PRISM consolidates passive reconnaissance, credential leak detection, and network asset mapping into a unified operational dashboard to replace fragmented command-line security tools. Analysts can launch simultaneous multi-source investigations against domains, internet protocol addresses, email mailboxes, phone numbers, and online handles to uncover domain registrations, open network ports, cryptographic certificates, and historical web archives. The platform interrogates threat feeds and leak repositories to expose credential leaks, dark web mirrors, and email routing anomalies with automated SMTP mailbox verification. Cross-platform identity engines crawl thousands of social networks and public registries to correlate aliases, discover leaked commit identities, and trace digital footprints across the web. Discovered assets render into interactive entity relationship graphs alongside geographic internet protocol maps to help investigators visualize infrastructure clusters and ownership links. An automated operational security calculator evaluates exposure vulnerabilities across identity, web, and infrastructure vectors, producing an aggregated risk score with granular hardening recommendations. Scheduled watchlists continually monitor target infrastructure, dispatching webhook notifications to chat channels whenever new subdomains, ports, or credential leaks appear. Investigators can export comprehensive audit dossiers as self-contained HTML files, styled PDF documents, or structured spreadsheets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Define a service level objective in a few lines of YAML and Pyrra writes the Prometheus recording rules and multi-window burn rate alerts for it, then tracks the remaining error budget in a web interface. An objective can be an error ratio or a latency target, declared as a Kubernetes custom resource or as a plain file read from disk when running under Docker or as binaries. Grouping labels fan one definition out into an objective per route or handler. The objectives page lists each SLO with its window, target, availability, and remaining budget, sorted so the worst offenders sit on top; columns can be sorted or hidden, and a search box or a click on any label filters the list. Opening an objective highlights availability and error budget, plots the budget over time, and charts requests, errors, and duration with a time range picker and absolute or relative scales. Below the charts, a table shows the four generated alerts with their severities. Generated alerts carry a link back to the objective's page, and severities can be overridden in the spec. Queries go to Prometheus, Thanos, or Mimir, with basic auth, bearer tokens, or tenant IDs, and ready-made Grafana dashboards chart the same objectives. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When an alert fires, OnGrid investigates it for you: an AI operations agent that correlates metrics, logs, traces, and topology, then names the root cause in plain language. A coordinator agent hands each question to specialist SRE, network, or database sub-agents, and the incident investigator walks the service graph for blast radius, queries Prometheus, Loki, and Tempo, and pins the cause to a line of source code before posting its report back to chat. Lightweight edge agents on every host dial out over a single tunnel, so no inbound ports are opened, and operators can reach any machine through an audited browser shell. The agent works through more than 26 read-only inspection tools in a sandbox, while anything that changes production waits behind an approval gate. Ask questions or receive reports in Slack, Telegram, Larksuite, DingTalk, or WeCom, and run it on Anthropic, OpenAI, GLM, DeepSeek, Gemini, Kimi, or any OpenAI-compatible endpoint. A workflow builder turns triggers, agents, tools, and notifications into repeatable automations, and a knowledge vault indexes runbooks, incident history, and repositories for search. Enroll Kubernetes clusters to inspect workloads and manage upgrades, or discover network neighbors, verify them over SNMP, and map them into the topology. Role-based access separates admins, users, and viewers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Websurfx aggregates results from multiple search engines into one private, ad-free interface that never tracks your queries. Written in Rust, the backend provides memory safety against buffer overflows and data races at the language level while handling concurrent requests across upstream providers like DuckDuckGo and Searx. A built-in re-ranking algorithm scores and merges results by relevance, producing a unified page that draws from many sources while appearing as one coherent search. Safe-search filtering operates across four levels from unrestricted to complete content blocking, with regex-based filter lists for parental controls in schools and organizations. Upstream requests route through configurable proxy chains or Tor, preventing search providers from correlating your queries with a specific IP address. Four Docker image variants target different caching strategies: hybrid Redis plus in-memory for maximum throughput, Redis-only, in-memory-only, or zero-persistence for environments where cached queries must never touch disk. The Lua configuration file controls engine selection, request timeouts, rate limiting thresholds, and production-mode delays that throttle upstream traffic to prevent abuse. Quick-result widgets handle calculations, currency conversions, and unit transformations inline without external redirects. Image search capabilities serve visual discovery for designers and researchers who need media results without surveillance. Runs on a RepoCloud VPS with dedicated resources and full root access. AGPL-3.0 licensed.

Transform folders of DRM-free PC installers and retro game archives into a browsable, cover-art-rich digital storefront with Gameyfin, a self-hosted video game library server for LAN parties, homelabs, and family networks. Point the server at your mounted storage directories and its automated scanner indexes game archives, executables, and multi-part installers while showing real-time progress and estimated completion times. Bundled metadata plugins pull game synopses, release dates, developer credits, screenshots, and high-resolution box art from IGDB, Steam, and SteamGridDB according to your configured provider priority. Players can browse collections by genre or platform, inspect detailed game pages, and download installers directly through their web browser or via a built-in BitTorrent tracker and seeding client that distributes bandwidth across LAN participants. Administrators can manage multiple isolated libraries, trigger quick or full folder scans, customize UI themes including colorblind-accessible palettes, and enforce single sign-on via OAuth2 and OpenID Connect identity providers. Every cover image and metadata record is cached locally on disk so offline LAN events keep full browsing and download functionality without internet access. Built-in Prometheus actuator endpoints expose library and runtime metrics for infrastructure monitoring dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One REST call, 130+ notification services: Apprise API wraps the well-known Apprise library in a lightweight Django/Gunicorn microservice, so "send an alert" works the same whether it goes to Slack, Discord, Telegram, Teams, email, SMS, Pushover, or PagerDuty - each addressed by a simple URL scheme. It solves the credential-sprawl problem cleanly: instead of embedding provider tokens in every app, cron job, and CI pipeline, you centralize them here and everything else just POSTs a body and title. Two modes cover every workflow. Stateless calls to /notify carry target URLs in the payload (or fall back to a default set via APPRISE_STATELESS_URLS); stateful mode stores named configurations server-side under keys, so /notify/{KEY} fans out to everything registered - with tag-based routing (comma for OR, space for AND) selecting which endpoints fire per message. Messages take info, success, warning, or failure types in text, Markdown, or HTML, with attachments up to a configurable size. A built-in web UI manages and tests configurations, APPRISE_CONFIG_LOCK makes the store read-only, service allow/deny lists restrict which schemes work, webhook remapping adapts third-party payloads, and a Prometheus /metrics endpoint watches the gateway itself.

Commercial flight logbooks frequently lock historical travel records behind annual subscriptions or shut down unexpectedly, whereas AirTrail preserves your complete aviation history on an interactive world map under your own control. Enter a flight number to look up routes automatically or log departures manually with seat numbers, cabin classes, aircraft registrations, timestamps, notes, and custom metadata fields. Switching from another tracker takes seconds: the built-in importer ingests CSV, ICS, and JSON exports from MyFlightradar24, Flighty, App in the Air, OpenFlights, TripIt, JetLog, byAir, and JetLovers. The vector map renders geodesic flight paths, recorded GPS tracks, and airport runway details across customizable basemaps. Detailed statistics dashboards break down total distance flown, time in the air, top airlines, aircraft models, and visited countries. Families and travel groups can share a single instance with role-based permissions, OAuth single sign-on, and read-only public links, while developers automate entries through the versioned REST API or Model Context Protocol server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

No targets, no gamification spiral, no motivational nagging: Beaver Habit Tracker is a self-hosted habit tracker deliberately built without "Goals". The core loop is honest: add habits, check them off each day, watch streaks accumulate on a calendar view. Its design follows behavioral-science basics - make it obvious (visual streak cues), make it attractive (progress is the motivator), make it satisfying (tracking becomes its own reward). Beyond the daily checklist it supports per-day notes intelligently grouped per habit, periodic habits, habit categories and tags, drag-to-reorder (manual or automatic), dark mode, and detailed streak and frequency views. Data lives where you choose: a single SQLite database or flat JSON files on a mounted volume, with JSON export and import for full portability. A REST API opens automation - community integrations already cover Stream Deck buttons, Home Assistant triggers, and CalDAV. The Python app ships as one Docker container with no external dependencies; environment variables tune everything from first day of week and index-page columns to iOS standalone PWA mode, and single-user setups can bypass the login entirely with TRUSTED_LOCAL_EMAIL. BSD-3-Clause licensed with no commercial restrictions - a well-executed single-purpose tool whose mobile PWA works anywhere a browser does.

Tugtainer delivers a visual command center for Docker environments that automates container image updates, monitors registry releases, and manages application lifecycles across multiple servers without command-line intervention. System administrators can inspect running containers across all connected hosts, trigger immediate image pulls, and configure automated cron schedules for recurring health and registry checks. Flexible update policies allow teams to flag production databases as notification-only while automatically updating stateless web applications whenever new image tags publish. When updating linked services, the platform analyzes Docker Compose project definitions and custom dependency labels to stop and restart containers in strict dependency order, preventing broken network links and orphaned volume mounts. Administrators can authenticate private container registries, browse image layers and tags, and view real-time container log streams directly within the browser console. Automated pruning jobs continuously reclaim server disk space by deleting obsolete, untagged images and dangling build layers after successful deployments. Multi-channel alerting integrates with over fifty notification providers, delivering real-time update summaries and error warnings directly to Discord, Telegram, Slack, and email webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Across logs, traces, and metrics, Monoscope gives engineering teams one self-hosted workspace for finding what broke, asking questions in plain English, and hearing about problems before users do. Start in the Explorer: search events with KQL or an Ask AI prompt, flip between log rows, bar and line charts, log patterns, and sessions, and narrow results with facets for service, level, and HTTP status. Open any span to read its attributes, then follow the full trace across services in a waterfall, timeline, or map view. Live Tail streams new events as they arrive, and the Service Map draws every dependency with its error rate, latency, and requests per second. Build dashboards from widgets with copyable KQL and SQL, then set scheduled monitors with warn and alert thresholds, cron monitors, and uptime checks. An Issues inbox gathers API changes, errors, and log patterns so each one can be acknowledged, archived, or marked as spam, while Reports send scheduled summaries by email. Telemetry arrives over OTLP gRPC on port 4317 from OpenTelemetry SDKs and collectors. The monoscope CLI emits JSON for scripts, and an MCP server at /api/v1/mcp lets Claude, Cursor, and Cline search events and triage issues. Natural-language search uses the OpenAI-compatible model you configure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Follow every blog, newsletter, and news site you like from one distraction-free inbox with the self-hosted Fusion RSS reader, which has no AI features by design. A left sidebar lists feed groups with unread counts and jumps between Unread, Starred, and All, while the center list shows articles under filter tabs with read and star buttons on every card. Click a card and a right-hand drawer opens with the full sanitized article, a link to the original, and Previous and Next buttons. Press Cmd or Ctrl+K, or the slash key, to search feeds and articles from anywhere. Stay on the keyboard with Google Reader-style keys such as j and k to move, m to mark read, s to star, and g then u to jump to Unread; the question mark lists them all. Add a feed by entering a site address and letting auto-discovery find it, then pick its group, refresh frequency, and HTTP proxy, or suspend it to pause updates. OPML import and export bring subscriptions in or out. Starred articles are saved as snapshots that outlive their source feed. Fever API compatibility lets Reeder, Unread, and FeedMe read the same library. Sign in with a password or OIDC single sign-on, and install the interface as a PWA with Light, Dark, and System themes in eight languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

HomeHub gives a household one private page for the everyday coordination that usually scatters across chat threads, fridge notes, and five separate apps. Pin shared notes where everyone sees them, drop files into the shared cloud for the house, and keep one shopping list the whole family edits, with suggestions drawn from what you bought before. Chores become a shared checklist, the calendar holds the dates that matter, and a who's-home view answers the question every family group chat asks in the evening. The expense tracker follows family spending and handles recurring bills like the milk, the newspaper, and subscriptions, while the recipe book and expiry tracker keep the kitchen honest. Small utilities round it out: download media straight to the server, shorten URLs, compress PDFs, generate QR codes, and check the weather without leaving the hub. Every feature toggles on or off in one config file, themes recolor the interface, and there is no account system at all, because the hub trusts your home network instead of a password database. It runs happily on a Raspberry Pi, installs as a PWA on phones, and keeps uploads, media, and data in mounted folders you can back up with any file tool. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Ocular provides a modern personal finance workspace that plots your household income and expenditures across multi-year horizons to eliminate surprises in annual budgeting. Users can define custom income streams, configure recurring fixed obligations like rent and utilities, and allocate discretionary spending allowances into designated category groups. Interactive Sankey diagrams and cumulative balance curves visualize projected net savings trajectories, signaling upcoming cash crunches months in advance. The annual planning matrix breaks down monthly figures across twelve periods, calculates automatic net savings, and highlights active fiscal cycles. Keyboard shortcuts accelerate data entry with inline arithmetic expression evaluation directly inside currency cells. Built-in multi-currency conversion and localization settings allow international households and remote professionals to manage diverse revenue streams effortlessly. A dedicated privacy mode masks sensitive monetary amounts when working in public spaces, while complete ledgers export cleanly as portable JSON archives. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

From a PDF plan set to a waste-adjusted material order takes one browser tab: OpenTakeoff measures floors, walls, and fixtures at the drawn scale and never uploads a single drawing. Drag in a PDF, image, or zip plan set, view up to four sheets side by side, and search sheet text, while stitching joins floors split across a match line. Scale comes from the drawn scale note or a known dimension, and a check tool reports percent error before a wrong scale can skew a bid. Area, linear, and count tools carry condition colors, CAD hatches, waste percentages, and wall heights, and a marquee over the architect's finish schedule turns approved rows into conditions. Supporting materials convert coverage rates into rounded-up order quantities, and roll-goods mode lays out lanes, seams, and cuts to scale. Totals in SF, SY, LF, and EA export to CSV, JSON, Excel, print, or a marked-set PDF, while named revisions compare addenda as quantity deltas. Highlighters, revision clouds, callouts, and notes mark up sheets on a layer that is never counted, and dimension lines label measured lengths at the sheet scale. An MCP server with more than 50 tools lets AI agents open plans, set scale, and measure rooms, and each shape they draw stays a dashed proposal until a person accepts it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Artifact Keeper serves as a self-hosted universal software artifact repository that consolidates container images, application libraries, and infrastructure bundles under a unified management control plane. Software development teams can publish and resolve dependencies using their existing build tools, including Docker, Helm, npm, PyPI, Maven, Cargo, NuGet, and Terraform without installing proprietary client plugins. Remote repositories act as transparent pull-through caching proxies for public upstreams like Docker Hub and PyPI, accelerating internal CI/CD build speeds while insulating production pipelines from external registry outages. Virtual repositories combine multiple local, remote, and third-party endpoints into single URLs, resolving packages across prioritized internal teams and public registries automatically. Automated security scanners evaluate incoming packages for Common Vulnerabilities and Exposures using Trivy and Grype engines, assigning letter grades and enforcing quarantine policies to block vulnerable binaries before production release. Administrators can sign package metadata with cryptographic GPG keys, configure peer mesh replication across geographic regions, and manage team permissions using OpenID Connect, SAML, and granular access tokens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Waiting for the right moment to buy usually means refreshing product pages for weeks, so PriceBuddy does the refreshing for you and speaks up when the price is right. Paste a product URL and it fetches the details and price, then rechecks on a global schedule or a per-product interval from every 5 minutes to every 24 hours. Stores are scraped with CSS selectors, regular expressions, or JSONPath, a headless browser covers JavaScript-heavy shops, and an optional AI provider (OpenAI, Anthropic, Gemini, or local Ollama) can recover missing prices or repair broken selectors. Attach several URLs to one product to compare retailers or marketplace listings, with in-stock, pre-order, and discontinued states shown beside each source. Unit pricing reveals the real cost per tablet or bag when multi-packs distort shelf prices, while history charts show minimum, maximum, and average over time. Alerts fire on a target price, a drop threshold, or a back-in-stock event and arrive by in-app notice, email, Pushover, Gotify, Apprise, Telegram, Discord webhook, or ntfy. Tags sort products into draggable dashboard groups, with optional smart sections for what to buy now, recent drops, and failed checks. Each user keeps separate products and settings, a REST API with scoped tokens serves your scripts, and a Chrome and Edge extension tracks items from the page you are viewing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Relaticle delivers the first CRM built from the ground up for both human operators and AI agents — a self-hosted platform where Claude, GPT, Gemini, or any custom model connects through a production-grade MCP server exposing 30 tools for full CRUD operations across companies, people, opportunities, tasks, and notes without a single line of integration code. The 22 custom field types include text, email, phone, currency, date, select, multiselect, entity relationships, conditional visibility rules, and per-field encryption — all configurable through the UI without database migrations or code changes. Multi-team isolation enforces data boundaries through a 5-layer authorization system with team-scoped workspaces, API tokens, and granular permissions. The JSON:API REST surface provides Spatie QueryBuilder filtering, sorting, and pagination with schema discovery endpoints that let agents introspect your data model at runtime. A built-in AI chat connects directly to CRM data for natural language queries, while the external MCP server gives any compatible agent the same 30-tool access. Docker Compose deployment runs five containers — app (nginx + PHP-FPM), Horizon queue worker, scheduler, PostgreSQL 17, and Redis 7 — with automatic migrations on startup and demo data seeding for new teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

SoftJL turns a system description into the UML diagrams, test cases, and Word specifications a software project is supposed to produce, and keeps every artifact traceable back to the requirement it came from. Describe your system in chat and confirm the extracted requirement rules, then work through feasibility analysis with system context, business and system flows, and implementation options weighed by cost, benefit, and risk. From the confirmed rules it builds requirement and design models: functional structure, use cases, domain concepts, architecture, design classes, database and deployment diagrams, all editable as PlantUML with SVG export. Tests follow the same thread, with normal, exceptional, and boundary cases mapped to requirement rules in coverage and traceability matrices that show exactly which requirements lack design or test support before you submit. When a requirement changes, dependencies and update status point at the models, tests, and documents that need review, instead of leaving you to rediscover them by hand. Specifications generate from the saved models as versioned, editable DOCX files, a feasibility report, a requirements specification, and a design description, ready to compare against the diagrams and revise. An optional read-only MCP endpoint lets a coding agent read your designs and acceptance criteria, and the whole workspace runs on your own OpenAI-compatible model service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.