HAProxy Cluster Manager puts a web console on top of HAProxy, so you publish services, issue certificates, and cluster nodes from forms instead of hand-editing haproxy.cfg. Publishing a service takes two inputs, the public URL and the backend address, and the wizard builds the frontend, backend pool, host condition, routing rule, HTTPS listener, certificate, and HTTP redirect, with a preview of the exact configuration before anything applies. Every change is rendered and checked with haproxy -c before it is written, and a failed reload rolls back to the previous file automatically. Certificates come from Let's Encrypt through acme.sh, using HTTP-01 or DNS-01 with about 190 DNS providers, and renewals reload HAProxy and push the new certificate to every node on their own. Any number of nodes share one virtual IP through Keepalived: configuration and certificates sync between them, only the node holding the address is editable, and the dashboard flags split brain, an unclaimed virtual IP, or a node running stale configuration. You can gate services behind basic sign-in or OIDC single sign-on enforced by HAProxy itself, watch traffic statistics and logs, take transition alerts by email, Pushover, or webhook, and expose Prometheus metrics and Home Assistant entities. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Running a Jellyfin or Emby server usually means a dozen open tabs; JellyGlance folds your whole media server into one screen you can leave open on a wall. Live sessions show who is watching what, from where, on which client, with direct play or transcode state, codec, bitrate, subtitles, and progress for every stream. Playback history accumulates in its own database, so statistics survive even when the media server forgets: top movies, series, libraries, clients, and users, watch-time trends, activity heatmaps, and weekly, monthly, and yearly recaps rendered as shareable cards. The home dashboard arranges by drag and drop, with presets, density controls, themes, kiosk mode for a wall display, and alert rules. Recently added shelves group by library, while library views surface totals and metadata gaps. Jellyseerr and Overseerr requests appear with poster cards, requester context, and admin actions, and the release calendar pulls upcoming titles from your *arr apps beside the queues of your torrent and Usenet clients, stalled items included. Wizarr invites, Tdarr transcodes, and Maintainerr cleanup connect from the same integrations area. Notifications travel by webhook, Discord, Gotify, and email newsletters, backups export to a plain folder, and sign-in spans local accounts, Jellyfin Quick Connect, and OIDC. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every movie, series, anime, manga, book, game and album you finish deserves a line in one diary, not seven accounts on seven tracking sites. Media Journal keeps separate lists for each of the seven media types, and every entry carries your status, episode or page progress, rating and private notes. Rate on the scale that fits how you think: five stars, 1 to 10, 1 to 100, or simple faces. Group anything into collections, mark favorites, and watch your home page fill with stats, recent activity and your latest collections. The Discover page surfaces trending and popular titles, and built-in search pulls metadata and artwork from TMDB, IGDB and other providers once you add your free API keys. A community page lets everyone on your instance post thoughts and updates about what they watched, read or played, and a calendar plus history views keep your year in media organized. Saved songs play through the built-in YouTube music player while you browse, and automatic checks flag sequels and new seasons of things you already track. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your want-to-read shelf and your audiobook library finally talk to each other, so the next book you finish can trigger the hunt for the one after it. Dewarr syncs Goodreads shelves, CSV exports, custom public lists, and Hardcover lists, then watches them for new additions worth listening to. Connect Audiobookshelf or Grimmory and it knows what you already own, importing finished downloads into verified library folders instead of leaving files stranded in a downloads directory. Follow authors and series to catch future releases, with back-catalog review, filters, and exclusions before anything is grabbed, including release-day acquisition for titles you are waiting on. When you approve auto-download, it searches MyAnonamouse, Prowlarr, and AudiobookBay, ranks sources by your format, size, and seed preferences, and hands transfers to qBittorrent. Multi-file MP3 releases come back as one chapterized M4B, a chapter per file, ready for your player. The discovery page personalizes shelves with followed lists, award collections, trending books, and new releases. Household members get individual accounts, reading lists, and permissions, with sign-in through OpenID Connect providers or Plex. Notifications for grabs, imports, and digests go out over Discord, ntfy, Apprise, or plain webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Drop a hard drive's worth of comics, e-books, and audiobooks into folders, point Kumiho at them, and the whole collection becomes a library you can browse and read from any browser. The scanner walks nested folders recursively and treats the folders that actually hold pages or files as series, so an existing collection works as it is, with no metadata matching ritual before the first read. Comics and manga open in a responsive viewer built for the format: page turning on a desktop, continuous webtoon scrolling on a phone or tablet. E-books in EPUB, PDF, and TXT open in the same library, while archives in ZIP and CBZ are read directly without unpacking. Audiobooks get a real player, with a chapter list, resume playback that remembers where you stopped, progress tracking, bookmarks, and a sleep timer for listening at night. A series folder can even carry its own soundtrack: an MP3 whose filename matches starts playing as background music while you read. Everything runs from one lightweight Go server in a single Docker container, storing its database and configuration in mounted volumes, so the library sits comfortably on a small VPS next to the files it serves. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

100% portability is Nanote's one non-negotiable principle as a self-hosted note-taking app. There is no database - notebooks are plain folders and notes are plain Markdown files on your filesystem, so the same notes remain fully manageable from a terminal, Notepad, or any other editor, and walking away from Nanote costs nothing because your data was never in a proprietary format to begin with. Built with Nuxt and TypeScript around the Milkdown editor, it layers modern conveniences on that plain-file foundation: fast content search across all notes using OS-optimized tooling (ugrep), native Markdown rendering, image and file attachments, and a mobile-friendly layout for reading and editing on a phone. Clever remark directives make plain text interactive - typing ::file inserts an inline upload picker, while ::today, ::now, and ::tomorrow expand to live dates and times. A fully typed REST API with validation covers automation, and access is protected by a configurable secret key. Deployment is one container with three env vars: paths for notes, uploads, and config, all bind-mountable so your Markdown lives wherever you want it - including inside an existing sync setup. AGPL-licensed and actively daily-driven by its author.

Docker Updater puts you back in charge of container updates: it watches your registries for newer images, and nothing updates until you approve it, so no database restarts itself at dinner. Polls run on a schedule you set, and each container card shows the newer image waiting before anything is pulled. The check costs nothing: it compares the digest your container runs against the registry manifest without pulling a byte, across Docker Hub, GHCR and other Bearer-token registries. Read the last five GitHub releases for an image before committing, update one container or a batch, and watch the pull percentage, layer count and recreation step stream live on the card. If the new container fails to start, the old one returns automatically, and you can keep a backup even after a clean update. Not ready? Defer an update for 7, 14, 30 or 90 days, or indefinitely, and it leaves your notifications alone until then. Several Docker hosts join the same dashboard over SSH or TCP with health indicators, and Compose stacks restart together so services find new addresses. Notifications arrive through an auto-generated ntfy topic or your own Apprise URL, every update keeps a persistent log, and a reclaimable-images view shows what disk space old images hold. The dashboard serves on port 9090 in English or Simplified Chinese, with optional login. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Marfa is a data layer you run yourself, where your notes, tasks, reading, and records live in one typed store that any app, script, or AI agent you allow can read and write. You decide what kinds of things you keep and how they connect, and the server checks every write against that structure, so a task, a book, and a person stay linked instead of scattered across five apps. Connectors pull in what already lives elsewhere, from GitHub repositories and issues, Todoist tasks, Readwise highlights, and RSS feeds, each writing under its own type with its own key. Keys are scoped, so the script that imports your reading list can never touch your tasks, and every change flows back out through a live event stream and full-text search. The marfa command line writes and reads from scripts and agents, the TypeScript SDK builds web apps on the same API, and the Swift SDK keeps an offline working copy on your devices that syncs its writes when your instance is reachable again. A folders command mirrors your notes as plain Markdown files on disk. Everything sits in one SQLite database and a folder of files on your server, with container deployment that streams backups to your own bucket. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Tag a Docker container with two labels, and AutoXpose turns it into a published service with a DNS record, a reverse proxy route, and HTTPS, without you opening a single provider dashboard. From the web dashboard you connect one of six DNS providers, Cloudflare, Netlify, DigitalOcean, Porkbun, Aliyun, or Tencent DNSPod, and point it at the Nginx Proxy Manager or Caddy instance you already run. It watches your containers continuously after that: a new label creates the record, propagation is verified before the service shows as live, and removing the container removes its public entries too. Auto-expose mode publishes containers the moment they appear, while manual mode stages them in the dashboard for approval first. Color-coded service tags sort what you run into web, database, and media groups at a glance, and dashboard warnings flag misconfigurations before they become broken links. Nginx Proxy Manager access lists attach by label, so an admin panel stays reachable only from the networks you trust. When containers vanish, orphaned cleanup hunts down the stale DNS records and proxy hosts they left behind. Settings and state live inside the same single container, so the publishing pipeline for a homelab or a small fleet stays one compose service you can back up as a unit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When the internet goes away, your library does not have to: Zimi serves Kiwix ZIM archives of Wikipedia, books, videos and forums through a rich web interface, with one search box querying every archive across more than 100 million articles. Each content type gets its own app: Zimipedia for wikis, the Dictionary for Wiktionary, Bookshelf for books, ZimiTube for video, ZimiExchange for Q&A, Reddot for subreddits and offline street Maps. Bookmarks, lists, likes and highlights live in every app and sync across devices when you sign in, and any article can switch into whichever language edition you hold. The library manages itself: browse the Kiwix catalog of over 1,000 archives, download with one click, let auto-updates keep editions fresh, and seed downloads over BitTorrent with a ratio cap you set. Zimi servers on the same network find each other and pass archives at LAN speed, and one offline switch turns off every internet-bound feature for air-gapped rooms. You can also make your own ZIMs from a web page, a whole site, a video playlist or a folder of files. Access ranges from public to sign-in only with per-archive allowlists, and the JSON API plus MCP server let AI agents search the same library. Docker runs Zimi on port 8899 with your ZIM files and config mounted as volumes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Movie night should not depend on everyone pressing play at the same second; SyncWatch runs your own watch-party server so friends in different places watch the same frame together. The host controls play, pause, seeking, and playback speed for the whole room, and late joiners or drifting clients are corrected back to the shared position automatically. You build the program from uploads or direct HTTPS media links, with subtitles, audio, images, and documents handled in the same library. Rooms can be permanent or temporary, protected by passwords and member limits, with host, admin, and permission-group control over who may operate playback. Between scenes, people talk through public and private chat, on-screen danmaku comments, emoji, voice messages, or full-room voice. Anyone can share a browser tab, window, desktop, or phone screen into the room, so a clip, a game, or a presentation becomes the shared screen. The server also keeps friends, notifications, online presence, bans, registration approvals, and an operations log, so a private community can run itself without a platform account. Uploaded media is analyzed and thumbnailed automatically, with browser-compatible versions generated for awkward formats. Backups, data export, a recycle bin, mail verification, and network diagnostics round out the admin side. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Flowplan puts your team's documents, databases, whiteboards, handwriting notebooks, and daily journal into one self-hosted page tree, so the work lives in a single place you control instead of five subscriptions. Write in a block editor that stays out of the way, and when a number appears mid-sentence, type the calculation and press Tab to drop in the result, or graph functions and vectors in 2D and 3D without leaving the page. The same records can be viewed as a table, board, calendar, timeline, gallery, list, feed, chart, form, or sprint board, with relations, rollups, and formulas tying them together, and projects get ticket numbers, sprints with burndown, and automations on top. Brainstorm on whiteboards with sticky notes, mind maps, and voting; keep a journal page per day with templates and an optional PIN lock; and write by hand in notebooks with lined, grid, or Cornell paper, annotate PDFs, and sketch inside documents with a pressure-sensitive pen. Teammates edit together with live cursors, comment in inline threads, and share single pages with guests through password-protected, expiring links, while permissions reach down to a single record. AI is off until an admin enables it, per feature and per person, and it can run entirely on your own hardware or answer questions about the workspace with links to its sources. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

TLSPROXY puts automatic Let's Encrypt TLS in front of every service on your server, so many names can share one port while each backend gets exactly the encryption treatment it needs. Terminate TLS and hand plain text to a local service. Pass raw TLS straight through when the proxy should see nothing. Or terminate and re-encrypt towards a TLS backend, with client certificates checked on the way in. QUIC and HTTP/3 connections terminate here too, and Encrypted Client Hello keeps even the handshake private. Certificates arrive and renew by themselves through http-01 and tls-alpn-01 challenges, PROXY protocol headers preserve real client addresses, and SNI routing with round-robin balancing spreads names across backends. People get in with OpenID Connect, SAML, or passkeys; the same sign-in can mint short-lived SSH user certificates, and built-in certificate authorities manage client and backend credentials for you. Static sites can be served straight from disk, TPM-backed keys keep private material in hardware, and a built-in console shows what the proxy is doing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Five teammates sharing three AI subscriptions usually means a password in a group chat; SubLane replaces that with a gateway you host, where accounts are pooled and every person gets a managed key. Connect Codex, Claude, Antigravity, and Grok Build subscriptions once, by browser OAuth or credential import, and the gateway snapshots each account's quota windows and allowances so routing knows who still has room. Add API channels for OpenAI-compatible services alongside the subscriptions, then group everything into resource pools with model allowlists, conversation affinity, concurrency controls, and cooldown recovery for accounts that hit a limit. Each member receives a personal key scoped to one group, with its own expiry, rate and concurrency limits, and an allowance measured in tokens, internal dollars, or estimated quota share; keys can be paused or revoked without touching anyone else. Whatever the client speaks, the gateway answers: OpenAI Responses and Chat Completions, Claude Messages, and Gemini formats flow over HTTP, SSE, or WebSocket, independent of which subscription actually serves the request. Administrators watch per-member and per-model usage charts, activity heatmaps, and request diagnostics, bind a fixed outbound proxy to any account, and apply workspace content rules before dispatch. It all runs as one Go process with SQLite and an embedded dashboard, backed up and restored from the interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Kaleta is a business-website CMS where the page you edit is the page your visitors get, not a preview of it. The visual builder works on the live canvas: add sections, drag elements, edit text in place, and style every element separately for desktop, tablet, phone, and hover before you publish. Forty-six elements and forty ready-made sections cover pricing tables, timelines, before-and-after sliders, galleries, accordions, carousels, maps, and mega menus. Consistency comes from a design-token system: change one colour, font, spacing, or radius token and the whole site follows, with a WCAG contrast check on every colour pair and export in the W3C token format. Blocks you reuse become components edited once and updated everywhere, and each page carries its own search title, sharing image, and visibility, with the last twenty publications kept as versions. Moving in is a first-class feature: importers take WordPress exports including WooCommerce products and Polylang or WPML translations, plus Ghost, Blogger, Joomla, Drupal, and Webflow, creating a redirect from every old address so rankings survive. An optional AI assistant connected through MCP builds pages and handles chores only as drafts you approve. Forms, booking, enquiries, media folders with focal-point cropping, multilingual publishing, and GDPR duties such as automatic personal-data deletion are built in rather than bolted on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Small server, small monitoring. Statlite watches your applications and their host with a single binary that idles at about 15 MiB, so the observer never becomes the heaviest thing on the box. Point it at a Spring Boot Actuator endpoint and it polls health plus a fixed, curated set of Micrometer metrics: request traffic, latency, CPU, and runtime memory, all drawn as clean charts. Quarkus, Micronaut, and anything else that can answer a fixed JSON metrics profile can join the same dashboard. History lives in one local SQLite file, raw samples only, kept for 90 days by default, so yesterday's latency spike is still there when you go looking. The dashboard also watches the host itself: processor load, memory pressure, and filesystem capacity, including a warning before the metrics database fills its own disk. Restart detection tells you when an application bounced, and per-target Basic Auth support lets you poll protected Actuator endpoints safely. Configuration is one YAML file listing your targets and polling interval, friendly to systemd and Docker alike. Everything is deliberately scoped: no alert manager, no external service, no observability platform to operate. Just open the page and see whether your apps are healthy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

EveryOS gives the Linux server you already own a desktop it never had: open a browser and your machine greets you with windows you can move, snap, and stack, a dock, virtual desktops, widgets, and a launcher, all remembering exactly how you left them. Your files live in a private home with the usual folders, previews, a text editor, and a trash you can restore from, and plugging in a USB disk makes it appear on the desktop ready to mount. An app store installs self-hosted applications from catalogs and follows each deployment, later offering updates that keep your settings, rollbacks when one goes wrong, and backups of app data. The same workspace watches the machine itself: CPU, memory, disk, and network at a glance, systemd services and logs, available package updates, and a Docker view for containers and Compose projects. A real terminal opens in the browser under your own Linux account, Home Assistant arrives as a panel and desktop widgets with its tokens kept on the server, and an AI assistants app can find or install a local model server such as Ollama and chat with it privately. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

RocketplaneIO is a self-hosted AI SRE platform that gives Kubernetes clusters zero-instrumentation eBPF observability plus a copilot capable of safely diagnosing and fixing issues without your telemetry ever leaving your infrastructure. Point it at any cluster, and an eBPF DaemonSet starts capturing HTTP, gRPC, SQL, Redis, and Kafka spans across every service, including compiled binaries, with cross-service context propagation and no code changes required. The live service map draws itself from actual network traffic, matching technology logos from container images and coloring each node's health from RED metrics. Every log line sits two clicks from its parent distributed trace, and a PromQL query engine, embedded from the real Prometheus evaluator, runs over ClickHouse for long-term metric retention. The complete Kubernetes inventory (Services, Ingress, ConfigMaps, network policies, persistent volumes, CRDs) syncs continuously and is searchable alongside traces and logs. When the copilot identifies a problem, it picks from a catalog of roughly 30 risk-classified safe actions; each action verifies its preconditions, captures a before-state snapshot, executes, checks the result, and rolls back automatically on failure. Disruptive operations pause for explicit human approval before proceeding. An MCP endpoint exposes the identical guardrailed toolbox to external AI agents, so Claude Code or Cursor can operate the cluster through the same safety boundary the browser copilot uses. Complex remediations compose as searchable, forkable Starlark workflows that compile deterministically at save. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.