Unpatched Linux servers expose production environments to critical vulnerabilities, and PatchMon eliminates that blind spot by centralizing package telemetry, security advisory tracking, and automated update orchestration across your entire fleet. Administrators can inspect pending updates across APT, DNF, YUM, APK, Pacman, Zypper, FreeBSD pkg, Windows Update, and winget from one unified queue without opening inbound firewall ports on monitored hosts. Before touching production workloads, operators run dry-run validations to preview exact package transactions, enforce multi-user approval workflows, and schedule rollouts during fixed maintenance windows. During execution, live agent output streams directly to the browser over WebSocket so engineers can watch progress in real time or halt a problematic upgrade mid-flight. Beyond package updates, the platform runs OpenSCAP CIS benchmark and Docker Bench security assessments, inventories running containers and outdated base images, and routes host-down or threshold alerts to Slack, Discord, Microsoft Teams, ntfy, or email. Built-in browser SSH and Apache Guacamole RDP terminals let teams troubleshoot machines directly through the outbound agent tunnel with role-based access control and OIDC single sign-on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of wrestling with raw command-line flags and YAML configuration files for every device on your self-hosted Headscale mesh VPN, Headplane gives you a Tailscale-style web administration console to manage machines, users, DNS records, and access policies from any browser. From the machines overview, network administrators can inspect connected nodes, view Tailnet IPv4 and IPv6 addresses, rename devices, reassign ownership across users, toggle key expiration, and approve advertised subnet routes or exit nodes in a couple of clicks. Built-in Access Control List (ACL) management lets you edit security policies, define user groups, assign node tags, and configure auto-approvers without manually SSHing into your control server. When someone needs immediate shell access to a remote Linux host on the mesh, the integrated WebSSH console opens an interactive terminal session right inside the browser tab over Tailscale SSH. You can also manage MagicDNS settings, configure split DNS nameservers, and add custom DNS records that automatically reload your Headscale instance. Multi-user administration supports OpenID Connect (OIDC) single sign-on with identity providers like Okta, Authentik, Authelia, and Google Workspace, alongside granular role assignments and pre-authentication key generation for unattended server enrollment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

To listen to your favorite YouTube channels, video playlists, and Bilibili creators during a commute without keeping a browser tab open, PigeonPod converts video subscriptions into private, standard podcast RSS feeds for any podcast player. Paste a channel URL, playlist link, or single video address to preview uploads and generate a protected feed for Apple Podcasts, Overcast, Pocket Casts, or AntennaPod. You can select audio-only or video output, customize bitrates and formats, and generate Podcasting 2.0 chapter markers for topic scrubbing. Scheduled background sync jobs fetch new releases automatically while on-demand history backfill queues older catalog episodes in bulk. Per-feed keyword rules, duration thresholds, and retention limits keep storage clean by filtering out shorts or marathon livestreams. Upload YouTube or Bilibili cookies for member-only streams, route traffic through custom proxies, and update the yt-dlp engine directly inside the web dashboard. A built-in web player, one-click public episode share pages, and OPML export let you stream in the browser or migrate subscriptions. Media files store on local disk or S3-compatible buckets such as Cloudflare R2 and MinIO, accompanied by YouTube API quota monitors and failure alerts. Multi-user role permissions support shared accounts across eight interface languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Database administrators and backend engineers managing production PostgreSQL, MySQL, MariaDB, MongoDB, and Redis instances use Velld to centralize scheduled backups, storage retention, and disaster recovery in a single self-hosted control plane. You can register multiple database connections across staging and production environments, test connectivity with one click, and route traffic through encrypted SSH bastion tunnels using password or private-key authentication to reach isolated private subnets. Flexible cron schedules and preset hourly, daily, weekly, or monthly intervals automate snapshot creation, while configurable retention policies purge expired archives from local volumes or S3-compatible object storage buckets after seven, fourteen, thirty, or ninety days. An integrated backup comparison tool renders split or unified line-by-line diffs between any two snapshots so you can inspect schema changes or data drift before triggering a guided database restore or downloading compressed dump files. The real-time monitoring dashboard tracks backup completion rates, total storage consumption, and execution histories alongside automated email and webhook alerts that notify your team immediately if a scheduled job fails. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Why split your entertainment life across half a dozen siloed apps when Floppy tracks every movie, television episode, anime season, book, comic, video game, board game, album, and podcast in one unified self-hosted library? A configurable home dashboard shows exactly how much runtime remains in your current shows alongside personalized recommendation rows driven by your genre, studio, cast, and tag history. Music and podcasts are first-class citizens backed by MusicBrainz discography metadata, track-level scoring, Last.fm scrobble polling, and live Pocket Casts episode synchronization. Collectors can catalog physical and digital media ownership down to the exact disc format, video resolution, HDR standard, audio codec, and bitrate, complete with automated Plex collection syncing. Live webhooks and scheduled jobs connect directly to Plex, Jellyfin, Emby, Audiobookshelf, Sonarr, Radarr, and Seerr so watches, listens, and library additions log themselves automatically. You can curate public or private lists with programmable smart-list rules, RSS and JSON feeds, Trakt watchlist imports, and barcode ISBN scanning for physical books. Recap-style statistics let you compare custom date ranges across reading streaks, pages read, listening hours, and top actors or authors, while a REST API and built-in Model Context Protocol server power custom automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

FileBrowser Quantum is an open-source, self-hosted web file manager that transforms any directory tree or mounted storage volume into a fast, searchable cloud drive accessible from any browser. You can mount multiple independent filesystem sources at once and apply custom include or exclude rules to keep sensitive system folders hidden from everyday browsing. A background indexing engine powers instant as-you-type search across millions of files, letting you filter results by file size, folder size, media type, or modification date in milliseconds. Rich media thumbnails render automatically for videos, office documents, audio album artwork, and interactive 3D models, while integrated OnlyOffice support lets you edit spreadsheets and word processing documents directly inside your browser tab. Built-in WebDAV server support allows desktop operating systems and mobile file apps to mount your remote directories as native network drives. Sharing files with external collaborators takes seconds through customizable public or private links with expiration timers, download limits, password protection, anonymous upload permissions, and custom branding themes. Administrators can authenticate users via OpenID Connect, LDAP, JSON Web Tokens, proxy headers, or local passwords with two-factor authentication, then enforce path-level read, write, and delete rules per user or group. Developers and automation engineers can generate long-lived API tokens and explore the interactive Swagger endpoint to script file transfers and directory provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When your bank balances, brokerage holdings, credit cards, loans, and crypto wallets sit scattered across a dozen institutional portals, Sure brings your entire financial life into one private, self-hosted wealth management workspace. You can track checking, savings, real estate, vehicles, and multi-currency investment portfolios while monitoring real-time net worth charts and thirty-day account sparklines. Automated account synchronization connects through Plaid, SimpleFIN, Enable Banking, Lunch Flow, SnapTrade, Questrade, and native Bitcoin, EVM, or Solana wallet integrations, alongside manual CSV, XLSX, and PDF statement imports. A built-in statement vault parses date ranges and opening or closing balances directly from uploaded PDF statements in seven languages to reconcile your ledger against bank records. Day-to-day transactions support nested subcategories, merchants, tags, receipt attachments, and automated categorization rules with regular expression matching. Monthly budgets let households run shared family budgets alongside individual member budgets while automatically excluding 401(k) and IRA retirement contributions from spending limits. Portfolio tracking pulls market prices from Yahoo Finance, Tiingo, Twelve Data, and Alpha Vantage, calculates or locks per-share cost basis, and labels buys, sells, and dividends. An optional AI assistant sidebar answers natural-language questions about your cash flow and spending habits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Before lifting a heavy four-unit storage server or rewiring a cramped network closet, you can map every unit of cabinet space in Rackula, an interactive drag-and-drop rack layout designer and capacity planner. Instead of staring at generic grey rectangles in a spreadsheet, you pull switches, routers, patch panels, UPS battery banks, and rackmount chassis from a hardware catalog populated with authentic front and rear faceplates from the NetBox device library. Equipment snaps cleanly to standard EIA-310 rack unit boundaries, while half-width gear and mini PCs nest inside one-unit carrier shelves and mounting brackets. Audiovisual technicians can group bayed cabinets side by side to plan amplifier racks, signal processor chains, and patch bays across multi-rack installations. Network engineers and data center operators can rearrange hardware with full undo and redo history, attach custom device graphics, and export crisp diagrams as PNG, SVG, or PDF files for runbooks and change control tickets. Sharing a proposed cabinet topology with a colleague in the field takes seconds using an encoded URL or a scannable QR code that opens on mobile browsers. Server-side persistence stores your rack definitions as portable YAML files and supports optional local accounts or OpenID Connect single sign-on for shared infrastructure teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Planning weekly dinners across a busy household becomes effortless with Norish, a real-time recipe manager, meal planner, and smart grocery list platform that captures dishes from any link, video, or cookbook photo. Families and roommates can paste a food blog URL, drop in a YouTube Short, Instagram Reel, or TikTok link, or snap up to ten photos of handwritten recipe cards to generate a clean, structured dish with automatic tags, cuisines, and allergen alerts. When you drag meals onto the shared household calendar or sync your schedule over CalDAV, every ingredient flows into a live grocery list that remembers which supermarket aisle or store each item belongs to and automatically excludes staples already sitting in your pantry inventory. Splitting up in the supermarket aisles works seamlessly because checked-off items disappear on your partner's phone screen the instant you tap them, even across fifteen supported interface languages. In the kitchen, step-by-step cooking mode keeps your screen awake, embeds countdown timers directly inside preparation steps, links fractional ingredient quantities to the exact step where they are used, and scales servings or swaps between metric and US measurements with a single tap. Automatic macro calculations powered by USDA FoodData Central and CIQUAL databases break down calories, protein, carbohydrates, and fat per serving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Reitti turns raw GPS coordinates from your phone and fitness trackers into an interactive daily timeline and private map that replaces Google Timeline and Life360 without sending your movement history to third-party clouds. Every coordinate you record is analyzed automatically to detect stationary visits, recognize significant places, and classify trips between walking, cycling, and driving with exact duration and distance metrics. Stream real-time updates from OwnTracks, GPSLogger, Overland, or Home Assistant, or upload historical archives from GPX files, GeoJSON, Google Takeout, and Google Timeline exports. Switching between a smartphone and a dedicated cycling computer never fragments your history. The visual workbench lets you stitch multi-device recordings across any time range, drag misplaced GPS points into position on the map, and delete signal outliers with a single click. Connect a self-hosted Immich server so geotagged photos appear directly alongside the routes and stops where you captured them. Turn memorable trips into narrative travel logs with customizable text, map, and photo blocks. Need to coordinate a meetup or share your arrival time? Share live positions with family members on the same server, federate across trusted instances, or send revocable magic links to friends without accounts. Customize your view with custom vector styles from MapTiler or Stadia Maps and explore movement statistics across top destinations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Stop losing money on out-of-pocket repairs for appliances and electronics that are still covered under manufacturer protection: Warracker gives households and organizations a centralized web platform to track product warranties, store purchase receipts, and manage active claims before coverage expires. You can log purchase dates, multi-part warranty durations in years, months, or days, lifetime coverage flags, vendor details, purchase prices, and multiple comma-separated serial numbers per item alongside product photos. When a coverage window approaches its end date, the platform dispatches automated reminders through email or more than 100 push notification services, including Discord, Slack, Telegram, Pushover, and ntfy. Receipts, invoices, and user manuals can be stored locally or routed directly into an existing Paperless-ngx archive with per-document storage selection and automatic tagging. A dedicated warranty claim tracker records claim submission dates, current statuses, and final resolutions across the entire repair lifecycle. Visual status dashboards chart active, expiring, and expired coverage alongside spending breakdowns across multiple currencies. Role-based multi-user accounts, OIDC single sign-on, persistent cross-device search filters, CSV bulk import and export, and localization across 20 languages make administration effortless. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

If cloud-dependent smart home hubs and YAML-heavy configuration files leave your household at the mercy of vendor outages and broken scripts, Gladys Assistant puts your entire home under clean, point-and-click local control. Zero YAML required. Pair thousands of lights, thermostats, smart plugs, locks, and sensors directly through native Zigbee2MQTT, Matter, Z-Wave, and MQTT support, or install hundreds of sandboxed community integrations for Philips Hue, Shelly, Sonos, TP-Link Tapo, Netatmo, and Reolink cameras in a single click. Visual scenes make automation effortless. Trigger multi-step routines from motion sensors, sunrise schedules, house presence, calendar events, or electricity tariff changes, and chain conditional actions with delays, HTTP webhooks, and Telegram alerts. Customizable room dashboards display live RTSP camera streams, climate charts, weather forecasts, and interactive dimmer controls. Built-in energy monitoring tracks real-time wattage, historical kWh consumption, and utility contract costs across every circuit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Instead of manually hunting for what to watch next after finishing a series on Plex, Jellyfin, or Emby, let SuggestArr turn your household's recent viewing history into automated media discovery and download requests. The platform analyzes recently watched movies, shows, and anime, queries TMDb or any OpenAI-compatible LLM (including Ollama, OpenRouter, and LiteLLM) for tailored recommendations with plain-language explanations, and dispatches requests straight to Seer, Jellyseerr, or Overseerr. Built-in AI Search lets users describe a mood or plot in natural language and request matching titles in a single click. Administrators can schedule recurring discovery jobs, import public watchlists from Trakt and MDBList, and enforce granular filters for minimum ratings, release years, genres, and regional streaming service availability so you never download content you already pay to stream. Smart request controls pause jobs when Seer queues are full, require optional human approval before submission, auto-decline stale requests, and clean up unwatched suggestions automatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Managing dozens of smart locks, dimmers, thermostats, and sensors across a Z-Wave mesh often leaves homeowners blind to routing hops, sleepy battery devices, and firmware bugs; Z-Wave JS UI solves this by delivering a comprehensive browser control panel and MQTT gateway for your USB or network Z-Wave controller. Provision new devices with SmartStart QR scanning or S2 authenticated inclusion, inspect every Command Class parameter, and push over-the-air manufacturer firmware updates straight to switches and sensors. Interactive network topology graphs map live routing neighbors, link quality, and background RSSI signal strength, while built-in health checks and an integrated Zniffer packet analyzer pinpoint RF interference before automations fail. Operators can configure direct node-to-node association groups and multicast broadcast groups so wall switches trigger lights even when the central hub is offline. Scheduled Non-Volatile Memory controller backups and pre-inclusion restore points protect your mesh against hardware failure, and the configurable MQTT Discovery and WebSocket server bridges every entity seamlessly into Home Assistant, OpenHAB, Domoticz, Jeedom, and ioBroker. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When vacations, shared apartments, and group events turn into a tangle of receipts and awkward IOUs, I Hate Money restores harmony with a dead-simple shared budget manager that requires zero user accounts for invited participants. Organizers create a project protected by a private code and share a single link with friends, roommates, or travel companions, allowing everyone to log expenses immediately from any desktop or mobile browser. Each bill entry records who paid, when the purchase happened, what it covered, and which members benefited, supporting both equal splits and custom weighted shares for participants who stayed longer or consumed more. Built-in multi-currency conversion lets international travelers record bills in foreign currencies and convert them automatically into the project default currency. Newly added expense filtering and direct reimbursement bill creation on the Settle screen calculate the minimum number of transfers required to square every balance, while Monthly spending statistics, JSON or CSV exports, and a REST API keep group finances transparent. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Own every visitor metric without cookies, consent banners, or external database clusters through Vince, a self-hosted web analytics platform engineered for fast multi-site traffic intelligence. Zero cookies. Sub-kilobyte tracking script. Unlimited domains and events. You can point existing Plausible Analytics tracker snippets directly at your instance and immediately begin recording unique visitors, total sessions, pageviews, views per visit, bounce rates, and visit durations across all of your properties. Interactive dashboards break down incoming traffic by referral sources, UTM campaign parameters, entry and exit pages, countries, regions, cities, device categories, browsers, and operating systems. Behavior analytics go beyond simple pageviews by capturing outbound link clicks, file downloads, 404 error pages, pageview goals, and custom event conversions with custom properties. Period-over-period comparisons let you benchmark current traffic and conversion rates against previous date ranges or custom calendar intervals with a single click. Dashboards stay private by default, but you can open public stats views or generate unique, optionally password-protected shared links for clients and stakeholders, as well as query metrics programmatically over the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Archiving YouTube channels and playlists into a local media server becomes effortless with Pinchflat, a self-hosted media manager that automates downloading, naming, and organizing online video and audio libraries on disk. Instead of manually copying links into command-line downloaders, you define reusable Media Profiles with presets tailored for Plex, Jellyfin, Kodi, or raw archival storage, and then attach any number of YouTube channels or playlists as monitored sources. Fast Indexing polls RSS feeds or the YouTube API to detect newly published uploads within minutes while falling back to scheduled full scans so back-catalog videos are never missed. Granular source rules let you include or exclude YouTube Shorts and livestreams, filter titles by keyword patterns, enforce earliest upload cutoff dates, and set automatic retention windows that prune older files after a configured number of days. Built-in SponsorBlock integration marks or strips sponsor segments and embeds chapters alongside thumbnails, subtitles, and NFO metadata files so episodes appear cleanly inside your home theater library. You can also schedule Delayed Redownloads a few days after initial publication to capture higher-bitrate transcodes or crowd-sourced SponsorBlock tags, supply browser cookies for private playlists, and subscribe to any archived source in mobile podcast players through generated RSS feeds. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Does your container fleet silently fall behind on upstream patches until a critical vulnerability advisory forces an emergency audit? What's Up Docker continuously watches standalone Docker daemons, Compose stacks, Swarm services, Kubernetes workloads, and Nomad jobs to detect new image tags across public and private registries before sending alerts or rolling out updates automatically. Watchers connect over local sockets, TLS-secured TCP endpoints, kubeconfigs, or Nomad APIs to inventory active workloads without invasive sidecars. From there, registry connectors authenticate against Docker Hub, GitHub Container Registry, AWS ECR, Google Artifact Registry, Azure Container Registry, Quay, GitLab, Gitea, Forgejo, and self-hosted OCI registries to compare digests and tags. Flexible filtering rules let you restrict alerts to major, minor, or patch semantic version increments, match custom regular expressions, or pin specific tag patterns per container label. Once an eligible release appears, over thirty built-in triggers can dispatch notifications to Discord, Slack, Telegram, Matrix, Mattermost, Gotify, Ntfy, Pushover, Apprise, PagerDuty, or SMTP, publish events to MQTT, Kafka, RabbitMQ, or NATS, or recreate containers directly on demand. A responsive web dashboard and REST API provide manual update controls, OpenID Connect single sign-on with role-based access control, and Prometheus metrics for Grafana observability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.