PdfDing turns a scattered folder of PDFs into a proper library you can read, annotate, sign, and share from any browser. The viewer remembers exactly where you stopped in every document, so a manual opened on your desktop resumes mid-page on your phone, and progress bars in the library show how far you have read at a glance. Workspaces and collections group related documents, multi-level tags classify them, and starring, archiving, and bulk actions keep even a large archive tidy. Inside the viewer you can add text, highlights, and freehand drawings, then review and export your highlights and comments from dedicated sections and attach Markdown notes to a document. A signature you create once is stored on your server and waits for you on every device, ready to drop onto contracts and forms. Sharing a collection or a single PDF takes a link or a QR code, with optional access control over who can open it and for how long. Accounts are protected by OIDC single sign-on and two-factor authentication with TOTP or WebAuthn, and dark mode, an inverted color mode, and multiple layouts keep long reading sessions comfortable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PinePods delivers a centralized, self-hosted podcast ecosystem that liberates personal listening histories, audio files, and show subscriptions from commercial streaming walled gardens. Users can discover new shows through built-in search connectors across Podcast Index, iTunes, and YouTube, streaming audio and video episodes with variable playback speed, chapter markers, and synchronized transcripts. A persistent queue and custom playlist builder keep media sequences orderly across web browsers, desktop installations, and mobile clients with native CarPlay and Android Auto support. Built-in gPodder server synchronization enables seamless cross-device progress tracking with third-party podcast apps like AntennaPod. Automatic episode downloader engines monitor subscribed feeds, archiving new releases to local server storage according to customizable retention rules and storage quotas. Multi-user authentication secures household access through OIDC single sign-on and two-factor TOTP verification, while an integrated terminal client lets command-line enthusiasts manage queues directly over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Scrumboy is a Kanban and sprint management tool that ships as a single Go binary backed by SQLite, deploys in under ten seconds via Docker, and uniquely integrates with AI coding agents through a standards-compliant MCP JSON-RPC endpoint. The dual-mode architecture supports Full mode with bootstrapped authentication, TOTP two-factor auth, OIDC/SSO integration through Keycloak, Authentik, Auth0, or Entra ID, role-based access control across Owner, Admin, User system tiers plus per-project Maintainer, Contributor, and Viewer roles, and Anonymous mode that generates instant shareable boards accessible via unique URLs with zero signup requirement. Custom workflows allow user-defined lane configurations per project including designated "Done" lanes, while sprints with configurable one or two-week cycles include board-level sprint filtering and the ability to disable and re-enable sprint tracking without losing history. Real-time Server-Sent Events power instant multi-user board updates, and outbound webhooks deliver JSON payloads to registered URLs when domain events fire with HMAC signature verification. The MCP endpoint at /mcp/rpc enables native integration with Cursor, Claude Code, and other AI agents through OAuth 2.1 with PKCE authorization, while API access tokens support CLI automation and CI/CD pipelines. Additional capabilities include VoiceFlow voice commands, per-project sticky-note walls, Markdown and Mermaid diagram support in task notes, append-only audit trails, VAPID Web Push notifications, SMTP password reset, Trello import, JSON backup with merge/replace/copy strategies, and 22-language internationalization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3.0 licensed.

Every connection starts at the endpoint, never at the server, so Borg Backup Server can back up Linux, Mac, and Windows machines behind NAT and firewalls without opening a single inbound port. A lightweight agent on each machine polls for tasks over HTTPS, pushes deduplicated archives over SSH, and reports live progress. Append-only SSH access means an endpoint can add and restore archives but never prune or delete them. The dashboard shows backup charts, server stats, and active jobs at a glance. Plans run from hourly to monthly, several per client, built from reusable directory templates for common server roles, with per-plan retention from hourly to yearly. Lost a file? Browse the archive tree in your browser, tick what you need, and restore it to the client or download a .tar.gz. MySQL and PostgreSQL dumps run before each backup and restore as a copy or a replacement. Repositories can live on the server, on BorgBase, Hetzner, or rsync.net, and mirror to S3-compatible storage such as AWS, Wasabi, or Backblaze B2. Apprise alerts reach more than 100 services, and a nightly report lands in your inbox. Two-factor login and role-based access guard the console. Upgrades roll out to the server and every agent together, and the server backs itself up daily. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

QuickDrop functions as an ephemeral, self-hosted file distribution node and pastebin that eliminates account requirements for rapid data transfers. Users can drag individual files, paste plain text code snippets, or drop entire folder structures while preserving complete directory hierarchies through automated client manifests. Resumable chunked transfers split multi-gigabyte payloads into resilient blocks, ensuring dependable uploads over unstable network connections. Senders can protect sensitive documents with optional AES encryption at rest, individual passphrase requirements, and automatic metadata stripping that removes GPS coordinates and camera EXIF markers. Granular share token policies restrict access by enforce maximum download quotas, burn-after-reading limits, or strict calendar expiration timestamps. In-browser viewers generate instant previews for code syntax, Markdown documentation, PDF reports, audio tracks, and high-resolution images without downloading files locally. Built-in QR code generators allow mobile devices to retrieve shared payloads instantly across local wireless networks. System operators can govern storage lifecycles through an administrative control panel with configurable retention windows, automated background garbage collection, and custom storage caps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

No external database cluster to babysit, no proprietary cloud lock-in, and no bloated workspace hierarchy: Jotty stores every note, checklist, and Kanban board as plain Markdown and JSON files inside a single folder on your server. Need a quick grocery list with nested categories, progress bars, and drag-and-drop reordering? Spin one up in seconds, or flip any list into a multi-column Kanban project board with custom statuses, due-date calendar views, and a built-in time tracker. Write technical documentation in a TipTap-powered WYSIWYG and Markdown editor featuring syntax-highlighted code blocks, GitHub-flavored callouts, embedded Draw.io and Excalidraw diagrams, and OpenPGP client-side encryption for sensitive records. Connect ideas across your workspace using Obsidian-compatible wikilinks, inline mention suggestions, backlinks, and an interactive 2D and 3D knowledge graph that maps relationships between tasks and notes. Share individual notes or live Kanban boards publicly via customizable read-only links, or start the optional Model Context Protocol (MCP) companion container so AI assistants like Claude and Cursor can query your notes and check off items through your scoped REST API key. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Software makers who would rather not rent a licensing backend use Keygate to issue, sell, and enforce license keys from infrastructure they control. You create desktop, SaaS, or hybrid products and sell them as subscriptions, perpetual licenses, perpetual licenses with a maintenance period, trials, or floating concurrent licenses that are checked out, heartbeated, and returned automatically. The admin dashboard manages products, plans, customers, licenses, API keys, webhooks, analytics, audit logs, team members, email templates, and branding, with search, filters, and CSV or JSON export. Your application activates and verifies keys through the license API, enforces per-device or per-user activation limits with grace periods, and can verify Ed25519 signed tokens offline with a public key. Usage metering tracks API calls, storage, bandwidth, or custom metrics against quotas with hourly, daily, monthly, or yearly reset cycles and webhook threshold warnings. Connecting Stripe makes checkout create licenses automatically, follows plan and seat changes with proration, handles refunds and cancellations, sends dunning emails after failed payments, and gives customers a billing portal and self-service license management. Team seats, feature entitlements, purchasable add-ons, scoped API keys, and optional S3-backed release hosting round out the selling stack in one binary with one PostgreSQL database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Leave a fake door unlocked and see who walks through: Krawl is a self-hosted honeypot that poses as a sloppy web server and records everything scanners and scrapers try. Fake WordPress, phpMyAdmin, and admin logins. Every attempt logged, every credential captured. A .env file leaking fake database strings, AWS keys, and Stripe secrets. SQL injection, XSS, path traversal, XXE, and command injection traps that answer with believable fake output. SQLMap gets a different database error on every request. Malicious crawlers wander an endless maze of random links. An optional tarpit adds delay and word salad that cost scrapers time, storage, and tokens. Optional AI-generated pages write a plausible decoy for any path an attacker requests. A hidden dashboard shows an attacker map, top IPs, captured credentials, and per-IP forensics. TLSH fuzzy hashing groups webshell variants into campaigns. A behavior score labels each IP attacker, bad crawler, good crawler, or regular user. Export bans as raw lists, iptables, or nftables rules, with guides for Fail2Ban, OPNsense, and RouterOS. A canary-token link in decoy pages emails you the IP and user agent of anyone who follows it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Customermates delivers a modern CRM purpose-built for teams who want practical customer management without enterprise-heavy complexity. The platform manages contacts, organizations, deals, services, and tasks through clean pipeline workflows while integrating AI agent capabilities, REST API access, webhook events, n8n automation connections, and Model Context Protocol tooling for AI-native operations. Team collaboration features include role-based permissions, comprehensive audit logging tracking every data change, and workspace organization for multi-team deployments. The deal pipeline provides customizable stages with drag-and-drop management, while task assignments and service tracking connect directly to contact and organization records for complete relationship context. API-first architecture exposes all CRM data through documented endpoints enabling custom integrations, reporting dashboards, and third-party tool connections. The n8n integration enables no-code workflow automation for lead routing, follow-up sequences, notification triggers, and cross-system data synchronization. Self-hosting requires only two files — a Docker Compose configuration and environment variables — with the published image at ghcr.io/customermates/customermates:latest running database migrations automatically on first boot. PostgreSQL provides the data layer with no additional infrastructure dependencies beyond a reverse proxy for TLS termination. The Community Edition includes unlimited users, unlimited records, full API access, n8n automation, and audit logging at zero cost. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Freelancers, contractors, and small shops can turn a short form into a client-ready PDF invoice, with a live preview that redraws on every keystroke and no account to create. Fill in seller and buyer details, then add line items with quantity, unit, net price, and tax rate; net amounts, tax, totals, and the amount in words are calculated automatically. Item discounts take a percentage or fixed amount off any line under a custom label, and tax applies to the discounted figure. Pick a classic layout or a Stripe-style template, and add your logo as a JPEG, PNG, or WebP file. Invoices can be written in 13 languages, including Brazilian Portuguese, with 122 currencies, 18 date formats, and a number format setting that survives a language switch. Tax labels can read VAT, GST, Sales Tax, or anything else, or the tax columns can be dropped entirely. Bank account, SWIFT/BIC, payment method, due date, and notes sit alongside an optional QR code that can carry a payment link, UPI details, or contact information. Long invoices flow onto extra pages automatically. Saved seller and buyer profiles fill in the next invoice for you, and the data stays in the browser. Download the PDF or copy a shareable link that opens the same invoice for your client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When Commento's original maintainer went quiet, Commento++ bundled the community's bug fixes and stalled merge requests into a batteries-included release of the beloved Go-based Disqus alternative - and kept building. The core promise is unchanged: an embeddable comments box that is orders of magnitude lighter and faster than Disqus, with no ads, tracking, or data sales - two lines of HTML and a PostgreSQL database. On top of Markdown comments, voting, Disqus import, OAuth login (Google, GitHub, Twitter) plus SSO, sticky comments, thread locking, and email notifications, the fork's additions are substantial: WebSocket-powered live comment updates with permalinks and highlight animations for new arrivals, guest commenting with a name, a cross-domain moderation dashboard for approving and deleting comments in one place, MathJax rendering support, wildcard domain matching, a reInit hook that makes single-page-application integration clean, and Perspective API spam scoring alongside the existing Akismet integration. Optional page-view logging graphs traffic on the dashboard, native SSL termination works without a proxy, and script-tag data attributes control fonts, CSS overrides, deleted-comment visibility, and polling-versus-WebSocket behavior.

Write the messages today that the people you love would need if you suddenly could not send them, and LastSignal holds them encrypted until silence says it is time. The system emails you a check-in on a schedule you set; answer it and nothing happens, which is exactly the point. Miss one and reminders follow at fixed intervals, and the final reminder can ping a trusted contact who is able to pause the countdown, buying time when a hospital stay or a lost phone is the real story. If nobody responds, your messages are delivered by email to each recipient, who decrypts them with their own passphrase; the server never holds plaintext, so even the person running it cannot read what you wrote. You can stagger access with a per-recipient delay, so one person reads their message the day it arrives while another waits the number of days you chose. Automations can report in through a keep-alive token endpoint instead of email, for machines that prove you are around by staying alive themselves. Timings for check-ins, reminders, and the trusted-contact pause are all configurable per account. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MailCheap is a newsletter app you host yourself that writes, sends, and publishes your issues while charging you only for the emails you actually send, not for subscribers who never open anything. Write in an editor with slash commands, images, and content boxes, or send Markdown and HTML emails through the API, then work through a pre-send review that flags subject, preview text, unsubscribe link, and sender problems first. Bring your audience with you: CSV exports from beehiiv, Substack, Mailchimp, Kit, MailerLite, Buttondown, Ghost, and EmailOctopus import with each reader's status and signup date intact. Imports clean themselves, dropping invalid, misspelled, duplicate, throwaway, and spam-trap addresses, and a server-wide never-email list keeps known bad addresses out of every future import, signup, and send. Sending protects your domain: new contacts receive issues in paced steps, sends pause when bounce or complaint rates climb, and Gmail spam rates are watched daily. Every issue becomes a page on your newsletter's website, with a signup form, author page, share images, and a sitemap. Run up to three newsletters per account, each with separate contacts and campaigns, and follow subscribers over time with open and click reports by inbox provider. AI agents can do anything the dashboard can through the MCP server, and scripts get the same reach through the REST API, with sending marked irreversible so agents ask first. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Tiledesk lets you build AI-powered conversational agents with a visual drag-and-drop designer, then deploy them simultaneously across web chat, WhatsApp, Telegram, Facebook Messenger, Instagram, email, and Slack without rebuilding per channel. The no-code Design Studio combines LLM-powered conversations with conditional logic, external API calls, and branching dialogue trees that work identically everywhere. Multi-RAG knowledge management separates content into isolated repositories with hybrid search combining traditional full-text retrieval and semantic understanding via Qdrant vector embeddings, enabling accurate answers even when users phrase queries in unexpected ways. LLM integration supports GPT-4, GPT-4o, Anthropic Claude, and any model exposing an OpenAI-compatible API including locally hosted models via Ollama for complete data sovereignty. The human-in-the-loop system provides seamless escalation from AI agents to live support staff with full conversation context preserved, while multi-agent workflows enable complex orchestration where specialized bots collaborate on different aspects of a customer interaction. REST and MQTT APIs power integration with external systems and webhook-triggered automations, and pre-designed templates accelerate common scenarios. Docker Compose deployment starts the full stack including server, dashboard, messaging engine, and widget. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"Get to your most important links, FAST" - Hiccup's README states its whole mission in that one line, and the static start page delivers it. It is a client-side React single-page app - no backend, no database, no accounts - driven entirely by a config.json that defines featured link cards, categorized sections, and search providers. The search bar is the power feature: it queries your own links by name, URL, and tag while simultaneously offering external providers like Google, DuckDuckGo, and Amazon (plus custom URL-template providers you define), with arrow-key navigation and Enter to launch, so muscle memory replaces mousing. Editing happens in the browser - drag and drop links and background images, tweak cards in edit mode - with changes persisting to localStorage; a built-in config manager exports the JSON for hosting, and remote profile loading pulls a shared config across every browser and device you use. Multiple profiles keep home-server, work, and dev-tool link sets separate. PWA support installs it on a phone home screen, caching strategies keep it fast offline, read-only mode suits kiosk displays, and Cmd/Ctrl+/ reveals the full hotkey reference. Serve it from any static host and point your new tab at it.

For teams that need ISO 27001, NIS2, and GDPR evidence without handing compliance data to a SaaS vendor, ISMS Builder is a self-hosted information security management system for policies, risks, assets, audits, and incidents. Compliance managers move policies from draft through review to approved and archived, and recipients confirm each one through a token link that needs no login. Security officers close gaps in a Statement of Applicability that cross-maps BSI IT-Grundschutz, NIS2, EUCS, the EU AI Act, and the Cyber Resilience Act, with ISO 27001 controls imported from their own licensed copy. Risk owners keep treatment plans, turn Greenbone and OpenVAS reports into risk drafts, and score assets for confidentiality, integrity, availability, and authenticity. Data protection officers run records of processing, processor agreements, impact assessments, data subject requests, a 72-hour timer, and a deletion log with email alerts. The CISO inbox collects incidents, including reports from a public form that needs no login, beside a 30-item NIS2 Article 21 checklist and Article 23 deadline alerts. Auditors work from a findings register, a compliance matrix, and an exportable audit log of every create, update, delete, and login. Administrators enforce TOTP two-factor sign-in, choose among German, English, French, and Dutch, run semantic search locally through Ollama, and publish approved policies to Nextcloud or ownCloud as PDFs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Bridging local hardware and cloud intelligence, OwnPilot orchestrates autonomous multi-channel agent swarms and visual workflow pipelines while keeping sensitive personal records strictly on private infrastructure. Users can trigger autonomous task runs that browse websites using headless browser automation, extract data tables, and summarize research directly into encrypted markdown notebooks. The built-in workflow canvas allows individuals to construct branching automation sequences combining large language models, conditional logic gates, iterative data loops, and human-in-the-loop approvals. Users delegate calendar scheduling, task tracking, expense budgeting, and contact lookups through conversational chats conducted over web portals, Telegram bots, or WhatsApp numbers. Operators can dispatch coding agents to inspect local repositories, execute shell commands in sandboxed environments, and stream live terminal logs as automated patches develop. The platform also enables home automation enthusiasts to monitor MQTT telemetric feeds from microcontrollers, queue device commands, and receive instant alert notifications when sensor thresholds trigger. Advanced security layers inspect all incoming prompts for personal data patterns, enforce strict permission boundaries across file directories, and generate tamper-evident audit logs for every autonomous tool call. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

On a schedule you choose, Pluton backs up your folders to cloud storage and other disks, then lets you verify and restore every snapshot and see exactly what happened in a clean, self-hosted web dashboard. Three copies: every plan writes to a primary storage and can replicate to up to two more, so the 3-2-1 rule is a toggle in the plan wizard rather than a weekend project. Two kinds of media: pair a local disk or mounted drive with Backblaze B2, Cloudflare R2, Google Drive, Dropbox, pCloud, SFTP, S3-compatible buckets, or any of 70+ connectors, and press Verify to test a connection before trusting it. One place to look: the plan page charts file counts and sizes over a selectable range, a health strip colors recent runs, and a live panel counts files, bytes, and time remaining while each mirror initializes and replicates. Zero mysteries: every backup keeps a timestamped event timeline from dry run to pruning, and plan logs filter by level and task, search messages, and download as a file. Schedules run from every few minutes to monthly, including chosen weekdays; retention keeps daily, weekly, and monthly snapshots; and scripts can run before or after a job. Alerts reach you by email, Slack, Discord, or ntfy, and optional two-factor sign-in guards the dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.