Omni is an open-source workplace AI agent and enterprise search platform that unites your company's scattered tools into a single context-aware workspace where team members can find answers and automate cross-application workflows. Employees can query connected knowledge sources including Google Drive, Gmail, Slack, Jira, GitHub, Confluence, and HubSpot to locate project specifications, customer records, and operational documents without jumping across tabs. The integrated AI assistant answers complex multi-step inquiries, summarizes lengthy email threads, and cites exact source passages so workers can verify factual accuracy before making business decisions. Granular permission inheritance mirrors existing access controls across every connected service, guaranteeing that sensitive personnel files, financial statements, and confidential repositories remain hidden from unauthorized staff. Engineers can construct bespoke data connectors and define automated agent skills through the extensible Python and TypeScript software development kits, triggering multi-service actions directly from interactive chat dialogues. Administrators can monitor background synchronization jobs, inspect audit trails, manage single sign-on access, and configure custom extraction pipelines using centralized operational dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Leave a fake door unlocked and see who walks through: Krawl is a self-hosted honeypot that poses as a sloppy web server and records everything scanners and scrapers try. Fake WordPress, phpMyAdmin, and admin logins. Every attempt logged, every credential captured. A .env file leaking fake database strings, AWS keys, and Stripe secrets. SQL injection, XSS, path traversal, XXE, and command injection traps that answer with believable fake output. SQLMap gets a different database error on every request. Malicious crawlers wander an endless maze of random links. An optional tarpit adds delay and word salad that cost scrapers time, storage, and tokens. Optional AI-generated pages write a plausible decoy for any path an attacker requests. A hidden dashboard shows an attacker map, top IPs, captured credentials, and per-IP forensics. TLSH fuzzy hashing groups webshell variants into campaigns. A behavior score labels each IP attacker, bad crawler, good crawler, or regular user. Export bans as raw lists, iptables, or nftables rules, with guides for Fail2Ban, OPNsense, and RouterOS. A canary-token link in decoy pages emails you the IP and user agent of anyone who follows it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your dashboards deserve version control, code review, and reproducible builds, just like the rest of your stack. DAC lets you define interactive data dashboards in YAML or TSX, validate them in CI, and serve them from a single Go binary that embeds a full React frontend. Choose from 21 chart types including line, bar, area, pie, scatter, bubble, funnel, sankey, heatmap, calendar, sparkline, waterfall, gauge, treemap, radar, and candlestick, plus metric cards, data tables, text blocks, and image widgets. The built-in semantic layer lets you define metrics and dimensions once in reusable model files, then reference them from any widget while DAC generates the SQL automatically. Connect to Postgres, MySQL, Snowflake, BigQuery, Redshift, Databricks, and DuckDB through standard Bruin connection configs. Interactive filters with date pickers, dropdowns, multiselects, and search inputs inject values via Jinja templating and re-execute only affected widgets. Live reload via Server-Sent Events refreshes connected browsers instantly when you save a file. Export dashboards as self-contained static HTML with baked-in query results for S3, GitHub Pages, or offline sharing, and render slide decks via the Google Slides export command. On RepoCloud, deploy DAC on a dedicated VPS with root SSH access and persistent storage for your dashboard definitions and database connections under the AGPL-3.0 license.

Catalog, rate, and analyze every film you watch with Movary, a self-hosted movie tracking hub and personal cinema diary that replaces Letterboxd and Trakt. Each time a movie finishes playing on Plex, Jellyfin, Emby, or Kodi, automated webhook scrobblers record the viewing session and star rating directly into your timeline without manual logging. You can also bring over years of existing watch history by importing exports from Letterboxd, Trakt, or Netflix, and automatically cross-post newly logged reviews and ratings to Mastodon or feed Watchlist additions straight into Radarr. Customizing your personal dashboard lets you rearrange analytical widgets that break down your viewing habits by most-watched actors, directors, genres, original languages, release decades, and custom watch locations like local cinemas or home theaters. Movie metadata, posters, and ratings pulled from TMDB and IMDb are cached locally on your server, while built-in background job schedules keep artwork and cast details refreshed automatically. Multi-user account controls, TOTP two-factor authentication, granular profile visibility settings, and personal Bearer API tokens make it easy to run a private household log or a shared film club server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenPost is an open-source content creation and publishing suite that unifies multi-platform social scheduling, graphic design, and video editing into a single self-hosted control center. Creators can compose one primary announcement and tailor bespoke copy, media attachments, and thread structures across sixteen distinct networks including Bluesky, Mastodon, X, Threads, LinkedIn, YouTube, and Discord. The integrated browser canvas lets you design multi-slide carousels with custom typography, layer ordering, and automated background removal without juggling external design software. A built-in multitrack video suite allows you to trim footage, render subtitle captions, insert transitions, and slice clips directly by highlighting spoken words in generated transcripts. Social managers can organize campaigns through an interactive visual calendar, stagger deliveries across automated queues, and monitor unified comment streams to answer incoming audience inquiries directly from a single inbox. Teams can organize multiple independent client brands into partitioned workspaces with role-based permissions, automated repost policies, and programmable scheduling webhooks via native REST and Model Context Protocol endpoints. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Haven gives your community a private chat server with voice calls, screen sharing, and end-to-end encrypted direct messages where friends join via invite link in their browser without installing apps or creating third-party accounts. Real-time messaging supports image uploads via paste and drag-drop, emoji reactions, replies, threads, typing indicators, @mentions with autocomplete, and inline GIF search through Tenor or GIPHY. Peer-to-peer WebRTC voice chat includes per-user volume sliders, mute and deafen controls, talking indicators, and screen sharing with picture-in-picture mode. Direct messages use ECDH P-256 key exchange with AES-256-GCM symmetric encryption where private keys never leave the browser, ensuring not even the server operator can read them. Twenty-plus visual themes with stackable effects including CRT scanlines, Matrix Rain, Cyberpunk Text Scramble, Snowfall, and Campfire Embers let users personalize the experience with configurable intensity sliders. Rich Presence integration shows what members are playing or listening to via Last.fm, Steam, and Spotify. A built-in bot API supports webhooks and custom slash commands, while Discord history import preserves channels, threads, forums, reactions, pins, and avatars. The Node.js server deploys via Docker Compose or a single batch file that auto-handles dependencies, SSL certificates, and configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Built for self-hosted server deployments, Laranode transforms bare Linux installations into multi-tenant web hosting platforms with automated Let's Encrypt certificates and isolated PHP environments without recurring license fees. System administrators can provision isolated user accounts with dedicated document roots, configure custom domains, and deploy SSL certificates across all active websites in seconds. The integrated PHP manager enables per-site runtime isolation from legacy PHP 7.4 through cutting-edge PHP 8.5 releases, preventing version conflicts between separate production web applications. Operators can create MySQL databases, manage database users, inspect active connections, and adjust UFW firewall port access directly from the visual dashboard. An integrated browser-based file manager lets developers browse directories, edit configuration files, extract compressed archives, and modify file permissions without external FTP tools. Real-time telemetry monitors CPU utilization, memory consumption, disk capacity, and network traffic over customizable historical timeframes to catch bottlenecks early. Automated backup routines archive full accounts, individual websites, or specific databases to local storage, remote SFTP servers, or S3-compatible cloud object stores with point-in-time recovery verification. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every time a commercial book-tracking platform changes its terms or shuts down, years of reading notes and carefully curated wishlists risk getting lost in messy spreadsheet migrations; Jelu puts your entire reading life under your own control as a self-hosted personal Goodreads alternative. Readers log books as currently reading, finished, or dropped, track page progress and dated reading events, and organize titles across unlimited custom shelves using flexible tags. Adding new books takes seconds through mobile camera ISBN barcode scanning, EPUB and OPF metadata extraction, or automated online searches that query Calibre metadata plugins and fallback book providers for covers, summaries, and publisher identifiers. Migrating existing libraries is effortless with bulk imports for Goodreads CSV exports and plain-text ISBN lists alongside one-click CSV data exports. Author pages automatically pull biographies from Wikipedia and include a deduplication tool to merge duplicate author records created during bulk imports. Household and book-club members can sign in via local accounts, LDAP, or reverse-proxy authentication to share book ratings, write public or instance-wide reviews, inspect yearly and monthly reading statistics, and generate HTML or Markdown embed snippets for personal blogs and digital journals. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Connecting autonomous AI assistants to internal enterprise databases and legacy systems is streamlined by AnythingMCP, a visual Model Context Protocol gateway with automated knowledge graph generation and granular access controls. Engineers can import OpenAPI specifications, Postman collections, SOAP WSDL files, or raw database credentials to generate standardized Model Context Protocol tools in minutes without writing custom code. The built-in knowledge graph automatically maps entity relationships across disparate databases and software platforms, teaching agents how to correlate customer records in CRM tools with live order histories in enterprise resource planning software. System administrators can enforce fine-grained access policies by restricting tool execution permissions to specific roles and scoping database operations to read-only queries with strict row limits. An interactive web console provides real-time tool inspection, payload testing, request tracing, and comprehensive audit logs that capture every upstream invocation with full parameter visibility. Enterprise teams can integrate identity providers through OAuth2, SAML single sign-on, and SCIM automated user provisioning while protecting sensitive credentials using AES-256-GCM encryption at rest. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

Metadata Remote is a browser-based audio tag editor designed specifically for headless music servers, enabling collectors to fix ID3 tags, embed high-resolution cover art, and match releases against MusicBrainz without moving files off their NAS. Navidrome, Jellyfin, and Plex administrators can browse mounted directories directly from any browser, inspect standard and extended metadata fields, and apply single-file or bulk folder-wide updates in one click. Clicking an empty or incomplete field activates the smart inference engine, which analyzes filenames, directory hierarchy, and sibling tracks alongside live MusicBrainz queries to present candidate values ranked by confidence percentage, including specialized matching rules for classical works, multi-artist compilations, and live bootlegs. Built-in audio streaming lets you audition MP3, FLAC, OGG, OPUS, M4A, M4B, WMA, WAV, and WavPack files inside the interface to verify mysterious tracks before renaming files or folders inline. A dedicated long-form text editor automatically opens for lyrics and liner notes exceeding 100 characters, while the album art manager previews image dimensions, bulk-embeds covers across entire albums, and repairs corrupted artwork headers automatically. Every single-track edit, custom field creation, and batch folder operation is tracked in a 1,000-step undo and redo history with full keyboard-only navigation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Wag is an authentication gateway for WireGuard that lets each device reach only the routes it should, and asks for a second factor before the sensitive ones open. Admins write access policies for everyone, groups, or single users, marking subnets, hosts, ports, and protocols as MFA-required, always allowed, or denied, and the most specific prefix wins, so one allowed address can sit inside a protected range. Devices join with a registration token, and the public endpoint answers with a finished WireGuard profile. Users then confirm a TOTP code, a WebAuthn security key, an OIDC single sign-on login that maps identity provider groups into Wag groups, or a PAM prompt, and repeated failures lock the account. Session lifetime and idle timeouts decide when they must prove themselves again. The browser portal lists users, devices, rules, registration tokens, and webhooks with real-time notifications, while a command line locks devices, resets MFA, and manages administrators. Webhooks turn JSON from an HR or identity system into new tokens or removed users and devices, and clients can fetch the list of guarded routes from a small API. Remote staff, contractors limited to one host, and homelabs are typical uses. When a server fails, the VPN remains reachable through clustering with witness nodes or an external etcd, and certificates arrive through ACME with HTTP-01 or Cloudflare DNS-01. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Invoicerr nails the exact billing sequence freelancers actually use: draft a quote, send it to the client, collect a legally-binding electronic signature via a secure browser link, convert the approved quote into an invoice, and generate a branded PDF — no DocuSign account, no external signing service, no enterprise complexity. The React frontend with NestJS backend uses Prisma ORM with your choice of SQLite for instant local setup or PostgreSQL for production workloads. Quotes and invoices are first-class objects with independent status tracking — unread, sent, viewed, signed for quotes; paid for invoices — not a single form with a label swap. The e-signature system generates secure-token signing links that clients open in their browser to review and sign documents without needing any account or external service. PDF generation renders quotes, invoices, and receipts with your company logo, name, VAT number, colors, and custom email templates so documents reflect your brand identity rather than the software's defaults. Authentication supports JWT tokens or OIDC providers stored in cookies. The REST API backend enables future integrations with mobile and desktop clients. A plugin system with community-made features and outgoing webhooks extends functionality without forking core code. International-friendly with customizable currencies. Deploy with Docker Compose using the prebuilt image from GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instant board updates, side-by-side card multitasking, and a five-level task hierarchy make 4ga Boards a fast, clutter-free Kanban workspace for teams tired of sluggish project trackers. Work organizes cleanly from top-level projects down into boards, collapsible lists, cards, and granular subtask checklists. You can switch between classic drag-and-drop Kanban columns and compact to-do list views with a single click. While editing a card description in the rich Markdown editor with colored text, you can still scroll, filter, and rearrange other cards on the board without losing unsaved changes. Every move, label change, due date update, or comment syncs live across connected browsers without page reloads. Collapsible lists and a retractable sidebar free up wide-screen horizontal space during sprint reviews. Teams migrating existing workflows can import boards directly from Trello JSON exports or CSV files and export backups on demand. Cards support file attachments, custom cover images, multi-member assignments, and @mentions with instant activity notifications. Authentication integrates with Google, GitHub, Microsoft, and custom OIDC single sign-on providers alongside role-based board privacy. The interface includes dark mode, full keyboard shortcuts, and localization across 16 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One self-hosted workspace holds your team's chat, tasks, notes, and calendar, and Deft lets AI agents work in it beside your people. People get real-time chat with spaces, direct messages, threads, mentions, reactions, files, and presence. Tasks open as Board, Table, Timeline, or Calendar views, with dependencies, subtasks, recurrence, and bulk actions. Notes, decisions, and channel memory become durable knowledge, with graph views and links back to the source conversation. Native calendar events sit beside read-only ICS subscriptions. Agent employees can join channels and receive task assignments. Tag the built-in assistant Defty to draft a task, answer a workspace question, or take a governed action, then review the proposal in an approval card before anything changes. Personal connections let Codex, Claude, ChatGPT, and other streamable HTTP MCP clients act as the signed-in user within revocable scopes. Approval tiers, trust levels, token scopes, revocation, activity history, and action receipts record who or what acted and what changed. OpenAI, Anthropic, OpenRouter, OpenAI-compatible endpoints, and local Ollama-style models are supported providers. Chat, tasks, notes, and calendars keep working with no AI key. Modules add company-specific records, relationships, and views, with a bundled Contacts module as the first example. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-only licensed.

Every homelab deserves a control center that looks as good as the services it manages. Lab Dash gives you a customizable, drag-and-drop dashboard where every tile earns its spot. Add shortcut widgets linking to your Plex, Grafana, Nextcloud, or any service with automatic health check indicators showing green or red status at a glance. The system monitoring widget displays real-time CPU usage, memory consumption, network throughput, disk utilization, and temperature readings by mounting the host /sys directory as a read-only volume. Integrate Pi-hole stats, qBittorrent download progress, and media server widgets for Jellyfin, Plex, or Emby directly on your grid. Multiple pages let you organize services by category, and the search bar finds any tile instantly. Customize the background image from a local upload or URL, set a custom title and tab name, and choose your preferred search provider including self-hosted options like SearXNG. All sensitive configuration data is encrypted locally with AES-256-CBC, and only administrator accounts can modify the layout. Install Lab Dash as a Progressive Web App on desktop, phone, or tablet for a native app experience with offline capability. Configurations export as backup files for easy migration between instances. On RepoCloud, deploy Lab Dash on a dedicated VPS with root SSH access and Docker socket connectivity under the GPL-3.0 license.

From a PDF plan set to a waste-adjusted material order takes one browser tab: OpenTakeoff measures floors, walls, and fixtures at the drawn scale and never uploads a single drawing. Drag in a PDF, image, or zip plan set, view up to four sheets side by side, and search sheet text, while stitching joins floors split across a match line. Scale comes from the drawn scale note or a known dimension, and a check tool reports percent error before a wrong scale can skew a bid. Area, linear, and count tools carry condition colors, CAD hatches, waste percentages, and wall heights, and a marquee over the architect's finish schedule turns approved rows into conditions. Supporting materials convert coverage rates into rounded-up order quantities, and roll-goods mode lays out lanes, seams, and cuts to scale. Totals in SF, SY, LF, and EA export to CSV, JSON, Excel, print, or a marked-set PDF, while named revisions compare addenda as quantity deltas. Highlighters, revision clouds, callouts, and notes mark up sheets on a layer that is never counted, and dimension lines label measured lengths at the sheet scale. An MCP server with more than 50 tools lets AI agents open plans, set scale, and measure rooms, and each shape they draw stays a dashed proposal until a person accepts it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Running a single AI agent is straightforward; running a team of specialized agents that delegate tasks, share memory, and coordinate through structured workflows requires an orchestration layer, and that is exactly what SwarmClaw provides. Define a hierarchy of agents in an org chart where a Coordinator (your CEO agent) delegates research tasks to a Researcher, coding tasks to a Developer, and design tasks to a Designer, each configured with its own LLM provider, tool permissions, and skill set. The Task Board presents a Kanban view of all work items across Backlog, Queued, Running, and Completed columns, with each task card showing its assigned agent, tags, due dates, and approval gates that pause execution until a human reviews and approves. Agents execute work using built-in tools for file operations, shell commands, browser automation, and persistent memory, plus any MCP server you connect via stdio, SSE, or streamable HTTP transport. Durable structured sessions support branching logic, repeat loops, parallel branches with explicit joins, and restart-safe run state that survives crashes without losing progress. Over 23 LLM providers ship built-in: Claude Code CLI, OpenAI, Anthropic, Google Gemini, DeepSeek, Groq, Mistral, xAI Grok, Fireworks, Ollama, and more. Connectors push messages to Discord, Slack, and Telegram, while cron schedules and webhooks trigger agent runs automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

After the bills are covered, how much is actually safe to spend? monetr organizes an entire budgeting application around that one question. Inspired by the defunct Simple bank, it budgets paycheck by paycheck rather than month by month. Funding schedules encode when you get paid - including multiple schedules per account and a weekend-exclusion option for deposits that land early - and every expense or savings goal is tied to one. monetr then calculates how much of each recurring obligation (rent, car payment, subscriptions, on any repeat interval) to set aside from each paycheck, so a large bill never has to come out of a single check. What remains after allocations is surfaced as Free-To-Use, and a forecasting timeline projects contributions, due dates, and leftover funds forward so low-balance periods are visible before they happen. Transactions arrive either as OFX uploads from your bank or automatically through a Plaid connection using your own API credentials, keeping balances and transactions synced without manual entry. The app is mobile-friendly and installable as a PWA on desktop or phone. Self-hosting via Docker Compose is completely free, with all source code public and your financial data on your own hardware.