No database anywhere in the stack: Grav, the leading flat-file CMS, builds every page from a folder of Markdown and YAML on PHP, Symfony components, Twig templating, and Doctrine caching. That architecture is the whole argument: content is Git-versionable, rsync-able, and lock-in-free; pages render in well under 100ms without database round-trips; and backup means copying a directory. Content authors write Markdown (or plain HTML), configure with readable YAML, and define custom page structures via blueprint files that generate editing forms automatically. The optional Admin panel adds a polished editing layer: dashboard with site activity, page management with a syntax-highlighted editor and live preview, drag-and-drop media uploads, one-click plugin/theme updates, and normal/expert modes for form-based or raw YAML editing. The ecosystem runs deep - hundreds of open-source plugins and themes installed through the GPM package manager, with an event-hook architecture that gives plugins full control over the request lifecycle, and downloadable skeletons providing entire pre-built sites. Grav 2.0 modernizes the stack (PHP 8.3+, Symfony 7, Twig 3) and adds a first-party REST API, an MCP server for AI agents, and a SvelteKit single-page admin with real-time collaborative editing. Ideal for docs, blogs, and marketing sites. MIT-licensed.

Its author, a student and WakaTime fan, didn't want to pay $9/month for data about his own keystrokes - so Wakapi was born, a self-hosted, WakaTime-compatible backend for coding statistics. The compatibility is the killer design decision: the official WakaTime plugins for VS Code, JetBrains IDEs, Vim, and dozens of other editors work unmodified - just point the plugin's API URL at your Wakapi instance with your personal key, and heartbeats flow to your server instead of a third party's. Duration inference matches WakaTime's own algorithm, with a configurable timeout (10 minutes by default). From that stream Wakapi builds statistics and plots across projects, languages, editors, hosts, and operating systems, plus the fun extras: public leaderboards (optionally login-gated, with configurable aggregation windows), badges for GitHub readmes, and weekly email reports. A REST API serves your data programmatically, Prometheus export feeds your existing Grafana, and a WakaTime relay mode can mirror heartbeats to both services during migration - with one-click import of historical WakaTime data. Written in Go, it is lightning fast and light enough for the smallest instance, storing to SQLite, PostgreSQL, or MySQL, with configurable data retention for GDPR peace of mind. Deliberately smaller than WakaTime, deliberately yours.

Log a date, amount, and category; get a clean monthly pie chart and a cashflow strip showing income, expenses, and net balance - ExpenseOwl is expense tracking stripped to what actually matters. The MIT-licensed Go application deliberately is not a budgeting system - no envelopes, no accounts, no double-entry, no bank sync - because its author found tools like Firefly III and Actual too heavy for the simple question "where did this month's money go?" The dashboard makes that question fast: click a pie slice to exclude fixed costs like rent and see discretionary spending clearly, then drill into a chronological table view to inspect or delete individual transactions. Recurring transactions handle salaries and subscriptions automatically, optional tags add a second classification axis, and settings cover custom categories, currency symbol, and a configurable month start date for non-calendar pay cycles. CSV import migrates data from virtually any other tool, and CSV export keeps your data portable. It ships as a self-contained binary and multi-architecture Docker image with zero internet interaction, stores data in flat JSON files by default (PostgreSQL optional), and installs as a PWA on phones. Single-user by design; pair it with an authenticating reverse proxy if exposed publicly.

Track income, recurring expenses, and multi-currency assets with WYGIWYH, a self-hosted personal finance platform built on a strict cash-flow principle that preserves monthly savings while exposing spending patterns. Users can aggregate holdings across checking accounts, physical cash reserves, crypto wallets, and custom asset models with automatic foreign exchange rate calculations. The transaction engine executes automated adjustment rules to normalize merchant names, apply category tags, and calculate split costs on every purchase. Investors can schedule dollar-cost averaging portfolios to monitor accumulation performance and price averages over extended investment horizons. Interactive dashboards provide monthly breakdown grids, calendar views of pending recurring bills, and multi-year net worth trajectories. Financial analysts can export transaction journals to CSV, automate data synchronization through REST webhooks, or query accounts with AI agents via the Model Context Protocol. Customizable notification triggers alert account owners to payment due dates and anomalous spending spikes across monitored accounts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

Nodyx puts forum threads, real-time chat channels, peer-to-peer voice calls, collaborative whiteboards, and a drag-and-drop homepage builder behind one installation script on hardware you control. Create categories and threaded discussions that search engines index, then switch to Socket.IO-powered chat rooms where replies, pins, link previews, and @mentions update instantly. Voice channels connect participants through WebRTC mesh networking, keeping audio between peers without routing through third-party servers; a Rust-based STUN/TURN relay handles restrictive NATs so home-server deployments work without port forwarding. The NodyxCanvas layer adds CRDT-synchronized collaborative drawing with 11 tools, voice-aware cursors, and board-scoped chat, all persisted to PostgreSQL snapshots. Build your community's landing page with a visual editor that places widgets across 11 layout zones, then extend functionality by dropping third-party widget archives into the admin panel or authoring your own with the plain-JavaScript Widget SDK. Private conversations stay end-to-end encrypted with ECDH P-256 key exchange and AES-256-GCM ciphers where the private key never leaves the browser, and the OctoGuard module automates moderation with five matcher types plus configurable actions from muting to banning. For streamers, a native Streamer Hub bridges Twitch chat bidirectionally, provides a drag-and-drop soundboard, generates OBS browser-source overlays, and offers a mobile Stream Deck. Instances discover each other through a gossip protocol, forming a decentralized network without central coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Mail-in-a-Box turns a single Ubuntu server into a fully functional email system with one setup command, installing and configuring Postfix for SMTP, Dovecot for IMAP, Roundcube for webmail, and Z-Push for Exchange ActiveSync push notifications in an automated sequence that would take days to replicate manually. The DNS server auto-configures the full suite of email authentication records: SPF, DKIM, DMARC, DNSSEC with DANE TLSA, MTA-STS, and SSHFP. Getting all of these right is what separates email that lands in inboxes from email that lands in spam, and most manual installations never achieve the complete set. Nextcloud integration adds CardDAV contact sync and CalDAV calendar sharing across devices. Let's Encrypt certificates provision and renew automatically for every hosted domain. The web control panel manages users, aliases, custom DNS records, and automated backups, protected by TOTP two-factor authentication. Daily health checks verify that services run correctly, ports remain open, TLS certificates stay valid, and DNS records resolve properly, alerting you before delivery problems develop. Multiple domains and users operate from one installation with internationalized domain name support. Built-in HTTPS static site hosting uses the TLS infrastructure already in place. Runs on a dedicated RepoCloud VPS with guaranteed resources, root SSH, and browser serial console for complete email sovereignty. CC0 public domain licensed.

Artalk embeds a full commenting system into any webpage with three lines of JavaScript, packing multi-site management, social login, spam filtering, and Markdown rendering into a client that weighs roughly 40KB. One server instance manages comments for unlimited websites with complete data isolation between sites, eliminating the need for separate deployments per project. The framework-agnostic Vanilla JS client renders a complete comment interface with Markdown support, LaTeX mathematical formula rendering, image uploads, emoji packs compatible with OwO format, and automatic dark mode detection. An integrated admin dashboard accessible through the comment box provides comment moderation queues, IP banning, comment pinning, page-level statistics, and content management without direct database access. Social login authenticates commenters through GitHub, Google, Twitter, Discord, and additional OAuth providers, while captcha protection spans four backends: image captcha, Cloudflare Turnstile, Google reCAPTCHA, and hCaptcha. Spam filtering layers include Akismet integration, keyword block lists, and cloud moderation services that catch unwanted content before publication. Email notifications support SMTP, Aliyun DM, and Sendmail transports with customizable templates, and multi-channel push notifications extend to Telegram, Bark, and other messaging platforms. The OpenAPI-documented HTTP API enables programmatic comment management. Database flexibility covers SQLite, MySQL, PostgreSQL, and SQL Server. A plugin marketplace offers community extensions for custom behavior. Continuously maintained for over 8 years. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

GoAccess processes millions of web log entries in seconds and renders the results as interactive dashboards that update every 200 milliseconds in the terminal or every second via WebSocket-connected HTML reports. Written entirely in C with only ncurses as a dependency, it achieves exceptional performance even on resource-constrained servers, reducing memory usage by approximately 20% and parsing time by 35% in recent releases through optimized in-memory hash tables with on-disk persistence support. The analyzer parses virtually every web log format out of the box (Apache Combined and Common, Nginx, Amazon CloudFront, Amazon S3, AWS Elastic Load Balancing, Google Cloud Storage, Squid, W3C IIS, Caddy JSON, and Traefik) while supporting fully custom log format strings for non-standard configurations. The self-contained HTML dashboard displays 15+ interactive panels covering unique visitors, requested files, static files, 404 errors, referring sites, search keyphrases, geographic location with city-level GeoIP resolution, operating systems, browsers, HTTP status codes, time distribution, and virtual host metrics. WebSocket authentication via JWT provides secure remote access, and incremental log processing ensures data continuity across daemon restarts. Docker deployment requires a single command with volume-mapped access logs. Over 20,800 stars with active development since 2010. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Docker deployment reimagined as an app store: browse a visual catalog of applications, click to deploy with sensible defaults, and customize ports, volumes, and environment variables only when you need to. Point Yacht at any Portainer-compatible template JSON URL and it parses every application into a browsable, searchable interface with pre-configured settings ready for one-click launch. The template framework is fully decentralized — anyone can host template files on GitHub, a personal server, or any URL, creating a community-driven ecosystem of deployment packages without central gatekeeping. Template variables prefixed with ! automatically substitute server-level settings, so !config resolves to your configured path across every deployment without repetitive manual editing. The Python backend handles container lifecycle — start, stop, restart, kill, removal — while streaming real-time logs, providing browser-based shell access, and monitoring resource statistics through the Vuetify dashboard. Docker Compose stacks sit alongside individual containers in the same management interface. Advanced editing lets you modify port mappings, volumes, environment variables, and restart policies on running containers without redeployment. The develop branch introduces agent-managed remote host support for expanding management to additional Docker hosts. Authentication can be disabled for environments behind external proxies like Authelia or Traefik forward auth. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. CC-BY-4.0 licensed.

CommaFeed delivers the Google Reader experience on your own infrastructure with modern performance characteristics. The Quarkus-based Java backend compiles to native code via GraalVM, achieving sub-second cold starts and 50MB memory footprint — a fraction of traditional JVM RSS readers. Four distinct layouts (title-only, expanded, magazine, and card) with light and dark themes adapt to any reading style, while comprehensive keyboard shortcuts cover navigation, marking, starring, and feed management without touching a mouse. The Fever-compatible API and newly added Google Reader API connect native iOS and Android apps (Reeder, Unread, FeedMe, ReadKit) directly to your instance. Per-feed push notifications through ntfy, Gotify, or Pushover alert you to new articles instantly. The visual query builder for automatic read-marking rules replaces raw expression syntax with an intuitive condition editor supporting title, content, author, and URL matching. OPML import and export enable seamless migration from any RSS service. Custom CSS and JavaScript injection let power users completely restyle the interface, while the browser extension adds one-click subscription from any website. Docker images for linux/amd64 and linux/arm64 with H2 embedded database require zero configuration to start. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

The CAPTCHA bargain - annoy your users and feed their behavior to Google - gets replaced with economics by mCaptcha. Instead of image puzzles, it uses SHA256 proof-of-work: every visitor's browser silently solves a small computational challenge (via a WebAssembly library) before submitting a form. Humans never notice the milliseconds; bots hammering your site must burn more compute sending requests than your server spends answering them, which makes attacks more expensive than defense - the property that also makes mCaptcha genuine DoS protection, not just bot filtering. Written in Rust, the system is fully automated: difficulty scales with traffic, so challenges stay trivial in normal conditions and harden under attack. The privacy and accessibility wins are structural rather than promised: no tracking, no profiling, no user-pattern data collection, and no visual puzzles that exclude users with visual or cognitive impairments - the design was published in Communications of the ACM. Rate limiting is IP-independent, so users behind NATs, VPNs, or Tor get the same experience instead of endless challenge loops, and proofs resist replay attacks, neutering captcha farms. Migration is deliberately easy: the API is compatible with reCAPTCHA and hCaptcha, making it a drop-in replacement. AGPL-licensed core with proprietary-friendly client libraries.

Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Think of it as a team messaging platform where every feature beyond core chat is a plugin you can install or remove, inspired by VS Code's extension model but applied to real-time communication. The Moleculer microservice backend scales horizontally across nodes while Socket.io delivers instant message synchronization with text, images, files, mentions, reactions, and rich Markdown formatting. Available plugins provide LiveKit video conferencing, collaborative drawing boards, task management panels, end-to-end encryption, custom themes, and third-party push notification reception without touching core code. Groups use a two-level space system with customizable panel layouts arranged through drag-and-drop, while role-based access control enforces fine-grained permissions across the organization. The Open Platform exposes OAuth for single sign-on across connected applications and a Bot API enabling bidirectional message processing between Tailchat and external services via HTTP requests. Multi-platform clients cover web, Electron desktop with screenshot capabilities, and mobile apps with native push. Docker Compose deployment bundles MongoDB for persistence, Redis for caching and transport, and MinIO for S3-compatible file storage. Deploy on RepoCloud with a dedicated VPS for persistent team infrastructure under the Apache 2.0 license.

A clean alternative to n8n and Zapier that puts AI-native workflows front and center, Fynt is the MIT-licensed workflow automation platform where you drag nodes onto a React Flow canvas, wire them together with typed connections, and let a distributed BullMQ engine execute them — with every step streamed live to your browser over WebSockets so you never wonder what happened inside a run. The node library spans triggers (manual, webhook, cron scheduling), AI providers (OpenAI, Anthropic, and Gemini with structured output parsing), service integrations (GitHub webhooks, Notion databases, Slack channels, Discord bots, arbitrary HTTP endpoints), logic gates (conditional branching, filtering, data transformation), and utility nodes (delay, logging, payload mapping). The execution architecture separates concerns across three services: a Next.js 16 web application serving the React 19 workflow builder and tRPC API, a BullMQ worker processing jobs with node-level retries and checkpointing for crash-safe execution, and a dedicated WebSocket relay server broadcasting real-time run events via Redis Pub/Sub. All stored credentials are encrypted at rest using AES-256-GCM with per-credential initialization vectors. The full-stack deploys as a single Docker Compose stack (web, worker, realtime, PostgreSQL, Redis) or individually via pnpm workspaces in a Turborepo monorepo. Authentication is handled through better-auth with configurable OAuth providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kurrier unifies email, calendars, contacts, and file storage in a single web interface that connects to any email provider you already use. The Next.js frontend with Nitro API worker deploys via Docker Compose on PostgreSQL and Redis, delivering a cohesive workspace where IMAP/SMTP mailboxes from Gmail, Outlook, or corporate servers sit alongside transactional providers like AWS SES, SendGrid, Mailgun, and Postmark. Automatic inbox building handles threads, attachments, sent items, and deletion sync through persistent background polling. The CalDAV backend enables full two-way calendar synchronization with iOS, macOS, Android via DAVx5, and Thunderbird, supporting event invitations, RSVP processing through the inbox, timezone-aware scheduling, and contact-aware attendee linking. CardDAV contacts sync bidirectionally across all devices with unified name, avatar, and email resolution. Kurrier Drive provides integrated file storage through WebDAV locally or S3-compatible backends for cloud storage. Multiple identities and domains let you manage several email accounts from different providers in one interface, with fast local search indexing subjects, senders, and content without dependency on external APIs. The API-first architecture exposes clean endpoints for automation and custom integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

SOGo adds shared calendars, address books, and a modern webmail interface to your existing Dovecot, Postfix, or Cyrus mail setup, turning familiar infrastructure into a full Exchange competitor. Rather than replacing your IMAP and SMTP servers, SOGo layers collaboration on top of them, becoming the missing link between raw mail delivery and what users actually expect from a workplace communication platform. The ActiveSync implementation synchronizes email, contacts, calendars, and tasks natively with iPhones, Android devices, and Windows without requiring users to manually configure CalDAV endpoints. CalDAV and CardDAV compliance ensures Apple Calendar, Thunderbird (via the official SOGo Connector extension), GNOME Evolution, and Android via DAVx5 all connect without plugins or workarounds. The web interface uses AngularJS Material design with responsive layouts, offering folder management, drag-and-drop calendar scheduling, contact groups, resource booking, and delegation. Shared calendars support free-busy lookups, iMIP event invitations, and per-user ACL permissions for fine-grained access across organizational units. Built on Objective-C with the GNUstep foundation, SOGo delivers exceptional performance: hundreds of concurrent ActiveSync connections from mobile devices alongside webmail and calendar traffic with sub-second response times. With 2,095+ stars and 116 releases, the project has proven its stability in production environments supporting thousands of users. The Docker deployment runs alongside PostgreSQL and memcached.

Marketing campaigns and transactional mail from one open-source platform: Notifuse is a modern, self-hosted alternative to Mailchimp, Brevo, and Klaviyo without per-email or per-contact pricing. Built with Go and React on PostgreSQL, it separates concerns cleanly: a drag-and-drop visual builder composes responsive templates from MJML components with Liquid variables like {{ contact.first_name }} and per-template version history; campaigns add A/B testing across subject lines, content, and send times; and a REST transactional API serves application-triggered mail. Delivery routes through your choice of provider - Amazon SES, Mailgun, Postmark, SendGrid, SparkPost, Mailjet, or plain SMTP - with multi-provider failover. Contacts carry custom fields and a full activity timeline (messages, profile changes, webhook events), and real-time segmentation builds dynamic rules over properties, activity, and subscriptions. Event-driven automations create behavioral sequences, a notification center gives recipients self-service preference management, and an S3-compatible file manager handles images with CDN delivery. Multi-tenant workspaces with isolated databases and custom domains suit agencies. Open and click tracking report engagement in real time.

The movie half of the *arr stack: Radarr is a .NET collection manager that automates acquiring films for Usenet and BitTorrent users the way Sonarr does for TV. Add a movie once and Radarr handles the rest: it monitors indexers and RSS feeds, grabs a matching release the moment one appears, sends it to SABnzbd, NZBGet, qBittorrent, Deluge, Transmission, rTorrent, or another connected download client, then imports, sorts, and renames the file into your library structure. Quality profiles are the control surface - define allowed resolutions and a cutoff, and Radarr keeps upgrading files automatically, replacing a DVD rip when a Blu-ray release lands. Custom formats go further, scoring releases by codec, HDR metadata, release group, streaming source, or arbitrary regex so the copy you want always wins the pick. Failed downloads retry with another release automatically; a manual search shows every candidate and explains why one was skipped. Release parsing recognizes director's cuts, special editions, AKA titles, and hardcoded subs. Plex and Kodi integration handles notifications, library refreshes, and metadata like posters, trailers, and subtitles, and a calendar view tracks upcoming releases. It pairs naturally with Jellyseerr for request management and shares its API conventions with the whole *arr ecosystem.