Jentic One is a self-hosted execution layer that lets AI agents call real APIs through a broker that checks permissions and injects stored credentials, so agents do useful work without ever holding your API keys. You register the APIs an agent may use, store each credential once on your own infrastructure, and approve which agents can connect. Every call the agent makes passes the permission check first, and denied requests stop at the broker with a 403 instead of reaching the outside service. Allowed calls go out with the credential attached, and each one lands in an execution record you can review later. Cutting off a single agent takes one change in the control plane, with no key rotation across your other tools. Agents connect through the jentic CLI, a generated skill, an MCP server, or plain HTTP, so coding assistants and in-house agents share the same gate. The stack runs as two units over one database: the control plane on port 8000 for administration, and the broker data plane that agents call. Quickstart runs on SQLite for trials, and production setups move to Postgres with pinned images and TLS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

BottleCRM delivers a self-hosted customer relationship management platform that unifies sales lead qualification, visual deal pipeline tracking, helpdesk ticketing, and client invoicing into one workspace. Sales representatives capture prospects through embeddable website forms or CSV imports, qualifying leads before converting them into synchronized account, contact, and opportunity records. Account executives manage visual Kanban deal boards with stage aging timers and weighted pipeline forecasting, dragging cards across qualification phases while preserving complete interaction timelines. Customer support teams handle incoming inquiries with multi-level ticket hierarchies, business-hours service level agreement clocks, automated escalations, approval workflows, and canned response macros. Billing managers generate professional quotes and invoices directly from won deals, applying customizable line-item tax rates and tracking payment statuses through customer self-service portals. Development teams connect autonomous AI agents and third-party software using personal access tokens against the documented REST API to automate data entry and workflow updates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Host your own email, files, calendars, and passwords on a single server with YunoHost, a server operating system that puts every app behind one web admin and one shared login. Browse a catalog of more than 500 apps, such as Nextcloud, WordPress, and Vaultwarden, filter by quality level, and install in a few clicks, or paste a Git URL for a custom app. Each person signs in once at a portal that shows a tile for every app they may open, and apps with single sign-on skip their own login screen. Groups and per-app permissions control access, including public access for visitors, and the Admins group adds web admin, SSH, and sudo. A full mail stack handles incoming and outgoing email per domain with DKIM signing, and Let's Encrypt certificates renew automatically. The domain screen suggests the DNS records you need and can push them to a supported registrar's API, while free .nohost.me, .noho.st, and .ynh.fr subdomains configure themselves. Backups bundle system settings, mail data, and chosen apps into downloadable archives that can be restored selectively from the admin or the command line. Twice a day a built-in diagnosis checks DNS records, mail setup, and system resources, then emails the admins if anything needs attention, with a firewall editor and fail2ban protection alongside. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Software developers running Claude Code, Cursor, Codex, and Aider use AgentsView to trace token expenditures, search full session transcripts, and analyze multi-agent concurrency timelines. Engineers can search through historical developer sessions to locate specific code modifications, prompt chains, or debugging rationales across extensive programming workflows. The real-time activity timeline visualizes concurrent agent operations, revealing peak execution windows, task run durations, and automated tool invocations. The usage analytics engine calculates financial costs and token volumes per model by applying live pricing tables while accounting for prompt caching read discounts. Developers inspect granular turn-by-turn session transcripts complete with raw model payloads, file difference diffs, executed shell commands, and syntax errors. The recall browser extracts key technical context from past programming sessions, organizing facts into an indexed reference knowledge corpus for reuse across future project tasks. Administrators can replicate SQLite session tables into DuckDB analytics files or PostgreSQL warehouses to query longitudinal metrics using SQL analytical tools or custom reporting scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Movies, music, and photos stored on your server become a streaming library your television, game console, and phone can browse and play across the home network with Gerbera. Point it at your movie, music, and photo directories and it builds a searchable database, extracting titles, artists, albums, and cover art from the files themselves. The web interface shows the library as a tree of containers and items, where you add directories, edit entries, and reorganise how content is presented to devices. Automatic rescans watch your folders on a timer or through filesystem notifications, so new episodes and albums appear without manual imports. When a device cannot play a format, transcoding plugins convert the stream on the fly into something it accepts. Video files get thumbnails generated automatically, and external URLs can be added as virtual items that renderers play like local media. Different devices see the same library through layouts you define from the extracted metadata, grouped by artist, genre, year, or folder structure. A clients view lists the renderers that connect, and the configuration view edits the server setup from the browser instead of XML files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv2 licensed.

Pomerium puts every internal application behind a single identity-aware proxy, so engineers reach dashboards, admin panels, and databases through their browser with no VPN client and no network-level trust. Sign-in flows through your existing identity provider, including Google, Okta, Azure AD, GitHub, GitLab, and any OpenID Connect service, with sessions verified continuously rather than once at login. Each route carries its own policy: restrict the finance tool to the finance group, require a specific email domain for the admin console, or allow read-only paths more broadly. Authorized requests pass identity headers the application can trust, and every access decision is logged for audit. TCP routes extend the same sign-in and policy checks to SSH, PostgreSQL, MySQL, and RDP connections through a small client or a browser-based terminal. In Kubernetes, Pomerium doubles as an ingress controller, applying the same policies to services as annotations on ingress resources. Mutual TLS between the proxy and backends, encrypted sessions, and short-lived credentials replace shared passwords and flat networks. Teams roll it out as one all-in-one binary or split the proxy, authorize, authenticate, and cache services across machines as traffic grows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

3D printing enthusiasts who accumulate thousands of downloaded STL, 3MF, STEP, and OBJ archives across disorganized folders can index, preview, and catalog their entire library with Manyfold, a self-hosted digital asset manager purpose-built for additive manufacturing. Point it at an existing local directory or an S3-compatible bucket and it automatically scans nested folders, groups multi-part meshes into unified model entries, and renders interactive 3D previews right in your browser. You can organize assets by creator, collection, tag, and scale, distinguish between pre-supported and unsupported resin files, and import rich metadata directly from Thingiverse, Printables, Cults3D, and MyMiniFactory. Built-in troubleshooting tools flag duplicate meshes, manifold geometry errors, and inefficient file formats, while customizable file-naming templates reorganize messy directory trees on disk with a single click. Ready to print? Open models directly in OrcaSlicer, PrusaSlicer, or UltiMaker Cura, or transmit sliced G-code straight to OctoPrint and Moonraker printers. Multi-user access control and native ActivityPub federation let you share public collections and follow remote creators across the Fediverse. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OneTimeSecret turns a password or private note into a single-use link that destroys itself the moment the recipient opens it. Create a secret in seconds from the web form: paste the text, optionally lock it behind a passphrase, and pick how long the link stays alive, from minutes to days. Send the generated link by email straight from the app, or drop it into any chat or ticket where a credential needs to change hands. Because the link burns after one view, a forwarded message or an old thread search cannot leak what was shared; once the recipient reads it, the content is gone for good. An API issues secrets programmatically, so scripts can hand database passwords or access tokens to teammates without writing them into CI logs or shell histories. Use it anonymously for quick one-off shares, or switch on full authentication with accounts, multi-factor authentication, and WebAuthn keys for a controlled internal service. Custom domains let the links carry your own hostname, so recipients see a service your organization operates rather than a public website. Admins manage users, domains, and access from a built-in console suited to teams that hand over credentials every day. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Gitea Mirror is an automated Git repository synchronization platform that mirrors your personal, starred, and organizational GitHub repositories directly to a self-hosted Gitea or Forgejo server. Through the web dashboard, you can connect standard GitHub accounts or GitHub Enterprise environments, discover newly created repositories automatically, and schedule recurring background sync intervals so your self-hosted forge always holds an up-to-date backup. Beyond raw Git commits and branches, the application transfers full repository metadata including issues, pull requests, labels, milestones, releases with attached assets, and project wikis. Teams managing large binary assets such as machine learning weights, media files, or game textures can enable Git LFS mirroring to replicate large objects alongside source code. Organization administrators can map entire GitHub organizations to custom destination namespaces, apply configurable fork handling strategies, preserve source visibility settings, and mark specific repositories to ignore. Built-in force-push protection detects destructive upstream history rewrites and offers backup-on-demand or block-and-approve workflows, while automatic cleanup rules prune deleted upstream repositories and expired activity logs. Access to the management console is secured with local accounts, reverse-proxy header authentication, or external SAML 2.0 and OpenID Connect identity providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of wrestling with raw command-line flags and YAML configuration files for every device on your self-hosted Headscale mesh VPN, Headplane gives you a Tailscale-style web administration console to manage machines, users, DNS records, and access policies from any browser. From the machines overview, network administrators can inspect connected nodes, view Tailnet IPv4 and IPv6 addresses, rename devices, reassign ownership across users, toggle key expiration, and approve advertised subnet routes or exit nodes in a couple of clicks. Built-in Access Control List (ACL) management lets you edit security policies, define user groups, assign node tags, and configure auto-approvers without manually SSHing into your control server. When someone needs immediate shell access to a remote Linux host on the mesh, the integrated WebSSH console opens an interactive terminal session right inside the browser tab over Tailscale SSH. You can also manage MagicDNS settings, configure split DNS nameservers, and add custom DNS records that automatically reload your Headscale instance. Multi-user administration supports OpenID Connect (OIDC) single sign-on with identity providers like Okta, Authentik, Authelia, and Google Workspace, alongside granular role assignments and pre-authentication key generation for unattended server enrollment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PiGallery2 turns any mounted folder of images and home videos into a high-speed web gallery without modifying your raw files or forcing migration into a database silo. The server scans directories in read-only mode, keeping folder structures intact while generating responsive previews with hardware-accelerated Sharp processing. Users can inspect detailed camera EXIF metadata, toggle custom full-screen lightboxes with swipe gesture navigation, and stream high-definition MP4 or WebM video clips. Embedded GPS coordinates automatically pin photos onto interactive OpenStreetMap or Mapbox views, allowing travel albums to display alongside synchronized GPX track routes. Powerful boolean search expressions filter across dates, keywords, camera models, and Adobe XMP face regions without requiring expensive background machine learning models. Built-in link sharing creates password-protected access links with custom expiration dates for friends and family. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Unplanned equipment downtime and scattered paper work orders cost facility teams hundreds of maintenance hours every year, an operational bottleneck that Atlas CMMS resolves through a centralized, self-hosted computerized maintenance management platform. Maintenance supervisors can create, prioritize, and assign reactive or scheduled work orders to internal technicians and external contractors, attaching multi-step inspection checklists, labor timers, and completion photos. Automated preventive maintenance rules generate recurring tasks on daily, weekly, monthly, or meter-based intervals so critical machinery receives servicing before breakdowns happen. Asset managers can organize hierarchical equipment registers mapped to physical facility locations via Google Maps, tracking downtime history, repair costs, and reliability metrics per machine. Built-in spare parts inventory management monitors stock levels with low-quantity alerts and links directly to purchase order creation and multi-stage vendor approval workflows. Non-technical staff can submit maintenance requests through a simplified service portal, while field technicians update tickets, scan barcodes, and log parts usage from the companion Android and iOS mobile apps. Executive analytics dashboards export compliance rates, mean time to repair, and labor cost breakdowns across 18 supported interface languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

No external database cluster to babysit, no proprietary cloud lock-in, and no bloated workspace hierarchy: Jotty stores every note, checklist, and Kanban board as plain Markdown and JSON files inside a single folder on your server. Need a quick grocery list with nested categories, progress bars, and drag-and-drop reordering? Spin one up in seconds, or flip any list into a multi-column Kanban project board with custom statuses, due-date calendar views, and a built-in time tracker. Write technical documentation in a TipTap-powered WYSIWYG and Markdown editor featuring syntax-highlighted code blocks, GitHub-flavored callouts, embedded Draw.io and Excalidraw diagrams, and OpenPGP client-side encryption for sensitive records. Connect ideas across your workspace using Obsidian-compatible wikilinks, inline mention suggestions, backlinks, and an interactive 2D and 3D knowledge graph that maps relationships between tasks and notes. Share individual notes or live Kanban boards publicly via customizable read-only links, or start the optional Model Context Protocol (MCP) companion container so AI assistants like Claude and Cursor can query your notes and check off items through your scoped REST API key. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Running out of filament mid-print ruins multi-hour 3D printing jobs, and Spoolman solves this by tracking every gram of plastic across your entire workshop in a centralized, self-hosted inventory database. Connected directly to Klipper, Moonraker, Mainsail, Fluidd, OctoPrint, and OctoEverywhere, the service deducts filament weight automatically over live WebSockets as your extruders run. You can import manufacturer specifications from the community SpoolmanDB catalog, filter your library by color similarity or material type, and organize spools on a drag-and-drop board grouped by storage location or custom fields. A built-in label designer generates printable QR code sheets containing spool metadata, while NFC and RFID tag scanning lets you tap a physical roll against an ESPHome reader or Android phone to pull up its record immediately. Multi-printer workshops can monitor concurrent consumption from several machines simultaneously, expose inventory metrics to Prometheus and Home Assistant, and query stock levels through a Model Context Protocol (MCP) server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PanWatch's three scheduled AI agents plan the trading day before the bell, watch the session, and review it after the close for your China A-share, Hong Kong, and U.S. holdings. Day one begins with the portfolio: several brokerage accounts, holdings and profit and loss, and search for stocks or listed ETFs by code or name. The pre-market agent folds overnight moves, news, and technical structure into that plan and skips exchange holidays. Through the session, the intraday monitor watches for unusual moves and technical signals. Price alerts combine price, percentage change, turnover, and volume ratio with AND/OR logic, cooldowns, and expiry times. Each rule picks its own channel from Telegram, WeCom, DingTalk, Feishu, Bark, or a webhook. Spot something odd? The brain icon next to a holding starts TradingAgents, where four analyst roles feed a bull and bear debate, a risk review, and a portfolio-manager decision, with the reasoning trail in the app and your notifications. The opportunities screen ranks AI-scored ideas with entry levels and targets, and paper trading simulates signal-based entries and exits and tracks equity and performance. At day's end, the daily report reviews the session and prepares the next trading day's plan. OpenAI-compatible providers or local Ollama models power the analysis, and the PWA installs on a phone in English or Simplified Chinese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Turn any server into a high-speed media vault and file-sharing hub with Chibisafe, a self-hosted upload platform built for chunked large-file transfers, organized albums, and instant desktop screenshot workflows. Users drag and drop photos, videos, archives, or documents into the browser uploader, where multi-gigabyte files are automatically split into chunks to prevent network drops from ruining an active transfer. Uploaded media renders inside a responsive masonry or list gallery with in-browser video and audio previews, custom file tags, search filtering, and one-click shareable links. Organizers group related uploads into folders and public albums, mark sensitive collections with content warnings before loading, and publish syntax-highlighted text snippets or code gists alongside shortened URLs. Desktop and mobile power users connect ShareX, iOS Shortcuts, macOS quick actions, fswatch folder monitors, or the companion browser extension using personal API keys that route captures straight into designated albums. Instance administrators toggle between public, open-registration, and invite-only modes, enforce per-user storage quotas, offload storage to AWS S3, Backblaze B2, MinIO, or Wasabi via signed URLs, and customize rate limits or allowed extensions directly from the web settings panel. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a power outage hits your server rack, deciphering raw command-line output from Network UPS Tools should not stand between you and a safe shutdown; PeaNUT wraps your NUT servers in a real-time web dashboard that monitors battery charge, load capacity, and voltage telemetry across every uninterruptible power supply on your network. Operators can connect multiple local or remote NUT servers into a single interface and switch between devices with one click. Live gauges track battery percentage, estimated runtime, real power draw in watts, and apparent power in volt-amperes. Interactive line charts plot input and output voltage alongside load fluctuations over time. Need to test a battery or silence an alarm? You can execute instant UPS hardware commands, edit writable device variables, or open a browser-based terminal directly to the underlying NUT daemon without leaving the web interface. Configuration works either through the visual settings panel or a declarative YAML file, protected by built-in account authentication. For broader infrastructure observability, you can stream time-series power data to InfluxDB v2, scrape the native Prometheus metrics endpoint into Grafana, query the REST and WebSocket APIs, or embed live UPS status cards inside Homepage and Glance dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

To uncover deep viewing insights and AI-powered content recommendations across your self-hosted Jellyfin media server, Streamystats delivers a comprehensive analytics and watch-history platform. Once connected to one or more Jellyfin instances using native MediaBrowser authentication, the dashboard tracks live playback sessions, per-user watch durations, device and client breakdowns, and library-wide growth metrics without requiring third-party reporting plugins. You can import existing historical logs from Jellystat or the Playback Reporting plugin so years of viewing habits carry over immediately, then explore interactive watch-time graphs, genre radar charts, actor and director leaderboards, and a yearly Wrapped summary. When you enable vector embeddings through OpenAI, OpenRouter, Google Gemini, Voyage AI, or a local Ollama model, the recommendation engine calculates cosine similarity against your watch history and explains exactly which watched movies or series inspired each suggestion. An integrated AI chat assistant equipped with thirteen specialized function-calling tools lets you search your catalog semantically, ask natural-language questions about your viewing statistics, and generate shared movie recommendations for multiple household members at once. Administrators can also mark titles as watched or unwatched with automatic watch-time inference, manage watchlists over an external API, and connect Janitorr for automated media cleanup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.