Quantum
From a bare Linux server, Quantum builds and runs GitHub repositories, multi-service Docker Compose stacks, and managed databases through a self-hosted PaaS dashboard with automated webhook deployments and live container telemetry. Connect a GitHub account, pick a branch, and let the build engine compile from a Dockerfile or custom install, build, and start commands on every git push or release tag. Multi-service Compose files can be pulled from a repository or pasted into the editor, with automatic `${VAR}` placeholder detection and isolated internal networks so containers communicate by service name. Provision PostgreSQL, MySQL, MariaDB, MongoDB, and Redis instances with one-click backups, or deploy pre-configured templates for n8n, Directus, WordPress, Uptime Kuma, and Ollama. Live log streams, an interactive browser terminal, `.env` secret management, persistent volume mounts, and private registry credentials come built into every service view. Need to patch a file quickly? Clicking Open in VS Code launches a sidecar `code-server` instance mounted directly to the container filesystem. Organization and project roles enforce granular access while real-time CPU, memory, and network charts track health across 15-minute to 24-hour windows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Terrapod
Terrapod gives you the Terraform Enterprise control plane on your own Kubernetes cluster, with remote state, run approvals, and policy checks, and no per-resource bill at the end of the month. Point your existing cloud block at it and terraform or tofu keep working unchanged, because Terrapod answers the same backend protocol the CLI already speaks. Workspaces isolate state, variables, and runs per team or environment, with versioned state you can lock, inspect, and roll back. Server-side agent pools execute plans and applies on ephemeral Kubernetes jobs, while CLI-driven runs stay available for local workflows. Approvals gate every apply, and conditional auto-apply only proceeds when a plan adds or updates resources without destroying anything. Label-based RBAC decides who may read, plan, write, or administer each workspace, with OIDC and SAML single sign-on on top. A private registry hosts your own modules and providers with GPG signing, and OPA Rego policy sets enforce rules as mandatory or advisory checks before apply. Drift detection flags infrastructure that wandered from its state, run triggers chain dependent workspaces, and an interactive impact graph shows a plan's blast radius before you approve it. Optional AI review summarizes each plan's changes and risks, and an MCP server lets AI assistants inspect workspaces and runs under the same permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.
DispatchMail
DispatchMail is an SuperHuman alternative and delivers a self-hosted AI email assistant that processes your Gmail inbox through configurable OpenAI prompts without sending data to third-party cloud services beyond the LLM API itself. The Flask backend connects to Gmail via IMAP, retrieves new messages according to your schedule, and routes them through customizable whitelist rules based on sender address, subject keywords, or natural language descriptions before AI processing begins. Two distinct prompt configurations control behavior — the Reading Prompt instructs how the AI should analyze and classify incoming messages, while the Draft Prompt defines how responses should be composed, letting you maintain consistent tone and policy across all automated replies. Whitelist filtering ensures the AI only processes messages you explicitly authorize, preventing unnecessary API costs and keeping sensitive emails out of the LLM pipeline entirely. The React web interface provides inbox management with message previews, AI-generated summaries, draft editing with human-in-the-loop approval before sending, and configuration panels for prompts and rules. Automatic labeling and archival organize processed messages into categories without manual intervention. The sender research feature uses LLM-powered deep analysis to build background profiles of email contacts. All email content, credentials, and processing results persist in a local SQLite database with zero cloud storage dependencies. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
CollabMD
Your team's knowledge already lives in a folder of Markdown files, and CollabMD turns that exact folder into a shared workspace everyone can edit together in the browser, with nothing to migrate and no database swallowing your notes. Point it at an Obsidian vault, a plain docs directory, or a git-backed repository and the filesystem stays the source of truth: files are never moved, renamed, or deleted unless someone does it deliberately in the app. Several people can type in the same document at once with live cursors and presence indicators, follow a collaborator's view while they present, and drop comments anchored to a specific line or text selection instead of scattering feedback across chat threads. Edits made outside the browser, in Obsidian or any text editor, sync back into open documents automatically, so local and remote work never fork. Diagrams are first-class citizens: Mermaid, PlantUML, Structurizr C4 models, Excalidraw canvases, and draw.io files all open and render beside your prose, and a git panel lets you review changes and commit with a message without leaving the tab. Global full-text search, wiki-links with backlinks, team chat, file uploads, and optional password or Google sign-in round out a workspace that respects how your files already live. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Meerkat CRM
Friends drift away when nobody remembers to call; Meerkat CRM is a self-hosted personal CRM that keeps your relationships warm with birthday and stay in touch reminders, contact notes, and a living map of who knows whom. Organize every contact into circles like family, friends, or work, store spouses and children as linked relationships, and see the whole crowd on an interactive network graph that shows how people connect. Sync the same address book two ways: Meerkat runs its own CardDAV server for your phone and can also act as a CardDAV client against an external server you already use. Against each person you can keep the details that matter, dietary habits, kids names, the last conversation, plus a social style timeline of activities you have shared, from dinners to group projects. Reminders nudge you by email when it has been too long, with upcoming birthdays surfaced on the dashboard, so catching up becomes a habit instead of an afterthought. Move data in and out freely: import CSV, VCF, and even a Monica export, export back to CSV and VCF, connect external calendars, and fire webhooks into your own automations. Use it in English, German, Italian, Spanish, or French with light and dark modes, and SSO for whoever shares the house. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Maintenant
Maintenant replaces three to five separate monitoring tools with a single Go binary that consolidates container discovery, endpoint monitoring, SSL tracking, resource metrics, and public status pages without requiring any external database. The embedded Vue 3 frontend serves on port 8080 immediately after deployment, auto-discovering Docker containers and Kubernetes pods through direct socket and API access without configuration. HTTP and TCP endpoint monitoring validates availability with configurable intervals, while TLS certificate tracking alerts before expiration across all monitored domains. Resource metrics collect CPU, RAM, network throughput, and disk usage per container with real-time Server-Sent Events streaming to the dashboard. Heartbeat and cron monitoring accepts pings from external scheduled jobs, triggering alerts on missed check-ins via webhook callbacks and Discord notifications. The built-in alert engine supports escalation rules and notification batching. Public status pages expose component health to end users without authentication, customizable per monitored service. Network security insights analyze exposed ports, container privilege levels, and host configuration to produce a posture score. Update intelligence scans OCI registries to detect available container image updates with digest comparison. The REST API with SSE broker enables automation, and the integrated MCP server provides tooling for AI assistant integration. SQLite in WAL mode stores all data with zero operational overhead. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Surmai
When a family vacation or group expedition spans multiple airlines, hotels, rental cars, and currencies, Surmai brings every reservation and shared cost into one collaborative travel planner. Each trip breaks down into dedicated sections for transportation legs, lodging stays, daily activities, and travel notes. Confirmation codes, terminal numbers, departure times, and street addresses stay right where everyone in your party can find them. Built-in airport, city, and airline directories auto-complete flight routes in seconds, or you can forward booking confirmation emails directly into an active trip for automatic parsing. The chronological itinerary view then weaves flights, hotel check-ins, and excursions into a clean day-by-day timeline so your group can spot layover gaps immediately. Boarding passes, train tickets, and PDF vouchers live inside a central attachment vault. Installing the Progressive Web App caches your entire itinerary and travel documents on your phone for offline viewing at airport gates or remote trailheads. A built-in expense ledger logs shared purchases across multiple currencies so nobody has to guess who paid for dinner. Administrators can invite fellow travelers over SMTP email, enable OAuth2 or OpenID Connect login with Authentik, Keycloak, Google, or Microsoft, and replicate backups continuously to S3-compatible object storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
PayMe
PayMe is a privacy-first personal finance dashboard that runs entirely on your own hardware with zero third-party service dependencies. The Rust backend compiled to a single binary serves a React 19 frontend built with Vite, TypeScript, and Tailwind CSS 4, storing all financial data in a local SQLite database that auto-migrates on startup. Monthly dashboards track income entries, fixed expenses like mortgage and utilities, and budget categories with real-time progress bars showing spending against configurable limits. The savings module includes goal tracking with percentage-based progress indicators, custom savings goals for targeted objectives, retirement savings projections with breakdown analysis, and projected savings calculations. Variance analysis compares actual spending against budgets across categories. Drag-and-drop reordering powered by dnd-kit lets you arrange income sources, expenses, and budget items to match your workflow. The interactive charts rendered by Recharts visualize spending trends, income patterns, and savings trajectories. Month-by-month navigation tracks financial history over time, while the Summary and Stats views aggregate data across periods. JWT-based authentication secures access, and the full OpenAPI Swagger documentation at the /swagger-ui endpoint exposes every API route for automation and integration. Docker Compose deployment creates a minimal image with the compiled Rust binary and static frontend assets, running on port 3001 behind nginx, Caddy, or Traefik reverse proxy with HTTPS. On RepoCloud, deploy PayMe on a dedicated VPS with persistent SQLite storage, root SSH access, and complete privacy over your household financial data, all under the MIT license.
AgentVerse OS
AgentVerse OS turns a single Ubuntu server into a personal cloud with a real desktop in the browser, built for a developer and their AI agents. You work in a windowed desktop with a taskbar, start menu, and widgets for system monitoring, clock, news, weather, and projects, and the same desktop opens from a laptop, tablet, or phone while everything stays on the server. Each project gets an isolated Incus container with Docker inside, its own network and gate, plus VS Code, a terminal, files, and git in the browser. The Agents app runs Claude Code, Codex, Gemini CLI, pi, and Antigravity inside the workspace, with permission prompts you approve from any device, scheduled routines, model menus, conversation search and export, and a ledger of what each session spent. When you close your laptop the agents keep working, and you pick the conversation up later exactly where it stopped. A built-in store merges the Runtipi, Coolify, and Umbrel catalogs into about 945 installable apps with guided setup, credentials shown in the app card, snapshots, and rollback. Projects request capabilities such as storage.s3, llm, or notify instead of hardcoding addresses, scheduled ZFS snapshots feed a restic backup repository, and access arrives only through your Tailscale network with real certificates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Revel
Yoga studios, comedy clubs, choirs, and bands use Revel to sell tickets, memberships, and season passes from their own server with no platform fee. Studios and clubs sell monthly or yearly memberships through Stripe and offer series passes that cover a class pack, a course, or a season, with wallet cards that a door scan verifies. Venues design seat maps with sectors, individual seats, and accessible seats, and buyers pick seats on an interactive map while the seats are held at checkout. Bands and DJs sell their own shows with no promoter in between, set pay-what-you-can tiers, open presales to invitation-link holders, and export every buyer's name and email. Communities that vet who comes screen requests with questionnaires reviewed automatically, manually, or both, and keep private guest lists, invitation-only events, and a fuzzy-matched blacklist. Buyers check out a multi-tier cart without an account, using discount codes and fixed-price, free, or pay-at-the-door tiers. Tickets arrive as QR PDFs or Apple Wallet and Google Wallet passes, and door staff check guests in by scanning. Organizers run waitlists with time-limited offers, announcements, reminders, and a Telegram bot for RSVPs and invitations. Revenue and VAT reports export as XLSX or PDF, and VIES checks buyer VAT IDs. The web app speaks English, German, Italian, French, Spanish, and Portuguese. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
NUT WebGUI
When the power blinks at 3 a.m., NUT WebGUI is the page that tells you whether the UPS in the closet is coasting or dying, without a serial cable in sight. Point it at one or several Network UPS Tools servers and it polls charge, load, input voltage, and estimated runtime, refreshing critical status every couple of seconds while background variables update on a calmer thirty-second cadence. The dashboard renders device cards, gauges, sparklines, and a topology view of how units chain together, and it stays readable on a phone when you are standing in front of a humming rack. Authorized users can issue instant commands, set variables, or trigger a forced shutdown from the browser, while everyone else gets a strictly read-only view. A JSON API under /api serves device lists, variables, and instant commands to your own scripts, health and readiness probes fit container orchestrators, and OpenMetrics output feeds Prometheus without extra exporters. The whole thing is a single small binary that runs happily on a Raspberry Pi, an old ARM board, or a RISC-V box, reads one TOML file, and supports multi-user sign-in with scoped API keys when you share it with a team. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Jetlog
A personal flight logbook you host yourself, Jetlog draws every route you have flown on a pannable world map and turns the totals into charts. The home page opens with counts of flights, airports, hours, distance, and countries above that map, where dots mark visited airports and lines trace each trajectory. Settings let markers and lines grow with visit frequency and shade the countries where you have landed. Logging a flight takes only two airports and a date. Type a flight number and press Fetch to pre-fill the origin, destination, and airline, and a utility links connection flights automatically. Duration and distance are calculated for you and stay editable, with an option to use airport time zones. The All Flights table lists route, times, duration, distance, seat, class, and airline with filters and configurable columns, and each flight opens a detail page with airport data, a route map, tail number, and aircraft. A Statistics page charts flights per month, cumulative distance, most visited airports, most common airlines, ticket class, and seat for any time frame. History arrives through MyFlightRadar24 or custom CSV imports and leaves as CSV or iCal. Family members can share one install with separate logbooks, an admin manages the accounts, and the responsive layout works on a phone at the gate. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.
CaddyUI
Providing an intuitive control plane for modern reverse proxy infrastructure, CaddyUI enables system administrators to manage proxy hosts, automated TLS certificates, and traffic routing without hand-editing configuration files. Operators can create and adjust reverse proxy destinations, URL path rewrites, custom headers, and redirection rules using structured forms that validate against the proxy engine before saving. The platform coordinates automatic ACME certificate requests and renewals, displaying live certificate expiration timelines, validation stages, and internal self-signed certificate authority options for local network services. Fleet management tools synchronize proxy rules across multiple distributed server instances, preventing configuration drift across staging and production clusters. Automated post-deployment health checks verify upstream endpoint availability, HTTP status codes, and latency thresholds, instantly rolling back to the previous configuration if an expectation fails. An integrated observability suite delivers real-time visitor traffic analytics, geographic maps, HTTP response code breakdowns, and single-click client IP blocking to counter malicious probing attempts. Administrators can schedule automated database backups, configure multi-user access with role permissions, and integrate CrowdSec threat intelligence to protect backends. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
BitRouter
BitRouter is a context-aware LLM router that learns which model delivers the cheapest successful outcome per workflow step, cutting agent costs by up to 80% while maintaining 96% quality versus all-frontier baselines. Point any agent runtime at http://localhost:4356 with a one-line OPENAI_BASE_URL change and BitRouter routes to OpenAI, Anthropic, Google, Groq, DeepSeek, Mistral, Moonshot, MiniMax, Nvidia, and any OpenAI-compatible endpoint simultaneously, normalizing authentication, streaming, and cross-protocol translation between wire formats. The act-observe-evaluate-learn loop traces every hop with cost, tokens, and latency attribution, scores each decision against a versioned policy-lock.yaml, then tightens routes automatically with no LLM judge in the path. Native MCP gateway auto-discovers tools from connected servers and makes them routable and governed alongside model calls. Agent Client Protocol integration enables the TUI to manage Claude Code, Codex, OpenCode, OpenClaw, Gemini, and Copilot sessions in real time with inline tool-call approval and live streaming. Built-in guardrails inspect, redact, or block risky content before requests leave your network. Virtual keys scope API access per agent or user without exposing upstream credentials. Per-agent spend caps and loop guards contain runaway cost automatically. Multi-account failover reroutes mid-run so rate limits never re-pay completed work. Ships as a single Rust binary via npm or Cargo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Rackpad
Every cable, switch port, VLAN, and rack unit in a homelab or small server room gets a documented place in Rackpad, a self-hosted inventory and operations workspace. Rack elevations show mounted gear, including paired half-width appliances. Switch-panel port maps and aggregate ports show what is patched where. Cables carry type, length, and color, editable in bulk. VLANs, subnets, DHCP scopes, reservations, and zones sit in one Networks workspace, with gateway and DNS protection and a mismatch review for IP assignments. Storage topology follows drives, bays, and pools that span several devices. Wi-Fi controllers, access points, hypervisor hosts, and virtual machines have pages of their own, and Proxmox and Hyper-V hosts can be imported after review. Discovery scans a subnet or any CIDR and stages every finding in an inbox. Per-device checks over ICMP, TCP, HTTP, HTTPS, and SNMP raise alerts by email, Discord, or Telegram. Everything feeds a movable topology map. Markdown runbooks attach to devices, and an audit log records every change. Admin, editor, and viewer roles control access, and OpenID Connect login is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
MIND
Unlike a calendar alert that rings on one phone, a MIND reminder reaches any of 100+ services, including email, Pushbullet, BlueSky, Cisco Webex Teams, and SMS gateways, from a self-hosted reminder app that you control. Normal reminders fire with second precision once or repeat every few days, once a year, on chosen weekdays, or on a custom cron schedule, while static reminders wait for a button press, so a single tap can tell the family that you are running late. Templates store colour, title, services, and text for fast creation, and the colour-coded library can be searched and sorted, with each reminder enabled, disabled, or tested on demand. Time zone changes, including daylight saving shifts, are accounted for, and sends that fail on a connection error are retried every two minutes until they succeed. Several users can share one instance: the admin panel handles accounts and registration, login lifetime, reverse-proxy URL prefix, debug logs, and scheduled database backups that can be exported and imported, and sign-in supports two-factor authentication. A documented REST API covers reminders, templates, notification services, and static triggers, and the web interface adapts to phone screens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
dayGLANCE
Instead of locking your daily schedule inside proprietary cloud calendars, dayGLANCE offers a privacy-first visual time-blocking planner that syncs directly with your own WebDAV server, Nextcloud instance, or Obsidian vault. Drag tasks from a prioritized Smart Inbox onto an interactive 24-hour timeline, resize blocks as priorities shift, and carve out recurring energy-tagged Frames for deep work or administrative batches. The live Glance panel highlights your current commitment, remaining free time, and daily routines, then transitions into GLANCEahead each evening to preview tomorrow's start time, deadlines, and total committed hours. Switch between multi-day, single-day, weekly, and monthly layouts, or launch the fullscreen Day Dial to view your schedule, solar daylight arc, and watch-style progress complications on a secondary wall display. Long-term work stays organized inside a Goals and Projects hierarchy with duration-weighted progress bars, visual roadmaps, and dedicated hyperGLANCE focus workspaces that pair a Pomodoro timer with project notes and subtasks. Bidirectional Obsidian synchronization reads and writes markdown daily notes and wikilinked tasks directly, while optional bring-your-own-key AI assistants and encrypted backups keep your productivity workflow completely under your control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Reconner
Hunting for the hole is only half the job, because a scanner alert nobody believes wastes more time than the bug itself. Add a domain, CIDR, or bug-bounty scope and Reconner builds the map first: passive and active subdomain enumeration, live HTTP probing and fingerprinting, JavaScript analysis that digs endpoints, secrets, and API keys out of bundles, plus parameter and hidden-param discovery. Then it attacks what it mapped with a context-aware engine covering reflected, stored, and DOM XSS, SQL, NoSQL, SSRF, IDOR, LFI, SSTI, XXE, injection, and open redirects, and every candidate has to survive differential, out-of-band, or control-based proof, re-verified before it is ever reported. Blind issues are not dropped either: OAST callbacks catch out-of-band SSRF, RCE, SQLi, and SSTI that never respond inline. Networks get the same treatment, with port scanning, service detection, network-CVE checks, and IP-camera auditing. Findings land in a live dashboard streamed over WebSocket, with an attack-path view, coverage ledger, monitoring diffs, and HTML, Markdown, and PDF reports, while Telegram can alert you and even start, stop, or resume scans remotely. Run it only against assets you own or are authorized to test; behind a VPN and TLS it becomes your private proving ground. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.