Spree Commerce provides a complete headless ecommerce backend where products, orders, payments, and promotions are managed through typed REST APIs with OpenAPI 3.0 specs and TypeScript SDKs providing autocomplete and type safety. Fifteen years of production history and 15,600+ GitHub stars back a mature ecosystem that ships a production-ready Next.js 16 storefront built with React 19 and Tailwind CSS 4, including multi-region URL routing and Stripe payments supporting Apple Pay, Google Pay, Klarna, and Affirm. Sales Channels model distinct contexts from a single instance: DTC storefronts, wholesale portals, mobile apps, and point-of-sale terminals, each with its own catalog, pricing, and checkout flow. The rules-based promotion engine supports coupon codes, multi-condition discounts, gift cards, and digital product fulfillment. Multi-warehouse inventory tracks stock across locations in real time with reservations and advanced order routing that splits shipments across fulfillment centers. B2B capabilities include customer-specific price lists, storefront access gating, wholesale portals with approval workflows, and quick order forms. The admin dashboard built with Tailwind CSS provides role-based permissions, product management, order processing with refunds, and scaffold generators for custom pages. BSD 3-Clause licensed with zero platform or transaction fees. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console.

ToolHive is an open-source MCP server management platform that lets you run, secure, and orchestrate Model Context Protocol servers in isolated containers, giving AI agents structured access to tools like GitHub, databases, and cloud services without exposing host credentials or network. Every server launches inside its own sandboxed container with a minimal permission file, network access filtering, and encrypted secrets management, preventing misbehaving connectors from reaching beyond their defined scope. The built-in registry provides a catalog of vetted servers you can install with one command, while custom images and package-manager references let you onboard proprietary connectors without writing Dockerfiles. Platform teams deploy the Kubernetes operator to declare MCP servers as cluster resources using Custom Resource Definitions, with automated lifecycle management and multi-namespace isolation. The Virtual MCP Server gateway aggregates multiple backends behind a single endpoint, centralizing OIDC authentication, tool filtering, and composite cross-server workflows so clients connect once instead of juggling separate URLs. An MCP Optimizer analyzes tool schemas via semantic search and surfaces only relevant tools per request, cutting token consumption by up to 85%. OpenTelemetry traces and Prometheus metrics deliver full visibility into tool execution, latency, and request audit trails across every managed server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Automate transactional and marketing messages across email, SMS, mobile push, WhatsApp, Slack, and custom webhooks from a single visual journey canvas. Dittofeed provides the capabilities of Customer.io or Braze while keeping customer PII within your own infrastructure and eliminating volume-based pricing entirely. The drag-and-drop journey builder creates multi-trigger automations with branching logic, wait nodes, random cohort splits for A/B testing, and local timezone delivery without writing code. User segments combine trait conditions, event history, and array-based filtering through AND/OR operators with real-time evaluation. Template authoring supports both a low-code visual editor and direct HTML/MJML input, with templates reusable across journeys and one-off broadcasts. Data flows in through Segment integration, Reverse ETL connections, or the REST API with Web, Node.js, and React Native SDKs. Message delivery routes through SendGrid, Amazon SES, Twilio, or SignalWire with per-channel analytics tracking opens, clicks, bounces, and unsubscribes. Authentication supports Keycloak, AWS Cognito, and GCP OAuth for enterprise SSO. Embeddable iframe and headless React components let SaaS platforms white-label journey builders into their own products. Deploy on RepoCloud with a dedicated VPS for full GDPR compliance under the MIT license.

With 16,100 GitHub stars and created by Solomon Hykes (co-founder of Docker), Dagger eliminates proprietary YAML DSLs from CI/CD by letting developers write pipelines as real programs in their preferred language — then executing them identically on a laptop, in GitHub Actions, in GitLab CI, or on any machine with a container runtime. The BuildKit-based Dagger Engine runs every pipeline operation inside OCI containers, constructing a directed acyclic graph where each node is cached by default, parallelized automatically, and produces bit-for-bit reproducible outputs regardless of execution environment. Native SDKs generated from the GraphQL API schema provide Go, Python, TypeScript, PHP, Java, .NET, Elixir, and Rust developers with full type safety, IDE autocomplete, and the ability to unit-test CI pipelines using the same testing frameworks as application code. The module ecosystem enables cross-language composition where a Python team can invoke a Go team's build functions without learning Go, while filesystems, secrets, git repositories, and network tunnels are passed between functions as strongly-typed objects. Pipeline operations cache at container-layer granularity with content-addressed deduplication, and the interactive REPL enables step-by-step pipeline debugging with live container inspection. Host dependencies are explicit and strictly typed, eliminating implicit environment coupling that causes "works on my machine" failures. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Zero unifies Gmail, Outlook, and IMAP accounts into a single AI-enhanced inbox with keyboard-driven navigation that matches premium email clients in speed. Backed by 10,000+ stars and positioned as the alternative to Superhuman, it keeps your email data in your own PostgreSQL database while LLM agents handle categorization, priority sorting, draft composition, and natural language mailbox queries. You choose whether models run locally or through cloud providers you control. The Next.js and React interface delivers customizable keyboard shortcuts for every action: reading, archiving, labeling, composing. A WorkflowEngine defines automated multi-step rules including label application, bulk archiving, and conditional routing based on sender, subject, or content analysis. Built on Drizzle ORM with Better Auth handling Google OAuth, styled with TailwindCSS and Shadcn UI components, the interface is polished without being bloated. MCP integration exposes email management tools to external AI assistants for programmatic inbox control through standardized protocols. The Nizzy CLI handles environment configuration, database synchronization, and development server orchestration. Deploys via Docker Compose with a single database initialization command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 7,100 GitHub stars and 200 contributors since 2016, Mailu has become one of the most popular self-hosted email solutions, delivering a complete production-ready mail server stack as pre-configured Docker containers that eliminate weeks of manual setup. The platform bundles Postfix for SMTP and Submission with auto-configuration profiles for Thunderbird, Outlook, and mobile clients, Dovecot for IMAP and POP3 with full-text search across email attachments, Rspamd for intelligent spam filtering with auto-learn Bayesian classification, greylisting, SPF and DMARC validation, and ClamAV for antivirus scanning of attachments with configurable malicious file blocking. The web administration interface provides global admin controls, per-domain delegation, user quota management, domain aliases, custom routing rules, and announcement capabilities. Users access self-service features including aliases, auto-reply, auto-forward, fetched accounts from external mailboxes via fetchmail, and Sieve filter management through ManageSieve. Security features include enforced TLS on all connections, automatic Let's Encrypt certificate provisioning, outgoing DKIM signing, DANE and MTA-STS support for transport security, and Snuffleupagus PHP hardening for the web interface. The setup wizard at setup.mailu.io generates complete Docker Compose configurations tailored to specific deployment requirements. All components are free and open-source software with zero proprietary dependencies and no tracking. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Two decades of continuous development made Roundcube the standard-bearer of open-source webmail - a PHP IMAP client that gives any mail server a polished, application-like interface in the browser. It connects to whatever IMAP/SMTP stack you run - Dovecot, Postfix, a hosted mailbox - and delivers the full desktop-client experience: drag-and-drop message management, threaded conversation views, full MIME and HTML mail handling, find-as-you-type address book with groups and LDAP connectors, multiple sender identities, full-text search, and spell checking in dozens of languages. The default Elastic skin is genuinely responsive, working as well on a phone as a desktop, and the entire UI is skinnable. The plugin API is where deployments get shaped: managesieve exposes server-side filter management in the UI, enigma brings PGP encryption and signing via GnuPG, markasjunk trains spam filters, zipdownload batches attachments, password lets users change credentials, and attachment_reminder catches the classic forgotten-attachment email - among hundreds of community plugins. Built-in caching keeps large mailboxes fast, IMAP ACLs and shared folders support team setups, and XSS protection is engineered into the rendering pipeline. It scales from a single personal mailbox to unlimited users, backed by MySQL, MariaDB, PostgreSQL, or SQLite. GPL-licensed with regular security releases.

Browse trending titles, search anything, request it in two clicks: Jellyseerr gives Jellyfin, Emby, and Plex users a beautiful storefront for the media library. Born as the Overseerr fork that added Jellyfin and Emby support (the projects have since unified as Seerr), it handles the full request lifecycle - users authenticate with their existing media-server accounts, pick individual seasons or movies in a clean interface, and admins approve or decline from a simple queue, including on mobile. Approved requests flow straight to Sonarr and Radarr, which handle acquisition automatically, with support for separate 4K server instances. Regular library scans keep availability accurate, so users see instantly what already exists instead of requesting duplicates. A granular permission system controls who can request what - auto-approval for trusted users, quotas and limits elsewhere - and override rules adjust request routing by user, tag, or other conditions. Watchlist and blocklist functions curate discovery, notifications reach email, Discord, Telegram, Slack, Pushover, and Pushbullet, and both PostgreSQL and SQLite are supported. Localized into many languages, it turns "can you add this movie?" texts into a self-service system that runs itself.

With over 13,000 GitHub stars and active monthly releases, Mailcow delivers a production-ready mail server infrastructure through Docker Compose orchestration of twelve integrated containers. The stack pairs Postfix as the MTA handling SMTP traffic with Dovecot for IMAP and POP3 retrieval featuring the Flatcurve full-text search engine, while Rspamd provides machine-learning-powered spam filtering with Bayesian classification, DKIM signing, and ARC support. ClamAV scans attachments for malware including Office document macro analysis via Olefy, and SOGo serves as a responsive webmail client with CalDAV, CardDAV, and Microsoft ActiveSync synchronization. The admin panel manages multiple domains, per-user spam score thresholds, quarantine review, black and whitelists, temporary spam aliases, mailbox quotas, and TLS enforcement policies for both inbound and outbound messages. Security features include two-factor authentication via TOTP, WebAuthn, and Yubikey OTP, a Fail2ban-like Netfilter integration for brute-force protection, and automatic SPF, DKIM, and DMARC configuration. The ACME container handles Let's Encrypt certificate generation with DNS-01 challenge support, while Postfix TLS-Pol provides MTA-STS and DANE/TLSA resolution for encrypted transport. Built-in imapsync enables periodic migration from remote mailboxes, and the REST API allows programmatic management of all server resources. MariaDB stores user data, Redis caches configuration and sessions, and Unbound provides local DNSSEC-validating DNS resolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Mox offers a complete mail server stack in a single Go binary requiring no external dependencies. The quickstart command configures a working mail server with SMTP, IMAP4, webmail, and full DNS authentication in under ten minutes. SMTP handling includes a delivery server on port 25, a submission server for authenticated clients, and a queue with automatic retries and DKIM signing. IMAP4rev2 implementation provides full mailbox synchronization with CONDSTORE and QRESYNC for efficient offline clients, NOTIFY for multi-mailbox monitoring, MULTISEARCH across mailboxes, and TLS client certificate authentication via the EXTERNAL SASL mechanism. The built-in webmail provides browser-based reading and composing with message threading, attachments, and HTML rendering without requiring a separate web client. Email authentication implements SPF validation, DKIM signing and verification with automatic key rotation, DMARC policy enforcement with aggregate and failure reporting, DANE with DNSSEC-protected TLSA records, and MTA-STS for certificate verification. Junk filtering combines reputation-based sender scoring with Bayesian content analysis trained per account. The web administration interface manages domains, accounts, DNS records, TLS certificates, delivery queue, and real-time log viewing. Internationalized email addresses with EAI and IDNA support handle non-ASCII domains and mailboxes. Account autoconfiguration publishes settings for Thunderbird autoconfig and Outlook autodiscover. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SOGo adds shared calendars, address books, and a modern webmail interface to your existing Dovecot, Postfix, or Cyrus mail setup, turning familiar infrastructure into a full Exchange competitor. Rather than replacing your IMAP and SMTP servers, SOGo layers collaboration on top of them, becoming the missing link between raw mail delivery and what users actually expect from a workplace communication platform. The ActiveSync implementation synchronizes email, contacts, calendars, and tasks natively with iPhones, Android devices, and Windows without requiring users to manually configure CalDAV endpoints. CalDAV and CardDAV compliance ensures Apple Calendar, Thunderbird (via the official SOGo Connector extension), GNOME Evolution, and Android via DAVx5 all connect without plugins or workarounds. The web interface uses AngularJS Material design with responsive layouts, offering folder management, drag-and-drop calendar scheduling, contact groups, resource booking, and delegation. Shared calendars support free-busy lookups, iMIP event invitations, and per-user ACL permissions for fine-grained access across organizational units. Built on Objective-C with the GNUstep foundation, SOGo delivers exceptional performance: hundreds of concurrent ActiveSync connections from mobile devices alongside webmail and calendar traffic with sub-second response times. With 2,095+ stars and 116 releases, the project has proven its stability in production environments supporting thousands of users. The Docker deployment runs alongside PostgreSQL and memcached.

Frappe LMS is a learning management system built on the same Frappe Framework that powers ERPNext. The 3-level course hierarchy organizes content into courses, chapters, and lessons supporting videos, PDFs, SCORM packages, and rich HTML content with heading, code block, and list formatting through the redesigned inline lesson editor. Batch management groups learners by course and duration with scheduled instructor-led live sessions through integrated Zoom and Google Meet, where learners see upcoming classes on their batch dashboard. The assessment engine supports single-choice, multiple-choice, and open-ended quiz questions alongside assignment submissions as PDFs or documents, with progress tracking monitoring completion rates and quiz performance across all enrolled courses. Certificate generation uses built-in templates or custom designs to validate course completion, while the job board connects certified learners with opportunities. Course monetization integrates payment processing to transform courses into revenue streams with financial tracking. Role-based access controls assign Instructor, Learner, Admin, and Manager permissions, while course package import and export enables sharing structured content between instances. The platform integrates with ERPNext HR and CRM modules through the Frappe ecosystem with RTL language support and notification slide-overs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

dyrector.io gives teams a visual web interface for deploying and managing containerized applications across Docker, Kubernetes, and Podman environments, replacing repetitive CLI commands and YAML editing with point-and-click configuration. Lightweight Go agents installed on target infrastructure communicate with the central TypeScript platform, enabling deployments to AWS, GCP, Azure, and on-premises servers without requiring infrastructure migration. Unified configuration screens eliminate redundant YAML editing across environments with support for all three container runtimes. Version management lets teams configure OCI-compatible container images once and deploy them as versioned releases with auto-generated changelogs and release notes. Multi-instance deployment enables simultaneous rollouts to multiple nodes with environment-specific configuration overrides, secret management, and instant test environment provisioning from any branch. The fine-grained RBAC system controls user access at project and environment levels, while audit logging tracks every deployment action. Registry integrations support Docker Hub, GitLab, GitHub, Google, and Azure container registries for image sourcing. ChatOps notifications integrate with Slack, Discord, and Microsoft Teams for deployment status alerts. Scheduled releases and workflow support enable automated deployment pipelines triggered by CI events via the REST API with JWT authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Marketing campaigns and transactional mail from one open-source platform: Notifuse is a modern, self-hosted alternative to Mailchimp, Brevo, and Klaviyo without per-email or per-contact pricing. Built with Go and React on PostgreSQL, it separates concerns cleanly: a drag-and-drop visual builder composes responsive templates from MJML components with Liquid variables like {{ contact.first_name }} and per-template version history; campaigns add A/B testing across subject lines, content, and send times; and a REST transactional API serves application-triggered mail. Delivery routes through your choice of provider - Amazon SES, Mailgun, Postmark, SendGrid, SparkPost, Mailjet, or plain SMTP - with multi-provider failover. Contacts carry custom fields and a full activity timeline (messages, profile changes, webhook events), and real-time segmentation builds dynamic rules over properties, activity, and subscriptions. Event-driven automations create behavioral sequences, a notification center gives recipients self-service preference management, and an S3-compatible file manager handles images with CDN delivery. Multi-tenant workspaces with isolated databases and custom domains suit agencies. Open and click tracking report engagement in real time.

PinePods delivers a centralized, self-hosted podcast ecosystem that liberates personal listening histories, audio files, and show subscriptions from commercial streaming walled gardens. Users can discover new shows through built-in search connectors across Podcast Index, iTunes, and YouTube, streaming audio and video episodes with variable playback speed, chapter markers, and synchronized transcripts. A persistent queue and custom playlist builder keep media sequences orderly across web browsers, desktop installations, and mobile clients with native CarPlay and Android Auto support. Built-in gPodder server synchronization enables seamless cross-device progress tracking with third-party podcast apps like AntennaPod. Automatic episode downloader engines monitor subscribed feeds, archiving new releases to local server storage according to customizable retention rules and storage quotas. Multi-user authentication secures household access through OIDC single sign-on and two-factor TOTP verification, while an integrated terminal client lets command-line enthusiasts manage queues directly over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Starred by over 6,500 users on GitHub and trusted by organizations including Toyota, CTFd has been the leading open-source platform for hosting cybersecurity competitions since 2015, providing everything needed to run professional Capture The Flag events through a clean web-based administration panel without touching a database query. The framework supports both individual and team-based competitions with automatic tie resolution, configurable score freezing, and scoregraphs comparing the top teams with detailed progress tracking. Challenge creation offers static and regex-based flags, dynamic scoring that adjusts point values based on solve count, unlockable hints purchasable with points, file attachments uploaded to local storage or Amazon S3-compatible backends, and challenge attempt limits with automatic bruteforce protection. Version 3.8 introduced challenge logic fields controlling flag submission behavior with any, all, and team modes, integrated dynamic scoring into the standard challenge type, participant ratings and reviews on challenges, and admin-stored challenge solutions viewable after competition. The Markdown-based content management system enables custom pages for rules, FAQs, and resources, while SMTP and Mailgun integration handles email confirmation and password recovery. The plugin architecture supports custom challenge types, flag validators, and scoring algorithms, while the theme system provides complete visual customization. Import and export functionality preserves entire competition configurations for archival and reuse across events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Turn company knowledge into structured courses in minutes: ClassroomIO's AI course builder takes your documents, policies, or topic outlines and generates complete lessons with exercises using Gemini, GPT-4o, or Claude — then an in-lesson AI tutor helps employees study the material at their own pace. The SvelteKit 5 and Hono API architecture backs a platform purpose-built for employee compliance training, customer education, and partner certification programs. Programs group courses into cohorts with team management, progress tracking, and goal setting. Live Kahoot-style quizzes drive real-time engagement during training sessions with automatic scoring and leaderboards. Exercises support multiple question types with automatic grading for multiple choice and AI-assisted evaluation for open-ended responses — teachers review and override all AI decisions. Branded certificates with custom IDs reward course completion. Custom domain mapping through Cloudflare lets organizations serve their learning portal under their own brand. MinIO provides S3-compatible storage for documents and video uploads. The REST API and signed webhooks enable programmatic enrollment and completion tracking, while an MCP server on npm supports AI-native authoring workflows. An embeddable widget drops the course catalog onto any website. Better Auth handles sessions and OAuth with optional SSO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.