Point Emby at your movie, music, and photo libraries and it becomes a private streaming service: metadata and artwork arrive from TMDB and TVDB, everything lands in a polished browsable interface, and media transcodes on the fly whenever a client can't play the original format. The client reach is the selling point: native apps span Android TV, Apple TV, Google TV, Fire TV, Roku, LG and Samsung smart TVs, iOS, Android, Apple CarPlay, Android Auto, plus web browsers and desktop apps for Windows, macOS, and Linux, and DLNA devices are auto-detected for casting and remote control. Multi-user support gives each household member their own account, watch history, favorites, and recommendations, with genuinely capable parental controls: content restrictions, access schedules, time limits, and live monitoring with remote control of kids' sessions. Live TV works with hardware tuners like HDHomeRun or M3U playlists, with free guide data in the US, Canada, and UK. The server and core features are free; an optional Premiere key adds hardware-accelerated transcoding, DVR recording, offline sync, and Cinema Mode intros.

Every screen in the house (browser, TV, game console, or phone) can open the same library of videos, music, and photos once Universal Media Server shares it, with transcoding handled automatically for whichever device asks. A file the device can already play passes through untouched. Anything else is converted on the fly to suit the network, the device, and the preferred language. Folders open at once, with no wait for library scans, and disc drives and disc images play directly. In the web interface, every title gets a page with cover art, cast, and genre details from TMDB, Discogs, and MusicBrainz, and filters narrow the library by actor, director, genre, year, or artist. YouTube channels, online radio, podcasts, and RSS feeds appear beside local files on every connected device. Users and groups, with optional avatars and four-digit PINs, decide which shared folders each person sees; content for children stays apart from the library for adults. A list of detected renderers shows every connected device, and the configuration file of each device can be edited to fix browsing, playback, or transcoding on an unsupported TV. Builds exist for Windows, Linux, and macOS, with AppImage and Docker options for servers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Lunarr turns the movie and TV folders you already store into a private streaming service with posters, progress tracking, and play-anywhere convenience. Point it at local disks or at libraries living on SFTP and WebDAV servers, and it scans, identifies, and decorates everything with TMDb artwork, cast pages, similar titles, and because-you-watched recommendations. Press play and the file either streams directly or is transcoded on the fly into seekable HLS, generating only the segments around the moment you are watching instead of converting whole films up front. Continue watching follows you between sessions, sidecar subtitles are picked up automatically, and known intros and credits can be skipped. Send the picture to the big screen with Chromecast or AirPlay, pair new devices without typing passwords, and hand a guest a share link instead of your account. Underneath, an admin console manages users, roles, and which libraries each person may see, watches background jobs, and holds API keys and registration settings. Rescans run on schedules you set from minutes to a month, local folders can be watched live for new arrivals, and metadata refreshes itself on a timer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Nowen Video turns the hard drive of films and series sitting on your NAS into a streaming service your family actually wants to open, posters, seasons, and all. Point it at your media folders and it scans the usual formats, reads streams with FFprobe, and scrapes rich metadata from TMDb, Douban, TheTVDB, Bangumi, and Fanart.tv, recognizing movie, season, and episode naming as it goes. NFO files and external subtitles are honored, filesystem watching keeps the library current, and collections plus episode navigation make a big archive feel curated rather than dumped. Pressing play is where the engineering shows: a server-side planner decides per client whether to direct play, remux, or transcode to HLS on demand, with automatic fallback when the first choice fails. Hardware acceleration through the GPU keeps transcoding cheap, subtitle and speed controls ride along in the player, and a local analysis pass can surface highlight clips from your own footage. Every family member gets favorites, watch history, and continue-watching progress under their own account, while library permissions decide who sees what. An Emby-compatible API even lets clients like Infuse connect as if it were an Emby server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Peach is a self-hosted video library manager that scrapes rich metadata for your own collection and serves it through a polished web player you can open on any device. Point it at local drives, SMB shares, mounted cloud storage, or a PikPak library and it scans everything into one browsable catalog without moving or modifying your files. The scraper recognizes video codes, reads existing NFO files, and fills in titles, performers, studios, and cover art from multiple sources while always preserving corrections you make by hand. Playback happens right in the browser with subtitle support, variable speed, rotation, resume points, and timeline previews you can scrub through before committing to a scene. A follow system tracks performers and creators so new releases surface automatically, and the discovery views plus a want list help you decide what to add next. When something is missing, search by video code or drop in a magnet link and completed downloads are filed into the library on their own. Tagging, duplicate detection, and multi-version grouping keep large collections tidy, while the task center lets you pause, resume, or cancel scans and downloads and watch their resource use as they run. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-or-later licensed.

Browse trending titles, search anything, request it in two clicks: Jellyseerr gives Jellyfin, Emby, and Plex users a beautiful storefront for the media library. Born as the Overseerr fork that added Jellyfin and Emby support (the projects have since unified as Seerr), it handles the full request lifecycle - users authenticate with their existing media-server accounts, pick individual seasons or movies in a clean interface, and admins approve or decline from a simple queue, including on mobile. Approved requests flow straight to Sonarr and Radarr, which handle acquisition automatically, with support for separate 4K server instances. Regular library scans keep availability accurate, so users see instantly what already exists instead of requesting duplicates. A granular permission system controls who can request what - auto-approval for trusted users, quotas and limits elsewhere - and override rules adjust request routing by user, tag, or other conditions. Watchlist and blocklist functions curate discovery, notifications reach email, Discord, Telegram, Slack, Pushover, and Pushbullet, and both PostgreSQL and SQLite are supported. Localized into many languages, it turns "can you add this movie?" texts into a self-service system that runs itself.

Running a Jellyfin or Emby server usually means a dozen open tabs; JellyGlance folds your whole media server into one screen you can leave open on a wall. Live sessions show who is watching what, from where, on which client, with direct play or transcode state, codec, bitrate, subtitles, and progress for every stream. Playback history accumulates in its own database, so statistics survive even when the media server forgets: top movies, series, libraries, clients, and users, watch-time trends, activity heatmaps, and weekly, monthly, and yearly recaps rendered as shareable cards. The home dashboard arranges by drag and drop, with presets, density controls, themes, kiosk mode for a wall display, and alert rules. Recently added shelves group by library, while library views surface totals and metadata gaps. Jellyseerr and Overseerr requests appear with poster cards, requester context, and admin actions, and the release calendar pulls upcoming titles from your *arr apps beside the queues of your torrent and Usenet clients, stalled items included. Wizarr invites, Tdarr transcodes, and Maintainerr cleanup connect from the same integrations area. Notifications travel by webhook, Discord, Gotify, and email newsletters, backups export to a plain folder, and sign-in spans local accounts, Jellyfin Quick Connect, and OIDC. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Jellydash answers the questions every Jellyfin admin asks, starting with who is watching right now and whether that stream is transcoding. Live cards show each session's artwork, user, quality, progress, and playback method, including the reason a transcode was needed, and live TV channels appear with real program progress. Behind the scenes, a background poller records every play even when nobody has the dashboard open, building a history you can search, filter by user or library, and export to CSV with poster art intact. Older Jellyfin or Emby Playback Reporting backups import in seconds, so years of viewing are not lost when you switch. Statistics turn that history into watch-time trends, top users, device and client activity, codec breakdowns, and transcode reasons, and clicking a chart opens the exact plays behind it. A monthly recap looks back at a finished month with rankings and daily activity, while trending and all-time most-watched strips show what your household actually loves. Optional pages follow Jellyseerr requests as they arrive and read the status of SABnzbd, qBittorrent, Transmission, Deluge, and NZBGet clients without ever touching their queues. Server activity, maintenance tasks, and system status stay one click away, and selected users can be excluded from monitoring entirely. When someone presses play, a notification can reach your phone through Telegram, Pushover, Discord, ntfy, Gotify, or Web Push. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Plex's own dashboard shows current streams and forgets everything else - which is why every Plex server admin eventually installs Tautulli, the analytics layer. This Python web application (descended from PlexWatch and Headphones) logs complete watch history - what was watched, who watched it, when, where, from which device and IP, and whether it played directly or transcoded - and turns it into clean Highcharts graphs of daily plays, concurrent streams, bandwidth, and platform breakdowns. The home page surfaces top statistics over configurable windows: most-watched content, most active users, stream type ratios. For running a server shared with family and friends, this is operational truth: spot the user forcing 4K transcodes on a phone, see which libraries earn their disk space, and track sync activity across users. The notification engine triggers on server events - playback starts, transcode decision changes, recently added media, server down - through dozens of agents (Discord, Telegram, Slack, email, webhooks) with fully customizable text and conditions, plus arbitrary script execution. Scheduled newsletters email your users a styled digest of recently added content. A comprehensive API exposes every statistic for dashboards like Homarr, and an official mobile app monitors activity on the go. Themed to match Plex/Web. GPL-licensed.

Where Traefik's built-in dashboard only shows what is running, Traefik Manager lets you change it: add routes, middlewares, and services from forms and wizards instead of editing YAML by hand. A first-run wizard connects to the Traefik API, creates a route for the manager itself, and sets the admin password. After that, the dashboard turns every route into a launchable app card with live health, and the Route Map draws each request from entry point through middlewares to backend. New routes use a slide-in form for HTTP, TCP, or UDP with several domains and backends, sticky sessions, and health checks. 30 middleware wizards handle authentication, rate limiting, headers, CORS, and redirects, and weighted, mirroring, or failover services can be built on their own. For day-to-day monitoring, the Certificates tab tracks expiry from acme.json, the Logs tab turns the access log into clickable analytics, the CrowdSec tab lists attacks and bans, and alerts reach Discord, Slack, ntfy, Telegram, and more. Changes to traefik.yml apply with a one-click restart, every edit is backed up locally and can be pushed to a git repository, and a lightweight agent brings remote Traefik servers into the same interface. Sign in with TOTP two-factor or OIDC single sign-on, in any of 14 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Providing an intuitive control plane for modern reverse proxy infrastructure, CaddyUI enables system administrators to manage proxy hosts, automated TLS certificates, and traffic routing without hand-editing configuration files. Operators can create and adjust reverse proxy destinations, URL path rewrites, custom headers, and redirection rules using structured forms that validate against the proxy engine before saving. The platform coordinates automatic ACME certificate requests and renewals, displaying live certificate expiration timelines, validation stages, and internal self-signed certificate authority options for local network services. Fleet management tools synchronize proxy rules across multiple distributed server instances, preventing configuration drift across staging and production clusters. Automated post-deployment health checks verify upstream endpoint availability, HTTP status codes, and latency thresholds, instantly rolling back to the previous configuration if an expectation fails. An integrated observability suite delivers real-time visitor traffic analytics, geographic maps, HTTP response code breakdowns, and single-click client IP blocking to counter malicious probing attempts. Administrators can schedule automated database backups, configure multi-user access with role permissions, and integrate CrowdSec threat intelligence to protect backends. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Gately keeps your domain names current, forwards ports, terminates HTTPS, and blocks hostile traffic from one admin console, so a server or home network needs no pile of separate gateway tools. Dynamic DNS updates records at Cloudflare, Alibaba Cloud, Tencent Cloud, DNSPod, Huawei Cloud, Route 53, OVHcloud, Gandi, Namecheap, DuckDNS, and other providers, finding the public address over IPv4 or IPv6 by URL, network interface, or command. Port forwarding relays TCP and UDP with port ranges, failover targets, connection limits, traffic statistics, and PROXY protocol, while SNI routing lets several services share port 443. Certificates are issued and renewed through ACME with DNS-01 wildcards or HTTP-01, then pushed to other hosts over SSH. Web services add per-domain reverse proxies, redirects, and static sites with HTTP/3, WebSocket, load balancing, health checks, rate limiting, caching, and sign-in through OIDC, GitHub, Google, or TOTP-protected shared users. A WAF running the OWASP Core Rule Set and fail2ban-style jails with trap ports and nftables bans guard the edge. Manage Docker containers and Compose projects with one-click upgrades and rollback, open SSH sessions with an SFTP file manager, run ping, traceroute, and speed tests, and receive alerts in Telegram, Discord, Slack, ntfy, or email. An audit log, config history with diff and rollback, encrypted backups, scoped API tokens, and Prometheus metrics round it out. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

TLSPROXY puts automatic Let's Encrypt TLS in front of every service on your server, so many names can share one port while each backend gets exactly the encryption treatment it needs. Terminate TLS and hand plain text to a local service. Pass raw TLS straight through when the proxy should see nothing. Or terminate and re-encrypt towards a TLS backend, with client certificates checked on the way in. QUIC and HTTP/3 connections terminate here too, and Encrypted Client Hello keeps even the handshake private. Certificates arrive and renew by themselves through http-01 and tls-alpn-01 challenges, PROXY protocol headers preserve real client addresses, and SNI routing with round-robin balancing spreads names across backends. People get in with OpenID Connect, SAML, or passkeys; the same sign-in can mint short-lived SSH user certificates, and built-in certificate authorities manage client and backend credentials for you. Static sites can be served straight from disk, TPM-backed keys keep private material in hardware, and a built-in console shows what the proxy is doing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A self-hosted front door for apps that live on home labs, office LANs, and private clusters, Wiredoor publishes them to the internet without opening a single inbound port on the private side. The Wiredoor CLI on each remote machine dials out to the server over an encrypted WireGuard tunnel. Web apps and APIs are routed by domain and path, WebSocket traffic included, while TCP and UDP services such as SSH or Redis get a public port of their own. Public domains receive Let's Encrypt certificates, internal names fall back to self-signed ones, and Cloudflare or GoDaddy credentials let the server create DNS records itself. Any web route can demand OAuth2 sign-in with an email allow list and a few open paths, and every protocol accepts IP allow lists. Gateway nodes stretch one tunnel across a Docker network, Kubernetes cluster, or private subnet, so a single link serves many backends. Services can be switched off or given an expiry such as 30 minutes, 2 hours, or 1 day. The dashboard shows which nodes are connected and whether their services are enabled, while the CLI creates, enables, and disables services from a terminal. Optional Prometheus and Grafana views chart traffic and tunnel peers, and CrowdSec can block abusive addresses. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.