Surmai
When a family vacation or group expedition spans multiple airlines, hotels, rental cars, and currencies, Surmai brings every reservation and shared cost into one collaborative travel planner. Each trip breaks down into dedicated sections for transportation legs, lodging stays, daily activities, and travel notes. Confirmation codes, terminal numbers, departure times, and street addresses stay right where everyone in your party can find them. Built-in airport, city, and airline directories auto-complete flight routes in seconds, or you can forward booking confirmation emails directly into an active trip for automatic parsing. The chronological itinerary view then weaves flights, hotel check-ins, and excursions into a clean day-by-day timeline so your group can spot layover gaps immediately. Boarding passes, train tickets, and PDF vouchers live inside a central attachment vault. Installing the Progressive Web App caches your entire itinerary and travel documents on your phone for offline viewing at airport gates or remote trailheads. A built-in expense ledger logs shared purchases across multiple currencies so nobody has to guess who paid for dinner. Administrators can invite fellow travelers over SMTP email, enable OAuth2 or OpenID Connect login with Authentik, Keycloak, Google, or Microsoft, and replicate backups continuously to S3-compatible object storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Metadata Remote
Metadata Remote is a browser-based audio tag editor designed specifically for headless music servers, enabling collectors to fix ID3 tags, embed high-resolution cover art, and match releases against MusicBrainz without moving files off their NAS. Navidrome, Jellyfin, and Plex administrators can browse mounted directories directly from any browser, inspect standard and extended metadata fields, and apply single-file or bulk folder-wide updates in one click. Clicking an empty or incomplete field activates the smart inference engine, which analyzes filenames, directory hierarchy, and sibling tracks alongside live MusicBrainz queries to present candidate values ranked by confidence percentage, including specialized matching rules for classical works, multi-artist compilations, and live bootlegs. Built-in audio streaming lets you audition MP3, FLAC, OGG, OPUS, M4A, M4B, WMA, WAV, and WavPack files inside the interface to verify mysterious tracks before renaming files or folders inline. A dedicated long-form text editor automatically opens for lyrics and liner notes exceeding 100 characters, while the album art manager previews image dimensions, bulk-embeds covers across entire albums, and repairs corrupted artwork headers automatically. Every single-track edit, custom field creation, and batch folder operation is tracked in a 1,000-step undo and redo history with full keyboard-only navigation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
PayMe
PayMe is a privacy-first personal finance dashboard that runs entirely on your own hardware with zero third-party service dependencies. The Rust backend compiled to a single binary serves a React 19 frontend built with Vite, TypeScript, and Tailwind CSS 4, storing all financial data in a local SQLite database that auto-migrates on startup. Monthly dashboards track income entries, fixed expenses like mortgage and utilities, and budget categories with real-time progress bars showing spending against configurable limits. The savings module includes goal tracking with percentage-based progress indicators, custom savings goals for targeted objectives, retirement savings projections with breakdown analysis, and projected savings calculations. Variance analysis compares actual spending against budgets across categories. Drag-and-drop reordering powered by dnd-kit lets you arrange income sources, expenses, and budget items to match your workflow. The interactive charts rendered by Recharts visualize spending trends, income patterns, and savings trajectories. Month-by-month navigation tracks financial history over time, while the Summary and Stats views aggregate data across periods. JWT-based authentication secures access, and the full OpenAPI Swagger documentation at the /swagger-ui endpoint exposes every API route for automation and integration. Docker Compose deployment creates a minimal image with the compiled Rust binary and static frontend assets, running on port 3001 behind nginx, Caddy, or Traefik reverse proxy with HTTPS. On RepoCloud, deploy PayMe on a dedicated VPS with persistent SQLite storage, root SSH access, and complete privacy over your household financial data, all under the MIT license.
MIND
Unlike a calendar alert that rings on one phone, a MIND reminder reaches any of 100+ services, including email, Pushbullet, BlueSky, Cisco Webex Teams, and SMS gateways, from a self-hosted reminder app that you control. Normal reminders fire with second precision once or repeat every few days, once a year, on chosen weekdays, or on a custom cron schedule, while static reminders wait for a button press, so a single tap can tell the family that you are running late. Templates store colour, title, services, and text for fast creation, and the colour-coded library can be searched and sorted, with each reminder enabled, disabled, or tested on demand. Time zone changes, including daylight saving shifts, are accounted for, and sends that fail on a connection error are retried every two minutes until they succeed. Several users can share one instance: the admin panel handles accounts and registration, login lifetime, reverse-proxy URL prefix, debug logs, and scheduled database backups that can be exported and imported, and sign-in supports two-factor authentication. A documented REST API covers reminders, templates, notification services, and static triggers, and the web interface adapts to phone screens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
SkySend
Only the person holding the link can open what you share with SkySend, a self-hosted file and note sharing service that encrypts everything in the browser before it leaves your device. Sending a contract? Drop in the file, several files, or a whole folder, and share the link. Need documents from a client? Send an upload link instead, and whatever comes back is encrypted for you alone. Handing over a password or an SSH key? Write it into a note that burns after reading. Notes can mix text, Markdown, generated passwords, and highlighted code in a single page. Every share can expire by time, stop after a set number of downloads or views, and carry an optional password as a second lock. The command-line client uploads, downloads, and reads notes with the same encryption, and its full-screen mode shows each link as a QR code. No accounts are needed: My Links keeps your shares in the browser, and optional OIDC sign-in limits who may create them. Encrypted uploads sit on local disk or any S3-compatible bucket, and the interface offers 13 languages and three themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Captain Claw
Instead of one overworked chat box, Captain Claw gives you a Flight Deck for a whole fleet of AI agents: spawn specialist teams, watch each agent work live, and chat with any of them from a single dashboard. Describe a goal and Agent Forge designs the team, with roles, tools, and operating procedures, ready to spawn in one click. Agent Council runs moderated debates that end in a vote and exportable minutes, Basna sends the same question to blind specialists and merges their answers by learned reliability, and Vatra lets a team co-write a deliverable on a shared blackboard. Code takes a request through a plan you approve, a build, and three independent reviewers, committing every phase to git. Bat keeps working until an independent judge says the job is done, and Flows run deterministic automations on triggers. Mix OpenAI, Claude, Gemini, DeepSeek, OpenRouter, or local Ollama models per agent, with six memory layers shared across sessions and token and cost meters for every agent. Teams get admin-managed users and shared agents, and agents reach you through WhatsApp, Telegram, Slack, or Gmail while Claude can drive the fleet over MCP. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
CaddyUI
Providing an intuitive control plane for modern reverse proxy infrastructure, CaddyUI enables system administrators to manage proxy hosts, automated TLS certificates, and traffic routing without hand-editing configuration files. Operators can create and adjust reverse proxy destinations, URL path rewrites, custom headers, and redirection rules using structured forms that validate against the proxy engine before saving. The platform coordinates automatic ACME certificate requests and renewals, displaying live certificate expiration timelines, validation stages, and internal self-signed certificate authority options for local network services. Fleet management tools synchronize proxy rules across multiple distributed server instances, preventing configuration drift across staging and production clusters. Automated post-deployment health checks verify upstream endpoint availability, HTTP status codes, and latency thresholds, instantly rolling back to the previous configuration if an expectation fails. An integrated observability suite delivers real-time visitor traffic analytics, geographic maps, HTTP response code breakdowns, and single-click client IP blocking to counter malicious probing attempts. Administrators can schedule automated database backups, configure multi-user access with role permissions, and integrate CrowdSec threat intelligence to protect backends. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Betterlytics
Page views, funnels, session replays, error reports, Core Web Vitals, and uptime checks share one cookieless dashboard in Betterlytics, so teams stop stitching several tools together. The overview charts visitors, page views, bounce rate, and visit duration against the previous period, and annotations mark launches or campaigns right on the timeline. Breakdowns cover referrers, channels, UTM campaigns, browsers, devices, and operating systems, with visitor locations on a world map once an optional MaxMind key is added. Custom events, global properties such as plan or app version, and outbound link tracking show what visitors actually do, while user journey diagrams and funnels reveal where they drift away. Session replay is opt-in per tracking script, masks text and form inputs by default, and can keep recordings in your own S3-compatible bucket. Error tracking groups JavaScript errors with stack traces, a session trail, and a link to the matching replay. Uptime and SSL monitors alert through Slack, Discord, Teams, or webhooks and feed public status pages on your own domain. Teammates join by invitation, two-factor login is available, and a built-in MCP server lets Claude, Cursor, or Codex answer traffic questions. A script of about 3.5 KB or a WordPress plugin handles installation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Revel
Yoga studios, comedy clubs, choirs, and bands use Revel to sell tickets, memberships, and season passes from their own server with no platform fee. Studios and clubs sell monthly or yearly memberships through Stripe and offer series passes that cover a class pack, a course, or a season, with wallet cards that a door scan verifies. Venues design seat maps with sectors, individual seats, and accessible seats, and buyers pick seats on an interactive map while the seats are held at checkout. Bands and DJs sell their own shows with no promoter in between, set pay-what-you-can tiers, open presales to invitation-link holders, and export every buyer's name and email. Communities that vet who comes screen requests with questionnaires reviewed automatically, manually, or both, and keep private guest lists, invitation-only events, and a fuzzy-matched blacklist. Buyers check out a multi-tier cart without an account, using discount codes and fixed-price, free, or pay-at-the-door tiers. Tickets arrive as QR PDFs or Apple Wallet and Google Wallet passes, and door staff check guests in by scanning. Organizers run waitlists with time-limited offers, announcements, reminders, and a Telegram bot for RSVPs and invitations. Revenue and VAT reports export as XLSX or PDF, and VIES checks buyer VAT IDs. The web app speaks English, German, Italian, French, Spanish, and Portuguese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Sencho
With over 430 GitHub stars and designed for DevOps engineers, platform teams, and homelab operators, Sencho is the self-hosted Docker Compose control plane that gives you a real operational cockpit without abandoning file-on-disk compose workflows. The web dashboard provides live CPU, memory, and disk sparklines per container, one-click start/stop/restart controls, and a Monaco-powered YAML editor with syntax highlighting, inline diff, and one-click rollback. Compose files remain the source of truth on the host filesystem. Multi-node management connects remote Sencho instances via authenticated HTTP and WebSocket proxy using long-lived API tokens, with no SSH access or exposed Docker sockets required. The Pilot Agent establishes an outbound-only WebSocket tunnel for nodes behind NAT, CGNAT, or strict firewalls. Blueprints define compose intent once and deploy it across label-targeted nodes, with drift detection keeping the fleet aligned. Fleet Federation provides cordon and pin controls for maintenance windows, while Fleet Actions execute bulk deploy, stop, and restart operations by stack label across the entire infrastructure. The security suite includes Trivy vulnerability scanning, deploy enforcement policies, SARIF and SBOM export, and Fleet Sync to replicate scan policies across replicas. Additional capabilities include 199+ one-click app templates, Git source integration, atomic deploys with auto-rollback, auto-heal, scheduled operations, webhooks, and custom S3 off-site backups to MinIO, R2, B2, or AWS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
dayGLANCE
Instead of locking your daily schedule inside proprietary cloud calendars, dayGLANCE offers a privacy-first visual time-blocking planner that syncs directly with your own WebDAV server, Nextcloud instance, or Obsidian vault. Drag tasks from a prioritized Smart Inbox onto an interactive 24-hour timeline, resize blocks as priorities shift, and carve out recurring energy-tagged Frames for deep work or administrative batches. The live Glance panel highlights your current commitment, remaining free time, and daily routines, then transitions into GLANCEahead each evening to preview tomorrow's start time, deadlines, and total committed hours. Switch between multi-day, single-day, weekly, and monthly layouts, or launch the fullscreen Day Dial to view your schedule, solar daylight arc, and watch-style progress complications on a secondary wall display. Long-term work stays organized inside a Goals and Projects hierarchy with duration-weighted progress bars, visual roadmaps, and dedicated hyperGLANCE focus workspaces that pair a Pomodoro timer with project notes and subtasks. Bidirectional Obsidian synchronization reads and writes markdown daily notes and wikilinked tasks directly, while optional bring-your-own-key AI assistants and encrypted backups keep your productivity workflow completely under your control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Rackpad
Every cable, switch port, VLAN, and rack unit in a homelab or small server room gets a documented place in Rackpad, a self-hosted inventory and operations workspace. Rack elevations show mounted gear, including paired half-width appliances. Switch-panel port maps and aggregate ports show what is patched where. Cables carry type, length, and color, editable in bulk. VLANs, subnets, DHCP scopes, reservations, and zones sit in one Networks workspace, with gateway and DNS protection and a mismatch review for IP assignments. Storage topology follows drives, bays, and pools that span several devices. Wi-Fi controllers, access points, hypervisor hosts, and virtual machines have pages of their own, and Proxmox and Hyper-V hosts can be imported after review. Discovery scans a subnet or any CIDR and stages every finding in an inbox. Per-device checks over ICMP, TCP, HTTP, HTTPS, and SNMP raise alerts by email, Discord, or Telegram. Everything feeds a movable topology map. Markdown runbooks attach to devices, and an audit log records every change. Admin, editor, and viewer roles control access, and OpenID Connect login is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Hiccup
"Get to your most important links, FAST" - Hiccup's README states its whole mission in that one line, and the static start page delivers it. It is a client-side React single-page app - no backend, no database, no accounts - driven entirely by a config.json that defines featured link cards, categorized sections, and search providers. The search bar is the power feature: it queries your own links by name, URL, and tag while simultaneously offering external providers like Google, DuckDuckGo, and Amazon (plus custom URL-template providers you define), with arrow-key navigation and Enter to launch, so muscle memory replaces mousing. Editing happens in the browser - drag and drop links and background images, tweak cards in edit mode - with changes persisting to localStorage; a built-in config manager exports the JSON for hosting, and remote profile loading pulls a shared config across every browser and device you use. Multiple profiles keep home-server, work, and dev-tool link sets separate. PWA support installs it on a phone home screen, caching strategies keep it fast offline, read-only mode suits kiosk displays, and Cmd/Ctrl+/ reveals the full hotkey reference. Serve it from any static host and point your new tab at it.
salt.md
salt.md is an open-source, self-hosted workspace where your team and its AI agents work on the same documents and databases, under the same permissions and with the same history. A slash-menu block editor handles checklists, tables, callouts, columns, code, diagrams, and embeds. Page links, backlinks, and a graph view show how pages connect. Any page can become a collection with typed properties like select, date, person, relation, rollup, and formula, shown as a table, board, list, gallery, calendar, timeline, or form. Ctrl+K searches titles, body text, row values, and the text inside uploaded PDFs. Two people can type in the same paragraph at once with live cursors. Comments, page history, and an activity log record who changed what. Publish a page as a read-only link with an optional password and expiry, or hand people without accounts a form that adds rows to a collection. Agents connect over MCP with 33 tools for searching, writing, building databases, and commenting, using tokens scoped to one workspace or read-only. Signed webhooks, iCalendar feeds, and Google or Microsoft sign-in link it to the rest of your stack. Import Markdown, ZIP archives, or a Notion export, and export pages as Markdown, HTML, or PDF. Use it for handbooks, meeting notes, project boards, and a knowledge base your assistants can read. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
DVinyl
Self-hosted and plugin-based, DVinyl keeps vinyl, CDs, cassettes, books, movies, video games, LEGO sets, and board games in one catalog, with cover art and metadata fetched for every item. Adding an item takes an ID, a camera scan of its barcode, or a bulk import from Discogs or Goodreads. Each media type is a plugin that switches on per collection, with Discogs behind music, TMDB behind film, IGDB behind games, and Rebrickable behind LEGO. Once cataloged, a collection appears as a grid, a compact table, or virtual shelves with spine view and customizable furniture. Custom lists, track playlists, and a wishlist of items still being hunted sit alongside. Music collections get live value estimates with price history charts, games show completion times, and printable QR codes and barcodes label the physical copies. Separate collections can belong to you, the family, or a room, each with admin, editor, and viewer roles and optional OIDC single sign-on through Authentik, Keycloak, Authelia, or pocketID. Read-only links and QR codes let anyone browse a whole collection or just one section. Fourteen themes in light and dark, a modular dashboard, and a Markdown info page with photos make each instance personal. A no-code editor adds custom item types. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
BitRouter
BitRouter is a context-aware LLM router that learns which model delivers the cheapest successful outcome per workflow step, cutting agent costs by up to 80% while maintaining 96% quality versus all-frontier baselines. Point any agent runtime at http://localhost:4356 with a one-line OPENAI_BASE_URL change and BitRouter routes to OpenAI, Anthropic, Google, Groq, DeepSeek, Mistral, Moonshot, MiniMax, Nvidia, and any OpenAI-compatible endpoint simultaneously, normalizing authentication, streaming, and cross-protocol translation between wire formats. The act-observe-evaluate-learn loop traces every hop with cost, tokens, and latency attribution, scores each decision against a versioned policy-lock.yaml, then tightens routes automatically with no LLM judge in the path. Native MCP gateway auto-discovers tools from connected servers and makes them routable and governed alongside model calls. Agent Client Protocol integration enables the TUI to manage Claude Code, Codex, OpenCode, OpenClaw, Gemini, and Copilot sessions in real time with inline tool-call approval and live streaming. Built-in guardrails inspect, redact, or block risky content before requests leave your network. Virtual keys scope API access per agent or user without exposing upstream credentials. Per-agent spend caps and loop guards contain runaway cost automatically. Multi-account failover reroutes mid-run so rate limits never re-pay completed work. Ships as a single Rust binary via npm or Cargo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Zusam
From the German "zusammen," together: Zusam is a private social space for a group of friends - a self-hosted alternative to the family WhatsApp group or the friends Facebook group, with no ads, algorithms, or data harvesting in between. The AGPLv3 project is deliberately modest in scope and stack: a Symfony PHP backend exposing a REST API over SQLite, with a lightweight Preact single-page frontend, designed for a low server footprint that runs comfortably on small hardware. Groups post messages into shared feeds that handle real life well: video and image uploads (with FFmpeg processing), photo albums for trips and events, and rich link previews with inline embeds for YouTube, Vimeo, Imgur, SoundCloud, Twitch, and Bandcamp - so sharing a song or a clip looks the way it should. When something needs to leave the circle, public link generation exposes a single message to non-members without opening the group. The interface is fully responsive and mobile-friendly, targeting Firefox ESR and recent Chrome. It is the small-web answer to a real question: where does a group chat's shared history live when you want it owned by the group instead of a platform?
Stormkit
Stormkit delivers a self-hostable PaaS that eliminates vendor lock-in while providing Vercel-class deployment workflows. The Go backend handles build orchestration, hosting, and background job processing while the React frontend provides a complete management dashboard for applications, environments, and team collaboration. Git integration with GitHub, GitLab, and Bitbucket enables push-to-deploy workflows where every commit triggers automated builds with preview links posted directly to pull requests. Serverless functions use filesystem-based routing — each TypeScript or Node.js file in the API directory becomes an endpoint automatically, deploying to AWS Lambda with configurable timeouts. PostgreSQL database schemas ship with automatic migrations, isolated credentials per environment, and secure environment variable injection preventing credential leakage between staging and production. Custom domains provision TLS certificates automatically through Let's Encrypt with support for custom certificates and headers. The environment system creates isolated deployment contexts for production, staging, and development with independent variables, domain bindings, and auto-publish rules per branch. Privacy-respecting server-side analytics track visitors, referrers, and top paths without client cookies or third-party scripts. Role-based access control manages team permissions across applications. Docker Compose deployment provisions the full stack including the API server, hosting service, build runner, and worker server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.