With over 24,000 GitHub stars and a rapidly growing community of self-hosters, authentik delivers enterprise-grade identity management that replaces commercial solutions like Okta and Auth0 with a fully self-hosted platform requiring no per-user licensing fees. The platform serves as a unified identity provider supporting SAML 2.0, OAuth 2.0 and OpenID Connect, LDAP for legacy application compatibility, SCIM 2.0 for automated user provisioning, and RADIUS for network device authentication. The visual flow designer enables administrators to create custom authentication workflows combining password verification, multi-factor authentication with TOTP, WebAuthn, and SMS codes, email verification, captcha challenges, and conditional logic based on user attributes or device context. The forward-auth and reverse proxy integration works seamlessly with Traefik, Nginx, Caddy, and Envoy to protect applications that lack built-in authentication. User enrollment flows support self-registration with configurable approval workflows, invitation links, and automatic group assignment. The LDAP outpost exposes user and group data to legacy applications requiring LDAP bind authentication, while the SCIM provider automates user lifecycle management with downstream applications. Multi-tenancy support through brands allows a single authentik instance to serve multiple organizations with independent domains, branding, and authentication policies. The admin interface provides comprehensive user management, group hierarchy, application catalog, event logging with GeoIP enrichment, and system health monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Licensed under a source-available license with an open-source community edition.

Backed by 1,080+ GitHub stars and maintained by Percona with the latest release v3.8.1 in June 2026, Percona Monitoring and Management delivers the open-source database observability platform that provides a single pane of glass across MySQL, PostgreSQL, MongoDB, Valkey, and Redis databases deployed on-premises, cloud, or hybrid environments. The Go-powered PMM Server collects metrics from lightweight PMM Client agents with minimal performance impact, storing time-series data in ClickHouse for fast querying across configurable retention periods. Query Analytics ranks every query by load across all database engines from one unified dashboard, drilling from fleet-level performance down to individual problematic queries with explain plans, per-query metrics, and anomaly detection. Real-time Query Analytics streams live MongoDB operations updated every 1-5 seconds for immediate troubleshooting of lock contention and long-running queries. Built-in Percona Advisors continuously scan connected databases for security gaps, misconfigurations, and performance problems, distilling decades of DBA expertise into automated actionable recommendations. Percona Alerting integrates with 15+ notification channels including Slack, PagerDuty, email, and webhooks to trigger on custom metric thresholds. Database-specific dashboards visualize InnoDB storage engine details, WiredTiger cache metrics, PostgreSQL tuple activity, replication lag, and cluster health with annotations for root-cause correlation. Deployment options include Docker single-container setup, Podman rootless execution, and Helm charts for Kubernetes with Ingress controller support and ConfigMap management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Graduated as an Apache Software Foundation Top-Level Project with over 15,500 GitHub stars and 100,000+ Docker Hub downloads, Apache Answer delivers the structured Q&A platform that Stack Overflow and Discourse popularized — fully self-hosted under Apache 2.0 with zero vendor lock-in. The Go backend with React frontend serves questions, answers, and knowledge articles with real-time Markdown preview using CommonMark syntax, inline @mentions to ping domain experts, and transparent revision history tracking every edit. Version 2.0 introduced AI workflows including an integrated AI assistant that helps draft and improve answers, a Model Context Protocol server for connecting AI agents to your knowledge base, API key management, and editor plugin support for extending the writing experience. Advanced search filters by tags, usernames, scores, and date ranges, while real-time suggestions surface relevant existing questions as users type to reduce duplicates. The reputation system rewards quality contributions with configurable privilege thresholds, and admin/moderator/user roles control access across the platform. A plugin architecture enables community-built extensions for third-party OAuth login, caching backends, search engines, and storage providers. Theming supports custom layouts, dark mode, and responsive design across devices, with content available in 15+ languages translated by the community. Bulk user import, email domain restrictions, and content access controls secure the platform for enterprise deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

High-resolution weather forecasts became a free commodity because of Open-Meteo - and this deployment puts the whole open-source engine on your own infrastructure. The public open-meteo.com service aggregates national weather models (NOAA GFS, DWD ICON, ECMWF, Meteo-France, and others) into one consistent JSON interface; self-hosting gives you that same API without rate limits, third-party dependency, or usage metering. The architecture is two cooperating services: the API server exposes forecast endpoints fully compatible with Open-Meteo query parameters - latitude, longitude, hourly and daily variables like temperature, precipitation, wind, and radiation - while a background sync worker downloads fresh weather model data on a configurable interval into a shared persistent volume at /app/data, so forecasts stay current and survive restarts without re-downloading. You control which weather models to mirror, which variables to store, how much historical depth to keep, and how often to refresh - meaning a lean deployment can sync only the model and region you actually query. Responses are plain HTTP/JSON, so integration with dashboards, Home Assistant-style automations, agricultural monitoring, IoT fleets, or any application takes minutes. For anyone making thousands of forecast calls a day, replacing a metered weather API with your own instance turns a recurring bill into a flat infrastructure cost.

Used by over 80% of Fortune 100 companies including LinkedIn, Netflix, Uber, and Goldman Sachs, Apache Kafka processes trillions of messages per day as the world's most widely deployed distributed event streaming platform. Since version 4.0 released in March 2025, Kafka operates exclusively with KRaft consensus, replacing Apache ZooKeeper entirely with an internal Raft-based metadata quorum managed by controller nodes, reducing operational complexity and eliminating external coordination dependencies. Topics are organized as append-only partitioned commit logs with configurable replication factors across brokers, delivering network-limited throughput with end-to-end latencies as low as 2 milliseconds. Kafka Streams provides a client library for building stateful stream processing applications with exactly-once semantics, windowed aggregations, joins across streams and tables, and interactive queries against local state stores. Kafka Connect integrates with hundreds of systems including PostgreSQL, MySQL, Elasticsearch, Amazon S3, MongoDB, HDFS, and JMS through a standardized connector framework with distributed worker mode and automatic offset management. Share Groups introduced in version 4.2 deliver queue-style consumption semantics alongside traditional consumer groups, enabling Kafka to serve both pub-sub and point-to-point messaging patterns natively. The Schema Registry enforces Avro, Protobuf, and JSON Schema compatibility rules across producers and consumers, preventing schema evolution from breaking downstream applications. Tiered Storage offloads older log segments to object storage like S3 while maintaining transparent consumer access, dramatically reducing local broker storage costs for long-retention topics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Kortix Suna is an AI management system where autonomous agents run on isolated Linux sandbox computers, producing finished deliverables that humans review through a change request workflow before anything merges. With 20,000+ stars, it positions itself against Claude Cowork and ChatGPT Work by storing every agent persona, skill, memory artifact, and connector in a git repository: versioned, diffable, and shared across an organization. Each session launches a dedicated sandbox with full terminal access, Playwright-controlled Chromium, writable filesystem, and internet connectivity. Over 3,000 app connectors are available through MCP, OpenAPI, GraphQL, and raw HTTP, with credentials brokered server-side so tokens never enter the sandbox. Skills (reusable markdown-plus-script packages encoding company workflows) load automatically into every session, compounding institutional knowledge over time. Bring-your-own-key model routing through LiteLLM connects to OpenAI, Anthropic, Google, Mistral, or local models without vendor lock-in. The deployment runs as a single Docker Compose stack bundling the Next.js frontend, FastAPI backend, Supabase, Redis, and Caddy with automatic TLS certificates. Enterprise features include SAML/OIDC SSO, SCIM provisioning, RBAC, and audit logging. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0.

Achieving 98.4% Recall@5 on LongMemEval-S without a reranker, AKB is the agent-native knowledge infrastructure giving Claude Code, Cursor, Windsurf, and any MCP-aware agent persistent organizational memory — a drop-in replacement for Confluence or Notion where AI agents read and write directly rather than scraping human-formatted pages. Documents are stored as Markdown with YAML frontmatter in Git bare repositories (full version history, branching, diff), while PostgreSQL 16 serves as source of truth for chunk text, metadata, and BM25 vocabulary, with dense embeddings handled by a pluggable vector store (pgvector default, Qdrant optional, or managed Seahorse). Agents interact through 20+ MCP tools — akb_put, akb_search, akb_browse, akb_relations, akb_sql, akb_edit, akb_history — performing hybrid dense plus BM25 search fused via Reciprocal Rank Fusion in one call. The URI graph (depends_on, related_to, implements relations) lets agents traverse knowledge connections without external graph databases. Multi-tenant vault isolation is enforced at the PostgreSQL ACL level with per-user roles and SET LOCAL ROLE for SQL sandboxing. Event fanout streams structured events to Redis Streams for external consumers (synthesis bots, digest agents, audit trails), and a hash-chained append-only audit log integrates with enterprise SIEMs. Ships with agent plugins for Claude Code and Codex (session capture, wiki ingest, lifecycle hooks), Kubernetes kustomize manifests, and Open Knowledge Format export. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed (free under 100 seats, auto-converts to Apache 2.0 after four years).

Pretix powers thousands of events and millions of ticket sales through a fully brandable ticket shop with interactive seating plans, 30+ payment providers, and a mobile check-in app for venue entry management. With over 2,400 GitHub stars, it delivers what organizations need when they demand full control over attendee data and revenue rather than surrendering margins to Eventbrite or Ticket Tailor. Built with Python and Django on PostgreSQL with Redis and Celery, the ticket shop adapts to your colors, logo, and domain with responsive design. The graphical seating plan editor handles everything from small cinemas to large stadiums, letting buyers choose seats mapped to pricing categories. Payment providers connect through plugins including Stripe, PayPal, Mollie for iDEAL and Bancontact, SEPA direct debit, and bank transfer with automatic CSV import for payment matching. The voucher engine generates bulk discount codes with usage limits, quota reservations, and automated email distribution. Waiting lists automatically offer released tickets to the next registrant with expiration deadlines. A built-in mini-CMS hosts event descriptions, terms of service, and static pages directly in the ticket shop. Customer accounts enable repeat buyers to check out faster across events. The pretixSCAN mobile app performs QR code check-in on Android and iOS with offline capability. Embeddable JavaScript widgets integrate the shop into any website. Plugin architecture extends functionality with output formats, analytics, and Apple Wallet passes. Deploy via Docker with the pretix/standalone image alongside PostgreSQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Replacing HubSpot, Zendesk, Intercom, and Linear with a single self-hosted platform, erxes delivers an Experience Operating System trusted by over 4,000 GitHub stars and built on a modern Nx-powered monorepo architecture. The core ships with six foundational modules — My Inbox for omnichannel conversations across email, web chat, voice, and Discord; Contacts for unified customer profiles; Products for catalog management; Segments for behavioral targeting; Automation for visual workflow builders; and Documents for template generation. Beyond the core, a plugin marketplace activates Frontline for ticket management and omnichannel support queues, Sales for deal pipelines and lead scoring, Operations for project boards with cycle management, Content for headless CMS and knowledge bases, and Team for employee directories, time clocks, and internal chat. The technical stack combines GraphQL Federation with Apollo Server v4 and tRPC v11 microservices on Node.js, React 18 micro-frontends via Rspack Module Federation with TailwindCSS 4, MongoDB with Mongoose for persistence, Redis for caching, BullMQ for job queues, and Elasticsearch for full-text search. Deployment supports Docker Compose orchestration with automatic service discovery across all plugin containers. The Global Profile architecture enables agencies to manage multiple client brands under a single login with separated data stores. iOS and Android SDKs embed the messenger widget directly into mobile applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

ShareX and file uploads, next generation: Zipline is a Node.js/React/PostgreSQL server that turns screenshot sharing and file hosting into something you run yourself instead of renting from Imgur or a paid image host. The core workflow is built around ShareX: generate an .sxcu config from your account settings, import it, and every screenshot or clipboard capture uploads to your domain with a short link copied automatically. Uploads accept any file type, organized with folders and tags, with token-protected uploading, optional password protection, view-limited auto-deletion, image compression, metadata stripping, automatic video thumbnails, and chunked/partial uploads for large files. File URLs come in configurable formats - UUIDs, dates, random alphanumerics, original names, even zero-width spaces. A built-in URL shortener adds vanity slugs, passwords, view caps, and custom domains. Discord embeds are first-class: customize OG metadata titles, descriptions, and colors so links unfurl exactly how you want, and fire fully customizable Discord or HTTP webhooks on each upload. Authentication is serious: OAuth2 (Discord, GitHub, Google, OIDC), TOTP two-factor, and passkeys, with invite-based registration and per-user quotas for shared instances. Storage targets local disk or any S3-compatible backend, a full REST API automates everything, and custom themes plus a PWA round out the experience.

Pi Web is a browser interface for the Pi coding agent ecosystem, providing a visual workspace that reads the same local configuration and session files as the CLI. The session workspace groups conversations by project with running state indicators, context usage percentages, cost tracking, and compaction details, while two branching modes let users create independent session files from earlier messages or fork branches within existing sessions to explore alternative coding directions. Real-time streaming via Server-Sent Events delivers agent responses with structured Markdown rendering, thinking steps, tool call visualization, and image drag-and-drop input. The project file explorer browses working directories with syntax-highlighted source preview, Git diff inspection, and rendering for Markdown, images, audio, PDFs, and DOCX files with automatic refresh. Git worktree support switches checkouts from the sidebar while keeping sessions from the same repository grouped together. The Models panel manages provider authentication via OAuth and API keys, model selection, model smoke tests, and models.json configuration shared bidirectionally with the CLI agent. The Skills panel lists, searches, installs, and toggles agent skills without terminal access. The interface ships with English and Simplified Chinese translations, light and dark themes, a chat minimap, keyboard shortcuts, and completion sounds. Basic Auth protects remote access when binding to non-loopback addresses. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Macro merges email, team chat, collaborative documents, task management, CRM, and video calls into one keyboard-driven application where AI agents operate across the entire workspace with shared team memory, replacing the Slack plus Notion plus Linear plus Superhuman plus HubSpot stack with a single deployment. The email module provides a multi-account unified inbox with keyboard shortcuts, shared team inboxes, and Gmail integration. Team messaging offers channels and direct messages designed for technical discussions with threaded conversations. The task system draws from Linear with board and list views tightly integrated with channels, email threads, and AI agents. Real-time collaborative documents use CRDT synchronization via Loro for conflict-free editing with Markdown-native formatting and @mention linking. A 2D canvas board embeds @links to tasks, files, and emails for visual project planning. AI agents access unified team-level memory spanning all workspace modules, taking autonomous actions across email, chat, tasks, and documents through MCP-compatible tool interfaces. Video calls include recording, transcription, and automatic logging to team memory. The CRM module tracks customers and contacts with custom properties, email synchronization, and data enrichment. Eighty-plus Rust microservices on the Axum framework handle backend operations while a SolidJS static SPA delivers the frontend with instant search and real-time collaboration. Docker Compose deployment provisions the complete service stack with PostgreSQL, Redis, OpenSearch, and FusionAuth authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Consistently ranked the most loved and most wanted database in developer surveys, PostgreSQL powers mission-critical workloads at Apple, Instagram, Spotify, and the U.S. Federal Aviation Administration with an architecture refined over nearly four decades since its origins at UC Berkeley. Its native JSONB type stores JSON in an indexed binary format with GIN and GiST index support, enabling document-store capabilities that eliminate the need for a separate NoSQL database in many architectures. The extension ecosystem exceeds 1,000 add-ons: PostGIS provides ISO-compliant geospatial queries, pgvector enables AI embedding similarity search, TimescaleDB adds time-series hypertable compression, and Citus distributes tables across nodes for horizontal scaling. PostgreSQL supports declarative partitioning by range, list, or hash, parallel query execution across multiple CPU cores, and four transaction isolation levels including full Serializable. Streaming replication provides physical standby servers with synchronous or asynchronous modes, while logical replication enables selective table-level change data capture through the Write-Ahead Log. Stored procedures run in PL/pgSQL, PL/Python, PL/Perl, and PL/V8 JavaScript, and advanced indexing includes B-tree, GIN, GiST, SP-GiST, BRIN, and hash types. Full-text search is built in with tsvector and tsquery, and row-level security policies enforce fine-grained access control. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. PostgreSQL License (MIT-like permissive) licensed.

The first container registry to reach CNCF graduated status with over 29,000 GitHub stars since VMware open-sourced it in 2016, Harbor transforms the basic Docker Distribution into a hardened enterprise registry with vulnerability scanning, supply chain signing, multi-datacenter replication, and project-level access control out of the box. Trivy scans every pushed image against the NVD, GitHub Advisory Database, and distribution-specific vulnerability feeds, with scan-on-push policies that block deployment of images exceeding configurable severity thresholds. Artifact signing through Cosign keyless signatures and Notation enforces content trust policies ensuring only cryptographically verified images reach production clusters. Policy-based replication synchronizes images and Helm charts between Harbor instances across multiple datacenters using repository, tag, and label filters with automatic retry and bandwidth throttling — enabling hybrid-cloud and disaster-recovery topologies. The RBAC model isolates projects with per-project quotas, robot accounts for CI/CD automation, webhook notifications, and audit logging that tracks every pull, push, delete, and configuration change. LDAP, Active Directory, and OIDC authentication integrate with existing identity providers, while the proxy cache transparently caches images from Docker Hub, Quay, and other upstream registries to reduce pull latency and rate-limit exposure. The RESTful API with embedded Swagger UI, tag retention policies, garbage collection scheduling, and immutable artifact rules complete the lifecycle management. Deploy via Docker Compose or Helm Chart on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Adopted by over 3,400 companies and backed by 34,000 GitHub stars, Backstage is the open-source developer portal framework created by Spotify and now hosted by the Cloud Native Computing Foundation. The centralized Software Catalog registers every service, library, data pipeline, website, and ML model in your organization using YAML metadata files stored alongside code in GitHub, GitHub Enterprise, or GitLab, tracking ownership, lifecycle status, and dependency relationships across your entire ecosystem. Software Templates provide self-service infrastructure provisioning where developers fill out a form and Backstage automatically scaffolds new repositories, CI/CD pipelines, and cloud resources following your organization's standardized best practices. TechDocs renders Markdown documentation directly alongside the services it describes using a docs-like-code approach powered by MkDocs, with the TechDocs Addon Framework for extending the reading experience. The Search Platform indexes content across the catalog, TechDocs, Confluence, and Stack Overflow through configurable search backends. Kubernetes monitoring built specifically for service owners rather than cluster admins displays pod health, logs, and deployment status across any cloud provider or managed Kubernetes service. The plugin ecosystem includes over 230 open-source integrations covering CI/CD systems like GitHub Actions and GitLab Pipelines, monitoring platforms like Datadog and Grafana, cloud providers including AWS and Azure, plus specialized plugins for security scanning, cost management, API documentation, PagerDuty incident management, and Lighthouse website auditing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 37,800 GitHub stars and active development since its first release in 2008, ERPNext is the most-starred open-source ERP system — delivering accounting, inventory management, manufacturing, CRM, project tracking, asset management, HR, and point-of-sale capabilities through a unified web interface built on the Frappe Framework's metadata-driven architecture. The accounting module handles multi-company consolidation, multi-currency transactions, tax templates for GST and VAT, bank reconciliation, and automated journal entries with real-time profit and loss, balance sheet, and cash flow reporting. Manufacturing covers production planning with multi-level bill of materials, work order scheduling, capacity planning, subcontracting, and quality inspection at each production stage. Inventory tracks stock across multiple warehouses with batch and serial number tracing, automatic reorder levels, landed cost calculations, and perpetual inventory valuation using FIFO or moving average methods. The CRM module manages leads, opportunities, and customer communication with email integration, while project management tracks tasks, timesheets, and Gantt-based scheduling with budget controls. Custom applications extend functionality through the Frappe ecosystem without forking the core codebase, and the REST API enables integration with payment gateways, shipping providers, and third-party services. Deployable via Docker Compose or the bench CLI tool with MariaDB and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

What Doodle did before ads and paywalls took over: Rallly (three L's) lets you propose a few dates, share a link, and watch an availability grid fill in - no email threads, no forced accounts, no "$6.95/month to remove ads." The availability grid makes the winning slot obvious at a glance, comments on each poll keep the "I can do Tuesday if we start late" discussion attached to the decision instead of buried in chat, and email notifications fire as votes and comments arrive. When consensus lands, finalize the winning option and everyone gets notified. The stack is modern TypeScript - Next.js, tRPC, Prisma over PostgreSQL, Tailwind - with a clean, genuinely mobile-friendly UI, dark mode, and community translations in 10+ languages. Self-hosting means unlimited polls and unlimited participants with meeting data on your server rather than a scheduling SaaS. It pairs naturally with Cal.com: Rallly answers "which time works for everyone?", Cal.com handles "book a slot on my calendar." AGPL-licensed.

Kandev provides a command center for orchestrating AI coding agents across parallel workstreams. The Go backend paired with a Next.js frontend delivers kanban boards with drag-and-drop columns, pipeline workflow definitions with per-step agent handoffs, and an IDE-like review workspace combining file editor, file tree, terminal, browser preview, and unified git diffs. Multi-provider support connects Claude Code, GitHub Copilot, Codex, Qoder, Grok, and custom agents through configurable profiles with per-agent prompts, runtimes, and review gates. Tasks execute in isolated git worktrees with multi-repository support, letting agents work on separate branches simultaneously while changes surface in a consolidated review interface. Native integrations with GitHub, GitLab, Jira, Linear, Sentry, and Slack pull external issues into the kanban and link tasks to pull requests. Kandev exposes streamable HTTP and SSE MCP endpoints, enabling external clients — Cursor, Claude Desktop, Augment — to create tasks and read workspace context programmatically. Workflow definitions export as portable YAML for sharing across installations. Agentic workflows chain multi-step pipelines mixing different models per step — Opus for architecture, Sonnet for implementation, with human review gates between stages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.