Monitoring dozens of self-hosted containers, RSS feeds, and web services from a single customizable startpage becomes effortless with Dynacat, a dynamic dashboard engine driven by declarative YAML configuration and live data widgets. You can arrange multi-tab layouts in the browser-based visual editor by dragging widgets across columns and picking color themes, and Dynacat automatically writes every adjustment back to your configuration file. Built-in widgets aggregate RSS and Atom feeds, Reddit communities, Hacker News, Lobste.rs, YouTube channel uploads, Twitch streams, weather forecasts, stock and crypto market tickers, and software releases across GitHub, GitLab, Codeberg, and Docker Hub. Homelab operators can inspect and control Docker containers, track server CPU, memory, and disk mountpoints, monitor AdGuard Home or Pi-hole DNS statistics, view Sonarr and Radarr release calendars, and manage torrents across qBittorrent, Deluge, and Transmission from one screen. For custom services, the visual widget builder connects to any JSON endpoint and binds UI blocks to response fields without manual template coding, while the Dynawidgets catalog imports community widgets with a single slug. Every widget refreshes independently on its own schedule and exposes cached data through a local JSON API, with OpenID Connect group rules securing private admin pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Inference Gateway puts a single OpenAI-compatible API endpoint in front of OpenAI, Anthropic, Groq, Cohere, Ollama, DeepSeek, Google, Mistral, MiniMax, Moonshot, Nvidia, and llama.cpp, so your application code never changes when you switch models or providers. The Go binary starts on port 8080 and normalizes authentication, streaming protocols, and response formats across all backends transparently. Native Model Context Protocol support auto-discovers tools from connected MCP servers and injects them into LLM requests without client-side management, enabling server-side tool execution across any provider that supports function calling. Agent-to-Agent protocol integration allows distributed agent communication through a declarative Agent Definition Language that generates production-ready Go or Rust servers from a single YAML manifest. The dedicated Kubernetes Operator manages Gateway, Agent, MCP, and Orchestrator custom resources with automatic HPA scaling, OIDC authentication, and service discovery that rebuilds MCP configurations when the discovered server set changes. Prometheus metrics and OpenTelemetry tracing provide full request-level observability across the entire inference pipeline. Middleware controls enable per-request provider selection, model routing, and fallback strategies. Official SDKs in Go, Python, TypeScript, and Rust provide typed client interfaces with streaming support. Docker Compose deployment requires only environment variables for API keys. A CNCF Sandbox applicant. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Track income, recurring expenses, and multi-currency assets with WYGIWYH, a self-hosted personal finance platform built on a strict cash-flow principle that preserves monthly savings while exposing spending patterns. Users can aggregate holdings across checking accounts, physical cash reserves, crypto wallets, and custom asset models with automatic foreign exchange rate calculations. The transaction engine executes automated adjustment rules to normalize merchant names, apply category tags, and calculate split costs on every purchase. Investors can schedule dollar-cost averaging portfolios to monitor accumulation performance and price averages over extended investment horizons. Interactive dashboards provide monthly breakdown grids, calendar views of pending recurring bills, and multi-year net worth trajectories. Financial analysts can export transaction journals to CSV, automate data synchronization through REST webhooks, or query accounts with AI agents via the Model Context Protocol. Customizable notification triggers alert account owners to payment due dates and anomalous spending spikes across monitored accounts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

One self-hosted workspace holds your team's chat, tasks, notes, and calendar, and Deft lets AI agents work in it beside your people. People get real-time chat with spaces, direct messages, threads, mentions, reactions, files, and presence. Tasks open as Board, Table, Timeline, or Calendar views, with dependencies, subtasks, recurrence, and bulk actions. Notes, decisions, and channel memory become durable knowledge, with graph views and links back to the source conversation. Native calendar events sit beside read-only ICS subscriptions. Agent employees can join channels and receive task assignments. Tag the built-in assistant Defty to draft a task, answer a workspace question, or take a governed action, then review the proposal in an approval card before anything changes. Personal connections let Codex, Claude, ChatGPT, and other streamable HTTP MCP clients act as the signed-in user within revocable scopes. Approval tiers, trust levels, token scopes, revocation, activity history, and action receipts record who or what acted and what changed. OpenAI, Anthropic, OpenRouter, OpenAI-compatible endpoints, and local Ollama-style models are supported providers. Chat, tasks, notes, and calendars keep working with no AI key. Modules add company-specific records, relationships, and views, with a bundled Contacts module as the first example. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-only licensed.

After the bills are covered, how much is actually safe to spend? monetr organizes an entire budgeting application around that one question. Inspired by the defunct Simple bank, it budgets paycheck by paycheck rather than month by month. Funding schedules encode when you get paid - including multiple schedules per account and a weekend-exclusion option for deposits that land early - and every expense or savings goal is tied to one. monetr then calculates how much of each recurring obligation (rent, car payment, subscriptions, on any repeat interval) to set aside from each paycheck, so a large bill never has to come out of a single check. What remains after allocations is surfaced as Free-To-Use, and a forecasting timeline projects contributions, due dates, and leftover funds forward so low-balance periods are visible before they happen. Transactions arrive either as OFX uploads from your bank or automatically through a Plaid connection using your own API credentials, keeping balances and transactions synced without manual entry. The app is mobile-friendly and installable as a PWA on desktop or phone. Self-hosting via Docker Compose is completely free, with all source code public and your financial data on your own hardware.

Your medical history, fragmented across a dozen patient portals, in one place on your server: MediKeep (formerly Personal Medical Records Keeper) is a self-hosted health record system. Built with a React frontend and FastAPI backend over PostgreSQL, it organizes 14 categories of medical data - medications with dosages and schedules, conditions, procedures, allergies, immunizations, symptoms, injuries, doctor visits and encounters, treatments, lab results, and even medical equipment with service dates and supplier info. Treatment management is genuinely sophisticated: an advanced mode links treatments to their medications with per-medication overrides for prescriber, pharmacy, and effective dates, and reverse lookup shows which treatments use a given medication. A dashboard summarizes records and recent activity, file uploads attach documents to records, and tagging works across categories. When a new specialist asks for your history, the report builder assembles custom reports by category and exports to PDF, JSON, or CSV - a curated, portable summary instead of a folder of photocopies. Authentication supports Google and GitHub SSO with OIDC providers like Keycloak and Authelia expected to work, and the built-in backup system protects the archive. Health data is exactly what should never live in someone else's cloud.

neTV turns any Xtream Codes or M3U IPTV subscription into a clean, fast player that you host yourself and open from a browser, iPhone, iPad, Apple TV, Mac, or Chromecast. The EPG grid guide shows what is on now and next, and catchup lets you browse earlier listings, replay a program from the beginning, or start over a show already airing, with timeline seeking whenever your provider keeps an archive. Intelligent Handoff lets you switch off the living room TV mid-match and resume on your phone from the exact moment you stopped, because the server keeps the stream going until the program ends. Movies and series arrive with metadata, seasons, episodes, and resume points, while search accepts regular expressions and favorites support drag-and-drop ordering alongside playlists that you build on the web and see in every app. Smart passthrough remuxes h264 and AAC streams without re-encoding, and NVENC or VAAPI hardware transcoding serves low-latency HLS to clients that need it. Owners of an NVIDIA GPU can switch on real-time 4K AI upscaling that lifts 1080p channels above 70 frames per second on an RTX 5090. A separate gateway port exposes your live sources as an Xtream-compatible endpoint for other native players, with per-user source access and stream limits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Instead of manually hunting for what to watch next after finishing a series on Plex, Jellyfin, or Emby, let SuggestArr turn your household's recent viewing history into automated media discovery and download requests. The platform analyzes recently watched movies, shows, and anime, queries TMDb or any OpenAI-compatible LLM (including Ollama, OpenRouter, and LiteLLM) for tailored recommendations with plain-language explanations, and dispatches requests straight to Seer, Jellyseerr, or Overseerr. Built-in AI Search lets users describe a mood or plot in natural language and request matching titles in a single click. Administrators can schedule recurring discovery jobs, import public watchlists from Trakt and MDBList, and enforce granular filters for minimum ratings, release years, genres, and regional streaming service availability so you never download content you already pay to stream. Smart request controls pause jobs when Seer queues are full, require optional human approval before submission, auto-decline stale requests, and clean up unwatched suggestions automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

GlitchTip speaks Sentry's protocol without Sentry's operational weight - open-source error tracking that your existing SDKs already understand. The pitch is pragmatic: instrument your application with the official Sentry SDKs you already know - any language they cover - and point the DSN at your own GlitchTip instance instead. Errors, exceptions, log messages, and Content Security Policy violations flow into one place for triage, grouped into issues with stack traces, with alerts delivered by email or webhook the moment things break. Where self-hosted Sentry has ballooned into a docker-compose stack of twenty-plus containers, GlitchTip is a deliberately lean Django and PostgreSQL application a small team can actually run. Beyond errors, it bundles three more monitoring concerns: performance monitoring takes a works-out-of-the-box approach - no dashboard building, just your slowest web requests, database queries, and transactions surfaced automatically; uptime monitoring pings your sites and alerts on failures, or runs in reverse as a dead-man's-switch heartbeat for cron jobs that must check in on schedule; and log search puts application logs alongside errors for faster debugging. Unlimited projects and team members, MIT-licensed, built by Burke Software - your event volume is limited only by your own hardware.

MikroTik Manager is a web control plane for whole RouterOS fleets, built so that a bad VLAN change reverts itself instead of costing you a drive to the site. Before any risky edit, Change Guard saves a restore point on the device and arms a scheduler; if a fresh connection cannot reach the router afterwards, it rolls itself back. Lockout prediction simulates each change against live device state and refuses one that would cut management access, naming the exact port and VLAN at fault. Config Health audits for settings RouterOS accepts but silently ignores. Day to day, a live dashboard tracks availability, wireless clients, and alerts delivered by email, Slack, Discord, Telegram, or ntfy. Switch faceplates, per-port client views, VLAN copy wizards, bulk SSID deployment, RF health charts, rogue AP detection, and a guest Wi-Fi captive portal wizard cover the wired and wireless side. A rule builder handles firewall and NAT, topology maps come from LLDP, CDP, and MNDP, and a built-in NetFlow collector attributes traffic to clients and applications. Firmware rolls out in canary waves that halt on failure, and every configuration snapshot supports diffs and one-click rollback. OIDC single sign-on, TOTP two-factor, role-based access, and scoped API tokens protect the console, while sites group devices per customer network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Poznote serves as an all-in-one personal knowledge base and digital workspace designed to bridge unstructured thinking and structured documentation. The platform pairs a responsive Markdown editor with live side-by-side rendering, KaTeX mathematical notation, and interactive Mermaid diagram compilation. Creative thinkers can switch instantly to an embedded Excalidraw infinite canvas to sketch system architectures, design mind maps, and create interface wireframes alongside their written notes. Every directory within the workspace can be toggled into an agile Kanban board where nested folders become customizable workflow columns and notes transform into draggable task cards. Task management views aggregate checklists across documents into unified priority queues with due date reminders and completion filters. An integrated bi-directional Git synchronization engine connects user workspaces directly to personal GitHub or Forgejo repositories, versioning edits automatically on save. The software also provides an integrated Model Context Protocol server that enables AI coding assistants to search notes, create documents, and query knowledge repositories securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Turning chaotic group brainstorming sessions into structured visual diagrams, TeamMapper provides a real-time collaborative mind mapping workspace that teams and classrooms can join instantly without creating user accounts. Workshop facilitators, teachers, and product squads start from a central root topic and branch outward into hierarchical radial trees, using keyboard shortcuts and full undo-redo history to capture ideas at the speed of conversation. Every node can be styled with custom branch and background colors, adjustable font weights and sizes, external reference links, uploaded raster images, and visual pictograms from the ARASAAC library to reinforce memory and visual association. Sharing a live session takes a single click: hosts distribute either a view-only link, a full modification invite URL, or a scannable QR code so remote colleagues and students in the same room can edit branches simultaneously. When enabled by the administrator, an integrated AI assistant can automatically generate initial mind map branches and subtopics from a text prompt to jump-start planning sessions. Completed maps export cleanly to JSON, Mermaid diagram syntax, scalable SVG vectors, high-resolution PNG images, or printable PDF documents, and existing JSON maps can be re-imported at any time for follow-up workshops. Built-in privacy controls automatically purge inactive mind maps and orphaned image attachments after a configurable retention window, simplifying GDPR compliance for schools and enterprises. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Scrumboy is a Kanban and sprint management tool that ships as a single Go binary backed by SQLite, deploys in under ten seconds via Docker, and uniquely integrates with AI coding agents through a standards-compliant MCP JSON-RPC endpoint. The dual-mode architecture supports Full mode with bootstrapped authentication, TOTP two-factor auth, OIDC/SSO integration through Keycloak, Authentik, Auth0, or Entra ID, role-based access control across Owner, Admin, User system tiers plus per-project Maintainer, Contributor, and Viewer roles, and Anonymous mode that generates instant shareable boards accessible via unique URLs with zero signup requirement. Custom workflows allow user-defined lane configurations per project including designated "Done" lanes, while sprints with configurable one or two-week cycles include board-level sprint filtering and the ability to disable and re-enable sprint tracking without losing history. Real-time Server-Sent Events power instant multi-user board updates, and outbound webhooks deliver JSON payloads to registered URLs when domain events fire with HMAC signature verification. The MCP endpoint at /mcp/rpc enables native integration with Cursor, Claude Code, and other AI agents through OAuth 2.1 with PKCE authorization, while API access tokens support CLI automation and CI/CD pipelines. Additional capabilities include VoiceFlow voice commands, per-project sticky-note walls, Markdown and Mermaid diagram support in task notes, append-only audit trails, VAPID Web Push notifications, SMTP password reset, Trello import, JSON backup with merge/replace/copy strategies, and 22-language internationalization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3.0 licensed.

Manage My Damn Life is a personal productivity platform and CalDAV task manager that gives individuals and teams a full-featured web workspace for coordinating todos, calendar agendas, and project schedules without relying on proprietary productivity software. Users can connect multiple CalDAV server backends including Nextcloud, Radicale, and Baikal to synchronize tasks, events, and subtasks across their self-hosted infrastructure. The interface offers multiple interactive perspectives, letting planners switch between nested task checklists, full monthly calendar grids, and dynamic Gantt chart roadmaps with customizable timeline scales. Keyboard-driven operators can rapidly log action items via intuitive Quick Add syntax that parses due dates, priority tiers, and category labels from inline text triggers. A versatile filter manager allows users to save custom query views matching due dates, completion statuses, parent task hierarchies, and color-coded labels. Team members can establish reusable task templates for recurring administrative workflows, assign multi-level checklist items, and manage individual calendar visibility across shared workspaces. System administrators can configure user authentication through native accounts or integrate enterprise Single Sign-On using OpenID Connect providers like Keycloak, Authentik, and Google. Client-side state caching accelerates navigation while background sync preserves CalDAV compliance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL v3 licensed.

Eliminate scattered configuration files and leaked credentials across development teams with Shelve, an open-source secrets management platform that secures environment variables across development, staging, and production tiers. Engineering teams can organize sensitive database passwords and third-party API credentials within a centralized vault protected by AES-256 encryption and SHA-256 integrity verification. The platform synchronizes configurations directly to GitHub Actions and repository secret stores through an official GitHub App integration. Developers can inject encrypted variables directly into local processes using the dedicated CLI without saving plain-text secrets to disk. The built-in sharing vault creates self-destructing, password-protected links to exchange sensitive credentials securely with external contractors. Administrators can define custom workspace teams with granular role-based access controls, track change audit logs across configuration histories, and navigate management views using a keyboard-driven command palette. Automated schema validation engines detect missing parameters and enforce uniform uppercase naming standards across application tiers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

To uncover deep viewing insights and AI-powered content recommendations across your self-hosted Jellyfin media server, Streamystats delivers a comprehensive analytics and watch-history platform. Once connected to one or more Jellyfin instances using native MediaBrowser authentication, the dashboard tracks live playback sessions, per-user watch durations, device and client breakdowns, and library-wide growth metrics without requiring third-party reporting plugins. You can import existing historical logs from Jellystat or the Playback Reporting plugin so years of viewing habits carry over immediately, then explore interactive watch-time graphs, genre radar charts, actor and director leaderboards, and a yearly Wrapped summary. When you enable vector embeddings through OpenAI, OpenRouter, Google Gemini, Voyage AI, or a local Ollama model, the recommendation engine calculates cosine similarity against your watch history and explains exactly which watched movies or series inspired each suggestion. An integrated AI chat assistant equipped with thirteen specialized function-calling tools lets you search your catalog semantically, ask natural-language questions about your viewing statistics, and generate shared movie recommendations for multiple household members at once. Administrators can also mark titles as watched or unwatched with automatic watch-time inference, manage watchlists over an external API, and connect Janitorr for automated media cleanup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

By routing file transfers directly between client browsers and S3-compatible object storage through time-limited presigned URLs, Safebucket enables organizations to share large files and folders without bottlenecking their application server. Teams organize documents into logical buckets with nested folder hierarchies, preview images, videos, audio tracks, and PDFs inside a sandboxed browser viewer, or bundle up to one hundred selected items into a single client-side ZIP download. Public Quick Share links let external recipients download files or entire folders from a browser or via command-line curl redirects, while Reverse Share turns any shared folder into a secure dropbox where guests can upload files back under size and count quotas. Every shared link supports optional password protection, expiration dates, and maximum view limits, complemented by per-file expiration timers and a soft-delete trash bin with configurable retention. Two-tier role-based access control pairs platform roles (Admin, User, and Guest) with bucket-level permissions (Owner, Contributor, and Viewer), allowing teams to invite external collaborators via challenge-verified email links. Authentication integrates with OpenID Connect identity providers and LDAP or Active Directory servers alongside TOTP multi-factor authentication. Administrators gain a four-view governance console covering platform storage metrics, user and bucket inventories, and searchable audit trails filtered by action, user, and date range. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

CrowdSec Web UI provides a centralized web console for monitoring intrusion detection telemetry, managing firewall remediation decisions, and auditing security events across multiple CrowdSec security engines. Administrators can connect several CrowdSec Local API endpoints simultaneously, aggregating threat intelligence and active bans into a unified visual interface. The dashboard displays geographic origins of attacking IP addresses, active remediation durations, and specific scenario triggers such as brute-force authentication attacks or web vulnerability probes. Operators can search through historical alert logs, inspect raw HTTP request details, and drill down into individual IP behaviors to differentiate authentic threats from false positives. Manual intervention tools let security teams enforce custom IP bans, adjust expiration timers, or immediately revoke erroneous bans across all connected bouncers with a single click. Integrated notification pipelines dispatch real-time security alerts to external destinations including ntfy, Gotify, and MQTT message brokers whenever critical thresholds are breached. Built-in Prometheus metrics dashboards visualize processing latencies, parser throughput, and decision counts over customizable time windows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.