jshERP lets a small or midsize business, from a shop to a wholesaler, run purchasing, stock, sales, and money from one place instead of scattered spreadsheets. A purchase requisition becomes a purchase order, then a receipt that raises stock. A sales order becomes an outbound delivery that lowers it, or a purchase order when more must be bought in. Retail sales, returns, and serial-number scanning run through the same stock. Products sit in a category tree up to three levels deep, with barcodes, images, multiple attributes, customer-specific prices, and a base unit plus up to three secondary units. Transfers move goods between warehouses, assembly and disassembly merge and split products, and shelf locations record where each item sits. Other receipts and issues cover opening stock, stocktake corrections, and scrapped goods, while moving-average cost keeps valuation current. Finance logs income, expenses, receipts, payments, transfers, and prepayments against settlement accounts, and customer and supplier reconciliation reports export to Excel. Reports track stock levels, low-stock alerts, in-out statistics, and purchase and sales summaries, and the home page totals yesterday's and retail sales. Roles limit access down to single menus and buttons and can mask prices. A tenant model runs several businesses on one installation, and the interface switches among 73 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Paca is a self-hosted project management platform and Scrumban workspace where autonomous artificial intelligence agents collaborate with human software engineers as first-class Scrum teammates instead of external chat assistants. Engineering teams manage sprints, backlogs, and task lifecycles through a shared real-time board powered by Socket.IO where both humans and agents pick up assignments and post progress updates. A native Model Context Protocol server connects external coding assistants such as Claude Desktop and Claude Code directly into projects, tasks, and sprint data without custom scraping scripts. Distributed agents execute in isolated runtime sandboxes powered by the OpenHands software development kit, co-authoring behavior-driven development Gherkin scenarios with product owners and maintaining living system design documents. Visual event-driven automation builders compose multi-branch trigger, condition, and action pipelines that evaluate task dependency gates and cron schedules. A sandboxed WebAssembly plugin runtime allows developers to write custom backend logic and custom board views using Go or Rust. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Schools, training companies, and HR teams use Chamilo LMS to publish courses, guide learners step by step, and prove completion with grades, badges, and certificates. Teachers build courses from documents, videos, and 360 media, then arrange them into learning paths that unlock in sequence and track every learner's progress. Quizzes offer more than twenty question types with randomized draws, time limits, and adaptive testing, while assignments accept submissions, support co-grading, and plug into plagiarism checks. The gradebook turns scores into certificates with QR codes, and skills frameworks record competency levels as learners advance. Sessions let one course run for many cohorts on different calendars, attendance tools handle sign-in and Qualiopi style reporting, and the course catalogue can even sell enrolments through its e-commerce module. Discussion forums, live chat, surveys, and videoconference integrations keep classes social, and SCORM, QTI, LTI, and xAPI support means existing content and external tools slot in without conversion projects. Administrators import users in bulk, connect LDAP or OAuth2 logins, and export personal data for GDPR requests; learners get all of it in more than sixty languages, including right-to-left scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

CheckCle provides a complete uptime monitoring and infrastructure observability platform that deploys with a single Docker container and stores all data in embedded SQLite via PocketBase. The Go backend runs three microservices — a service operation engine handling HTTP, HTTPS, DNS, Ping, and TCP checks at configurable intervals, a distributed regional check agent for multi-location network testing, and a server monitoring agent collecting CPU, RAM, disk usage, and network metrics via gRPC. The React frontend built with Vite, TypeScript, Tailwind CSS, and shadcn-ui subscribes to PocketBase WebSocket endpoints for real-time dashboard updates without polling. SSL and domain monitoring tracks certificate issuers, expiration dates, days remaining, and validation status. The incident management system records UP, DOWN, WARNING, and PAUSE states with full history, while scheduled maintenance windows prevent false alerts during planned downtime. Public status pages provide external stakeholders with live service health information. Health heatmaps visualize uptime performance and outage patterns over time. Notification channels include email, Telegram, Discord, and Slack, with multiple alert targets per monitored service. The one-click agent installation script supports Debian, Ubuntu, CentOS, Red Hat, Alpine, and Windows in beta. Docker deployment runs on port 8090 with a single persistent volume at /mnt/pb_data, requiring minimum 1 vCPU and 500MB RAM. On RepoCloud, deploy CheckCle on a dedicated VPS with root SSH access, persistent storage for your monitoring database, and complete control over agent endpoints and notification configurations, all under the MIT license.

Komari turns a scattered fleet of VPS boxes into one clean status wall that shows which servers are alive, struggling, or about to expire. Every node reports CPU, GPU, memory, swap, disk, load, network speed, traffic totals, and uptime to a real-time dashboard, with history views from ten minutes to thirty days or any custom range. Flip between a card grid and a table, search by name, region, or operating system, and tag each machine with its price, billing cycle, and days until renewal. Latency tasks send ICMP, TCP, or HTTP probes and plot the results in per-node charts. Offline alerts wait out a per-node grace period before firing, expiry reminders warn before a plan lapses, and Webhook and custom JavaScript channels deliver them. A multi-tab browser terminal that reattaches after disconnects, remote command execution, and a remote file manager with an editor let you fix problems without leaving the panel. Agents install with a script, a binary, Docker, or an auto-discovery key for batch rollouts, and administrators can switch an agent's version remotely. Plugins run on an embedded JavaScript runtime and can add scheduled jobs, HTTP hooks, static pages, and notification channels. Administrators can add two-factor authentication, OAuth sign-in, API keys for a JSON-RPC 2.0 endpoint, themes from a theme market, and backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Seanime turns your server into a dedicated anime and manga command center, combining local library management, torrent streaming, an integrated manga reader, and AniList progress tracking in a single self-hosted web application. Point it at your media folders and the smart scanner automatically identifies and matches your anime files to AniList entries without requiring strict naming conventions or folder hierarchies. Stream episodes directly from torrents through qBittorrent, Transmission, Torbox, Real-Debrid, AllDebrid, or Premiumize; the built-in player starts playback before the download finishes, so there is no waiting for full transfers. The manga reader pulls chapters from community extension sources and tracks your reading progress across series automatically. An in-app extension marketplace lets you install third-party providers for streaming, manga, and torrent sources, all written in JavaScript and managed through a visual interface. Seanime Tenji, the companion mobile app for iOS and Android, connects to your server for on-the-go library browsing, content streaming, and offline downloads. Auto-download rules grab new episodes of airing series the moment torrents appear. The transcoding engine handles on-the-fly conversion for browser playback on any device, while direct play passes through compatible formats at full quality. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Notes on Windows, macOS, Linux, Android, iOS, and the terminal, synced through your own server: Joplin pairs its open-source clients with Joplin Server, the official self-hosted backend that replaces Dropbox, OneDrive, or Nextcloud as the synchronization target. Notes are Markdown with inline attachments (images, PDFs, audio), organized into hierarchical notebooks and sub-notebooks with cross-cutting tags, alongside to-do lists with reminders and alarms. End-to-end encryption is the headline feature: enabled in the clients, it encrypts sync payloads on-device before upload, so the server stores blobs it cannot read - genuine protection even if the host is compromised. The desktop app offers both Rich Text and Markdown editors, extended by a plugin ecosystem, custom themes, and an Extension API for writing your own scripts; a Web Clipper for Chrome and Firefox captures full pages or screenshots straight into notebooks. Joplin Server ships as a Docker image with SQLite for evaluation and PostgreSQL for production, offers a filesystem storage driver for large content, and includes multi-user support and note sharing - all free under AGPL-3.0 when self-hosted. Notes stay in an open format, so the exit path always exists.

CKAN lets governments, research institutions, and companies publish data as a searchable catalog, where every dataset carries its description, license, tags, and downloadable files. Organizations own their datasets, and members, editors, and admins get different rights, so a dataset can stay private until someone with publishing rights releases it. Visitors narrow results with faceted filters on tags, formats, and organizations, or write fielded queries with wildcards and fuzzy matching. Resource pages preview spreadsheets in a grid and, when the data fits, as maps and charts, and they also display images, PDFs, and HTML. The DataStore keeps tabular resources as queryable tables, serving filtered rows with range conditions and nested AND/OR logic. Everything the web interface does is also available through the Action API. Groups gather related datasets, and custom metadata fields extend each record. Per-dataset activity streams document how data changes, and follow buttons feed a personal news feed. Files can be stored on local disk or, with extensions, in S3, Google Cloud Storage, or Azure Blob Storage. Extensions add geospatial search, harvesting for federated portals, multilingual metadata, and more chart types, and themes restyle the portal to match your brand. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

This is a marketing operations control center that replaces fragmented CRM, outreach, content, and analytics tools with a unified self-hosted interface designed for AI agent-assisted go-to-market teams. The CRM module manages leads through a configurable pipeline funnel with stages from New through Sequenced, Replied, Interested, and Booked, tracking source attribution, industry segments, company size, lead quality scores, and LinkedIn URLs per contact. Outreach sequencing supports email campaigns with pause controls, audit endpoints, suppression workflows, and engagement tracking. The content operations surface provides calendar views, content item management, performance metrics, and approval queues for editorial control. Analytics and KPI dashboards show impressions, engagement, and send volumes over configurable time periods, with optional connectors to Plausible, Google Analytics 4, X, and LinkedIn for cross-platform reporting. The OpenClaw-native agent runtime enables dynamic agent and squad discovery, workspace management, session monitoring, and communications surfaces. Automation scheduling uses cron job templates with OpenClaw-compatible schedule variants including cron expressions, every intervals, and at timestamps. The tech stack combines Next.js 16 App Router with React 19, Tailwind CSS 4, Recharts, and Zustand for state management. Authentication supports session cookies, API keys, and optional Google OAuth with role-based access controls. All state persists locally in SQLite via better-sqlite3 with no required external infrastructure. On RepoCloud, deploy Marketing Dashboard on a dedicated VPS with persistent SQLite storage, root SSH access, and complete control over your marketing operations data, all under the MIT license.

A polished public status page without Statuspage prices or a heavyweight observability suite: Kener is a status and uptime monitoring system built with SvelteKit and Node.js. It runs 11 monitor types - API, Ping, TCP, DNS, SSL certificate, SQL query, Heartbeat, gRPC, and GameDig game-server checks among them - each with configurable intervals and thresholds. Incident management covers the full lifecycle: structured timelines from investigation through resolution, acknowledgements, and subscriber-visible updates, plus maintenance windows with RRULE-based recurring schedules and automatic status transitions. Notifications reach email, Slack, Discord, and custom webhooks through trigger-based workflows with template-driven messaging. One instance can serve multiple branded status pages - per product, team, or region - with custom logos, colors, and CSS, localization into 21 languages, timezone-aware displays, and server-rendered pages that stay fast and SEO-friendly. Operations tooling includes role-based access for teams, API key management, a secrets vault, analytics integrations (Google Analytics, Plausible, Umami, and others), and a REST API with 17+ endpoints for automating incidents and monitors from CI/CD. MIT-licensed; Docker deployment with Redis, SQLite by default, PostgreSQL or MySQL for production.

Skip the shell and the configuration file: Webmin handles user accounts, disk quotas, services, and server software on Linux and Unix machines from a browser tab. More than 100 standard modules sit under seven menus: Webmin, System, Servers, Tools, Networking, Hardware, and Cluster. System covers Users and Groups, Scheduled Cron Jobs, Running Processes, System Logs, Log File Rotation, Disk Quotas, Filesystem Backup, and systemd Bootup and Shutdown, plus Software Package Updates, which can hold selected packages on APT and DNF systems. Servers edits Apache, Nginx, BIND DNS, Postfix, Dovecot, MySQL and MariaDB, and PostgreSQL through forms. Networking brings an nftables firewall editor, Fail2Ban jails, and IPsec VPN settings. Tools adds File Manager, Custom Commands, and a Terminal that opens right in the browser. Hardware lists firmware, PCI, USB, storage, and sensor details. The dashboard keeps live CPU, memory, and disk gauges, stats history graphs, and a pending updates alert in view. Webmin Users limits each account to the modules it needs, while two-factor authentication, IP access control, and SSL settings guard the panel itself. Cluster modules reach other hosts registered in the Webmin Servers Index and run cron jobs, shell commands, and package installs on many servers at once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

With over 37,800 GitHub stars and active development since its first release in 2008, ERPNext is the most-starred open-source ERP system — delivering accounting, inventory management, manufacturing, CRM, project tracking, asset management, HR, and point-of-sale capabilities through a unified web interface built on the Frappe Framework's metadata-driven architecture. The accounting module handles multi-company consolidation, multi-currency transactions, tax templates for GST and VAT, bank reconciliation, and automated journal entries with real-time profit and loss, balance sheet, and cash flow reporting. Manufacturing covers production planning with multi-level bill of materials, work order scheduling, capacity planning, subcontracting, and quality inspection at each production stage. Inventory tracks stock across multiple warehouses with batch and serial number tracing, automatic reorder levels, landed cost calculations, and perpetual inventory valuation using FIFO or moving average methods. The CRM module manages leads, opportunities, and customer communication with email integration, while project management tracks tasks, timesheets, and Gantt-based scheduling with budget controls. Custom applications extend functionality through the Frappe ecosystem without forking the core codebase, and the REST API enables integration with payment gateways, shipping providers, and third-party services. Deployable via Docker Compose or the bench CLI tool with MariaDB and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With over 36,000 GitHub stars and adoption by organizations including Adobe, Shopify, and Roblox, HashiCorp Vault is the industry-standard platform for secrets management, encryption services, and privileged access control across hybrid and multi-cloud infrastructure. The key/value secrets engine stores arbitrary secrets with full versioning, soft-delete, and metadata tracking, while dynamic secrets engines generate on-demand, short-lived credentials for AWS, Azure, GCP, databases including PostgreSQL, MySQL, MongoDB, and MSSQL, and SSH access with automatic revocation after configurable lease periods. The PKI secrets engine dynamically issues X.509 certificates on demand with automatic rotation and ACME protocol support, eliminating manual certificate management workflows entirely. Encryption as a service through the transit secrets engine lets applications encrypt, decrypt, sign, verify, and generate HMACs without managing cryptographic keys directly, supporting AES-GCM-256, ChaCha20-Poly1305, RSA-2048/4096, ECDSA-P256/P384, and ED25519 algorithms. Authentication integrates with LDAP, OIDC/OAuth2, SAML, AppRole for machine-to-machine access, Kubernetes service accounts, AWS IAM, Azure Active Directory, and GitHub tokens. Fine-grained ACL policies use path-based rules with glob patterns and sentinel policies for programmatic enforcement. The integrated Raft storage backend provides high-availability clustering without external dependencies, while alternative backends include Consul, S3, DynamoDB, PostgreSQL, and MySQL. The built-in web UI provides a visual interface for browsing secrets, managing policies, configuring auth methods, and monitoring cluster health. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed.

Kill Bill handles the complete subscription billing lifecycle from plan definition through invoice generation to payment collection across any gateway, with 15 years of Fortune 500 production use and 5,600+ GitHub stars behind it. Plans, trials, add-ons, and pricing tiers live in a versioned XML catalog that propagates changes without code deploys. The multi-phase subscription engine manages trial periods, promotional discounts, evergreen billing, usage-based metering, and hybrid pricing models with automatic proration on plan upgrades and downgrades. Automated invoice generation calculates charges, applies credits and adjustments, and triggers payment collection through pluggable gateways including Stripe, Adyen, Braintree, PayPal, and CyberSource. The Java plugin framework extends every billing domain with custom logic for tax calculation via Avalara AvaTax or Vertex, fraud detection through Accertify or Feedzai, and ERP integration without modifying the core. The Kaui admin dashboard gives finance and operations teams account management, subscription controls, invoice views, payment configuration, billing timeline visualization, MRR tracking, advanced search, and full audit history with object-level change tracking. Multi-tenancy isolates billing data across thousands of brands with tenant-specific catalogs, payment configs, and RBAC policies. REST APIs expose every operation with webhook notifications for downstream integration. Deploys via Docker Compose on MySQL or PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The most-starred open-source project management platform on GitHub with over 55,000 stars, Plane delivers what Jira, Linear, Monday, and ClickUp charge thousands per year for — issue tracking, sprint planning, documentation, and AI-powered workflows in one unified workspace that you own and control entirely. Work items feature a rich text editor with file uploads, sub-properties, custom states, priorities, labels, assignees, and cross-referencing, organized across five customizable layout views (list, board, table, spreadsheet, Gantt) with Command-K navigation for instant access to anything. Time-boxed Cycles provide sprint planning with automatic burn-down charts, velocity tracking, and scope change detection, while Modules break complex projects into manageable deliverables with progress aggregation. Built-in Pages combine AI-powered documentation with rich formatting, image embedding, and one-click conversion of notes into actionable work items. The AI layer reads across every project, cycle, document, and thread in the workspace — agents take real assignments, triage incoming requests, assign owners, track blockers, and ship status updates automatically. Native integrations connect GitHub, GitLab, Slack, Sentry, Figma, and 50+ tools with bidirectional issue sync and PR tracking, while import pipelines migrate entire workspaces from Jira, Linear, Asana, ClickUp, or Monday in minutes. The REST API with OAuth 2.0, HMAC-signed webhooks, typed SDKs in Node.js and Python, and a native MCP server enable custom automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A self-hosted "second brain": Khoj indexes your own files and answers questions from them, parsing Markdown (whole Obsidian vaults included), org-mode, PDF, Word, plain text, Notion pages, GitHub repositories, and images described by a vision model, then embedding everything with sentence-transformers into a vector index for semantic search and RAG with cited sources. Any LLM backend works: local models like Llama, Qwen, or Mistral via Ollama, or cloud models like GPT, Claude, and Gemini. You can build custom agents, each with its own persona, scoped knowledge base, chat model, and tools such as web search and code execution. Scheduled automations run recurring research and deliver newsletters or notifications to your inbox, and research mode performs multi-hop web searches with inline citations. Access it from a browser, the Obsidian plugin, Emacs, desktop, or WhatsApp - all clients connect to the same self-hosted instance, making Khoj one of the few AI assistants Emacs users can point at decades of org files. Semantic search means recall works without exact keywords: "that paper about forecasting with transformers" surfaces the right PDF even when you cannot remember its title. Switching LLM backends never requires re-indexing your documents, and with a local model via Ollama, even inference stays on hardware you control - journals, research, and private notes are never sent anywhere. Python/FastAPI stack, AGPL-licensed, with PostgreSQL storage.

Adobe Acrobat and Smallpdf, answered by a self-hosted Java web application: Stirling PDF processes every file with its 60+ tools on your own server and deletes it after the task completes. Nothing is uploaded to a third party, which is the whole point for contracts, invoices, and medical records. The toolbox covers page operations (merge, split at page numbers or scanned dividers, rotate, reorder, crop, extract), conversion in both directions between PDF and Word, Excel, PowerPoint, images, HTML, and Markdown, OCR that turns scans into searchable PDFs via Tesseract/OCRmyPDF (including PDF/A archival conversion), and security tools for passwords, permissions, watermarks, signatures, and true UI-driven text redaction. A built-in viewer handles annotation, drawing, and text or image insertion, and V2 added stateful processing - upload once, chain multiple tools - plus undo/redo history. For automation, nearly every tool has a REST API endpoint, no-code pipelines combine operations into custom logic chains, and watched folders process files automatically. Enterprise deployments get SSO, user management, and audit logging; the interface ships in 40+ languages. With 84K+ GitHub stars it is the most popular PDF tool in self-hosting, replacing $20/month Acrobat subscriptions with flat infrastructure cost.

Achieving 98.4% Recall@5 on LongMemEval-S without a reranker, AKB is the agent-native knowledge infrastructure giving Claude Code, Cursor, Windsurf, and any MCP-aware agent persistent organizational memory — a drop-in replacement for Confluence or Notion where AI agents read and write directly rather than scraping human-formatted pages. Documents are stored as Markdown with YAML frontmatter in Git bare repositories (full version history, branching, diff), while PostgreSQL 16 serves as source of truth for chunk text, metadata, and BM25 vocabulary, with dense embeddings handled by a pluggable vector store (pgvector default, Qdrant optional, or managed Seahorse). Agents interact through 20+ MCP tools — akb_put, akb_search, akb_browse, akb_relations, akb_sql, akb_edit, akb_history — performing hybrid dense plus BM25 search fused via Reciprocal Rank Fusion in one call. The URI graph (depends_on, related_to, implements relations) lets agents traverse knowledge connections without external graph databases. Multi-tenant vault isolation is enforced at the PostgreSQL ACL level with per-user roles and SET LOCAL ROLE for SQL sandboxing. Event fanout streams structured events to Redis Streams for external consumers (synthesis bots, digest agents, audit trails), and a hash-chained append-only audit log integrates with enterprise SIEMs. Ships with agent plugins for Claude Code and Codex (session capture, wiki ingest, lifecycle hooks), Kubernetes kustomize manifests, and Open Knowledge Format export. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed (free under 100 seats, auto-converts to Apache 2.0 after four years).