GoModel
Instead of scattering provider credentials and vendor-specific SDK logic across dozens of microservices, engineering teams route every LLM call through GoModel, an open-source AI gateway that unifies 34 model providers behind OpenAI-compatible and Anthropic-compatible endpoints. Pointing existing OpenAI or Anthropic SDKs at the gateway unlocks chat completions, the Responses API, Anthropic Messages, embeddings, batch jobs, and realtime audio across OpenAI, Anthropic, Gemini, Bedrock, Azure, Groq, DeepSeek, Ollama, and vLLM. Platform operators publish virtual model aliases that distribute traffic via weighted round-robin or lowest-cost routing while rotating multiple API keys per provider and failing over through circuit breakers during upstream outages. Sticky session routing keeps multi-turn agent conversations on the same target to preserve warm prompt caches, while exact-match and vector semantic caching via Qdrant, pgvector, Pinecone, or Weaviate cut duplicate token costs. Versioned workflows and pre-dispatch guardrails enforce prompt injection rules, rate limits, and hard USD spend budgets across hierarchical tenant user paths before requests are dispatched. The built-in admin dashboard offers live audit logs, per-tenant cost analytics, LiteLLM key migration, an interactive request playground, Model Context Protocol tool aggregation, and OpenTelemetry and Prometheus metrics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Kima
Streaming personal music collections with neural discovery and intelligent playlist curation is what Kima accomplishes as a modern self-hosted audio server that replaces Spotify and Apple Music. Listeners organize their FLAC, MP3, and AAC audio files into responsive grid layouts that scale up to eight columns on ultra-wide displays while automatically fetching album covers, artist biographies, and synchronized line-by-line lyrics. The built-in Vibe System utilizes CLAP neural network audio embeddings to map an entire music collection across two-dimensional clusters and three-dimensional interactive galaxy views, enabling users to explore acoustic relationships or queue smooth sonic paths between distant tracks. Music fans can import playlists directly from Spotify, Deezer, and YouTube using deterministic ISRC matching, while automated Made For You mixes generate era-specific playlists, workout stations, and discovery queues based on individual listening habits. Integrated podcast search pulls subscriptions from iTunes with automatic episode tracking across devices, while native Audiobookshelf connectors synchronize spoken-word chapter positions and playback progress directly into the unified web player. OpenSubsonic API endpoints allow mobile users to stream libraries through native clients like Symfonium and DSub using scoped authentication tokens, while administrators manage multi-user accounts with time-based two-factor authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
TimeTracker
Why export timesheets from one tool, manage Kanban tasks in a second, and copy billable hours into a third just to send a client invoice when TimeTracker handles the entire agency workflow in one self-hosted platform? Start a persistent server-side timer from any browser or log hours manually using saved templates, bulk entry forms, and automatic idle detection. Project managers organize deliverables across drag-and-drop Kanban boards, Gantt timelines, and threaded task comments while monitoring real-time project budgets and cost burn rates. A built-in CRM tracks client contacts, lead scores, and sales pipeline stages before work even begins. When billing day arrives, you convert unbilled hours, reimbursable receipts, mileage logs, and per diem allowances directly into branded multi-currency invoices without double-billing a single minute. Finance teams can customize PDF invoice layouts, automate recurring billing schedules, and transmit EN 16931 compliant electronic invoices via Peppol or embedded ZUGFeRD/Factur-X XML. Interactive analytics dashboards and scheduled CSV or Excel exports give every stakeholder complete visibility into billable utilization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Portabase
Portabase takes a zero-trust approach to database backups: lightweight Rust/Tokio agents deploy next to each database, encrypt dumps with AES-GCM before data ever leaves the host, and poll the Next.js control plane outbound every five seconds requiring zero inbound firewall rules. This architecture contains blast radius if the dashboard is compromised while supporting ten engines with stable backup and restore: PostgreSQL 12 through 18, MySQL 5.7 through 9, MariaDB 10 and 11, MongoDB 4 through 8, SQLite 3.x, Redis 2.8+, Valkey 7.2+, Firebird 3.0 through 5.0, Microsoft SQL Server 2017 through 2022 including Azure SQL, and Docker volumes on Engine 20.10+. Encrypted backups store on configurable backends including local filesystems, any S3-compatible provider (AWS, MinIO, RustFS), Google Cloud Storage, and Azure Blob Storage. Cron-based scheduling with Grandfather-Father-Son retention policies automates backup lifecycle management, while on-demand restore targets any compatible server for cross-environment recovery. The CLI installs agents with a single command and auto-updates when new versions ship. A RESTful API with MCP server integration enables automation from CI/CD pipelines and AI agent workflows. Developed by a non-profit under Apache-2.0. 1,270+ stars and 174 releases since October 2024. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console.
dyrector.io
dyrector.io gives teams a visual web interface for deploying and managing containerized applications across Docker, Kubernetes, and Podman environments, replacing repetitive CLI commands and YAML editing with point-and-click configuration. Lightweight Go agents installed on target infrastructure communicate with the central TypeScript platform, enabling deployments to AWS, GCP, Azure, and on-premises servers without requiring infrastructure migration. Unified configuration screens eliminate redundant YAML editing across environments with support for all three container runtimes. Version management lets teams configure OCI-compatible container images once and deploy them as versioned releases with auto-generated changelogs and release notes. Multi-instance deployment enables simultaneous rollouts to multiple nodes with environment-specific configuration overrides, secret management, and instant test environment provisioning from any branch. The fine-grained RBAC system controls user access at project and environment levels, while audit logging tracks every deployment action. Registry integrations support Docker Hub, GitLab, GitHub, Google, and Azure container registries for image sourcing. ChatOps notifications integrate with Slack, Discord, and Microsoft Teams for deployment status alerts. Scheduled releases and workflow support enable automated deployment pipelines triggered by CI events via the REST API with JWT authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
ExpenseOwl
Log a date, amount, and category; get a clean monthly pie chart and a cashflow strip showing income, expenses, and net balance - ExpenseOwl is expense tracking stripped to what actually matters. The MIT-licensed Go application deliberately is not a budgeting system - no envelopes, no accounts, no double-entry, no bank sync - because its author found tools like Firefly III and Actual too heavy for the simple question "where did this month's money go?" The dashboard makes that question fast: click a pie slice to exclude fixed costs like rent and see discretionary spending clearly, then drill into a chronological table view to inspect or delete individual transactions. Recurring transactions handle salaries and subscriptions automatically, optional tags add a second classification axis, and settings cover custom categories, currency symbol, and a configurable month start date for non-calendar pay cycles. CSV import migrates data from virtually any other tool, and CSV export keeps your data portable. It ships as a self-contained binary and multi-architecture Docker image with zero internet interaction, stores data in flat JSON files by default (PostgreSQL optional), and installs as a PWA on phones. Single-user by design; pair it with an authenticating reverse proxy if exposed publicly.
Dreeve
Every ride, run, hike, and swim you have ever recorded finds a home in Dreeve, a private fitness dashboard that lives on your own server rather than in a social feed. Import FIT, TCX, or GPX files from a watch folder, sync Strava, or add connectors for Garmin Connect, Wahoo, Polar Flow, Hammerhead, and Zepp/Amazfit. Weekly charts follow distance, time, and elevation beside training goals, heart rate zones, and training load analysis, and monthly stats pair per-sport totals with an interactive calendar. A heatmap paints every kilometer you have covered. Best efforts rank your fastest 5k, 10k, 50k, and 100k across every sport, while Eddington numbers, a milestones timeline, and a yearly Rewind mark the long game. Strava sync also brings segments, segment efforts, and challenges. Gear pages total the distance on each bike and shoe, and maintenance tasks send alerts through ntfy, Gotify, Discord, Telegram, Slack, or email when an interval comes due. Automation rules assign gear, flag commutes, and set sport types by device, distance, weekday, time of day, or location, so new imports arrive organized. Ask the AI workout assistant about your training, using cloud models, OpenRouter, or a local Ollama model. An installable mobile app and embeddable badges carry your stats to phones and blogs, and a password-protected admin panel keeps the settings. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Halcyon Video
Friday night, 1994: you are standing in the Action aisle deciding what the weekend looks like, except the shelves are stocked with your own library and the store lives in your browser. Halcyon Video rebuilds that ritual in 3D around your Jellyfin, Plex, or Emby server, turning libraries into aisles and genres into signed sections you can walk. Pick a case off the shelf and it comes up in your hand at true rental proportions; flip it over for the synopsis, cast, runtime, ratings, and a technical table read from the actual file. Seasons arrive as box sets, popular titles sit deeper on the shelf, and the clerk behind the counter searches by title, director, or genre and recommends from your catalog and watch history. Carry an armful to the checkout and she bags them in plastic that folds around the cases, receipt and all. A RomM connection opens a games department with platform-correct cartons and clamshells, while Jellyseerr requests appear as discovery cases you can order in-store. Drive it from the couch with a TV remote, gamepad, keyboard, or phone, or let attract mode tour the floor past the ceiling CRTs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Kodus AI
Kodus AI automates pull request code review with inline AI comments across GitHub, GitLab, Bitbucket, and Azure DevOps, supporting any LLM provider at cost with zero token markup. The multi-service TypeScript architecture deploys via Docker Compose, running an API server, background worker, webhooks service, and React dashboard backed by PostgreSQL with pgvector, MongoDB, and RabbitMQ. Integration covers both cloud platforms and their enterprise flavors (GitHub Enterprise Server, GitLab Self-Managed, Bitbucket Data Center) using standard OAuth flows and webhook signing to keep the review loop entirely inside your network. The platform is model-agnostic with Bring Your Own Key support for Claude, GPT, Gemini, Llama, and any OpenAI-compatible endpoint including locally-hosted models. Custom review rules combine your team's coding standards with requirements pulled from Jira, Linear, and Notion, automatically checking every PR against documented specifications. The CLI enables local reviews against working trees, staged diffs, branches, or specific commits, integrating into CI/CD pipelines as pre-merge gates. Source code is never stored and never used for model training, with all data encrypted in transit and at rest. 1,270+ stars and 129+ releases since March 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Paca
Paca is a self-hosted project management platform and Scrumban workspace where autonomous artificial intelligence agents collaborate with human software engineers as first-class Scrum teammates instead of external chat assistants. Engineering teams manage sprints, backlogs, and task lifecycles through a shared real-time board powered by Socket.IO where both humans and agents pick up assignments and post progress updates. A native Model Context Protocol server connects external coding assistants such as Claude Desktop and Claude Code directly into projects, tasks, and sprint data without custom scraping scripts. Distributed agents execute in isolated runtime sandboxes powered by the OpenHands software development kit, co-authoring behavior-driven development Gherkin scenarios with product owners and maintaining living system design documents. Visual event-driven automation builders compose multi-branch trigger, condition, and action pipelines that evaluate task dependency gates and cron schedules. A sandboxed WebAssembly plugin runtime allows developers to write custom backend logic and custom board views using Go or Rust. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
DockFlare
Combining Docker container labels with a live web control plane, DockFlare automates Cloudflare Tunnel ingress routing, multi-zone DNS records, and Zero Trust Access policies across self-hosted infrastructure. DevOps engineers and homelab operators can attach simple container labels to expose HTTP, HTTPS, TCP, SSH, and RDP services publicly in seconds without clicking through external cloud dashboards. For non-containerized workloads such as bare-metal hypervisors or network appliances, administrators can define manual ingress rules, path-based routes, custom TLS SNI headers, and origin certificate bypass flags directly in the web interface. Security teams use reusable Access Groups and wildcard zone policies to enforce Google, GitHub, Azure AD, or custom OIDC authentication across every subdomain from a single policy definition. Distributed deployments connect lightweight remote agents back to the primary controller using Zero Trust service tokens so multi-host clusters share one unified routing view. When containers stop or restart, configurable grace-period timers prevent accidental route churn before cleaning up stale DNS entries, while encrypted state backups protect your entire ingress configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Komari
Komari turns a scattered fleet of VPS boxes into one clean status wall that shows which servers are alive, struggling, or about to expire. Every node reports CPU, GPU, memory, swap, disk, load, network speed, traffic totals, and uptime to a real-time dashboard, with history views from ten minutes to thirty days or any custom range. Flip between a card grid and a table, search by name, region, or operating system, and tag each machine with its price, billing cycle, and days until renewal. Latency tasks send ICMP, TCP, or HTTP probes and plot the results in per-node charts. Offline alerts wait out a per-node grace period before firing, expiry reminders warn before a plan lapses, and Webhook and custom JavaScript channels deliver them. A multi-tab browser terminal that reattaches after disconnects, remote command execution, and a remote file manager with an editor let you fix problems without leaving the panel. Agents install with a script, a binary, Docker, or an auto-discovery key for batch rollouts, and administrators can switch an agent's version remotely. Plugins run on an embedded JavaScript runtime and can add scheduled jobs, HTTP hooks, static pages, and notification channels. Administrators can add two-factor authentication, OAuth sign-in, API keys for a JSON-RPC 2.0 endpoint, themes from a theme market, and backups. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
DumbAssets
DumbAssets delivers a deliberately simple physical asset tracker that does exactly one thing well — keeping tabs on everything you own, from server racks down to individual HDDs, with hierarchical component nesting that mirrors real-world organization. The Node.js backend stores all data in JSON files within a single /data directory, making backups trivial with one folder copy while the PWA-enabled frontend provides responsive access from any device with light and dark theme persistence. Assets track model numbers, serial numbers, purchase dates, warranty expiration dates, and custom descriptions while sub-components nest infinitely — attach a Dell R730 to your server rack, then attach individual drives, CPUs, and NICs to that server with separate warranty and maintenance schedules for each. The Apprise notification engine fires configurable alerts for warranty expirations and maintenance events with direct links back to the specific asset in the web interface. Photo uploads attach visual records to any asset, receipt storage keeps purchase documentation alongside the item it covers, and a flexible tagging system enables cross-cutting organization beyond the hierarchy. PIN authentication with brute-force protection secures the interface, while search covers names, models, serials, and descriptions with sorting by warranty status, tags, components, or alphabetical order. Deploy with a single Docker command mapping port 3000 and one data volume. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL v3 licensed.
LLemonStack
One CLI command deploys a complete AI development environment: n8n, Flowise, Supabase, Ollama, Qdrant, LiteLLM, Langfuse, Open WebUI, LightRAG, Browser-Use, Firecrawl, Crawl4AI, and more, all pre-wired with networking, credentials, and database connections. LLemonStack eliminates the hours of Docker Compose configuration that typically precede any local AI agent project. The llmn CLI initializes isolated project environments with auto-generated secure credentials, starts services in dependency order (databases first, then middleware, then apps), and displays a dashboard showing every service URL and access token. n8n brings 400+ workflow integrations, Flowise provides visual agent building, Ollama runs local LLMs like Llama and Mistral, Qdrant stores vectors at high performance, Open WebUI offers ChatGPT-style model interaction, and LiteLLM proxies requests to any provider with cost tracking. Langfuse automatically logs traces for every LiteLLM query, providing full observability. Each project maintains isolated Postgres schemas preventing data collision across parallel stacks. Firecrawl and Crawl4AI extract web content into LLM-ready formats for RAG pipelines feeding LightRAG or Qdrant. Dozzle streams live container logs for debugging. Import/export tooling migrates workflows between projects with automatic credential reconfiguration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
RackPeek
Every server, switch port, virtual machine, and network VLAN in a homelab or small IT environment can be cataloged, visualized, and exported through RackPeek's unified web interface and command-line toolkit. Operators record rack-mounted servers, managed switches, routers, firewalls, wireless access points, and uninterruptible power supplies alongside their CPU, memory, and storage specifications in a clean browser dashboard. Beyond physical gear, the inventory tracks operating systems, containerized or bare-metal services, IP subnets, and port-to-port cable connections while organizing assets with searchable tags and key-value labels. From that structured inventory, the interactive visualization engine renders live physical wiring diagrams and logical subnet-grouped service maps that export directly as high-resolution PNG graphics or Mermaid flowcharts. Because all state lives in a single human-readable configuration file backed by built-in Git repository synchronization, teams can version-control infrastructure changes or push automated updates through the authenticated REST API with dry-run diff previews. Day-to-day administration becomes faster with built-in generators that turn your cataloged hosts into ready-to-use Ansible inventory files, SSH client configurations, and tag-filtered hosts tables. Line-and-column validation feedback in the web editor catches schema mistakes immediately before changes are committed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Endurain
A personal Strava on your own server: Endurain is a self-hosted fitness platform that keeps your complete workout history, GPS routes, and health data out of a vendor's cloud. It ingests the standard device formats (.gpx, .tcx, and preferred .fit with full sensor data) via manual or bulk upload, and syncs directly with Strava and Garmin Connect so migrating years of history is straightforward - Garmin sync covers activities, gear, and body composition. The dashboard shows activity feeds with weekly and monthly statistics, routes on maps, and distance, speed, and training-volume trends over time, with definable goals that update automatically. Gear tracking is notably deep: log wetsuits, bicycles, shoes, racquets, skis, and snowboards, assign default gear per activity type, and track individual components like bike chains against replacement mileage. Multi-user support with admin and user roles, follower features, per-activity privacy settings, and configurable sign-up (email verification, admin approval) make it usable for clubs and coaches as well as individuals. Auth is serious for a fitness app: MFA TOTP, OIDC/SAML SSO, and email-based password resets via Apprise. The stack is Vue.js over a Python FastAPI backend with PostgreSQL, plus weight, steps, and sleep logging, imperial/metric units, multi-language support, and third-party app integration.
PeaNUT
When a power outage hits your server rack, deciphering raw command-line output from Network UPS Tools should not stand between you and a safe shutdown; PeaNUT wraps your NUT servers in a real-time web dashboard that monitors battery charge, load capacity, and voltage telemetry across every uninterruptible power supply on your network. Operators can connect multiple local or remote NUT servers into a single interface and switch between devices with one click. Live gauges track battery percentage, estimated runtime, real power draw in watts, and apparent power in volt-amperes. Interactive line charts plot input and output voltage alongside load fluctuations over time. Need to test a battery or silence an alarm? You can execute instant UPS hardware commands, edit writable device variables, or open a browser-based terminal directly to the underlying NUT daemon without leaving the web interface. Configuration works either through the visual settings panel or a declarative YAML file, protected by built-in account authentication. For broader infrastructure observability, you can stream time-series power data to InfluxDB v2, scrape the native Prometheus metrics endpoint into Grafana, query the REST and WebSocket APIs, or embed live UPS status cards inside Homepage and Glance dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
MikroTik Manager
MikroTik Manager is a web control plane for whole RouterOS fleets, built so that a bad VLAN change reverts itself instead of costing you a drive to the site. Before any risky edit, Change Guard saves a restore point on the device and arms a scheduler; if a fresh connection cannot reach the router afterwards, it rolls itself back. Lockout prediction simulates each change against live device state and refuses one that would cut management access, naming the exact port and VLAN at fault. Config Health audits for settings RouterOS accepts but silently ignores. Day to day, a live dashboard tracks availability, wireless clients, and alerts delivered by email, Slack, Discord, Telegram, or ntfy. Switch faceplates, per-port client views, VLAN copy wizards, bulk SSID deployment, RF health charts, rogue AP detection, and a guest Wi-Fi captive portal wizard cover the wired and wireless side. A rule builder handles firewall and NAT, topology maps come from LLDP, CDP, and MNDP, and a built-in NetFlow collector attributes traffic to clients and applications. Firmware rolls out in canary waves that halt on failure, and every configuration snapshot supports diffs and one-click rollback. OIDC single sign-on, TOTP two-factor, role-based access, and scoped API tokens protect the console, while sites group devices per customer network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.