Born at Brazilian media giant Globo.com, Thumbor answers imaging CDNs like Imgix and Cloudinary with an HTTP service where every image variant is just a URL. Ask for /300x200/smart/your-image.jpg and Thumbor fetches the original, crops and resizes on demand, and caches the result - one source file, unlimited renditions, no batch pre-generation pipeline. The "smart" in the URL is the signature feature: OpenCV-based face detection finds people in the frame and crops around them (no more thumbnails with severed heads), and when no faces exist, feature detection finds visually important corners and computes a weighted center of mass as the focal point. Beyond cropping, a chainable filter pipeline handles brightness, contrast, grayscale, blur, red-eye removal, rounded corners, rotation, watermarks, and format conversion with quality control - applied in order via URL segments. All common image formats work out of the box, and every layer is pluggable: loaders (HTTP, local, S3), storages and result storages (local, S3, Ceph, and community backends), engines, optimizers, filters, and even custom detectors, with the awesome-thumbor list cataloging the ecosystem. URL signing prevents abuse of your processing capacity. Integrations exist for Django, Rails, Node, WordPress, and most frameworks. MIT-licensed, battle- tested for over a decade.

Staying on top of hundreds of RSS feeds is impossible when every reader just dumps articles in chronological order. RSSMonster takes a different approach: it evaluates, scores, and prioritizes every article so the signal rises above the noise. The three-pane reading interface automatically marks articles as read when you scroll past them, while the built-in quality scoring engine rates content by freshness, originality, trust, and attention metrics. Compose advanced search expressions using field operators like star:true, quality:>0.6, hot:true, and date filters like @today or @lastweek, then save those expressions as persistent Smart Folders for one-click access to curated views. Semantic event clustering groups related articles across sources so you see one coherent story instead of fifteen duplicates. Connect your favorite mobile client through the Fever API (supporting Reeder for iOS) or the Google Reader API (compatible with News+, FeedMe, Vienna RSS, and ReadKit). The AI chat assistant powered by the Model Context Protocol lets you ask questions about your feed content and get summarized answers. Import your existing subscriptions via OPML, switch between light and dark themes, and install the app as a Progressive Web App for offline reading. On RepoCloud, deploy RSSMonster on a dedicated VPS with root SSH access, full data ownership, and persistent storage under the MIT license.

With over 3,800 GitHub stars and continuous development since 2002 spanning 24 years of active maintenance through version 16.4.0 released in May 2026, Piwigo has proven itself as one of the most battle-tested self-hosted photo gallery platforms available, trusted by professional photographers managing 150,000+ high-resolution images alongside small teams sharing event photos. The PHP backend with MySQL or MariaDB storage serves a responsive web interface that organizes photos into hierarchical albums with nested sub-albums, tag-based categorization, and smart albums generated dynamically from search criteria. Batch management tools handle bulk uploads, metadata editing, tag assignment, and album moves across thousands of images simultaneously. User permission controls define access at the album level with configurable public, private, and group-restricted visibility, while guest access allows public galleries without authentication. Image processing via ImageMagick or PHP GD generates multiple thumbnail sizes, watermarks, and responsive derivatives automatically. The plugin ecosystem with over 200 community-built extensions adds functionality from EXIF metadata display and GPS mapping to social sharing, download controls, and Lightroom synchronization for desktop workflow integration. The REST Web API with personal API key authentication enables programmatic album creation, photo uploads, and metadata queries from external applications. Mobile apps for iOS and Android provide on-the-go upload and browsing capability. Docker deployment via the official container or traditional LAMP installation on any hosting provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

OpenRun replaces the patchwork of CI/CD pipelines, reverse proxies, and identity providers that teams typically assemble when deploying internal tools, offering declarative GitOps-based deployment of web applications to Docker, Podman, or Kubernetes from a single self-hosted Go binary. Point it at a Git repository and it builds containers from AppSpec templates, routes requests by domain or URL path, provisions TLS certificates automatically, and scales idle applications to zero when unused. Blue-green staged deployments promote new versions through development, staging, and production environments with atomic rollback across multiple apps simultaneously. Every deployed application inherits SSO authentication through OAuth, OpenID Connect, or SAML providers alongside role-based access control, all configured once at the platform level rather than per app. Service bindings provision isolated PostgreSQL, MySQL, SQLite, or Redis credentials for each application, while Litestream integration replicates SQLite databases to S3 for automatic disaster recovery. The management console provides a web interface for monitoring containers, reviewing audit logs, configuring syncs, and managing server operations. AppSpec templates handle Streamlit, Gradio, FastAPI, Flask, and FastHTML projects out of the box, deploying existing Python applications without requiring custom Dockerfiles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 8,000 GitHub stars and continuous development since 2020, LibrePhotos delivers the core intelligence of Google Photos — face recognition, object detection, semantic search, and automatic album generation — entirely on your own hardware without sending a single photo to a third-party server. The Django 5 backend processes uploaded media through a machine learning pipeline that runs face detection via the face_recognition library, clusters identified faces using scikit-learn and HDBSCAN, generates image captions through BLIP and Moondream 2, and classifies scenes using Places365 or Google's SigLIP 2 vision-language model with zero-shot classification against 900+ real-world tags. Semantic search lets you find photos by natural language queries like "sunset at the beach" without manual tagging, while metadata search filters by person, camera, lens, file type, and filesystem path. The React 18 frontend built with Vite presents a timeline view, fullscreen lightbox with slideshow mode, photo detail sidebar showing location and people, and a folder navigation view with breadcrumb paths. RAW files from any camera are converted via ImageMagick, videos processed through FFmpeg, and Live Photos paired with their RAW+JPEG counterparts as unified entries. Public album sharing via link provides fine-grained privacy controls, and duplicate detection uses perceptual hashing to identify near-identical images. Deployment runs as a single unified Docker container or via Docker Compose with Kubernetes manifests also available. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Portabase takes a zero-trust approach to database backups: lightweight Rust/Tokio agents deploy next to each database, encrypt dumps with AES-GCM before data ever leaves the host, and poll the Next.js control plane outbound every five seconds requiring zero inbound firewall rules. This architecture contains blast radius if the dashboard is compromised while supporting ten engines with stable backup and restore: PostgreSQL 12 through 18, MySQL 5.7 through 9, MariaDB 10 and 11, MongoDB 4 through 8, SQLite 3.x, Redis 2.8+, Valkey 7.2+, Firebird 3.0 through 5.0, Microsoft SQL Server 2017 through 2022 including Azure SQL, and Docker volumes on Engine 20.10+. Encrypted backups store on configurable backends including local filesystems, any S3-compatible provider (AWS, MinIO, RustFS), Google Cloud Storage, and Azure Blob Storage. Cron-based scheduling with Grandfather-Father-Son retention policies automates backup lifecycle management, while on-demand restore targets any compatible server for cross-environment recovery. The CLI installs agents with a single command and auto-updates when new versions ship. A RESTful API with MCP server integration enables automation from CI/CD pipelines and AI agent workflows. Developed by a non-profit under Apache-2.0. 1,270+ stars and 174 releases since October 2024. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console.

Plex's own dashboard shows current streams and forgets everything else - which is why every Plex server admin eventually installs Tautulli, the analytics layer. This Python web application (descended from PlexWatch and Headphones) logs complete watch history - what was watched, who watched it, when, where, from which device and IP, and whether it played directly or transcoded - and turns it into clean Highcharts graphs of daily plays, concurrent streams, bandwidth, and platform breakdowns. The home page surfaces top statistics over configurable windows: most-watched content, most active users, stream type ratios. For running a server shared with family and friends, this is operational truth: spot the user forcing 4K transcodes on a phone, see which libraries earn their disk space, and track sync activity across users. The notification engine triggers on server events - playback starts, transcode decision changes, recently added media, server down - through dozens of agents (Discord, Telegram, Slack, email, webhooks) with fully customizable text and conditions, plus arbitrary script execution. Scheduled newsletters email your users a styled digest of recently added content. A comprehensive API exposes every statistic for dashboards like Homarr, and an official mobile app monitors activity on the go. Themed to match Plex/Web. GPL-licensed.

Capture fleeting thoughts as interactive flash cards and transform unorganized notes into an AI-searchable personal brain with Blinko. Users can jot down rapid notes, format rich markdown documents with code snippets and task lists, and attach multimedia files through a responsive web interface. An integrated retrieval-augmented generation engine indexes every note into vector embeddings, allowing users to query their entire personal archive using conversational natural language. You can connect local Ollama models or remote providers such as OpenAI, DeepSeek, Anthropic, and Grok to summarize lengthy entries and suggest hierarchical classification tags automatically. The interactive daily review interface presents random cards to help review, organize, or archive older insights before they are forgotten. Built-in tools include an integrated global music player for focused writing sessions, custom RSS feed ingestion, and password-protected note sharing with configurable expiration dates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Most design tools stop at prototyping; Quant-UX also measures how real users actually perform with the prototype. The visual editor creates prototypes that behave like real apps - functional input widgets, animations, form validation, data binding across screens, and business logic modeled with REST requests and decision elements. Design systems are first-class, with components, design tokens, and master screens; if you design elsewhere, drop in image files or import from Figma. Testing is a shared link or QR code - no installs on the tester's side. Define user tasks up front, and Quant-UX records every session: click heatmaps show where users found (or missed) actionable elements, user journey graphs expose lost users, drop-off charts reveal where tasks stall, and success rates and task KPIs are extracted automatically into a dashboard. An A/B test operator wires two design variants into one prototype and compares task duration, success rate, and interaction counts. In-prototype surveys collect qualitative feedback alongside the numbers, and an AI assistant generates prototype fragments like styled forms on request. The RepoCloud deployment runs the full stack - frontend, backend, and WebSocket server containers over MongoDB - so all test recordings and research data stay on your infrastructure.

Nearly two decades running engineering organizations: Redmine is the veteran open-source project management and issue tracker, a Ruby on Rails application (GPLv2) still in active development. Its core strength is configurability: define your own trackers (bug, feature, task, or anything else), issue statuses, and role-based workflows that control exactly which transitions each role may perform, then extend records with custom fields of every type. Issues support subtasks, relations (blocks, precedes, duplicates), watchers, categories, and full journaled history, with saved custom queries and cross-project filtering for slicing the backlog any way you need. Around the tracker sit Gantt charts and calendars, a roadmap driven by versions, per-project wikis, forums, news, and document repositories, plus time tracking with estimated versus spent hours and activity-based reporting. Multi-project support runs deep - subprojects, per-project modules, and granular role-based permissions - and repository integration (Git, Subversion, Mercurial) links commits to issues automatically. Email notifications, inbound email-to-issue creation, LDAP authentication, a REST API, and a large plugin and theme ecosystem round it out. Recent 6.x releases brought substantial query and rendering optimizations. Self-hosting keeps your entire project history in your own database, free of per-seat licensing.

With over 6,400 GitHub stars, 130 contributors, and 512 releases, Flagsmith is the open-source feature flag and remote configuration platform that gives development teams granular control over feature releases, remote configuration values, user segmentation, and A/B testing from a single self-hosted dashboard. Feature flags support boolean toggles and remote config values simultaneously — every flag carries both an enabled state and a configurable value, letting teams deploy functional and visual changes without code modifications or app store approvals. User segments target audiences by attributes, percentage rollouts, and custom rules, enabling beta testing, canary releases, and gradual feature rollouts with real-time toggle control. Multivariate flags split traffic across multiple variations with configurable percentage weights for A/B and multivariate testing with analytics integration. The flag evaluation engine runs server-side with local evaluation mode in SDKs for sub-millisecond performance without network calls, supporting 15+ languages including TypeScript, Python, Java, C#/.NET, Go, Ruby, PHP, Swift, Kotlin, Flutter, React, and Next.js. The REST API and webhooks enable integration with CI/CD pipelines, and pre-built connectors exist for Datadog, New Relic, Amplitude, Mixpanel, Segment, Heap, Rudderstack, and Slack. Built on Django with a React frontend, self-hosting deploys via Docker Compose with PostgreSQL, or via Helm charts and the OpenShift Operator for Kubernetes environments. Change history provides a complete audit trail of flag modifications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Inspect a PostgreSQL database right now, without installing pgAdmin or exposing Postgres to the internet - pgweb answers that recurring need. It's a Go application from Dan Sosedoff, a decade in development, shipped as a single statically-linked binary with zero dependencies - the Docker image is essentially just the executable - that puts a clean browser UI in front of any PostgreSQL 9.1+ server. Connect via URL string or host/port credentials, and browse tables, views, and sequences from the sidebar; selecting a table shows its rows immediately alongside tabs for structure, indexes, and constraints. The Query tab executes arbitrary SQL with query history, and the Explain Query button renders the query plan - estimated cost, row counts, execution strategy - which makes pgweb a quick performance-triage tool, not just a browser. Results and entire tables export to CSV, JSON, or XML in a click. Connectivity is more flexible than its size suggests: native SSH tunneling (password or key) reaches databases behind firewalls, server bookmarks make switching instances instant, and an optional multi-session mode handles several databases concurrently. For a RepoCloud stack full of Postgres-backed apps, one pgweb instance is the universal inspection hatch. MIT-licensed, actively maintained.

Named from the German "Ich schrei sonst" - roughly "or I'll scream" - Isso is a lightweight Python/JavaScript commenting server, a drop-in Disqus replacement for people who noticed what Disqus does to reader privacy and page load times. The design premise is printed right in the docs: comments are not Big Data. So the backend is a single SQLite file rather than a database cluster, and the entire client is one embeddable JavaScript file - 65 kB, 20 kB gzipped - that you drop into any static site, blog, or CMS. Commenters write in Markdown, need no account, and can edit or delete their own comments within a configurable window (15 minutes by default). Spam control comes from an optional moderation queue: held comments stay invisible until you activate them via an admin interface or email notification links. Migration is a first-class feature, with importers for Disqus and WordPress exports, so years of existing threads move over intact. Because everything is server-rendered from your own instance, no third party tracks your readers, and real-world switchers report smaller pages and faster loads than the Disqus embed. MIT-licensed, running since 2012.

Podcast enthusiasts and homelab archivers automate digital episode preservation and stream personal audio feeds using PodFetch, an open-source self-hosted podcast manager that combines scheduled RSS downloads, Podcasting 2.0 transcript indexing, and browser playback into a modern listening platform. Listeners can subscribe to international podcast channels through direct feed URLs, Apple Podcasts directory searches, or bulk OPML subscription imports, configuring background polling timers to download new releases automatically upon publication. The integrated audio player supports variable speed playback, episode bookmarks, listening histories, and fullscreen visualization modes directly inside responsive desktop and mobile browser sessions. Advanced search capabilities leverage Podcasting 2.0 synchronized transcripts and automated speech-to-text generation via OpenAI-compatible Whisper APIs, allowing collectors to run full-text keyword searches across every spoken phrase in their audio archive. Built-in GPodder API synchronization maintains subscription lists and playback positions across popular smartphone apps like AntennaPod and native companion clients without relying on commercial cloud accounts. Server operators can assign multi-user accounts with private favorites lists, export customized RSS aggregation streams, and route storage paths between fast solid-state drives and large secondary mechanical hard disks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 9,000 GitHub stars and a focus on developer experience over legacy monitoring complexity, Highlight.io delivers a unified observability platform that correlates frontend user behavior with backend performance data in a single interface. The session replay engine captures high-fidelity DOM recordings showing exactly what users experienced, including console logs, network requests, page transitions, and user interactions, with configurable privacy redaction for sensitive content. Error monitoring automatically groups and deduplicates errors, surfaces affected user sessions, and provides full stack traces with source map support for minified production code. The logging pipeline ingests structured and unstructured logs from any backend service with automatic property extraction, full-text search, and configurable alerting thresholds. Distributed tracing tracks request flows across microservices with embedded links to associated sessions, errors, and logs for complete request lifecycle visibility. The metrics system collects custom application metrics alongside built-in web vitals and performance data for trend analysis and anomaly detection. Search across all telemetry types uses a unified query language with automatic attribute discovery and saved views for recurring investigations. Integrations connect with Slack, Discord, Linear, Jira, Vercel, and dozens of other developer tools for notification routing and workflow automation. SDKs cover React, Next.js, Vue, Angular, Python, Go, Ruby, Java, PHP, and Elixir with framework-specific instrumentation. Self-hosted deployment runs via Docker Compose with ClickHouse for analytics storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Deploying container updates without blind surprises is what Drydock delivers through a monitor-first inspection plane that evaluates image registries, scans CVE vulnerabilities, and automates rollbacks across distributed Docker infrastructure. Systems engineers track container fleets across twenty-three public and private registries including Docker Hub, GitHub Container Registry, Harbor, and Quay using cursor-based pagination and semver classification. The integrated Update Bouncer runs Trivy and Grype static scanners against incoming candidate layers, blocking deployments that fail configurable CVE severity policies while verifying cryptographic signatures through cosign. Operators configure declarative update schedules with stabilization countdown gates that hold back brand-new releases until defined burn-in periods elapse. When updates execute, Drydock creates pre-upgrade container snapshots and evaluates post-launch container health checks, instantly restoring previous image digests and network configs if failures occur. Distributed Portwing edge agents stream live container output and system logs over encrypted WebSockets, allowing central consoles to coordinate remote daemon updates without opening inbound host firewall ports. Automated event triggers dispatch granular notifications and update payloads across seventeen communication channels including Slack, Discord, Telegram, and Home Assistant MQTT brokers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Mathesar puts a spreadsheet in front of your PostgreSQL database, letting anyone on the team browse, edit, filter, sort, and query tables without writing a line of SQL. Connect it to any existing PostgreSQL instance and immediately navigate schemas, tables, and records through an intuitive grid interface with inline editing, grouping, and summarization. The query builder joins tables across foreign key relationships, creates custom views with aggregations, and exports results to CSV. Rather than inventing its own permission layer, Mathesar maps each user or team to a native PostgreSQL role with granular schema-level and table-level privileges enforced at the database engine level, so there is never a gap between what the UI allows and what the database permits. Record summary templates display human-readable representations of linked records, making foreign key relationships immediately understandable instead of showing raw IDs. Import data from CSV files, create new tables and columns with proper PostgreSQL types including arrays, JSON, and custom domains, and modify schema structure through the web interface. Mathesar scales as well as the underlying PostgreSQL instance with no artificial limits on database size or complexity. Maintained by the Mathesar Foundation, a 501(c)(3) nonprofit, with a permanent commitment against vendor lock-in or licensing changes. Docker deployment connects to existing PostgreSQL instances or a bundled database in minutes. 5,000+ GitHub stars. GPL-3.0 licensed.

Authentication that lives inside your application rather than behind a redirect to an external identity provider - SuperTokens takes a fundamentally different architecture from Auth0 and AWS Cognito. Three tiers make that work - frontend SDKs (React, Angular, Vue, vanilla JS, React Native) render overridable login UI and manage tokens; backend SDKs (Node.js, Python, Go) expose auth endpoints on your own API domain; and SuperTokens Core, the piece you host here, is the stateless HTTP service handling core auth logic, password hashing, token signing, and database operations against PostgreSQL. The recipe system keeps features decoupled: use email/password, social login, passwordless (magic links, OTP), phone-password, multi-factor authentication (TOTP, WebAuthn), user roles, and microservice auth - individually or combined; you can even use SuperTokens purely for session management alongside another login provider. Sessions are where it shines: rotating refresh tokens with theft detection, automatic access-token refresh, CSRF protection, and secure cookie handling out of the box - the details that become vulnerabilities when hand-rolled. Verification happens locally in your backend via cached JWT signing keys, so the Core stays off the hot path. Self-hosted means no user limits, free forever, with all user data in your database. Apache-licensed.