Push to git, watch the deploy go live over HTTPS, and roll back in one click, all on servers you own: Levelrail is a self-hosted platform for running apps and databases without Kubernetes. Deploys start from GitHub, GitLab, Bitbucket, or Gitea webhooks and build from a Dockerfile, Compose file, image, or framework preset such as Next.js, Go, React, or Spring Boot, with preview environments per pull request, canary and blue-green rollouts, approvals, and freezes. Embedded Caddy gives every app a domain with HTTPS: self-signed by default, Let's Encrypt with one toggle, a free sslip.io address when no domain exists, or your own uploaded certificate. Provision Postgres, MySQL, MariaDB, MongoDB, Redis, ClickHouse, and more with scheduled backups that are re-downloaded and verified, Postgres point-in-time recovery, and password rotation. Metrics with deploy markers, searchable live logs, alerts, and a public status page need no separate monitoring stack. Roughly 360 one-click templates and a Cmd+K search across apps, databases, and nodes speed up daily work. Extra servers enroll with a one-time token and a reverse-dialed agent that needs no inbound ports. Sign in with passkeys, TOTP, OAuth from 20 providers, or OIDC, then scope access with IAM policies, encrypted secrets, and a tamper-evident audit log. A CLI, HTTP API, and MCP server let scripts and coding agents deploy and roll back. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Bots that knock on your server's login ports are always turned away by Knock-Knock, a multi-protocol honeypot that shows every attempt on a live dashboard. Honeypots answer on the standard ports for SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP, with MQTT, Node-RED, Modbus, S7, and SNMP as optional extras. Authentication is always rejected, so no bot ever gets a shell. Who is knocking? The live feed shows each attempt's country, username, password, ISP, IP, and protocol. From where? A 3D globe marks the origin in one of six styles, including an extruded country heat map. Trying what? Leaderboards rank countries, usernames, passwords, ISPs, and IP addresses, and a trivia panel explains why bots favor certain credentials. A protocol filter re-slices the feed, globe, and leaderboards together; SIP shows dialed numbers and toll-call destinations, and RDP shows hostnames and accounts. Too fast? Press the space bar to pause, right-click any knock for details, or switch on a virtual Geiger counter that clicks as attacks arrive. Want to fight back? Download hourly 30-day and 365-day blocklists with recipes for CSF, CrowdSec, ipset, nftables, and pfSense, or query the optional API for any IP, CIDR range, or ASN. Several honeypot servers can stream into one aggregated dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Hatchdoor gives your Markdown notes two front doors at once: a fast web interface for you, and an MCP endpoint where AI agents read and edit the very same vault. Point it at any folder of Markdown files, an existing Obsidian vault included, and it indexes everything into a disposable SQLite read model that rebuilds itself from your files if deleted. In the browser you browse folders, follow wikilinks that survive renames, explore backlinks and graph views, and search by keyword or meaning across every vault you mount. The live editor shows Markdown syntax only on the line you are editing and saves automatically, while concurrency checks refuse a save when the note changed underneath you. Agents connect with their own token and start read-only; turn writes on and Claude Code, Codex, Cursor, or Hermes can create, edit, move, and link notes through the same checked operations the interface uses. Saved queries in Obsidian's Bases syntax render as live tables, attachments preview inline, and optional git integration commits and pushes every change back to your vault's repository. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Dopbase keeps your application secrets out of scattered .env files and stores them, encrypted one by one, in a single self-hosted server you run as one file. You organize everything by project and environment, so the payment service has its own development, staging, and production values, and the same key can hold a different encrypted value in each place. Every secret is an individual record that can be updated, revealed, versioned, or rolled back without touching the others, and reading metadata never exposes a value. When an application starts, one command asks the server for an environment and injects exactly those values into the process, removing its own token before the child process runs. People sign in to the Admin UI with roles for root, admins, members, and even AI agents that can read metadata but change nothing. CI jobs and servers use runner tokens scoped to a single environment, so a staging credential can never read production. You can import and export .env files, edit secrets as a table or as raw env text, connect single sign-on through providers like Keycloak, and read an audit history of checks, reveals, and changes. Full-instance backups and the master key stay under your control on your own disk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Keeping users informed about software releases while gathering community feedback on upcoming roadmap items becomes effortless with ShipShipShip, a self-hosted changelog, release notes, and feature voting platform. Product managers can draft rich release announcements using a formatting editor that supports Markdown, embedded media uploads, color-coded category tags, and exact publication timestamps. Instead of juggling disconnected feedback spreadsheets, teams organize backlog proposals, active development tasks, and shipped updates across a drag-and-drop Kanban board or a filterable list view. Visitors browsing the public roadmap can upvote proposed features to help prioritize the next sprint and react to announcements using eight expressive emoji reactions. When an item moves into a shipped status, the built-in newsletter engine automatically dispatches formatted release emails over SMTP to subscribers using customizable per-event templates and one-click unsubscribe links. Design-conscious organizations can install manifest-driven public themes, map internal workflow statuses to public roadmap columns, and tailor brand colors and logos. International audiences can navigate the interface in seven languages, including full right-to-left layout support, while engineering teams automate event creation through the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

BitRouter is a context-aware LLM router that learns which model delivers the cheapest successful outcome per workflow step, cutting agent costs by up to 80% while maintaining 96% quality versus all-frontier baselines. Point any agent runtime at http://localhost:4356 with a one-line OPENAI_BASE_URL change and BitRouter routes to OpenAI, Anthropic, Google, Groq, DeepSeek, Mistral, Moonshot, MiniMax, Nvidia, and any OpenAI-compatible endpoint simultaneously, normalizing authentication, streaming, and cross-protocol translation between wire formats. The act-observe-evaluate-learn loop traces every hop with cost, tokens, and latency attribution, scores each decision against a versioned policy-lock.yaml, then tightens routes automatically with no LLM judge in the path. Native MCP gateway auto-discovers tools from connected servers and makes them routable and governed alongside model calls. Agent Client Protocol integration enables the TUI to manage Claude Code, Codex, OpenCode, OpenClaw, Gemini, and Copilot sessions in real time with inline tool-call approval and live streaming. Built-in guardrails inspect, redact, or block risky content before requests leave your network. Virtual keys scope API access per agent or user without exposing upstream credentials. Per-agent spend caps and loop guards contain runaway cost automatically. Multi-account failover reroutes mid-run so rate limits never re-pay completed work. Ships as a single Rust binary via npm or Cargo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Initiative is a self-hosted, multi-tenant project management platform that organizes projects, tasks, collaborative documents, and schedules into strictly isolated community workspaces without enterprise complexity. Users create distinct communities where data remains strictly partitioned across separate database schemas, allowing agencies, volunteer groups, and gaming guilds to manage multiple client environments from a single deployment. Within each community, initiatives group related projects and documents while interactive drag-and-drop Kanban boards track task progression across custom columns, priorities, and deadlines. Integrated collaborative documents enable team members to co-author notes, project briefs, and meeting minutes in real time with threaded inline discussions and user mentions. Granular role-based permissions let administrators specify exact view and edit privileges down to individual items, while a recoverable trash system prevents accidental deletions from interrupting live operations. Curated marketplace apps supply customizable analytics dashboards, and optional bring-your-own-key artificial intelligence integrations generate task suggestions and summarize lengthy discussion threads. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

Before lifting a heavy four-unit storage server or rewiring a cramped network closet, you can map every unit of cabinet space in Rackula, an interactive drag-and-drop rack layout designer and capacity planner. Instead of staring at generic grey rectangles in a spreadsheet, you pull switches, routers, patch panels, UPS battery banks, and rackmount chassis from a hardware catalog populated with authentic front and rear faceplates from the NetBox device library. Equipment snaps cleanly to standard EIA-310 rack unit boundaries, while half-width gear and mini PCs nest inside one-unit carrier shelves and mounting brackets. Audiovisual technicians can group bayed cabinets side by side to plan amplifier racks, signal processor chains, and patch bays across multi-rack installations. Network engineers and data center operators can rearrange hardware with full undo and redo history, attach custom device graphics, and export crisp diagrams as PNG, SVG, or PDF files for runbooks and change control tickets. Sharing a proposed cabinet topology with a colleague in the field takes seconds using an encoded URL or a scannable QR code that opens on mobile browsers. Server-side persistence stores your rack definitions as portable YAML files and supports optional local accounts or OpenID Connect single sign-on for shared infrastructure teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Drop your screenshot, a base style is applied, style it however you wish, and export - "that's basically it," says Moocup's own author, and the description holds. The workflow is genuinely seconds long. Drag an image in and it lands on an attractive backdrop immediately; from there you adjust backgrounds, gradients, padding, borders, shadows, and framing with live preview until it matches your taste, then export a high-quality image ready for a portfolio page, README, blog post, tweet, or slide deck. There are no accounts, no watermarks, and no upload to anyone's cloud - as a self-hosted static app, your screenshots never leave your infrastructure, which matters when the screenshot shows a proprietary dashboard or unreleased product. It runs entirely in the browser from a tiny nginx container, works on any device, and requires zero design skill: the smart defaults do the heavy lifting, and everything else is optional tinkering.

A project brief and the task board tracking it belong together, and Litpage keeps pages, databases, and team discussion in one self-hosted workspace instead of scattering them across subscriptions. Write in a block editor with 41 block types, a slash menu, markdown shortcuts, drag and drop, mentions, equations, and highlighted code blocks. The same data becomes a table, board, list, gallery, calendar, timeline, chart, dashboard, feed, form, or map, with typed fields, formulas, relations, and rollups underneath. Automations and buttons turn those databases into working tools, while templates keep repeated projects consistent. Teammates edit together live, comment, suggest edits, and revisit version history, with page-level and field-level permissions deciding who sees what. Pages can be shared publicly or published as sites, and Markdown, CSV, HTML, Word, and PDF files import into the tree. Optional AI runs on the provider and key you configure: chat that searches your workspace, custom agents on schedules or triggers, writing help, database autofill, and meeting-note summaries. Administrators get member and guest management, security policies, an audit log, analytics, passkeys, and two-step verification. A REST API with personal tokens, webhooks, and an MCP endpoint open everything to your other tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Plan the day in the morning, capture tasks in your own words as they appear, and let every device settle on the same list by evening: that rhythm is what OpenTodo is built around. The Today view opens with a briefing, a daily limit, and morning, afternoon, and evening sections, with time blocking and meetings counted against the day's real capacity. Quick add understands natural language in six languages, a pasted list becomes tasks in one step, and the command bar, inbox processing, email-to-task, and dictation keep capture fast. Projects organize work with sections, boards whose cards carry notes, timelines, sub-projects, and areas, while recurring tasks and sequential projects handle routines and ordered work. Lists can be shared with the people you live and work with, invited by link once the owner account exists. Every device keeps a full copy and works offline; changes are stamped per field and merge cleanly through your server when you reconnect, with history and undo preserving earlier values. CalDAV and calendar feeds connect your calendars, GitHub and GitLab issues flow in, and webhooks plus ntfy, Pushover, and Gotify send notifications out. Scheduled backups go to a folder, S3-compatible storage, or WebDAV, and the whole server is one container around one SQLite file. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Built on Elixir's fault-tolerant OTP runtime, Tymeslot delivers the complete scheduling toolkit that Calendly charges for and Cal.com relicensed away from open source in 2026. Share one booking link and let clients pick available slots — your calendar stays synchronized and double-bookings disappear automatically through real-time availability checking against Google Calendar, Microsoft Outlook, and any CalDAV server including Nextcloud. Meeting types support configurable durations, buffer times, and availability windows that clients can book without email back-and-forth. Phoenix LiveView powers the real-time UI with WebSocket connections that update instantly as bookings arrive, without client-side JavaScript framework overhead. The platform attaches Zoom video rooms to confirmed bookings through your own Marketplace app credentials, sends confirmation and reminder emails via SMTP, Postmark, SendGrid, Mailgun, or AhaSend, and supports custom booking page themes with embed options for integration into existing websites. Circuit breakers, connection pooling, and graceful degradation maintain availability during provider outages. Authentication supports local accounts, GitHub OAuth, and reCAPTCHA protection on public booking forms. Self-hosting deploys as a single container with PostgreSQL embedded — no separate database container required. Two named volumes persist uploads and database state, while the same image powers the managed cloud at tymeslot.app so self-hosted users get identical features without a crippled community edition. Deploy via Docker, Cloudron with automatic updates, or Railway from a community template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ScribeCrate is a self-hosted speech-to-text API that turns recordings into transcripts, subtitles, and English translations on your own server. It speaks the OpenAI Whisper API fluently: point any compatible client at your server's address, swap in your API key, and uploads come back as text. Ask for plain text, JSON with timestamps, or ready-to-publish SRT and WebVTT subtitle files, and for long recordings the segments can stream back over SSE as they are decoded. Turn on speaker diarization and every segment is labeled with who is speaking, which makes interview and meeting transcripts readable at a glance. Choose the model that fits the job, from tiny for quick drafts to large-v3 for maximum accuracy, and run it on a modest CPU, a Raspberry Pi class ARM board, or an NVIDIA GPU. Almost any recording works: MP3, M4A, WAV, WebM, OGG, and FLAC are all accepted, and with models cached in advance the server keeps transcribing with no internet connection at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every family recipe, bookmarked food blog post, and meal-prep formula stays organized inside Vanilla Cookbook, a self-hosted culinary library that converts volumetric measurements into precise gram weights and scales servings on the fly. Paste a URL or click the browser bookmarklet to scrape recipes from hundreds of cooking websites. Plain-text ingredient strings split automatically into structured quantities, units, preparation notes, and optional or to-serve badges. Home bakers switch effortlessly between US cups, imperial ounces, and metric grams across thousands of ingredient density profiles. Inline oven temperatures, fractions, and numeric ranges adjust automatically as serving counts change. Nutritional text parses into a structured per-serving breakdown, while integrated shopping lists, cooking logs, and equipment lists keep weekly grocery planning synchronized across desktop browsers and Progressive Web App mobile devices. Connecting an optional OpenAI, Anthropic, Google Gemini, Ollama, or LiteLLM endpoint unlocks AI fallback scraping for pages lacking Schema.org markup, automatic recipe translation, verbose direction summarization, photo-to-recipe extraction, and vector-based semantic search. Multi-user accounts, OAuth authentication, public recipe sharing links, and bulk import or export tools give households full control over their cookbook data. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Built as a developer-first alternative to SendGrid, Mailgun, and Postmark, Posta delivers a complete self-hosted email infrastructure platform handling both outbound delivery and inbound reception through a single HTTP API with official SDKs for Go, PHP, and Java. The Go backend processes email through Redis and Asynq with automatic retries, priority queues, and async delivery while PostgreSQL stores templates, contacts, campaigns, and delivery analytics. Outbound features include versioned multi-language templates with variable substitution and stylesheet inlining, bulk campaigns with subscriber targeting and A/B testing per-variant metrics, scheduled timezone-aware delivery with draft/paused/cancelled lifecycle states, email address verification checking syntax, MX records, disposable domains, and role accounts, plus web view links with signed expiring URLs and one-click unsubscribe headers. The built-in SMTP receiver with TLS handles inbound email at your domains, parses messages and attachments, scores spam, and forwards structured payloads to your application via HMAC-verified webhooks with real-time SSE notification streams. The Vue-based dashboard manages templates, SMTP server pools, domains, contacts, API keys, campaigns, and email logs with dark and light mode support while admin-level platform metrics expose delivery rate trends, bounce rate graphs, and latency percentiles alongside Prometheus integration and daily health reports. Deploy via Docker with PostgreSQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

"Stupid simple software" is the entire philosophy at DumbWare.io, and DumbBudget delivers it: no over-engineering, no complexity, no accounts, no bank connections - just a clean, modern ledger for money in and money out. Log income and expenses, assign categories, and watch real-time balance calculations update as you type. Finding transactions is quick: filter by type, narrow by date range, sort by date or amount. When tax season or spreadsheet analysis calls, everything exports to CSV. Access control matches the philosophy - a single PIN (set via one environment variable) gates the app, backed by real security engineering: rate limiting on PIN attempts, temporary lockout after failures, secure session handling, and no sensitive data in browser storage. Multi-currency support covers the ISO codes, and a SITE_TITLE variable names each instance - deliberately useful, because running separate instances per account or family member is the intended pattern for multi-user needs. The responsive UI ships light and dark themes and installs as a PWA on phones, where expense logging actually happens. Configuration is five environment variables; data persists in one folder. If Actual Budget and Firefly III feel like accounting software, this is the notepad that gets used. GPL-licensed.

Your team chat can be one executable on your own server: Campfire Rust runs rooms, direct messages, attachments, and search as a single binary that replaces the whole Ruby, Puma, Redis, Resque, and Thruster stack. Create rooms with access controls for projects, departments, or a private board discussion, and keep direct messages beside them for quick questions. File attachments arrive with previews, mentions pull the right person into a thread, and search finds the decision someone made months ago. Web Push notifications reach browsers and phones, so a quiet room still finds its people when it matters. Chatbots connect through a simple HTTP API for sending and receiving messages and attachments, which makes Campfire a home for build alerts, deploy notices, and support pings. Existing Campfire installs upgrade in place because the Rust binary reads the same SQLite database, storage layout, and signed cookies, with no data migration and no mass sign-out. Automatic TLS with Let's Encrypt certificates, HTTP/2, and Action Cable-compatible WebSockets are built in, and the whole system works on air-gapped networks that never touch the internet. Run it as your primary chat, as a backup for the day a hosted service goes down, or as a walled garden for executives and events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Flowctl turns repetitive ops work, such as granting SSH access, restarting a service, or provisioning a server, into self-service forms that anyone on the team can run without holding credentials. Each workflow is a YAML or HUML file with typed inputs, validation rules, and a list of actions. Actions run in order or as a dependency graph, so independent branches execute in parallel. Every action runs in a Docker container, as a shell script, or as another flow, and scripts can target remote servers over SSH, several at once. Sensitive steps pause until a reviewer approves or rejects them. Output from one action feeds the next, files pass along as artifacts, and failed actions can be retried. Cron schedules with time zones and labels run flows unattended, while logs stream live in the browser. Email, Slack, Mattermost, and webhook notifications announce success, failure, waiting, or cancellation. Teams get isolated namespaces with user, operator, reviewer, and admin roles, OIDC single sign-on, and encrypted storage for SSH keys and secrets. A built-in flow editor means nobody has to hand-write files, and custom executors can be added as Go plugins. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.