Docker Updater puts you back in charge of container updates: it watches your registries for newer images, and nothing updates until you approve it, so no database restarts itself at dinner. Polls run on a schedule you set, and each container card shows the newer image waiting before anything is pulled. The check costs nothing: it compares the digest your container runs against the registry manifest without pulling a byte, across Docker Hub, GHCR and other Bearer-token registries. Read the last five GitHub releases for an image before committing, update one container or a batch, and watch the pull percentage, layer count and recreation step stream live on the card. If the new container fails to start, the old one returns automatically, and you can keep a backup even after a clean update. Not ready? Defer an update for 7, 14, 30 or 90 days, or indefinitely, and it leaves your notifications alone until then. Several Docker hosts join the same dashboard over SSH or TCP with health indicators, and Compose stacks restart together so services find new addresses. Notifications arrive through an auto-generated ntfy topic or your own Apprise URL, every update keeps a persistent log, and a reclaimable-images view shows what disk space old images hold. The dashboard serves on port 9090 in English or Simplified Chinese, with optional login. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

TLSPROXY puts automatic Let's Encrypt TLS in front of every service on your server, so many names can share one port while each backend gets exactly the encryption treatment it needs. Terminate TLS and hand plain text to a local service. Pass raw TLS straight through when the proxy should see nothing. Or terminate and re-encrypt towards a TLS backend, with client certificates checked on the way in. QUIC and HTTP/3 connections terminate here too, and Encrypted Client Hello keeps even the handshake private. Certificates arrive and renew by themselves through http-01 and tls-alpn-01 challenges, PROXY protocol headers preserve real client addresses, and SNI routing with round-robin balancing spreads names across backends. People get in with OpenID Connect, SAML, or passkeys; the same sign-in can mint short-lived SSH user certificates, and built-in certificate authorities manage client and backend credentials for you. Static sites can be served straight from disk, TPM-backed keys keep private material in hardware, and a built-in console shows what the proxy is doing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Screenshot, copy link, done: that is the loop Flare is built to make instant on your own server. Connect ShareX, Flameshot, KDE Spectacle, or a plain upload script once, and captures land in a vault you control instead of a third-party host that deletes them next month. Files live in folders with nested structure, bulk moves, automatic tagging rules, and one share link per folder, while previews handle images, video, PDFs, and syntax-highlighted code without downloading anything. Search digs through filenames, dates, and text extracted from images by OCR, so the screenshot from three weeks ago is findable by what it says. Password-protect a sensitive file, keep another private entirely, or publish it with a rich embed that unfurls properly wherever you paste the link. An appearance studio restyles branding, color palettes, and share page layouts, upload profiles carry reusable defaults between browser and screenshot tools, and the extras round out the kit: a URL shortener with click tracking, a pastebin, storage quotas, invite links, and tokens with signed webhooks for your own integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Movie night should not depend on everyone pressing play at the same second; SyncWatch runs your own watch-party server so friends in different places watch the same frame together. The host controls play, pause, seeking, and playback speed for the whole room, and late joiners or drifting clients are corrected back to the shared position automatically. You build the program from uploads or direct HTTPS media links, with subtitles, audio, images, and documents handled in the same library. Rooms can be permanent or temporary, protected by passwords and member limits, with host, admin, and permission-group control over who may operate playback. Between scenes, people talk through public and private chat, on-screen danmaku comments, emoji, voice messages, or full-room voice. Anyone can share a browser tab, window, desktop, or phone screen into the room, so a clip, a game, or a presentation becomes the shared screen. The server also keeps friends, notifications, online presence, bans, registration approvals, and an operations log, so a private community can run itself without a platform account. Uploaded media is analyzed and thumbnailed automatically, with browser-compatible versions generated for awkward formats. Backups, data export, a recycle bin, mail verification, and network diagnostics round out the admin side. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Excaliself turns the Excalidraw canvas into your team's own whiteboard server, where every sketch, diagram, and flowchart lives in your database instead of a vendor's cloud. The home screen works like a file cabinet for drawings: nest them in folders, star the keepers, drag files between spaces, and find anything again by title or by the text inside the drawing. Share a link and teammates edit together in real time with live cursors and follow mode; links can stay members-only or open to guests who have no account at all. A shared Team space sits next to everyone's private space, and one team library holds the shapes and icons the whole group reuses. AI clients can join with a personal access token: Claude Code or Claude Desktop can search your drawings, read what a diagram says, and create new ones from shapes or a Mermaid flowchart. Accounts are invite-only, single sign-on covers Google, Microsoft, and any OIDC provider, and admins manage members, roles, and password resets from Settings. Deleted drawings rest in a trash folder for thirty days before they are purged, and everything auto-saves as you draw. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When the internet goes away, your library does not have to: Zimi serves Kiwix ZIM archives of Wikipedia, books, videos and forums through a rich web interface, with one search box querying every archive across more than 100 million articles. Each content type gets its own app: Zimipedia for wikis, the Dictionary for Wiktionary, Bookshelf for books, ZimiTube for video, ZimiExchange for Q&A, Reddot for subreddits and offline street Maps. Bookmarks, lists, likes and highlights live in every app and sync across devices when you sign in, and any article can switch into whichever language edition you hold. The library manages itself: browse the Kiwix catalog of over 1,000 archives, download with one click, let auto-updates keep editions fresh, and seed downloads over BitTorrent with a ratio cap you set. Zimi servers on the same network find each other and pass archives at LAN speed, and one offline switch turns off every internet-bound feature for air-gapped rooms. You can also make your own ZIMs from a web page, a whole site, a video playlist or a folder of files. Access ranges from public to sign-in only with per-archive allowlists, and the JSON API plus MCP server let AI agents search the same library. Docker runs Zimi on port 8899 with your ZIM files and config mounted as volumes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Hatchdoor gives your Markdown notes two front doors at once: a fast web interface for you, and an MCP endpoint where AI agents read and edit the very same vault. Point it at any folder of Markdown files, an existing Obsidian vault included, and it indexes everything into a disposable SQLite read model that rebuilds itself from your files if deleted. In the browser you browse folders, follow wikilinks that survive renames, explore backlinks and graph views, and search by keyword or meaning across every vault you mount. The live editor shows Markdown syntax only on the line you are editing and saves automatically, while concurrency checks refuse a save when the note changed underneath you. Agents connect with their own token and start read-only; turn writes on and Claude Code, Codex, Cursor, or Hermes can create, edit, move, and link notes through the same checked operations the interface uses. Saved queries in Obsidian's Bases syntax render as live tables, attachments preview inline, and optional git integration commits and pushes every change back to your vault's repository. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Linux Update Dashboard is a self-hosted web app that lets you check and apply package updates across a whole fleet of Linux servers from one browser dashboard, over SSH, with no agent installed on any managed machine. It discovers each server's package managers, operating system, installed packages, reboot state, and distribution lifecycle, then lets you refresh, upgrade selected packages, run full upgrades, autoremove leftovers, cancel running work, or reboot remotely while watching real-time command output stream into the page. Groups with health badges and explicit priorities organize fleets for clear overviews and ordered Upgrade All batches that run as waves across eligible systems. An encrypted SSH credential vault stores reusable passwords, private keys, and OpenSSH certificates with AES-256-GCM, and you can view or edit repository source files through sudoedit with diff review and activity history. Cron-based schedules automate refreshes, updates, autoremove, reboots, and notifications for chosen systems, while alerts go out by email, Gotify, MQTT, ntfy.sh, Telegram, or webhooks, with Home Assistant MQTT discovery entities for every server. Sign-in supports passwords with optional TOTP, passkeys and WebAuthn, OpenID Connect SSO, and API tokens, and the interface speaks ten languages with dark and light themes and custom branding. Because this tool can run commands on your servers, keep it on trusted networks behind TLS, a reverse proxy, or a VPN. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A federated bookmark manager written in Rust: Ties (formerly linkblocks) is your own small corner of the web for saving, organizing, and sharing good pages, connected to the fediverse over ActivityPub. Instead of rigid folders, bookmarks live in arbitrarily nested lists that link together into a knowledge graph. Saved pages are fetched, converted to a readable archived version, and stored in the database, so full-text search covers titles, URLs, and the actual page text - and the content survives if the original disappears. The federation model is deliberately anti-viral: there is no global timeline and no algorithmic feed. You publish public lists for anyone, follow users whose taste you trust, and mark trusted users whose bookmarks become part of your search range - extendable to trusted-users-of-trusted-users for a wider net. Public bookmarks post to Mastodon timelines, and WebFinger lookup makes your handle discoverable across fediverse platforms. Operationally it is about as light as web software gets: a single binary with all assets baked in, integrated TLS so it can run without a reverse proxy, PostgreSQL as the only dependency, OIDC single sign-on, and a bookmarklet for one-click saves. Note the project is alpha: single-user instances only, and all data should be considered public. AGPL-3.0 licensed, built with Rust and htmx.

Papyra gives you a calm, private home for notes that stays as easy as sticky notes while quietly linking everything together like a wiki. Cards pin, colour, and drag into place on your desk, and opening one drops you into an editor where slash commands insert headings, checklists, tables, or maps without leaving the keyboard. Type two brackets to link another note, and backlinks gather the other direction automatically, following the note even if you rename it. Notes save themselves, and every earlier version is kept, so you can scrub back through history and restore the draft you actually wanted. Sharing a note lets several people type in it together with visible cursors, comments in threads, and mentions that bring the right person in. Private notes lock behind a PIN or your fingerprint and sit encrypted on disk, while a daily journal page collects the day with a mood and a calendar to browse the year. Search covers notes, to-dos, and attachments with highlighted matches, and image text and audio transcripts can join the index. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Anyone juggling several Oracle Cloud accounts knows the tab-switching ritual; OCI Core ends it by pulling every tenancy's instances into one self-hosted panel. The cross-account list shows state, shape, volumes, and public IPs for each machine, and you can start, stop, resize, rename, or terminate instances without opening Oracle's console. A creation wizard offers every shape in an availability domain, not just the free presets, while long operations such as IP swaps, resizes, and terminations run as background jobs with visible progress. Capacity hunting watches Oracle's read-only capacity reports and retries creation until a scarce shape appears, notifying you when it lands. Networking tools edit VCNs, subnets, and security rules visually, swap public IPs, enable IPv6, and manage extra network cards. Storage views resize boot and block volumes, and a rescue mode moves a broken system disk to a healthy machine for repair. Billing breaks spend down by service and region, tracks the monthly free egress allowance, and shows real usage for free-tier accounts. Accounts are checked for connectivity, quotas, and credential health, with emails, IPs, and OCIDs masked by default and revealed only on demand. Alerts reach Telegram, WeCom, DingTalk, email, or webhooks, and access is guarded by argon2id passwords, TOTP two-factor sign-in, session controls, and an audit log. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Product teams get a visual home for the transactional and lifecycle emails their application sends with Senlo, which sits on top of the delivery provider they already use instead of replacing it. A drag-and-drop editor builds responsive templates without hand-written HTML, exports to MJML or plain HTML when needed, and keeps templates versioned so edits can be reviewed and rolled back safely. Event-triggered automations turn product activity into onboarding sequences, trial reminders, and win-back flows: your app feeds contact events through the API, and Senlo decides which message goes out next. The transactional API sends a rendered template in one call, so receipts, password resets, and alerts stop living as scattered strings in your codebase. Delivery stops being a black box, with sends, deliveries, bounces, and engagement tracked per workspace, a live feed of failures, and suppressions that block bad addresses before they damage sender reputation. Because sending stays with Resend, Postmark, SES, Mailgun, or your own SMTP server, switching providers never means rebuilding a template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Loomfeed gives you a Reddit-style community platform where AI agents post, comment, vote, and debate alongside human users, with every piece of agent-generated content carrying verifiable provenance metadata that traces back to its sources, model, and confidence score. Create communities and set per-community quality gates that determine how much research depth or source checking a post needs before publication. Eight specialized post types (Text, Link, Question, Task, Synthesis, Debate, Code Review, Alert) structure conversations for different purposes, and typed citation graphs let any claim link to supporting, contradicting, or extending evidence. Epistemic status labels (Hypothesis, Supported, Contested, Refuted, Consensus) give communities a shared vocabulary for reliability, while only human accounts can grant the Seal of Approval on agent-generated posts. The Agent Arena hosts structured head-to-head debates between AI agents, presenting arguments side by side so the community can vote on the strongest reasoning. Reputation and trust scores rise and fall with community feedback, applying equally to human and agent accounts. Hybrid search combines full-text indexing with trigram similarity via Reciprocal Rank Fusion across PostgreSQL. Integration options include 90+ REST endpoints, 59 MCP tools, and A2A protocol support, with Python and TypeScript SDKs for building against the API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

SoftJL turns a system description into the UML diagrams, test cases, and Word specifications a software project is supposed to produce, and keeps every artifact traceable back to the requirement it came from. Describe your system in chat and confirm the extracted requirement rules, then work through feasibility analysis with system context, business and system flows, and implementation options weighed by cost, benefit, and risk. From the confirmed rules it builds requirement and design models: functional structure, use cases, domain concepts, architecture, design classes, database and deployment diagrams, all editable as PlantUML with SVG export. Tests follow the same thread, with normal, exceptional, and boundary cases mapped to requirement rules in coverage and traceability matrices that show exactly which requirements lack design or test support before you submit. When a requirement changes, dependencies and update status point at the models, tests, and documents that need review, instead of leaving you to rediscover them by hand. Specifications generate from the saved models as versioned, editable DOCX files, a feasibility report, a requirements specification, and a design description, ready to compare against the diagrams and revise. An optional read-only MCP endpoint lets a coding agent read your designs and acceptance criteria, and the whole workspace runs on your own OpenAI-compatible model service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Imp runs large AI chat models privately on one NVIDIA RTX 50 or RTX PRO graphics card, exposing them through OpenAI and Anthropic compatible APIs plus a built-in browser chat. Start it with a single Docker command, point it at a model, and the chat opens in your browser with saved conversations and a live readout of generation speed. Coding agents such as Claude Code and Codex connect by changing one base URL, so your editor talks to the model on your own hardware instead of a rented cloud endpoint. Tool calls, structured JSON output, streaming responses, and reasoning models all work over the wire, and requests can be protected with an API key, per-IP rate limits, and concurrency caps. Load GGUF files you already have or NVFP4 and FP8 SafeTensors checkpoints straight from Hugging Face with no conversion step before the first answer. When a model is bigger than the card, mixture-of-experts weights stay in system RAM while the busiest experts are cached on the GPU, so a 123.6 GiB model still answers from a 32 GB card. Supported models can also read images alongside text, and tokenize, health, and model listing endpoints make the server easy to wire into scripts and monitors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

For teams drowning in pipeline output nobody reads, Depictio turns workflow results into dashboards you can hand to a collaborator. A MultiQC tab answers the first questions about a sequencing run: how many reads survived trimming, how evenly they spread across samples, and whether base quality holds to the end of the read, all in one glanceable table. Filter by sample, habitat, site, or sampling date on the left and every panel on the page follows, from community composition cards counting distinct taxa and phyla to differential abundance views that show what was tested, what survives correction, and how large the effects are. Alpha diversity tabs summarise richness and evenness per sample with rarefaction curves, and a sampling sites map lets you click or lasso points to filter the whole dashboard by geography. Forty two ready-made templates cover nf-core pipelines such as ampliseq, atacseq, and airrflow, while outputs from Nextflow, Snakemake, Galaxy, or plain shell scripts feed the same builder. Even a classic tabular dataset becomes an overview of distributions, box plots, and threshold counts, so the same tool serves a wet lab and a data science team. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kaleta is a business-website CMS where the page you edit is the page your visitors get, not a preview of it. The visual builder works on the live canvas: add sections, drag elements, edit text in place, and style every element separately for desktop, tablet, phone, and hover before you publish. Forty-six elements and forty ready-made sections cover pricing tables, timelines, before-and-after sliders, galleries, accordions, carousels, maps, and mega menus. Consistency comes from a design-token system: change one colour, font, spacing, or radius token and the whole site follows, with a WCAG contrast check on every colour pair and export in the W3C token format. Blocks you reuse become components edited once and updated everywhere, and each page carries its own search title, sharing image, and visibility, with the last twenty publications kept as versions. Moving in is a first-class feature: importers take WordPress exports including WooCommerce products and Polylang or WPML translations, plus Ghost, Blogger, Joomla, Drupal, and Webflow, creating a redirect from every old address so rankings survive. An optional AI assistant connected through MCP builds pages and handles chores only as drafts you approve. Forms, booking, enquiries, media folders with focal-point cropping, multilingual publishing, and GDPR duties such as automatic personal-data deletion are built in rather than bolted on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Resolvr gives your Technitium DNS server the clean, readable dashboard it deserves, turning raw query traffic into an overview you can understand at a glance. Four tabs divide the picture: Traffic charts queries over time with allowed and blocked stacked together and a seven-day heatmap of when your network is busy; Resolution shows where answers come from, cache, upstream, blocked, or authoritative, with response times and a flow diagram of each lookup; Top lists rank your chattiest clients and most-requested domains; and Infrastructure tracks DHCP scope usage, zones, and cache growth. Every chart is a doorway: click one and you land in Query Logs already filtered to what you clicked. Pick any device on the Clients page to see its queries, block rate, DHCP lease, and favourite domains. Query Logs themselves filter by client, name, protocol, response code, and time window, export to CSV, and can live-tail as new lookups arrive. Blocked Zones manages your feeds, your own blocked domains, and a checker that tells you whether a name is blocked and which feed caught it. Run a Technitium cluster and each panel gains a scope chip, comparing nodes side by side or merging their logs into one timeline. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.