Kotaemon is a document QA platform that combines advanced RAG techniques with a clean Gradio-based web interface for chatting with your documents. Built by Cinnamon, the Python backend supports any LLM provider including OpenAI, Azure OpenAI, Cohere, Groq, and local models via Ollama and llama-cpp-python, with a model management panel for configuring LLM and embedding providers from the UI. The default hybrid RAG pipeline combines full-text keyword retrieval with vector similarity search and applies re-ranking to ensure optimal result quality, while multi-modal document parsing extracts content from tables and figures alongside text. Advanced citations link every answer to specific source passages with relevance scores, viewable directly in the built-in PDF viewer with highlighted text spans. GraphRAG indexing via NanoGraphRAG, LightRAG, or Microsoft GraphRAG builds knowledge graphs from document collections for relationship-aware retrieval. Agent-based reasoning supports question decomposition for multi-hop queries using ReAct and ReWOO strategies. Multi-user authentication organizes documents into private and public collections with sharing and collaboration features. The platform supports Docker deployment in lite, full, and Ollama-bundled variants, runs on port 7860, and stores application data in a persistent volume. MCP tool integration enables external system connections for extended retrieval capabilities. On RepoCloud, deploy Kotaemon on a dedicated VPS with Docker, root SSH access, and complete control over your document AI infrastructure, all under the Apache 2.0 license.

Church offices juggle member directories, giving records, event rosters, and volunteer schedules, and ChurchCRM, a free church management system, brings all of it into one browser-based workspace. Administrators keep a record for every person and family, with contact details, roles, notes, custom properties, and a timeline, while visitors submit a self-registration form that staff approve before it reaches the printed directory. Treasurers log donations against family pledge accounts, follow numbered giving envelopes and multi-year pledges, and batch gifts into deposit slips with printable bank forms. Ministry leaders organize teams, committees, Bible studies, and Sunday School rosters, then schedule volunteers into positions with substitutions and reminder email. Events can be one-time or recurring, appear on month, week, day, and list calendars beside birthdays and anniversaries, and collect attendance through kiosk tablets that alert parents by email or SMS. Members sign in to a portal to update their details, confirm their household, and check the church calendar and their volunteer schedule. A family map shows where households live and which ones are close by. Reports produce directories, mailing labels, birthday lists, financial statements, and custom queries, while CSV import, an Export Hub, and one-click database restore handle moving data. Role-based permissions and two-factor sign-in protect sensitive records, and plugins add MailChimp and Vonage SMS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

3X-UI is the most popular open-source Xray management panel, providing a full-featured web interface for deploying and monitoring proxy and VPN protocols on Linux servers. The Go backend manages Xray-core instances supporting VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria2, HTTP, SOCKS, Dokodemo-door, and TUN inbounds across TCP, mKCP, WebSocket, gRPC, HTTPUpgrade, and XHTTP transports secured with TLS, XTLS Vision, and REALITY. The Clients page tracks each user with individual traffic quotas, expiration dates, concurrent connection limits, and live online status indicators, while one-click share links, QR codes, and a built-in subscription server distribute configurations in multiple output formats. The multi-node architecture manages and scales deployments across multiple servers from a single panel instance. The Panel Settings page configures listen address, port, URI path, session duration, trusted proxy CIDRs, authentication, and Telegram bot integration for remote monitoring and management alerts. Outbound routing supports WARP, NordVPN, custom rules, load balancers, and proxy chaining. Xray Configs provides template-level control over the core configuration, while the API Docs page exposes a complete RESTful API with in-panel Swagger documentation. Data persists in SQLite by default or PostgreSQL for larger deployments, with database export and import from the panel. Fail2ban integration enforces per-client IP limits. On RepoCloud, deploy 3X-UI on a dedicated VPS with Docker, root SSH access, and complete control over your proxy infrastructure, all under the GPL-3.0 license.

Smartstore is a self-hosted eCommerce platform that lets one install run several multilingual, multi-currency storefronts, with a drag-and-drop page builder and built-in AI writing tools. The catalog takes unlimited products and categories, with variants, bundles, grouped and downloadable products, tier pricing, and cross-selling, while faceted search keeps large assortments easy to filter. Shoppers get a responsive storefront with a streamlined checkout, reviews, wishlists, and wallet or gift-card payments; staff get order, shipment, and return handling plus a dashboard with sales statistics and bestseller lists. Marketing tools cover discounts, coupons, reward points, newsletters, affiliates, a blog, and forums, and the visual Rule Builder grants discounts, offers shipping and payment methods, and assigns customers to roles automatically. AI helpers draft product descriptions and meta tags with OpenAI, Gemini, Claude, DeepSeek, or a self-hosted Ollama model, and image tools create or edit pictures. A Media Manager organizes images and files in folders with filters and metadata. Import and export profiles move catalogs in and out on a schedule, a REST API connects other systems, and tree-based permissions decide which staff roles may do what. The Docker image starts a browser installer that connects to MySQL, PostgreSQL, or SQL Server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Publish the answers your team keeps repeating as a multilingual, searchable FAQ with phpMyFAQ, a knowledge base whose admin area handles writing, review, and permissions. Organize entries in nested categories that you rearrange by drag and drop, attach files, add tags and related FAQs, and let visitors leave comments. A WYSIWYG editor with an image manager writes each answer, a wiki-style revision history restores earlier versions, and a news system posts announcements. Full-text search covers every language, and optional Elasticsearch or OpenSearch backends handle larger collections. The interface covers more than 40 languages with right-to-left layouts, automatic content negotiation, and translated categories and entries. Privileges work per user and per group, so an editor can change an entry without being allowed to delete it, and categories can be limited to chosen readers. Sign in through LDAP, Active Directory, or Microsoft Entra ID, protect accounts with two-factor authentication, or try experimental passkeys. The dashboard charts 30 days of visits, lists inactive FAQs, and checks installed files against published hashes. Export entries to PDF, publish a dynamic sitemap, back up your content, and filter spam with built-in protections. Dark, light, and high-contrast themes keep the public site comfortable to read. Scripts and AI assistants reach the knowledge base through a REST API with an OpenAPI specification or an experimental MCP server, and plugins extend it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

nopCommerce is a self-hosted shopping cart and merchant back office for selling physical goods, downloads, rentals, and gift cards from a storefront you fully control. The catalog covers simple, grouped, downloadable, rental, recurring, and gift card products, with categories, manufacturers, tier prices, product and specification attributes, stock tracking, and Excel import with Excel or XML export. Shoppers get a one-page checkout, wishlists, product comparison, reviews, reward points, gift card redemption, and return requests. Run several stores or outside vendors from a single back office; vendors can apply for accounts and manage their own products, orders, and shipments. Orders move through status changes, offline refunds, shipments, recurring payments, and PDF invoices, while built-in reports surface bestsellers, low stock, country sales, and top-spending customers. Multiple languages and currencies, tax and shipping providers, warehouses, pickup points, and EU Omnibus and GDPR settings support selling abroad. Discounts, affiliates, newsletters, campaigns, SEO-friendly page names, blog, news, forums, and polls cover promotion and content. Customer roles and an access control list set who can manage what, and multi-factor authentication protects sign-ins. Plugins and themes add payment gateways, social sign-in, search, and exchange rates, and the Web API plugin exposes store functions over REST for mobile apps, ERP, CRM, and accounting systems. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. nopCommerce Public License 4.0 licensed.

A personal to-do list that scales to team project management: Vikunja is an open-source task manager that grows with the work. Every project can be viewed four ways - classic list, drag-and-drop Kanban board, Gantt chart for timeline planning, and a spreadsheet-style table - so a project manager watches the Gantt while developers work the board, on the same data. Tasks carry the full attribute set: labels, priorities, due dates and reminders, recurring schedules, subtasks and task relations, file attachments, assignees, and comments, and Quick Add Magic parses natural-language input like dates and labels typed inline. Projects share with team members or via links, and saved filters slice tasks across projects. Built-in CalDAV support (VTODO) syncs tasks bidirectionally with clients like Thunderbird, DAVx5, and iOS Reminders, and one-click importers migrate from Todoist, Trello, and Microsoft To-Do. Nothing is metered - unlimited projects, tasks, filters, and attachments. A single Go binary with a Vue frontend runs against SQLite, MySQL, or PostgreSQL, exposes a full REST API, and works as an installable PWA on mobile. AGPLv3-licensed.

Compose Craft is an open-source visual diagramming and management platform that transforms raw Docker Compose configuration files into an interactive canvas of interconnected service nodes. Developers can drag and drop container services to map complex microservice architectures, automatically wiring port mappings, internal bridge networks, volume mounts, and dependency relationships. The real-time synchronization engine reflects every node repositioning, environment variable adjustment, and resource constraint directly into standard docker-compose syntax alongside a live editable code preview pane. Teams can import existing configuration files to diagnose routing conflicts, auto-format tangled service trees, and generate clean architectural documentation for operational handoffs. Engineers can generate shareable read-only public links to demonstrate infrastructure topologies to teammates and external reviewers without forcing them to register accounts. The built-in playground lets administrators experiment with container restart policies, healthcheck definitions, build contexts, and secret keys before deploying to production hosts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Vehicle maintenance records shouldn't live in a homemade spreadsheet and a shoebox of receipts - LubeLogger exists because of exactly that. It's a self-hosted .NET web application (from Hargata Softworks) that gives every vehicle in your garage a complete digital history: service, repair, and upgrade records categorized and searchable, with invoices and receipts attached as documents; fuel fill-ups that compute economy in MPG, UK MPG, L/100KM, or KM/L without spreadsheet tedium; taxes, odometer logs, inspections, equipment, and supplies inventory for tracking the parts and fluids on your shelf. The reminder system is what saves engines: recurring reminders trigger by date, odometer reading, or whichever comes first - exactly how real service intervals work - so oil changes and timing belts stop relying on memory. A dashboard summarizes expenses by year, month, and category, a planner tracks to-dos by type, priority, and progress, and professional vehicle reports print a full history - genuinely useful when selling a car. Collaboration is built in: invite household members as collaborators on shared vehicles, with single sign-on support. Custom fields adapt records to your needs, CSV import/export moves data freely, an API enables automation, and the mobile-tested UI installs as a PWA on iOS and Android. MIT-licensed.

ServerBee delivers complete fleet monitoring from a single Rust binary that embeds both the server and web UI, requiring no external database or heavy runtime. Lightweight agents installed on each node stream CPU, memory, disk, network, load, temperature, GPU, and disk I/O metrics over persistent WebSocket connections to a central server backed by embedded SQLite. The real-time React dashboard presents 17 drag-and-drop widget types across custom layouts, with historical charts spanning one hour to 30 days and monthly traffic statistics with billing-cycle prediction and cost insights including burn rate and per-resource unit cost scoring. Network monitoring covers ICMP, TCP, and HTTP ping probes, service monitors for SSL certificates, DNS records, HTTP keyword matching, TCP ports, and WHOIS expiration, plus network-quality probing across 96 China 3-ISP and international presets with IP-quality and streaming-unlock detection. Remote management features include a web terminal with sandboxed file manager, Docker container stats with logs and events, firewall configuration, and agent auto-update capabilities. Public status pages display 90-day uptime timelines, while alerting supports email and webhook notifications with flexible trigger expressions. A native iOS companion app provides mobile monitoring access. Deploy via Docker or download the single binary for Linux, macOS, or Windows, running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 3,600 GitHub stars and a philosophy of deliberate simplicity, OliveTin eliminates the need for SSH sessions, admin panels, and complex automation platforms by letting you define shell commands in a YAML config file and access them as clickable buttons through a clean browser interface. The Go binary consumes only a few megabytes of RAM, running on everything from tiny ARM and RISC-V devices through Linux VMs, containers, macOS, and Windows. Each button executes a predefined shell command with optional typed arguments that render as dropdowns, text fields, and validated inputs, preventing free-form command entry while giving users controlled access to server operations. Access control lists define exactly who can view or run each action — guests, family members, or junior administrators see only the buttons they are permitted to use. Entity templates generate actions dynamically from lists of hosts, containers, or other resources, creating one template that produces many buttons without manual duplication. Flexible triggers extend beyond browser clicks: cron schedules, webhooks, calendar file events, and filesystem watchers run actions automatically when conditions are met. Authentication supports OAuth2, JWT, and header-based methods for integration with reverse proxies and identity providers. Dashboards organize actions into folders and fieldsets for clear navigation across dozens of commands. No plugin system, no extension marketplace, no premium tiers — every feature ships in the single open-source release. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 13,800+ GitHub stars and active releases through 2026, Casdoor is the open-source identity platform that ships OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn passkeys, TOTP multi-factor authentication, and Face ID biometric login in a single Go binary with a React web console — covering every authentication protocol your organization will ever need. Social login connects 50+ identity providers including Google, GitHub, Microsoft Azure AD, Facebook, WeChat, DingTalk, Apple, Twitter, and LinkedIn without custom code. The AI-first architecture includes a Model Context Protocol gateway for AI agent authentication and Agent-to-Agent protocol support for securing LLM-powered workflows. Built-in Casbin integration delivers authorization primitives beyond basic RBAC: attribute-based access control, relationship-based access control, and custom policy models through a unified engine. The organization-scoped multi-tenancy model isolates users, applications, and identity providers per tenant with customizable login pages, branding, and SMTP configuration. SCIM 2.0 endpoints automate user provisioning from HR systems and Active Directory. Official SDKs for Go, Java, Node.js, Python, and PHP accelerate application integration. The RESTful API exposes every resource for programmatic management. Comprehensive audit logs record authentication events and administrative actions. Deploy via Docker Compose with MySQL or PostgreSQL, the all-in-one SQLite Docker image for quick trials, or the official Kubernetes Helm chart for production clusters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Damselfly puts a searchable brain over a folder-based photo archive, so a library of hundreds of thousands of images stays browsable from any browser. Point it at your existing folders and it indexes everything in the background, generating thumbnails and reading IPTC keywords, EXIF camera data, and file names into one catalogue. Search returns results in under a second even across 500,000 photographs, and advanced filters narrow by date range, camera or lens model, file size, orientation, detected objects, or recognized faces. Face detection and recognition run locally and offline, so you tag a person once and Damselfly finds them in other shots without sending family photos to a cloud service. Keyword tagging writes metadata with ExifTool without re-encoding JPEGs, keeping originals byte-identical while tags travel with the files into DigiKam, Photoshop, or other tools. The Picasa-style basket collects picks from search results for download, watermarked export for social media or email, or upload to WordPress, and baskets can be personal or shared between users. Photos with location metadata appear on a map, visually similar images can be found from a single example, and untagged shots can be listed so nothing stays unlabelled. Accounts with role-based permissions let everyone browse while only editors tag or reorganize, and an optional desktop client syncs basket selections to a laptop for editing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

2FAuth generates TOTP, HOTP, and Steam Guard codes from any web browser, freeing your two-factor authentication from dependence on a single smartphone or app. Lose your phone, switch devices, or sit at a desktop computer, and your 2FA codes remain accessible through the web interface. The Laravel and Vue.js application stores account secrets in an encrypted SQLite database that backs up as a single file. Adding accounts works through camera-based QR scanning or manual secret key entry for services that only provide text codes. Group organization with drag-and-drop sorting keeps large collections navigable, categorized however you prefer. WebAuthn authentication with FIDO2 hardware keys protects vault access with phishing-resistant passwordless login, meaning the tool that secures your accounts is itself secured by the strongest available method. Automatic screen lock triggers after configurable idle time, and OTP obfuscation dots out generated codes until you tap to reveal them, preventing shoulder surfing in shared spaces. The REST API enables browser extensions and external applications to request codes programmatically. Import compatibility with Google Authenticator, Aegis, and 2FAS ensures painless migration without re-enrolling every account from scratch. PWA installation places 2FAuth on your device home screen for native-app-like instant access. Runs on a dedicated RepoCloud VPS with guaranteed resources and full root SSH access. AGPL-3.0 licensed.

The movie half of the *arr stack: Radarr is a .NET collection manager that automates acquiring films for Usenet and BitTorrent users the way Sonarr does for TV. Add a movie once and Radarr handles the rest: it monitors indexers and RSS feeds, grabs a matching release the moment one appears, sends it to SABnzbd, NZBGet, qBittorrent, Deluge, Transmission, rTorrent, or another connected download client, then imports, sorts, and renames the file into your library structure. Quality profiles are the control surface - define allowed resolutions and a cutoff, and Radarr keeps upgrading files automatically, replacing a DVD rip when a Blu-ray release lands. Custom formats go further, scoring releases by codec, HDR metadata, release group, streaming source, or arbitrary regex so the copy you want always wins the pick. Failed downloads retry with another release automatically; a manual search shows every candidate and explains why one was skipped. Release parsing recognizes director's cuts, special editions, AKA titles, and hardcoded subs. Plex and Kodi integration handles notifications, library refreshes, and metadata like posters, trailers, and subtitles, and a calendar view tracks upcoming releases. It pairs naturally with Jellyseerr for request management and shares its API conventions with the whole *arr ecosystem.

Moodle gives teachers a place to build courses and learners a place to work through them, with quizzes, assignments, grading, and progress tracking on a learning platform you host yourself. Custom or weekly sections sit beside a course index, and Previous and Next buttons walk learners through activities in order. The activity chooser adds forums, wikis, glossaries, lessons, H5P content, and SCORM packages. Question banks can be shared across courses and track every edit, and quizzes combine calculated, ordering, and essay questions with due dates and Safe Exam Browser settings. Assignments offer in-browser PDF annotation, rubrics, and marking guides, and with a marking workflow several markers can leave separate feedback before grades are released. Peer assessment runs through workshops, competency frameworks feed learning plans, and Open Badges recognize achievement. With learning outcomes enabled, a course page lists each outcome beside the activities linked to it. Learners follow deadlines on a dashboard timeline, message classmates, and take course content offline in the official mobile app. Sign-in works through email self-registration, LDAP, Shibboleth, OAuth 2, or LTI, and enrollment through keys, cohorts, flat files, or PayPal. Administrators assign roles, build custom reports, and upload plugin ZIP files. AI actions can run on providers including OpenAI, Azure AI, Gemini, Ollama, and Anthropic Claude, and a course-level report shows how students use them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0-or-later licensed.

Gaining over 71,000 GitHub stars as one of the fastest-rising knowledge management platforms, AFFiNE merges the document editing capabilities of Notion, the infinite canvas of Miro, and the structured data of Airtable into a single cohesive workspace. The block-based editor built on the custom BlockSuite framework supports rich text, code blocks, embeds, tables, kanban boards, and database views with drag-and-drop composition. The whiteboard mode provides an infinite canvas where users can freely mix documents, sticky notes, shapes, connectors, and hand-drawn elements, enabling visual thinking alongside structured note-taking. Real-time collaboration allows multiple users to edit documents and whiteboards simultaneously with cursor presence, comment threads, and version history. The local-first architecture stores all data on your device by default using CRDT-based synchronization, ensuring offline access and data sovereignty, with optional cloud sync for cross-device availability. Workspaces organize content into hierarchical page trees with full-text search, favorites, tags, and trash management. The platform supports Markdown import and export, PDF export, and HTML export for interoperability. AI features powered by configurable LLM providers enable writing assistance, summarization, translation, and content generation directly within documents. The theming system supports light and dark modes with customizable accent colors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Licensed under MIT with an open-source self-hosted edition.

Every page in a DokuWiki knowledge base is just a plain text file on disk, so a team wiki can run for years on modest hardware with no database to feed, ever. Writers edit pages in a clean, readable syntax, fix just one section of a long document at a time, and lean on the toolbar, breadcrumbs, automatic tables of contents, and conflict locking to keep collaboration painless. Every change is kept as a revision with colored side-by-side diffs, recent-changes feeds go out over RSS, and an index-based full-text search finds content across thousands of pages in milliseconds. Namespaces organize content into a browsable tree, while built-in access control lists decide per page or per branch who may read, edit, upload, or administer, with logins checked against LDAP and other backends. Media uploads embed straight into pages, configuration happens in the browser, and the whole installation backs up by copying a folder, which makes migrations and disaster recovery almost boringly simple. When the basics stop being enough, more than twelve hundred community plugins and a hundred templates add galleries, multilingual structures, diagrams, and data tables without changing how the wiki itself works. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.