IRONSIGHT
IRONSIGHT fuses over 50 publicly available intelligence sources into a single real-time dashboard that requires zero API keys and zero configuration. The Live Intel Feed aggregates 20+ RSS news sources with keyword relevance filtering from outlets including Reuters, Al Jazeera, and Kyiv Post. The Telegram OSINT module scrapes 27 channels every 60 seconds with automatic translation from Hebrew, Arabic, and Farsi. The interactive Leaflet Theater Map plots military aircraft positions via ADS-B transponder data, naval vessel locations in the Persian Gulf and Eastern Mediterranean, strike markers extracted from news and Telegram, missile trajectory arcs with range rings, and country-border overlays with a distance measurement tool. A header toggle switches the entire dashboard between Iran/Israel and Russia/Ukraine theaters, re-pointing every panel, map layer, and data feed to the selected conflict. The Israel Alert module streams live Pikud HaOref missile alerts with audio notifications, while the Conflict Monitor categorizes events into strikes, defense, diplomatic, and nuclear. Financial panels track defense contractor stocks, S&P 500, VIX, gold, Bitcoin, Ethereum, energy commodities via Yahoo Finance, and Polymarket prediction odds on conflict outcomes. NASA FIRMS satellite thermal detection flags fire and explosion signatures. The Next.js 16 App Router handles server-side data fetching for RSS and API endpoints while client-side React state management drives real-time polling updates. On RepoCloud, deploy IRONSIGHT on a dedicated VPS with persistent storage, root SSH access, and full control over your intelligence monitoring environment, all under the MIT license.
Ideon
Scattered browser tabs, buried wiki folders, and disconnected issue trackers fragment engineering context across too many tools, which is why Ideon unifies your repositories, notes, and tasks on a shared infinite canvas. Rather than forcing projects into rigid folder hierarchies, you arrange interactive blocks spatially on a two-dimensional map where related documents, checklists, calendar schedules, and code references sit right beside one another. Teams can embed live repository cards and open issue streams directly from GitHub, GitLab, Gitea, and Forgejo onto the workspace, keeping code status visible alongside architecture documentation. Rich content blocks render Markdown notes with threaded comments, Mermaid flowcharts, uploaded files, images, and bookmarked links on the same board. Real-time multiplayer collaboration lets teammates edit blocks simultaneously, follow live cursors across the canvas, and map system designs together without edit conflicts. Built-in Time Travel snapshots capture historical states of the workspace so you can scrub backward to review how a project evolved or trace past design decisions. You can even synchronize an entire project canvas directly to a Git repository, storing notes and spatial block layouts as versioned files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Kuvasz
Continuous infrastructure monitoring meets automated SSL expiration tracking in Kuvasz, a self-hosted uptime platform that alerts DevOps teams before outages disrupt production operations. Operators can configure granular health checks across HTTP endpoints, ICMP ping targets, and raw TCP ports with custom polling intervals down to seconds. Automated SSL inspectors track certificate validity, issuing early warning notices before cryptographic chains expire and disrupt production traffic. A push monitoring system receives incoming heartbeat signals from background cron jobs, database backups, and recurring automation scripts, triggering alerts whenever expected pings fail to arrive on schedule. Multi-channel dispatchers route incident notifications through Slack, Discord, Telegram, Microsoft Teams, PagerDuty, and custom webhook payloads with adjustable failure count thresholds to eliminate transient false alarms. Maintenance windows let teams schedule planned downtime through one-off intervals or recurring cron expressions, automatically muting notifications during deployment cycles. Public and private status pages publish categorized system health metrics, historical latency charts, and incident timelines to keep internal stakeholders and end users informed. An integrated Model Context Protocol server allows AI assistants to query monitoring states and toggle checks directly via conversational interfaces. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
InnoShop
InnoShop runs your entire online store on your own server, from a multilingual storefront and checkout to orders, shipments, and returns, and it even lets an AI assistant operate the shop alongside you. Set up products with SKUs, attributes, brands, and categories, then sell through a responsive storefront that speaks your customers' languages and prices in their currencies. Orders flow into the admin panel with status updates, shipment tracking, and return handling, while customers pay through PayPal, Stripe, bank transfer, or payment and shipping plugins you install. A built-in media library keeps product photos and files organized and reusable across the whole catalog. Visit analytics show who is browsing the store, with bot detection and geographic aggregation separating real shoppers from crawler noise. The unusual part is the AI door: a built-in MCP server exposes more than 45 store operations as tools, so an assistant can list products, check inventory, update an order status, or pull a sales report in plain conversation. That door is disabled by default, opens only with an admin token, stays read-only until you explicitly enable write tools, and never exceeds the permissions of the account behind the token. Plugins extend the store without forking it, and themes reshape the storefront without touching the catalog underneath. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. OSL-3.0 licensed.
Busabase
Every AI agent session starts from zero, and Busabase fixes that: it is an open-source workspace where agents and people share records, docs, skills, and apps, and every agent write arrives as a reviewable change. Bases hold typed records with relations, views, and forms, while Docs, Files, Whiteboards, and Workflows live in the same tree, so a project's data and context stay together. Skills are SKILL.md playbooks that any connected agent can look up before it acts. Each write becomes a Change Request carrying a message, a field-level diff, an author, and history; your permissions decide whether it merges at once or waits in the Inbox for approval, and any change can be reversed. Ask an agent to turn a Base into a dashboard, CRM, or content desk and it runs as an AirApp on live workspace data. Claude Code, Codex, Cursor, Gemini CLI, n8n, or your own process can connect through MCP, OpenAPI, the CLI, TypeScript and Python SDKs, or an in-app chat session. Templates install a complete setup, with sample data and an agent manual, in one command. Start it with one command and no accounts, because the open-source edition is a single-user workspace with no sign-in screen. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Omnom
Omnom saves the pages you bookmark as full rendered snapshots, so the article, thread, or documentation page you kept is readable years later even if the original site changes or disappears. Bookmarks accumulate multiple snapshots over time, and the compare view shows two side by side or as a unified diff, revealing what an edited page used to say. Images and other media are downloaded and stored alongside each snapshot, keeping saved pages complete offline. The Firefox and Chromium extensions send pages exactly as your browser rendered them, capturing dynamic content a simple link saver would lose. A built-in reader aggregates your RSS and Atom subscriptions into one stream, where you can archive items individually or page by page and search feeds and bookmarks together. Through ActivityPub, other people can follow your public bookmarks from Mastodon or Pleroma, and you can follow Fediverse accounts in the same stream. Bookmarks can stay private or be shared publicly, organized with tags and nested collections, and filtered by date, domain, owner, or free text across saved content. Your dashboard tracks weekly, monthly, and yearly bookmark counts beside your most used tags, while a documented API and command line tools handle imports, tokens, and feed updates. Sign-in relies on one-time email tokens, OAuth, or a trusted Remote-User header from your reverse proxy, so no password is ever stored. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Antirion
Your apps keep using the OpenAI SDK while Antirion, a self-hosted AI gateway, decides which provider answers, what each team may spend, and what gets logged. Clients speak the OpenAI, Anthropic, Gemini, or Bedrock APIs, and Antirion translates between them, so a Claude deployment can answer an OpenAI-style call, streams included. Add providers such as Amazon Bedrock, Vertex AI, Mistral, Groq, DeepSeek, or a vLLM server, then publish them as named Models. Routing rules send traffic by team or project with fallback chains, weighted splits, least-cost or least-latency targets, retries, hedging, and circuit breakers. Budgets and rate limits in dollars or tokens apply per organization, team, project, and key, with projections and alerts before money runs out. Guardrails check for personal data, secrets, keywords, and regex matches, then block, redact, flag, or divert. Exact and semantic caching answers repeated prompts without calling a provider. The request log records every attempt, route, token count, cost, and guardrail verdict, with Prometheus metrics and OTLP traces. An MCP gateway and A2A proxy put tools and agents behind the same keys. Sign in with OIDC, SAML, or GitHub, provision users with SCIM, and review every change in the audit log. Changes you choose can require a change request or a second person's approval, and the Playground sends requests from the console. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
OpenSlides
If an assembly needs motions, amendments, speaker lists, and secret ballots on one shared screen, OpenSlides is the open-source web application that runs them. Before the meeting, administrators set up committees and meetings, import participants from CSV or connect a SAML identity provider for single sign-on, email invitations with login data, and sort people into groups with freely defined rights. Members file motions in an HTML editor, attach documents, gather supporters, and send them through customizable workflows with automatic numbering by category, and amendments and change recommendations attach to specific line numbers. Motions can be forwarded to other meetings. During the session the agenda reorders by drag and drop, and every item, motion, or election gets its own speaker list with countdowns, points of order, and recorded speaking time. Votes are open, secret, or nominal and run live for present participants in voting groups, with proxy delegation, vote weighting, multiple rounds, and Yes/No/Abstain options per candidate or list. Results appear against a chosen reference value on projectors, in PDF exports, or as individual tallies. Several projectors can show the current item, a lower third for the active speaker, and live results, and Autopilot guides participants through whatever is happening. A video livestream brings in remote attendees. Afterward, motions export to PDF, CSV, or XLSX. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Rustunnel
Rustunnel turns a service running on your laptop or private network into a public HTTPS, TCP, or UDP endpoint without opening inbound ports on the machine where it lives. Point the client at a local port and share the public address for webhook testing, a quick demo, an AI agent tool, SSH access, a game server, or an IoT device that cannot accept inbound connections. Give tunnels custom subdomains on your own wildcard domain, terminate HTTPS with automatic Let's Encrypt certificates, and keep client traffic encrypted from edge to local service. Put several backends behind one subdomain or TCP port and let TCP or HTTP health probes remove sick members before visitors hit them. When two peers can reach each other directly, start a P2P tunnel with NAT hole punching and QUIC, with relay fallback when the direct path fails. Watch sessions, tunnel health, traffic, and request logs from the live dashboard, inspect headers and bodies in the local request inspector, and replay a captured call while debugging a webhook. Manage tunnels, tokens, groups, captured requests, and history through the REST API, scrape Prometheus metrics, review audit logs, or let an MCP-compatible coding assistant create and close tunnels in plain language. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Insights LM
Insights LM gives you a NotebookLM-style research assistant that runs on your own infrastructure and answers strictly from the documents you feed it. Build a notebook for a project, drop in PDFs, pasted text, website links, and audio files, then ask questions in plain language and get answers grounded in those sources rather than the open internet. Every answer carries citations you can click to jump straight to the passage it came from, so verifying a claim takes seconds instead of a fresh search. Findings worth keeping become notes saved alongside the notebook, building a private knowledge base that grows with your research. When reading is too slow, generate an audio overview and listen to two hosts discuss your material like a podcast episode, perfect for absorbing a long report on a walk. Teams use it to interrogate internal documentation, onboard new hires against company knowledge, and brief themselves before meetings without uploading confidential files to a third-party service. Because the whole stack is yours, you choose which AI models do the reading, including local models for fully private work. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Django-CRM
Small teams that have outgrown spreadsheets but balk at per-seat CRM pricing can run Django-CRM on their own server, with leads, deals, tasks, and email campaigns in one self-hosted system. Requests from website contact forms arrive automatically, email requests are imported from the company mailbox, and each gets a unique ticket and is matched against existing companies, contacts, and leads. When nothing matches, a new lead is created and later converted into a company and contact person. Deals carry products, payments, currencies, and price tiers, and the price list exports to Excel. Tasks can be individual or team-based with subtasks, memos can spawn tasks or projects, and participants chat and share files inside each one. Eight analytics reports cover the sales funnel, income forecasts, lead sources, conversions, and closing reasons. The built-in email client works over SMTP and IMAP, supports Gmail through OAuth 2.0, and links each message to its request, lead, or deal. Mass mailings are spread through the workday and can use additional mailboxes to protect managers' main accounts from spam filters. Web forms are protected by reCAPTCHA v3, IP geolocation fills in each requester's country and city, and VoIP callbacks and WhatsApp or Viber messages are supported. Object-level permissions control who can view, add, change, or delete each record, and the interface offers 22 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
RosarioSIS
Report cards, attendance rosters, class schedules, discipline logs, and fee statements all live in one browser-based system with RosarioSIS, an open-source student information system for K-12 schools and similar institutions. Administrators define marking periods in up to three tiers, set grade levels and daily periods, and search students by gender, grade level, schedule, absences, GPA, or class rank. The scheduler places whole classes or a single student, and runs in test mode each time a student's requests are saved, so conflicts can be resolved with the student still in front of you. Teachers keep a weighted gradebook with grade ranges, progress reports, report cards, and transcripts, take attendance electronically, and use the eligibility feature to flag who may join athletic or academic activities. Discipline logs, student billing with fees, payments, balances, and statements, food service, and accounting complete the core modules. Parents and students get their own portal, new families can register online, listings export to Excel, CSV, or XML, and charts and PDF documents support decisions and paperwork. The interface adapts to tablets and phones and is translated into a dozen languages. Add-on modules bring email, library, hostel, Jitsi Meet video rooms, and Moodle integration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.
Sage Wiki
Sage Wiki turns a pile of unstructured documents into a fully interlinked, searchable wiki by running them through a five-pass LLM compiler pipeline. Inspired by Andrej Karpathy's vision of LLM-compiled knowledge bases, the pipeline processes source files through diff detection, summarization, concept extraction, image captioning, and cross-reference discovery, with parallel LLM calls and checkpoint/resume for vaults scaling to 100,000+ documents. The typed ontology graph stores entities and relations with BFS traversal, configurable relation types, multilingual synonyms, and a promotion/demotion lifecycle backed by grounding verification and consensus scoring. Multi-format ingestion handles Markdown, PDF, Word, Excel, PowerPoint, EPUB, email, CSV, images, and code files without manual tagging. LLM provider support spans Anthropic, OpenAI, Gemini, Ollama, and any OpenAI-compatible API, with per-pass model routing enabling cost optimization by assigning cheaper models to simpler tasks. The built-in MCP server exposes 17 tools over SSE transport for integration with Claude, Cursor, and any MCP-compatible agent, while native Obsidian vault overlay ensures existing note workflows remain undisrupted. Team deployment supports Git-synced shared wikis, centralized server access, and hub federation across multiple projects. Ships as a single Go binary with Docker Compose multi-arch images serving the web UI on port 3333. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Manage My Damn Life
Manage My Damn Life is a personal productivity platform and CalDAV task manager that gives individuals and teams a full-featured web workspace for coordinating todos, calendar agendas, and project schedules without relying on proprietary productivity software. Users can connect multiple CalDAV server backends including Nextcloud, Radicale, and Baikal to synchronize tasks, events, and subtasks across their self-hosted infrastructure. The interface offers multiple interactive perspectives, letting planners switch between nested task checklists, full monthly calendar grids, and dynamic Gantt chart roadmaps with customizable timeline scales. Keyboard-driven operators can rapidly log action items via intuitive Quick Add syntax that parses due dates, priority tiers, and category labels from inline text triggers. A versatile filter manager allows users to save custom query views matching due dates, completion statuses, parent task hierarchies, and color-coded labels. Team members can establish reusable task templates for recurring administrative workflows, assign multi-level checklist items, and manage individual calendar visibility across shared workspaces. System administrators can configure user authentication through native accounts or integrate enterprise Single Sign-On using OpenID Connect providers like Keycloak, Authentik, and Google. Client-side state caching accelerates navigation while background sync preserves CalDAV compliance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL v3 licensed.
Medama
Track website traffic and conversion funnels with sub-second precision while guaranteeing visitors total anonymity with Medama, a privacy-first web analytics platform operating without cookies, IP storage, or consent banners. Site owners embed a sub-kilobyte tracking script into web headers to record page views, session duration, referrers, screen resolutions, browser user agents, and geographic countries anonymously. Built-in caching header mechanisms determine unique daily visitors without generating persistent hashes or storing cross-site identifiers that violate privacy regulations. The web dashboard visualizes hourly traffic trends with interactive area charts and provides multi-dimensional data tables breaking down top-performing pages, search engine referrers, operating systems, and campaign UTM parameters. Developers can instrument custom click events and page attributes using simple HTML data attributes to measure conversions, document downloads, button interactions, and user subscription states. Administrators manage multiple websites from a single interface, configure curated anti-spam blocklists using Firehol and Tor exit node feeds, and monitor server CPU, memory, and disk usage in real time. Full OpenAPI specification endpoints allow teams to export analytics data directly into internal business intelligence pipelines and custom executive dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
MikroDash
Watching a MikroTik RouterOS v7 router in real time is what MikroDash is for: live traffic, connections, Wi-Fi clients, DHCP leases, and WireGuard peers reach the browser the moment anything changes. Cards drag into any layout, and the arrangement follows your account to every browser. Managing a fleet happens on the Devices page, which shows routers as cards, a list, or a world map with 24-hour connectivity, last backup, open alerts, and pending updates. Rolling out a change starts in Config Management: choose one of 20 ready-made templates or capture your own, then deploy to one router or the fleet with a restore point, a canary router, and an automatic revert if a change cuts MikroDash off. Scheduled backups are kept only when something changed, with a diff and a guarded restore. New sites join through a generated script that calls home over a built-in WireGuard tunnel, even from behind NAT. Alerts reach SMTP, Telegram, ntfy, Discord, Slack, Gotify, Pushover, and Apprise. Troubleshooting stays in the browser with ping, traceroute, torch, bandwidth tests, a packet sniffer, and a RouterOS terminal. Read-only API access covers every page and alert, while roles, OpenID Connect sign-in, and an audit trail of every write govern shared use. Off by default, an optional assistant answers from live router data and asks before changing anything. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
TimeTracker
Why export timesheets from one tool, manage Kanban tasks in a second, and copy billable hours into a third just to send a client invoice when TimeTracker handles the entire agency workflow in one self-hosted platform? Start a persistent server-side timer from any browser or log hours manually using saved templates, bulk entry forms, and automatic idle detection. Project managers organize deliverables across drag-and-drop Kanban boards, Gantt timelines, and threaded task comments while monitoring real-time project budgets and cost burn rates. A built-in CRM tracks client contacts, lead scores, and sales pipeline stages before work even begins. When billing day arrives, you convert unbilled hours, reimbursable receipts, mileage logs, and per diem allowances directly into branded multi-currency invoices without double-billing a single minute. Finance teams can customize PDF invoice layouts, automate recurring billing schedules, and transmit EN 16931 compliant electronic invoices via Peppol or embedded ZUGFeRD/Factur-X XML. Interactive analytics dashboards and scheduled CSV or Excel exports give every stakeholder complete visibility into billable utilization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Gibbon
Running a school means juggling lesson plans, timetables, attendance, behaviour notes, and grades all at once; Gibbon gives teachers, students, parents, and administrators one shared web system for that daily work. Teachers build lessons from reusable Smart Blocks, assemble them into units with learning outcomes, set and collect homework online, and grade the results in a colour-coded markbook that stays linked to every class. The timetabling engine builds schedules from reusable day structures, ties them to real calendar dates, handles exceptions, books rooms and facilities, and shows every student and teacher exactly where they should be. Attendance can be taken by form group, class, or individual student, with future absences recorded ahead of time and reports ready for emergencies or truancy follow-up. Behaviour records log the good alongside the bad using your school's own descriptors and severity levels, notify form tutors when something needs attention, and surface patterns across a student's history. Each student's profile pulls timetable, attendance, behaviour, library, and assessment information into one page, while activities sign-ups, a school-wide resource library, and departmental scope-and-sequence views keep the wider community connected. Because every module can be switched on or off per role and extended with community modules, the same platform fits a small primary school and a large secondary school in 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.