TeamPass is a dedicated on-premise password manager built specifically for teams that need collaborative credential sharing with fine-grained access controls. Role-based access control defines user permissions through hierarchical folder trees where each folder and item can be independently set to write, read, or no access against assigned roles, enabling organizations to segment credentials across departments without exposing sensitive data. Passwords are encrypted in the database using Defuse PHP Encryption with per-installation unique saltkeys, while two-factor authentication supports configurable RFC 6238 TOTP profiles with custom digits, period, and algorithm settings alongside Duo Security and Yubico hardware key integration. LDAP and Active Directory native integration enables enterprise SSO with automatic user provisioning. The Security Posture Dashboard surfaces weak, reused, breached, overdue, no-expiry, widely-shared, and unreadable credentials through indicator cards that filter and deep-link directly to items. Secure Send creates expiring, view-count-limited one-time links optionally protected by recipient passphrases for sharing credentials with external users. Import from Bitwarden, LastPass, 1Password, and KeePassXC through a unified source selector, with export to encrypted offline files. Email notifications, password expiration policies, custom fields, and attachment support round out item management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

LearnHouse delivers a modern open-source learning platform that replaces proprietary course builders with a self-hosted alternative shipping a rich feature set out of the box. The Tiptap-powered block editor supports videos, documents, embeds, quizzes, and file uploads in a Notion-like interface with real-time co-editing powered by Hocuspocus and Yjs CRDT synchronization over WebSocket. AI tutoring integrates Google Gemini and LlamaIndex for RAG-powered context-aware assistance that adapts to course content, while interactive Playgrounds use AI to generate simulations, diagrams, and learning exercises. The platform handles the full course lifecycle: chapters and activities organize into collections and learning paths, assignments support automated and manual grading, and code blocks execute student submissions in 30+ languages with auto-grading. Analytics dashboards track learner engagement, progress, and completion rates in real time. The backend runs on FastAPI with SQLModel and Alembic migrations against PostgreSQL 16 with pgvector for AI embeddings, while Redis handles caching and session management. The frontend builds on Next.js 16 with React 19 and Tailwind CSS v4. Deployment uses an interactive CLI wizard that configures domain, database, admin account, SSL via Let's Encrypt, and optional features like email via Resend, S3 storage, and Google OAuth, then generates a Docker Compose stack ready to start. On RepoCloud, deploy LearnHouse on a dedicated VPS with root SSH access, persistent PostgreSQL storage for your course data, and complete control over AI provider keys and branding customization, all under the AGPL v3 license.

CloudBeaver puts a full-featured database management environment in your browser, connecting to PostgreSQL, MySQL, SQL Server, Oracle, ClickHouse, and over 100 additional engines through one unified interface that requires no desktop client installation. The Java server exposes a TypeScript/React frontend through a GraphQL API where teams can browse schemas, edit data, visualize relationships, and execute queries across all connected databases in a single workspace. The SQL Editor provides syntax highlighting, auto-completion with fuzzy search, AI-assisted SQL generation from natural language prompts, script management with save/download/upload capabilities, execution plan visualization, and multi-tab result display. The Data Editor enables direct cell editing, filtering, sorting, and bulk data modification with support for spatial GIS data rendering. Database administrators access a Navigator panel for browsing schemas, tables, views, foreign tables, triggers, dependencies, and stored procedures across all connected databases. ER Diagrams visualize table relationships and schema structure, while the Visual Query Builder constructs queries without hand-writing SQL. Multi-user administration provides role-based access control, connection sharing with configurable permissions, and session management. SSH tunneling secures remote database connections, and data can be exported or imported in multiple formats. Query History tracks all executed statements with timestamps and execution statistics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

What Doodle did before ads and paywalls took over: Rallly (three L's) lets you propose a few dates, share a link, and watch an availability grid fill in - no email threads, no forced accounts, no "$6.95/month to remove ads." The availability grid makes the winning slot obvious at a glance, comments on each poll keep the "I can do Tuesday if we start late" discussion attached to the decision instead of buried in chat, and email notifications fire as votes and comments arrive. When consensus lands, finalize the winning option and everyone gets notified. The stack is modern TypeScript - Next.js, tRPC, Prisma over PostgreSQL, Tailwind - with a clean, genuinely mobile-friendly UI, dark mode, and community translations in 10+ languages. Self-hosting means unlimited polls and unlimited participants with meeting data on your server rather than a scheduling SaaS. It pairs naturally with Cal.com: Rallly answers "which time works for everyone?", Cal.com handles "book a slot on my calendar." AGPL-licensed.

Point OBS or a hardware encoder at Restreamer's built-in RTMP or SRT ingest and it serves your website while rebroadcasting to YouTube Live, Twitch, Facebook, Vimeo, TikTok, LinkedIn, PeerTube, and anything else that accepts RTMP, SRT, or HLS - a complete self-hosted live-streaming server from datarhei. That multistreaming normally costs a monthly Restream.io subscription; here it's one FFmpeg process per destination on your own hardware. The web UI is genuinely approachable, with a wizard that walks beginners through camera setup, while professionals get the full surface: multiple audio/video inputs (USB, RTSP network cameras, virtual devices), codec and processing settings, separate audio muxing, and hardware acceleration via Nvidia CUDA, Intel VAAPI, or Raspberry Pi. Serving your own audience is first-class - a built-in Video.js player embeds in your site, a ready-made publication website streams without any embedding work, HLS chunk sizes are tunable, and automatic Let's Encrypt handles HTTPS. Viewer and bandwidth monitoring with limits keeps traffic costs predictable, and it's GDPR-friendly: no third-party provider, no audience data stored. A fully Swagger-documented REST API drives automation. SRT support keeps latency under a second.

Standard Notes keeps your notes, files, and tags encrypted on your device before anything touches the network, meaning the server stores only ciphertext it cannot read. Cross-platform sync across desktop, mobile, and web delivers fast, conflict-free updates on unlimited devices with the same zero-knowledge guarantee that only your password can decrypt your content. The V2 server architecture condenses everything into four Docker containers consuming roughly 570MB RAM total (down from 13 containers and 1.7GB in the legacy setup), with startup under one minute. Revision history automatically preserves every version of every note, so recovering deleted text or reverting to a previous state never depends on manual backups. A nested tag system organizes thousands of notes with hierarchical categorization that goes well beyond flat folder structures, while search operates entirely on client-side decrypted content. File attachments of any type encrypt and sync alongside notes with identical end-to-end protection. Multiple editor options span plain text, Markdown with preview, and rich formatting to fit different writing workflows. Two-factor authentication via TOTP with email backup codes adds a second barrier beyond your password. An optional separate container serves the web frontend, providing browser access to your encrypted vault without depending on standardnotes.com infrastructure. With 5,500+ GitHub stars and active development, the project continues expanding editor plugins and sync improvements.

With over 7,500 GitHub stars and 1 million Docker pulls — making it the most popular open-source database backup tool on GitHub ahead of pgBackRest and WAL-G — Databasus delivers production-grade backup management through a designer-polished web interface that replaces complex configuration files and CLI-only workflows. The platform supports PostgreSQL 14-18, MySQL 5.7-8, MariaDB 10-12, and MongoDB 4.2-8 with logical backups via pg_dump and mysqldump, while PostgreSQL 17+ enables physical backups using the native pg_basebackup engine with block-level incremental support via pg_basebackup --incremental and continuous WAL streaming via pg_receivewal for Point-in-Time Recovery to any second between backups. Storage destinations include local disk, AWS S3, CloudFlare R2, Google Drive, Azure Blob Storage, SFTP, NAS, and rclone-backed targets, while built-in AES-256-GCM encryption secures both backup files and stored credentials. Restore verification runs automated recovery into throwaway Docker containers, validating backups by comparing schema counts, table structure, and row counts against the source database — proving recoverability rather than merely checking checksums. The notification system integrates with Slack, Discord, Telegram, email, and webhooks for real-time backup status alerts. Deployment options span a single Docker container, Docker Compose with Caddy for automatic HTTPS, Helm charts for Kubernetes clusters, or a one-line install script. SSH tunnel support reaches databases in closed networks through bastion hosts without public exposure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With 3,500+ GitHub stars and 100+ pre-built templates, OpnForm delivers a drag-and-drop form builder that handles everything from simple contact forms to multi-page surveys with conditional branching, calculations, and payment collection. The Laravel 11 API paired with a Nuxt 3 Vue frontend provides a responsive no-code editor supporting 20+ field types including text, date, file upload, signature capture, star ratings, phone numbers with country codes, and rich text. Conditional logic enables dynamic show/hide rules, required-field toggling, and calculated values that react to user input in real time. Submissions flow through configurable integrations — Slack notifications, Discord webhooks, Zapier connections to 5,000+ apps, Google Sheets sync, and custom webhook endpoints with full payload control. AI-powered form generation lets users describe a form in plain language and receive a ready-to-publish result. OIDC single sign-on with configurable state enforcement secures multi-user workspaces, while form-level passwords and CAPTCHA protection guard public-facing pages. Analytics dashboards track submission rates, completion times, and drop-off points. Forms embed via iframe on any website, Notion page, or custom domain with removable branding and custom CSS/JavaScript injection. The Docker Compose stack bundles the API, queue worker, scheduler, Nuxt client, PostgreSQL 16, Redis 7, and Nginx ingress proxy for a single-command deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

With over 5,000 GitHub stars since its June 2026 launch, OOMOL OpenConnector bridges the gap between AI agents and the real world by handling the authentication nightmare that stops LLMs from calling external APIs safely. The runtime connects to more than 1,000 SaaS providers — GitHub, Gmail, Notion, Slack, Microsoft, HubSpot, Google Workspace, and hundreds more — through 10,000+ prebuilt typed Actions that agents can discover and execute without ever touching raw credentials. OAuth2 flows, API key rotation, custom credentials, and no-auth providers are all managed centrally with AES-encrypted storage, scoped runtime tokens, and configurable action allowlists and blocklists that enforce least-privilege access. Agents interact through five access surfaces: the Model Context Protocol endpoint at /mcp for Claude and other MCP-capable hosts, a full REST API at /v1 for programmatic control, an auto-generated OpenAPI specification for code generation, a TypeScript SDK for application integration, and the oo CLI for local agent relay. The built-in Web Console provides browser-based administration for configuring OAuth apps, managing connections, inspecting action schemas, and reviewing execution logs with redacted inputs. Deploy via Docker Compose with SQLite for single-server setups, run from source on Node.js 22+, or push to Cloudflare Workers with D1 and R2 for edge deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

FalkorDB is the first queryable property graph database to leverage sparse adjacency matrices and linear algebra for graph traversal, replacing traditional pointer-chasing with GraphBLAS-accelerated computation. Originally the RedisGraph engine, it was relaunched as FalkorDB in 2023 and rewritten from C to Rust in 2026 for improved memory safety and performance. The database supports the OpenCypher query language with proprietary extensions, translating queries into linear algebra expressions that exploit AVX hardware acceleration. Indexing options include full-text search, vector similarity for embedding-based retrieval, and range indexing, while connectivity supports both the RESP protocol for Redis clients and the Bolt protocol for Neo4j-compatible tooling. The GraphRAG SDK enables ingestion of documents in text, PDF, and Markdown formats into knowledge graphs, with schema-guided entity extraction, hybrid retrieval combining vector and graph traversal, relationship expansion, and cited answers for LLM applications. Official client libraries cover Python, Node.js, Java, Rust, Go, PHP, and C#. Multi-tenant support handles over 10,000 concurrent graphs with zero overhead and full isolation. Docker deployment runs the falkordb/falkordb image on ports 6379 for the database server and 3000 for the built-in browser UI, with persistent volume storage and optional authentication. A production falkordb-server image excludes the browser for lighter deployments. On RepoCloud, deploy FalkorDB on a dedicated VPS with root SSH access, persistent storage for your graph data, and complete control over authentication, thread count, and memory configuration, all under the SSPLv1 license.

libSQL bridges the gap between SQLite's legendary simplicity and the server-accessible database model developers expect from PostgreSQL and MySQL, adding network access, replication, and vector search while maintaining full file format and API compatibility. The sqld (SQL daemon) component transforms SQLite into a network-accessible database server accepting queries via HTTP with JSON payloads, WebSocket connections, and a Hrana protocol optimized for low-latency edge access. Client libraries for TypeScript, JavaScript, Rust, Go, and Python connect to sqld identically to any traditional client-server database, while the LD_PRELOAD compatibility layer enables switching existing SQLite applications from local to remote mode without code changes. Embedded replicas synchronize a local SQLite copy inside your application process with the primary server, delivering sub-millisecond read latency while maintaining consistency through streaming replication. Bottomless replication continuously backs up database state to S3-compatible object storage with generation-based snapshots and WAL page shipping, providing point-in-time recovery without manual backup scheduling. Native vector search enables semantic similarity queries directly within SQL using cosine distance functions, eliminating the need for external vector database infrastructure. Read replica support distributes query load across multiple sqld instances, and integration with mvSQLite adds multi-version concurrency for high-availability deployments. Created by Turso with 17,100+ stars and active production deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Turn any chaotic digital book archive into an autonomous, self-organizing reading portal using Calibre-Web Automated, a digital library manager featuring hands-free format conversions, metadata fetching, and e-reader synchronization. Readers can drop raw ebook files into the automated intake directory and watch the system instantly convert between twenty-eight distinct file types, repair malformed EPUB internal markup, and fetch enriched metadata from Hardcover, Kobo, and ISBN databases. The responsive web reader lets you browse collections, read directly in any desktop or mobile browser, and organize titles into dynamic rules-based Magic Shelves that update automatically. Built-in KOReader sync harmonizes reading progress and bookmarks across mobile devices and e-ink readers, while native OPDS feeds connect seamlessly to your favorite external reader applications. Administrative tools empower you to run hybrid SQL and fuzzy duplicate detection scans, perform batch metadata editing across entire series, enforce cover art changes directly into source files, and auto-dispatch newly ingested books to Kindle or Kobo devices via scheduled email delivery. Granular multi-user controls allow administrators to assign folder permissions, restrict downloads, enforce dark mode themes, and authenticate readers securely through OAuth and OpenID Connect identity providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU General Public License v3.0 licensed.

Securo is a privacy-first personal finance platform that keeps all your financial data in your own PostgreSQL instance while connecting to 2,500+ banks across three continents for automated transaction sync. The FastAPI backend with React/TypeScript frontend deploys via Docker Compose on ports 3000 and 8000, with Redis-backed Celery workers handling background synchronization. Bank connections span approximately 2,500 European PSD2 institutions through Enable Banking across 29 countries, US and international banks via SimpleFIN's open protocol, and Brazilian banks through Pluggy, all refreshing automatically every four hours. Multi-account management tracks checking, savings, credit cards, and investments with running balances. The auto-categorization rules engine applies pattern-matching across merchants and amounts. Goal tracking monitors savings targets with progress visualization, asset management handles stocks and custom instruments with configurable valuation growth rules, and reports generate Net Worth and Income vs Expenses charts with category sparklines. Optional AI Agents provide LLM chat with tool-use over your financial data through MCP, supporting OpenAI, Anthropic, Ollama, and compatible providers with per-agent RAG knowledge bases accessible via a global command palette. Multi-user support includes OIDC login, passkey authentication, TOTP two-factor, privacy mode, and multi-currency FX conversion via Open Exchange Rates. 1,500+ stars since March 2026. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Bigcapital gives small and medium businesses a complete double-entry accounting, invoicing, and inventory management platform they can self-host for free, replacing the per-seat subscriptions of QuickBooks, Xero, and Wave. Every transaction records debits and credits across your chart of accounts, automatically generating balance sheets, profit and loss statements, trial balances, general ledger reports, journal entries, accounts receivable and payable summaries, cash flow analysis, inventory valuation, and inventory summary reports. Sales invoicing supports recurring schedules, customer payment tracking, estimate-to-invoice conversion, and configurable GST/VAT tax rates. Purchase invoicing handles vendor bills with expense categorization for payroll, rent, and operational costs. The inventory module tracks stock levels using FIFO and average cost methods, automatically adjusting quantities on every sale or purchase and providing reorder alerts. Multi-currency accounting converts transactions at real-time exchange rates and consolidates them under customer or vendor profiles with detailed currency reports. The platform deploys via Docker Compose with multi-tenant isolation giving each organization its own separate database, requiring as little as 2GB RAM for the complete production stack. A headless REST API with Postman collections lets developers embed the accounting engine into external applications for programmatic transaction management. Role-based permissions control access for team members and invited accountants across organizations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Calendars, to-do lists, journal entries, and contacts, synced over the open CalDAV and CardDAV standards nearly every client already speaks: Radicale is a small pure-Python server that works with Thunderbird, DAVx5 on Android, Apple Calendar and Contacts, GNOME, and many more. Its defining design choice is radical simplicity: there is no database. Events live as plain .ics files and contacts as .vcf files in an ordinary folder structure, which makes backup a copy command, migration a move, and disaster recovery a matter of reading text files. The server works out of the box with no complicated setup, then grows as needed: flexible authentication (htpasswd files among other methods), per-collection authorization rules, TLS-secured connections, and a plugin system for extending storage, auth, and rights handling. Built-in limits on parallel connections, file sizes, and failed authentication attempts harden it for network exposure behind a reverse proxy. A bundled web interface handles creating and managing calendars and address books - useful since many clients cannot create collections themselves. Maintained since 2011 with 140+ contributors, GPLv3-licensed, and light enough to run on the smallest VPS or a Raspberry Pi.

BrightBean Studio provides an open-source social media management suite that centralizes multi-account publishing, visual calendar scheduling, idea tracking, and cross-channel analytics into a unified self-hosted dashboard. Content creators and marketing agencies draft cross-network posts within an interactive composer that provides real-time channel previews and custom caption overrides for individual networks. The visual drag-and-drop calendar maps publishing queues across recurring weekly time slots, while an integrated Kanban board organizes brainstorming concepts from unassigned ideation to production-ready schedules. Community managers monitor unified social inboxes aggregating direct messages, mentions, and comments across Facebook, Instagram, LinkedIn, YouTube, TikTok, Bluesky, Threads, Pinterest, and Mastodon. Team leads configure multi-tier approval workflows with threaded editorial comments and issue passwordless 30-day magic links so external clients can approve drafts without registration. Built-in performance dashboards aggregate engagement rates, follower growth curves, and watch time metrics directly from native network APIs without relying on third-party data aggregators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Salesforce's platform model, 100% open-source (Apache 2.0): Corteza is a Go/Vue.js low-code platform developed under a foundation, so there is no open-core bait to grow out of. The heart is Corteza Compose: namespaces contain applications, modules define record structures the way Salesforce objects do, and a drag-and-drop page builder assembles record pages, list pages, dashboards, and charts from configurable blocks. Automation comes from a visual, BPMN-style workflow engine plus JavaScript automation scripts, so cross-application business logic - approval chains, field updates, notifications - is configured rather than programmed. Granular role-based permissions reach down to individual modules, fields, and records, mirroring real organizational hierarchies. Corteza CRM ships as the flagship application built entirely on Compose: leads, accounts, opportunities, campaigns, and cases with a 360-degree customer view, covering most Salesforce standard objects - and because it is just a Compose app, adding or reshaping modules is configuration, not a fork. Everything is reachable over REST APIs, deliberately familiar tooling eases Salesforce admin migration, and a CLI can even generate synthetic records for load-testing what you build.

II-Agent is an autonomous AI agent platform that ranked first on the GAIA benchmark by combining multi-step task planning with a full-stack execution environment spanning research, coding, browsing, and content creation. The platform runs a React frontend on port 1420 backed by FastAPI on port 8000, with PostgreSQL for persistence, Redis for task queuing, and MinIO for S3-compatible file storage, all deployable via Docker Compose. Users switch between Anthropic Claude, OpenAI GPT, and Google Gemini mid-conversation using bring-your-own-key authentication. Task domains include deep research with source triangulation, website and mobile app generation from prompts, storybook creation with illustrations, video and image generation via Google Veo and Imagen, presentation building with live collaborative editing, and document manipulation covering PDF extraction, Excel formulas, Word editing, and PowerPoint creation. Built-in connectors integrate Gmail, Slack, GitHub, Notion, Google Calendar, Discord, Dropbox, and Canva for workflow automation. A sandboxed code interpreter runs Python while browser automation with vision capabilities handles web interactions. Custom skills let teams package and reuse workflows. Context management handles up to 120,000 tokens with intelligent window sizing. 3,400+ GitHub stars. Apache-2.0 licensed.