Seatsurfing brings desk booking, room reservations, and parking management to interactive floor plans across multiple office locations, solving the coordination headache of hybrid work. The Go backend serves two React/TypeScript frontends through a single Docker container on port 8080: a Booking UI built as an installable Progressive Web App for mobile and desktop reservations, and an Admin UI for floor plan configuration, capacity enforcement, and analytics. Interactive floor plans accept uploaded office layouts where administrators visually place bookable spaces with per-space metadata and availability rules. Multi-location support handles organizations with distributed offices across multiple buildings and cities. The buddy system displays which colleagues have bookings on a given day, enabling team coordination without manual communication. Capacity management enforces occupancy limits per area with automatic denial when thresholds are reached. SSO integration supports OIDC and OAuth2 providers including Microsoft Azure AD, Keycloak, and Authentik for enterprise identity federation. Microsoft Teams and Confluence integrations embed booking directly into collaboration tools employees already use daily. The REST API enables automation and custom integrations, while the analytics dashboard tracks utilization rates, peak hours, and booking patterns. Docker Compose deployment requires only a PostgreSQL database with multi-architecture images supporting amd64 and arm64. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Drop your screenshot, a base style is applied, style it however you wish, and export - "that's basically it," says Moocup's own author, and the description holds. The workflow is genuinely seconds long. Drag an image in and it lands on an attractive backdrop immediately; from there you adjust backgrounds, gradients, padding, borders, shadows, and framing with live preview until it matches your taste, then export a high-quality image ready for a portfolio page, README, blog post, tweet, or slide deck. There are no accounts, no watermarks, and no upload to anyone's cloud - as a self-hosted static app, your screenshots never leave your infrastructure, which matters when the screenshot shows a proprietary dashboard or unreleased product. It runs entirely in the browser from a tiny nginx container, works on any device, and requires zero design skill: the smart defaults do the heavy lifting, and everything else is optional tinkering.

CAPTCHAs make every visitor solve a puzzle to prove they are human; Mosparo takes the opposite route and checks the submitted content itself, no challenges, no image grids, and no tracking cookies. Drop the customizable checkbox widget into any form and Mosparo inspects each field separately, scoring the entry against your rules the way an email spam filter scores a message. Build field rules for banned words, domains, email addresses, IP addresses and subnets, providers, Unicode blocks, user agents, and websites, each with its own rating weight, or subscribe to shared rule packages that refresh themselves automatically. Every submission lands in an admin inbox with its spam rating, IP address, and verification status, and dashboard charts show valid versus spam traffic plus delayed or blocked requests over time. Legitimate users notice nothing but a plain checkbox, which stays fully usable with assistive technology, while everything Mosparo stores is encrypted and automatically deleted after 14 days. Run one instance for many sites with separate projects, project groups, and member roles, and connect your forms over the documented API from any stack that can send an HTTP request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Excerpt-only feeds, truncated teasers, and articles in languages you do not read make RSS feel broken; FeedCraft sits between the source and your reader and fixes the feed itself. Pick from more than twenty single-step crafts: extract the full article text, even from JavaScript-rendered pages through a headless browser, translate titles or whole articles, add AI introductions and summaries, strip ads and clutter, or filter items by keyword, embedding similarity, or a natural-language prompt to your own LLM. Chain crafts into FlowCraft pipelines, so one pass can limit a feed to ten items, fetch every full text, drop the advertorials, and summarize what survives. Save the result as a recipe and FeedCraft hands you a permanent crafted feed URL that drops straight into the reader you already use, while portable mode transforms any feed on the fly from a single crafted URL prefix. When a site has no feed at all, the visual generators build one from a webpage with CSS selectors, from a JSON API with curl import, or straight from search results. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Oh My CPA gives a CLIProxyAPI gateway a proper control room, where providers, OAuth credentials, client keys, model routing, and the cost of every request are managed and watched from one self-hosted console. You add providers such as Codex, Claude, Gemini, xAI, DeepSeek, Vertex AI, and OpenAI-compatible services, each with credentials, retry and error policies, priority, weight, and an enable switch the gateway actually enforces. OAuth accounts are signed in from the console, with quota window readings, refresh schedules, and per-credential model aliases kept next to the keys they belong to. Client keys can be created, named, and revoked, and those names follow the traffic into request records and filters so you always know which key spent what. The dashboard follows request volume, token throughput, cache hit rate, and cost from the last fifteen minutes out to ninety days, with a year-long token heatmap for the long view. Insights compare keys, models, providers, and credentials against the previous period, while the live routing view shows which credential each request travelled to and whether it was rerouted. Every request stays searchable, with duration, time to first token, token breakdown, and the raw log in a detail drawer. A playground tests any routed model with text and images before your users do. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

FreeSBC sits at the edge of your phone system so your FreeSWITCH or Asterisk never has to face the public internet. It is the only element with a public address: phones register through it over SIP on UDP, TCP, or TLS, browsers call through WebSocket with WebRTC terminated at the edge (ICE-Lite, DTLS-SRTP, and RTCP-mux, relayed onward as plain RTP), and carriers reach your switch through it as an outbound proxy, with the switch's private addresses hidden from every SDP body, Contact, and Request-URI it constructs. The switch stays on a private LAN as the registrar and call brain, holding credentials and carrier accounts, while FreeSBC anchors all media on its own ports with hardened first-packet latching and a silence watchdog, and never transcodes. Against the background radiation of SIP scanning, it applies per-IP rate limits with separate limits for carrier sources, scanner fingerprinting with in-memory bans, and admission control for public INVITEs and REGISTER enumeration, and every denial is a silent drop. A multi-switch pool hashes users across switches, and one fixed private socket keeps the trusted side simple. The embedded WebUI, REST API, and Prometheus metrics sit behind a bcrypt-checked admin login, showing live calls and media ports. One static binary, one YAML file, no database, no Redis, and no separate media process to babysit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Cupdate keeps a watchful eye on every container image you run, reporting which ones are outdated or vulnerable while deliberately never touching the update button itself. Point it at a Kubernetes cluster, a Docker socket, or Podman hosts (local or remote, one or several) and it inventories every image in use with no configuration to write. Each image is matched against its registry to find the newest available version, and the dashboard shows the gap between what you deployed and what you could be running, with release notes inline so the decision to upgrade takes seconds instead of a changelog hunt. Vulnerability data is layered on top from four sources: Docker Scout for Docker Hub images, Clair for participating Quay images, GitHub Advisories for images tied to repositories, and osv.dev correlation for images shipping SBOMs. A dependency graph explains why each image exists in your stack by showing which workloads pull it, which ends the "can I delete this?" guessing game. Subscribe to the RSS feed to hear about new releases passively, query the REST API to drive scripts that update compose files or kustomizations, or surface outdated and vulnerable counts in a Homepage dashboard widget. Prometheus metrics and traces are available when you want the watcher itself watched. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stop hunting for a public mirror that still works this week: MirrorProxy puts every software source your builds depend on behind one domain you control, so GitHub releases, container images, npm and PyPI packages, and operating-system repositories all come from the same stable gateway. Point it at a source and it fetches and caches on demand, with no full mirror to store or sync, and when an upstream times out or starts rate-limiting, it fails over to the next endpoint and keeps your builds moving. Around thirty adapter types cover the everyday sprawl: Docker Hub and nine other registries, Cargo and Go modules, Maven and NuGet, Homebrew and WinGet, and more than thirty Linux and BSD distributions, plus custom static repositories you define yourself. Sharing the gateway is safe: invite users, set monthly quotas per person or team, restrict which sources each team may use, and gate access with rate limits and IP rules, while the console shows traffic trends, visitor regions, cache behavior, and the health of every source. Email and webhook alerts warn you before a quota runs out or an upstream outage drags on, and the cross-platform client switches a workstation's sources to your gateway and back. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your server already runs your apps; PhreshOS gives it a desktop. Install the System once and every Program you add gets a window on a real browser desktop, complete with taskbar, start menu, and a plane of views you can spread work across. Close the browser and nothing stops: each Program's server keeps running on the machine, holding its data and state, and when you open the Desktop again the windows are exactly where you left them. The System handles the groundwork every small web tool normally rebuilds for itself: one sign-in for the owner, permissions that decide what each Program may reach, storage and uploads, logs, and messaging between Programs, so a new tool only brings its own logic. Everyday pieces like the file manager, Settings, and even the wallpaper are Programs too, and an appearance changes colors and motion across the whole desktop at once. The same Desktop opens in several browsers simultaneously, each with its own view and scale, and AI agents work alongside you through the same Programs and APIs you use. When you want another tool, you create it as a small web project and its window appears on your desktop. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Fail2Ban quietly bans thousands of bots on a typical VPS and just as quietly keeps the whole story buried in a log file nobody reads, and Fail2Ban Report digs that story out into a dashboard you will actually open. Shell scripts convert each day of fail2ban.log into JSON, and the web interface lays every ban and unban on a searchable, filterable timeline you can slice by jail, server, or time window. Aggregated statistics for today, yesterday, seven days, and thirty days show which jails absorb the most attacks, while markers flag repeat offenders and escalating ban counts so persistent scanners stand out from one-time noise. Blocklists live per jail and per server as plain JSON, and ban or unban actions execute through UFW, giving you permanent bans that survive independently of jail restarts. Bulk actions handle whole ranges at once, with a pending state until the next sync applies them. Multiple servers feed one console through a pull-based HTTPS endpoint, so a fleet of small machines reports to a single pane without exposing SSH. Optional AbuseIPDB and IP-Info lookups add reputation and region context to any address. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Radarr, Sonarr, and their sibling apps watch RSS feeds for new releases but never go back for what your library is still missing, and Houndarr fills that gap by asking them to search in small, polite batches. It reads the wanted lists of every connected Radarr, Sonarr, Lidarr, Readarr, and Whisparr instance and sends a few search commands per cycle, so a big backlog drains over days instead of arriving as one Search All Missing burst. Each instance has its own batch size, sleep interval, hourly cap, per-item cooldown, and post-release grace period, plus an optional download-queue limit, allowed search windows such as 09:00-23:00, and tag filters that include or exclude items. Three independent passes run per instance: missing items, cutoff-unmet items below your quality profile, and upgrades for files that already meet cutoff, with the last two off until you enable them. Sonarr, Lidarr, and Readarr can search by season, artist, or author, and search order is random or oldest-first. The dashboard shows library health, recent hunts, hourly budgets, and a cooldown schedule per instance, with Run Now buttons for on-demand cycles. The Logs page records every search and skip with its reason in a filterable audit trail that copies as TSV. A key-gated widget endpoint feeds Homepage dashboards, and built-in login or reverse-proxy authentication protects the interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Notes, tasks, and habits in one app, synced only to a server you run yourself. Notes are written in Markdown and render right in the list, so reading one costs no clicks. Tasks get a planned date and time, a duration, a checklist, and a timer. Weekly statistics show what got done and how long it took. Habits are measured by how overdue they are, not by an unbroken streak. A habit on a ten day interval that is two days late reads 120 percent. Charts track progress toward the target for today, this week, this month, this quarter, and this year. They also list the ten longest streaks and what you finish on each weekday. Categories and priorities span all three item types. Search reads note text and checklist items, not only titles. Filter by date, status, or how overdue a habit is, then sort with eleven keys. Pick from 26 themes in dark and light mode and 20 languages, with full keyboard and screen reader support. Import and export JSON, YAML, TSV, or Markdown, or bring in a Google Keep Takeout ZIP. Native apps for Windows, Linux, macOS, iOS, and Android sync with your server. The single-user Docker server also serves an OpenAPI spec, a Scalar UI, and a log page behind the same login. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Renewlet is a self-hosted subscription ledger that shows exactly what your recurring services cost each month and warns you before every renewal, so no charge lands unannounced again. Record each subscription once with its price, currency, billing cycle, renewal date, payment method, and notes, and the dashboard keeps the monthly and yearly totals current, compares them against a budget you set, and converts between currencies. Reminders go out in each user's own time zone through Telegram, Discord, email, webhooks, and six more channels, with repeat reminders, delivery history, and retries when a send fails. Adding subscriptions takes seconds: point the AI recognition at a bill screenshot, a note, or a pasted table and it drafts the entries for your review, or import data from Wallos and other exports. Every subscription can join a shared calendar feed or publish its own ICS feed, and a public status page can show your stack with prices hidden. Accounts are protected with authenticator codes, recovery codes, and passkey sign-in. A read-only public API lets CLI tools and Shortcuts query your subscriptions, and the whole app runs in a single Docker container or on Cloudflare Workers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a ClickHouse cluster slows down, the answers are buried in system tables nobody wants to query by hand; CHMonitor turns those tables into an operations dashboard that explains what the cluster is doing and what to fix next. Live views cover running queries with elapsed time, memory, and a kill action, while history, failed, slowest, and most-expensive pages rank finished work by CPU, duration, and rows read, each with the full statement and one-click EXPLAIN. Thread-level analysis shows how a single query parallelized, and per-user summaries reveal which analyst or service is eating the cluster. Beyond queries, you get a merge and part-lifecycle timeline, replication queue and Keeper health, a live topology map of shards and replicas, storage breakdowns by database, table, and part, and a query activity heatmap spanning a year. An AI advisor reviews the workload and recommends skip indexes, projections, PREWHERE clauses, and TTL changes ranked by impact, with an MCP interface and built-in agent for asking questions in plain English; it recommends only and never applies DDL. Threshold-based health checks alert to Slack, Discord, PagerDuty, or Opsgenie, multiple ClickHouse hosts are watched from one dashboard, and a companion terminal UI covers quick checks from the shell. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

One calendar answers who is away next week: Urlaubsverwaltung is a self-hosted leave and absence manager where employees request vacation, managers approve it, and sick notes and overtime balances live beside the requests. A request moves through waiting, provisionally approved, finally approved, rejected, or cancelled states, so employees and approvers always see where a decision stands. Department heads decide for their own teams, a second stage authority can add the final approval, the boss sees every request company wide, and office staff manage people, settings, and sick notes for others. Administrators configure which absence types exist, from annual and special leave to parental leave, sabbatical, training, and working from home, each with its own color and rules. Sick notes are recorded as full day, morning, or afternoon, including child sick notes, and a note can later be converted into vacation when plans change. Overtime gets the same care: staff log hours and minutes for any period, choose to add or reduce their balance, and attach a comment for the record. Personal, department, and company calendars collect every absence, secret iCal links feed external calendar apps, and optional Google Calendar synchronization pushes new and changed entries. Email notifications for submissions, upcoming absences, substitute duties, and overtime entries can be switched on per person, and a token protected REST API exposes persons, absences, sick notes, and workdays. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Ask your assistant what you spent on groceries last month, and let it answer from your actual bank accounts instead of a spreadsheet you never update. BankMCP is a small server you run yourself that connects your European banks to Claude, ChatGPT, Cursor, or any MCP client, so questions about balances and spending get real answers. Ask for a balance and it fetches the booked and available figures live; ask where the money went and it searches transactions across every connected account by merchant or invoice number; ask for the month and it totals money in and out while leaving transfers between your own accounts out of the picture. Background watches keep an eye out between conversations: get a webhook when a balance crosses a line, a large debit lands, a named payment arrives, or an expected payment has not shown up by its date. Ready-made prompts cover connecting a bank, building a budget, scanning savings, auditing subscriptions, and spotting unusual transactions. The server is deliberately boring about your data: it keeps consents, account labels, watches, and your login, fetches balances and transactions only when asked, and stores none of them. It is read-only by design, with no payment tools to abuse. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Friends drift away when nobody remembers to call; Meerkat CRM is a self-hosted personal CRM that keeps your relationships warm with birthday and stay in touch reminders, contact notes, and a living map of who knows whom. Organize every contact into circles like family, friends, or work, store spouses and children as linked relationships, and see the whole crowd on an interactive network graph that shows how people connect. Sync the same address book two ways: Meerkat runs its own CardDAV server for your phone and can also act as a CardDAV client against an external server you already use. Against each person you can keep the details that matter, dietary habits, kids names, the last conversation, plus a social style timeline of activities you have shared, from dinners to group projects. Reminders nudge you by email when it has been too long, with upcoming birthdays surfaced on the dashboard, so catching up becomes a habit instead of an afterthought. Move data in and out freely: import CSV, VCF, and even a Monica export, export back to CSV and VCF, connect external calendars, and fire webhooks into your own automations. Use it in English, German, Italian, Spanish, or French with light and dark modes, and SSO for whoever shares the house. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Keeping users informed about software releases while gathering community feedback on upcoming roadmap items becomes effortless with ShipShipShip, a self-hosted changelog, release notes, and feature voting platform. Product managers can draft rich release announcements using a formatting editor that supports Markdown, embedded media uploads, color-coded category tags, and exact publication timestamps. Instead of juggling disconnected feedback spreadsheets, teams organize backlog proposals, active development tasks, and shipped updates across a drag-and-drop Kanban board or a filterable list view. Visitors browsing the public roadmap can upvote proposed features to help prioritize the next sprint and react to announcements using eight expressive emoji reactions. When an item moves into a shipped status, the built-in newsletter engine automatically dispatches formatted release emails over SMTP to subscribers using customizable per-event templates and one-click unsubscribe links. Design-conscious organizations can install manifest-driven public themes, map internal workflow statuses to public roadmap columns, and tailor brand colors and logos. International audiences can navigate the interface in seven languages, including full right-to-left layout support, while engineering teams automate event creation through the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.