Lalabase is project management built for developers who work with clients, putting tickets, time tracking, documentation, and meetings in one workspace instead of five separate tools. Each client gets an organisation with its own projects and its own access, and roles decide exactly what clients can see. Tasks run as a list or a board with the statuses, priorities, and fields you define per project, rather than the workflow a vendor chose for you. Time tracking records several sessions per ticket, each billable on its own, with exports that go straight into the invoice. Documentation lives beside the work: notes and documents sit in the project, and a folder in your GitHub or GitLab repository becomes the project's docs automatically. Meetings keep their transcript, an AI summary, and the tasks that follow from what was actually said. When you need an answer, the AI assistant takes one question across tickets, comments, documents, hours, and meetings, and it cites the ticket, page, or conversation every answer came from. It even reads your repository's indexed code structurally, so questions about what is implemented get answered against the code. The assistant stays off until you enable it with your own provider key or a model in your own network. An MCP server and REST API let your own agents list, create, and update tickets, comment, and log time. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Termix delivers a unified, self-hosted infrastructure control center that consolidates SSH terminals, remote desktop streaming, and fleet automation into an intuitive browser workspace that replaces proprietary tools like Termius. Administrators connect to Linux servers and desktop environments using embedded RDP, VNC, and Telnet protocols powered by Apache Guacamole without requiring local client installations. The multi-panel terminal interface supports four-way split screens, allowing operators to broadcast keystrokes simultaneously across multiple production hosts or execute saved reusable script snippets with dynamic parameters. Real-time multiplayer session sharing lets engineers invite teammates via secure, time-limited links with configurable read-only or collaborative write permissions for troubleshooting incidents. Advanced networking layers handle SSH jump hosts, SOCKS5 proxy chains, Warpgate relays, and port knocking sequences to access segmented private networks securely. Integrated SFTP file managers provide drag-and-drop file transfers with editable path bars, inline text editing, and folder synchronization across remote machines. Background telemetry monitors CPU loads, memory utilization, disk IOPS, and container statuses, while built-in session recording captures complete terminal sessions for compliance auditing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

RankMe puts the whole SEO workbench on your own server: audits, rankings, keywords, backlinks, and AI visibility without a per-seat subscription deciding what you may check. Crawl a site and it runs 26 automated checks, returning a plain-language report sorted into Fix now, Watch, and Passed, where each finding names the page, explains in one sentence why it matters, and tells you how to fix it, with an optional AI summary on top. Rank tracking follows Google organic positions over time plus Bing, YouTube, and Amazon, watches SERP features, fires confirmed-drop alerts, and maps local rankings on a geogrid. Keyword research covers volume, difficulty, trends, and SERP-overlap clustering, while Search Console data feeds cannibalization reports and connects to GA4, PageSpeed Insights, and CrUX for performance context. Backlink profiles, link-gap analysis, toxic-link review, and competitor discovery show who links to rivals and which content earns it. A dedicated AI visibility module tracks prompts in AI Overviews and LLM answers and measures share of voice in a weekly digest. Agencies get PDF and CSV exports, scheduled white-label client reports, read-only share links, a REST API, and an MCP server, with alerts delivered by email, Slack, or signed webhook across seven interface languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When hosting multiplayer game servers for communities or friends requires container isolation and low-overhead administration, Calagopus steps in as a modern game server management panel. Server operators use it to deploy and control Minecraft, Rust, ARK, Valheim, FiveM, and any other Linux containerized workload while reusing existing Pterodactyl and Pelican eggs without modification. From the live WebSocket console, administrators monitor real-time CPU, memory, and network graphs, autocomplete saved command snippets, inspect per-layer Docker image pull progress bars, and pop the terminal out into a secondary window. Managing configuration files and modpacks happens directly in the browser through a split-pane tabbed editor featuring real-time collaborative editing, side-by-side revision diffs with one-click rollback, a visual disk usage treemap, in-place archive browsing, and VS Code workspace mounting. Database workflows are equally streamlined: you can provision MySQL, PostgreSQL, MongoDB, or Redis instances, browse and edit rows or SQLite files in a built-in data explorer, and run read-only or writable SQL queries without external database clients. Automated schedules support conditional if-else branching, regex variable extraction from console output, crash-detection triggers, and eight backup storage drivers including S3, Restic, Kopia, ZFS, Btrfs, and Proxmox Backup Server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

FreeSBC sits at the edge of your phone system so your FreeSWITCH or Asterisk never has to face the public internet. It is the only element with a public address: phones register through it over SIP on UDP, TCP, or TLS, browsers call through WebSocket with WebRTC terminated at the edge (ICE-Lite, DTLS-SRTP, and RTCP-mux, relayed onward as plain RTP), and carriers reach your switch through it as an outbound proxy, with the switch's private addresses hidden from every SDP body, Contact, and Request-URI it constructs. The switch stays on a private LAN as the registrar and call brain, holding credentials and carrier accounts, while FreeSBC anchors all media on its own ports with hardened first-packet latching and a silence watchdog, and never transcodes. Against the background radiation of SIP scanning, it applies per-IP rate limits with separate limits for carrier sources, scanner fingerprinting with in-memory bans, and admission control for public INVITEs and REGISTER enumeration, and every denial is a silent drop. A multi-switch pool hashes users across switches, and one fixed private socket keeps the trusted side simple. The embedded WebUI, REST API, and Prometheus metrics sit behind a bcrypt-checked admin login, showing live calls and media ports. One static binary, one YAML file, no database, no Redis, and no separate media process to babysit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Plan the day in the morning, capture tasks in your own words as they appear, and let every device settle on the same list by evening: that rhythm is what OpenTodo is built around. The Today view opens with a briefing, a daily limit, and morning, afternoon, and evening sections, with time blocking and meetings counted against the day's real capacity. Quick add understands natural language in six languages, a pasted list becomes tasks in one step, and the command bar, inbox processing, email-to-task, and dictation keep capture fast. Projects organize work with sections, boards whose cards carry notes, timelines, sub-projects, and areas, while recurring tasks and sequential projects handle routines and ordered work. Lists can be shared with the people you live and work with, invited by link once the owner account exists. Every device keeps a full copy and works offline; changes are stamped per field and merge cleanly through your server when you reconnect, with history and undo preserving earlier values. CalDAV and calendar feeds connect your calendars, GitHub and GitLab issues flow in, and webhooks plus ntfy, Pushover, and Gotify send notifications out. Scheduled backups go to a folder, S3-compatible storage, or WebDAV, and the whole server is one container around one SQLite file. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Used by millions of users at thousands of organizations worldwide and holding 29,000+ GitHub stars, Redash is the most established open-source SQL-first business intelligence tool — enabling anyone from analysts to executives to query databases, visualize results, and share dashboards without writing a single line of application code. The browser-based query editor supports SQL and NoSQL with schema browsing, auto-complete, query snippets, and parameterized queries that turn static reports into interactive data applications. Native connectors span 35+ data sources including PostgreSQL, MySQL, Amazon Redshift, Google BigQuery, Snowflake, ClickHouse, MongoDB, Elasticsearch, Databricks, Apache Presto, Microsoft SQL Server, and REST APIs — with an extensible data source API for custom integrations. Visualization types cover line, bar, area, pie, scatter, box plot, funnel, cohort, sankey, sunburst, choropleth map, and pivot tables, all draggable onto shared dashboards with cross-filtering parameters. Scheduled refreshes automatically update query results at configurable intervals, while threshold-based alerts notify teams via email, Slack, or webhook when metrics cross defined boundaries. SAML and Google OAuth SSO integration, role-based access control, API key management, and query-level permissions ensure enterprise-grade security for sensitive datasets. The self-hosted stack deploys via Docker Compose with PostgreSQL for metadata storage, Redis for job queuing, and Celery workers for background task execution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

With over 21,000 GitHub stars and six years of steady development through version 3.1.0, Neko transforms any Docker container into a fully interactive browser or desktop environment streamed to web browsers via WebRTC with sub-300-millisecond glass-to-glass latency. The Go backend captures X server display frames using the Pion WebRTC library while the Vue.js frontend renders the remote session with native audio synchronization, delivering a significantly smoother experience than Apache Guacamole or noVNC which rely on image-over-WebSocket approaches. Multiple users simultaneously view and collaboratively control the same session with real-time input synchronization and host-managed control passing between participants. Pre-built Docker images cover Firefox, Chromium, Google Chrome, Tor Browser, Brave, Vivaldi, and Microsoft Edge alongside full desktop environments including XFCE and KDE for running any Linux application. Neko Rooms provides multi-tenant deployment with a REST API for programmatic room provisioning, while Neko Apps extends the platform with additional containerized applications beyond browsers. Sessions persist on the server independently of client connections — close your laptop, reconnect from your phone, and resume exactly where you left off. Optional VPN and Tor integration routes traffic through encrypted tunnels for privacy-sensitive browsing. RTMP broadcasting streams sessions to external platforms. The embeddable client supports iframe integration for custom portals and applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

BrightBean Studio provides an open-source social media management suite that centralizes multi-account publishing, visual calendar scheduling, idea tracking, and cross-channel analytics into a unified self-hosted dashboard. Content creators and marketing agencies draft cross-network posts within an interactive composer that provides real-time channel previews and custom caption overrides for individual networks. The visual drag-and-drop calendar maps publishing queues across recurring weekly time slots, while an integrated Kanban board organizes brainstorming concepts from unassigned ideation to production-ready schedules. Community managers monitor unified social inboxes aggregating direct messages, mentions, and comments across Facebook, Instagram, LinkedIn, YouTube, TikTok, Bluesky, Threads, Pinterest, and Mastodon. Team leads configure multi-tier approval workflows with threaded editorial comments and issue passwordless 30-day magic links so external clients can approve drafts without registration. Built-in performance dashboards aggregate engagement rates, follower growth curves, and watch time metrics directly from native network APIs without relying on third-party data aggregators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Small server, small monitoring. Statlite watches your applications and their host with a single binary that idles at about 15 MiB, so the observer never becomes the heaviest thing on the box. Point it at a Spring Boot Actuator endpoint and it polls health plus a fixed, curated set of Micrometer metrics: request traffic, latency, CPU, and runtime memory, all drawn as clean charts. Quarkus, Micronaut, and anything else that can answer a fixed JSON metrics profile can join the same dashboard. History lives in one local SQLite file, raw samples only, kept for 90 days by default, so yesterday's latency spike is still there when you go looking. The dashboard also watches the host itself: processor load, memory pressure, and filesystem capacity, including a warning before the metrics database fills its own disk. Restart detection tells you when an application bounced, and per-target Basic Auth support lets you poll protected Actuator endpoints safely. Configuration is one YAML file listing your targets and polling interval, friendly to systemd and Docker alike. Everything is deliberately scoped: no alert manager, no external service, no observability platform to operate. Just open the page and see whether your apps are healthy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Oh My CPA gives a CLIProxyAPI gateway a proper control room, where providers, OAuth credentials, client keys, model routing, and the cost of every request are managed and watched from one self-hosted console. You add providers such as Codex, Claude, Gemini, xAI, DeepSeek, Vertex AI, and OpenAI-compatible services, each with credentials, retry and error policies, priority, weight, and an enable switch the gateway actually enforces. OAuth accounts are signed in from the console, with quota window readings, refresh schedules, and per-credential model aliases kept next to the keys they belong to. Client keys can be created, named, and revoked, and those names follow the traffic into request records and filters so you always know which key spent what. The dashboard follows request volume, token throughput, cache hit rate, and cost from the last fifteen minutes out to ninety days, with a year-long token heatmap for the long view. Insights compare keys, models, providers, and credentials against the previous period, while the live routing view shows which credential each request travelled to and whether it was rerouted. Every request stays searchable, with duration, time to first token, token breakdown, and the raw log in a detail drawer. A playground tests any routed model with text and images before your users do. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A personal to-do list that scales to team project management: Vikunja is an open-source task manager that grows with the work. Every project can be viewed four ways - classic list, drag-and-drop Kanban board, Gantt chart for timeline planning, and a spreadsheet-style table - so a project manager watches the Gantt while developers work the board, on the same data. Tasks carry the full attribute set: labels, priorities, due dates and reminders, recurring schedules, subtasks and task relations, file attachments, assignees, and comments, and Quick Add Magic parses natural-language input like dates and labels typed inline. Projects share with team members or via links, and saved filters slice tasks across projects. Built-in CalDAV support (VTODO) syncs tasks bidirectionally with clients like Thunderbird, DAVx5, and iOS Reminders, and one-click importers migrate from Todoist, Trello, and Microsoft To-Do. Nothing is metered - unlimited projects, tasks, filters, and attachments. A single Go binary with a Vue frontend runs against SQLite, MySQL, or PostgreSQL, exposes a full REST API, and works as an installable PWA on mobile. AGPLv3-licensed.

Grimoire captures, extracts, and indexes the content behind your bookmarks so you can search what pages actually say, not just their titles and URLs. The ingestion pipeline accepts links from the web UI, REST API, MCP server, browser bookmarklet, or bulk import, then fetches each page and extracts readable content using specialized parsers for GitHub repos, GitHub issues, StackOverflow threads, YouTube transcripts, PDFs, and standard web articles. Everything stores locally in SQLite with file-based content archives. Search operates in three modes: FTS5 keyword matching for exact terms, semantic embedding search for meaning-based retrieval using vector similarity, or a hybrid ranking mode combining both. Optional AI providers including OpenAI, Ollama, Anthropic, DeepSeek, and any OpenAI-compatible endpoint generate automatic tags, summaries, and embeddings without being required for core functionality. The interface built with React 18, Vite, TypeScript, Tailwind CSS, and Radix UI supports categories, nested tags, notes, archive and trash states, read-later flags, and multi-user isolated spaces. A single Bun-powered Hono process serves both the compiled frontend and the REST API on port 3210, requiring only one Docker container and a SQLite volume. Backup and restore export bookmarks, content, settings, and metadata as portable ZIP archives. Nearly 3,000 GitHub stars reflect growing adoption among developers and researchers. Running on a VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Deployment decoupled from release: Unleash, the most popular open-source feature management platform on GitHub, is a Node.js server backed by PostgreSQL. Ship code dark, then control who sees it through activation strategies: gradual percentage rollouts, targeting by user ID, IP, hostname, or application name, custom constraints against your own context fields, and scheduled or time-limited releases. Strategies stack - a flag activates if any strategy matches - and strategy variants layer A/B versions on top of the on/off decision. Each flag carries per-environment configurations, so a feature can run at 100% in staging while canarying at 5% in production. Backend SDKs (Node.js, Java, Go, Python, Ruby, .NET, PHP, Rust, and more) fetch configuration and evaluate flags locally, so a flag check adds zero network latency to request paths; frontend SDKs for React, Vue, Svelte, iOS, Android, and Flutter evaluate through a proxy layer. Flag hygiene is built in: flags are typed (release, experiment, operational, kill-switch, permission) with expected lifetimes, and Unleash marks overdue flags as potentially stale and surfaces unknown flags your SDKs request but that don't exist. Self-hosting via Docker keeps flag data, targeting rules, and evaluation infrastructure entirely on your side.

Running a VPN for family, friends, or a small team usually means babysitting servers one SSH session at a time, and Mistgate replaces that with one panel that keeps the whole fleet configured. Add a server from the browser by typing its address and root password: the panel pins the host key, checks the host, opens the ports, and installs the signed node agent for you. Each person gets one subscription link that their app turns into the server list, or a personal AmneziaVPN key per device, so a lost phone can be revoked without touching anyone else. Groups decide which protocol profiles a person receives, while per-user traffic quotas, expiry dates, device limits, and per-device speed limits keep sharing fair. Hysteria2 brings QUIC-based speed with port hopping, obfuscation, and certificate options; VLESS REALITY and AmneziaWG 2.0 and 3.1 cover networks where one protocol gets blocked, and Cloudflare WARP can serve as the exit for all three. Every five minutes the panel connects to each server the way a real client app would, a doctor on every node runs host checks with safe fixes, and alerts reach you on Telegram before your users notice. The public address shows strangers a decoy site while the admin hides behind a secret path, and encrypted backups go to your Cloudflare R2 bucket on a schedule. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Point Sourcebot at your GitHub, GitLab, Bitbucket, Azure DevOps, Gerrit, or Gitea repositories and get regex, symbol, and filtered search results in under a second across thousands of repos and branches. Backed by Y Combinator with production deployments at NVIDIA, Shutterstock, SeatGeek, Arista, and Red Hat, the Zoekt-powered engine deploys as a single Docker container with zero external data transmission. Ask Sourcebot connects reasoning models like Claude Opus to your entire codebase, enabling natural language questions that return structured answers grounded with inline citations and navigable code snippets, backed by automatic tool calls that search code, follow references, and read files across all indexed repositories. Ask connectors extend this to Jira, Slack, Linear, and Confluence via MCP, pulling external context alongside code for debugging and documentation. IDE-level code navigation provides goto definition and find all references across repository boundaries without local cloning. The built-in file explorer renders any indexed file with syntax highlighting, breadcrumb navigation, and git blame showing per-line commit attribution. An analytics dashboard tracks daily, weekly, and monthly search activity. Permission syncing from GitHub and GitLab enforces access control lists so users only see repositories they are authorized to access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Other licensed.

Give your coding agents a board they can work, not just read: Kanzo is a self-hosted kanban board where you and your agents move the same tasks through the same columns at the same time. Tell an agent to take the next task and it moves the card to doing, comments as it works, and leaves the result where you can read it in the browser. Projects follow the code automatically: the agent finds the right board from the Git remote of the repository it is working in, and you can link more repositories to a project from its menu. Press n to add a task, search every project with a slash or Command-K, paste an image straight into a card or comment, and park half-formed ideas in an optional Backlog column that agents leave alone until you promote them. The whole board is one folder, and a private Git repository you own keeps it in step across a laptop, a desktop, and a Raspberry Pi, with conflicts resolved by choosing which side to keep. Statuses are yours to rename in the config file, the board exports cleanly to Markdown or JSON, and one click in the sidebar installs updates and restarts the service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Respan Gateway is a single-binary LLM gateway that lets the SDK you already use call any AI model from any provider, translating between OpenAI, Anthropic, and Gemini API formats on the way through. Point an OpenAI, Anthropic, or Gemini client at it and you reach chat models on sixteen providers, plus any OpenAI-compatible endpoint of your own, with streaming, tools, images, and reasoning translated. Traffic control works the way operators think: name a route, send it to the cheapest or fastest provider, retry on failure, fall back to a second vendor, or hedge a slow call by racing another provider. Models that never had tools get them anyway, because MCP servers and built-in search, browsing, code, document, and memory tools run inside ordinary chat requests behind the gateway. Realtime voice crosses vendors too, with an OpenAI Realtime client able to talk to Gemini Live, alongside images, speech, transcription, embeddings, and video through one endpoint. A live request log in the web UI shows the client key, model, provider, status, tokens, cost, and latency of every call, so runaway agents and surprise bills are visible immediately. Everything is a plugin on one public Rust API, from routing and pricing to tracing, with examples for guardrails, PII masking, and billing. One TOML file configures keys, providers, routes, and tools, validates before it starts, and reloads on signal. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.