Muxarr cleans up your media library by stripping out the audio and subtitle tracks you will never use, so players stop offering twenty subtitle options and the wrong dub. Tell it which languages you actually watch and read, and it keeps those tracks while dropping commentary, foreign dubs, and redundant subtitles. Nothing is re-encoded: video and audio are copied as they are, so quality is identical and a large film finishes in about a minute instead of hours. Spare audio tracks alone often free ten to thirty percent of a file, which adds up quickly across a big library. Profiles apply different rules per directory, so anime, family films, and western shows can each keep different languages, with priority ordering, per-language limits, and fallback rules like English subtitles only when German ones are missing. Regional variants are understood, distinguishing Quebec French from France French or Latino from Castilian Spanish. When Sonarr or Radarr import something new, a webhook sends it straight to Muxarr, and original language detection makes sure a foreign film keeps its real soundtrack. Track names get cleaned of encoder tags, default and forced flags are fixed, and every output is validated before it replaces the original. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Reloops is a self-hosted creative asset workspace where teams keep every video, design, PDF, audio file, and live website in one library and collect feedback on the files themselves instead of in scattered email threads. Reviewers click anywhere on an image to pin a note to that exact spot, and on video the comments attach to the precise frame, so "fix this bit" always points at the bit in question. Every upload becomes a new version on the same asset, older cuts stay available for side-by-side comparison, and approvals are recorded on the file so nobody ships the wrong export by accident. Clients never need an account: send them a share link or a branded collection and they can watch, comment, and sign off as guests. The library searches the way people remember work, because each asset carries generated descriptions, tags, and metadata filters, so "the approved homepage with the blue button" actually finds something. Day to day, assignments and review queues keep feedback moving, while scoped API keys let agents such as Claude, OpenClaw, Zapier, and n8n upload new versions, post comments, update statuses, and manage share links inside the same workspace. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Moneat is the open-source observability platform that unifies error tracking, session replay, performance monitoring, logging, uptime checks, synthetics, product analytics, and AI observability into a single self-hosted application — replacing Sentry, Datadog, and Statuspage with one deployment. The Sentry SDK compatibility layer accepts data from @sentry/browser, @sentry/node, @sentry/react, @sentry/nextjs, sentry-sdk for Python, sentry-kotlin, sentry-java, sentry-android, sentry-cocoa, sentry-go, sentry-ruby, and Sentry.NET by updating one DSN endpoint. Datadog Agent compatibility redirects existing fleets by setting dd_url, and native OpenTelemetry OTLP ingestion accepts logs, traces, and metrics from any exporter or Collector. Error monitoring groups exceptions with smart deduplication, session replay records DOM-based user interactions linked to errors, distributed tracing visualizes transaction and span breakdowns with live service maps, and continuous profiling renders flamegraphs in pprof, JFR, and Sentry formats. Uptime monitoring runs HTTP, TCP, and ping checks with public status pages, while synthetics executes API tests, multi-step workflows, SSL checks, and DNS probes. Custom dashboards support drag-and-drop widgets with Grafana import, product analytics provides funnels and retention cohorts, release tracking surfaces crash-free rates with source map upload, and AI observability traces LLM calls end to end. Built on Kotlin and Java with ClickHouse for analytical storage, PostgreSQL for relational data, and Redis for caching, deployment uses Docker Compose with an interactive installer automating secrets and service orchestration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Nodyx puts forum threads, real-time chat channels, peer-to-peer voice calls, collaborative whiteboards, and a drag-and-drop homepage builder behind one installation script on hardware you control. Create categories and threaded discussions that search engines index, then switch to Socket.IO-powered chat rooms where replies, pins, link previews, and @mentions update instantly. Voice channels connect participants through WebRTC mesh networking, keeping audio between peers without routing through third-party servers; a Rust-based STUN/TURN relay handles restrictive NATs so home-server deployments work without port forwarding. The NodyxCanvas layer adds CRDT-synchronized collaborative drawing with 11 tools, voice-aware cursors, and board-scoped chat, all persisted to PostgreSQL snapshots. Build your community's landing page with a visual editor that places widgets across 11 layout zones, then extend functionality by dropping third-party widget archives into the admin panel or authoring your own with the plain-JavaScript Widget SDK. Private conversations stay end-to-end encrypted with ECDH P-256 key exchange and AES-256-GCM ciphers where the private key never leaves the browser, and the OctoGuard module automates moderation with five matcher types plus configurable actions from muting to banning. For streamers, a native Streamer Hub bridges Twitch chat bidirectionally, provides a drag-and-drop soundboard, generates OBS browser-source overlays, and offers a mobile Stream Deck. Instances discover each other through a gossip protocol, forming a decentralized network without central coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Dopbase keeps your application secrets out of scattered .env files and stores them, encrypted one by one, in a single self-hosted server you run as one file. You organize everything by project and environment, so the payment service has its own development, staging, and production values, and the same key can hold a different encrypted value in each place. Every secret is an individual record that can be updated, revealed, versioned, or rolled back without touching the others, and reading metadata never exposes a value. When an application starts, one command asks the server for an environment and injects exactly those values into the process, removing its own token before the child process runs. People sign in to the Admin UI with roles for root, admins, members, and even AI agents that can read metadata but change nothing. CI jobs and servers use runner tokens scoped to a single environment, so a staging credential can never read production. You can import and export .env files, edit secrets as a table or as raw env text, connect single sign-on through providers like Keycloak, and read an audit history of checks, reveals, and changes. Full-instance backups and the master key stay under your control on your own disk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Built atop the TauricResearch TradingAgents framework with nearly 100,000 GitHub stars, TradingAgents GUI transforms a CLI-only multi-agent LLM stock analysis pipeline into a polished web application accessible at localhost:5000. The system deploys twelve specialized AI agents — fundamental analysts, sentiment experts, technical analysts, bull and bear researchers, a trader, risk management team, and portfolio manager — who collaboratively debate market conditions through structured LangGraph workflows before producing a final BUY, SELL, or HOLD recommendation. The interface supports ten LLM providers including OpenAI, Anthropic, Google, OpenRouter, DeepSeek, Ollama, xAI, Qwen, GLM, and MiniMax, with a first-run wizard that auto-detects configured API keys and tests connections. A live pipeline visualization shows each agent's status with real-time progress bars, while the tabbed output area separates Live Feed, Reports preview, and Tool calls into dedicated panes. The three-pane Reports tab provides searchable indexing, table-of-contents navigation, and export to Markdown, HTML, or PDF formats. Report length control across Concise, Standard, and Comprehensive modes saves up to 50% on token costs. Multi-session chat allows pinning past reports as grounding context with live token counting and context-window warnings. Three built-in themes — Terminal, Modern, and Bloomberg — persist per browser. Docker Compose deployment maps port 5000 with persistent report storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Shell Online lets a terminal session running on your own computer follow you to any browser, so your coding agent keeps working while you are away from your desk. Prefix the command you already run, such as shell claude, shell codex, or shell opencode, and your terminal prints a link, a password, and a QR code that open the same live session on a phone, tablet, or another computer. You watch output as it happens and reply to prompts from wherever you are, and closing the browser leaves the process running until it exits on its own. Inviting a teammate takes the same link: share it read-only so they can watch without typing, or let them type into the session with you. Terminal traffic is end-to-end encrypted by default, file access stays off until you deliberately expose a chosen directory, and a scoped MCP grant can let another agent inspect or steer a session for a limited time. With an account, linked machines and their sessions gather in one web app with team sharing. The relay the sessions pass through can run on your own server with the standalone Docker deployment, pointed at by the unchanged CLI. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Watchtower puts AI-driven security assessments into one web console, where sessions probe your attack surface while every request, finding, and piece of evidence is captured as it happens. The AI session console follows the attack surface, session progress, tool calls, and findings as an assessment runs, so you can watch an engagement unfold instead of reading a log afterwards. A built-in proxy workflow records HTTP and HTTPS traffic history with highlighted patterns, and any captured request can be sent to the Repeater for editing, replay, and response comparison. Mobile work is covered too: connect phones over USB or wireless, capture app traffic separately from accessibility control, and import WeChat mini-program packages to configure an assessment session. A public vulnerability intelligence library can be searched by component, severity, and source and kept synchronized locally, giving assessments current context without sending your targets anywhere. Findings are managed by source, severity, and status, each linked back to its supporting evidence, and the report editor assembles them with a live preview, impact notes, and remediation guidance. The dashboard tracks assets, tasks, AI sessions, token usage, and runtime resources, and task admission is budgeted against physical memory so heavy scans do not starve the host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Homeio turns a Linux box into a desktop you open in a browser tab, with draggable windows, a dock, a lock screen, and a command palette sitting on top of your Docker apps, files, and disks. The App Store installs Docker Compose stacks from the CasaOS catalog or your own store sources, and each app's ports, volumes, environment variables, and compose file stay editable before and after install. Containers you started elsewhere still appear with live CPU and memory stats, streaming logs with keyword filters, and one-click restarts. The file manager uploads with progress, previews images, audio, video, and PDFs, edits text in a built-in code editor, mounts USB drives and SMB shares, and shares folders over Samba. A real login shell lives in the Terminal window, with exec access into any container, so routine fixes never need a separate SSH client. Cron-style scheduled tasks restart apps, pull images, or run backups on a timer, and scheduled archives of the database, files, and compose stacks restore from the same interface. Tailscale puts the whole desktop on your private network, while Cloudflare Tunnel can publish a single app on a public hostname with its DNS record created for you. Live metrics stream to widgets and the status bar, and notifications flag crashed containers, filling disks, and failed tasks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The social preview cards shown when links hit Twitter, LinkedIn, Slack, or Discord, generated on the fly: Oxigen is a small Go service for dynamic Open Graph images, no designer required per page. Instead of exporting static images per page, you compose a card once and drive it with parameters: title, author, website, logo, background image, and background dimming all arrive as URL query arguments, so your og:image meta tag simply points at the Oxigen endpoint with the page's own values substituted in. Every blog post, product page, and doc gets a branded, correctly sized preview generated on the fly. A built-in web UI covers interactive composition - tweak the text and imagery, watch the preview update, copy the resulting URL - while the same rendering path serves programmatic API use from static site generators, CMS templates, or build pipelines. Rendering is pure Go using the gg 2D graphics library, freetype fonts, and the imaging package, built on the kyoto framework by that project's author. Deployment is one stateless container on port 80 with no database and no external dependencies, so instances scale and restart freely.

Fail2Ban quietly bans thousands of bots on a typical VPS and just as quietly keeps the whole story buried in a log file nobody reads, and Fail2Ban Report digs that story out into a dashboard you will actually open. Shell scripts convert each day of fail2ban.log into JSON, and the web interface lays every ban and unban on a searchable, filterable timeline you can slice by jail, server, or time window. Aggregated statistics for today, yesterday, seven days, and thirty days show which jails absorb the most attacks, while markers flag repeat offenders and escalating ban counts so persistent scanners stand out from one-time noise. Blocklists live per jail and per server as plain JSON, and ban or unban actions execute through UFW, giving you permanent bans that survive independently of jail restarts. Bulk actions handle whole ranges at once, with a pending state until the next sync applies them. Multiple servers feed one console through a pull-based HTTPS endpoint, so a fleet of small machines reports to a single pane without exposing SSH. Optional AbuseIPDB and IP-Info lookups add reputation and region context to any address. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Pageviews tell you someone arrived; Pug is an open-source product analytics platform that shows what people actually did next, across events, funnels, retention, and user flows. Capture events from browser, Android, Flutter, Node, Go, or Ruby SDKs into an ingestion pipeline that enriches each hit with geography, user agent, bot detection, and web attribution automatically. Identify and alias the users behind events, then open a profile to see traits, sessions, and the full activity history of a person. Build insights as trends, funnels, retention cohorts, segmentation, Sankey user flows, and top-K breakdowns, with filters and period-over-period comparison on every chart. A web analytics overview is generated from your events with visitors, sessions, pageviews, bounce rate, and traffic sources, requiring no tile wiring. The live view plots every current visitor on a real-time world map, down to the person and the event they just fired. Compose dashboards from insight and markdown tiles on a time-windowed grid that analysts rearrange without touching ingestion. Erase a person's events and profile on request to satisfy GDPR and DPDP data-subject obligations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every family recipe, bookmarked food blog post, and meal-prep formula stays organized inside Vanilla Cookbook, a self-hosted culinary library that converts volumetric measurements into precise gram weights and scales servings on the fly. Paste a URL or click the browser bookmarklet to scrape recipes from hundreds of cooking websites. Plain-text ingredient strings split automatically into structured quantities, units, preparation notes, and optional or to-serve badges. Home bakers switch effortlessly between US cups, imperial ounces, and metric grams across thousands of ingredient density profiles. Inline oven temperatures, fractions, and numeric ranges adjust automatically as serving counts change. Nutritional text parses into a structured per-serving breakdown, while integrated shopping lists, cooking logs, and equipment lists keep weekly grocery planning synchronized across desktop browsers and Progressive Web App mobile devices. Connecting an optional OpenAI, Anthropic, Google Gemini, Ollama, or LiteLLM endpoint unlocks AI fallback scraping for pages lacking Schema.org markup, automatic recipe translation, verbose direction summarization, photo-to-recipe extraction, and vector-based semantic search. Multi-user accounts, OAuth authentication, public recipe sharing links, and bulk import or export tools give households full control over their cookbook data. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Usulnet packs container management, Trivy security scanning, Nginx reverse proxy, scheduled backups, WireGuard VPN, firewall rules, and multi-node orchestration into a single 70MB Go binary with zero external runtime dependencies. Every module ships in one download with no paid tiers, no telemetry, and no edition gating. Container lifecycle management covers creation, start, stop, restart, pause, kill, and removal with bulk operations, real-time resource statistics, filesystem browsing, and settings editing. Trivy integration scans images and running containers for CVEs with severity scoring, generates SBOMs, and validates CIS benchmarks. The multi-node architecture supports standalone, master, or agent modes where agents connect over NATS JetStream with mTLS encryption, enabling remote Docker host management from a central dashboard. Reverse proxy configuration handles Nginx with automatic Let's Encrypt certificates, TCP/UDP stream proxying, access lists, and dead host detection. Backup operations capture container volumes and Compose stacks on configurable schedules with retention policies and full restore capabilities. A built-in application catalog provides 60+ one-click templates for common services. JWT license validation uses an RSA-4096 public key embedded in the binary, requiring no call-home and working entirely offline. For teams tired of maintaining separate tools for each infrastructure concern, Usulnet collapses the entire stack into a single point of management with Docker Compose deployment alongside PostgreSQL, Redis, and NATS.

Netra watches your network from the side, plugged into a switch mirror port, and turns everything it sees into a live picture of your traffic without ever sitting in the forwarding path. A single binary loads its eBPF collectors in the kernel, so aggregation happens before packets reach user space and multi-gigabit mirror feeds stay observable instead of dropping samples. The dashboard opens on totals, protocol share, and traffic trends, then lets you drill into flows by address, port, domain, or service, check which countries your traffic talks to on a world map, and read the internal topology as a live graph. Domains surface passively from TLS handshakes, public addresses are enriched with country and organization data, and heuristic detectors flag scanning, flooding, and single-host surges, pushing alerts to your team chat with an optional AI-written explanation. You can ask the built-in assistant questions about real recorded history, connect external MCP servers so it can call your own tools while it answers, and stream flows onward to Kafka for other consumers. History rolls into compressed columnar files on a schedule and stays queryable for a month by default. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Seven columns, one per day, hold your whole week of tasks in Will Be Done, and rebalancing a crowded Wednesday means dragging a card to Friday. Unfinished tasks keep their day and get a quiet yellow marker instead of piling into tomorrow as red overdue badges. The Today view narrows the screen to one day, and Stash holds the few tasks you want close at hand without picking a date. Projects get kanban boards with columns you define, such as Week, Month, Ideas, and Someday, and separate spaces keep work and personal planning apart. Tasks carry descriptions and checklists, and recurring tasks repeat daily, weekly, monthly, or yearly with custom intervals and end dates. Every device holds a full local database, so planning, completing, and rescheduling happen with no network at all, and changes sync across tabs and devices once the server is reachable. Vim keys such as h, j, k, and l move through everything, and a global quick-add shortcut in the Linux, macOS, and Windows desktop apps captures a task without leaving the window you are in. Todoist and TickTick imports bring existing projects along, and a token-protected HTTP API with OpenAPI docs lets scripts, cron jobs, and bots drop tasks straight into your stash. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

If your money is split across a bank app, a brokerage portal, and a half-abandoned spreadsheet, YAFFA, a self-hosted personal finance application, gathers it into one ledger with budgets, scheduled transactions, and forecasts. Record withdrawals, deposits, and transfers across unlimited accounts, and split a single supermarket receipt across categories so it lands in both Food and Household. Suggestions surface your most-used accounts and payees, and each payee's default category fills in automatically. Define rent, salary, or a loan payment once as a scheduled transaction; it appears on the dashboard calendar, enters with one action or records itself, and feeds the forecast. Import bank history from CSV or QIF files with rules for country- and bank-specific formats, and review every row before it is recorded. Optional AI document processing turns a receipt, invoice, or forwarded email into a draft transaction with payee, date, amount, and line items, using your own OpenAI or Gemini key and self-hosted Tesseract OCR for images. Accounts in different currencies roll up into your default currency using daily rates from the free Frankfurter service. Investments track gain and loss, with optional daily prices from Alpha Vantage. The dashboard summarizes accounts and upcoming schedules, the cash flow report can look ahead with a forecast, and Find Transactions filters history by payee, category, tag, or date. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Mitra is a self-hosted calendar that puts your tasks on the same timeline as your events, so planning a week finally happens in one place instead of two. Drag across empty grid space to make an entry, drag it to move it, and stretch its edges to resize it. Tasks without a date sit in the Planning tab with a due date and an estimate until you drag them into the week. Subtasks and dependencies draw as lines between entries. Availability shading lays your working hours under the grid so double-booking becomes obvious before it happens. Keep calendars inside Mitra with no account behind them, or connect the ones you already use: CalDAV, Google Calendar, Apple Calendar, Notion, Todoist, and Tempo all sync both ways, and published feeds arrive as read-only subscriptions. Lists sort, filter, and change many entries at once. Files attach to entries, guests reply, reminders land as push notifications, and a command palette drives everything from the keyboard. Claude, Cursor, and other AI tools can read and plan your calendars over MCP. Eight languages, right-to-left layouts, light and dark themes, phone install, and OIDC sign-in for several people round it out. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.