A flight recorder for production code, Parca profiles CPU and memory continuously and keeps the history to query after something breaks. A slow memory leak or a momentary CPU spike is already on record by the time anyone looks. Point it at any service that exposes pprof endpoints, or deploy the eBPF-based Parca Agent to profile every process on a Linux host or Kubernetes node without touching application code. The agent covers C, C++, Rust, Go, and more. In the web UI, pick a profile type such as on-CPU, narrow it with Prometheus-style label selectors, sum or group by any label, and click a point on the time series to open its flame graph. Switch the same query to a table, add extra panels, or try the alpha Flame Chart and Sandwich views. After a deploy, open the Compare page, set two queries side by side by label or time range, and the functions that gained or lost CPU time stand out as a diff. Native binaries are symbolized from uploaded debuginfo or upstream debuginfod servers. Recent releases add support for OpenTelemetry eBPF profiler profiles and GPU profile types. Optional persistence keeps history across restarts, and a Prometheus-style scrape configuration with service discovery decides what gets profiled. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

PanWatch's three scheduled AI agents plan the trading day before the bell, watch the session, and review it after the close for your China A-share, Hong Kong, and U.S. holdings. Day one begins with the portfolio: several brokerage accounts, holdings and profit and loss, and search for stocks or listed ETFs by code or name. The pre-market agent folds overnight moves, news, and technical structure into that plan and skips exchange holidays. Through the session, the intraday monitor watches for unusual moves and technical signals. Price alerts combine price, percentage change, turnover, and volume ratio with AND/OR logic, cooldowns, and expiry times. Each rule picks its own channel from Telegram, WeCom, DingTalk, Feishu, Bark, or a webhook. Spot something odd? The brain icon next to a holding starts TradingAgents, where four analyst roles feed a bull and bear debate, a risk review, and a portfolio-manager decision, with the reasoning trail in the app and your notifications. The opportunities screen ranks AI-scored ideas with entry levels and targets, and paper trading simulates signal-based entries and exits and tracks equity and performance. At day's end, the daily report reviews the session and prepares the next trading day's plan. OpenAI-compatible providers or local Ollama models power the analysis, and the PWA installs on a phone in English or Simplified Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Unpatched Linux servers expose production environments to critical vulnerabilities, and PatchMon eliminates that blind spot by centralizing package telemetry, security advisory tracking, and automated update orchestration across your entire fleet. Administrators can inspect pending updates across APT, DNF, YUM, APK, Pacman, Zypper, FreeBSD pkg, Windows Update, and winget from one unified queue without opening inbound firewall ports on monitored hosts. Before touching production workloads, operators run dry-run validations to preview exact package transactions, enforce multi-user approval workflows, and schedule rollouts during fixed maintenance windows. During execution, live agent output streams directly to the browser over WebSocket so engineers can watch progress in real time or halt a problematic upgrade mid-flight. Beyond package updates, the platform runs OpenSCAP CIS benchmark and Docker Bench security assessments, inventories running containers and outdated base images, and routes host-down or threshold alerts to Slack, Discord, Microsoft Teams, ntfy, or email. Built-in browser SSH and Apache Guacamole RDP terminals let teams troubleshoot machines directly through the outbound agent tunnel with role-based access control and OIDC single sign-on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Leave a fake door unlocked and see who walks through: Krawl is a self-hosted honeypot that poses as a sloppy web server and records everything scanners and scrapers try. Fake WordPress, phpMyAdmin, and admin logins. Every attempt logged, every credential captured. A .env file leaking fake database strings, AWS keys, and Stripe secrets. SQL injection, XSS, path traversal, XXE, and command injection traps that answer with believable fake output. SQLMap gets a different database error on every request. Malicious crawlers wander an endless maze of random links. An optional tarpit adds delay and word salad that cost scrapers time, storage, and tokens. Optional AI-generated pages write a plausible decoy for any path an attacker requests. A hidden dashboard shows an attacker map, top IPs, captured credentials, and per-IP forensics. TLSH fuzzy hashing groups webshell variants into campaigns. A behavior score labels each IP attacker, bad crawler, good crawler, or regular user. Export bans as raw lists, iptables, or nftables rules, with guides for Fail2Ban, OPNsense, and RouterOS. A canary-token link in decoy pages emails you the IP and user agent of anyone who follows it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Mapping every physical server, virtual machine, container, and network link across a sprawling homelab into a live interactive canvas, Circuit Breaker gives infrastructure operators real-time topology visualization, IP address management, and rack elevation modeling on a single screen. Operators can switch between hierarchical, concentric, cortex ring, radial, and force-directed graph layouts where animated edges reflect link speeds and color-coded status rings display live hardware health. Automated discovery scans local subnets using nmap, SNMP, and ARP while querying Proxmox VE clusters, TrueNAS storage pools, and UniFi controllers, staging newly detected nodes in a review queue before adding them to the map. For multi-site labs or isolated VLANs, lightweight remote agents connect outbound over Noise-encrypted links after fingerprint approval to report host telemetry and run scoped network scans without opening inbound firewall ports. Rack diagrams let administrators drag servers into U slots with cabling overlays using a built-in catalog covering Dell, HPE, Supermicro, Ubiquiti, MikroTik, Synology, and APC gear alongside live iDRAC, iLO, and UPS metrics. Role-based access control, OIDC single sign-on, TOTP multi-factor authentication, encrypted full-state snapshots, and a SHA-256 hash-chained audit log keep multi-user operations accountable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Production debugging slows to a crawl when logs, distributed traces, metrics, and session replays live in four disconnected dashboards, which is why Traceway consolidates every OpenTelemetry signal into a single self-hosted observability platform. Point any standard OTLP exporter directly at the ingestion endpoints without maintaining an intermediary collector or installing proprietary vendor SDKs. When an unhandled exception fires in production, automatic SHA-256 stack trace fingerprinting groups duplicates into prioritized issues complete with source-mapped frames and attached browser or Flutter session replays showing exact user clicks before the crash. Clicking any structured log entry jumps straight to its corresponding distributed span waterfall so engineers can trace slow database queries or failing downstream HTTP calls across microservices. Route performance bottlenecks surface immediately through per-endpoint P50, P95, and P99 latency percentiles ranked by Apdex and a five-factor impact score. Teams shipping AI features can also inspect LLM token consumption, model costs, tool calls, and multi-turn conversations grouped by customer identifier. Built-in on-call rotation schedules, escalation policies, and multi-channel alerts via Slack, Telegram, Pushover, email, and webhooks ensure incidents reach the right responder with one-click acknowledgment links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Silent background task failures and scattered crontab files across Linux hosts make routine maintenance risky, which Cronmaster solves with a visual scheduling dashboard and live execution log viewer. Five-field cron expressions translate automatically into plain English alongside one-click schedule presets. Operators can create, comment, clone, pause, or delete scheduled jobs across single or multiple Linux users in seconds. A built-in script manager lets you write, duplicate, and organize reusable Bash scripts from starter templates right inside the browser. Turning on per-job execution logging wraps commands automatically to record standard output, standard error, start and finish timestamps, duration, and exit codes. Log retention policies keep disk usage bounded automatically. Long-running tasks stream their console output live over Server-Sent Events, and any job can be triggered on demand with a single click. Across the top of the workspace, real-time hardware telemetry cards report system uptime, CPU load, memory consumption, network throughput, and GPU utilization. Administrators can protect the interface with local password authentication, OpenID Connect single sign-on with group and role rules, or Bearer API keys for the full REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Monitoring dozens of self-hosted containers, RSS feeds, and web services from a single customizable startpage becomes effortless with Dynacat, a dynamic dashboard engine driven by declarative YAML configuration and live data widgets. You can arrange multi-tab layouts in the browser-based visual editor by dragging widgets across columns and picking color themes, and Dynacat automatically writes every adjustment back to your configuration file. Built-in widgets aggregate RSS and Atom feeds, Reddit communities, Hacker News, Lobste.rs, YouTube channel uploads, Twitch streams, weather forecasts, stock and crypto market tickers, and software releases across GitHub, GitLab, Codeberg, and Docker Hub. Homelab operators can inspect and control Docker containers, track server CPU, memory, and disk mountpoints, monitor AdGuard Home or Pi-hole DNS statistics, view Sonarr and Radarr release calendars, and manage torrents across qBittorrent, Deluge, and Transmission from one screen. For custom services, the visual widget builder connects to any JSON endpoint and binds UI blocks to response fields without manual template coding, while the Dynawidgets catalog imports community widgets with a single slug. Every widget refreshes independently on its own schedule and exposes cached data through a local JSON API, with OpenID Connect group rules securing private admin pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Radar is an open-source Kubernetes management dashboard and Model Context Protocol server that gives engineering teams complete cluster visibility, automated issue diagnosis, and GitOps controls through a unified web interface. Operators explore live interactive cluster topology maps rendered with automated layout engines, grouping workloads by namespace or custom application labels to trace network communication pathways. The unified event timeline retains Kubernetes activity and state change diffs well beyond default one-hour limits, allowing site reliability engineers to diagnose historical CrashLoopBackOff states and investigate failed deployment rollouts. Teams manage Helm releases by inspecting deployed values, comparing manifest revisions side by side, and initiating rollbacks or upgrades with a single click. The built-in GitOps workspace correlates ArgoCD and Flux applications, surfacing synchronization health, field-level configuration drifts, and automated remediation suggestions. Developers inspect container image filesystems directly from pod detail panels without pulling images locally or establishing interactive terminal sessions, browsing permissions and downloading specific files. Native Model Context Protocol endpoints expose cluster telemetry and operational tools to artificial intelligence coding assistants, enabling external agents to diagnose failing pods and inspect access controls securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Domain Locker provides an all-in-one domain portfolio dashboard that consolidates expiration tracking, DNS records, and infrastructure health across every registrar you use. Add your domains to automatically harvest registration dates, name servers, SSL validity windows, IP allocations, and subdomains without manual data entry. Customizable notification rules broadcast renewal warnings and configuration change alerts through webhooks, email, Telegram, Slack, or WhatsApp before services experience unintended downtime. Interactive timeline views map renewal deadlines and calculate historical acquisition costs against annual operating expenses to clarify portfolio valuations. Built-in monitoring tools ping endpoints to record response latencies, HTTP status codes, and server availability metrics for every registered address. Audit logs preserve historical snapshots of DNS modifications, WHOIS adjustments, and registrar migrations to simplify infrastructure troubleshooting across teams. Integrated tags and resource associations organize personal blogs, client projects, and staging environments into isolated workspaces with role-based permissions and two-factor authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Does your container fleet silently fall behind on upstream patches until a critical vulnerability advisory forces an emergency audit? What's Up Docker continuously watches standalone Docker daemons, Compose stacks, Swarm services, Kubernetes workloads, and Nomad jobs to detect new image tags across public and private registries before sending alerts or rolling out updates automatically. Watchers connect over local sockets, TLS-secured TCP endpoints, kubeconfigs, or Nomad APIs to inventory active workloads without invasive sidecars. From there, registry connectors authenticate against Docker Hub, GitHub Container Registry, AWS ECR, Google Artifact Registry, Azure Container Registry, Quay, GitLab, Gitea, Forgejo, and self-hosted OCI registries to compare digests and tags. Flexible filtering rules let you restrict alerts to major, minor, or patch semantic version increments, match custom regular expressions, or pin specific tag patterns per container label. Once an eligible release appears, over thirty built-in triggers can dispatch notifications to Discord, Slack, Telegram, Matrix, Mattermost, Gotify, Ntfy, Pushover, Apprise, PagerDuty, or SMTP, publish events to MQTT, Kafka, RabbitMQ, or NATS, or recreate containers directly on demand. A responsive web dashboard and REST API provide manual update controls, OpenID Connect single sign-on with role-based access control, and Prometheus metrics for Grafana observability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MikroTik Manager is a web control plane for whole RouterOS fleets, built so that a bad VLAN change reverts itself instead of costing you a drive to the site. Before any risky edit, Change Guard saves a restore point on the device and arms a scheduler; if a fresh connection cannot reach the router afterwards, it rolls itself back. Lockout prediction simulates each change against live device state and refuses one that would cut management access, naming the exact port and VLAN at fault. Config Health audits for settings RouterOS accepts but silently ignores. Day to day, a live dashboard tracks availability, wireless clients, and alerts delivered by email, Slack, Discord, Telegram, or ntfy. Switch faceplates, per-port client views, VLAN copy wizards, bulk SSID deployment, RF health charts, rogue AP detection, and a guest Wi-Fi captive portal wizard cover the wired and wireless side. A rule builder handles firewall and NAT, topology maps come from LLDP, CDP, and MNDP, and a built-in NetFlow collector attributes traffic to clients and applications. Firmware rolls out in canary waves that halt on failure, and every configuration snapshot supports diffs and one-click rollback. OIDC single sign-on, TOTP two-factor, role-based access, and scoped API tokens protect the console, while sites group devices per customer network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When a power outage hits your server rack, deciphering raw command-line output from Network UPS Tools should not stand between you and a safe shutdown; PeaNUT wraps your NUT servers in a real-time web dashboard that monitors battery charge, load capacity, and voltage telemetry across every uninterruptible power supply on your network. Operators can connect multiple local or remote NUT servers into a single interface and switch between devices with one click. Live gauges track battery percentage, estimated runtime, real power draw in watts, and apparent power in volt-amperes. Interactive line charts plot input and output voltage alongside load fluctuations over time. Need to test a battery or silence an alarm? You can execute instant UPS hardware commands, edit writable device variables, or open a browser-based terminal directly to the underlying NUT daemon without leaving the web interface. Configuration works either through the visual settings panel or a declarative YAML file, protected by built-in account authentication. For broader infrastructure observability, you can stream time-series power data to InfluxDB v2, scrape the native Prometheus metrics endpoint into Grafana, query the REST and WebSocket APIs, or embed live UPS status cards inside Homepage and Glance dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Keep users ahead of outages by consolidating infrastructure monitoring into Peekaping, a unified uptime monitoring and incident communication platform that alerts engineering teams to network and application failures before customers experience disruptions. Users can configure automated synthetic checks across HTTP endpoints, database engines, message queues, and container runtimes to verify response latency, payload integrity, and SSL certificate expiration. When performance thresholds degrade or connections drop, the platform broadcasts structured incident notices across twenty-two notification channels including Slack, Discord, Telegram, PagerDuty, and custom webhooks. Visual dashboards display live heartbeat timelines, historical latency percentiles, and rolling availability scores for each monitored endpoint. System administrators can assemble custom public status pages with custom domains, branded color schemes, and component grouping to inform external stakeholders during planned maintenance or unforeseen service degradations. Teams can schedule recurring maintenance windows to pause alert notifications during routine deployments and generate API tokens to automate monitor creation directly from CI/CD deployment pipelines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

If cloud-dependent smart home hubs and YAML-heavy configuration files leave your household at the mercy of vendor outages and broken scripts, Gladys Assistant puts your entire home under clean, point-and-click local control. Zero YAML required. Pair thousands of lights, thermostats, smart plugs, locks, and sensors directly through native Zigbee2MQTT, Matter, Z-Wave, and MQTT support, or install hundreds of sandboxed community integrations for Philips Hue, Shelly, Sonos, TP-Link Tapo, Netatmo, and Reolink cameras in a single click. Visual scenes make automation effortless. Trigger multi-step routines from motion sensors, sunrise schedules, house presence, calendar events, or electricity tariff changes, and chain conditional actions with delays, HTTP webhooks, and Telegram alerts. Customizable room dashboards display live RTSP camera streams, climate charts, weather forecasts, and interactive dimmer controls. Built-in energy monitoring tracks real-time wattage, historical kWh consumption, and utility contract costs across every circuit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Holding internet service providers accountable for promised bandwidth requires continuous, automated measurement, and MySpeed turns any server into an always-on connection performance analyzer that tracks download speeds, upload throughput, ping latency, and jitter around the clock. Instead of running manual browser tests only when video calls stutter, you can schedule recurring speed checks using custom Cron expressions and switch freely between Ookla, LibreSpeed, and Cloudflare testing servers to verify routing performance across different upstream networks. Interactive statistics views render gradient speed timelines, ping and jitter graphs, hourly performance breakdowns that expose peak-hour congestion, and standard deviation consistency charts, using smart 300-bucket downsampling so multi-month histories load instantaneously. Failed tests are flagged with visual markers on the timeline, while built-in health checks dispatch instant alerts to Discord, Telegram, Signal, WhatsApp, Gotify, email, or custom webhooks whenever bandwidth drops below your target thresholds or outages occur. Administrators can link multiple remote MySpeed instances into a single dashboard to compare bandwidth across branch offices, pause scheduled runs during heavy file transfers, export historical logs, and scrape real-time telemetry into Prometheus and Grafana. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When an alert fires on any of your Prometheus Alertmanagers, Karma shows it once, on one filterable dashboard, and lets you acknowledge or silence it from there. Identical alerts from different servers merge into one entry tagged with every server that saw it, HA pairs included. Groups follow the group_by settings of your Alertmanager routes, and shared labels and annotations collapse into a footer. Multi-grid mode gives each value of a label, or each Alertmanager, cluster, or receiver, its own grid, keeping production and staging apart. Configurable label colors make hosts and severities easy to spot. Optional history draws 24 hourly blocks per group from the Prometheus servers that fired it, and an inhibited alert's muted button lists whatever is suppressing it. One click acknowledges an alert with a short-lived silence, and the separate kthxbye daemon can keep extending it until the alert resolves. The silence modal creates, edits, and expires silences, and ticket IDs in comments can become links. A Dead Man's Switch check raises a visible error when the alerting pipeline goes quiet. Basic auth or a proxy's header identifies each user, silence ACLs stop one team from silencing another's alerts, and read-only mode disables silence management. Default filters open the view your team triages first, and light and dark themes follow the browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When your community asks what its LoRa mesh is doing right now, PotatoMesh answers with a live map, chat log, and node table built from the traffic your own radios hear. It is a self-hosted dashboard for Meshtastic, Meshcore, and Reticulum networks, with no MQTT clutter. Each node gets a detail page charting battery, voltage, channel utilization, temperature, humidity, and air quality over the past week, plus the neighbors it hears with signal strength and the trace routes it appears in. New nodes and telemetry reports pop up in the chat as they arrive, and a charts page follows telemetry and packets per hour across the whole network. Federation finds other PotatoMesh communities automatically and plots them on a world map with active-node counts per protocol. Ingestors feed the dashboard from radios over serial, TCP, Bluetooth, or passive UDP, and several can report to one instance. Open browsers update live, a Prometheus endpoint exports metrics, and Markdown pages publish your rules, contact details, or legal notice. Add a stop-sign emoji to a node's name to hide it, or switch on private mode to drop the chat entirely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.