Broker exports pile up as spreadsheets nobody reads; TradeTally turns them into a trading journal that shows how you actually trade. Import trades from Lightspeed, Charles Schwab, ThinkorSwim, IBKR, E*TRADE, and ProjectX across stocks, options, and futures. Candlestick charts mark each entry and exit, and the trade list adds net and gross P&L, confidence, quality grades, and sectors. Break performance down by hold time, weekday, symbol, strategy, or trade size, and use R-multiple views to judge stop-loss discipline. A color-coded calendar shows daily and weekly results. Every session gets pinned notes, market bias, key levels, watchlists, tags, and templates. Behavioral reports flag revenge trading, loss aversion, and missed exits. Watchlists follow live prices and news, price alerts arrive by email or browser, and earnings dates are listed for the symbols you follow. AI assistants suggest improvements from your own data, achievements and leaderboards reward good habits, and a companion iOS app mirrors the web features. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Sensors watch your infrastructure so your engineers do not have to watch it at 3 a.m. StackStorm is event-driven automation: Python sensors poll or listen to external systems (monitoring alerts, ticket updates, chat messages, webhooks, timers) and inject each event as a trigger. Rules match triggers against criteria you define and fire the response automatically, mapping the event payload straight into action parameters. Actions do the work: SSH commands, REST calls, and integrations for AWS, Docker, OpenStack, Puppet, Jira, Slack, and hundreds more from community packs, or your own scripts wrapped with a few lines of metadata. Multi-step responses become workflows that sequence actions with conditions, branching, and data passed between tasks, handling everything from disk-full remediation to full deployment pipelines. Everything bundles into packs, the shareable units that group sensors, rules, actions, and workflows per product or per automation, installable from the StackStorm Exchange or your own Git repositories. The web UI runs actions, explores workflow executions down to individual task results in real time, manages rules, and installs packs, while every execution, manual or automated, lands in an audit trail with its triggering context. ChatOps aliases even let the team trigger approved automations from chat. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Suparagent turns a single server into a workspace of named AI coworkers that each have a job, a memory, and a folder of their own. Chat with an agent in the browser, pick an engine per conversation, and watch replies stream in as the sidebar keeps every thread searchable. Approval modes decide how much freedom an agent gets: ask first, accept edits, or plan only, so nothing touches a file or runs a command without your say. Routines send a prompt to an agent on chosen weekdays, through a webhook, or on demand, and every run lands in its own conversation. A kanban board with month, week, and upcoming views tracks tasks by owner and priority, and a canvas builds multi-step workflows from schedule triggers, model steps, agent steps, conditions, and approvals. Agents save notes you can edit, delegate to specialists in shared rooms, and reuse saved skills and templates. A usage panel totals turns and tokens by conversation, engine, and day, with a CSV export. Invite teammates with a one-time link, pair a phone, and keep agents working when your laptop is closed. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Give your team a shared chat workspace where AI bots sit next to people, answer questions, and pick up recurring work. Organize conversations into pods with channels and threads, and keep a private personal pod for each member. Mention a bot with @ to hand it a task, mention several and each one replies, or let a bot ask another bot for help. Every bot gets its own name, avatar, instructions, and model, picked from OpenRouter, Anthropic, OpenAI, Google Gemini, or any OpenAI-compatible endpoint you add. Connections link a pod to GitHub, Linear, Stripe, Notion, Sentry, Jira, any MCP server, or any HTTP API, and bots act through them with approvals where you want a human check. Routines run a bot on a schedule, a webhook, or a GitHub event, then post the result to the pod channel. Computers give bots an isolated machine for heavier jobs, and web search lets them look things up and cite pages. A Usage page breaks down what bots cost by bot, model, and pod. Use it for a support desk, an engineering ops room, a morning briefing, or a shared research assistant. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Search engines normally rent you answers from an index you cannot inspect; YaCy installs the entire machine on your server: the crawler, the index, the ranking, and the search page itself. Run it as a public web search portal with faceted results, topic clouds, and image search, or point the crawler at your intranet where a network scanner discovers HTTP, FTP, and file servers for a private enterprise search. Expert crawl jobs take start URLs, sitemaps, or link lists with depth limits, per-domain caps, and freshness rules, and the scheduler keeps re-crawling so results stay current. Peers exchange index data over a built-in peer-to-peer protocol, so a fresh installation can answer from the shared network index before its own crawl has seen much of the web. Private modes cut that connection for local-only answers computed on your hardware alone. The index browser walks stored hosts and draws link graphs of what the crawler found. Every page in the interface has an XML or JSON twin for automation, and the portal design tools restyle the result page for embedding in your own site. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Open Lovable from the Firecrawl team delivers the first truly open-source alternative to Lovable.dev — a chat-driven AI copilot that takes any website URL and regenerates it as a complete, editable React application with TypeScript and Tailwind CSS in seconds. The pipeline combines Firecrawl's intelligent web scraping for JavaScript-rendered pages and single-page applications with your choice of AI provider — Claude, GPT-4, Google Gemini, or Groq — to analyze HTML structure, extract layouts and styling, decompose pages into proper React components, and generate production-ready code following modern best practices. Live preview runs in a secure sandbox environment using Vercel Sandbox with OIDC authentication or E2B Cloud, letting you see results immediately and iterate through natural language chat to request changes like Tailwind migration, componentization, SEO improvements, accessibility fixes, or custom form implementations. The optional Morph LLM fast-apply path accelerates small edits by applying diffs directly without full regeneration. The provider-agnostic architecture means you control costs by routing to different models — use Groq for fast iterations and Claude for complex layouts. Project structure follows Next.js conventions with organized app, components, atoms, styles, utils, and hooks directories. Deploy via pnpm with Node.js 18+ requiring only a Firecrawl API key, one AI provider key, and a sandbox provider configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by over 8,700 GitHub stars and OpenID Connect certification, Pocket ID delivers what enterprise identity platforms like Keycloak provide but without the configuration complexity — a passkey-only OIDC provider purpose-built for homelabs and small deployments. The core design decision is radical simplicity: no passwords exist in the system, only WebAuthn-based passkeys using hardware security keys, TouchID, FaceID, or device PINs, making phishing attacks structurally impossible rather than merely discouraged. The Go backend built on the Gin framework serves a compiled SvelteKit frontend as static assets, running as a single Docker container with SQLite as the default database and optional PostgreSQL for larger deployments. User management supports manual creation, signup links, and open registration, with group-based access control that restricts which OIDC clients each group can access and attaches custom claims for downstream role mapping. LDAP synchronization pulls users and groups from OpenLDAP or Active Directory, while SCIM support enables automated provisioning from compatible identity sources. Federated client credentials handle machine-to-machine authentication for service-to-service communication patterns. The audit system logs every authentication event with GeoIP enrichment, sends email notifications for sign-ins from unknown devices, and provides one-time login codes for accessing accounts from devices without passkey support. TLS with HTTP/2 is built in, PKCE adds code exchange protection, and OpenTelemetry provides tracing and metrics integration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

Your router calls it "Unknown device" at 192.168.1.23; Vedetta calls it the kitchen light and shows its work. Vedetta is a Home Assistant app that scans your local network, identifies what each device actually is, and explains every identification. One scan lists every device it can find with presence and latency history, in tile or list view, light or dark, on a computer or a phone. Behind each name sits the recognition engine: it weighs many weak clues together, counts a repeated fact once, groups devices by family, and shows certainty honestly, keeping anything doubtful in Other rather than inventing a label. Tap the info marker beside a name, brand, or type and a pop-up lists every clue, its weight, and the hypotheses that were rejected. Names or rooms you set by hand are never overwritten by later scans, and sleeping phones are remembered instead of flickering in and out. Choose from three search levels depending on how hard you want it to probe, let the nightly deep search refresh the picture, and use the network doctor to spot duplicate addresses, repeated restarts, devices that drop together, or a slowing gateway. It can also publish what you choose to Home Assistant and MQTT, display devices from other networks your Home Assistant already sees, and mask exports before they leave the machine. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Project AIRI is the most popular open-source AI companion platform — a self-hosted recreation of Neuro-sama that brings AI-powered virtual characters into your world across web, desktop, and mobile. The system renders Live2D, Spine, and VRM 3D character models with auto-blink, eye tracking, and lip-sync driven by real-time voice synthesis, while the xsAI abstraction layer connects to 40+ LLM providers including OpenAI GPT-4, Anthropic Claude, Google Gemini, DeepSeek, and local models via Ollama and OpenRouter. Built from day one on WebGPU, WebAudio, Web Workers, WebAssembly, and WebSocket technologies, the browser version runs entirely client-side with PWA offline support while the server runtime enables persistent memory via PostgreSQL with pgvector embeddings and DuckDB WASM for client-side storage. The Minecraft agent plays autonomously using mineflayer with pathfinding, and a Factorio integration provides cooperative gameplay. Social integrations deploy your companion as a Discord bot joining voice channels, a Telegram bot, and a Twitter/X agent posting and replying autonomously. The desktop Stage Tamagotchi app provides an always-on-screen companion for Windows and macOS, while Stage Pocket brings the experience to mobile. Voice features include client-side speech recognition via VAD, multiple TTS providers including ElevenLabs, and screen vision capabilities. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Get ready to transform your audience into a thriving empire with Ghost, the ultimate toolkit for the modern creator on a mission to monetize their mojo. Picture this: a sleek website that screams 'you', bursting with content that captivates, newsletters that fly straight into inboxes, and a subscription service that turns followers into financiers. Wave goodbye to bland and hello to a smorgasbord of stunning, free themes that you can finesse to fit your unique flair. But wait, there's more! Ghost's editor is like the Swiss Army knife for content connoisseurs—slick, sophisticated, and oh-so-simple to use. Unleash your creativity with multimedia storytelling that includes everything but the kitchen sink—galleries, chucklesome gifs, videos, podcasts, you name it. And when it's time to hit 'send', those built-in newsletters make sure your words woo your audience without breaking a sweat. Want to play the mysterious type? Ghost's got you covered with native signup forms that turn casual lurkers into committed members. And because we all love a good sneak peek, Ghost dishes out the deets with analytics that spill the tea on who's loving your work the most. Plus, with tantalizing offers and promotions, you'll have new subscribers flocking like seagulls at a beach picnic. All this, hosted on RepoCloud, where the cost is as tiny as your chances of being bored. So, what are you waiting for? Let's Ghost!

Estimators, planners, and site teams work from one project record in OpenConstructionERP, a self-hosted construction workspace that carries a job from priced bill of quantities through tender, schedule, and site diary. The BOQ editor organizes sections, positions, and reusable assemblies with overhead, profit, VAT, and contingency markups, validates against DIN 276, NRM, and MasterFormat, and exports to PDF, Excel, CSV, or GAEB XML. Pricing draws on 120,000+ cost items across nine cost bases and a 7,000+ resource catalog, with regional price adjustment and semantic search. Quantities come from PDF plans measured on screen or from RVT, IFC, DWG, and DGN models; a 3D viewer filters elements and links them to BOQ positions, clash detection checks federated models, and an AI estimator drafts positions from text, photos, or drawings via the LLM you connect. Gantt schedules show dependencies and critical path, while earned value and S-curves track budget against actual. Tender comparison lines up subcontractor bids, and contracts, variations, and interim payment claims stay tied to the contract sum. On site, daily diaries with health and safety tracking, punch lists, and a carbon module totaling embodied emissions from the BOQ keep field work in the same system. The interface speaks 44 languages with right-to-left support, 293 guided cases teach real workflows on a demo project, and a REST API, webhooks, and module builder extend it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Websurfx aggregates results from multiple search engines into one private, ad-free interface that never tracks your queries. Written in Rust, the backend provides memory safety against buffer overflows and data races at the language level while handling concurrent requests across upstream providers like DuckDuckGo and Searx. A built-in re-ranking algorithm scores and merges results by relevance, producing a unified page that draws from many sources while appearing as one coherent search. Safe-search filtering operates across four levels from unrestricted to complete content blocking, with regex-based filter lists for parental controls in schools and organizations. Upstream requests route through configurable proxy chains or Tor, preventing search providers from correlating your queries with a specific IP address. Four Docker image variants target different caching strategies: hybrid Redis plus in-memory for maximum throughput, Redis-only, in-memory-only, or zero-persistence for environments where cached queries must never touch disk. The Lua configuration file controls engine selection, request timeouts, rate limiting thresholds, and production-mode delays that throttle upstream traffic to prevent abuse. Quick-result widgets handle calculations, currency conversions, and unit transformations inline without external redirects. Image search capabilities serve visual discovery for designers and researchers who need media results without surveillance. Runs on a RepoCloud VPS with dedicated resources and full root access. AGPL-3.0 licensed.

One statically-compiled Go binary over PostgreSQL, no ORM, no framework, static assets embedded in the executable: Miniflux is the minimalist, opinionated feed reader. The opinions are the feature: page layout, fonts, and colors are tuned for reading, and everything else is treated as noise. It consumes Atom, RSS, and JSON Feed formats with OPML import/export, organizes articles with categories and bookmarks, fetches original full-text content for summary-only feeds, and provides Postgres-powered full-text search. Privacy work happens automatically: pixel trackers are stripped, tracking parameters removed from URLs, a media proxy blocks third-party tracking, referrers are never forwarded, and there is zero telemetry. Navigation is keyboard-first - j/k through items, o to open, f to star - with touch gestures on mobile. Podcast, video, and music enclosures are supported, and YouTube videos play inline. Over 25 integrations save articles onward to Wallabag, Readwise Reader, Pinboard, Linkding, Instapaper, Notion, Telegram, Matrix, Ntfy, and more, plus webhooks and a REST API with Go and Python clients; the Google Reader API endpoint supports existing mobile reader apps. Authentication spans local passwords, passkeys (WebAuthn), Google OAuth2, OpenID Connect, and reverse-proxy headers. It is Apache 2.0 licensed, translated into 20 languages, and updates feeds on an internal scheduler.

Chat with your own local language models from a clean, fast browser interface. Ollama GUI gives every model on your Ollama server a proper home: streaming replies you can stop, regenerate, or edit, with each edit saved as a version you can flip back to. Reasoning models show their thinking in a collapsible block, and you pick between thinking on, off, or an effort level. Attach images for vision models or drop in text and code files, and answers render with highlighted code, tables, and math. Pull models from a searchable catalog with live progress, check their capabilities and context length, unload them from memory, or delete them in a click. Chats are grouped by date, pinned, archived, renamed, titled automatically, and searched across every message from a command palette. System prompts and generation settings apply globally, per model, or per chat. Light and dark themes, locale-aware dates, and JSON or Markdown export round out the daily routine. Run one shared front end for a whole team or homelab, and every browser keeps its own private history. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With nearly 5,000 GitHub stars and a Hacker News launch that garnered 147 points, Colanode delivers the first genuinely local-first alternative to both Slack and Notion in a single self-hosted workspace — writing every operation to a client-side SQLite database before syncing to your server, so teams work at full speed offline, on planes, or through intermittent connections without ever losing a draft. The real-time chat system provides channels and direct messages with instant delivery via WebSocket, while the rich text editor offers Notion-style block-based pages for documents, wikis, meeting notes, and knowledge bases with headings, code blocks, embeds, and nested hierarchies. Customizable databases organize structured data with custom fields and three dynamic views — table for spreadsheet-style browsing, kanban for visual workflow boards, and calendar for time-based planning. Conflict-free Replicated Data Types powered by Yjs handle concurrent editing across pages and database records: multiple users modify the same document simultaneously and the system merges changes automatically without manual conflict resolution. File management supports upload, sharing, and organization within workspaces using pluggable storage backends including local filesystem, S3-compatible services, Google Cloud Storage, and Azure Blob Storage with TUS resumable uploads for large files. The server runs Fastify with Zod validation on Node.js 20+, persists to PostgreSQL with pgvector extension, uses Redis for event broadcasting, and deploys via a single Docker image. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Trusted by over 60,000 organizations worldwide with more than 8,100 GitHub stars since 2010, Graylog has established itself as one of the fastest paths from raw log data to operational visibility, delivering centralized log management, security analytics, and compliance auditing through a purpose-built web interface with sub-second search at scale. The platform ingests logs from virtually any source via syslog, GELF, Beats, raw TCP/UDP, HTTP, CEF, IPFIX, and Netflow protocols, processing each message through configurable pipelines that parse fields, apply transformations, enrich events with GeoIP data from MaxMind or IPinfo lookup tables, and route messages to appropriate streams based on content rules. OpenSearch handles full-text indexing and storage with dynamic shard sizing that automatically calculates appropriate sizes from available node memory, while MongoDB stores configuration metadata including user accounts, roles, dashboards, alert rules, and pipeline definitions. The alerting system integrates with Slack, PagerDuty, and email with customizable notification templates and Replay Search links for immediate investigation context. Version 7.0 introduced MCP server integration for connecting preferred LLMs to perform AI-assisted log analysis and automation, while version 7.1 added Sigma detection rule import from private GitHub, GitLab, and Bitbucket repositories for detection-as-code workflows. The Sidecar agent management system centrally configures and deploys Filebeat, Winlogbeat, and nxlog collectors across infrastructure from the Graylog web interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. SSPL licensed.

The Kubernetes project's own answer to cluster management UIs: maintained under SIG UI governance, Headlamp's roadmap tracks Kubernetes releases and its design philosophy reflects community needs rather than a vendor's product strategy. The React interface provides full read-write capabilities adapted to each user's RBAC permissions — delete, scale, edit, and restart buttons appear only when the authenticated user holds the corresponding cluster role, preventing accidental unauthorized actions. Multi-cluster support surfaces workloads across development, staging, and production from a single view without context switching. The plugin architecture drives extensibility through a curated catalog: an AI Assistant plugin answers natural-language cluster queries and performs operations via configurable LLM keys, Flux handles GitOps, Karpenter manages nodes. Integrated terminals provide browser-based exec access to running pods, live log streaming follows container output with filtering, and the YAML editor displays inline Kubernetes API documentation alongside resource definitions. Deployment creation forms let you configure containers, environment variables, volumes, and replicas without writing manifests. Side-by-side cluster comparison views surface differences in workload distribution. Works with any distribution: EKS, GKE, AKS, Minikube, Docker Desktop. Helm chart installation via the Headlamp repository with images on GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

PullMD turns any URL or file you point it at into clean Markdown your AI agent can actually afford to read. Paste a web page and get back tidy body text with metadata tucked into frontmatter instead of navigation soup and cookie banners. Send it a Reddit or Hacker News thread and it returns the full comment tree with depth and count under your control. Hand it a PDF, Word file, PowerPoint, spreadsheet, or EPUB and it hands back Markdown, with an optional OCR tier for stubborn table-heavy documents. YouTube links come back as title, description, and a transcript with clickable timecodes, no API key required. The query-scoped mode answers a question about a long page by returning only the relevant sections, typically cutting 70 to 95 percent of the tokens. Every conversion gets a short share link that re-fetches the source when it goes stale and serves the last good snapshot if the original dies. Agents connect through the built-in MCP server with OAuth 2.1, a plain REST API, or a downloadable Claude Code skill, while you keep history, an archive, and cache statistics in the web app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.