Squidex
The front end should never dictate how your content is shaped. Squidex is an open-source headless CMS that stores content once and delivers it to any website, app, or service through REST, OData, and GraphQL APIs, so teams design schemas around their domain instead of around a theme. Editors work in a clean management UI: define schemas with validation and localisation, write content with references and components, manage images and files with resizing built in, and move drafts through custom workflows that say who creates, reviews, and publishes. Nothing waits on a developer for routine changes, and nothing ships unreviewed in organisations that need approval chains. Rules react to every content event, pushing fresh posts to syndication partners, notifying search indexes, invalidating caches, or calling your own webhooks; backups, versioning with diff-style history, and role-based permissions keep an auditable operation. Multiple projects live in one installation, clients authenticate API consumers, and content plugs into static-site generators, storefronts, and mobile apps from one hub. Because you run it yourself, the database options span MongoDB and several SQL servers, and the API your applications depend on answers from infrastructure you control with no per-seat tax on editors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Keystone
Keystone turns TypeScript schema definitions into a complete GraphQL API and React Admin UI automatically, eliminating the gap between data modeling and application scaffolding. Nearly 10,000 GitHub stars and over 270 contributors across a decade of development back a framework where list definitions map directly to Prisma models on PostgreSQL or SQLite, generating database migrations and exposing every field relationship through Apollo Server's GraphQL endpoint. Granular access control operates at the list, field, and operation level with filter-based restrictions that limit which records users can see, create, update, or delete based on session data and custom logic. The document field provides a structured WYSIWYG editor with content blocks, inline relationships, and custom React components that render consistently across the Admin UI and frontend applications. Event hooks fire before and after create, update, and delete operations for validation, side effects, and external service integration. Custom GraphQL queries and mutations extend the API beyond auto-generated CRUD for bespoke business logic. The Admin UI built with Next.js and the Keystar UI component library supports custom pages, branded navigation, and internationalized interfaces. OpenTelemetry tracing provides observability into operations, queries, and hook execution. Deploys via Docker or any Node.js host with Prisma managing schema evolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.