CloudBeaver puts a full-featured database management environment in your browser, connecting to PostgreSQL, MySQL, SQL Server, Oracle, ClickHouse, and over 100 additional engines through one unified interface that requires no desktop client installation. The Java server exposes a TypeScript/React frontend through a GraphQL API where teams can browse schemas, edit data, visualize relationships, and execute queries across all connected databases in a single workspace. The SQL Editor provides syntax highlighting, auto-completion with fuzzy search, AI-assisted SQL generation from natural language prompts, script management with save/download/upload capabilities, execution plan visualization, and multi-tab result display. The Data Editor enables direct cell editing, filtering, sorting, and bulk data modification with support for spatial GIS data rendering. Database administrators access a Navigator panel for browsing schemas, tables, views, foreign tables, triggers, dependencies, and stored procedures across all connected databases. ER Diagrams visualize table relationships and schema structure, while the Visual Query Builder constructs queries without hand-writing SQL. Multi-user administration provides role-based access control, connection sharing with configurable permissions, and session management. SSH tunneling secures remote database connections, and data can be exported or imported in multiple formats. Query History tracks all executed statements with timestamps and execution statistics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Hoarder (now Karakeep) is a bookmark manager that actually fights link rot: every page you save gets archived at capture time using Monolith, so the content survives even when the original URL dies. Beyond archival, an AI layer powered by OpenAI or local Ollama models auto-tags everything by analyzing page content. Prefer full privacy? Ollama keeps all inference on your server with zero external API calls. Full-text search through Meilisearch indexes the actual scraped content of every bookmark, not just titles and tags, so you find articles by what they say rather than labels you half-remember. Save links with automatic metadata extraction, plain text notes, uploaded images, and PDF documents, all organized into shareable lists with collaborative access. Browser extensions for Chrome and Firefox make saving a one-click operation from any page. Migrating is painless with importers for Chrome, Pocket, Linkwarden, Omnivore, and Tab Session Manager. LLM summarization condenses saved pages into brief overviews for quick scanning. The AI layer is entirely optional: Hoarder works perfectly as a manual bookmark manager, with intelligence adding convenience rather than imposing a requirement. SSO integration and responsive dark mode round out the package.

pgAdmin 4 is the reference administration GUI for PostgreSQL, bundled by virtually every Linux distribution and supporting versions 14 through 18 including EDB Advanced Server — browse schemas in a hierarchical tree, write and optimize queries with AI assistance, design entity-relationship diagrams visually, monitor live sessions, and run backup/restore operations entirely from the browser. Built on Python Flask with a ReactJS frontend, version 9.17 delivers a comprehensive web-based platform accessible from any device. The Query Tool provides syntax highlighting, auto-completion, query history, an EXPLAIN plan visualizer with graphical node representation, AI-powered SQL generation from natural language prompts, and AI Insights for execution plan analysis that identifies performance bottlenecks. The Graph Visualiser renders query results as line charts, bar charts, stacked charts, and pie charts directly in the interface. The ERD Tool auto-generates entity-relationship diagrams from existing schemas for visual database design. The Schema Browser presents databases, schemas, tables, views, functions, sequences, roles, and extensions in a navigable hierarchy. Server monitoring dashboards display real-time active sessions, locks, transaction throughput, and vacuum status. GUI-driven backup and restore wraps pg_dump and pg_restore with format and compression options. Authentication supports internal, LDAP, Kerberos, OAuth2/OIDC, and webserver modes. The Helm chart includes an HTTPRoute template for Kubernetes Gateway API deployments. Bundled pg_dump, pg_restore, and psql utilities version 18.4. Deploy via Docker with the official dpage/pgadmin4 image. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. PostgreSQL License.

QuickStack transforms your standalone Linux server or cluster into a self-hosted platform-as-a-service that automatically compiles, deploys, and monitors full-stack applications and relational databases without vendor lock-in. Developers can trigger instant deployments directly from public or private Git repositories, upload custom Dockerfiles, or pull container images straight from private registries with automated webhook synchronization. The built-in application catalog enables one-click provisioning of production databases including PostgreSQL, MySQL, MariaDB, MongoDB, and Redis with preconfigured internal network isolation. Administrators can route traffic across custom domains with automated Let's Encrypt SSL certificate issuance, inspect real-time CPU and memory telemetry, stream container runtime logs, and launch in-browser web terminals. Teams can configure granular role-based access controls with single sign-on authentication, establish zero-trust ingress and egress network security policies, and orchestrate automated volume snapshots directly to S3 object storage. When infrastructure requirements expand, operators can attach additional worker nodes using lightweight join tokens to distribute workloads seamlessly across high-availability compute pools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU GPL v3.0 licensed.

A drag-and-drop task board that works fine on its own and can also hand cards to AI coding agents, Veritas Kanban shows what each agent is doing, what it changed, and what is waiting for your approval. Start with no agents at all. Cards move through To Do, In Progress, Blocked, and Done, and each one carries subtasks, dependencies, time tracking, comments, and an activity log. When you are ready, connect Codex, Claude Code, Copilot CLI, Hermes, or OpenClaw, give every agent an Intern, Specialist, or Lead permission level, and follow each agent's status and model on a live dashboard. Let a task run in its own Git worktree, read the diff, leave inline comments, approve or request changes, and open a GitHub pull request from the task panel. Squad Chat gives agents one shared channel that posts spawned, completed, and failed events. Workflows chain steps with parallel branches, loops, and human approval gates. Policy rules allow, deny, or hold agent actions for review. Assistants reach the board through an MCP server, a command-line client, or a REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pomodoist pairs a task manager with a Pomodoro timer, so the list of what to do and the clock that gets it done live in the same app. Type a task the way you would say it and the quick-add bar sets its priority and estimates its Pomodoros as you type, filing it into the Inbox, Today, or Upcoming views. Plan the week on a calendar, drag cards across a kanban board, spread work along a timeline, or sort it into a four-quadrant priority matrix when everything feels urgent. Start a focus session and the timer tracks intervals against the task at hand, with configurable work and break lengths, while a 3D desktop companion focuses, rests, and celebrates along with you. Share a project and the discussion stays beside the tasks, with comments on shared items and the team's focus time visible next to the work itself. Reports chart weekly focus time, completed tasks, and habit streaks, and voice notes can become task checklists when typing is not an option. An MCP endpoint lets your AI tools manage the same projects after an OAuth sign-in, and optional Google Calendar and Telegram integrations meet the planner where you already are. The self-hosted instance unlocks every feature locally, with your own accounts and one-command backups of the whole database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 24,000 GitHub stars and active development since 2014, Firefly III is the self-hosted personal finance manager that gives you complete control over your financial data without ever contacting external servers. The double-entry bookkeeping system tracks every transaction with source and destination accounts, ensuring accurate balance calculations and audit trails across checking, savings, credit card, cash, and asset accounts. Budget management sets monthly spending limits by category with visual progress tracking and rollover support for unused allocations. Rule-based transaction automation applies categorization, tags, and budget assignments automatically based on configurable conditions matching description, amount, source, and destination patterns. Recurring transactions schedule regular bills, subscriptions, and income entries with automatic creation on configured dates. Piggy banks divide savings accounts into virtual sub-accounts for goal tracking with target amounts and deadlines. Financial reports include income versus expense summaries, budget performance charts, category breakdowns, tag reports, and net worth tracking with weekly, monthly, and yearly time ranges. Multi-currency support handles any currency with configurable exchange rates for international finance tracking. The REST JSON API covers nearly every feature for integration with external tools, import utilities, and the companion Firefly III Data Importer for bank statement processing. Two-factor authentication provides account security. Self-hosting deploys via Docker containers or directly on PHP 8.5+ with MySQL or PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 17,000 GitHub stars, 460+ contributors, and deployments across telecommunications, automotive, and financial services running on over 10,000 CPU cores at the largest known installations, Apache APISIX delivers a fully dynamic API gateway achieving 140,000 QPS on eight cores with sub-millisecond latency through NGINX's event-driven architecture and LuaJIT-compiled plugin execution. The 100+ open-source plugins cover authentication (JWT, OAuth 2.0, OIDC, Keycloak, LDAP), observability (Prometheus, Datadog, SkyWalking, OpenTelemetry), traffic management (rate limiting, circuit breaking, canary releases, traffic splitting), and security (CORS, IP restriction, CSRF protection) — all hot-reloadable without process restarts via etcd-based real-time configuration synchronization. Multi-protocol support handles HTTP, gRPC, MQTT, TCP, UDP, and WebSocket traffic for both north-south API access and east-west service mesh communication. AI gateway capabilities proxy requests to 20+ LLM providers with semantic caching, token-aware rate limiting, provider failover routing, and content moderation. Custom plugins extend the gateway in Lua, Go, Java, Python, or WebAssembly. Radixtree route matching handles 100,000+ routes without performance degradation. Functions as a Kubernetes ingress controller with native service discovery for Consul, Nacos, and Eureka. Deploy via Docker or Helm charts with horizontal scaling through etcd cluster coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 3,800 GitHub stars and continuous development since 2002 spanning 24 years of active maintenance through version 16.4.0 released in May 2026, Piwigo has proven itself as one of the most battle-tested self-hosted photo gallery platforms available, trusted by professional photographers managing 150,000+ high-resolution images alongside small teams sharing event photos. The PHP backend with MySQL or MariaDB storage serves a responsive web interface that organizes photos into hierarchical albums with nested sub-albums, tag-based categorization, and smart albums generated dynamically from search criteria. Batch management tools handle bulk uploads, metadata editing, tag assignment, and album moves across thousands of images simultaneously. User permission controls define access at the album level with configurable public, private, and group-restricted visibility, while guest access allows public galleries without authentication. Image processing via ImageMagick or PHP GD generates multiple thumbnail sizes, watermarks, and responsive derivatives automatically. The plugin ecosystem with over 200 community-built extensions adds functionality from EXIF metadata display and GPS mapping to social sharing, download controls, and Lightroom synchronization for desktop workflow integration. The REST Web API with personal API key authentication enables programmatic album creation, photo uploads, and metadata queries from external applications. Mobile apps for iOS and Android provide on-the-go upload and browsing capability. Docker deployment via the official container or traditional LAMP installation on any hosting provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Apache OFBiz is the enterprise resource planning system a company installs when accounting, inventory, orders, and the factory floor must all agree with each other in real time. One shared data model connects the modules, so a sales order entered by the CRM team immediately reserves stock in the warehouse, schedules a pick list, and posts the receivable to the general ledger when it ships. The catalog manager handles unlimited stores, categories, and product variants with price rules and a promotion engine, and the built-in e-commerce storefront and point of sale sell from the same inventory your warehouse counts. Manufacturing plans production with bills of materials, routings, and MRP runs that propose purchase orders for missing raw materials, then costs every job as it moves through the shop. Accounting is proper double-entry: accounts receivable and payable, invoicing, payments, fixed assets with depreciation, budgets, and financial reports across multiple organizations. Facility tools manage several warehouses with lot and serial tracking, receiving, returns, and physical inventory counts, while the HR module keeps positions, contracts, expenses, and performance reviews. Party management unifies customers, suppliers, and employees into one record, REST and service APIs expose every function to integrations, and project and work effort tools track tasks against orders. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With 6,700 GitHub stars, 79 releases, and 40 contributors since its October 2023 launch, OpenSign delivers a fully free electronic signature platform that removes the per-envelope pricing and seat limits of commercial e-signing services. The React-based frontend provides a drag-and-drop interface for placing signature fields, initials, date stamps, text inputs, and checkboxes onto PDF documents, while the Parse Server backend built on Node.js handles document routing through configurable multi-signer workflows with sequential or parallel signing order. Guest signers authenticate via one-time-password email verification without requiring account creation, while registered users manage documents through OpenSign Drive — a centralized vault with folder organization and status tracking across draft, in-progress, completed, and declined states. Every signing action generates tamper-proof audit trails logging timestamps, IP addresses, email addresses, and phone numbers, culminating in a detailed completion certificate attached to the finished document. The REST API v1.2 exposes endpoints for document creation, template dispatch, self-signing, and real-time webhook notifications on document lifecycle events, with regional deployments available in US and EU. PDF templates with pre-placed widgets enable repeated dispatch to different signers in a single API call. Custom branding controls email invitation templates, signing page appearance, and completion certificate styling. Deploy via Docker Compose with MongoDB, Caddy reverse proxy, and automatic HTTPS provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3 licensed.

Admidio is membership management software for clubs, associations, and groups, built so that every permission follows from the roles a person holds. Organizers define roles such as board, youth team, or trainers, decide who may email or see each one, and grant module rights like managing events, editing contacts, or uploading photos with simple switches. Contact records use customizable profile fields, record relationships such as parent and child, and can be imported in bulk or exported as vCards. New members register online and administrators review each request. Events carry dates, venues, calendars, and participant lists with sign-up, and the schedule downloads as iCal. Messages go as HTML email to individuals, roles, or groups, and members also find announcements, a categorized forum, document folders with role-based access, and photo albums with e-cards. The inventory manager tracks equipment, who holds it, and its borrowing history. Optional two-factor login protects accounts, a change history can be switched on for every module, and single sign-on lets other applications authenticate against the member database. Twenty-five languages are included, the interface installs as a progressive web app, and sub-organizations can be managed from the same installation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

ODS turns a GPU machine or server you already own into a complete private AI stack with a single install command, replacing a shelf of separate tools with one system that serves models, chat, agents, automation, and search from your own hardware. The installer reads your GPU, VRAM, memory, and disk, then downloads a GGUF model matched to that hardware tier, and a compact bootstrap model starts answering within minutes while the full model finishes downloading. From the web dashboard you watch every service's health, ports, and resource use, restart what misbehaves, and check storage and updates without touching a terminal. You chat with local models in Open WebUI, hand background work to the Hermes and Portal agents, and build automations in n8n that connect the stack to more than 400 other apps. Documents you add become searchable knowledge through Qdrant vector storage, so answers cite your files instead of the model's memory. SearXNG and Perplexica answer web questions without trackers or accounts, Whisper transcribes speech, Kokoro reads text aloud, and ComfyUI generates images, all on the same box. Every bundled service is an extension you can enable, disable, or replace, and a Privacy Shield scrubs personal data before anything reaches an optional cloud model through the LiteLLM gateway. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Content types, media libraries, workflows, roles, search, and a GraphQL API all ship in the box with Orchard Core, a free CMS and application framework that hosts many separate websites from one install. Editors build content types in the admin by combining parts and fields, with no migrations to write, and preview an item live before publishing it. Designers adjust page HTML safely with Liquid templates, and developers add their own modules. Multi-tenancy runs many isolated sites from one deployment, each with its own content, users, settings, and theme, and a setup screen lets you pick a recipe and database for each site. Media uploads can be resized on the fly and stored on remote providers, and a visual workflow editor automates content approvals, webhooks, and form submissions. A typed GraphQL API feeds headless sites and single-page applications, and custom SQL or Lucene queries can be exposed as endpoints. Roles and fine-grained permissions decide who can do what, OpenID Connect handles external sign-in, and two-factor authentication protects accounts. Content and the admin interface can be localized, and deployment plans move content and configuration from staging to production. SQLite works out of the box, SQL Server, MySQL, MariaDB, or PostgreSQL can be chosen at setup, and the official Docker image starts a site with one command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Every server, embedded board, and edge gateway you manage becomes reachable through one SSH address in ShellHub, even when it sits behind NAT with no public IP and no open inbound port. A small agent on each device dials out to your server, so a box on a customer LAN or a cellular link needs nothing beyond outbound web access. Connect with the stock ssh client by typing [email protected]@server, or open a terminal in the browser, and scp, sftp, rsync, and port forwarding work unchanged. SSH identities tie every key to a named team member, so removing someone ends their access on every device at once. Default-deny access policies grant or block members, roles, users, or API keys by device tag, Linux login, and source address, and can require a fresh browser confirmation before a session opens. Provisioning keys enroll whole fleets through automatic, manual, webhook, or allowlist acceptance, with usage limits, expiry dates, and tags. The Sessions page records who connected to which device, as which login, and from where, and browser terminals can be recorded and replayed. A Docker connector turns containers into devices that policies can grant one by one. Four member roles shape what each person can change, and the HTTP API, API keys, and an MCP server let scripts and AI assistants list devices and review sessions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Running a school means juggling lesson plans, timetables, attendance, behaviour notes, and grades all at once; Gibbon gives teachers, students, parents, and administrators one shared web system for that daily work. Teachers build lessons from reusable Smart Blocks, assemble them into units with learning outcomes, set and collect homework online, and grade the results in a colour-coded markbook that stays linked to every class. The timetabling engine builds schedules from reusable day structures, ties them to real calendar dates, handles exceptions, books rooms and facilities, and shows every student and teacher exactly where they should be. Attendance can be taken by form group, class, or individual student, with future absences recorded ahead of time and reports ready for emergencies or truancy follow-up. Behaviour records log the good alongside the bad using your school's own descriptors and severity levels, notify form tutors when something needs attention, and surface patterns across a student's history. Each student's profile pulls timetable, attendance, behaviour, library, and assessment information into one page, while activities sign-ups, a school-wide resource library, and departmental scope-and-sequence views keep the wider community connected. Because every module can be switched on or off per role and extended with community modules, the same platform fits a small primary school and a large secondary school in 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

PowerDNS answers the queries; Poweradmin gives you a browser-based control panel for its zones, records, DNSSEC keys, and users, with a REST API for automation. Create master, native, and slave zones, and let zone templates stamp predefined record sets onto new ones. Edit records inline with filters, or open the optional Record Wizard for DMARC, SPF, DKIM, CAA, TLSA, and SRV. Reverse zones link to their forward zones. The batch PTR tool fills whole network ranges, bulk add takes one CSV line per record, and secondary zones can be imported over AXFR. For DNSSEC, manage keys and copy DS and DNSKEY records for your registrar; changes are applied or rectified through the PowerDNS API so signed zones stay consistent. Every record and zone edit is logged with before and after snapshots, and the logs can be filtered and exported. The panel is translated into 43 languages, including right-to-left ones. Permission templates, users, and groups control who touches which zones, sign-in works through LDAP, OIDC, or SAML, and administrators can switch on authenticator-app or email two-factor codes. API keys can be read-only, limited to chosen operations, or restricted to specific zones, and companion projects link Terraform, ExternalDNS, cert-manager, and Certbot. Dynamic DNS clients such as ddclient and inadyn update records through a dyndns2-compatible endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

GoCD treats delivery as a pipeline you can see: every commit enters a sequence of stages, passes or fails in the open, and travels from first build to production deployment along one visible, traceable path. Stages split work into jobs that run in parallel on a fleet of agents, so unit tests, integration suites, packaging, and security scans finish together instead of queueing behind each other. Pipelines connect with fan-in and fan-out dependencies, meaning a release pipeline waits for every upstream component to pass before it assembles them, and one library build can feed a dozen services. The value stream map draws that whole web on one screen, from the triggering commit through every stage to deployment, and any run can be compared with another to spot exactly what changed. Materials watch Git, Subversion, or Mercurial repositories and start pipelines on new commits, while artifacts produced by one stage are fetched, versioned, and promoted by the stages after it. Environments group pipelines and agents so test and production stay isolated, resources tag agents by capability, and elastic agents appear on Docker, Kubernetes, or cloud hosts only while work exists. Pipeline definitions can live in YAML or JSON inside a repository, changing through code review like the software they deliver, and templates keep repeated release patterns consistent across teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.