Joplin
Notes on Windows, macOS, Linux, Android, iOS, and the terminal, synced through your own server: Joplin pairs its open-source clients with Joplin Server, the official self-hosted backend that replaces Dropbox, OneDrive, or Nextcloud as the synchronization target. Notes are Markdown with inline attachments (images, PDFs, audio), organized into hierarchical notebooks and sub-notebooks with cross-cutting tags, alongside to-do lists with reminders and alarms. End-to-end encryption is the headline feature: enabled in the clients, it encrypts sync payloads on-device before upload, so the server stores blobs it cannot read - genuine protection even if the host is compromised. The desktop app offers both Rich Text and Markdown editors, extended by a plugin ecosystem, custom themes, and an Extension API for writing your own scripts; a Web Clipper for Chrome and Firefox captures full pages or screenshots straight into notebooks. Joplin Server ships as a Docker image with SQLite for evaluation and PostgreSQL for production, offers a filesystem storage driver for large content, and includes multi-user support and note sharing - all free under AGPL-3.0 when self-hosted. Notes stay in an open format, so the exit path always exists.
Apache SkyWalking
An open-source application performance monitoring platform for microservices, Kubernetes, and service meshes, Apache SkyWalking draws the live service map and ties slow requests to their traces, logs, and metrics. Agents cover Java, .NET Core, PHP, Node.js, Go, Lua, Rust, C++, browser JavaScript, and Python, and OpenTelemetry, Zipkin, Prometheus, Zabbix, and Telegraf data can be ingested too. Start at the service topology map, follow a request through the trace waterfall, then drill into the instance and its API dependencies. When the cause is inside the code, trace profiling, async-profiler, Go pprof, eBPF, and network profiling render flame graphs and process graphs in the same console. The Rover eBPF agent profiles Kubernetes workloads for CPU and network problems, and Istio and Envoy service meshes, including Istio Ambient, report into the same dashboards. Alarm rules target a service, deployment, or API, and alarms and telemetry can be forwarded to third-party systems. Metric and log analysis rules hot-update at runtime without a restart, and a live debugger shows what each rule stage receives and produces. An AI assistant answers plain-language questions with charts, topology, and traces from live data, using an OpenAI-compatible or Amazon Bedrock model you configure, and an MCP connection serves your own AI client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Appwrite
Backed by over 56,000 GitHub stars and a growing ecosystem of client and server SDKs covering Flutter, React Native, Swift, Kotlin, Python, Node.js, Deno, and more, Appwrite provides a complete backend platform that replaces Firebase and Supabase with a fully self-hostable architecture. The authentication module supports email and password, phone OTP, magic links, OAuth providers including Google, GitHub, Apple, and Facebook, anonymous sessions, and JWT token management with configurable session policies. The database service provides a document-oriented store with collections, indexes, query filters, pagination, and real-time subscriptions that push changes to connected clients instantly via WebSocket. The storage service handles file uploads with built-in image manipulation including cropping, resizing, format conversion, and compression, served through a CDN-ready URL structure. Serverless functions execute custom backend logic triggered by HTTP requests, scheduled cron jobs, or database events, with runtime support for Node.js, Python, PHP, Ruby, Dart, Swift, Kotlin, and Java. The messaging service enables push notifications, SMS, and email delivery through configurable providers including APNS, FCM, Twilio, Vonage, Mailgun, and Sendgrid. Team management with role-based permissions, webhook integrations, and health monitoring APIs complete the platform. The admin console provides a web-based dashboard for managing all services, monitoring usage metrics, and configuring project settings. Deployment runs via Docker Compose with MariaDB for metadata and configurable storage adapters. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 3-Clause licensed.
Marimo
Marimo is a reactive Python notebook that treats cells like spreadsheet formulas: change one cell or interact with a UI widget and every dependent cell automatically re-executes, eliminating the hidden state bugs that make traditional notebooks unreliable. Backed by over 22,000 GitHub stars, notebooks are stored as pure Python files with PEP 723 inline metadata, making them Git-diffable, importable as modules, executable as CLI scripts with parameterized arguments, and testable with PyTest. Built-in SQL cells query Polars, Pandas, PyArrow, DuckDB, SQLite, PostgreSQL, and MySQL databases, with results automatically flowing into the reactive dependency graph. The AI-native editor provides GitHub Copilot autocomplete, context-aware assistants that access live runtime variables, inline code edits powered by configurable models from OpenAI, Anthropic, or local Ollama instances, and a pair mode that lets external AI agents connect over WebSocket. Notebooks become read-only interactive web applications with marimo run, collaborative authoring environments with marimo edit, or embedded flows inside existing FastAPI applications through ASGI middleware. Gallery mode serves multiple notebooks from a single instance with an auto-generated index page. The Docker image ships with SQL support, token-based authentication, health check endpoints at /health and /api/status, and configurable WebSocket or SSE kernel transport for proxy compatibility. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Marmot
Cataloging tables, topics, queues, and APIs across fragmented data stacks usually demands heavyweight enterprise governance suites, yet Marmot delivers fast full-text asset discovery and AI-ready metadata context in a single self-hosted service. Data engineering and platform teams use its 71 official plugins to automatically ingest schemas, run histories, and dependencies from Apache Kafka, Airflow, Iceberg, Superset, PostgreSQL, BigQuery, and AsyncAPI specifications without moving raw table rows or message payloads. From the web interface, analysts can run structured boolean queries, filter assets by custom tags or PII classifications, and inspect column-level schemas in seconds. Interactive upstream and downstream lineage graphs let engineers trace how events flow from message brokers into warehouse tables and BI dashboards so they can assess what breaks before renaming a column or deprecating an endpoint. Shared business glossaries, bidirectional ownership assignments, and curated data product bundles ensure every department speaks the same language and knows exactly which team maintains each pipeline. Through the built-in Model Context Protocol server, AI assistants in Cursor, Claude Desktop, and LibreChat can invoke tools like discover_data, find_ownership, and lookup_term to answer natural-language questions against live catalog metadata instead of guessing. Platform administrators can also manage catalog resources declaratively using the REST API, CLI, Terraform provider, or Pulumi integration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
CKAN
CKAN lets governments, research institutions, and companies publish data as a searchable catalog, where every dataset carries its description, license, tags, and downloadable files. Organizations own their datasets, and members, editors, and admins get different rights, so a dataset can stay private until someone with publishing rights releases it. Visitors narrow results with faceted filters on tags, formats, and organizations, or write fielded queries with wildcards and fuzzy matching. Resource pages preview spreadsheets in a grid and, when the data fits, as maps and charts, and they also display images, PDFs, and HTML. The DataStore keeps tabular resources as queryable tables, serving filtered rows with range conditions and nested AND/OR logic. Everything the web interface does is also available through the Action API. Groups gather related datasets, and custom metadata fields extend each record. Per-dataset activity streams document how data changes, and follow buttons feed a personal news feed. Files can be stored on local disk or, with extensions, in S3, Google Cloud Storage, or Azure Blob Storage. Extensions add geospatial search, harvesting for federated portals, multilingual metadata, and more chart types, and themes restyle the portal to match your brand. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
BrightBean Studio
BrightBean Studio provides an open-source social media management suite that centralizes multi-account publishing, visual calendar scheduling, idea tracking, and cross-channel analytics into a unified self-hosted dashboard. Content creators and marketing agencies draft cross-network posts within an interactive composer that provides real-time channel previews and custom caption overrides for individual networks. The visual drag-and-drop calendar maps publishing queues across recurring weekly time slots, while an integrated Kanban board organizes brainstorming concepts from unassigned ideation to production-ready schedules. Community managers monitor unified social inboxes aggregating direct messages, mentions, and comments across Facebook, Instagram, LinkedIn, YouTube, TikTok, Bluesky, Threads, Pinterest, and Mastodon. Team leads configure multi-tier approval workflows with threaded editorial comments and issue passwordless 30-day magic links so external clients can approve drafts without registration. Built-in performance dashboards aggregate engagement rates, follower growth curves, and watch time metrics directly from native network APIs without relying on third-party data aggregators. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Home Assistant
Your house already has lights, locks, sensors, thermostats, and speakers from many brands, and Home Assistant gives them one local control room with no vendor cloud in the loop. To close the shutters when the outdoor temperature holds above 25 °C, or to be alerted when the garage door is left open, build the routine in the visual editor: When, And if, Then do. Scenes, scripts, and blueprints package it for reuse, and run traces show what it did. More than 1,500 integrations cover Zigbee, Z-Wave, Matter, Thread, MQTT, ESPHome, Bluetooth, Hue, and Sonos, and network discovery offers known devices for one-step setup. To see the house at a glance, drag tile, thermostat, gauge, graph, and map cards into a dashboard, then put it on a TV with Home Assistant Cast. The Energy dashboard answers where the power goes, drawing solar, grid, battery, gas, and water as one distribution diagram with cost totals and per-appliance tracking. To talk to the house, use Assist: natural-language commands, wake words, and custom sentences run locally or through Home Assistant Cloud. The map panel shows who is home, plotting people against zones such as Home, Work, and School from the iOS and Android companion apps. Areas and labels keep large setups tidy, and multi-factor authentication guards each account. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Airbyte
Backed by over 21,800 GitHub stars and more than 1,000 community contributors, Airbyte has become the standard open-source data movement platform, powering ELT pipelines for organizations ranging from startups to Fortune 500 enterprises. The platform provides 600+ pre-built connectors covering PostgreSQL, MySQL, MongoDB, Snowflake, BigQuery, Redshift, S3, Salesforce, HubSpot, Stripe, Shopify, Google Analytics, and hundreds of additional APIs, databases, and SaaS applications. The no-code Connector Builder lets practitioners create new source connectors in minutes by pointing at an API documentation URL, while the Python CDK enables custom connectors with full programmatic control for complex authentication flows and pagination strategies. Airbyte's AI agent capabilities include the MCP Gateway for Model Context Protocol integration, the open-source Agent SDK compatible with pydantic-ai, LangChain, OpenAI Agents, and FastMCP, and a Context Store that lets AI agents query business data across connected systems without runtime API stitching. Change Data Capture streams incremental updates from PostgreSQL, MySQL, and SQL Server using Debezium, while dbt integration handles post-load transformations within the pipeline. Self-hosted deployment uses Kubernetes via the abctl CLI tool, which bootstraps a local kind cluster with a single command, or Helm charts for production clusters with Keycloak OIDC authentication and secrets management through AWS Secrets Manager, Google Secrets Manager, or HashiCorp Vault. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. ELv2 licensed with MIT-licensed connectors.
Yubal
Paste any YouTube Music album, playlist, or track link into Yubal and get back a clean, fully tagged music library instead of a pile of video files. Tracks land in Artist and Year-Album folders with numbered filenames, cover art, and synced .lrc lyrics files, while playlists become M3U files that reference the album copies so a song appearing in ten playlists is stored exactly once. Subscribe to playlists and a cron-driven scheduler pulls new tracks into your library automatically on the schedule you set. The web interface shows real-time progress and a job queue that works on mobile, with automatic retries on failed downloads and graceful cancellation when you change your mind. Lyrics come from lrclib.net with a YouTube Music fallback, ReplayGain tags keep playback volume consistent across tracks and whole albums, and audio arrives as opus, mp3, or m4a, downloaded directly when possible and transcoded otherwise. Finished libraries drop straight into Navidrome, Jellyfin, or Gonic, and a browser extension for Firefox and Chrome queues downloads or subscriptions from the YouTube page you are already browsing. Optional cookie support unlocks private playlists, Liked Music, and age-restricted content, and a companion CLI downloads and inspects metadata from the terminal. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
MISP
MISP is an open source threat intelligence platform where analysts log indicators and incidents, see how they connect, and share them with trusted organizations. Each case is an event holding attributes and structured objects such as files, network connections, and email messages, with Markdown reports beside the machine-readable data. A correlation engine links events that share values, including fuzzy-hash and CIDR matches, and warning lists flag benign values before they cause false positives. Taxonomies and galaxies tag events with TLP levels, threat actors, malware families, and MITRE ATT&CK techniques. Analysts explore relationships in an event graph and a correlation graph with a timeline, and build drag-and-drop dashboards with maps and ATT&CK heatmaps. Sharing groups control who sees which event, and instances synchronize with partner organizations with distribution settings down to a single attribute. Free-text, URL, bulk, and STIX imports fill the database, and exports reach Suricata, Snort, Zeek, OpenIOC, CSV, STIX 1 and 2, and RPZ zones. A REST API, the PyMISP library, expansion modules, and workflows enrich data and automate publishing. ZeroMQ and Kafka streams announce every change to connected tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
OrcaQ
For developers and database administrators who want a full database IDE inside the browser without installing separate desktop clients on every machine, OrcaQ provides a unified workspace for PostgreSQL, MySQL, MariaDB, Oracle, SQLite, Cloudflare D1, Turso, and Redis. Engineers organize connections into named workspaces with SSH bastion tunneling, granular SSL configuration, and color-coded environment tags whose strict mode requires explicit confirmation before executing destructive mutations against production databases. The Quick Query data grid lets users filter, sort, paginate, and edit table rows inline while jumping across foreign-key relationships and inspecting table DDL metadata. When writing complex multi-statement SQL, the Raw SQL Editor provides context-aware autocomplete, query variables, nested script folders, and visual EXPLAIN execution plan analysis. Database architects can render interactive entity-relationship diagrams for single tables or entire schemas, compare two database schemas side by side to generate safe migration scripts, and manage Redis keys across string, hash, list, set, and sorted-set structures in a dedicated workbench. PostgreSQL administrators also gain a visual role-permission matrix, real-time instance health monitoring for active sessions, locks, and replication lag, native backup and restore job tracking, and an optional AI Orca Agent that drafts queries and detects anomalies while requiring human approval before any data modification runs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Kener
A polished public status page without Statuspage prices or a heavyweight observability suite: Kener is a status and uptime monitoring system built with SvelteKit and Node.js. It runs 11 monitor types - API, Ping, TCP, DNS, SSL certificate, SQL query, Heartbeat, gRPC, and GameDig game-server checks among them - each with configurable intervals and thresholds. Incident management covers the full lifecycle: structured timelines from investigation through resolution, acknowledgements, and subscriber-visible updates, plus maintenance windows with RRULE-based recurring schedules and automatic status transitions. Notifications reach email, Slack, Discord, and custom webhooks through trigger-based workflows with template-driven messaging. One instance can serve multiple branded status pages - per product, team, or region - with custom logos, colors, and CSS, localization into 21 languages, timezone-aware displays, and server-rendered pages that stay fast and SEO-friendly. Operations tooling includes role-based access for teams, API key management, a secrets vault, analytics integrations (Google Analytics, Plausible, Umami, and others), and a REST API with 17+ endpoints for automating incidents and monitors from CI/CD. MIT-licensed; Docker deployment with Redis, SQLite by default, PostgreSQL or MySQL for production.
PinePods
PinePods delivers a centralized, self-hosted podcast ecosystem that liberates personal listening histories, audio files, and show subscriptions from commercial streaming walled gardens. Users can discover new shows through built-in search connectors across Podcast Index, iTunes, and YouTube, streaming audio and video episodes with variable playback speed, chapter markers, and synchronized transcripts. A persistent queue and custom playlist builder keep media sequences orderly across web browsers, desktop installations, and mobile clients with native CarPlay and Android Auto support. Built-in gPodder server synchronization enables seamless cross-device progress tracking with third-party podcast apps like AntennaPod. Automatic episode downloader engines monitor subscribed feeds, archiving new releases to local server storage according to customizable retention rules and storage quotas. Multi-user authentication secures household access through OIDC single sign-on and two-factor TOTP verification, while an integrated terminal client lets command-line enthusiasts manage queues directly over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Fluxer
Fluxer gives friends, gaming groups, and private communities their own self-hosted instant messaging and VoIP platform that replaces Discord with private text channels, voice rooms, video calls, and screen sharing. Members can chat one-on-one in direct messages, form multi-person group conversations, or organize large community servers into categorized text and voice channels with threaded replies, reactions, and typing indicators. When a conversation moves to voice, participants can join low-latency audio and video rooms from multiple devices simultaneously, share application windows or full screens, and rely on built-in noise suppression and echo cancellation for clear calls. Rich media support allows users to share file attachments, preview embedded links, search animated GIFs through KLIPY, and upload custom community emojis and stickers. Server administrators control access through role-based permission hierarchies, member timeouts, kicks, bans, and detailed moderation audit logs that track every configuration change across the community. Integrated full-text search lets members quickly locate historical messages, code snippets, and shared files across every channel they can access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
ERPNext
With over 37,800 GitHub stars and active development since its first release in 2008, ERPNext is the most-starred open-source ERP system — delivering accounting, inventory management, manufacturing, CRM, project tracking, asset management, HR, and point-of-sale capabilities through a unified web interface built on the Frappe Framework's metadata-driven architecture. The accounting module handles multi-company consolidation, multi-currency transactions, tax templates for GST and VAT, bank reconciliation, and automated journal entries with real-time profit and loss, balance sheet, and cash flow reporting. Manufacturing covers production planning with multi-level bill of materials, work order scheduling, capacity planning, subcontracting, and quality inspection at each production stage. Inventory tracks stock across multiple warehouses with batch and serial number tracing, automatic reorder levels, landed cost calculations, and perpetual inventory valuation using FIFO or moving average methods. The CRM module manages leads, opportunities, and customer communication with email integration, while project management tracks tasks, timesheets, and Gantt-based scheduling with budget controls. Custom applications extend functionality through the Frappe ecosystem without forking the core codebase, and the REST API enables integration with payment gateways, shipping providers, and third-party services. Deployable via Docker Compose or the bench CLI tool with MariaDB and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
KillBill
Kill Bill handles the complete subscription billing lifecycle from plan definition through invoice generation to payment collection across any gateway, with 15 years of Fortune 500 production use and 5,600+ GitHub stars behind it. Plans, trials, add-ons, and pricing tiers live in a versioned XML catalog that propagates changes without code deploys. The multi-phase subscription engine manages trial periods, promotional discounts, evergreen billing, usage-based metering, and hybrid pricing models with automatic proration on plan upgrades and downgrades. Automated invoice generation calculates charges, applies credits and adjustments, and triggers payment collection through pluggable gateways including Stripe, Adyen, Braintree, PayPal, and CyberSource. The Java plugin framework extends every billing domain with custom logic for tax calculation via Avalara AvaTax or Vertex, fraud detection through Accertify or Feedzai, and ERP integration without modifying the core. The Kaui admin dashboard gives finance and operations teams account management, subscription controls, invoice views, payment configuration, billing timeline visualization, MRR tracking, advanced search, and full audit history with object-level change tracking. Multi-tenancy isolates billing data across thousands of brands with tenant-specific catalogs, payment configs, and RBAC policies. REST APIs expose every operation with webhook notifications for downstream integration. Deploys via Docker Compose on MySQL or PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Plane
The most-starred open-source project management platform on GitHub with over 55,000 stars, Plane delivers what Jira, Linear, Monday, and ClickUp charge thousands per year for — issue tracking, sprint planning, documentation, and AI-powered workflows in one unified workspace that you own and control entirely. Work items feature a rich text editor with file uploads, sub-properties, custom states, priorities, labels, assignees, and cross-referencing, organized across five customizable layout views (list, board, table, spreadsheet, Gantt) with Command-K navigation for instant access to anything. Time-boxed Cycles provide sprint planning with automatic burn-down charts, velocity tracking, and scope change detection, while Modules break complex projects into manageable deliverables with progress aggregation. Built-in Pages combine AI-powered documentation with rich formatting, image embedding, and one-click conversion of notes into actionable work items. The AI layer reads across every project, cycle, document, and thread in the workspace — agents take real assignments, triage incoming requests, assign owners, track blockers, and ship status updates automatically. Native integrations connect GitHub, GitLab, Slack, Sentry, Figma, and 50+ tools with bidirectional issue sync and PR tracking, while import pipelines migrate entire workspaces from Jira, Linear, Asana, ClickUp, or Monday in minutes. The REST API with OAuth 2.0, HMAC-signed webhooks, typed SDKs in Node.js and Python, and a native MCP server enable custom automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.