Every cable, switch port, VLAN, and rack unit in a homelab or small server room gets a documented place in Rackpad, a self-hosted inventory and operations workspace. Rack elevations show mounted gear, including paired half-width appliances. Switch-panel port maps and aggregate ports show what is patched where. Cables carry type, length, and color, editable in bulk. VLANs, subnets, DHCP scopes, reservations, and zones sit in one Networks workspace, with gateway and DNS protection and a mismatch review for IP assignments. Storage topology follows drives, bays, and pools that span several devices. Wi-Fi controllers, access points, hypervisor hosts, and virtual machines have pages of their own, and Proxmox and Hyper-V hosts can be imported after review. Discovery scans a subnet or any CIDR and stages every finding in an inbox. Per-device checks over ICMP, TCP, HTTP, HTTPS, and SNMP raise alerts by email, Discord, or Telegram. Everything feeds a movable topology map. Markdown runbooks attach to devices, and an audit log records every change. Admin, editor, and viewer roles control access, and OpenID Connect login is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a bad migration or disk failure strikes at 3 AM, DBackup guarantees that your PostgreSQL, MySQL, MariaDB, MongoDB, SQL Server, Redis, Valkey, SQLite, and Firebird databases, along with the application directories that belong to them, are encrypted, verified, and ready to restore in a few clicks. Connect directly over TCP or tunnel through SSH with zero agents installed on your target servers. Bundle database dumps and Docker volumes or remote SFTP directories into a single atomic job so your schema and uploaded assets always share the exact same recovery point. Every archive is compressed with Brotli or GZIP, sealed with AES-256-GCM encryption before leaving the host, and pushed simultaneously to up to 14 storage backends including Amazon S3, Cloudflare R2, Hetzner, Google Drive, Dropbox, OneDrive, SMB, and WebDAV. Reusable Grandfather-Father-Son retention policies prune daily, weekly, monthly, and yearly snapshots automatically. Need to inspect live tables or recover a single file? Use the built-in Database Explorer, remap a dump into a staging schema, or extract individual files over HTTP byte ranges without downloading the entire archive. Even if your backup server goes offline, the downloadable Recovery Kit decrypts standard SQL dumps and plain TAR archives using a standalone script. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Gately keeps your domain names current, forwards ports, terminates HTTPS, and blocks hostile traffic from one admin console, so a server or home network needs no pile of separate gateway tools. Dynamic DNS updates records at Cloudflare, Alibaba Cloud, Tencent Cloud, DNSPod, Huawei Cloud, Route 53, OVHcloud, Gandi, Namecheap, DuckDNS, and other providers, finding the public address over IPv4 or IPv6 by URL, network interface, or command. Port forwarding relays TCP and UDP with port ranges, failover targets, connection limits, traffic statistics, and PROXY protocol, while SNI routing lets several services share port 443. Certificates are issued and renewed through ACME with DNS-01 wildcards or HTTP-01, then pushed to other hosts over SSH. Web services add per-domain reverse proxies, redirects, and static sites with HTTP/3, WebSocket, load balancing, health checks, rate limiting, caching, and sign-in through OIDC, GitHub, Google, or TOTP-protected shared users. A WAF running the OWASP Core Rule Set and fail2ban-style jails with trap ports and nftables bans guard the edge. Manage Docker containers and Compose projects with one-click upgrades and rollback, open SSH sessions with an SFTP file manager, run ping, traceroute, and speed tests, and receive alerts in Telegram, Discord, Slack, ntfy, or email. An audit log, config history with diff and rollback, encrypted backups, scoped API tokens, and Prometheus metrics round it out. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When an alert fires at 3 a.m., the live chart, the runbook, and the fix are already on one page of Oxynote, a self-hosted technical wiki. The chart is a Live Metrics block that runs its own Prometheus or SQL query and draws a time series, bar chart, or gauge. Several such blocks side by side make a dashboard inside the page. Around it, the editor works like Notion, with checklists, callouts, titled code blocks, Mermaid diagrams, Figma embeds, images, and files. Internal APIs get Stripe-style reference pages with the endpoint, a curl example, and a sample response beside the explanation. Mark a page reviewable and every edit lands in a draft. A block-aware diff shows renamed endpoints, fields, and reworded sentences in one red and green view until a reviewer approves. Freshness hooks watch GitHub files, container images, web pages, or dates, and remind maintainers when something a page depends on changes. Teammates edit together live and see who holds which block. Comments attach to a word, a diagram line, or a whole chart, with replies and an inbox for mentions. The Rubber Duck assistant edits pages and runs block queries with Anthropic, OpenAI, Google, OpenRouter, or a local Ollama model, and MCP lets Claude Code and Codex read and write the docs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Deploy autonomous conversational AI agents and coordinate complex multi-agent workflows through EDDI, an open-source orchestration middleware that turns declarative configuration files into secure, production-grade enterprise assistants. Engineering teams connect AI models from twelve different commercial and local providers, using bilateral Model Context Protocol tools to let external desktop clients and coding assistants interact directly with running conversational services. Autonomous agents collaborate through structured group interaction patterns including round table discussions, peer reviews, Delphi consensus rounds, and devil's advocate debates to refine generated solutions before delivery. Declarative workflow extensions automate external REST API calls with dynamic request templating, extracting structured properties into persistent conversation memory and chaining multi-step service interactions without custom script glue. Built-in secret vaults safely manage sensitive API credentials, while the centralized web dashboard provides live conversation inspection, token quota enforcement, and comprehensive audit logging for regulatory compliance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Every connection starts at the endpoint, never at the server, so Borg Backup Server can back up Linux, Mac, and Windows machines behind NAT and firewalls without opening a single inbound port. A lightweight agent on each machine polls for tasks over HTTPS, pushes deduplicated archives over SSH, and reports live progress. Append-only SSH access means an endpoint can add and restore archives but never prune or delete them. The dashboard shows backup charts, server stats, and active jobs at a glance. Plans run from hourly to monthly, several per client, built from reusable directory templates for common server roles, with per-plan retention from hourly to yearly. Lost a file? Browse the archive tree in your browser, tick what you need, and restore it to the client or download a .tar.gz. MySQL and PostgreSQL dumps run before each backup and restore as a copy or a replacement. Repositories can live on the server, on BorgBase, Hetzner, or rsync.net, and mirror to S3-compatible storage such as AWS, Wasabi, or Backblaze B2. Apprise alerts reach more than 100 services, and a nightly report lands in your inbox. Two-factor login and role-based access guard the console. Upgrades roll out to the server and every agent together, and the server backs itself up daily. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PayMe is a privacy-first personal finance dashboard that runs entirely on your own hardware with zero third-party service dependencies. The Rust backend compiled to a single binary serves a React 19 frontend built with Vite, TypeScript, and Tailwind CSS 4, storing all financial data in a local SQLite database that auto-migrates on startup. Monthly dashboards track income entries, fixed expenses like mortgage and utilities, and budget categories with real-time progress bars showing spending against configurable limits. The savings module includes goal tracking with percentage-based progress indicators, custom savings goals for targeted objectives, retirement savings projections with breakdown analysis, and projected savings calculations. Variance analysis compares actual spending against budgets across categories. Drag-and-drop reordering powered by dnd-kit lets you arrange income sources, expenses, and budget items to match your workflow. The interactive charts rendered by Recharts visualize spending trends, income patterns, and savings trajectories. Month-by-month navigation tracks financial history over time, while the Summary and Stats views aggregate data across periods. JWT-based authentication secures access, and the full OpenAPI Swagger documentation at the /swagger-ui endpoint exposes every API route for automation and integration. Docker Compose deployment creates a minimal image with the compiled Rust binary and static frontend assets, running on port 3001 behind nginx, Caddy, or Traefik reverse proxy with HTTPS. On RepoCloud, deploy PayMe on a dedicated VPS with persistent SQLite storage, root SSH access, and complete privacy over your household financial data, all under the MIT license.

JobSpy API turns seven major job boards into a single REST endpoint, aggregating listings from LinkedIn, Indeed, Glassdoor, Google Jobs, ZipRecruiter, Bayt, and Naukri through one GET request. Built on FastAPI with the Python JobSpy scraping library, the API returns structured JSON or downloadable CSV containing job titles, companies, locations, salaries, descriptions, posting dates, and direct application URLs. Filters cover search terms, location, distance radius, job type (full-time, part-time, contract, internship), remote status, hours since posting, country, and salary range. Interactive Swagger UI and ReDoc interfaces provide try-it-now functionality for testing queries directly in the browser. Security includes x-api-key header authentication with configurable rotation, per-endpoint rate limiting with adjustable thresholds, and response caching with configurable TTL to reduce redundant scraping. Global proxy support routes outbound requests through HTTP/HTTPS proxies to avoid IP-based rate limiting from job boards. Environment variables control everything from default search parameters and logging levels to CORS origins and documentation paths. Health check and ping endpoints integrate with uptime monitoring services. Docker Compose exposes the API on a configurable port. MIT licensed.

Windshift packs boards, sprints, roadmaps, test runs, time tracking, and a customer portal into one open-source tracker that replaces Jira on a server you control. Epics, stories, and sub-tasks form a hierarchy you can view as a board, list, tree, or map, and backlog items drag into dated sprints. The roadmap stretches across weeks, months, or quarters, and milestone pages show completion percentage with a status breakdown. Each workspace defines its own item types, custom fields, screens, statuses, priorities, workflows with conditions and approvals, and permissions, while JQL-style queries save as shared views. Event-driven rules update fields, notify people, and create work. Customers file requests through a public portal, and your team works them through queues with SLAs and approvals. Reusable test cases roll into test runs with success rates, and timers log billable and internal hours against projects and customers. GitHub, GitLab, Gitea, and Forgejo connections put branches and pull requests on the work item, and the importer brings over Jira projects, comments, attachments, and worklogs. A knowledge base and an asset register keep documentation and inventory next to the work. The interface speaks nine languages, including right-to-left Arabic, and sign-in supports OIDC single sign-on and passkeys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The fastest tool on the public Martian Code Review Bench at 77 seconds per PR with competitive F1 scores — while every higher-scoring competitor takes 5 to 14 times longer — Mira is the fully open-source AI code reviewer that ships the entire feature surface other tools gate behind per-seat subscriptions: indexed PR reviews with full-repo context, streaming walkthroughs posted within seconds, inline vulnerability scanning from hourly OSV.dev polls, org-wide package inventory answering "which repos use [email protected]?" in one query, interactive dependency graphs with blast-radius SVG rendering via ReactFlow, a learning loop that synthesizes rules from rejected comments and human review patterns on merged PRs, and cost telemetry showing actual spend per repo and per model. Unlike CodeRabbit, Greptile, and GitHub Copilot code review which are SaaS-only with per-seat pricing, Mira runs as a single Docker image on your infrastructure with your LLM key through OpenRouter (fronting Anthropic, OpenAI, Google Gemini, DeepSeek) or direct to Ollama and vLLM for fully air-gapped deployments. The engine indexes Python, TypeScript, Go, Rust, Java, C/C++, C#, Swift, Kotlin, Scala, and PHP with per-file symbol extraction, enabling multi-file reasoning across diffs rather than isolated line-by-line review. Integrates with GitHub, GitLab, and Forgejo via webhook with full feature parity. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Once a voice agent is imported or built, Lampline connects it to a phone line, sends an AI caller to grade real calls, and keeps it all on your own server. Start by importing a Dialogflow CX or CX Agent Studio export along with a report of anything to check, or build fresh in a drag-and-drop builder that mixes LLM steps with scripted pages for exact lines and form fields. Next, pick one of 20 model providers, including Claude, OpenAI, Gemini, Bedrock, Groq, and DeepSeek, or run Ollama with local speech and no API keys. Test by chat or microphone while each step lights up, and let agents call HTTP and MCP tools and save records in collections of their own. Then connect callers through Twilio, Telnyx, or any SIP trunk, PBX, or session border controller via jambonz, with transfers to a person that carry the call's details as SIP headers. Finally, evals phone the agent over a real line, where an AI Test Caller brings background noise, accents, and interruptions, grades each transcript check by check, and reports typical and p95 response times as callers hear them. Each agent stays a folder of YAML and Markdown that you can review in git and lint or test with the vk CLI. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

QuickStack transforms your standalone Linux server or cluster into a self-hosted platform-as-a-service that automatically compiles, deploys, and monitors full-stack applications and relational databases without vendor lock-in. Developers can trigger instant deployments directly from public or private Git repositories, upload custom Dockerfiles, or pull container images straight from private registries with automated webhook synchronization. The built-in application catalog enables one-click provisioning of production databases including PostgreSQL, MySQL, MariaDB, MongoDB, and Redis with preconfigured internal network isolation. Administrators can route traffic across custom domains with automated Let's Encrypt SSL certificate issuance, inspect real-time CPU and memory telemetry, stream container runtime logs, and launch in-browser web terminals. Teams can configure granular role-based access controls with single sign-on authentication, establish zero-trust ingress and egress network security policies, and orchestrate automated volume snapshots directly to S3 object storage. When infrastructure requirements expand, operators can attach additional worker nodes using lightweight join tokens to distribute workloads seamlessly across high-availability compute pools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU GPL v3.0 licensed.

Lyftr delivers a self-hosted workout and nutrition tracker that runs on a small VPS — no subscriptions, no vendor lock-in, no "export is a Pro feature" paywalls. The Go backend with Gin framework provides JWT authentication and a REST API while storing everything in a single SQLite database file you can back up with one copy command. The exercise library ships with 800+ movements auto-seeded on first run, letting you build reusable workout programs with target sets, reps, and weights from day one. Active workout mode provides a guided set-by-set flow through your session while Gym Mode offers a full-screen card layout showing one exercise at a time with an integrated rest timer for focused training. The React frontend built with TypeScript and Tailwind delivers a mobile-first interface featuring a dashboard with weekly session KPIs, daily calorie and protein tracking, 12-week consistency heatmap, volume trend charts, and muscle balance visualization with sparklines. Nutrition tracking connects to Open Food Facts for food search with camera-based barcode scanning, logging calories and macros across customizable meal sections. Bodyweight logging with trend graphs supports both lbs and kg units across all data. An Android APK connects to your self-hosted instance for native mobile access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stop handing your daily food diary, body weight history, and biometric sleep data to ad-funded fitness clouds: NutriTrace brings complete calorie, macro, micronutrient, and wellness tracking to your own server with an offline-capable web PWA and native Android app. Log meals across customizable slots using live Open Food Facts and USDA FoodData Central lookups, barcode scanning, AI nutrition label OCR, or direct recipe imports from Mealie and CookTrace. Calorie and macro targets adjust automatically through three goal engines, including an inspectable Adaptive TDEE algorithm that regresses 35 days of intake against scale weight at 7,700 kcal per kilogram. Connect Fitbit via Google Health, Garmin, Withings, and Android Health Connect to pull steps, heart rate variability, sleep stages, and body composition into unified Sleep, Readiness, and Resilience scores. An integrated Trace AI assistant and Smart Log let you log meals by voice, text, or meal photo, while the opt-in Model Context Protocol server exposes 20 read, write, and management tools to Claude Desktop, Cursor, and Codex. Multi-user households get OpenID Connect SSO and one-step migration from MyFitnessPal, Cronometer, Lose It, and Waistline. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Managing multi-server container fleets often deteriorates into fragmented SSH sessions, mismatched compose files, and conflicting port allocations. Composr consolidates multiple Docker host daemons into a unified web dashboard that controls running containers, stack definitions, and system metrics from a single interface. Operators can connect remote Docker daemons through encrypted TCP sockets, inspect container health, and stream live execution logs with sub-second responsiveness. A built-in project creation wizard guides administrators through drafting new Compose topologies across local directories or remote server nodes. In-browser CodeMirror editors deliver live syntax highlighting for YAML files, configuration dotfiles, and reverse proxy definitions without detaching containers from disk. The platform tracks service properties directly, letting you toggle Compose profiles, relocate services between YAML manifests with pre-flight risk checks, and detect target port collisions before redeployment. Integrated backup managers bundle container metadata, compose files, and environment definitions into downloadable archive packages for automated disaster recovery. System operators can open interactive browser terminals into any active container, execute batch maintenance tasks, and configure scheduled image update checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PicPeak is a self-hosted gallery platform where photographers deliver event photos to clients through private, branded links that expire on their own schedule. Every gallery gets a share link, an optional password, and a QR code that exports as PNG, SVG, an A6 table card, or an A4 poster, so a reception can put the gallery on every table. Guests browse in one of seven layouts, from grid and masonry to carousel and timeline, and react with likes, favorites, star ratings, comments, emoji reactions, or color labels. For a party, open the gallery to guest uploads, hold the finished edit back with Reveal Mode until a scheduled moment, and put the optional Live Slideshow link on a projector so new photos appear as they arrive. Theme presets, custom colors, logos, fonts, CSS, and CMS pages keep the studio's brand in front, while bulk ZIP downloads, capped download sizes, watermarking, and right-click blocking control what guests take home. An analytics dashboard tracks views, unique visitors, and downloads. Beta modules add face grouping that runs in a separate container on your own server, plus quotes, contracts, invoices, and customer accounts for studios. Media sits on local disk or any S3-compatible bucket, OIDC single sign-on lets a team log in through an identity provider, and API tokens and webhooks connect PicPeak to automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Flowctl turns repetitive ops work, such as granting SSH access, restarting a service, or provisioning a server, into self-service forms that anyone on the team can run without holding credentials. Each workflow is a YAML or HUML file with typed inputs, validation rules, and a list of actions. Actions run in order or as a dependency graph, so independent branches execute in parallel. Every action runs in a Docker container, as a shell script, or as another flow, and scripts can target remote servers over SSH, several at once. Sensitive steps pause until a reviewer approves or rejects them. Output from one action feeds the next, files pass along as artifacts, and failed actions can be retried. Cron schedules with time zones and labels run flows unattended, while logs stream live in the browser. Email, Slack, Mattermost, and webhook notifications announce success, failure, waiting, or cancellation. Teams get isolated namespaces with user, operator, reviewer, and admin roles, OIDC single sign-on, and encrypted storage for SSH keys and secrets. A built-in flow editor means nobody has to hand-write files, and custom executors can be added as Go plugins. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

"Stupid simple software" is the entire philosophy at DumbWare.io, and DumbBudget delivers it: no over-engineering, no complexity, no accounts, no bank connections - just a clean, modern ledger for money in and money out. Log income and expenses, assign categories, and watch real-time balance calculations update as you type. Finding transactions is quick: filter by type, narrow by date range, sort by date or amount. When tax season or spreadsheet analysis calls, everything exports to CSV. Access control matches the philosophy - a single PIN (set via one environment variable) gates the app, backed by real security engineering: rate limiting on PIN attempts, temporary lockout after failures, secure session handling, and no sensitive data in browser storage. Multi-currency support covers the ISO codes, and a SITE_TITLE variable names each instance - deliberately useful, because running separate instances per account or family member is the intended pattern for multi-user needs. The responsive UI ships light and dark themes and installs as a PWA on phones, where expense logging actually happens. Configuration is five environment variables; data persists in one folder. If Actual Budget and Firefly III feel like accounting software, this is the notepad that gets used. GPL-licensed.