Security scanners each report in their own format, and DefectDojo is the self-hosted platform that imports those reports and keeps a single, triaged list of findings. Reports in mixed formats? More than 350 built-in parsers read output from Burp Suite, ZAP, Trivy, Tenable Nessus, SonarQube, Snyk, and Checkmarx, and Generic Findings Import covers tools without a parser through CSV or JSON files. The same scan every night? Reimport adds new findings, can close the ones that vanished, and reopens the ones that return, while deduplication ties repeat detections inside an asset to their original. Decisions already made? False positive, out of scope, and risk accepted statuses survive reimport, so nobody triages the same noise twice. A deadline on every fix? Severity-based SLA countdowns flag breaches and can notify the users assigned to each asset, and full risk acceptances carry notes, files, and an expiry date that returns findings to active by default. Many teams, many applications? Organizations, assets, engagements, and tests mirror how security work is organized, with permissions that cascade downward. Pipelines that should report themselves? The REST API and CI/CD engagements import results automatically, and findings push to Jira as tickets. Someone outside security wants a summary? Dashboards track metrics, and a widget-based report builder produces HTML reports that print to PDF. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Consolidate fragmented collections of digital novels, graphic novels, manga, and audiobooks into Grimmory, an open-source media library server that combines automated file sorting with rich in-browser reading environments. The server indexes diverse media formats including EPUB, MOBI, AZW3, FB2, PDF, CBZ, CBR, CB7, M4B, and MP3 files across isolated storage directories. Readers explore literature through specialized browser viewports that provide customizable typography, CFI highlight annotations, two-page comic spreads with right-to-left manga modes, and chapter-based audiobook playback with sleep timers. Automated BookDrop watch folders ingest incoming files, retrieving book covers, author biographies, and community ratings from Google Books, Open Library, and Amazon APIs. Dynamic Magic Shelves organize catalogs automatically using nested boolean rule trees that filter books by page counts, genres, release dates, or narrator identities without server reload overhead. External e-readers access media catalogs through standard OPDS feeds or native Kobo and KOReader synchronization endpoints that match documents by binary content hashes. Built-in email delivery sends formatted books directly to Kindle devices with a single click, while OpenID Connect authentication enforces granular multi-user library permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

Real-time alerts from your own infrastructure to your phone, with no Firebase, Pushover, or third-party push service in the path: Gotify is a simple, self-hosted notification server written in Go. The model is deliberately minimal: senders push messages with a single HTTP POST to the REST API, receivers subscribe over a WebSocket stream, and a clean React web UI manages the pieces. Senders are namespaced as "applications," each with its own token, so your backup script, Uptime Kuma, CI pipeline, and cron jobs each get an identity, an icon, and independently revocable credentials - centralized alerting from many services with per-source management. Messages carry a title, body, and priority level that maps to notification importance on the client. The official Android app (on both F-Droid and Google Play, notable for working entirely without Google Play Services) shows push notifications for new messages; the web UI itself supports Web Push in the browser; and gotify/cli pushes messages from shell scripts with one command. A server-side plugin system adds custom behavior, and the whole thing runs as a single small binary with SQLite by default - near-zero resource footprint. Because dozens of tools (and Apprise) speak Gotify natively, it slots in as the notification hub for an entire homelab or ops stack.

Capture fleeting thoughts as interactive flash cards and transform unorganized notes into an AI-searchable personal brain with Blinko. Users can jot down rapid notes, format rich markdown documents with code snippets and task lists, and attach multimedia files through a responsive web interface. An integrated retrieval-augmented generation engine indexes every note into vector embeddings, allowing users to query their entire personal archive using conversational natural language. You can connect local Ollama models or remote providers such as OpenAI, DeepSeek, Anthropic, and Grok to summarize lengthy entries and suggest hierarchical classification tags automatically. The interactive daily review interface presents random cards to help review, organize, or archive older insights before they are forgotten. Built-in tools include an integrated global music player for focused writing sessions, custom RSS feed ingestion, and password-protected note sharing with configurable expiration dates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Grocy is a household management system, bringing ERP-grade inventory tracking to kitchens, pantries, and homes worldwide. The stock management system tracks products with expiration dates, best-before dates, and opened tracking, while barcode scanning via USB readers or device cameras with Open Food Facts product lookup enables rapid item entry. Minimum stock amounts trigger automatic shopping list entries so frequently used products never run out, and multiple shopping lists can be maintained and shared across household members. Recipe management links ingredients directly to stock inventory, showing at-a-glance fulfillment status and a Due Score that highlights recipes best suited for consuming items approaching expiration. The meal planner organizes daily meals across customizable time periods and adds all missing ingredients to shopping lists with one click. Chore tracking schedules recurring household tasks with assignment to specific members, due date tracking, and completion history logging. Battery management monitors charge cycles for household devices with configurable reminder intervals. Custom fields and userfields extend any entity with additional data, while feature flags disable unused modules to simplify the interface. The RESTful API with integrated Swagger UI at the /api endpoint exposes every operation the web frontend uses, enabling third-party integrations with home automation systems. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Known as the open-source Mixpanel alternative that respects user privacy, OpenPanel delivers a unified web and product analytics platform combining Mixpanel's behavioral analysis with the simplicity of Plausible and full data ownership through self-hosting. Cookieless tracking eliminates consent banners entirely while still capturing events, page views, sessions, user journeys, funnels, retention cohorts, and custom properties with full GDPR compliance by design. The 2.3 KB async script loads without blocking page rendering, and 16 official SDKs cover Next.js, React, Vue, Astro, Remix, Nuxt, Angular, Svelte, React Native, Swift, Kotlin, Python, PHP, Laravel, Express, and REST API for custom integrations. Real-time dashboards display live visitor counts, active sessions, and event streams as they happen. Custom chart builders create tailored visualizations from any tracked event with breakdowns by property, time period, and user segment. Session replay reconstructs individual user journeys showing every page visited, event triggered, and interaction recorded. Funnel analysis identifies conversion drop-offs with step-by-step breakdown and property filtering. Retention analysis measures how often users return with customizable time windows and cohort comparisons. A/B testing and variant tracking enable experiment measurement directly within the platform. Event notifications alert when specific events occur or thresholds are crossed. The self-hosted deployment uses Docker Compose with ClickHouse for high-speed analytical queries, PostgreSQL for metadata, and Redis for real-time processing — deployable on any VPS or Kubernetes cluster. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 6,600+ GitHub stars and created by vas3k — one of the indie developer community's most recognized builders — TaxHacker is the self-hosted AI accounting application that turns receipt chaos into structured financial intelligence without surrendering a single document to third-party cloud services. Upload photos of receipts, invoices, or PDF bank statements, and the LLM pipeline automatically extracts dates, merchants, amounts, line items, tax breakdowns, and vendor information into an Excel-like structured database with custom fields you define through your own AI prompts. Currency handling covers 170+ fiat currencies and 14 cryptocurrencies (BTC, ETH, LTC, and more) with automatic conversion using historical exchange rates from the actual transaction date — critical for international freelancers filing in one reporting currency. The AI layer supports OpenAI (GPT-4o, GPT-4.1-mini), Google Gemini, Mistral, or fully local models via Ollama, LM Studio, vLLM, and LocalAI through OpenAI-compatible endpoints for complete air-gapped deployments. Features include multi-project workspace isolation, custom categories with AI-driven auto-classification, bulk document upload with batch processing, email server monitoring for automated attachment ingestion, flexible CSV export with attached documents, and comprehensive tax report generation. The tech stack runs Next.js 15+ for the frontend and tRPC API, Prisma ORM for database models and migrations, PostgreSQL 17+ for persistence, and Ghostscript plus GraphicsMagick for PDF rendering. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Hi.Events is an alternative to Eventbrite, Tickettailor, and Dice.fm, eliminating per-ticket platform fees entirely when self-hosted. Event organizers create fully brandable event pages supporting paid, free, donation, and tiered ticket types with recurring and multi-date scheduling, sold-out waitlists that automatically release tickets when spots open, and product add-ons with category organization. Stripe Connect integration processes payments directly to the organizer's bank account with instant payouts, while offline payment methods support cash and invoice scenarios. Promo codes offer fixed or percentage discounts with usage limits, expiry dates, and promo-gated hidden tickets for VIP access. QR code check-in enables fast door scanning with multiple check-in lists, scan logs, and real-time attendance tracking across entry points. Custom checkout questions collect attendee information beyond standard fields, with advanced search, filtering, CSV and XLSX export, full and partial refunds, and bulk attendee messaging. The analytics dashboard tracks daily sales, revenue, tax breakdowns, product performance, and promo code usage with exportable reports, while affiliate tracking assigns custom codes to promoters with tracked sales data. Multi-user roles control organizer permissions, automatic invoicing generates receipts, and the REST API ships with interactive OpenAPI documentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Garden birdsong as a framed collage: Fugleramme draws the species heard right now as hand-cut illustrations from 1800s natural-history plates, for an e-ink panel, a TV, or any browser. The birds come from BirdNET-Go, which can listen on the same machine or elsewhere on the network, so the microphone can stay near the birds while the frame hangs in the living room. Nearly 1200 cut-outs cover over 650 species, none of them AI-generated, and each bird is sized by its real body mass, larger ones toward the centre. The page redraws only when the birds change. Heard nothing in the lookback window? A bare perch appears. Collage mode shows everything heard within a window from 15 minutes to all time, latest-bird mode changes only when a different species calls, and newest-arrival mode holds until a new species turns up. An optional spotlight puts the latest bird in the middle. Spiral or voids layouts rearrange the sheet, and a species limit keeps the most heard or the rarest. Names sit beside the birds or in a poster-style numbered key, in two languages at once from over 40, and a star flags a bird the station has never heard before for its first 24 hours. A web admin page covers display, detector address, and optional password sign-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Thirteen-plus LLM providers, one unified client: NextChat (formerly ChatGPT-Next-Web) is an open-source AI chat interface built on Next.js that spans OpenAI GPT-4, Anthropic Claude, Google Gemini, DeepSeek, Groq, Azure endpoints, and self-hosted backends like Ollama, LocalAI, and RWKV-Runner. Its defining trait is minimalism - the first screen loads in about 100 KB, the desktop client is roughly 5 MB, and there is no database or user system to operate; chat history lives locally in the browser with optional WebDAV or UpStash Redis sync. The Mask system saves reusable prompt-template personas you can share and debug, long conversations auto-compress to fit context windows, and Markdown rendering covers LaTeX, Mermaid diagrams, and code highlighting with streaming responses. Plugins add web search and calculators, MCP support enables external tool calling, and Artifacts previews generated content in a separate pane. Ships as a web app, Docker image, and Tauri desktop builds for Windows, macOS, and Linux, translated into 20+ languages. MIT-licensed.

With over 21,000 GitHub stars and six years of steady development through version 3.1.0, Neko transforms any Docker container into a fully interactive browser or desktop environment streamed to web browsers via WebRTC with sub-300-millisecond glass-to-glass latency. The Go backend captures X server display frames using the Pion WebRTC library while the Vue.js frontend renders the remote session with native audio synchronization, delivering a significantly smoother experience than Apache Guacamole or noVNC which rely on image-over-WebSocket approaches. Multiple users simultaneously view and collaboratively control the same session with real-time input synchronization and host-managed control passing between participants. Pre-built Docker images cover Firefox, Chromium, Google Chrome, Tor Browser, Brave, Vivaldi, and Microsoft Edge alongside full desktop environments including XFCE and KDE for running any Linux application. Neko Rooms provides multi-tenant deployment with a REST API for programmatic room provisioning, while Neko Apps extends the platform with additional containerized applications beyond browsers. Sessions persist on the server independently of client connections — close your laptop, reconnect from your phone, and resume exactly where you left off. Optional VPN and Tor integration routes traffic through encrypted tunnels for privacy-sensitive browsing. RTMP broadcasting streams sessions to external platforms. The embeddable client supports iframe integration for custom portals and applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Filestash puts a Dropbox-style web interface in front of the SFTP servers, S3 buckets, SMB shares, and WebDAV storage you already run, so no file has to move. Administrators enable each connector, including FTP, NFS, Git, Dropbox, Google Drive, Storj, IPFS, and Backblaze B2, from one admin console. Colleagues browse, rename, move, and upload in a single folder view, with resumable uploads for big transfers. Thumbnails cover JPEG, PNG, WebP, TIFF, HEIF, and RAW photos. Images open with an EXIF info panel, and PDFs, audio, video, and EPUB ebooks open right in the browser. A CodeMirror editor handles text and code, and HLS transcoding streams video on demand. Outside guests get a shared link instead of credentials, with an optional password, an expiry date, and read, write, or upload-only rights. Limit a link to one email address or a whole domain, or mount it as a network drive. A workflow engine chains emails and HTTP calls after file events, webhooks, or schedules. Flip one admin setting and Claude, ChatGPT, and Mistral Le Chat can use the connected storage as MCP tools. Downloadable file apps add Office documents, 3D models, and GIS maps. Runtime plugins are zip files dropped into the plugins folder. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When a query crosses its threshold, Nightingale, a self-hosted alerting engine, decides who hears about it and how, without moving data out of the stores you already run. Rules use PromQL, log queries, or SQL against Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse, MySQL, or PostgreSQL, graded S1, S2, or S3 with a for-duration that absorbs brief spikes. Existing Prometheus alert rules import from YAML. Business groups give each team its own rules and dashboards, and sign-in works through OIDC, OAuth2, LDAP, or CAS. Once a rule fires, mute rules silence the noise, subscriptions add recipients, and event pipelines rewrite labels or route conditionally. Delivery reaches Slack, PagerDuty, Discord, Telegram, Jira, email, DingTalk, Feishu, WeCom, SMS, and voice calls, plus HTTP webhooks and scripts for anything else. Evaluation records, active and historical events, and notification results show what happened at each step. If an alert misbehaves, the built-in AI agent explains why it fired or never arrived, and it drafts rules, dashboards, and mutes from plain-language requests. Claude Code, Cursor, and other MCP clients can query alerts and manage alerting through /mcp, read-only by default and bound by the caller's own permissions. At remote sites, n9e-edge keeps evaluating and notifying when the link to the center drops. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Google Analytics without the cookie banner or the maze of menus: Rybbit puts web and product analytics for every site you run on one readable dashboard, hosted on your own server. Pageviews, sessions, unique users, bounce rate, session duration, traffic sources, campaigns, devices, and countries update in real time beside a live visitor count. Session replay lets you watch the visits behind the numbers, and user profiles tie identified visitors to their sessions and events. Funnels pinpoint where conversions leak, journeys chart the paths people take through a site, retention reports show who comes back, and goals track conversions from page visits, custom events, and autocaptured clicks. Custom events carry JSON properties, filters slice every report across more than 15 dimensions, saved segments reapply them in one click, and location tracking drills from country to region to city on interactive maps, with optional 3D globe views through a Mapbox token. Error tracking connects JavaScript failures to the affected sessions, so a spike in errors leads straight to the visits that explain it. One install serves unlimited sites and organizations with role-based access, public dashboards share a site's stats through a link, and a tracking script of about 11 KB compressed collects data with no cookies and no consent banner. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Processing billions of operations per second across companies like Twitter, GitHub, Snapchat, and Stack Overflow, Redis is the world's fastest and most widely deployed in-memory data store. Redis 8 unifies previously separate modules into a single distribution: RediSearch for full-text indexing with BM25 scoring and vector similarity search via HNSW and FLAT algorithms, RedisJSON for native JSON document storage with JSONPath queries, RedisTimeSeries for timestamped data with configurable downsampling compaction rules, and RedisBloom for probabilistic data structures including Bloom filters, cuckoo filters, count-min sketches, top-k, and t-digest. The core engine provides strings, lists, sets, sorted sets, hashes, streams, HyperLogLog, bitmaps, bitfields, geospatial indexes, and the new array data structure introduced in Redis 8.8. Pub/Sub delivers lightweight real-time messaging between publishers and subscribers, while Streams provide an append-only log with consumer groups for event sourcing and complex consumption patterns. Redis Cluster distributes data across nodes with automatic sharding using 16,384 hash slots, and Sentinel provides high availability with automatic failover monitoring. Lua scripting and Redis Functions enable server-side computation, and ACL-based security provides granular per-command, per-key access control. Official clients exist for Python, Node.js, Java, Go, .NET, Rust, and PHP. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

With over 13,000 GitHub stars and active monthly releases, Mailcow delivers a production-ready mail server infrastructure through Docker Compose orchestration of twelve integrated containers. The stack pairs Postfix as the MTA handling SMTP traffic with Dovecot for IMAP and POP3 retrieval featuring the Flatcurve full-text search engine, while Rspamd provides machine-learning-powered spam filtering with Bayesian classification, DKIM signing, and ARC support. ClamAV scans attachments for malware including Office document macro analysis via Olefy, and SOGo serves as a responsive webmail client with CalDAV, CardDAV, and Microsoft ActiveSync synchronization. The admin panel manages multiple domains, per-user spam score thresholds, quarantine review, black and whitelists, temporary spam aliases, mailbox quotas, and TLS enforcement policies for both inbound and outbound messages. Security features include two-factor authentication via TOTP, WebAuthn, and Yubikey OTP, a Fail2ban-like Netfilter integration for brute-force protection, and automatic SPF, DKIM, and DMARC configuration. The ACME container handles Let's Encrypt certificate generation with DNS-01 challenge support, while Postfix TLS-Pol provides MTA-STS and DANE/TLSA resolution for encrypted transport. Built-in imapsync enables periodic migration from remote mailboxes, and the REST API allows programmatic management of all server resources. MariaDB stores user data, Redis caches configuration and sessions, and Unbound provides local DNSSEC-validating DNS resolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Logging every drive, charge, and idle stretch of a Tesla to a database you own, TeslaMate shows where the battery went, including degradation, vampire drain, and charging cost. Battery health comes first: the dashboard estimates usable capacity, range lost, and degradation against mileage. Idle losses come next, with Vampire Drain listing how much charge disappears during every idle period and a States view recording every online, asleep, and offline stretch. The car is left alone to fall asleep, so logging adds no extra vampire drain. Charging sessions show curves, energy added and used, efficiency, and cost, using per-location prices attached to geo-fences drawn on a map. Each drive records second-by-second speed, power, elevation, and temperature, plotted on a route map beside tire pressure and consumption charts. Trip, Drives, Efficiency, Drive Stats, Mileage, Updates, Statistics, and a lifetime driving map fill in the rest. Live vehicle data goes out over MQTT to Home Assistant, Node-RED, and Telegram, and old history imports from TeslaFi or tesla-apiscraper. Several vehicles on one Tesla account work together, addresses are looked up automatically, and the web interface offers light, dark, or system themes in 19 languages. Sign-in uses Tesla access and refresh tokens that TeslaMate encrypts with a key you set. It works best on an always-on server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GLPI combines helpdesk ticketing, hardware inventory, license compliance, CMDB, and project management in a single PHP application with over 6,200 GitHub stars and 500,000+ Docker pulls, offering a unified ITSM platform that replaces ServiceNow, Freshservice, and ManageEngine without per-agent pricing. The ITIL-aligned service desk handles incidents, problems, changes, and service requests with configurable SLA management, approval workflows, satisfaction surveys, and business rules that automate ticket routing, escalation, and categorization. Native dynamic inventory through the GLPI Agent discovers Windows, Linux, and macOS endpoints with deep hardware profiling, while network discovery scans switches, printers, and infrastructure devices automatically. Software and license management tracks per-user and per-core license allocations with compliance reporting, expiration alerts, and financial cost tracking across the asset lifecycle from purchase through depreciation to disposal. Data center infrastructure management provides rack visualization with U-level positioning, PDU tracking, and connection mapping. The integrated forms editor builds custom request portals for end-users, while the self-service portal lets users submit tickets, browse the service catalog, and reserve assets. Webhooks trigger external HTTP calls on events, and the High-Level REST API v2 exposes every resource for automation. A plugin marketplace offers 90+ extensions for monitoring integration, advanced reporting, and authentication. Deploy via Docker with the glpi/glpi image alongside MySQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.