ntfy sends push notifications to your phone or desktop with a single curl command: publish a message to any topic and every subscriber receives it instantly, no signup or API key required. Over 31,000 GitHub stars and 106 releases since 2021 back a server supporting five priority levels mapped to distinct notification sounds and vibration patterns, emoji tags for visual classification, click actions that open URLs when tapped, and up to three action buttons per notification for view, HTTP callback, broadcast, or clipboard copy operations. File attachments push images from surveillance cameras, documents, or any binary payload directly to mobile devices. Subscriptions work through JSON streams, Server-Sent Events, WebSockets, or raw text, with server-side filtering by priority, tags, and message ID. Authentication enforces topic-level access control through Basic Auth, Bearer tokens, or query parameters, with a built-in user and ACL management system. UnifiedPush compatibility lets ntfy serve as a push distributor for Mastodon, Matrix, and other federated services. Web Push via VAPID keys delivers browser notifications without the mobile app. The server ships as a single statically linked Go binary or Docker image supporting amd64, armv7, and arm64 architectures, consuming 30-50 MB RAM at idle with SQLite-backed message caching. Integrations include Grafana, Prometheus Alertmanager, Uptime Kuma, Home Assistant, and Ansible Semaphore. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 / GPLv2 dual-licensed.

A minimal Ubuntu 24.04 LTS virtual private server — no pre-installed applications, no opinionated configuration, just the operating system and root access. Start from a clean slate and install exactly what you need: web servers, databases, development toolchains, CI runners, monitoring stacks, VPN endpoints, game servers, or anything else that runs on Linux. The server ships with apt package management, systemd service supervision, and standard networking configured out of the box, giving you access to over 36,000 packages in the Universe repository alone. Connect via SSH with the key you select during deployment; a dedicated IPv4 address is included with every server at no extra charge. A browser-based serial console in the RepoCloud dashboard provides emergency access without an SSH client. Snapshots let you capture the server state before risky changes and roll back with one click. Resize CPU and RAM on demand without reinstalling. Canonical's standard security maintenance covers this LTS release through May 2029 — five years of patches for the Main repository. Ubuntu Pro extends that to ten years with additional Universe coverage, kernel livepatching, and compliance tooling, available free for up to five machines.

Share code snippets, logs, configs, and notes without registration, tracking, or ads: Lenpaste is a minimal, self-hosted, anonymous alternative to pastebin.com. It is deliberately spartan in the right ways: no accounts, no JavaScript required (the entire site works in text browsers and hardened setups), and cookies used solely to store display preferences. Pastes support syntax highlighting across a long list of languages (from ApacheConf and Arduino to mainstream stacks), configurable expiration from minutes to unlimited, one-use "burn after reading" pastes that self-delete on first view, optional author attribution, and iframe embedding for dropping pastes into other pages. The form-encoded HTTP API covers everything the UI does - create pastes with title, syntax, expiration, and line-ending normalization, fetch them by ID, and query server capabilities - making it trivial to pipe command output to your paste server from shell scripts. Server operators control maximum title and body lengths, maximum paste lifetime, rate limits for viewing and creation, search-engine indexing policy, and can lock private instances behind HTTP Basic authentication. It deploys as a single lightweight Docker container, giving your team a snippet-sharing endpoint where the content never touches a third-party service.

When Commento's original maintainer went quiet, Commento++ bundled the community's bug fixes and stalled merge requests into a batteries-included release of the beloved Go-based Disqus alternative - and kept building. The core promise is unchanged: an embeddable comments box that is orders of magnitude lighter and faster than Disqus, with no ads, tracking, or data sales - two lines of HTML and a PostgreSQL database. On top of Markdown comments, voting, Disqus import, OAuth login (Google, GitHub, Twitter) plus SSO, sticky comments, thread locking, and email notifications, the fork's additions are substantial: WebSocket-powered live comment updates with permalinks and highlight animations for new arrivals, guest commenting with a name, a cross-domain moderation dashboard for approving and deleting comments in one place, MathJax rendering support, wildcard domain matching, a reInit hook that makes single-page-application integration clean, and Perspective API spam scoring alongside the existing Akismet integration. Optional page-view logging graphs traffic on the dashboard, native SSL termination works without a proxy, and script-tag data attributes control fonts, CSS overrides, deleted-comment visibility, and polling-versus-WebSocket behavior.

A free, polished web client for Subsonic-compatible music servers: Substreamer is the browser-based frontend you point at your existing streaming backend to play your own library from anywhere. It speaks the Subsonic API (v1.13 and higher), which makes it compatible with the whole ecosystem that has grown around that protocol: the original Subsonic server, its forks Airsonic and Madsonic, and modern implementations like Navidrome and Ampache. That decoupling is the point - your music files, transcoding, and library indexing live on whichever server you prefer, while Substreamer provides the listening experience: browse by artist, album, and genre, build and manage playlists, search your collection, and stream on demand. This RepoCloud deployment runs the containerized web edition, so the same interface is available from any browser without installing a native app, and it pairs with the Substreamer mobile apps that made the client popular. For anyone assembling a self-hosted Spotify replacement - typically Navidrome for the backend plus a good client - Substreamer fills the client half with a clean, familiar player UI. Because it is a stateless client, the container is lightweight and low-maintenance: connect it to your server's URL and credentials, and your entire collection is streaming in minutes, with no subscription and no catalog that can disappear.

Point the gh CLI at your private Githome server and it works identically to github.com, because every REST v3 and GraphQL v4 endpoint returns byte-for-byte compatible JSON shapes, headers, Link pagination, and ETag caching. A single compiled Go binary serves the REST API under /api/v3, GraphQL under /api/graphql, git smart-HTTP transport, and a server-rendered web UI implementing the GitHub Primer design system with full functionality when JavaScript is disabled. The web interface provides repository browsing with Markdown rendering and syntax highlighting, issue tracking, pull requests with unified diffs and inline code review threads, full-text search, user profiles, and a notifications inbox. Authentication supports personal access tokens with prefix-based identification, OAuth device and web flows, and scoped permissions on every response header with only token hashes stored. The pull request system implements the complete lifecycle including async mergeable state computation, squash, merge, and rebase strategies, commit statuses, check runs, and statusCheckRollup fields. Webhooks deliver events with X-Hub-Signature-256 verification, SSRF protection, and at-least-once retry semantics. Storage supports SQLite for single-node deployments or PostgreSQL for production configurations. Performance optimizations include batch loaders replacing N+1 queries, keyset pagination, FTS-backed search, and GraphQL dataloaders. Docker deployment pulls the official multi-arch container image from GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Email discussion lists - the venerable listserv pattern where one address relays to a whole group - without the notorious setup pain of Mailman or Sympa: that is Gray Duck Mail. Its architectural trick is requiring no mail server of your own: the C#/ASP.NET Core app monitors a POP3 inbox at any external email host supporting POP3/SMTP and aliasing, relays each incoming message to all list members via SMTP, and archives it for browsing in the web interface. Replies route back to the entire group automatically. The tedious parts of list management are handled by convention: dedicated aliases process join requests, subscription confirmations, and unsubscribes, while a bounce alias in the return-path catches delivery failures so dead addresses get handled instead of silently rotting. The web administration interface creates and removes lists, manages contacts, browses message archives, and imports or exports the local database for backup. GPLv3-licensed, Docker-distributed, and fully code-documented, it targets exactly the groups email still serves best - neighborhoods, schools, congregations, workplaces, and families - where one message keeping everyone in the loop beats yet another app nobody wants to install.

WhatsApp becomes an HTTP service your own systems can call. WPPConnect Server wraps WhatsApp Web sessions in a REST API for integrators who need to send and receive messages, manage contacts and groups, and react to events without building browser automation themselves. Each session pairs by QR code and gets its own token, and multiple sessions run side by side for different numbers, teams, or customers. Endpoints cover text and media messaging, contact and group operations, product catalog actions, and session lifecycle, all documented in a built-in Swagger UI and a Postman collection. Webhooks push incoming messages and status changes to your backend, with destination allowlists keeping callbacks pointed only where you configured. Chatwoot connects through a dedicated authenticated webhook, so support conversations can flow between the help desk and WhatsApp in both directions. The Docker image bundles WPPConnect Manager, a web workspace for session administration, QR pairing, and reading and answering chats, protected by the server secret key at the top level and per-session tokens below it. Credentials, browser data, media, and logs persist in named volumes, surviving container restarts without re-pairing. Support desks automate ticket updates, shops send order notifications, and clinics confirm appointments through numbers they already publish. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

GlitchTip speaks Sentry's protocol without Sentry's operational weight - open-source error tracking that your existing SDKs already understand. The pitch is pragmatic: instrument your application with the official Sentry SDKs you already know - any language they cover - and point the DSN at your own GlitchTip instance instead. Errors, exceptions, log messages, and Content Security Policy violations flow into one place for triage, grouped into issues with stack traces, with alerts delivered by email or webhook the moment things break. Where self-hosted Sentry has ballooned into a docker-compose stack of twenty-plus containers, GlitchTip is a deliberately lean Django and PostgreSQL application a small team can actually run. Beyond errors, it bundles three more monitoring concerns: performance monitoring takes a works-out-of-the-box approach - no dashboard building, just your slowest web requests, database queries, and transactions surfaced automatically; uptime monitoring pings your sites and alerts on failures, or runs in reverse as a dead-man's-switch heartbeat for cron jobs that must check in on schedule; and log search puts application logs alongside errors for faster debugging. Unlimited projects and team members, MIT-licensed, built by Burke Software - your event volume is limited only by your own hardware.

Versus Incident is a self-hosted AI SRE agent and incident manager that learns what normal looks like in your logs, metrics, traces, and Kubernetes clusters, then opens a triaged incident the moment something genuinely new appears. Detection earns trust gradually. Training mode only observes and catalogs patterns; shadow mode records what it would have alerted so you can judge its instincts; detect mode creates real incidents with an AI-written summary, a severity, and suggested next steps attached. Existing alerting does not have to move: Alertmanager, Grafana, Sentry, CloudWatch, Fluent Bit, and custom scripts post to the same webhook endpoint, and every incident, however it arrived, is rendered with your Go templates. Delivery fans out to Slack, Microsoft Teams, Telegram, Viber, email, and Lark. Silence has a deadline, because unacknowledged incidents escalate to on-call through PagerDuty, AWS Incident Manager, Opsgenie, incident.io, or ServiceNow. The Kubernetes dashboard gathers cluster health and capacity, workloads, resource relationships, recent changes, Helm releases, and GitOps status, and a DevOps chat agent in the web UI answers questions against the connected systems while responders work. The admin dashboard reviews learned patterns, shadow events, and raised incidents, so the agent's judgment stays inspectable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Training runs stop being terminal scrollback and become a board you can read at a glance. SwanLab is an open-source experiment tracking and visualization platform for AI model training that records metrics, hyperparameters, logs, and hardware signals from your training code into a modern web dashboard you can self-host. A few lines of Python start an experiment, and the dashboard follows loss curves, learning rates, and custom scalars live, with line chart configuration, smoothing, grouping, and detailed hover inspection for comparing runs. Experiments organize into projects and groups with tags, pinning, filtering, and a table view that sorts and aligns runs against a baseline with difference percentages. Media logging goes far beyond scalars: images, audio, video, text with Markdown rendering, 3D point clouds, molecular structures, and custom ECharts visualizations including PR curves, ROC curves, and confusion matrices. Hardware monitoring records GPU, CPU, memory, disk, and network behavior from NVIDIA, AMD, Ascend, and other accelerators alongside the metrics they produced. Integrations cover more than fifty frameworks, from PyTorch Lightning and Hugging Face Transformers to LLaMA Factory, veRL, and XGBoost, and existing histories migrate in through sync tools for MLflow, TensorBoard, and Weights and Biases. Teams collaborate with organizations, roles, project sharing, webhooks, and notification plugins. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Give an AI agent a price list and it drafts the quote; hand it an invoice and it checks the numbers against purchase and receiving records before anyone pays. Atom is a self-hosted AI agent platform for business automation that wraps every agent action in governance: permissions, ordered policies authored in a canvas editor, human approval checkpoints, and durable audit records. Work starts from your files and instructions, with demonstrated workflows that map unfamiliar spreadsheet columns, calculate against source records, and produce cited Word or PowerPoint documents you can inspect line by line. Corrections become reusable teaching: saved field mappings, commercial terms, and contextual lessons carry into new work, and each job keeps the accepted snapshot it started with. Questions, approvals, and waits survive restarts, completed operations are retained, and uncertain effects must be reconciled before anything retries, so long-running business processes do not silently double-act. Results keep provenance back to the source records and operations that produced them, and unresolved requirements block completion instead of being invented away. You bring the model: configure a hosted provider or a local OpenAI-compatible endpoint, route by capability and cost, and run everything in a single-tenant workspace with user, role, and workspace boundaries. A starter sample runs with no model or cloud key at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A rack of ordinary servers becomes your own cloud, with tenants ordering real infrastructure from a catalogue instead of filing tickets. Cozystack is an open-source, Kubernetes-based cloud platform that turns bare metal into a self-service system for spawning Kubernetes clusters, databases, virtual machines, load balancers, object storage, and HTTP caching services through a standard REST API. Hosting providers use it to sell managed services on hardware they already own, platform teams use it to give developers isolated environments inside quotas, and organizations leaving VMware run virtual machines and containers side by side with live migration and replicated storage. Tenants stay separated, GPU capacity can be shared between groups, and every service instance ships with preconfigured monitoring dashboards and alerts, gathered per tenant or into one hub. Because services are requested as Kubernetes resources, a billing system integrates by submitting a manifest, and platform packages are plain YAML delivered by FluxCD, so extending the catalogue means editing files your team already understands. Installation bootstraps immutable nodes over PXE or ISO, and the built-in web dashboard deploys applications and shows what the platform is doing without hiding the API underneath. The whole control plane runs on your hardware, auditable end to end. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

One page, every place you exist online, hosted on a domain you own. LittleLink Server is a self-hosted link-in-bio page that publishes your profile, avatar, bio, and social buttons from a single Docker container, with no account fees and no third-party branding on your links. More than sixty brand buttons cover the major social, streaming, music, and creator platforms, and custom buttons add any destination with your own text, colors, icons, and ordering. Themes restyle the page in a few environment variables, and because configuration is read at request time, edits take effect on a container restart with no rebuild. Page metadata, Open Graph titles and images, favicons, and language are all configurable, so the link you paste into a bio unfurls properly in chats and feeds. The server generates its sitemap and robots rules at request time, with controls for index status and extra crawler rules, including blocking specific AI crawlers by name. Analytics support connects the page to your tracking provider, and a health check endpoint keeps uptime monitors and container orchestrators informed. Creators, streamers, developers, and small businesses use it as the stable home base behind every profile bio: one short URL that always points at the current set of destinations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Where AI agents and people share one real-time workspace, an agent blocked on your decision never waits unnoticed until morning, and that workspace is AgentRQ, a human-in-the-loop task manager for agent fleets. In that workspace agents pull assigned tasks over MCP, report progress as they work, ask questions in the open, and pause visibly instead of going dark. Cards travel from Not Started to Ongoing to Blocked to Done on a list or Kanban board, and a Blocked card returns to work the second you answer from any device. Sensitive tool calls wait for an Allow click; flip YOLO on a task and they proceed automatically, still recorded call by call in a searchable trajectory. A timeline under every task totals how long the agent worked, waited, or stayed blocked. Scheduling spawns tasks on a cadence, completed tasks fire named events, and events hand new tasks to subscribed workspaces, chaining a release pipeline without glue code. Each project lives in an isolated workspace with its own agent, memory, skills, and Slack channel, and workspace memory carries yesterday's lessons into today's session. Voice-dictated tasks transcribe on device, 55 ACP-compatible agents connect through one gateway, and agents running on your own machines expose their terminals and resource use remotely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every self-hosted app asking for its own password is a liability you keep re-creating. Rauthy is a lightweight single sign-on identity provider that gives your whole homelab or organization one secure login through OpenID Connect and OAuth 2, with passkeys at the center instead of passwords. Accounts can be fully passwordless: an email address plus a FIDO2 passkey with user verification, or a password backed by a security key, with magic links and upstream login providers also supported. The admin UI manages users, clients, roles, groups, sessions, API keys, blacklists, and per-client login branding with custom logos and colors, and events stream to email, Matrix, or Slack when something deserves attention. Login endpoints defend themselves with brute-force and credential-stuffing detection, automatic IP blacklisting, rate limiting, and optional geolocation blocking. Beyond web apps, a PAM and NSS module extends the same identities to Linux workstations and SSH logins with ephemeral passwords or public keys, and the OAuth device flow covers headless and IoT devices. It runs as a single efficient service on embedded Hiqlite or Postgres, clusters for high availability, needs only tens of megabytes of memory, and has passed an independent security audit. Dynamic client registration, SCIM provisioning, and DPoP tokens cover modern decentralized login flows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.