Tinode
Why rent your messaging from a corporate walled garden when Tinode runs WhatsApp-style chats, groups, channels, and calls on a server you control? Teams get one-on-one and group chats that stay in sync across web, Android, and iOS, with typing indicators, delivery and read receipts, presence, replies, forwarding, editing, pinned messages, and notes to self. Communities broadcast through read-only channels with an unlimited number of subscribers, and granular permissions decide who can read, write, or invite on each topic. Support desks welcome anonymous visitors, mark staff and verified accounts with badges, and put chatbots to work with forms and templated replies. Messages take markdown-style formatting, inline images and videos, file attachments, and voice messages. One-to-one voice and video calls run peer to peer over WebRTC, using the TURN and STUN servers you configure. Administrators block unwanted contacts on the server, attach moderation plugins over gRPC, and script the rest with a command-line tool. Attachments can sit on local disk or Amazon S3, the database can be MySQL, PostgreSQL, or MongoDB, and sharded clustering with failover scales past one server. The clients offer light, dark, and system themes, custom chat wallpapers, and translations for more than a dozen languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Parca
A flight recorder for production code, Parca profiles CPU and memory continuously and keeps the history to query after something breaks. A slow memory leak or a momentary CPU spike is already on record by the time anyone looks. Point it at any service that exposes pprof endpoints, or deploy the eBPF-based Parca Agent to profile every process on a Linux host or Kubernetes node without touching application code. The agent covers C, C++, Rust, Go, and more. In the web UI, pick a profile type such as on-CPU, narrow it with Prometheus-style label selectors, sum or group by any label, and click a point on the time series to open its flame graph. Switch the same query to a table, add extra panels, or try the alpha Flame Chart and Sandwich views. After a deploy, open the Compare page, set two queries side by side by label or time range, and the functions that gained or lost CPU time stand out as a diff. Native binaries are symbolized from uploaded debuginfo or upstream debuginfod servers. Recent releases add support for OpenTelemetry eBPF profiler profiles and GPU profile types. Optional persistence keeps history across restarts, and a Prometheus-style scrape configuration with service discovery decides what gets profiled. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Captain Claw
Instead of one overworked chat box, Captain Claw gives you a Flight Deck for a whole fleet of AI agents: spawn specialist teams, watch each agent work live, and chat with any of them from a single dashboard. Describe a goal and Agent Forge designs the team, with roles, tools, and operating procedures, ready to spawn in one click. Agent Council runs moderated debates that end in a vote and exportable minutes, Basna sends the same question to blind specialists and merges their answers by learned reliability, and Vatra lets a team co-write a deliverable on a shared blackboard. Code takes a request through a plan you approve, a build, and three independent reviewers, committing every phase to git. Bat keeps working until an independent judge says the job is done, and Flows run deterministic automations on triggers. Mix OpenAI, Claude, Gemini, DeepSeek, OpenRouter, or local Ollama models per agent, with six memory layers shared across sessions and token and cost meters for every agent. Teams get admin-managed users and shared agents, and agents reach you through WhatsApp, Telegram, Slack, or Gmail while Claude can drive the fleet over MCP. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
PotatoMesh
When your community asks what its LoRa mesh is doing right now, PotatoMesh answers with a live map, chat log, and node table built from the traffic your own radios hear. It is a self-hosted dashboard for Meshtastic, Meshcore, and Reticulum networks, with no MQTT clutter. Each node gets a detail page charting battery, voltage, channel utilization, temperature, humidity, and air quality over the past week, plus the neighbors it hears with signal strength and the trace routes it appears in. New nodes and telemetry reports pop up in the chat as they arrive, and a charts page follows telemetry and packets per hour across the whole network. Federation finds other PotatoMesh communities automatically and plots them on a world map with active-node counts per protocol. Ingestors feed the dashboard from radios over serial, TCP, Bluetooth, or passive UDP, and several can report to one instance. Open browsers update live, a Prometheus endpoint exports metrics, and Markdown pages publish your rules, contact details, or legal notice. Add a stop-sign emoji to a node's name to hide it, or switch on private mode to drop the chat entirely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Borg Backup Server
Every connection starts at the endpoint, never at the server, so Borg Backup Server can back up Linux, Mac, and Windows machines behind NAT and firewalls without opening a single inbound port. A lightweight agent on each machine polls for tasks over HTTPS, pushes deduplicated archives over SSH, and reports live progress. Append-only SSH access means an endpoint can add and restore archives but never prune or delete them. The dashboard shows backup charts, server stats, and active jobs at a glance. Plans run from hourly to monthly, several per client, built from reusable directory templates for common server roles, with per-plan retention from hourly to yearly. Lost a file? Browse the archive tree in your browser, tick what you need, and restore it to the client or download a .tar.gz. MySQL and PostgreSQL dumps run before each backup and restore as a copy or a replacement. Repositories can live on the server, on BorgBase, Hetzner, or rsync.net, and mirror to S3-compatible storage such as AWS, Wasabi, or Backblaze B2. Apprise alerts reach more than 100 services, and a nightly report lands in your inbox. Two-factor login and role-based access guard the console. Upgrades roll out to the server and every agent together, and the server backs itself up daily. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
OSIRIS
Plotting live flights, earthquakes, wildfires, satellites, and news streams on one night-mode map, OSIRIS gives open-source intelligence work a single browser tab to live in. Sixteen layers toggle on and off with live entity counts. Aviation covers commercial, private, and military traffic. Ports and chokepoints, severe weather, space weather, and 15 hand-curated conflict zones get layers too. More than 17,000 public cameras open in a viewer when you click a pin. Draw a region, list every camera inside it, and export the set as GeoJSON. Twenty-three live news streams open from dots on the map. Double right-click anywhere for a Region Dossier with the place, country facts, head of state, and a Wikipedia summary. A Markets terminal follows indices, stocks, oil, commodities, currencies, and crypto, with a watchlist. Live Alerts sorts headlines, warnings, and quakes into searchable tabs. The Recon toolkit runs DNS, WHOIS, certificate, and subdomain lookups, searches the OFAC sanctions list, and traces BTC and ETH wallets. OI, the built-in assistant, flies the map to a place and switches layers on from typed or spoken requests. Its Forecast mode plays competing actors against each other in parallel simulated worlds and writes a sourced prediction on your own model key. Six preset themes restyle the whole interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
OpenFamily
Your family's shopping list, calendar, chores, meal plan, and budget share one home in OpenFamily, a self-hosted organizer that replaces subscription family apps with software you control. At the store, everyone ticks items off the same shopping list, with automatic categories, prices, reusable templates, and a store mode that groups items by category, and every phone updates instantly. At home, recurring tasks with three priority levels go to a specific family member, and in Pocket money, approved chores earn points that convert to payouts and savings goals. The calendar offers a monthly view per member, handles recurring and all-day appointments with up to five reminders each, follows Google, Outlook, or iCloud calendars by address, imports .ics files, and publishes its own iCal feed. Recipes can be found by typing the ingredients you already have, then dropped into a weekly meal plan. At month's end, the budget shows recurring income and expenses, per-category limits, charts, and a Kakeibo view. A kiosk display turns a wall tablet into a read-only board of today's schedule, meals, tasks, and who's where, alongside sticky notes from the family. Member profiles store allergies, vaccines, and emergency contacts, and parent and child roles keep the budget read-only for kids. Mealie, Tandoor, Home Assistant, Grocy, Nextcloud, and Immich connect in one click, and an optional AI assistant handles plain-sentence requests. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Sirius Scan
Point Sirius Scan at a network range and it finds live hosts, fingerprints their services, and lists every matching CVE with its CVSS score in a live web dashboard. The Vulnerability Navigator groups findings by severity, filters on CVSS, and exports results for remediation tracking. Scans run on Nmap with NSE scripts kept in sync with upstream, alongside Naabu port scanning. Lightweight remote agents connect back over gRPC from other networks, so segments the central scanner cannot reach still get assessed, and the same agents can run YAML detection templates locally in CLI mode with no server connection at all. An operator console runs PowerShell commands against connected agents and keeps command history beside the scan results. Real-time progress, severity trend charts, host detail pages, and an environment overview show what changed between scans. A REST API on port 9001 with API key authentication feeds results into existing security workflows, while service health monitoring and centralized logging confirm the platform itself is behaving. An installer generates fresh secrets and an initial admin password, and production overlays tighten the deployment further. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
MikroTik Manager
MikroTik Manager is a web control plane for whole RouterOS fleets, built so that a bad VLAN change reverts itself instead of costing you a drive to the site. Before any risky edit, Change Guard saves a restore point on the device and arms a scheduler; if a fresh connection cannot reach the router afterwards, it rolls itself back. Lockout prediction simulates each change against live device state and refuses one that would cut management access, naming the exact port and VLAN at fault. Config Health audits for settings RouterOS accepts but silently ignores. Day to day, a live dashboard tracks availability, wireless clients, and alerts delivered by email, Slack, Discord, Telegram, or ntfy. Switch faceplates, per-port client views, VLAN copy wizards, bulk SSID deployment, RF health charts, rogue AP detection, and a guest Wi-Fi captive portal wizard cover the wired and wireless side. A rule builder handles firewall and NAT, topology maps come from LLDP, CDP, and MNDP, and a built-in NetFlow collector attributes traffic to clients and applications. Firmware rolls out in canary waves that halt on failure, and every configuration snapshot supports diffs and one-click rollback. OIDC single sign-on, TOTP two-factor, role-based access, and scoped API tokens protect the console, while sites group devices per customer network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
neTV
neTV turns any Xtream Codes or M3U IPTV subscription into a clean, fast player that you host yourself and open from a browser, iPhone, iPad, Apple TV, Mac, or Chromecast. The EPG grid guide shows what is on now and next, and catchup lets you browse earlier listings, replay a program from the beginning, or start over a show already airing, with timeline seeking whenever your provider keeps an archive. Intelligent Handoff lets you switch off the living room TV mid-match and resume on your phone from the exact moment you stopped, because the server keeps the stream going until the program ends. Movies and series arrive with metadata, seasons, episodes, and resume points, while search accepts regular expressions and favorites support drag-and-drop ordering alongside playlists that you build on the web and see in every app. Smart passthrough remuxes h264 and AAC streams without re-encoding, and NVENC or VAAPI hardware transcoding serves low-latency HLS to clients that need it. Owners of an NVIDIA GPU can switch on real-time 4K AI upscaling that lifts 1080p channels above 70 frames per second on an RTX 5090. A separate gateway port exposes your live sources as an Xtream-compatible endpoint for other native players, with per-user source access and stream limits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
HomeGallery
HomeGallery turns the photo and video folders on your server into a mobile-friendly web gallery. Your files and folder structure stay exactly as they are. Point it at camera files, phone files, or offline drives, and previews and metadata are extracted once. Scroll one endless stream, newest first. Open any image for its file name, dimensions, capture date, source paths, camera settings, street address, tags, and detected objects. Swipe between photos, then pinch or double-tap to zoom. The Map view clusters photos by place, with counts. The plant button lists similar images, so one sunset finds every other sunset. Face search finds the same person in other photos. A search box accepts expressions like tags in (vacation, family), type:video year in [2015:2020] order by duration, or not exists(geo). In Edit mode, select many photos at once and type comma-separated tags; a minus prefix removes one. Videos are transcoded for playback. Renamed or moved files keep their previews. An archive disk can stay unplugged once indexing is done. Optional logins limit each user to a query filter. Install it as a PWA for a lightweight mobile app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Fava
If your books live in a plain-text Beancount ledger, Fava turns that file into a browsable dashboard of statements, charts, and a built-in editor. Income Statement, Balance Sheet, Trial Balance, Journal, Holdings, and Statistics reports render as tables and charts, with stacked or single bars, monthly breakdowns, and at-cost conversion. Three top-bar filters narrow every report. Match by date, account pattern, #tag, ^link, payee, metadata, or amount; spaces require all conditions, commas accept any. The Query page runs Beancount Query Language statements like bean-query. Two-column results become line or treemap charts, and every result exports to CSV, plus XLSX and ODS with the Excel extra. The browser editor autocompletes accounts, payees, and tags. Press n for a quick-add form that records a new transaction. Drag a receipt onto an account name to file it in that account's documents folder, or onto a Journal row to attach it to the transaction. Budget directives from daily to yearly show remaining amounts in charts and reports. Colored indicators flag passed or failed balance checks on opted-in accounts. Importers feed a review list; extensions add custom report pages. Gmail-style keyboard shortcuts speed up daily use. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
plMail
Gmail, Outlook, and every IMAP mailbox you own share one inbox, one search box, and one calendar in plMail, a mail client you host yourself. Accounts sit side by side with sending aliases, and new mail arrives on its own through IMAP IDLE, Gmail and Outlook push, and browser notifications. Credentials are encrypted before storage. Search understands from:, subject:, label:, has:, and before:, completes as you type, and highlights matched words. Filters are nested any, all, or none trees, and each shows how many real messages match before you save it. Drag several conversations at once onto folders, labels, or inbox tabs; a label adds itself without removing the mail from your inbox. A calendar sits beside the mail, with two-way sync for Google, Microsoft, and CalDAV. Move events on the week grid, answer invitations in place, and send share and booking links. An optional language model, pointed at your own Ollama server or any OpenAI-compatible endpoint, searches by meaning, drafts replies, summarizes threads, and sorts mail into tabs once you switch it on. Attach files from and save them to Drive, OneDrive, Dropbox, Nextcloud, Immich, and Paperless-ngx. Sign in through Authentik, Keycloak, or any OpenID Connect provider, and pick from 41 themes. Android and iOS apps connect to your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Deft
One self-hosted workspace holds your team's chat, tasks, notes, and calendar, and Deft lets AI agents work in it beside your people. People get real-time chat with spaces, direct messages, threads, mentions, reactions, files, and presence. Tasks open as Board, Table, Timeline, or Calendar views, with dependencies, subtasks, recurrence, and bulk actions. Notes, decisions, and channel memory become durable knowledge, with graph views and links back to the source conversation. Native calendar events sit beside read-only ICS subscriptions. Agent employees can join channels and receive task assignments. Tag the built-in assistant Defty to draft a task, answer a workspace question, or take a governed action, then review the proposal in an approval card before anything changes. Personal connections let Codex, Claude, ChatGPT, and other streamable HTTP MCP clients act as the signed-in user within revocable scopes. Approval tiers, trust levels, token scopes, revocation, activity history, and action receipts record who or what acted and what changed. OpenAI, Anthropic, OpenRouter, OpenAI-compatible endpoints, and local Ollama-style models are supported providers. Chat, tasks, notes, and calendars keep working with no AI key. Modules add company-specific records, relationships, and views, with a bundled Contacts module as the first example. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-only licensed.
Bex
To give engineering teams a Render-style workflow of connecting a repository and getting a live HTTPS URL on infrastructure they control, Bex builds and runs web services, private services, background workers, cron jobs, and static sites from Git or container images. Dockerfiles and native builds for Node.js, Python, Go, Ruby, Rust, and Elixir deploy from public or private GitHub repositories with push-to-deploy, health checks, pre-deploy commands, and manual or policy-driven autoscaling. Blueprints in render.yaml format describe multi-resource environments in one file, and a Render-compatible CLI and API let existing tooling carry over where supported. Deploy history with cancel and rollback, live log tailing with search and filters, CPU and memory charts marked with deploy events, and suspend, resume, restart, native SSH, and browser shell controls cover daily operations. Custom domains receive automatic TLS certificates, and environment variables and secret files save and deploy in one step. Managed PostgreSQL provides backups with point-in-time recovery, high availability, and read replicas, and managed Valkey-compatible Key Value adds persistence and backups. Workspaces, projects, and environments come with OpenFGA roles, OAuth 2.1, API keys, audit logs, and signed outbound webhooks. Coding agents operate the same control plane through a remote or stdio MCP server with OAuth consent, deploy-from-chat, managed sandboxes, and structured machine-readable status, since no action is dashboard-only. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Distr
Shipping commercial software to customer-managed infrastructure demands a reliable distribution hub, and Distr provides that control plane for vendors who sell into VPCs, on-prem data centers, and air-gapped networks. Vendors define Docker Compose, Docker Swarm, or Helm applications with versions and configuration templates, then roll releases out to every customer deployment from a single vendor portal. Prebuilt deployment controllers installed in customer environments apply updates and report status, container logs, live host metrics, and alerts back, so support teams can diagnose problems without touching anyone's infrastructure. Customers get a white-labeled portal with your branding, install instructions, registry credentials, version management, and customer-initiated support bundles. A built-in OCI registry distributes Docker images, Helm charts, Zarf packages, and other artifacts with per-customer tag access, pull-through caching, and download analytics showing which customer pulls which version. Entitlements control which application versions each customer may deploy, and Ed25519-signed JWT license keys let your own software verify usage limits offline, which keeps licensing working in air-gapped sites. An OpenTofu controller provisions and reconciles BYOC cloud infrastructure, while a REST API and SDK automate onboarding, releases, and entitlements from CI pipelines. Role-based access control manages permissions across vendor and customer organizations, while the Kubernetes compatibility matrix and vulnerability scanning help validate releases before they ship. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
DEEIX Chat
Organizations deploying multiple large language models across departments use DEEIX Chat as their centralized AI workspace for model routing, multimodal conversations, document retrieval, MCP tool execution, and usage governance. Administrators connect upstream channels across OpenAI, Anthropic, Google Gemini, xAI, and OpenRouter protocols while configuring route priorities, traffic weights, and automatic circuit breaking from a unified control plane. Team members switch models mid-conversation, branch message threads, adjust reasoning effort, and generate images or video without managing individual API keys, or optionally bring their own provider keys under admin policy rules. Uploaded PDFs, spreadsheets, and images undergo OCR and semantic chunking so users can attach personal or shared knowledge bases directly to chat sessions with traceable retrieval evidence. Interactive responses render live HTML, SVG, Mermaid diagrams, KaTeX math, and stateful parameter sliders inside a sandboxed preview pane alongside the conversation. Built-in support for Streamable HTTP Model Context Protocol servers lets users discover and invoke external tools with per-message execution limits and full call inspection. Integrated permission groups, OIDC single sign-on, TOTP two-factor authentication, token and per-call billing ledgers, and audit logs give operators complete visibility over usage and spend. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Traceway
Production debugging slows to a crawl when logs, distributed traces, metrics, and session replays live in four disconnected dashboards, which is why Traceway consolidates every OpenTelemetry signal into a single self-hosted observability platform. Point any standard OTLP exporter directly at the ingestion endpoints without maintaining an intermediary collector or installing proprietary vendor SDKs. When an unhandled exception fires in production, automatic SHA-256 stack trace fingerprinting groups duplicates into prioritized issues complete with source-mapped frames and attached browser or Flutter session replays showing exact user clicks before the crash. Clicking any structured log entry jumps straight to its corresponding distributed span waterfall so engineers can trace slow database queries or failing downstream HTTP calls across microservices. Route performance bottlenecks surface immediately through per-endpoint P50, P95, and P99 latency percentiles ranked by Apdex and a five-factor impact score. Teams shipping AI features can also inspect LLM token consumption, model costs, tool calls, and multi-turn conversations grouped by customer identifier. Built-in on-call rotation schedules, escalation policies, and multi-channel alerts via Slack, Telegram, Pushover, email, and webhooks ensure incidents reach the right responder with one-click acknowledgment links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.