With 37,400+ GitHub stars and active daily development by the Harness engineering team, Gitness is the open-source developer platform that ships Git hosting, container-native CI/CD pipelines, a Docker-compatible artifact registry, and cloud developer environments in a single Go binary consuming approximately 100 MB of RAM — compared to GitLab's 4+ GB minimum footprint. Born as the next generation of Drone CI, Gitness inherits Drone's battle-tested pipeline engine while adding complete source code management with pull requests featuring threaded code review comments, suggested changes, required reviewer approvals, and merge strategies including squash and rebase. Branch protection rules enforce mandatory pull requests, minimum peer reviews, passing status checks, and force-push blocking. Pipelines use Drone-compatible YAML syntax with stages, steps, and service containers, triggered automatically on code changes with results displayed directly in pull request checks. The built-in container registry eliminates the need for separate Harbor or Docker Registry deployments, supporting Docker image push and pull plus Helm chart storage. Gitspaces provide on-demand remote development environments configured via industry-standard devcontainer.json files. Encrypted secrets management with Gitleaks-powered secret scanning blocks commits containing hardcoded credentials. One-click migration imports existing GitHub Organizations and GitLab Groups, automatically converting GitHub Actions and GitLab CI pipelines to Gitness YAML. The REST API with OpenAPI specification enables programmatic management of all resources. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Production AI agents fail in quiet ways, and Latitude records every trace, session, and tool call so each failure can be found, grouped, and fixed. One line of telemetry from the TypeScript or Python SDK, or any OpenTelemetry exporter, sends traces from OpenAI, Anthropic, LangChain, LlamaIndex, CrewAI, and dozens of other providers and frameworks. Failing traces are clustered into signals with status, size, and trend, and flaggers and annotation queues let reviewers score outputs by hand. Evaluations are generated from those judgments and tracked with an alignment score. Semantic and exact-text search covers every trace, and saved searches, filters, and behavior groupings keep recurring questions one click away. Dashboards report cost per session, tool failure rates, and agent score across outcome, reliability, speed, and safety. Memory views show how an agent's stored memory changes over time, with diffs and the trace behind each edit. Monitors raise alerts, regression datasets replay fixes against the traces that failed, and Agent Dispatch hands the evidence to a coding agent. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Instead of manually hunting through indexers and stitching chapter files together, ReadMeABook automates the entire audiobook request, download, and M4B library organization pipeline for Audiobookshelf and Plex. Users search an Audible-backed catalog by title, author, narrator, or series, inspect full book summaries with runtime and publisher metadata, and submit one-click requests from a clean browser portal. Once approved, the engine queries Prowlarr across torrent and Usenet indexers, dispatches releases to qBittorrent or SABnzbd, and monitors download progress until completion. Multi-file MP3 downloads merge automatically into a single chapterized M4B audiobook via FFmpeg, complete with embedded cover art, narrator tags, and series ordering metadata before triggering a media server library scan. Not sure what to listen to next? BookDate pairs OpenAI, Anthropic Claude, or local LLM endpoints with a swipeable card deck that learns your reading tastes and queues new titles with a single swipe right. Optional e-book sidecar fetching grabs companion EPUB or PDF files alongside audio releases, while multi-user approval queues, OIDC single sign-on, Goodreads shelf syncing, and Discord, Pushover, Apprise, or ntfy notifications keep household libraries running smoothly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your medical history, fragmented across a dozen patient portals, in one place on your server: MediKeep (formerly Personal Medical Records Keeper) is a self-hosted health record system. Built with a React frontend and FastAPI backend over PostgreSQL, it organizes 14 categories of medical data - medications with dosages and schedules, conditions, procedures, allergies, immunizations, symptoms, injuries, doctor visits and encounters, treatments, lab results, and even medical equipment with service dates and supplier info. Treatment management is genuinely sophisticated: an advanced mode links treatments to their medications with per-medication overrides for prescriber, pharmacy, and effective dates, and reverse lookup shows which treatments use a given medication. A dashboard summarizes records and recent activity, file uploads attach documents to records, and tagging works across categories. When a new specialist asks for your history, the report builder assembles custom reports by category and exports to PDF, JSON, or CSV - a curated, portable summary instead of a folder of photocopies. Authentication supports Google and GitHub SSO with OIDC providers like Keycloak and Authelia expected to work, and the built-in backup system protects the archive. Health data is exactly what should never live in someone else's cloud.

Between the spreadsheet and enterprise software sits Inventoros, a self-hosted system for tracking stock, orders, and suppliers across warehouses. A replenishment panel on the dashboard flags products below their minimum, and purchase orders go to suppliers by email and are received into stock. Products carry SKUs, variants, kits, batches with expiry dates, and serial numbers, with barcodes and QR labels for products and locations. Warehouses nest aisles, shelves, and bins, stock moves between them, and staff can be limited to the sites they work in. Orders handle approvals, payments, refunds, PDF invoices, partial shipments, and returns, and a customer portal shows invited contacts their orders, shipments, and balances. Twelve built-in reports cover valuation, turnover, dead stock, profit margin, and ABC analysis, and a custom report builder exports to CSV, Excel, or PDF on a schedule. Webhooks, a REST API, GraphQL, signed plugins, and an MCP server connect it to the rest of your stack and to AI clients acting with a user's token. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Curating digital comic archives, serialized manga, and electronic book libraries becomes effortless with Stump, a high-performance reading server that streams media collections over OPDS protocols directly to web browsers and e-reader hardware. Readers can organize extensive collections across CBZ, CBR, PDF, and EPUB formats, utilizing automated scanners that extract embedded ComicInfo XML and Calibre metadata tags. The built-in web reader renders high-resolution comic spreads, continuous vertical webtoon scrolls, and reflowable text with customizable color themes, font scaling, and reading direction toggles. Users can highlight passages, create persistent notes inside EPUB editions, and organize complex franchises into custom reading lists, oneshots, and smart filter collections. Bi-directional synchronization integrates with Kobo and KOReader hardware devices, maintaining page progression and bookmark states across handhelds and desktop sessions. Server administrators can configure multi-user access rules, enforce age restriction thresholds, and provision user-scoped API tokens for automated script pipelines and third-party companion tools. GraphQL and REST endpoints expose the entire catalog structure, allowing media collectors to integrate external metadata scrapers and trigger background library indexing tasks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your Supernote tablet fills with handwritten journals, meeting notes, and sketches, and this server gives that handwriting a private home: Supernote is a self-hosted sync cloud for Ratta Supernote tablets that stores notebooks on your own hardware and can transcribe, summarize, and search them with AI. Point the tablet at your server under its Private Cloud sync setting and notebooks upload automatically, ready to browse in the web interface alongside your task lists and AI insights. Turn on the intelligence layer and each synced page is transcribed by a vision model, either Google Gemini or a local model served by Ollama or another OpenAI-compatible endpoint, so notes never leave your network. Analyzers then read your journals to surface tasks, themes, and Daily, Weekly, and Monthly summaries. Every word is indexed for semantic search, which understands concepts: searching for budget also finds pages about expenses or money, even when that exact word never appears. Tasks discovered in your handwriting export as calendar feeds that drop into Home Assistant, Apple Calendar, Google Calendar, and Outlook. An MCP server lets assistants such as Claude, Gemini, and ChatGPT answer questions against your notebooks, and notebooks convert to PDF, PNG, SVG, or plain text for use anywhere else. The hub idles at about 160 MB of memory, or roughly 135 MB in bare sync mode. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Krayin CRM gives sales teams a visual Kanban pipeline where leads flow through configurable stages — new, contacted, qualified, proposal, won, lost — with deal values tracked per stage, drag-and-drop transitions, and AI-powered document import that extracts contact details from uploaded PDFs, DOCs, and images without manual data entry. Built on Laravel 12 with a Vue.js frontend and MySQL database, the platform delivers complete customer lifecycle management through a two-stage contact model separating unqualified Leads from qualified Persons linked to Organizations, with a unified timeline displaying associated activities, notes, emails, and deals. The activity module schedules calls, meetings, and tasks on a drag-and-drop calendar with reminders and team assignment. A built-in product catalog supports line-item quoting with pricing and quantities. Email integration connects via SMTP, IMAP, and SendGrid parsing, linked to leads and contacts automatically. Workflow automation triggers actions on conditions and pushes events to external systems via webhooks. The dashboard visualizes pipeline performance, top customers, top products, and email engagement with pie charts and trend widgets. Custom attributes add text, number, date, boolean, and dropdown fields to any entity. Role-based ACLs manage team permissions per module. Extensions add multi-tenant SaaS, WhatsApp lead generation, and VoIP calling. Deploy via Docker Compose. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

EmDash rebuilds the WordPress publishing experience as an open-source CMS, with drafts, revisions, scheduled posts, a media library, menus, widgets, and plugins that run in sandboxes and can only do what they declare. Writers get a rich-text editor with featured images, slugs, bylines, categories, and tags, plus signed preview links for unpublished work and a calendar of everything published or scheduled. Site builders define their own content types in a visual schema builder, choosing required and searchable fields, URL patterns, comments, SEO metadata, and edit locking so two people never overwrite each other. Uploads are drag and drop, with folders and filename search in the media library. Menus, sidebar widgets, reusable sections, and redirects with a 404 log shape the public site. Access is passkey-first, with OAuth and magic-link fallbacks, four roles from Contributor to Administrator, comment moderation, and personal API tokens. Coming from WordPress? Point the importer at a migration key, a site URL, or an exported XML file and it carries over posts, pages, media, and taxonomies. Plugins add hooks, settings, admin pages, dashboard widgets, custom blocks, and API routes after declaring capabilities such as content:read or email:send, while a built-in MCP server and CLI let AI assistants manage content directly. Blog, marketing, and portfolio templates give new sites a head start. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Organizations deploying multiple large language models across departments use DEEIX Chat as their centralized AI workspace for model routing, multimodal conversations, document retrieval, MCP tool execution, and usage governance. Administrators connect upstream channels across OpenAI, Anthropic, Google Gemini, xAI, and OpenRouter protocols while configuring route priorities, traffic weights, and automatic circuit breaking from a unified control plane. Team members switch models mid-conversation, branch message threads, adjust reasoning effort, and generate images or video without managing individual API keys, or optionally bring their own provider keys under admin policy rules. Uploaded PDFs, spreadsheets, and images undergo OCR and semantic chunking so users can attach personal or shared knowledge bases directly to chat sessions with traceable retrieval evidence. Interactive responses render live HTML, SVG, Mermaid diagrams, KaTeX math, and stateful parameter sliders inside a sandboxed preview pane alongside the conversation. Built-in support for Streamable HTTP Model Context Protocol servers lets users discover and invoke external tools with per-message execution limits and full call inspection. Integrated permission groups, OIDC single sign-on, TOTP two-factor authentication, token and per-call billing ledgers, and audit logs give operators complete visibility over usage and spend. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

An entire backend in a single Go executable: PocketBase embeds SQLite with realtime subscriptions, authentication and user management, file storage, and an admin dashboard, all behind a REST-ish API. SQLite runs in WAL mode, which outperforms client-server databases for the read-heavy workloads typical of small and mid-sized apps. Authentication supports email/password, one-time passwords, and 15+ OAuth2 providers including Google, Apple, and GitHub, with stateless tokens. Clients subscribe to record changes over server-sent events, and official JavaScript and Dart SDKs cover web, mobile, and Flutter frontends. Collections, rules, and API access permissions are managed visually in the admin UI. When you need custom logic, extend it with JavaScript hooks running in the embedded JS VM of the prebuilt binary, or import PocketBase as a Go library and compile custom business logic into your own single-file backend. File storage attaches uploads to records with thumbnail generation for images and optional S3-compatible external storage. All state lives in one pb_data directory, so backup is a directory copy and upgrade is replacing a binary - one of the lowest-maintenance backends you can run. The contrast with Firebase is the point: where usage-based pricing scales with reads, writes, and bandwidth, PocketBase runs the entire backend at flat hosting cost, and the data is a plain SQLite file you can copy anywhere. MIT-licensed.

Webtor turns any magnet link or .torrent file into instant in-browser streaming and direct downloads on your own server, with no desktop torrent client and nothing to install for viewers. Drop in a magnet, an infohash, or a torrent file and the file list appears in seconds; pick a video and it plays in the built-in player while the pieces are still arriving, or take a plain HTTP download link for any single file instead. Whole torrents come down as ZIP or TAR archives generated on the fly with the folder structure preserved, and formats from MKV and MP4 to FLAC and MP3 stream without a separate transcoding step in most cases. Torrents you keep go into a personal library that recognizes movies and series automatically and enriches them with posters and descriptions, and the same library can mount as a network drive over WebDAV or S3 and play on a TV through the Stremio addon. Subtitles are matched from OpenSubtitles inside the player, uploaded tracks are supported, and optional AI translation renders them in your language; a master password locks the instance, the player embeds into other sites through the JavaScript SDK, and a REST API drives everything from your own code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

tirreno watches what accounts actually do inside your product, then surfaces the ones that look like account takeover, credential stuffing, fake signups, or insider abuse. Your backend reports events such as logins, registrations, page views, searches, email changes, and field edits through an SDK or one HTTP call, and a scheduled job turns them into per-user context: devices, IP addresses, sessions, and connected identities. Preset rules cover account takeover, credential stuffing, content spam, bot detection, multi-accounting, promo abuse, dormant accounts, API protection, and high-risk regions, and you can add rules of your own. Each rule adds to a risk score, and thresholds decide whether a user is flagged for manual review or suspended automatically. The review queue lists who needs a look, and the single user view shows behaviour patterns, risk scores, connected identities, and an activity timeline. A field audit trail records what changed and when, which supports compliance reviews, while the logbook lists every API request the instance received. Your application can ask a blacklist endpoint whether a user or IP should be blocked before it responds. An optional IP enrichment pack adds geolocation, ISP, and VPN or proxy detection. All event data stays on your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Shelfarr is the request button your book library was missing: anyone in your household can search millions of ebooks and audiobooks, request the format they want, and let automation fetch and shelve it. Discovery searches Open Library, Hardcover, and Google Books with covers, series, editions, and narrator details, so picking between the ebook and the audiobook takes a glance. Hardcover shelves and public reading lists can be previewed and requested, and following an author means their next release surfaces without a manual search. Requests wait for an admin's approval or move straight to searching, where your indexers are queried and every result is scored against your preferred formats, bitrate, and language. The winning release goes to the download client you route it to; finished files are renamed with your templates and delivered into your library's watched folders, which are told to rescan. Nothing found is not the end: searches retry with back-off and flag the request for attention instead of losing it. Family members get their own accounts with roles, two-factor authentication or single sign-on, notifications in the app or on Discord and Telegram, and admins keep manual uploads, API tokens, and download routing under their control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Mix Studio gives ComfyUI a calm, touch-friendly workspace where image and video generation happens through focused controls instead of a fresh node graph for every job. The Create view runs curated families including Krea 2, Flux 2 Klein, and Qwen Image with exact resolution, seed, batching, LoRA, and prompt enhancement controls. Region mode places aspect-correct boxes on the canvas, each carrying an independent prompt, LoRA stack, and reference image, then resolves them into one coherent generation. Edit mode combines whole-image editing, identity editing, and multi-reference Remix flows with masks, inpainting, outpainting, and source preservation. Video workspaces cover text-to-video, first and last frame control, reference-to-video, character animation, face lipsync, and motion transfer driven by a trimmed performance clip. An experimental photo-to-3D path turns a picture into an orbit video and a Gaussian splat you can view interactively and export. Upscaling pairs synchronized pan and zoom with a movable before-and-after divider for detail inspection. The Library keeps generations and uploads searchable with folders, groups, metadata, reusable settings, recoverable trash, and ZIP export, and separate profiles can carry PIN access. Live queue progress, cancellation, guided setup with dependency checks, and automatic backups keep daily operation orderly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Marfa is a data layer you run yourself, where your notes, tasks, reading, and records live in one typed store that any app, script, or AI agent you allow can read and write. You decide what kinds of things you keep and how they connect, and the server checks every write against that structure, so a task, a book, and a person stay linked instead of scattered across five apps. Connectors pull in what already lives elsewhere, from GitHub repositories and issues, Todoist tasks, Readwise highlights, and RSS feeds, each writing under its own type with its own key. Keys are scoped, so the script that imports your reading list can never touch your tasks, and every change flows back out through a live event stream and full-text search. The marfa command line writes and reads from scripts and agents, the TypeScript SDK builds web apps on the same API, and the Swift SDK keeps an offline working copy on your devices that syncs its writes when your instance is reachable again. A folders command mirrors your notes as plain Markdown files on disk. Everything sits in one SQLite database and a folder of files on your server, with container deployment that streams backups to your own bucket. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When a music library is full of wrong tags, missing covers, and blank ratings, Tagr lets you fix the whole collection from any browser, on desktop or phone. Three roles divide the work on your own server. Admins mount a music folder, press scan, and get a searchable table of every track, with sortable and filterable columns, more than 40 editable fields, and room for custom tags. Taggers make the changes: edit fields inline, swap album art, and match one song or a whole selection against MusicBrainz, ticking which fields to overwrite. Mistakes are cheap, because every edit is stored in a persistent change history with a revert action, viewable per song or per folder. Rule-based smart playlists, such as every track with an empty comment, show what still needs attention. Listeners browse and play without edit rights, using the waveform player, a Recently played view, and optional ListenBrainz scrobbling that each person connects to their own account. Supported formats include MP3, FLAC, WAV, AAC, OGG, M4A, M4B, WMA, AIFF, and Opus, with changes written straight back into the files. Swipe-friendly panels, an installable PWA, and five interface languages make the phone a comfortable place to work. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every line an indentable bullet, every bullet a first-class block that can be referenced, embedded, and queried anywhere: Logseq is a privacy-first, local-first knowledge platform built around the block outliner. The daily journal is the system's beating heart - each day opens a fresh date-stamped page where tasks, meeting notes, and fleeting ideas land as blocks without filing decisions, then connect later through [[wikilinks]] with automatic bidirectional backlinks and ((block references)) that transclude any bullet into any page. Everything persists as plain Markdown or Org-mode files on disk - git-friendly, greppable, and owned forever, with sync via iCloud, Dropbox, Syncthing, Git, or an optional end-to-end encrypted service. Built-in tooling goes beyond notes: TODO/DOING task states with scheduling, native PDF annotation with area highlights, spaced-repetition flashcards, whiteboards for visual thinking, Zotero integration for researchers, and Datalog-powered queries that build dynamic views across the entire graph. A marketplace of hundreds of community plugins and themes adds AI chat, Ollama local-model integration, and custom workflows. Written in Clojure/ClojureScript, AGPL-3.0 licensed with 320+ contributors, and completely free - the local-first Roam for people who refuse subscriptions and lock-in.