Mail-in-a-Box turns a single Ubuntu server into a fully functional email system with one setup command, installing and configuring Postfix for SMTP, Dovecot for IMAP, Roundcube for webmail, and Z-Push for Exchange ActiveSync push notifications in an automated sequence that would take days to replicate manually. The DNS server auto-configures the full suite of email authentication records: SPF, DKIM, DMARC, DNSSEC with DANE TLSA, MTA-STS, and SSHFP. Getting all of these right is what separates email that lands in inboxes from email that lands in spam, and most manual installations never achieve the complete set. Nextcloud integration adds CardDAV contact sync and CalDAV calendar sharing across devices. Let's Encrypt certificates provision and renew automatically for every hosted domain. The web control panel manages users, aliases, custom DNS records, and automated backups, protected by TOTP two-factor authentication. Daily health checks verify that services run correctly, ports remain open, TLS certificates stay valid, and DNS records resolve properly, alerting you before delivery problems develop. Multiple domains and users operate from one installation with internationalized domain name support. Built-in HTTPS static site hosting uses the TLS infrastructure already in place. Runs on a dedicated RepoCloud VPS with guaranteed resources, root SSH, and browser serial console for complete email sovereignty. CC0 public domain licensed.

Backed by 44,000 GitHub stars and now part of Figma, Payload is the first headless CMS that installs natively into your Next.js application's /app directory rather than running as a separate service. The code-first architecture uses TypeScript config files to define collections, globals, and field schemas — from which Payload auto-generates database tables with migrations, a fully customizable React admin panel, REST and GraphQL endpoints, and type-safe Node.js local APIs you can call directly in React Server Components. The Lexical-based rich text editor supports block-based layout building, inline media embeds, and nested field structures, while the built-in localization engine handles unlimited locales with field-level translations. Authentication ships out of the box with HTTP-only cookie sessions, CSRF protection, role-based access control definable at the document, field, and operation level, and support for OAuth providers. Version history tracks every document change with full draft and publish workflows, and Live Preview renders content edits in real-time using server components. The job queue system manages background tasks and multi-step workflows deployable via Vercel Cron or standalone workers. Database flexibility spans PostgreSQL, MongoDB, and SQLite through swappable adapters, and the plugin ecosystem includes official modules for SEO, form builders, redirects, nested documents, and search alongside hundreds of community extensions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Benchmarked at one million concurrent WebSocket connections and 30 million delivered messages per minute on a single server, Centrifugo is a self-hosted real-time messaging server that integrates with any backend language — Node.js, Python, Go, Ruby, PHP, Java — without requiring architectural changes to your existing application. It handles persistent connections over WebSocket, HTTP-streaming, Server-Sent Events, gRPC, and experimental WebTransport, routing messages through a channel-based PUB/SUB model with automatic reconnection recovery that replays missed messages from hot channel history. Built-in horizontal scaling operates through Redis (including Redis Cluster, AWS ElastiCache, Valkey, KeyDB, and DragonflyDB), NATS, or PostgreSQL brokers, allowing multi-node deployments without external message queues. The server provides JWT-based authentication using HMAC or RSA keys, granular channel permissions, online presence tracking showing who is currently subscribed to a channel, and an RPC proxy that forwards client calls to your backend over HTTP or gRPC. The embedded ReactJS admin web interface displays real-time connection statistics, node information, and provides an interactive API console for publishing messages, managing subscriptions, and inspecting channel history. Official client SDKs are available for JavaScript, Dart, Go, Swift, and Java, with unidirectional transports requiring no SDK at all. Centrifugo also supports delta updates to minimize bandwidth, connection event proxying, and Prometheus-compatible metrics for Grafana monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Forge intercepts failing LLM tool calls and fixes them before they derail your agent workflow, applying rescue parsing, retry nudges, response validation, and step enforcement between your AI clients and local model backends. The proxy server mode drops in as a transparent intermediary speaking both the OpenAI chat-completions API and the Anthropic Messages API, so tools like Aider, Claude Code, Continue, and opencode connect through it without configuration changes. Under the hood, the WorkflowRunner provides a complete agentic loop manager with system prompt injection, tool execution, context compaction with configurable thresholds, and VRAM budgeting for consumer GPUs with 12-32 GB. SlotWorker enables priority-queued access to shared inference slots with automatic preemption for multi-agent architectures. The guardrails middleware exposes a two-method check-and-record API that wraps into any existing orchestration loop, providing malformed tool-call rescue parsing, retry nudge generation, required step enforcement, and prerequisite ordering without taking over execution control. Backend adapters support generic OpenAI-compatible endpoints, Ollama, llama-server, Llamafile, vLLM, and Anthropic with automatic model discovery and health checking. Architecture Decision Records document every design choice. Launched February 2026, already at 2,200+ GitHub stars. MIT licensed.

With over 7,000 GitHub stars and active community maintenance through version 0.26.0 released in June 2026, Homebox fills the gap between inadequate spreadsheets and overcomplicated enterprise asset management by providing a purpose-built inventory system designed specifically for home users, families, and small groups. The Go backend with SQLite storage deploys as a single Docker container consuming under 50MB of RAM at idle, running on hardware as modest as a Raspberry Pi while the responsive web interface adapts seamlessly across desktops, tablets, and smartphones. The entity-based architecture introduced in v0.26 unifies items and locations into a shared structure supporting custom fields, attachments, entity types, and reusable templates for consistent data entry across inventory categories. QR code generation creates printable labels that scan with any smartphone camera to instantly display item details, photos, serial numbers, and associated documents. Warranty tracking records purchase dates, prices, and expiration dates while maintenance scheduling sends reminders for recurring service tasks. Location hierarchies organize items spatially with nested sub-locations, and flexible label tagging enables cross-cutting categorization beyond physical placement. Multi-user support shares collections with family members or roommates with OIDC single sign-on integration for Active Directory, Okta, and other identity providers. CSV import and export handles bulk operations, while the full REST API enables automation and third-party integrations. Collection-level ZIP export packages complete inventories with attachments for backup or migration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With nearly 10,000 GitHub stars and over a decade of development since 2013, Invoice Ninja is the most complete source-available invoicing platform for freelancers and small businesses — combining professional invoicing, online payments, expense tracking, and project management in a single self-hosted application. The Laravel API backend powers a React web portal and Flutter native applications for Windows, macOS, Linux, iOS, and Android, delivering a consistent experience across every device. Create professional invoices and quotes with real-time PDF preview, product libraries, custom templates, and automatic tax calculations. Clients receive branded emails and access their dedicated portal at your custom domain to view documents, approve quotes with e-signatures, and pay with one click via Stripe, PayPal, Square, GoCardless, Authorize.net, Braintree, or Mollie. Recurring invoices with auto-billing charge saved payment methods on schedule — weekly, monthly, or annually — with automatic reminders and late fee calculations. The built-in project management suite includes Kanban boards for task organization, billable time tracking with start/stop timers, and vendor expense management with receipt attachments. Bank account synchronization via Yodlee or GoCardless automatically imports transactions for reconciliation. E-invoicing with PEPPOL network integration supports electronic invoicing standards for European and government compliance. Reports cover invoices, expenses, profit and loss, tax summaries, and aged receivables. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License v2.

With over 21,000 GitHub stars and six years of steady development through version 3.1.0, Neko transforms any Docker container into a fully interactive browser or desktop environment streamed to web browsers via WebRTC with sub-300-millisecond glass-to-glass latency. The Go backend captures X server display frames using the Pion WebRTC library while the Vue.js frontend renders the remote session with native audio synchronization, delivering a significantly smoother experience than Apache Guacamole or noVNC which rely on image-over-WebSocket approaches. Multiple users simultaneously view and collaboratively control the same session with real-time input synchronization and host-managed control passing between participants. Pre-built Docker images cover Firefox, Chromium, Google Chrome, Tor Browser, Brave, Vivaldi, and Microsoft Edge alongside full desktop environments including XFCE and KDE for running any Linux application. Neko Rooms provides multi-tenant deployment with a REST API for programmatic room provisioning, while Neko Apps extends the platform with additional containerized applications beyond browsers. Sessions persist on the server independently of client connections — close your laptop, reconnect from your phone, and resume exactly where you left off. Optional VPN and Tor integration routes traffic through encrypted tunnels for privacy-sensitive browsing. RTMP broadcasting streams sessions to external platforms. The embeddable client supports iframe integration for custom portals and applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 3,700 GitHub stars and growing adoption among teams tired of managing complex orchestration platforms, Dagu delivers a complete workflow engine as a single Go binary that requires no external database, message broker, or framework installation. Define directed acyclic graphs in declarative YAML — specifying dependencies, schedules, retries, timeouts, approvals, and notifications — while keeping existing shell scripts, containers, and tools completely unchanged. The built-in Web UI provides live pipeline visualization, per-step log streaming, run history browsing, artifact previewing, manual retry controls, and workflow YAML editing without SSHing into servers. Execute steps as shell commands, Docker containers, Kubernetes Jobs, SSH remote commands, SQL queries, or HTTP requests, with conditional branching and parallel execution handled natively. The integrated Model Context Protocol server exposes dagu_read, dagu_change, and dagu_execute tools, enabling AI agents like Claude, Codex, and Cursor to inspect workflow state, preview YAML modifications, and control runs through authenticated endpoints. The harness.run executor lets external coding-agent CLIs operate inside DAG steps with full scheduling and approval gate support. Scale beyond a single machine with the distributed worker mode, which dispatches tasks to remote nodes via gRPC with automatic label-based routing and worker selection. Deploy with Docker, the official Helm chart for Kubernetes, or a simple binary download requiring only a Linux, macOS, or Windows host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPLv3 licensed.

With 1,200+ GitHub stars since its April 2026 launch, Arkon provides an enterprise-grade knowledge management layer that turns scattered organizational documentation into AI-accessible structured context. The platform runs as a centralized MCP server, compiling your SOPs, policies, technical docs, and institutional knowledge into a versioned wiki with draft-approval workflows, then serving that wiki to Claude Desktop, Claude.ai, Cursor, and any MCP-compatible client through a single permission-scoped endpoint. OAuth 2.1 with PKCE authentication eliminates manual token management — employees authenticate through a browser login while the system discovers endpoints automatically via RFC 8414. The RBAC v2 system supports custom roles with granular permissions, department-scoped AI Skills, workspace isolation, and comprehensive audit logging so every query and access event is traceable. RAG retrieval powered by pgvector embeddings enables AI clients to search across all organizational documents with source attribution, while the AI Skills system lets teams define reusable instruction sets scoped to specific departments or roles. The architecture runs seven Docker containers coordinated by Compose: PostgreSQL with pgvector for embeddings and metadata, Redis for caching, MinIO for document storage, a FastAPI backend, two ARQ async workers for embedding generation and document processing, and a Next.js frontend portal accessible on port 3119. API keys are encrypted at rest with Fernet, and no telemetry leaves the deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. PolyForm Internal Use licensed.

A web interface for a folder of Markdown files - Flatnotes is exactly that, and the discipline of that design is why people love it. Every note is a plain .md file in a single flat directory: no database, no proprietary format, no hierarchy to maintain, no export step if you ever leave. Edit notes in the browser or open the same files in VS Code or Obsidian, sync them with Syncthing or rsync while the app is running - the Whoosh-powered search index synchronizes incrementally, so external edits just show up. The interface is a clean Vue.js app with both WYSIWYG and raw Markdown editing modes (TOAST UI Editor), instant full-text search behind the "/" shortcut with partial-match support, wikilinks for cross-note references, and automatic tag extraction from #hashtags in note bodies. Light and dark themes and a mobile-responsive layout make it pleasant everywhere. Authentication is flexible for a personal tool: none, read-only, username/password, or TOTP two-factor. A documented REST API covers create/read/update/delete for automation. The operational story is the quiet selling point - the only state is the notes folder and a rebuildable index, so backup is copying a directory. For a personal notepad that respects your data, Flatnotes nails minimal.

Unlimited domains, unlimited keywords, daily Google position checks with stored history and trend charts: SerpBear is an open-source search engine rank tracker. Retrieval works through your choice of third-party SERP APIs - ScrapingAnt, ScrapingRobot, SerpApi, SearchApi, HasData - or your own proxy IP pool, and a flexible scrape-strategy system (Basic, Custom, or Smart, set globally or per domain) works around Google's removal of the 100-results-per-page parameter by choosing how many pages to check per keyword. Google Search Console integration adds real visit counts, impressions, and click-through rates per tracked keyword and surfaces top-performing pages and countries; Google Ads integration supplies monthly search volumes and auto-generates keyword ideas from your site's content. Email notifications report position changes daily, weekly, or monthly, a built-in REST API feeds dashboards and reporting tools, and data exports to CSV. Built with Next.js on SQLite, deployed via Docker, installable as a PWA on mobile - with no per-keyword or monthly SaaS fees.

Achieving 98.4% Recall@5 on LongMemEval-S without a reranker, AKB is the agent-native knowledge infrastructure giving Claude Code, Cursor, Windsurf, and any MCP-aware agent persistent organizational memory — a drop-in replacement for Confluence or Notion where AI agents read and write directly rather than scraping human-formatted pages. Documents are stored as Markdown with YAML frontmatter in Git bare repositories (full version history, branching, diff), while PostgreSQL 16 serves as source of truth for chunk text, metadata, and BM25 vocabulary, with dense embeddings handled by a pluggable vector store (pgvector default, Qdrant optional, or managed Seahorse). Agents interact through 20+ MCP tools — akb_put, akb_search, akb_browse, akb_relations, akb_sql, akb_edit, akb_history — performing hybrid dense plus BM25 search fused via Reciprocal Rank Fusion in one call. The URI graph (depends_on, related_to, implements relations) lets agents traverse knowledge connections without external graph databases. Multi-tenant vault isolation is enforced at the PostgreSQL ACL level with per-user roles and SET LOCAL ROLE for SQL sandboxing. Event fanout streams structured events to Redis Streams for external consumers (synthesis bots, digest agents, audit trails), and a hash-chained append-only audit log integrates with enterprise SIEMs. Ships with agent plugins for Claude Code and Codex (session capture, wiki ingest, lifecycle hooks), Kubernetes kustomize manifests, and Open Knowledge Format export. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed (free under 100 seats, auto-converts to Apache 2.0 after four years).

Typeform's conversational format, self-hosted: HeyForm is the open-source form builder that presents one question at a time. Forms present one question at a time, which measurably improves completion rates compared to long static pages. It supports 40+ field types, from text, email, and phone inputs to picture choices, date pickers, star ratings, signatures, and file uploads. Conditional logic shows or hides questions based on earlier answers, routes respondents to different endings, and redirects to URLs, so a single form can serve multiple flows. Completed submissions land in a results dashboard with drop-off and completion analytics, and connect outward through webhooks or integrations with Zapier, Make, Google Sheets, Notion, Airtable, and Slack. Theming covers fonts, colors, backgrounds, and custom CSS, so embedded forms look native to your site rather than like a third-party widget; the JavaScript embed library renders them inline, as popups, or full-page, with shareable standalone links as the default. Team workspaces and projects with member management let multiple teams share one instance without mixing data. Self-hosting removes per-response pricing entirely - unlimited forms and submissions for flat hosting cost - and keeps lead data, feedback, and quiz answers in your own MongoDB, simplifying GDPR compliance. The stack is a NestJS server and React webapp backed by MongoDB and KeyDB, distributed under GPLv3 as a Docker image.

With 7,400+ GitHub stars, 280+ contributors, and 99 releases spanning 15 years of active development since 2011, Dolibarr is the modular ERP and CRM platform that scales from freelancers tracking invoices to manufacturing companies managing full production workflows — all within a single PHP application requiring only a web server and database. Enable exactly the modules your business needs: CRM with leads, proposals, and online contract signing; invoicing with customer and supplier management, credit notes, and SEPA direct debit; double-entry accounting with bank reconciliation and margin analysis; stock and warehouse management with barcode scanning, batch and lot tracking, and product variants; bill of materials and manufacturing orders with workstation scheduling; HR with employee records, leave management, expense reports, recruitment pipelines, and timesheets; project and task management with shared iCal calendars; and a ticket system with integrated knowledge base for customer support. TakePOS provides a touch-optimized point-of-sale interface for retail shops, bars, and restaurants with floor and table management, QR code self-ordering, automatic stock decrements, and Stripe terminal integration. Payment processors connect via PayPal, Stripe, and Paybox. The marketplace offers over 1,000 third-party add-ons, and the low-code Module Builder enables custom extensions without programming. Deploy via the official Docker image with MariaDB, DEB and RPM packages for Linux, or manual installation on any PHP-capable server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Backed by over 20,000 GitHub stars, 800 contributors, and organizations like Google, NASA, and the NHS, Wagtail is the Django-powered content management system that gives editors creative freedom through StreamField while keeping developers in full control of data structure and front-end rendering. StreamField lets editors compose pages from a custom library of content blocks — rich text, images, embedded videos, tables, code snippets, and developer-defined custom types — without compromising the underlying data model or breaking responsive layouts. The built-in JSON API supports headless deployments with versioned endpoints for pages, images, and documents, enabling decoupled front-ends in Next.js, Nuxt.js, or any framework that consumes REST. Editorial workflows provide configurable approval chains where content moves through draft, review, and publish states with commenting, task assignment, and email notifications built into the admin interface. Integrated search connects to Elasticsearch for full-text indexing with faceted filtering, or falls back to PostgreSQL and SQLite backends with fuzzy matching support added in v7.4. Multi-site management serves multiple domains from a single Wagtail installation with independent page trees, while the internationalization framework handles content translation with locale-aware URL routing. Image management includes focal point detection, responsive renditions, and automatic format conversion. The platform supports Django 5.2 and 6.0 with Python 3.10 through 3.14 and PostgreSQL, MySQL, MariaDB, or SQLite databases. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

OpenCode Manager is a mobile-first command center for AI coding agents. Install the PWA on your phone or tablet and you get real-time streaming chat, multi-repository Git operations, and scheduled automation right in your pocket. Git integration handles SSH-authenticated repo cloning, worktree management, unified diffs, and branch operations across all your projects in one dashboard. Chat with coding agents through Server-Sent Events streaming that supports slash commands, @-mentions for files, Plan and Build modes, and Mermaid diagram rendering for architecture discussions. Schedule reusable prompts to run against any repository on intervals or cron expressions, with each run tracking history and linking to sessions so you can pick up exactly where automation left off. MCP server configuration adds local and remote HTTP servers with OAuth support, plugging into the broader Model Context Protocol ecosystem. A dedicated assistant workspace provides an isolated AI environment with auto-provisioned skills for managing schedules, notifications, and settings. Multiple AI providers are supported including Anthropic, GitHub Copilot, and OpenAI-compatible services, each configurable with custom system prompts and granular tool permissions. Push notifications alert you to session events, agent questions, errors, and task completions across all managed repositories.

Keystone turns TypeScript schema definitions into a complete GraphQL API and React Admin UI automatically, eliminating the gap between data modeling and application scaffolding. Nearly 10,000 GitHub stars and over 270 contributors across a decade of development back a framework where list definitions map directly to Prisma models on PostgreSQL or SQLite, generating database migrations and exposing every field relationship through Apollo Server's GraphQL endpoint. Granular access control operates at the list, field, and operation level with filter-based restrictions that limit which records users can see, create, update, or delete based on session data and custom logic. The document field provides a structured WYSIWYG editor with content blocks, inline relationships, and custom React components that render consistently across the Admin UI and frontend applications. Event hooks fire before and after create, update, and delete operations for validation, side effects, and external service integration. Custom GraphQL queries and mutations extend the API beyond auto-generated CRUD for bespoke business logic. The Admin UI built with Next.js and the Keystar UI component library supports custom pages, branded navigation, and internationalized interfaces. OpenTelemetry tracing provides observability into operations, queries, and hook execution. Deploys via Docker or any Node.js host with Prisma managing schema evolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Previously known as Hoarder and now holding 28,000+ GitHub stars, Karakeep is the most popular open-source bookmark-everything application — combining AI-powered automatic tagging with full-text search, page archival, and cross-platform access for digital content hoarders who refuse to let valuable links disappear. The Next.js frontend with tRPC communication delivers a responsive interface for saving links, notes, images, and PDFs, while Puppeteer crawls bookmarked pages to fetch titles, descriptions, and images automatically. LLM-based auto-tagging supports OpenAI, Anthropic, or local models via Ollama for privacy-first deployments that never send data to external services. Meilisearch powers full-text and semantic search across all stored content including OCR-extracted text from images. A rule-based automation engine triggers custom actions based on bookmark properties — automatically sorting, tagging, or archiving content matching defined conditions. Full page archival via Monolith preserves complete page snapshots against link rot, while yt-dlp integration archives videos from YouTube and other platforms. RSS feed ingestion automatically captures new articles from subscribed sources. Collaborative lists enable teams to build shared bookmark collections, with per-list permissions and real-time sync. Native iOS and Android apps, Chrome and Firefox extensions, and browser bookmark sync via Floccus ensure capture from any device. Importers migrate data from Chrome, Pocket, Linkwarden, Omnivore, and Tab Session Manager. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.