Transforming fragmented research notes, daily technical logs, and project documentation into an interconnected knowledge base is what NoteDiscovery delivers for privacy-conscious teams and researchers. Writers compose rich documents using a dual-pane editor that renders MathJax equations, interactive task lists, and dynamic Mermaid sequence diagrams side by side with raw text. The interactive knowledge graph maps semantic relationships across notebooks, allowing researchers to explore backlinks, uncover hidden topical connections, and navigate complex idea webs visually. Team members sketch architecture diagrams and wireframes directly inside note canvases using the integrated drawing tool, saving revisions as embedded image layers without external editors. The platform organizes thoughts through flexible tag hierarchies, nested folder trees, and reusable document templates equipped with automatic date and variable substitutions. Autonomous coding assistants and language models query documentation, create structured meeting summaries, and update project indexes directly through the native Model Context Protocol server. Built-in export tools convert notebook collections into standalone HTML packages, printable documents, or portable Markdown archives for offline archiving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 3,600 GitHub stars and a philosophy of deliberate simplicity, OliveTin eliminates the need for SSH sessions, admin panels, and complex automation platforms by letting you define shell commands in a YAML config file and access them as clickable buttons through a clean browser interface. The Go binary consumes only a few megabytes of RAM, running on everything from tiny ARM and RISC-V devices through Linux VMs, containers, macOS, and Windows. Each button executes a predefined shell command with optional typed arguments that render as dropdowns, text fields, and validated inputs, preventing free-form command entry while giving users controlled access to server operations. Access control lists define exactly who can view or run each action — guests, family members, or junior administrators see only the buttons they are permitted to use. Entity templates generate actions dynamically from lists of hosts, containers, or other resources, creating one template that produces many buttons without manual duplication. Flexible triggers extend beyond browser clicks: cron schedules, webhooks, calendar file events, and filesystem watchers run actions automatically when conditions are met. Authentication supports OAuth2, JWT, and header-based methods for integration with reverse proxies and identity providers. Dashboards organize actions into folders and fieldsets for clear navigation across dozens of commands. No plugin system, no extension marketplace, no premium tiers — every feature ships in the single open-source release. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Radar is an open-source Kubernetes management dashboard and Model Context Protocol server that gives engineering teams complete cluster visibility, automated issue diagnosis, and GitOps controls through a unified web interface. Operators explore live interactive cluster topology maps rendered with automated layout engines, grouping workloads by namespace or custom application labels to trace network communication pathways. The unified event timeline retains Kubernetes activity and state change diffs well beyond default one-hour limits, allowing site reliability engineers to diagnose historical CrashLoopBackOff states and investigate failed deployment rollouts. Teams manage Helm releases by inspecting deployed values, comparing manifest revisions side by side, and initiating rollbacks or upgrades with a single click. The built-in GitOps workspace correlates ArgoCD and Flux applications, surfacing synchronization health, field-level configuration drifts, and automated remediation suggestions. Developers inspect container image filesystems directly from pod detail panels without pulling images locally or establishing interactive terminal sessions, browsing permissions and downloading specific files. Native Model Context Protocol endpoints expose cluster telemetry and operational tools to artificial intelligence coding assistants, enabling external agents to diagnose failing pods and inspect access controls securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Roughly $1M of development work, open-sourced: Maybe Finance began as a $249/year commercial personal finance product before the company released it all. It aggregates bank accounts, credit cards, loans, investments, crypto, and real estate into a single net worth dashboard with historical trend charts - replacing the spreadsheet that usually glues a whole portfolio together. Transactions are categorized and tagged with rules, with merchant tracking and search across imported or synced activity; budgets track spending by category against plan; and the investment view follows holdings, cost basis, and returns across brokerage accounts. Multi-currency support converts accounts held in different currencies into a single reporting currency, bank synchronization works through Plaid where supported, and manual CSV import covers any institution. An optional AI assistant answers questions grounded in your own financial data. Because the app was built as a paid product with professional design before being open-sourced, its interface quality exceeds most community finance tools - and self-hosting means your balances and transactions are not monetized by a free app or gated behind an annual subscription. The stack is Ruby on Rails with Hotwire on PostgreSQL, licensed AGPL-3.0 and deployed via Docker. The original repository is archived; development continues in the community fork Sure, compatible with the same self-hosted setup.

Getting non-technical friends and family onto a media server is its most tedious chore - Wizarr solves it. Instead of manually creating accounts, dictating server addresses, and explaining which app to install, you send one invite link. When the recipient clicks it, Wizarr creates their account on your server automatically - Plex, Jellyfin, Emby, Audiobookshelf, Komga, Kavita, and Romm are all supported - then walks them through a mobile-first, app-like onboarding wizard: download the right client, sign in, and learn how to request movies through your Overseerr or Ombi instance, with an optional Discord server invite along the way. Invitations are genuinely manageable: set expiration dates, usage limits, passphrases, library-scoped access tiers, and time-limited memberships that end access automatically. The wizard itself is fully customizable - Markdown-based steps managed from the admin UI, organized into pre-invite and post-invite phases (terms of service before joining, app setup after), reorderable bundles assignable to specific invitation types, and combined flows for invites spanning multiple servers. Multi-server and multi-admin support manages several backends from one dashboard, SSO support is plug-and-play, and a REST API with OpenAPI/Swagger documentation covers automation. A Flask/HTMX app in a single Docker container.

Securo is a privacy-first personal finance platform that keeps all your financial data in your own PostgreSQL instance while connecting to 2,500+ banks across three continents for automated transaction sync. The FastAPI backend with React/TypeScript frontend deploys via Docker Compose on ports 3000 and 8000, with Redis-backed Celery workers handling background synchronization. Bank connections span approximately 2,500 European PSD2 institutions through Enable Banking across 29 countries, US and international banks via SimpleFIN's open protocol, and Brazilian banks through Pluggy, all refreshing automatically every four hours. Multi-account management tracks checking, savings, credit cards, and investments with running balances. The auto-categorization rules engine applies pattern-matching across merchants and amounts. Goal tracking monitors savings targets with progress visualization, asset management handles stocks and custom instruments with configurable valuation growth rules, and reports generate Net Worth and Income vs Expenses charts with category sparklines. Optional AI Agents provide LLM chat with tool-use over your financial data through MCP, supporting OpenAI, Anthropic, Ollama, and compatible providers with per-agent RAG knowledge bases accessible via a global command palette. Multi-user support includes OIDC login, passkey authentication, TOTP two-factor, privacy mode, and multi-currency FX conversion via Open Exchange Rates. 1,500+ stars since March 2026. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Flexprice is a developer-first billing platform built specifically for AI-native and SaaS companies that need usage-based, credit-based, and hybrid pricing models without building custom billing infrastructure. The metering engine ingests millions of usage events in real time through HTTP APIs or SDK calls, supporting sum, count, unique count, latest value, and multiplier aggregation strategies across custom event schemas like API calls, token counts, compute minutes, and GPU time. Credit management handles prepaid wallets with promotional grants, rollover caps, auto top-ups, and priority-based credit application during invoice generation. The pricing engine supports per-unit, tiered, volume, package, and flat-rate models with per-customer overrides, committed minimums, and enterprise contract terms. Feature entitlements enforce boolean toggles, metered usage limits, and configuration values per plan, enabling applications to gate functionality through simple API checks. Automated invoicing calculates charges from real-time usage data with proration for mid-cycle upgrades and downgrades, generating detailed line items linked to tracked consumption. The architecture separates event ingestion through Kafka from billing computation via Temporal workflow orchestration, allowing each layer to scale independently with ClickHouse handling high-performance usage aggregation. Stripe Connect integration processes payments and manages customer payment methods. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

The CAPTCHA bargain - annoy your users and feed their behavior to Google - gets replaced with economics by mCaptcha. Instead of image puzzles, it uses SHA256 proof-of-work: every visitor's browser silently solves a small computational challenge (via a WebAssembly library) before submitting a form. Humans never notice the milliseconds; bots hammering your site must burn more compute sending requests than your server spends answering them, which makes attacks more expensive than defense - the property that also makes mCaptcha genuine DoS protection, not just bot filtering. Written in Rust, the system is fully automated: difficulty scales with traffic, so challenges stay trivial in normal conditions and harden under attack. The privacy and accessibility wins are structural rather than promised: no tracking, no profiling, no user-pattern data collection, and no visual puzzles that exclude users with visual or cognitive impairments - the design was published in Communications of the ACM. Rate limiting is IP-independent, so users behind NATs, VPNs, or Tor get the same experience instead of endless challenge loops, and proofs resist replay attacks, neutering captcha farms. Migration is deliberately easy: the API is compatible with reCAPTCHA and hCaptcha, making it a drop-in replacement. AGPL-licensed core with proprietary-friendly client libraries.

LobsterBoard lets you assemble custom monitoring dashboards from 50 pre-built widgets using a visual drag-and-drop editor, covering everything from CPU and memory gauges to AI subscription trackers, stock tickers, and camera feeds on your own server with zero cloud dependencies. The snap-grid editor handles layout composition with resize handles and a property panel, so you drag widgets onto a canvas, configure their data sources, and the dashboard is live. Real-time system statistics flow through Server-Sent Events, updating CPU load, memory pressure, disk usage, network throughput, and Docker container status without page refreshes. Five built-in themes range from a dark default to a retro CRT terminal aesthetic, a warm sepia paper look, and pastel options for different display environments. The template gallery lets you export complete dashboard layouts with auto-captured screenshot previews, share them with other users, and import configurations as a full replacement or selective merge. Custom pages extend beyond dashboards into notes, kanban boards, or any free-form layout you need. Built-in widgets connect to iCal feeds for calendar events, RSS sources for news aggregation, weather APIs for local conditions, and financial data providers for cryptocurrency and stock prices. The whole system runs from a single server.cjs file with zero cloud dependencies or external frameworks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL-1.1 licensed (free for non-commercial use; converts to MIT in 2030).

Where Miniflux strips reading down, FreshRSS gives you knobs - the feature-rich pole of self-hosted RSS, comfortable with thousands of feeds. It's a multi-user PHP aggregator (host family and friends on one instance, with an anonymous reading mode) with the reading workflow refined over a decade: favorites, custom tags, powerful filter and search queries, three reading views, and statistics that reveal each site's publishing frequency - useful for pruning subscriptions. Two properties make it the standard choice. First, the Google Reader-compatible API (plus a Fever API) syncs with virtually every serious RSS client - Reeder, NetNewsWire, ReadYou, FeedMe, Fluent Reader - so your phone reads from your server. Second, native WebSub support means compatible sources (WordPress, Blogger, Medium, Friendica) push new articles instantly instead of waiting for polling. A 50+ extension ecosystem adds what truncated feeds omit - full-text content fetching, reading-time estimates, trending views, auto-unsubscribe for dead feeds - alongside community themes and custom CSS. OPML import/export keeps subscriptions portable, a CLI handles administration, and article sharing posts to many services. AGPL-licensed, running on SQLite, MySQL, or PostgreSQL. Feedly Pro's feature set, minus Feedly's subscription and its algorithms.

ShareX and file uploads, next generation: Zipline is a Node.js/React/PostgreSQL server that turns screenshot sharing and file hosting into something you run yourself instead of renting from Imgur or a paid image host. The core workflow is built around ShareX: generate an .sxcu config from your account settings, import it, and every screenshot or clipboard capture uploads to your domain with a short link copied automatically. Uploads accept any file type, organized with folders and tags, with token-protected uploading, optional password protection, view-limited auto-deletion, image compression, metadata stripping, automatic video thumbnails, and chunked/partial uploads for large files. File URLs come in configurable formats - UUIDs, dates, random alphanumerics, original names, even zero-width spaces. A built-in URL shortener adds vanity slugs, passwords, view caps, and custom domains. Discord embeds are first-class: customize OG metadata titles, descriptions, and colors so links unfurl exactly how you want, and fire fully customizable Discord or HTTP webhooks on each upload. Authentication is serious: OAuth2 (Discord, GitHub, Google, OIDC), TOTP two-factor, and passkeys, with invite-based registration and per-user quotas for shared instances. Storage targets local disk or any S3-compatible backend, a full REST API automates everything, and custom themes plus a PWA round out the experience.

Worklenz delivers an all-in-one project management platform purpose-built for teams that bill clients for their time and expertise. The task management system supports list, Kanban board, and timeline Gantt views with priorities, due dates, assignees, labels, and subtasks. Built-in time tracking offers both start-stop timers and manual entry, logging billable hours directly against tasks and automatically aggregating time data into project-level cost reports. The resource management module provides a visual team utilization dashboard showing capacity allocation across all active projects, helping managers avoid overallocation and balance workloads. Client portals give external stakeholders direct visibility into project progress, task status, and deliverables without requiring internal account access. Financial insights track budgets versus actuals, showing project profitability, cost breakdowns, and burn rate in real time. The analytics engine generates reports on project health, team workload distribution, task completion trends, and time allocation patterns. Project templates enable one-click setup of common agency workflows with pre-configured task structures, milestones, and assignments. The React frontend uses Ant Design components with TypeScript, while the Express.js backend connects to PostgreSQL for data and Redis for caching. Docker Compose deployment includes Nginx reverse proxy with SSL/TLS support, automated database backups, health checks on all services, network isolation, and MinIO for object storage. On RepoCloud, deploy Worklenz on a dedicated VPS with root SSH access, persistent PostgreSQL storage for your project data, and complete control over client portal access and team configurations, all under the AGPL-3.0 license.

Transforming your Stalwart Mail Server into an all-in-one private communication hub, Bulwark Webmail delivers fast web-based email, collaborative calendars, shared contacts, and cloud files in a single unified interface. Users can manage multiple email accounts from an integrated inbox with conversational message threading, nested organizational tags, scheduled delivery, and instant full-text search across thousands of archived messages. The rich text composer provides markdown shortcuts, inline image embedding, reusable canned response templates, and automated draft synchronization. Team members can coordinate schedules across day, week, month, and agenda calendar views with drag-to-reschedule adjustments, interactive iMIP meeting invitations, and external CalDAV calendar subscriptions. The integrated address book organizes individual contacts into custom groups with full vCard import and export support, while the files module lets users browse server storage, preview incoming attachments, and upload documents directly through the browser. Built-in security safeguards enforce multi-factor authentication, cryptographic S/MIME signatures, client-side encryption at rest, and automated HTML luminance remapping to keep dark emails legible. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3 licensed.

Vexa is the only Apache 2.0 meeting bot API that self-hosts the complete transcription pipeline, from bot dispatch to Whisper speech-to-text to knowledge agents, with zero audio leaving your infrastructure. A single POST /bots request sends a transcription bot into any Google Meet, Microsoft Teams, or Zoom call, where it captures audio, runs speaker-attributed transcription through faster-whisper or any OpenAI-compatible endpoint, and streams results to your application via real-time WebSocket with sub-second latency. The built-in agent framework watches live transcripts and your accumulated workspace context, answering mid-call questions grounded in your own meeting history and wiki. An MCP server connects Vexa to Claude, Cursor, and other compatible AI tools, turning every captured meeting into queryable context for external agents. The Terminal, a bundled Next.js web workbench, lets you send bots, watch live transcripts, manage users and API tokens, and chat with your meeting archive from a browser. Docker Compose brings the full stack up on one Linux host in five minutes; the Helm chart scales to thousands of users on Kubernetes with a Pod-per-bot architecture and built-in RBAC. Recordings persist in MinIO or any S3-compatible store, transcripts in Postgres, with Redis handling queues and scheduling. Deploy on RepoCloud for a dedicated VPS with full root SSH access and browser console. Apache 2.0 licensed.

Allocating every incoming dollar into purposeful spending and savings buckets before transactions occur, OpenBudgeteer gives households complete financial control through a self-hosted zero-based envelope budgeting platform. Users can organize expenditures into customizable bucket hierarchies, grouping everyday living costs, debt repayments, and sinking funds into distinct categories with target balances. Financial planners can import bank statement files via flexible CSV mapping profiles that parse transaction descriptions, clean up merchant strings, and auto-assign records to corresponding expense buckets. The transaction registry provides split-transaction functionality, allowing shoppers to divide a single department store receipt across grocery, household, and clothing envelopes with exact currency precision. Interactive progress bars display bucket health throughout the billing month, signaling when spending velocity threatens allocated limits and calculating suggested contributions for forthcoming paychecks. Advanced forecasting reports plot multi-month net worth trajectories, track category expenditure patterns, and calculate burn rates against long-term retirement and emergency savings goals. Account balances synchronize across multiple physical checking accounts, credit cards, and cash wallets, ensuring total bucket balances reconcile perfectly against real bank reserves. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3 licensed.

Memoh delivers an open-source multi-agent platform where every AI agent gets its own computer — not a chat window but a fully isolated container with dedicated filesystem, desktop environment, browser, network stack, and persistent long-term memory that survives across sessions, days, and platforms. The containerd-based runtime ensures each bot operates in complete isolation with snapshot and data import/export capabilities. The memory engine uses LLM-driven fact extraction with hybrid retrieval combining dense embeddings via Qdrant, sparse vectors, and BM25, plus 24-hour context loading and automatic compaction — with Mem0 and OpenViking as drop-in alternatives. Ten communication channels connect agents to users through Telegram, Discord, Lark, QQ, Matrix, WeCom, WeChat, Email, Web UI, and group chats with cross-platform identity binding. MCP tool calling enables agents to interact with external services, while browser automation drives GUI workflows for web research and data extraction. Agent hosting supports running external coding agents like Codex and Claude Code inside Memoh workspaces via ACP with per-bot configuration. Scheduled tasks run without human triggers, and agents proactively reach out when needed. The web dashboard built with Vue 3 and Tailwind CSS provides streaming chat, tool call visualization, file management, model and provider configuration, and bot lifecycle management. Deploy via Docker Compose with PostgreSQL, Qdrant, sparse service, and the Go backend server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

BrightBean Studio provides an open-source social media management suite that centralizes multi-account publishing, visual calendar scheduling, idea tracking, and cross-channel analytics into a unified self-hosted dashboard. Content creators and marketing agencies draft cross-network posts within an interactive composer that provides real-time channel previews and custom caption overrides for individual networks. The visual drag-and-drop calendar maps publishing queues across recurring weekly time slots, while an integrated Kanban board organizes brainstorming concepts from unassigned ideation to production-ready schedules. Community managers monitor unified social inboxes aggregating direct messages, mentions, and comments across Facebook, Instagram, LinkedIn, YouTube, TikTok, Bluesky, Threads, Pinterest, and Mastodon. Team leads configure multi-tier approval workflows with threaded editorial comments and issue passwordless 30-day magic links so external clients can approve drafts without registration. Built-in performance dashboards aggregate engagement rates, follower growth curves, and watch time metrics directly from native network APIs without relying on third-party data aggregators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Shelf answers the three questions every equipment manager dreads — who has it, where is it, and when is it coming back — using QR-code-first tracking where every asset gets a unique scannable label, every handover is logged with timestamps and e-signed custody agreements, and every scan captures GPS coordinates displayed on a map. Built on React Router 7 with React 19, TypeScript 5, Prisma 6 ORM, and Tailwind CSS 3 with Radix UI components, the platform generates QR codes and barcodes (Code128, Code39, Datamatrix) printable on DYMO, Brother, and Zebra label printers. The custody system records every handover with user details and generates PDF custody agreements with e-signatures for high-value items, while a complete audit trail tracks responsibility from check-out to return. The visual booking calendar prevents double-bookings automatically, supports partial check-outs and returns with segmented lifecycle bars, and handles quantity-tracked consumables alongside individually serialized equipment. Asset Models enable bulk creation of identical items with shared defaults while maintaining individual QR codes and custody histories. Location tracking displays last-scanned GPS coordinates on MapTiler maps. Supabase Auth provides email and SSO authentication, pg-boss handles background job queuing, and Nodemailer delivers SMTP email. The Shelf Companion app on iOS and Android enables field scanning and bookings. Export Asset Inventory, Asset Distribution, and Custody Snapshot reports for compliance. Deploy via Docker with PostgreSQL and Supabase. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3.0 licensed.