You have a Proxmox cluster with spare capacity and people who keep asking you for a VM: ProxMate turns that cluster into an invite-only cloud where those people help themselves, inside limits you set. Invite links carry CPU, memory, and disk quotas, and tenants spin up VMs or LXC containers from an ISO, the Template Store, or twenty curated cloud images, pasting an SSH key to get a ready-to-SSH box in about a minute. Automatic placement picks the node with the image and the most free capacity, so nobody needs to learn your topology. Projects group machines with per-project usage totals and whole-project start and stop, and any VM can be shared with another tenant as viewer, operator, or manager, never with delete rights. Both a graphical noVNC console and a text console with copy and paste run in the browser, so access never needs open ports, and an optional per-VM browser IDE puts VS Code inside the guest. Backups run on schedules with rolling retention and one-click restore, snapshots are instant, power schedules stop dev boxes overnight, and time-boxed invites suspend access without deleting anything. Admins watch live per-VM sparklines, audit every action, and balance memory across nodes with live migration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OmniSight ends the homelab ritual of a dozen admin panels open in a dozen tabs, each with its own login and its own idea of what healthy looks like. It folds all of them into one page that answers the only question you actually have: is everything fine? Watch Proxmox nodes with their VMs, containers, backup status, and Ceph health next to VMware hosts and datastores, Linux and Windows servers, and Kubernetes pods with live log viewing. Add Docker hosts and see container status, ports, resource use, and image updates, check OPNsense firewalls, TrueNAS and QNAP storage, and PostgreSQL, MySQL, and MongoDB databases without leaving the dashboard. A small push agent installs with one copied command and self-registers within seconds, needing no inbound firewall rules, so machines behind NAT report in on their own. Follow relationships on the topology map, restart a service from the detail view, export a full backup, and publish a read-only public status page for anyone who asks how things are running. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Pulse monitors your entire heterogeneous infrastructure from one screen: Proxmox VE, Proxmox Backup Server, Proxmox Mail Gateway, Docker, Podman, Docker Swarm, Kubernetes, TrueNAS SCALE/CORE, VMware vSphere, and standalone Linux/Windows/macOS machines. The Go binary embeds a SolidJS/TypeScript frontend, delivering WebSocket-driven dashboards with sub-second metric updates on port 7655. A unified agent auto-detects Docker, Podman, Kubernetes, and Proxmox on each host without manual configuration and self-updates silently, while Proxmox nodes need only API credentials with zero agent installation. Smart alerts use adaptive hysteresis-based thresholds to prevent notification floods, pushing to Discord, Slack, Telegram, Teams, email, ntfy.sh, Gotify, and generic webhooks with per-resource overrides. The standout feature is Pulse Patrol: scheduled AI health checks running every ten minutes to seven days using OpenAI, Anthropic, Gemini, or local Ollama models. Patrol catches silent backup failures, capacity creep, restart loops, unhealthy containers, and clock drift that dashboards miss when nobody is watching. Platform-specific views render Proxmox nodes, Ceph clusters, Docker Compose projects, Kubernetes workloads, TrueNAS pools, and vSphere VMs in familiar layouts. OIDC, SSO, and SAML authentication with credential encryption at rest secures access. 6,500+ stars and 441 releases since February 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Overlook is a read-only status page that tells you at a glance whether your whole homelab is healthy, by pulling live answers from the monitoring, server, network, storage, and media tools you already run. The page leads with what is wrong, listing the checks your existing check engine is alerting on for as long as they fail, so the page and your alerts never disagree. Below that sit Servers, Network, Storage, and Apps, each marked up, degraded, or down with the last 30 results of its checks and its own detail page showing guests, DNS clients, or disk detail. A Today strip gives one figure from every source, such as guests running, DNS lookups, photos added, or the watts your UPS is drawing, while a weekly view lists each area's problems and events across the last seven days. Your apps appear as links with a dot that says whether each one answers, and chores due this week, waiting updates, batteries to change, and requests awaiting approval collect in one place you act on in the tool itself. A browser setup page appears before any config exists, tests each source you enter, and writes the config and secrets files for you. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Komari turns a scattered fleet of VPS boxes into one clean status wall that shows which servers are alive, struggling, or about to expire. Every node reports CPU, GPU, memory, swap, disk, load, network speed, traffic totals, and uptime to a real-time dashboard, with history views from ten minutes to thirty days or any custom range. Flip between a card grid and a table, search by name, region, or operating system, and tag each machine with its price, billing cycle, and days until renewal. Latency tasks send ICMP, TCP, or HTTP probes and plot the results in per-node charts. Offline alerts wait out a per-node grace period before firing, expiry reminders warn before a plan lapses, and Webhook and custom JavaScript channels deliver them. A multi-tab browser terminal that reattaches after disconnects, remote command execution, and a remote file manager with an editor let you fix problems without leaving the panel. Agents install with a script, a binary, Docker, or an auto-discovery key for batch rollouts, and administrators can switch an agent's version remotely. Plugins run on an embedded JavaScript runtime and can add scheduled jobs, HTTP hooks, static pages, and notification channels. Administrators can add two-factor authentication, OAuth sign-in, API keys for a JSON-RPC 2.0 endpoint, themes from a theme market, and backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Reaching 24,000 GitHub stars within two years of its first commit in July 2024, Beszel delivers Netdata-grade monitoring dashboards from a single Docker container with no Prometheus stack, no external database, and no complex configuration — just a one-binary hub on PocketBase (SQLite embedded) and a sub-15 MB agent per host that auto-discovers Docker and Podman containers on contact. The agent connects outbound via WebSocket or SSH tunnel, requiring zero open ports on monitored servers and zero manual network configuration. Per-host metrics cover CPU usage, memory with swap and ZFS ARC breakdown, disk I/O across multiple partitions, network throughput, load average, sensor temperatures, battery charge, and GPU utilization with power draw for Nvidia, AMD, and Intel cards — features that competitors lock behind paid tiers. S.M.A.R.T. disk health including eMMC wear indicators and Linux mdraid array status surface hardware degradation before failures occur. Container statistics track CPU, memory, and network history per container with automatic discovery as new containers start. Configurable threshold alerts notify via email, Discord, Telegram, ntfy, Pushover, Gotify, Matrix, Mattermost, Signal, Slack, Microsoft Teams, and Twilio when metrics exceed defined limits. Multi-user accounts with OAuth/OIDC authentication let teams share monitored systems with role-based access, while automatic backups persist data to disk or S3-compatible storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Trusted by millions of engineers and deployed on over 80,000 GitHub stars worth of community confidence, Netdata delivers true real-time monitoring at per-second granularity — 10-60x faster than Prometheus, Datadog, or any conventional monitoring stack that averages away the transient anomalies lasting 2-10 seconds where most production incidents originate. A single installation command deploys the agent with zero configuration, automatically discovering every running process, container, systemd service, network connection, disk, and application on the host within seconds. Unsupervised machine learning trains multiple models per metric directly at the edge, detecting anomalies without thresholds, baselines, or manual tuning. The distributed Parent-Child architecture scales horizontally from a single Raspberry Pi to fleets exceeding 100,000 nodes while maintaining sub-2-second visualization latency and storing metrics at approximately 0.5 bytes per sample through tiered compression. Native network monitoring provides live topology maps, NetFlow and sFlow analytics, SNMP device polling across 200+ profiles, and trap handling — capabilities that typically require a separate NPM product. Hundreds of pre-configured alerts cover systems and applications out of the box, with AI-powered root cause analysis surfacing correlated metrics through natural language via MCP-compatible AI assistants. The agent supports Linux, macOS, FreeBSD, Kubernetes, and Docker with eBPF-based kernel observability requiring no application instrumentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL v3+ licensed.

The de facto dashboard of observability: Grafana is the open-source frontend that turns the data stores you already run into interactive graphs. It does not store metrics itself; it connects to the data stores you already run and turns their contents into interactive dashboards. Supported sources number over 150 via plugins: Prometheus, Loki, Tempo, InfluxDB, Elasticsearch, MySQL, PostgreSQL, Microsoft SQL Server, AWS CloudWatch, Azure Monitor, Google Cloud Monitoring, and many more. Dashboards are built from a large library of panel types (time series, heatmaps, tables, gauges, logs) with template variables for reusable, parameterized views. Unified alerting evaluates rules against any connected data source, not just Prometheus, and routes notifications to Slack, PagerDuty, email, and other channels with grouping and silencing - unlike Prometheus Alertmanager, a single rule can combine a Loki log pattern, a PostgreSQL query result, and a CloudWatch metric. Dashboards serialize to JSON and data sources configure via provisioning files, so the entire observability setup can live in Git and deploy repeatably across environments. Explore mode adds ad-hoc querying outside dashboards, with split view for correlating a metric spike against the matching log lines, and access control spans organizations, teams, folder permissions, and OAuth, LDAP, and SAML integration. Written in Go and TypeScript, AGPL-licensed. Self-hosting gives you unlimited users, dashboards, and queries at flat hosting cost, without Grafana Cloud's usage-based pricing.

Monitoring everything from network switches to Kubernetes clusters since 2001 with over 6,200 GitHub stars and deployments exceeding 100,000 devices per installation, Zabbix has established itself as one of the most mature and feature-rich open-source monitoring platforms available, trusted by organizations including Dell, Salesforce, ICANN, and T-Mobile. The platform collects metrics from virtually any source using Zabbix Agent written in C, Zabbix Agent 2 written in Go with native plugin support, SNMP v1/v2c/v3 polling and trapping, IPMI for hardware health, JMX for Java applications, SSH and Telnet checks, HTTP/HTTPS polling, and ODBC database queries. Version 7.0 LTS introduced synthetic browser monitoring that executes user-defined JavaScript via WebDriver to simulate multi-step user interactions on websites, proxy load balancing with automatic host redistribution across proxy groups for high availability, in-memory proxy data buffering delivering up to 100x performance improvement, native multi-factor authentication with TOTP and Duo support, and just-in-time user provisioning from SAML and LDAP. Low-level discovery automatically detects file systems, network interfaces, SNMP OIDs, VMware resources, and Kubernetes pods, creating monitoring items and triggers dynamically. The alerting engine correlates events with configurable escalation chains, sending notifications through Slack, Microsoft Teams, PagerDuty, Jira, email, and SMS with customizable message templates. Over 1,000 official templates provide instant monitoring for Linux, Windows, VMware, AWS, Azure, Docker, PostgreSQL, MySQL, Apache, Nginx, and hundreds more. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your house already has lights, locks, sensors, thermostats, and speakers from many brands, and Home Assistant gives them one local control room with no vendor cloud in the loop. To close the shutters when the outdoor temperature holds above 25 °C, or to be alerted when the garage door is left open, build the routine in the visual editor: When, And if, Then do. Scenes, scripts, and blueprints package it for reuse, and run traces show what it did. More than 1,500 integrations cover Zigbee, Z-Wave, Matter, Thread, MQTT, ESPHome, Bluetooth, Hue, and Sonos, and network discovery offers known devices for one-step setup. To see the house at a glance, drag tile, thermostat, gauge, graph, and map cards into a dashboard, then put it on a TV with Home Assistant Cast. The Energy dashboard answers where the power goes, drawing solar, grid, battery, gas, and water as one distribution diagram with cost totals and per-appliance tracking. To talk to the house, use Assist: natural-language commands, wake words, and custom sentences run locally or through Home Assistant Cloud. The map panel shows who is home, plotting people against zones such as Home, Work, and School from the iOS and Android companion apps. Areas and labels keep large setups tidy, and multi-factor authentication guards each account. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

If cloud-dependent smart home hubs and YAML-heavy configuration files leave your household at the mercy of vendor outages and broken scripts, Gladys Assistant puts your entire home under clean, point-and-click local control. Zero YAML required. Pair thousands of lights, thermostats, smart plugs, locks, and sensors directly through native Zigbee2MQTT, Matter, Z-Wave, and MQTT support, or install hundreds of sandboxed community integrations for Philips Hue, Shelly, Sonos, TP-Link Tapo, Netatmo, and Reolink cameras in a single click. Visual scenes make automation effortless. Trigger multi-step routines from motion sensors, sunrise schedules, house presence, calendar events, or electricity tariff changes, and chain conditional actions with delays, HTTP webhooks, and Telegram alerts. Customizable room dashboards display live RTSP camera streams, climate charts, weather forecasts, and interactive dimmer controls. Built-in energy monitoring tracks real-time wattage, historical kWh consumption, and utility contract costs across every circuit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

BackupX puts every server backup you are responsible for into one web console, so cron lines scattered across machines become scheduled, visible, and verifiable tasks. Files and directories from multiple sources, MySQL, PostgreSQL, SQLite, SQL Server, and SAP HANA databases all back up on cron schedules you can also build in a visual editor, with automatic retention by days or count cleaning up what expires. More than seventy destinations are reachable through rclone, from S3 and other object stores to Google Drive, WebDAV, FTP, SFTP, Azure Blob, Dropbox, and OneDrive, and storage targets show connection health and live capacity before a job ever fails against a full disk. A master and agent design lets remote servers poll outward only, even through proxies, private certificate authorities, or SSH bastions, so agents run tasks locally with no inbound connectivity to defend. Per-node bandwidth caps and concurrency limits keep a small node polite and a big node busy, each at its own pace. Success and failure notifications arrive by email, webhook, or Telegram, while Prometheus metrics, health probes, an SLA breach gauge, and a full audit log keep the platform observable, and signed audit webhooks forward events to SIEM or WORM storage for compliance records. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Engineers who have outgrown Duplicati or rsync scripts tend to appreciate Kopia's design: encrypted, compressed, content-deduplicated snapshots in Go, stored in a repository on any storage you control - S3, Google Cloud Storage, Azure Blob, Backblaze B2, SFTP, WebDAV, or a plain filesystem. Encryption is mandatory and end-to-end: every block is encrypted client-side with AES-256-GCM or ChaCha20-Poly1305 using keys derived from your repository password, and even file names never leave the machine in plaintext. Blocks are packed into 20-40 MB blobs with random names, so the storage provider learns nothing about content or structure. Deduplication is automatic and content-based - identical data across files, snapshots, and even multiple machines backing up to the same repository is stored once. Policies govern everything per-directory: compression choice, retention (hourly through annual), scheduling, and ignore rules. Incremental snapshots are point-in-time records you can mount and browse like a filesystem. This deployment runs the Kopia repository server with its web UI, centralizing backups from multiple client machines over an authenticated API - each client connects with the server URL and certificate fingerprint, and users only see their own snapshots. Error correction, high-latency-tolerant caching, and both CLI and GUI round it out.

Five servers, five cron jobs, five restic scripts nobody quite remembers writing: Arkeep replaces that archaeology with one dashboard where every backup in your infrastructure reports for duty. A small agent on each machine dials out to the central server and waits for work, so nothing listens on an agent port and machines behind NAT or a home firewall enroll just as easily as cloud VPSes. From the web interface you define destinations, which can be local disk, any S3-compatible storage, SFTP, a restic REST server, or more than forty Rclone backends, then build policies that send one backup job to several destinations at once for a genuine 3-2-1 layout. Docker volumes are discovered automatically, and databases stream straight into the backup with pg_dump and mysqldump instead of fragile file copies. Retention and repository integrity checks run per destination on their own schedules. When recovery day comes, you open any snapshot in the browser, browse its files, and restore a single folder in place or somewhere new. Failures announce themselves by email, Slack, Discord, or webhook, or stay silent in Healthchecks.io. Sign-in is yours to choose: local accounts with TOTP two-factor, or single sign-on through any OIDC provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every connection starts at the endpoint, never at the server, so Borg Backup Server can back up Linux, Mac, and Windows machines behind NAT and firewalls without opening a single inbound port. A lightweight agent on each machine polls for tasks over HTTPS, pushes deduplicated archives over SSH, and reports live progress. Append-only SSH access means an endpoint can add and restore archives but never prune or delete them. The dashboard shows backup charts, server stats, and active jobs at a glance. Plans run from hourly to monthly, several per client, built from reusable directory templates for common server roles, with per-plan retention from hourly to yearly. Lost a file? Browse the archive tree in your browser, tick what you need, and restore it to the client or download a .tar.gz. MySQL and PostgreSQL dumps run before each backup and restore as a copy or a replacement. Repositories can live on the server, on BorgBase, Hetzner, or rsync.net, and mirror to S3-compatible storage such as AWS, Wasabi, or Backblaze B2. Apprise alerts reach more than 100 services, and a nightly report lands in your inbox. Two-factor login and role-based access guard the console. Upgrades roll out to the server and every agent together, and the server backs itself up daily. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ntfy sends push notifications to your phone or desktop with a single curl command: publish a message to any topic and every subscriber receives it instantly, no signup or API key required. Over 31,000 GitHub stars and 106 releases since 2021 back a server supporting five priority levels mapped to distinct notification sounds and vibration patterns, emoji tags for visual classification, click actions that open URLs when tapped, and up to three action buttons per notification for view, HTTP callback, broadcast, or clipboard copy operations. File attachments push images from surveillance cameras, documents, or any binary payload directly to mobile devices. Subscriptions work through JSON streams, Server-Sent Events, WebSockets, or raw text, with server-side filtering by priority, tags, and message ID. Authentication enforces topic-level access control through Basic Auth, Bearer tokens, or query parameters, with a built-in user and ACL management system. UnifiedPush compatibility lets ntfy serve as a push distributor for Mastodon, Matrix, and other federated services. Web Push via VAPID keys delivers browser notifications without the mobile app. The server ships as a single statically linked Go binary or Docker image supporting amd64, armv7, and arm64 architectures, consuming 30-50 MB RAM at idle with SQLite-backed message caching. Integrations include Grafana, Prometheus Alertmanager, Uptime Kuma, Home Assistant, and Ansible Semaphore. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 / GPLv2 dual-licensed.