write it as code, or hand it to your AI agent: OpenFlowKit is an open-source diagram canvas where the picture and the text behind it are always the same diagram. Drag shapes on the canvas or type a few forgiving lines, and each side regenerates the other as a single undo step. Ten diagram types share that one language: architecture with C4 views and cloud icons, sequence, flowchart, entity-relationship, state, class, mind maps, git graphs, charts, and wireframes. Paste Mermaid, Structurizr, or D2 and it converts into editable shapes, and Copy as Mermaid sends a flowchart or sequence back out for your README. Paste a GitHub repository instead and Map mode draws its architecture for you, with every arrow citing the exact file and line behind it, and a CLI that maps a local checkout for private repos. Connect Claude Code, Cursor, or any MCP client and the agent draws on your live canvas, restyles what is there, and screenshots its own work to check it. A built-in assistant works with your own key from Claude, OpenAI, Gemini, Groq, Mistral, OpenRouter, or a local Ollama, and exports cover PNG, SVG, PDF, JSON, and animated SVG, GIF, MP4, or WebM you can drop into documentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Half the architecture sketches on the internet trace back to Excalidraw - the MIT-licensed virtual whiteboard whose hand-drawn aesthetic made technical diagramming feel approachable, at roughly 85,000 GitHub stars. The infinite canvas offers rectangles, ellipses, diamonds, arrows with smart binding and labels, free-draw, text, images, and an eraser, with full undo/redo, zoom, dark mode, and keyboard-first ergonomics. Community shape libraries add thousands of pre-built elements - AWS architecture icons, flowchart stencils, UI wireframe kits - and everything exports to PNG, SVG, the clipboard, or the open .excalidraw JSON format that keeps drawings diffable and portable. Live collaboration works on a share-a-link model with live cursors and a laser pointer for presenting, and it is end-to-end encrypted by design: the room key travels in the URL hash, which never reaches the server, so the WebSocket relay only ever sees ciphertext. The architecture is remarkably light - the app is a static bundle served by Nginx, drawings persist locally in the browser, and the stateless excalidraw-room relay handles multiplayer - so a self-hosted deployment gives unlimited boards and collaborators with near-zero resource cost, replacing per-editor whiteboard subscriptions.

draw.io is a free, browser-based diagramming editor for flowcharts, network maps, UML models, and org charts, with nothing to install. An infinite canvas takes shapes from extensive libraries, connectors reroute automatically as shapes move, and ready-made templates replace the blank page. Tables, swimlanes, layers, and tags keep large diagrams tidy, and shape metadata and placeholders attach tooltips, links, and translations. Auto-layout straightens flowcharts and trees. Math typesetting, a simple whiteboard layout, and adaptive dark mode are built in, and custom shape libraries carry your own in-house icon sets. Export to PNG, JPEG, WebP, SVG, HTML, or PDF, embed the diagram data inside PNG and SVG files so they stay editable, or save the full diagram as a .drawio file. Your server stores no diagrams: files go to the user's device, the browser, or Google Drive, OneDrive, and GitLab once you register your own OAuth app. Optional AI diagram generation uses your own provider key, and environment variables set the interface language, fonts, and security policy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every homelab eventually earns the question "so what is actually running on all those boxes," and Homelab Atlas turns the answer into a diagram worth posting. Add your servers, the services grouped on each one, and the network gear between them, and the canvas lays everything out automatically with real application logos instead of gray rectangles. Searchable logo pickers work offline, uploads accept your own PNG, JPG, WebP, or SVG marks, and Arrange mode lets you drag and resize cards when the automatic composition is not the story you want to tell. Discovery spares you the typing: point it at Docker or import a saved scan, then review every found device and app, all starting unchecked, before anything joins the diagram as one undoable change. Connections express logical relationships and VLANs, hardware details ride on each card, and your project autosaves in the browser with a downloadable JSON file as the durable copy. When it is time to share, export previews render PNG or SVG with addresses, URLs, and emails hidden by default, plus literal terms you name yourself. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

InfraCanvas draws the picture ten terminal commands cannot: a live map in your browser of every container, pod, service, volume and network on a machine, showing what runs where, what talks to what, and what is broken in one glance. Nodes turn green, amber or red from real state, including container health, pod phases, ready replicas, zombie processes and host thresholds, and real connection edges appear between processes, like your app server talking to Postgres on port 5432, read straight from the machine. It works where workloads already live: Docker and Podman containers, full Kubernetes object graphs from nodes to ingresses, LXD and Incus containers, and plain systemd or PM2 services on VMs with no container runtime. From any node you can shell into the container, pod or host, tail logs, restart or stop a service, scale a deployment, run a rolling restart, change an image or kill a process, with secrets masked before anything reaches the screen. A second machine joins through an outbound-only agent, and clusters connect by dropping in a kubeconfig with nothing installed inside them. The self-hosted binary needs no account, sends no telemetry and opens no inbound port: it binds localhost on port 7777 behind a random per-install token, with an optional read-only mode, and every action is audit-logged. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Excaliself turns the Excalidraw canvas into your team's own whiteboard server, where every sketch, diagram, and flowchart lives in your database instead of a vendor's cloud. The home screen works like a file cabinet for drawings: nest them in folders, star the keepers, drag files between spaces, and find anything again by title or by the text inside the drawing. Share a link and teammates edit together in real time with live cursors and follow mode; links can stay members-only or open to guests who have no account at all. A shared Team space sits next to everyone's private space, and one team library holds the shapes and icons the whole group reuses. AI clients can join with a personal access token: Claude Code or Claude Desktop can search your drawings, read what a diagram says, and create new ones from shapes or a Mermaid flowchart. Accounts are invite-only, single sign-on covers Google, Microsoft, and any OIDC provider, and admins manage members, roles, and password resets from Settings. Deleted drawings rest in a trash folder for thirty days before they are purged, and everything auto-saves as you draw. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ExcaliDash adds persistent storage, access control, version history, and real-time collaboration to Excalidraw, transforming ephemeral whiteboarding sessions into a managed drawing library your team can rely on. The Node.js/Express backend with React/TypeScript frontend deploys via Docker Compose on port 6767, using Prisma ORM on SQLite for all drawings, users, and metadata. WebSocket-powered collaboration lets multiple users edit the same canvas simultaneously with live cursor presence. Drawing snapshots preserve every revision with visual preview and one-click restore to any previous state. Three authentication modes handle different deployment needs: local email/password for personal use, hybrid mode mixing native credentials with OIDC for gradual enterprise adoption, and enforced OIDC-only for organizations requiring SSO through providers like Authentik or Keycloak. Scoped sharing controls determine whether drawings stay private, shared internally with team members, or accessible via external links without authentication. Collections organize drawings through drag-and-drop grouping, full-text search locates any diagram instantly, and exports use the non-proprietary .excalidraw format ensuring complete data portability. 1,350+ stars since November 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Technical teams frequently struggle to keep software architecture diagrams synchronized with evolving codebases and documentation repositories. Atlantis Diagrams delivers a unified self-hosted workspace that couples code-driven Mermaid.js diagramming with structured Markdown knowledge bases in a responsive web interface. Engineers can compose flowcharts, sequence diagrams, state machines, entity-relationship models, and Gantt schedules using split-view CodeMirror editors with real-time SVG rendering. An integrated version history tracker automatically captures revision checkpoints across the last 15 document states, letting authors compare modifications and restore previous iterations without data loss. The linked notes environment supports rich Markdown editing, LaTeX mathematical formulas, interactive task checklists, tag indexing, and full-text keyword searches across personal documentation libraries. Canvas controls allow users to pan, zoom, inspect individual nodes, and export finalized graphics directly into vector SVG, high-resolution PNG, or printable PDF documents. Storage engines adapt to deployment scale, running on zero-configuration SQLite databases out of the box with optional PostgreSQL, MySQL, and Redis caching layers for high-concurrency environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Before lifting a heavy four-unit storage server or rewiring a cramped network closet, you can map every unit of cabinet space in Rackula, an interactive drag-and-drop rack layout designer and capacity planner. Instead of staring at generic grey rectangles in a spreadsheet, you pull switches, routers, patch panels, UPS battery banks, and rackmount chassis from a hardware catalog populated with authentic front and rear faceplates from the NetBox device library. Equipment snaps cleanly to standard EIA-310 rack unit boundaries, while half-width gear and mini PCs nest inside one-unit carrier shelves and mounting brackets. Audiovisual technicians can group bayed cabinets side by side to plan amplifier racks, signal processor chains, and patch bays across multi-rack installations. Network engineers and data center operators can rearrange hardware with full undo and redo history, attach custom device graphics, and export crisp diagrams as PNG, SVG, or PDF files for runbooks and change control tickets. Sharing a proposed cabinet topology with a colleague in the field takes seconds using an encoded URL or a scannable QR code that opens on mobile browsers. Server-side persistence stores your rack definitions as portable YAML files and supports optional local accounts or OpenID Connect single sign-on for shared infrastructure teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Before the maintenance window, know exactly where the traffic will go: Topolograph rebuilds your network the way its routing protocols see it and lets you break it safely on screen. Upload one router's LSDB output, from Cisco, Juniper, Arista, FRRouting, MikroTik, and a dozen other vendors, and the whole area's topology appears as an interactive graph, because the protocol already flooded it everywhere. Compute the shortest path between any two routers and see every equal-cost alternative with per-link loads, then fail a link or a node and watch SPF recalculate: which pairs moved to backup, which are left with none, and how the load shifted on every surviving link. Search the graph for prefixes, MAC addresses, or any network element, plan an MPLS TE path against real bandwidth attributes, and compare snapshots from different moments to answer what changed before the incident. Collectors can stream live OSPF, IS-IS, and BGP events over GRE, BGP-LS, or BMP so the timeline replays the network at the moment things broke, and a REST API, Python SDK, and MCP server let your own tooling and AI agents ask the same questions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Mapping every physical server, virtual machine, container, and network link across a sprawling homelab into a live interactive canvas, Circuit Breaker gives infrastructure operators real-time topology visualization, IP address management, and rack elevation modeling on a single screen. Operators can switch between hierarchical, concentric, cortex ring, radial, and force-directed graph layouts where animated edges reflect link speeds and color-coded status rings display live hardware health. Automated discovery scans local subnets using nmap, SNMP, and ARP while querying Proxmox VE clusters, TrueNAS storage pools, and UniFi controllers, staging newly detected nodes in a review queue before adding them to the map. For multi-site labs or isolated VLANs, lightweight remote agents connect outbound over Noise-encrypted links after fingerprint approval to report host telemetry and run scoped network scans without opening inbound firewall ports. Rack diagrams let administrators drag servers into U slots with cabling overlays using a built-in catalog covering Dell, HPE, Supermicro, Ubiquiti, MikroTik, Synology, and APC gear alongside live iDRAC, iLO, and UPS metrics. Role-based access control, OIDC single sign-on, TOTP multi-factor authentication, encrypted full-state snapshots, and a SHA-256 hash-chained audit log keep multi-user operations accountable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

NetMap answers the four questions every homelab owner asks in four different tools: what is on my network, what address did it get, is it still up, and why is the firewall shouting about it. Devices you add appear automatically on a visual canvas where you can drag them into place, draw the links between them, and group them into VLANs or separate sites, and the layout is still there when you come back. Behind the map, every device is watched continuously: ping times graphed over history, service checks on the ports you care about, a heartbeat strip that betrays intermittent dropouts, and an uptime percentage that settles arguments. Address management stops being a spreadsheet: define subnets, import the leases your router already handed out, see used and free addresses as a grid, and get warned before a duplicate assignment causes a mysterious outage. Firewall logs stream in live and each entry links to the device it concerns, ready to search by address, port, or protocol. When something new appears, a network scan discovers hosts with their names, hardware addresses, and open ports for review before they join the inventory. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Every server, switch port, virtual machine, and network VLAN in a homelab or small IT environment can be cataloged, visualized, and exported through RackPeek's unified web interface and command-line toolkit. Operators record rack-mounted servers, managed switches, routers, firewalls, wireless access points, and uninterruptible power supplies alongside their CPU, memory, and storage specifications in a clean browser dashboard. Beyond physical gear, the inventory tracks operating systems, containerized or bare-metal services, IP subnets, and port-to-port cable connections while organizing assets with searchable tags and key-value labels. From that structured inventory, the interactive visualization engine renders live physical wiring diagrams and logical subnet-grouped service maps that export directly as high-resolution PNG graphics or Mermaid flowcharts. Because all state lives in a single human-readable configuration file backed by built-in Git repository synchronization, teams can version-control infrastructure changes or push automated updates through the authenticated REST API with dry-run diff previews. Day-to-day administration becomes faster with built-in generators that turn your cataloged hosts into ready-to-use Ansible inventory files, SSH client configurations, and tag-filtered hosts tables. Line-and-column validation feedback in the web editor catches schema mistakes immediately before changes are committed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Turning chaotic group brainstorming sessions into structured visual diagrams, TeamMapper provides a real-time collaborative mind mapping workspace that teams and classrooms can join instantly without creating user accounts. Workshop facilitators, teachers, and product squads start from a central root topic and branch outward into hierarchical radial trees, using keyboard shortcuts and full undo-redo history to capture ideas at the speed of conversation. Every node can be styled with custom branch and background colors, adjustable font weights and sizes, external reference links, uploaded raster images, and visual pictograms from the ARASAAC library to reinforce memory and visual association. Sharing a live session takes a single click: hosts distribute either a view-only link, a full modification invite URL, or a scannable QR code so remote colleagues and students in the same room can edit branches simultaneously. When enabled by the administrator, an integrated AI assistant can automatically generate initial mind map branches and subtopics from a text prompt to jump-start planning sessions. Completed maps export cleanly to JSON, Mermaid diagram syntax, scalable SVG vectors, high-resolution PNG images, or printable PDF documents, and existing JSON maps can be re-imported at any time for follow-up workshops. Built-in privacy controls automatically purge inactive mind maps and orphaned image attachments after a configurable retention window, simplifying GDPR compliance for schools and enterprises. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Paste one SQL query result into a browser and get an interactive entity-relationship diagram instantly, with no installations, no credentials, and no account required. ChartDB's "Smart Query" runs a single statement in your existing database client that exports table definitions, relationships, indexes, and column types as JSON metadata, meaning the application never touches your database passwords. The canvas renders draggable entities with cardinality markers, collapsible grouping areas, and sticky notes for documentation. AI-powered DDL export generates migration scripts between dialect pairs like PostgreSQL to MySQL or SQLite to CockroachDB, analyzing your schema to produce target-specific DDL with correct type mappings and constraint translations. Import paths cover Smart Query JSON, raw DDL scripts, and DBML files from tools like dbdiagram.io. The AI layer connects to OpenAI or any compatible inference server including local vLLM instances running models like Qwen2.5-32B. Database coverage includes PostgreSQL (with Supabase and Timescale extensions), MySQL, SQL Server, MariaDB, SQLite (with Cloudflare D1), CockroachDB, ClickHouse, and Oracle. Exports to SVG with inline styles or SQL DDL in any target dialect. Ships as a React/Vite frontend behind Nginx in Docker, deployable on RepoCloud with dedicated VPS resources under the AGPL-3.0 license.

Schema design with no account and a few clicks: drawDB is the browser-based entity-relationship diagram editor and SQL generator - an AGPL-3.0 React project with over 37,000 GitHub stars. Draw tables with columns, data types, defaults, and constraints; connect fields to create foreign-key relationships; group tables into labeled subject areas; and annotate with notes. When the design is ready, one export produces CREATE TABLE DDL - with constraints, indexes, and foreign keys - targeted at MySQL, PostgreSQL, SQLite, MariaDB, SQL Server, or Oracle. Diagrams can be database-specific, unlocking every native type plus dialect features like PostgreSQL enums and composite custom types, or generic for portability across all supported flavors. The reverse direction works too: paste existing DDL into the import dialog and drawDB renders your live schema as a navigable diagram - the fastest way to document an inherited database. Versioning and migration-script generation track schema evolution, full editor ergonomics (undo/redo, copy/paste, duplicate, themes) keep iteration fast, and diagrams export as PNG, SVG, or shareable JSON. Everything runs client-side against browser storage - no backend database connection needed - so the self-hosted Docker deployment is a featherweight static app that keeps proprietary schema designs entirely on your infrastructure.