Software makers who would rather not rent a licensing backend use Keygate to issue, sell, and enforce license keys from infrastructure they control. You create desktop, SaaS, or hybrid products and sell them as subscriptions, perpetual licenses, perpetual licenses with a maintenance period, trials, or floating concurrent licenses that are checked out, heartbeated, and returned automatically. The admin dashboard manages products, plans, customers, licenses, API keys, webhooks, analytics, audit logs, team members, email templates, and branding, with search, filters, and CSV or JSON export. Your application activates and verifies keys through the license API, enforces per-device or per-user activation limits with grace periods, and can verify Ed25519 signed tokens offline with a public key. Usage metering tracks API calls, storage, bandwidth, or custom metrics against quotas with hourly, daily, monthly, or yearly reset cycles and webhook threshold warnings. Connecting Stripe makes checkout create licenses automatically, follows plan and seat changes with proration, handles refunds and cancellations, sends dunning emails after failed payments, and gives customers a billing portal and self-service license management. Team seats, feature entitlements, purchasable add-ons, scoped API keys, and optional S3-backed release hosting round out the selling stack in one binary with one PostgreSQL database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Bots that knock on your server's login ports are always turned away by Knock-Knock, a multi-protocol honeypot that shows every attempt on a live dashboard. Honeypots answer on the standard ports for SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP, with MQTT, Node-RED, Modbus, S7, and SNMP as optional extras. Authentication is always rejected, so no bot ever gets a shell. Who is knocking? The live feed shows each attempt's country, username, password, ISP, IP, and protocol. From where? A 3D globe marks the origin in one of six styles, including an extruded country heat map. Trying what? Leaderboards rank countries, usernames, passwords, ISPs, and IP addresses, and a trivia panel explains why bots favor certain credentials. A protocol filter re-slices the feed, globe, and leaderboards together; SIP shows dialed numbers and toll-call destinations, and RDP shows hostnames and accounts. Too fast? Press the space bar to pause, right-click any knock for details, or switch on a virtual Geiger counter that clicks as attacks arrive. Want to fight back? Download hourly 30-day and 365-day blocklists with recipes for CSF, CrowdSec, ipset, nftables, and pfSense, or query the optional API for any IP, CIDR range, or ASN. Several honeypot servers can stream into one aggregated dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Ruvio is a Redis-compatible in-memory database that folds the cache, the lock service, the rate limiter, and the delay queue into one Rust process your existing clients already speak to. Connect with redis-cli or the first-party clients for Rust, .NET, Go, Java, Python, and Node.js, and the familiar strings, hashes, lists, sets, sorted sets, and streams are there, 287 commands in all. The difference shows in the primitives that usually need a second system: LEASE grants a fencing token for a key, SEMAPHORE caps concurrent holders with per-holder TTLs, INCRBY with MAX builds a counter that refuses to pass capacity, SETV writes only when your version is still current, CHANGES arms a feed of later writes on a shard, and XADD DELAY stores a stream entry now and reveals it to consumer groups when the delay passes. Each shard owns its keys outright, parsing, recording, and applying without a lock on the hot path, and features cost memory only on keys that use them. Durability is a startup choice you name, memory, snapshot, everysec, or always, written through a write-ahead log, and replicas copy shard by shard while optional coordinators agree through Raft to promote a replica when a primary stops answering. A browser operator UI shows data, command forms, Pub/Sub, and ACL users on the running server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Kaleta is a business-website CMS where the page you edit is the page your visitors get, not a preview of it. The visual builder works on the live canvas: add sections, drag elements, edit text in place, and style every element separately for desktop, tablet, phone, and hover before you publish. Forty-six elements and forty ready-made sections cover pricing tables, timelines, before-and-after sliders, galleries, accordions, carousels, maps, and mega menus. Consistency comes from a design-token system: change one colour, font, spacing, or radius token and the whole site follows, with a WCAG contrast check on every colour pair and export in the W3C token format. Blocks you reuse become components edited once and updated everywhere, and each page carries its own search title, sharing image, and visibility, with the last twenty publications kept as versions. Moving in is a first-class feature: importers take WordPress exports including WooCommerce products and Polylang or WPML translations, plus Ghost, Blogger, Joomla, Drupal, and Webflow, creating a redirect from every old address so rankings survive. An optional AI assistant connected through MCP builds pages and handles chores only as drafts you approve. Forms, booking, enquiries, media folders with focal-point cropping, multilingual publishing, and GDPR duties such as automatic personal-data deletion are built in rather than bolted on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Your family's shopping list, calendar, chores, meal plan, and budget share one home in OpenFamily, a self-hosted organizer that replaces subscription family apps with software you control. At the store, everyone ticks items off the same shopping list, with automatic categories, prices, reusable templates, and a store mode that groups items by category, and every phone updates instantly. At home, recurring tasks with three priority levels go to a specific family member, and in Pocket money, approved chores earn points that convert to payouts and savings goals. The calendar offers a monthly view per member, handles recurring and all-day appointments with up to five reminders each, follows Google, Outlook, or iCloud calendars by address, imports .ics files, and publishes its own iCal feed. Recipes can be found by typing the ingredients you already have, then dropped into a weekly meal plan. At month's end, the budget shows recurring income and expenses, per-category limits, charts, and a Kakeibo view. A kiosk display turns a wall tablet into a read-only board of today's schedule, meals, tasks, and who's where, alongside sticky notes from the family. Member profiles store allergies, vaccines, and emergency contacts, and parent and child roles keep the budget read-only for kids. Mealie, Tandoor, Home Assistant, Grocy, Nextcloud, and Immich connect in one click, and an optional AI assistant handles plain-sentence requests. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Mapping every physical server, virtual machine, container, and network link across a sprawling homelab into a live interactive canvas, Circuit Breaker gives infrastructure operators real-time topology visualization, IP address management, and rack elevation modeling on a single screen. Operators can switch between hierarchical, concentric, cortex ring, radial, and force-directed graph layouts where animated edges reflect link speeds and color-coded status rings display live hardware health. Automated discovery scans local subnets using nmap, SNMP, and ARP while querying Proxmox VE clusters, TrueNAS storage pools, and UniFi controllers, staging newly detected nodes in a review queue before adding them to the map. For multi-site labs or isolated VLANs, lightweight remote agents connect outbound over Noise-encrypted links after fingerprint approval to report host telemetry and run scoped network scans without opening inbound firewall ports. Rack diagrams let administrators drag servers into U slots with cabling overlays using a built-in catalog covering Dell, HPE, Supermicro, Ubiquiti, MikroTik, Synology, and APC gear alongside live iDRAC, iLO, and UPS metrics. Role-based access control, OIDC single sign-on, TOTP multi-factor authentication, encrypted full-state snapshots, and a SHA-256 hash-chained audit log keep multi-user operations accountable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your bank balance is only part of what you own, and MoneyMatter adds the rest: cash accounts, brokerage portfolios, cars, loans, and private deals roll into one net worth figure in your base currency. Add transactions by hand, import CSV, OFX, QFX, YNAB, Wallet, or Microsoft Money files, or let an AI model you provide parse a statement, while Monobank, SimpleFIN, Lunch Flow, and Walutomat connections sync accounts automatically. Each transaction can carry categories, tags, payees, notes, attachments, and splits, transfers and refunds link to their counterparts, and automation rules tidy new entries. Envelope-style budgets assign money to lines with Assigned, Activity, and Available columns and rollover rules, savings goals read progress from account balances, subscriptions and bills send reminders, and loans show payoff projections. Stocks, ETFs, and crypto are priced daily, vehicles depreciate along a curve, and a FIRE planner estimates years to Lean, Regular, Fat, Barista, and Coast FIRE. A customizable dashboard, cash flow, money flow, net worth history, trends comparison, and pivot table chart the results. Share accounts with a household member, export JSON, CSV, or XLSX, back up everything, or connect Claude, ChatGPT, or Claude Code through the built-in MCP server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every home cook keeps a graveyard of recipes scattered across bookmarks, screenshots, chat threads, and one stained index card, and CookTrace gathers the whole mess into one self-hosted library that knows what is in your pantry. Import recipes from URLs, files, or photos, or bring entire Mealie, Paprika, and Tandoor archives in bulk, then cook with live scaling that does fraction-aware ingredient math, per-step photos, and an inline unit converter. A pantry-match pill on every recipe card tells you at a glance what you can actually cook tonight, while barcode scanning and expiration digests keep stock honest. The cook diary and meal planner move from list to month calendar with drag-to-re-plan, and the shopping list generates itself from planned recipes, skipping items you already own and grouping the rest by aisle. Households organize into cookbooks and shared Kitchens with public links, and an optional conversational assistant can log a cook, plan a meal, or import a recipe for you. An opt-in MCP server even exposes your recipes and lists to external AI agents under token-scoped tool tiers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A federated bookmark manager written in Rust: Ties (formerly linkblocks) is your own small corner of the web for saving, organizing, and sharing good pages, connected to the fediverse over ActivityPub. Instead of rigid folders, bookmarks live in arbitrarily nested lists that link together into a knowledge graph. Saved pages are fetched, converted to a readable archived version, and stored in the database, so full-text search covers titles, URLs, and the actual page text - and the content survives if the original disappears. The federation model is deliberately anti-viral: there is no global timeline and no algorithmic feed. You publish public lists for anyone, follow users whose taste you trust, and mark trusted users whose bookmarks become part of your search range - extendable to trusted-users-of-trusted-users for a wider net. Public bookmarks post to Mastodon timelines, and WebFinger lookup makes your handle discoverable across fediverse platforms. Operationally it is about as light as web software gets: a single binary with all assets baked in, integrated TLS so it can run without a reverse proxy, PostgreSQL as the only dependency, OIDC single sign-on, and a bookmarklet for one-click saves. Note the project is alpha: single-user instances only, and all data should be considered public. AGPL-3.0 licensed, built with Rust and htmx.

Point your RustDesk clients at CortenDesk and the bare open-source server turns into a managed fleet console with a real address book, real access control, and a remote client that lives in the browser. One container runs the ID server, the relay, and the console together, and existing key pairs and device IDs move in unchanged, so migration is a hostname change rather than a rebuild. The fleet view shows live presence, platform, aliases, owners, and last-seen for every machine, organized into folders that double as the unit of access control. People see only their own devices plus the groups granted to them, and the same scoping is enforced in the RustDesk client API, not just the web pages. Policies push client settings over the heartbeat, covering permissions, password rules, and capture behavior, and enforced policies revert local changes automatically. Five audit logs record connections, file transfers, sign-ins, security alarms, and console actions, all filterable and exportable to CSV. When a browser is all you have, the built-in web client views and controls machines with file transfer, clipboard, audio, and multi-monitor switching, no installer required. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ANX Calibre Manager puts your Calibre library in your pocket, with a phone-friendly interface for the collection that used to require sitting down at the big machine. Browse and search the whole library from the sofa, open a book in the browser previewer, and have it read aloud when your eyes are done for the day. Any EPUB can become a proper audiobook with chapter markers, playable right in the app with your listening position saved, and ready for dedicated audiobook servers too. Your e-reader stays in the loop: reading progress and time sync back from KOReader devices, books push straight to Anx-reader folders, and sending to Kindle quietly converts to the right format first when the book you have is not the format Kindle wants. Every account gets its own WebDAV library for compatible readers, invite codes keep registration to people you actually know, and roles decide who may edit whose books. Reading statistics build themselves into a year heatmap with your current and finished lists, shareable or private as you choose, and you can even ask a book questions and get answers drawn from its pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

One server can hold every package your builds pull, publish, and cache, so the team stops juggling a different registry for every language. Astrum Repository hosts your own artifacts, proxies public registries so builds keep working when an upstream is down, and groups both behind a single address your tools already understand. Thirty-nine formats share that address: Docker and OCI images, Maven, npm, PyPI, Cargo, Go modules, Helm charts, NuGet, Terraform modules, APT and Yum packages, Hugging Face models, browser extensions, Git LFS, and even remote caches for Nx and Turborepo. Blob storage grows with you, moving between disk, S3, and agent-connected stores that combine into groups without relocating data. Access stays deliberate through users, roles, privileges, and content selectors, with LDAP and OpenID Connect sign-in and access tokens minted for CI pipelines. Day-to-day operations are visible rather than guessed: health endpoints, Prometheus metrics, scheduled tasks, cleanup policies, audit trails, and backups are built in, and several servers can share one database when a single node is no longer enough. The web interface speaks twelve languages, so a platform team spread across regions still works in one console. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

BookHeaven Server turns a scattered folder of EPUB files into a proper library you can browse, organize and read from anywhere, with your progress following you between devices. Import books by copying them into a watched folder or uploading them, and the server reads metadata straight from each file, grouping everything by author, series, collection and tag. When a title, author or cover is wrong, you fix it in the browser and the correction is written back into the EPUB itself, so edits survive even if the file moves elsewhere; missing covers can be fetched from the internet. Each person gets a profile with its own reading progress, including start date, last read date, percentage, elapsed time and finished date, and progress can also be corrected manually. Any OPDS reader app can browse and download from the built-in catalog at /opds/v1, while KOReader devices sync progress by pointing at your server and signing in with a profile name. Upload your favorite fonts once and every connected device can download them, with styles and weights mapped per file or split from a single font. The companion Android reader, built for e-ink screens, discovers the server automatically on your network and downloads books for offline reading. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Traditional database management tools like pgAdmin and phpMyAdmin were built for DBAs, not for the rest of the team that just needs to look up a record or run a quick query. db-ui strips away the complexity and gives you a clean, modern interface that anyone can use. Browse tables in a paginated grid view with inline editing, filtering, and sorting built right into the column headers. The sidebar lists every table and view across all schemas with fuzzy search (Cmd+K to focus) that filters results as you type. Click any table to see its data, or switch to the schema introspection view to visualize columns, types, constraints, and relationships without writing a single query. The SQL editor provides syntax highlighting, result visualization in tabular format, and one-click CSV export for downstream analysis. For questions about your data model, the integrated AI chat assistant has full access to your database schema and can help you understand table relationships, write complex queries, suggest indexes, and provide optimization recommendations with streaming responses. Connect to PostgreSQL, MySQL, or Microsoft SQL Server through environment variables and deploy the whole application as a single Docker container. On RepoCloud, deploy db-ui on a dedicated VPS with root SSH access and direct connectivity to your database servers under the MIT license.

Your coding agents finish a session, close the laptop, and forget everything; Pad is where the project remembers. It holds the tasks, plans, bugs, ideas, and decisions in one workspace that you drive from a browser while your agents drive it from the terminal, so the next session, human or machine, picks up exactly where the last one stopped. You plan on boards, lists, and tables with drag-and-drop status columns, rich item pages, comment threads, and a dashboard that answers what needs attention and what to do next. Your agents read the queue, claim items, leave checkpoints, link their pull requests, and mark work fixed with the fixing PR attached. Conventions teach them the house rules once, like running tests before calling a task done, and playbooks hand them repeatable multi-step workflows they can invoke by name. Every change is versioned with its author, a person or a named agent, and new items appear in the browser the moment an agent creates them in the terminal. The same workspace is reachable three ways: the web interface, the pad CLI, and a bundled MCP server with a natural-language skill that plugs into Claude Code, Cursor, Codex, Windsurf, OpenCode, Copilot, Amazon Q, and Junie. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Pictaria Server sits beside your Immich instance and makes a photo library of thirty thousand images legible again, surfacing the trips, people, and best shots buried under duplicate bursts and forgotten folders. It starts with Insights: a clickable timeline of your years, detected trips, a people constellation linked by who appears together, place and camera rankings, and records like your busiest day. Click any number and you land on the actual photos, ready to open in Immich, turn into an album, or send onward. Enrich puts an AI to work describing what it sees, writing captions, menu-driven tags, and quality scores for every photo using a local model through Ollama or LM Studio, or a cloud provider with your own key, on a scheduled daily budget. Those tags can sync back into Immich, so searching improves everywhere, not just here. Curate then collapses bursts and near-duplicates into stacks with a suggested keeper, and one keystroke keeps the best and skips the rest. Smart Albums compose rules from people, places, dates, cameras, and tags, preview the result count, and maintain real Immich albums on a schedule. Frame owners get remote control, display metrics, and voice photo questions, while the Activity feed and runtime-editable Settings keep the whole box manageable from the browser. It connects with a limited-permissions API key and cannot delete a single photo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Small server, small monitoring. Statlite watches your applications and their host with a single binary that idles at about 15 MiB, so the observer never becomes the heaviest thing on the box. Point it at a Spring Boot Actuator endpoint and it polls health plus a fixed, curated set of Micrometer metrics: request traffic, latency, CPU, and runtime memory, all drawn as clean charts. Quarkus, Micronaut, and anything else that can answer a fixed JSON metrics profile can join the same dashboard. History lives in one local SQLite file, raw samples only, kept for 90 days by default, so yesterday's latency spike is still there when you go looking. The dashboard also watches the host itself: processor load, memory pressure, and filesystem capacity, including a warning before the metrics database fills its own disk. Restart detection tells you when an application bounced, and per-target Basic Auth support lets you poll protected Actuator endpoints safely. Configuration is one YAML file listing your targets and polling interval, friendly to systemd and Docker alike. Everything is deliberately scoped: no alert manager, no external service, no observability platform to operate. Just open the page and see whether your apps are healthy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"Get to your most important links, FAST" - Hiccup's README states its whole mission in that one line, and the static start page delivers it. It is a client-side React single-page app - no backend, no database, no accounts - driven entirely by a config.json that defines featured link cards, categorized sections, and search providers. The search bar is the power feature: it queries your own links by name, URL, and tag while simultaneously offering external providers like Google, DuckDuckGo, and Amazon (plus custom URL-template providers you define), with arrow-key navigation and Enter to launch, so muscle memory replaces mousing. Editing happens in the browser - drag and drop links and background images, tweak cards in edit mode - with changes persisting to localStorage; a built-in config manager exports the JSON for hosting, and remote profile loading pulls a shared config across every browser and device you use. Multiple profiles keep home-server, work, and dev-tool link sets separate. PWA support installs it on a phone home screen, caching strategies keep it fast offline, read-only mode suits kiosk displays, and Cmd/Ctrl+/ reveals the full hotkey reference. Serve it from any static host and point your new tab at it.