Xianyu SaaS runs all of your Xianyu (Goofish) shops from one self-hosted console, answering buyers with AI, delivering digital goods the moment orders verify, and keeping every store isolated in its own process. Add each shop by scanning a QR code in the Xianyu app, then switch between stores from one header while the overview tracks messages, replies, delivery results, orders, and pending tasks. The AI customer service center lets you pick a service persona, write shop-wide reply requirements in plain language, and maintain a separate knowledge entry for every product, covering audience, specifications, usage, delivery notes, and after-sales wording. Keyword rules answer the repetitive questions first, with product-specific rules outranking store-wide ones, and anything unmatched falls through to the AI with product knowledge and chat history in context. When a buyer pays, the system re-checks the platform order before delivering, drawing card keys one to fifty at a time from named pools, sending netdisk resources, or posting fixed text instructions, with a five-minute sweep catching orders missed while a shop was offline. A conversation workbench lets you search chats, take over from the AI with one click, send up to eight queued images, and jump from any order straight into the buyer's thread. A built-in operations agent manages a shop through chat, updating product knowledge, toggling reply rules, or binding delivery stock on request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

DispatchMail is an SuperHuman alternative and delivers a self-hosted AI email assistant that processes your Gmail inbox through configurable OpenAI prompts without sending data to third-party cloud services beyond the LLM API itself. The Flask backend connects to Gmail via IMAP, retrieves new messages according to your schedule, and routes them through customizable whitelist rules based on sender address, subject keywords, or natural language descriptions before AI processing begins. Two distinct prompt configurations control behavior — the Reading Prompt instructs how the AI should analyze and classify incoming messages, while the Draft Prompt defines how responses should be composed, letting you maintain consistent tone and policy across all automated replies. Whitelist filtering ensures the AI only processes messages you explicitly authorize, preventing unnecessary API costs and keeping sensitive emails out of the LLM pipeline entirely. The React web interface provides inbox management with message previews, AI-generated summaries, draft editing with human-in-the-loop approval before sending, and configuration panels for prompts and rules. Automatic labeling and archival organize processed messages into categories without manual intervention. The sender research feature uses LLM-powered deep analysis to build background profiles of email contacts. All email content, credentials, and processing results persist in a local SQLite database with zero cloud storage dependencies. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Mayan EDMS stores, classifies, and retrieves millions of documents with automatic OCR, workflow automation, and audit-ready access controls that organizations have relied on for over a decade. Tesseract integration extracts searchable text from scanned PDFs and images in over 100 languages, transforming paper archives into instantly queryable digital collections without manual data entry. The workflow engine routes documents through approval chains using configurable state machines that trigger notifications, enforce retention policies, and maintain complete audit trails for regulatory compliance. Version tracking preserves every revision with full diff capabilities, while GnuPG digital signatures provide cryptographic proof of authenticity and tamper detection for sensitive records. Role-based permissions combined with object-level ACLs and LDAP integration ensure documents remain visible only to authorized users, down to individual file granularity. Full-text search powered by Whoosh or ElasticSearch handles advanced queries across massive document stores with faceted filtering and relevance ranking. The Django REST Framework API enables programmatic upload, metadata extraction, and workflow triggering from external systems. Beyond simple folder hierarchies, metadata schemas, document types, tags, and cabinet structures provide multi-dimensional classification tailored to how your organization actually works. Background processing through Celery handles OCR, conversion, and preview generation asynchronously, keeping the web interface responsive under heavy ingest loads.

Notes are personal, and Plainpad keeps them that way by running entirely on your own server instead of a vendor cloud. Class notes, trip plans, lyrics, and side-project ideas sit in one fast list that searches instantly and opens in any modern browser, adapting to phones, tablets, and desktops. Added to a home screen it launches like an app, and offline editing keeps writing possible when the connection drops. Turning on encryption stores titles and content encrypted at rest, so even database access does not expose what you wrote. One installation supports unlimited accounts with administrator and user roles, and every person keeps a private notebook no one else can read. There are no note limits, no device limits, no ads, and no tracking of any kind. Moving in is scripted through the built-in REST API, which can import collections from files and other note services into the right accounts. The stack asks only for PHP and MySQL, or a single Docker Compose command, and a sample data seeder can populate a fresh install with realistic study notes for evaluation. Simplicity is the design goal: the interface stays quiet, loads quickly, and leaves the words in front. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL 3.0 licensed.

Imagor Studio is a photo workspace where browsing a huge library and editing what you find happen in the same place, and the originals never get touched. The gallery scrolls virtually through thousands of images with no indexing wait, while drag-and-drop moves files between folders and multi-select handles bulk work. Open any image and the editor lets you stack layers: other images as overlays or watermarks, text layers you can style inline, and solid color layers with blend modes and opacity. Adjust color, apply effects, and crop with a live preview, then copy the generated transformation URL and use that rendition anywhere without exporting a file. A look you build once can be saved as a template in portable JSON and applied across the whole library, so a watermark, a resize, and a color grade become one reusable recipe. You can also start from a blank canvas at any dimensions and compose from scratch. Storage stays yours throughout: point it at a local folder, S3, MinIO, or Cloudflare R2 and manage the same library the same way. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A self-hosted front door for apps that live on home labs, office LANs, and private clusters, Wiredoor publishes them to the internet without opening a single inbound port on the private side. The Wiredoor CLI on each remote machine dials out to the server over an encrypted WireGuard tunnel. Web apps and APIs are routed by domain and path, WebSocket traffic included, while TCP and UDP services such as SSH or Redis get a public port of their own. Public domains receive Let's Encrypt certificates, internal names fall back to self-signed ones, and Cloudflare or GoDaddy credentials let the server create DNS records itself. Any web route can demand OAuth2 sign-in with an email allow list and a few open paths, and every protocol accepts IP allow lists. Gateway nodes stretch one tunnel across a Docker network, Kubernetes cluster, or private subnet, so a single link serves many backends. Services can be switched off or given an expiry such as 30 minutes, 2 hours, or 1 day. The dashboard shows which nodes are connected and whether their services are enabled, while the CLI creates, enables, and disables services from a terminal. Optional Prometheus and Grafana views chart traffic and tunnel peers, and CrowdSec can block abusive addresses. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

For avid readers who want to catalog their home bookshelves and track annual reading progress without handing personal habits to commercial social networks, BookLogr delivers a self-hosted personal library and reading tracker that replaces Goodreads and The StoryGraph. Searching by title, ISBN-10, or ISBN-13 pulls book covers, author names, page counts, and descriptions directly from OpenLibrary, while manual entry and user-defined custom fields let you record text, numbers, dates, selections, or boolean attributes for rare and indie editions. Configurable library tabs organize titles across Reading, To Be Read, Already Read, Did Not Finish, and All views with instant author filtering. As you read, you can update your current page number or completion percentage, log start and finish dates across multiple re-reads, and rate completed books on a granular 0.5 to 5.0 star scale. Readers can capture page-linked notes and favorite quotes, keeping reflections private or publishing them to a dedicated Notes and Quotes feed on a shareable public profile. Automated Mastodon integration posts reading milestones to the fediverse, while OpenID Connect single sign-on and single-user mode adapt the workspace for households or solo collectors. Built-in Goodreads CSV import and one-click exports to CSV, JSON, and HTML guarantee complete data portability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Cortex Hub gives every AI coding agent your team runs a shared brain, so what one agent learns in a repository is still there when the next agent, or the next person, opens it. Starting a session recalls the team knowledge and your own memory for that project, shows who else is editing, and picks up any task waiting for you. Agents search code by meaning and structure rather than text strings, tracing symbols, callers, and the blast radius of a change before touching it. Findings, file risks, and hard-won lessons are stored against the files they belong to, so they resurface exactly where they matter. Ending a session runs build, type, and lint checks, reports the result, and leaves a summary the next session starts from. A conductor can hand tasks to worker agents on other machines and track them centrally, while the dashboard shows sessions, keys, usage, and token savings across the team. Embeddings run locally by default, so your code memory never leaves the building just to be searchable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your internal services deserve certificates your browsers actually trust, without a spreadsheet tracking when each one expires. mkcertWeb wraps the mkcert tool in a web interface where you generate certificates for any mix of hostnames, wildcards, and IP addresses, then download them as PEM, CRT, or PKCS#12 bundles for servers and client authentication. The certificate list groups everything by state, needs attention, healthy, read-only, or archived, showing days remaining, subject alternative names, and SHA-256 fingerprints at a glance. You can upload existing certificate and key files for viewing, attach a free-text note to each certificate, and archive or restore entries without ever overwriting a certificate of the same name. The root CA page offers downloads and install instructions for macOS, Linux, and Windows, and can generate a fresh CA for a new deployment. Devices enroll through the built-in SCEP server using one-time challenge passwords and templates, with an optional enterprise CA signing manual enrollments. A scheduled monitor checks expiry daily and sends alerts through SMTP email, ntfy, or an HTTP webhook, with test buttons for every channel. Settings save from the browser with secret masking, sign-in supports passwords or OpenID Connect single sign-on, and light and dark themes work down to phone width. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

HomeGenie runs your whole smart home locally, controlling lights, sensors, cameras, and automations from hardware in your own house, so everything keeps obeying you even with the internet cable pulled. The dashboard is your control room: watch energy consumption, security zones, and environmental conditions in real time, then customize layouts, themes, and charts until the view matches your household. Automations suit every skill level, from a visual editor where scenarios assemble without code, to full programs in C#, JavaScript, or Python against a documented API. The built-in AI assistant, Lailama, runs locally: speak or type natural-language commands and it reasons about your home's context, orchestrates multiple devices, and shows the exact code it executed, so nothing happens by opaque magic. Voice works locally too, with Whisper recognizing speech and Piper answering through the browser. Cameras gain brains through VisionCore, which detects people, vehicles, and objects in real time, records buffered event clips, and feeds what it sees into your automations. A data browser turns months of sensor history into interactive charts with filters like moving averages, so "why did heating spike Tuesday" gets an answer. Virtual modules let you prototype sensors before buying hardware, and the interface speaks more than 90 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Hand-editing nginx configuration files to run a firewall is nobody's idea of a good afternoon, and Nginx-Love turns that chore into a dashboard. You manage domains, load balancing upstreams, and HTTPS backends through forms instead of config syntax, and the platform writes and reloads the underlying configuration for you. A ModSecurity firewall with the OWASP Core Rule Set inspects traffic to your sites, and you tune its rules from the interface rather than a text editor. Certificates arrive two ways: automated through Let's Encrypt, or uploaded manually when you bring your own. A Bot Manager fingerprints visitors with JA4 signals so you can welcome good crawlers, challenge suspicious automation, and block hostile bots by policy. Access lists filter by IP address, geography, and user agent, and multi-user roles let administrators, moderators, and viewers each see the controls appropriate to their job. Monitoring watches performance and attack patterns, sending alerts by email or Telegram when something needs attention. Configuration exports back up your setup, restores bring it back, and multi-node sync keeps a cluster of servers enforcing the same policy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With a deliberately minimalist design philosophy and zero database dependencies, DumbPad delivers a self-hosted notepad that stores notes as plain text files with real-time auto-saving every 10 seconds and keyboard-shortcut manual saves. The Node.js Express backend serves a vanilla JavaScript frontend that supports multiple named notepads with direct URL linking and shareable links for instant access to specific notes. The split-view editor displays markdown source on the left and rendered preview on the right with a draggable resize handle, while the full preview mode renders complete markdown with GitHub-style alert blocks for Note, Tip, Important, Warning, and Caution callouts, extended table formatting, fenced code blocks with syntax highlighting via highlight.js covering approximately 180 programming languages, collapsible details sections, and checklist support. Fuzzy search matches across both filenames and file contents for fast navigation across large collections. Optional PIN protection secures access with configurable 4 to 10 digit codes, constant-time comparison to prevent timing attacks, brute force lockout after 5 failed attempts with 15-minute cooldown, and IP-based tracking. The Docker container runs as non-root UID 1000 by default with multi-architecture support, CORS origin restrictions for reverse proxy deployments, and persistent data volumes. Notes can be downloaded as text or markdown files, printed with auto-expanded collapsible sections, and imported by placing text files directly into the data directory. On RepoCloud, deploy DumbPad on a dedicated VPS with Docker, root SSH access, and complete control over your note-taking infrastructure, all under the GPL-3.0 license.

"Stupid simple software" is the entire philosophy at DumbWare.io, and DumbBudget delivers it: no over-engineering, no complexity, no accounts, no bank connections - just a clean, modern ledger for money in and money out. Log income and expenses, assign categories, and watch real-time balance calculations update as you type. Finding transactions is quick: filter by type, narrow by date range, sort by date or amount. When tax season or spreadsheet analysis calls, everything exports to CSV. Access control matches the philosophy - a single PIN (set via one environment variable) gates the app, backed by real security engineering: rate limiting on PIN attempts, temporary lockout after failures, secure session handling, and no sensitive data in browser storage. Multi-currency support covers the ISO codes, and a SITE_TITLE variable names each instance - deliberately useful, because running separate instances per account or family member is the intended pattern for multi-user needs. The responsive UI ships light and dark themes and installs as a PWA on phones, where expense logging actually happens. Configuration is five environment variables; data persists in one folder. If Actual Budget and Firefly III feel like accounting software, this is the notepad that gets used. GPL-licensed.

Most RSS readers hand you a pile of headlines and make you do the reading; FeedMe reads first and hands you the pile already digested. It aggregates every feed you configure into one clean, ranked stream, and for each article an LLM writes a short summary you can scan in seconds, with the full original text one tab away when a story earns a deeper look. Sources organize into categories like Tech News, Finance News, Personal Blogs, Company Blogs, Open Source, Research, and Podcasts, and a global search finds stories across all of them. The reader never sleeps on stale content: a built-in cron refreshes feeds and regenerates summaries on your schedule (every three hours by default in Docker), so the page you open in the morning already covers the night. Summaries answer to you, not a vendor: point FeedMe at any OpenAI-compatible endpoint and tune the prompt, input truncation, temperature, and token budget, with output in the languages you choose. There are no accounts, no forced logins, and no app to install; the responsive page works on phone and desktop in light or dark themes. Because the whole application is a static site, it stays fast and cheap to run, and the same build can live on GitHub Pages or Vercel if you ever want a public edition next to your private one. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

LinShare gives organizations a file sharing service they run themselves, where every upload, share, and download is accounted for instead of scattering across inboxes nobody can audit, retract, or find six months later. Your personal space keeps files organized and versioned, ready to share by link or email with the people who should have them and no one else. Teams work in shared spaces with roles, nested folders, and shared drives, so a project keeps one canonical copy instead of eleven emailed variants. Need files from someone outside? Send an upload request and they drop documents into a secure, expiring drop box without ever getting an account. Regular external collaborators become guests with restricted, time-limited accounts, and contact lists make recurring groups of recipients reusable in one click. Administrators see the whole picture in activity logs that trace every download, share, and change, while antivirus scanning checks files as they move through the system. Previews spare everyone the download-just-to-check dance, and directory integration with LDAP and OpenID Connect single sign-on means accounts follow your existing identity rules. Everything an administrator can click, automation can call through the REST API, and an MCP server even lets AI assistants manage files, shares, and guests on your behalf. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Hunting for the hole is only half the job, because a scanner alert nobody believes wastes more time than the bug itself. Add a domain, CIDR, or bug-bounty scope and Reconner builds the map first: passive and active subdomain enumeration, live HTTP probing and fingerprinting, JavaScript analysis that digs endpoints, secrets, and API keys out of bundles, plus parameter and hidden-param discovery. Then it attacks what it mapped with a context-aware engine covering reflected, stored, and DOM XSS, SQL, NoSQL, SSRF, IDOR, LFI, SSTI, XXE, injection, and open redirects, and every candidate has to survive differential, out-of-band, or control-based proof, re-verified before it is ever reported. Blind issues are not dropped either: OAST callbacks catch out-of-band SSRF, RCE, SQLi, and SSTI that never respond inline. Networks get the same treatment, with port scanning, service detection, network-CVE checks, and IP-camera auditing. Findings land in a live dashboard streamed over WebSocket, with an attack-path view, coverage ledger, monitoring diffs, and HTML, Markdown, and PDF reports, while Telegram can alert you and even start, stop, or resume scans remotely. Run it only against assets you own or are authorized to test; behind a VPN and TLS it becomes your private proving ground. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Bridging local hardware and cloud intelligence, OwnPilot orchestrates autonomous multi-channel agent swarms and visual workflow pipelines while keeping sensitive personal records strictly on private infrastructure. Users can trigger autonomous task runs that browse websites using headless browser automation, extract data tables, and summarize research directly into encrypted markdown notebooks. The built-in workflow canvas allows individuals to construct branching automation sequences combining large language models, conditional logic gates, iterative data loops, and human-in-the-loop approvals. Users delegate calendar scheduling, task tracking, expense budgeting, and contact lookups through conversational chats conducted over web portals, Telegram bots, or WhatsApp numbers. Operators can dispatch coding agents to inspect local repositories, execute shell commands in sandboxed environments, and stream live terminal logs as automated patches develop. The platform also enables home automation enthusiasts to monitor MQTT telemetric feeds from microcontrollers, queue device commands, and receive instant alert notifications when sensor thresholds trigger. Advanced security layers inspect all incoming prompts for personal data patterns, enforce strict permission boundaries across file directories, and generate tamper-evident audit logs for every autonomous tool call. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every cloud account grows the same way: a test instance nobody shut down, a storage bucket from a migration two years ago, a database whose owner left the company. Steward walks all four of your clouds, AWS, Alibaba Cloud, Google Cloud and Microsoft Azure, and writes down what is actually running in one inventory you can search instead of four consoles you half remember. The point is not the list, it is what the list connects to: open any resource and see its relationships, which services depend on it, what shares its network, what breaks if it disappears. Cleanup stops being a leap of faith, because every candidate deletion is reviewed against that dependency map first, showing the impact before execution and following the result of each action afterwards. Scheduled scans keep the picture honest without you remembering to look, reporting exactly which resources each scan added, removed or modified, and pinging Slack, Feishu, DingTalk or WeCom when a scan fails. Connect accounts, including through OIDC, run the first sweep, and the orphaned, idle and forgotten start standing out from the infrastructure you actually need. It runs as a single executable with the web console and database built in, under systemd on your server, behind your HTTPS proxy with token sign-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.