A secure drop box for tips and misconduct reports, GlobaLeaks lets organizations, newsrooms, and public institutions receive anonymous submissions and reply to the people behind them. Whistleblowers answer a questionnaire, attach files, and leave with a unique 16-digit receipt that reopens their report later for replies, comments, and the choice of whether and when to reveal their identity. Administrators build the intake form with a questionnaire builder, route reports through channels by topic or department, and host several branded whistleblowing sites from one installation in more than 90 languages. Recipients triage in a searchable inbox with labels, reminders, and customizable case statuses. Analysts, custodians, and administrators get separate roles, and the custodian role can gate access to a reporter's identity. Reports and messages are encrypted, an automatic Tor onion service gives whistleblowers an anonymous way in, two-factor authentication protects staff logins, and PGP secures email notifications. Audit logs track staff actions, and retention rules expire old reports to support GDPR duties and EU Directive 2019/1937 workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Matrix's flagship client, built by the protocol's creators: Element brings the decentralized open standard for real-time communication to web, desktop, iOS, and Android. Paired with a Matrix homeserver, it delivers Slack-quality team messaging where you own every message, file, encryption key, and byte of metadata. End-to-end encryption is on by default, built on Olm and Megolm - the Double Ratchet algorithm family Signal popularized, extended for large-room scalability and publicly audited by NCC Group. Messages encrypt per-device with cross-signed device verification, so even a compromised server yields nothing readable. Federation is the defining capability: like email, users on different homeservers converse seamlessly, and 30+ bridges connect Matrix rooms to Slack, Discord, WhatsApp, and Telegram, so moving to sovereign infrastructure doesn't sever contact with anyone. Rooms support threads, reactions, file sharing, and voice and video calls via Element Call. The result is digital sovereignty chosen by governments and enterprises across Europe: your data sits on your server in your jurisdiction, portable to any other Matrix host because the protocol is an open standard. Apache-2.0 licensed, with no per-user fees at any scale.

Most AI chat integrations bolt an LLM onto a text box and call it customer support; AgentDesk builds the entire helpdesk around AI agents that handle first responses, escalate to humans when they cannot answer, and track follow-up work through integrated ticket workflows. Each AI agent binds to a specific LLM configuration, one or more knowledge bases, a set of callable Skills, and MCP tool integrations, creating specialized support personas for different product lines or departments. When a customer message arrives, the agent retrieves relevant FAQ entries and document chunks through RAG-powered vector search (Qdrant), then passes retrieved context through an Answerability Gate that determines whether the knowledge base can support a reliable answer; if not, it triggers a fallback response and recommends human handoff instead of hallucinating. Human agents pick up escalated conversations in a dedicated workspace that preserves the full AI conversation history, customer profile, conversation tags, and linked tickets, so they never start from scratch. The ticket system converts conversations into tracked work items with category assignment, status flows, progress notes, and team routing. An admin dashboard provides user management, role-based access control, team scheduling, and automatic conversation assignment rules. Model configuration supports any OpenAI-compatible provider, letting you wire in LLMs, embedding models, and reranking models with per-model context limits, timeout settings, and rate controls. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

MikoPBX gives a small business a complete phone system on a server it controls, with extensions, call queues, IVR menus, and call recording instead of per-seat hosted PBX fees. Follow a call through it: incoming rules per provider match exact numbers or patterns, fall through by priority when nobody answers, and end at a default route. Each employee gets an extension with SIP credentials, forwarding for no-answer, busy, and unavailable states, and an optional recording switch. Queues offer seven distribution strategies, including Ring All, Least Recent, Fewest Calls, and Memory Hunt, and can announce each caller's position and estimated wait. IVR menus play a recorded greeting, route keypad choices to departments or extensions, and fall back to a default number after a set number of retries. Call history filters by caller, destination, or DID, flags missed calls in red, and plays or downloads recordings as WebM, MP3, WAV, or OGG. Voicemail, call transfer, call pickup, and a holiday and night-time switcher serve daily needs, while free and paid marketplace modules, among them a softphone, auto dialer, and LDAP/AD sync, handle the rest. A firewall, Fail2Ban, passkey sign-in, and CrowdSec integration protect the system, and a REST API with more than 250 endpoints lets other tools manage it. The interface speaks 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Backed by nearly 30,000 GitHub stars and powering millions of meetings through meet.jit.si, Jitsi Meet is the open-source video conferencing platform that runs entirely in the browser with no plugins or downloads required. The WebRTC-based architecture delivers HD audio and video through the Jitsi Videobridge selective forwarding unit, while Prosody handles XMPP signaling and Jicofo manages conference focus and orechestration. End-to-end encryption uses AES-GCM 128-bit keys exchanged via the Olm protocol, protecting audio, video, and screen sharing through the Insertable Streams API in Chromium-based browsers. Moderators can split participants into breakout rooms with individual password protection, enable lobby waiting rooms for admission control, set meeting passwords, and track speaker statistics with per-participant talk time metrics. Virtual backgrounds leverage TensorFlow.js body segmentation with WebGPU and WebGL acceleration, automatically adapting quality through device tier detection. Server-side recording and YouTube live streaming run through Jibri, while Jigasi provides a SIP gateway for PSTN dial-in and speech-to-text transcription. The platform includes in-meeting chat with private conversations, polls, raise-hand functionality, emoji reactions, and tile and speaker view layouts. Mobile applications for iOS and Android complement the web client, and both web and native SDKs enable embedding video conferences into custom applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Revolt gives communities the full Discord experience without ads, behavioral tracking, or subscription fees: servers with text and voice channels, direct messages, group conversations, roles, bots, and custom emoji at zero cost per user. The Rust microservices backend splits responsibilities across Delta for REST API and authentication, Bonfire for persistent WebSocket real-time event delivery, Autumn for file upload routing to MinIO S3-compatible object storage, and January for link preview proxy and embed generation. Voice chat operates through LiveKit with WebRTC audio streaming supporting multiple concurrent participants per channel. Server administrators configure hierarchical role-based permissions at the server, channel, and per-role level, controlling who can send messages, manage channels, kick members, and access moderation tools. Text channels support Markdown formatting, custom emoji, file attachments up to 20 MB, GIF search via Tenor integration, and message reactions. The bot API enables automated moderation, entertainment, and custom workflow integration with community-maintained libraries available in JavaScript, Python, and Rust. The TypeScript and Solid.js web frontend provides a responsive interface with theme customization. Docker Compose deployment spins up the complete stack including MongoDB for message and user storage, Redis for caching, and MinIO for attachments, providing complete data sovereignty over all conversations and files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Lurker keeps you present in every IRC channel you care about, holding your connections open around the clock and recording everything said so a retro, searchable web client can hand it all back whenever you return. Invite your friends and each person gets their own set of networks under one roof, while admins decide which networks members may join and which channels newcomers are pointed at. Nothing said while you were away is lost: the full history is searchable by nick, channel or network, and clicking a result jumps straight to that moment, whether it happened an hour or a year ago. The everyday annoyances are handled too, with drafts that follow you between devices, a highlight and ignore system that cuts noise, bookmarks and private notes on users, reactions, replies, and image uploads that are optimized, stripped of metadata and stored on your own disk or S3. If you prefer your old client, the built-in bouncer speaks the soju and ZNC dialects with SASL, network discovery, on-demand scrollback and read markers that stay in sync everywhere, and DCC file transfers with an XDCC queue still work. Optional companion containers generate inline link previews in isolation and keep your IRC connections alive across restarts of the main service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

SnappyMail is a fast, privacy-respecting webmail client that connects to any existing IMAP and SMTP server, booting in under a second with a JavaScript payload of just 138 KB under Brotli compression (down from RainLoop's 8 MB fork origin). No database is required: all configuration and user data persists as flat files in a single volume, making Docker deployment trivially simple with the roughly 30 MB image consuming approximately 50 MB of RAM. Built-in PGP encryption supports three backends: OpenPGP.js v5 with ECDSA and EDDSA key generation, GnuPG integration, and Mailvelope browser extension compatibility, eliminating the need for separate encryption plugins. The integrated Sieve script editor enables users to create mail filtering rules, vacation auto-responders, and forwarding conditions directly within the web interface when connected to ManageSieve-capable servers on port 4190. Multi-domain administration allows a single instance to serve users across multiple IMAP servers with per-domain authentication routing. The admin panel manages extensions, security settings, branding customization, and domain configuration. GDPR-friendly by design, it removes all social media integrations, Gravatar lookups, and external tracking present in RainLoop. Dark mode strips background and font colors from email messages. The modified Squire HTML editor replaces CKEditor for composing rich-text messages. Scores 99% on Lighthouse performance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 20,000 GitHub stars and adoption by companies building everything from telehealth platforms to AI voice agents, LiveKit is the most widely deployed open-source real-time communication server available. The Go-based Selective Forwarding Unit handles hundreds of concurrent participants per node with adaptive bitrate streaming, simulcast layers, SVC codec support for VP9 and AV1, and end-to-end encryption. Client SDKs span JavaScript, Swift, Kotlin, Flutter, React Native, Rust, Python, Unity, and ESP32 embedded devices, while server-side APIs cover Node.js, Go, Ruby, Java, Python, Rust, PHP, and .NET. The Agents framework enables building AI-powered voice and video applications — real-time speech-to-text, LLM-driven conversations, and computer vision pipelines — running as server-side participants in any room. Egress records sessions to S3-compatible storage or streams to RTMP endpoints, while Ingress pulls external feeds from OBS via RTMP, WHIP, or SRT into LiveKit rooms. The SIP bridge connects traditional telephony to WebRTC rooms for hybrid conferencing. JWT-based authentication, webhook notifications, room-level moderation APIs, and selective subscription give operators granular control. Deploy as a single binary for development, Docker Compose for production single-node, or Kubernetes with the official Helm chart for distributed multi-region clusters using Redis for state coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

"Forget about bouncers" became a real sentence because of The Lounge: a Node.js web IRC client that holds persistent connections to your networks 24/7, logging everything while you sleep, so closing the browser tab never means missing a message or losing your place in a channel. Open it again from any device - desktop, phone, tablet - and you resume exactly where you left off, with full history synchronized. Because it combines bouncer and client in one process, the experience feels like a modern chat app rather than 1990s infrastructure: push notifications for highlights and private messages (with self-generated VAPID keys, so even Web Push needs no third-party service), automatic link previews, inline file and image uploads, and full IRCv3 protocol support. It installs as a progressive web app from any modern browser, so phones get a native-feel client without an app store. Multi-user support means one instance serves your whole team or community, each user with their own networks and history, and LDAP integration ties into existing authentication. A public mode alternatively serves as an open, registration-free web chat for events or support channels. MIT-licensed, born as a fork of Shout, and a fixture of self-hosting stacks since.

With DSpace, a library or research office can give every thesis, journal article, and dataset its own permanent web address, a searchable metadata record, and files visitors download from the archive. Content sits in a tree of communities and collections, and each collection decides who may deposit and how many review steps follow; reviewers accept a submission or reject it with a note that sends it back to the author. Embargoes hold files back until a set date, access policies limit other files to chosen groups, and sign-in works through LDAP, Shibboleth, SAML, OpenID Connect, or ORCID. Search covers metadata and the extracted full text of uploaded files, facets narrow the results, and browse pages sort by title, issue date, author, or subject. Editors can correct a published item through the submission form. Administrators inspect an audit trail and rewrite homepage news from an admin form. Entity types for people, organizations, projects, journals, and datasets link each publication to the work behind it, and DOIs can be registered through Crossref. Optional settings let authors keep an email address private on their researcher profile and download their own restricted files. Usage reports count visits, downloads, and top countries per item. REST, OAI-PMH, SWORD, and Google Scholar metadata connect the archive to harvesters, deposit tools, and search engines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Haven gives your community a private chat server with voice calls, screen sharing, and end-to-end encrypted direct messages where friends join via invite link in their browser without installing apps or creating third-party accounts. Real-time messaging supports image uploads via paste and drag-drop, emoji reactions, replies, threads, typing indicators, @mentions with autocomplete, and inline GIF search through Tenor or GIPHY. Peer-to-peer WebRTC voice chat includes per-user volume sliders, mute and deafen controls, talking indicators, and screen sharing with picture-in-picture mode. Direct messages use ECDH P-256 key exchange with AES-256-GCM symmetric encryption where private keys never leave the browser, ensuring not even the server operator can read them. Twenty-plus visual themes with stackable effects including CRT scanlines, Matrix Rain, Cyberpunk Text Scramble, Snowfall, and Campfire Embers let users personalize the experience with configurable intensity sliders. Rich Presence integration shows what members are playing or listening to via Last.fm, Steam, and Spotify. A built-in bot API supports webhooks and custom slash commands, while Discord history import preserves channels, threads, forums, reactions, pins, and avatars. The Node.js server deploys via Docker Compose or a single batch file that auto-handles dependencies, SSL certificates, and configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A single ejabberd node carries chat, device telemetry, voice calls, and federated messaging at once, because the same Erlang server speaks XMPP, MQTT, SIP, and Matrix over one authentication, storage, and clustering layer. Users get standards-based instant messaging with group chats, message archives, publish-subscribe, message carbons, push notifications, and OMEMO encryption, and your server federates with the global XMPP network out of the box. Devices publish and subscribe through the built-in MQTT broker on TCP or WebSocket transports, sharing accounts and access rules with your chat users instead of needing a second broker. Voice and video calls route through the integrated SIP gateway and STUN/TURN support, so WebRTC clients get signalling and media relay from the same deployment. Matrix support bridges federated rooms into the same infrastructure, letting two decentralised ecosystems interoperate without a separate bridge stack to babysit. Clustering with consistent hashing scales a deployment across nodes, and a single node is rated at two million concurrent sessions for very large communities. Operators manage everything from the web admin and command line, with SQL or Mnesia storage, LDAP authentication, and virtual hosting for multiple domains on one server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Mail-in-a-Box turns a single Ubuntu server into a fully functional email system with one setup command, installing and configuring Postfix for SMTP, Dovecot for IMAP, Roundcube for webmail, and Z-Push for Exchange ActiveSync push notifications in an automated sequence that would take days to replicate manually. The DNS server auto-configures the full suite of email authentication records: SPF, DKIM, DMARC, DNSSEC with DANE TLSA, MTA-STS, and SSHFP. Getting all of these right is what separates email that lands in inboxes from email that lands in spam, and most manual installations never achieve the complete set. Nextcloud integration adds CardDAV contact sync and CalDAV calendar sharing across devices. Let's Encrypt certificates provision and renew automatically for every hosted domain. The web control panel manages users, aliases, custom DNS records, and automated backups, protected by TOTP two-factor authentication. Daily health checks verify that services run correctly, ports remain open, TLS certificates stay valid, and DNS records resolve properly, alerting you before delivery problems develop. Multiple domains and users operate from one installation with internationalized domain name support. Built-in HTTPS static site hosting uses the TLS infrastructure already in place. Runs on a dedicated RepoCloud VPS with guaranteed resources, root SSH, and browser serial console for complete email sovereignty. CC0 public domain licensed.

Workplace and Yammer's pattern on your own server, with GDPR compliance by construction rather than contract: HumHub is an open-source enterprise social network from Germany. Built in PHP on Yii2, it organizes everything around four concepts. Users get rich profiles with follows and interactions. Spaces are the structural unit - rooms for departments, projects, events, or clubs, with per-Space permissions, notification settings, and email summaries, and operators can auto-map users into the right Spaces. Content covers posts, wiki pages, photos and video, events, and tasks, with multi-level comments, versioning, archiving, moderation reporting, and filterable full-text search across everything. Modules make it a platform: roughly 80 install-and-activate extensions including Calendar, Wiki, Polls, Tasks, Gallery, News, direct-message Mail, OnlyOffice document editing, Advanced LDAP, SAML and JWT SSO, a RESTful API, mass user import, Translation Manager, and a Theme Builder with custom pages - every one optional and toggleable at runtime. That module economy is why HumHub serves such varied deployments: corporate intranets, city governments, universities, political parties, and nonprofits all configure the same core differently. Requirements are a plain LAMP stack - PHP 8.1+ and MySQL/MariaDB - making it one of the easiest community platforms to operate long-term.

Powering over 496 instances with more than 35,000 monthly active users and 26,500 communities, Lemmy has established itself as the leading open-source, federated link aggregation platform in the Fediverse. Built entirely in Rust for memory-safe, high-performance server operation, Lemmy enables anyone to run their own Reddit-style community that automatically connects with every other Lemmy instance — and compatible ActivityPub platforms like Mastodon, PieFed, and Kbin — through standardized federation protocols. Users create and subscribe to topic-based communities, submit posts containing text, links, or images, engage through threaded comment discussions, and shape content visibility through upvote/downvote mechanisms. Instance administrators retain full control over moderation policy, federation allowlists and blocklists, site appearance, and user registration settings, while community moderators can sticky posts, lock threads, ban users, and maintain public moderation logs for transparency. The platform supports private messaging between users, email notifications, RSS and Atom feed generation for every community, comprehensive internationalization with dozens of language packs, custom emoji support, and both light and dark themes through a clean mobile-responsive interface. Deployment is straightforward with official Docker Compose configurations and Ansible playbooks, backed by a PostgreSQL database with pict-rs for image hosting. Lemmy's Rust backend consistently benchmarks among the most efficient Fediverse server implementations, enabling small VPS instances to serve thousands of users. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A complete WhatsApp Business Platform covering messaging, chatbot automation, and voice calling with IVR — a combination most self-hosted projects never attempt. The Fastglue/fasthttp backend processes WhatsApp Cloud API webhooks through PostgreSQL and Redis into a real-time WebSocket layer powering instant chat updates across a Vue 3 frontend built with shadcn-vue and TailwindCSS. Chatbot automation supports keyword triggers, multi-step conversation flows with branching logic, AI-powered responses from OpenAI, Anthropic, or Google models, knowledge base integration via vector stores, and seamless handoff to human agents when the bot gets stuck. The visual IVR builder uses a drag-and-drop node canvas where you wire greeting prompts, DTMF menu capture, HTTP callbacks to external APIs mid-call, business-hours routing by IANA timezone, agent team transfers with hold music, and reusable sub-flows. Every call recording streams encrypted to your S3-compatible bucket with retention you control. Multi-tenant architecture isolates organizations with separate data, roles, and API keys while a unified inbox presents both chat and call conversations to agents in a single dashboard. Meta-approved template management, bulk campaign messaging, analytics tracking, and a full REST API round out the platform. Deploy via Docker Compose with Postgres and Redis included. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3 licensed.

Your Gmail, Google Workspace, or Outlook inbox, worked by an AI assistant: Inbox Zero sits on top of the account you already have. Its core idea is rules written in plain English - tell the assistant "label invoices and file the PDF to Drive" or "archive cold outreach unless they mention my company" - and it executes against every incoming message. Emails that need a response arrive with a pre-drafted reply written in your tone, learned from your email history and calendar context. Reply Zero tracks what you owe responses to and what you're waiting on; the Bulk Unsubscriber surfaces newsletters you never read (with read-rate analytics) for one-click unsubscribe-and-archive; the Cold Email Blocker auto-archives unsolicited pitches based on your own definition of "cold." Smart Filing routes attachments - receipts, contracts, PDFs - into the right Google Drive or OneDrive folder, and Slack/Telegram integration lets you read, draft, and triage without opening a mail client. Email analytics show top senders and volume trends. It is not a new email client: everything happens in your real mailbox using native filters. Self-hosting means your mail content and the LLM calls that process it run on infrastructure you control.