OpenFGA answers the question 'can this user perform this action on this resource?' in single-digit milliseconds, implementing Google's Zanzibar paper as a production-ready authorization engine adopted by Auth0, Grafana Labs, Canonical, Docker, Agicap, and Read.AI. The server exposes both gRPC and HTTP APIs for authorization queries including Check, ListObjects, ListUsers, Expand, and the high-throughput BatchCheck endpoint that deduplicates and processes multiple authorization decisions in a single request. Authorization models combine relationship-based access control with role-based and attribute-based patterns through a purpose-built DSL that supports contextual tuples, conditional relationship tuples with CEL expressions, and time-based filtering via the ReadChanges API. Storage backends include PostgreSQL 14+, MySQL 8, and SQLite in beta, with an in-memory adapter for development and testing. Official SDKs for Java, .NET, Node.js, Go, and Python provide type-safe client integration, while a Terraform provider enables infrastructure-as-code management of authorization stores and models. The built-in browser playground at port 3000 lets developers visually model authorization schemas, write relationship tuples, and test access control queries interactively before deployment. OpenTelemetry instrumentation integrates with existing monitoring infrastructure, and Helm charts simplify Kubernetes deployment. A VS Code extension provides syntax highlighting and validation for FGA model files, and GitHub Actions automate model testing in CI/CD pipelines. A CNCF incubating project with transparent governance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Every Redis client you already use connects to Kvrocks without a single code change, but instead of holding your entire dataset in RAM, data lives on SSD through RocksDB, turning terabytes of memory cost into pennies of disk. An Apache Software Foundation top-level project, Kvrocks supports strings, hashes, lists, sets, sorted sets, streams, bitmaps, JSON documents, TimeSeries data points, Bloom filters, Cuckoo filters, and HyperLogLog structures, all persisted to disk with in-memory caching for hot data access. Asynchronous replication using binlog similar to MySQL provides data durability across replicas, while Redis Sentinel integration enables automatic failover when master or replica nodes fail. The proxyless centralized cluster architecture distributes data across shards while remaining fully compatible with standard Redis cluster SDKs and clients. Token-based namespaces provide multi-tenant isolation with authentication per namespace, going beyond Redis SELECT's numbered database model. RocksDB's LSM-tree storage engine provides efficient compression through configurable compaction strategies, reducing disk footprint dramatically while maintaining sub-millisecond reads for cached keys. Migration tooling includes RedisShake for Redis-to-Kvrocks live migration and kvrocks2redis for reverse migration, enabling gradual adoption without service interruption. The kvrocks_exporter exposes Prometheus-compatible metrics for monitoring, and OpenTelemetry integration provides distributed tracing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

The inverter app tells you the sun shone; SOLECTRUS tells you what that sunshine was worth. It is a dashboard for your whole photovoltaic system that balances every watt: what the panels produced, what the house consumed, what the battery stored, and what crossed the grid meter in either direction, for any period you care to name. Up to five generators, from the main roof array to a balcony power plant, appear individually or summed, and up to twenty custom consumers, wallbox included, get their own accounting. The Power-Splitter shows how much green electricity actually landed in the car, the heat pump, or the washing machine, and what each load truly cost once lost feed-in revenue counts. Enter your electricity prices and feed-in tariff, including their changes over the years, and it computes savings, self-consumption costs, return, and the day the system has paid for itself from measured data rather than the sales brochure. Forecasts from pvnode, Solcast, or Forecast.Solar look up to seven days ahead using your location, orientation, tilt, and peak capacity. Heat pump owners see generated heat and coefficient of performance beside the power draw. Everything lands in InfluxDB and stays there, with daily aggregation keeping multi-year views fast, trends against last month or last year, and a Top-10 of your best and worst days. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PicPeak is a self-hosted gallery platform where photographers deliver event photos to clients through private, branded links that expire on their own schedule. Every gallery gets a share link, an optional password, and a QR code that exports as PNG, SVG, an A6 table card, or an A4 poster, so a reception can put the gallery on every table. Guests browse in one of seven layouts, from grid and masonry to carousel and timeline, and react with likes, favorites, star ratings, comments, emoji reactions, or color labels. For a party, open the gallery to guest uploads, hold the finished edit back with Reveal Mode until a scheduled moment, and put the optional Live Slideshow link on a projector so new photos appear as they arrive. Theme presets, custom colors, logos, fonts, CSS, and CMS pages keep the studio's brand in front, while bulk ZIP downloads, capped download sizes, watermarking, and right-click blocking control what guests take home. An analytics dashboard tracks views, unique visitors, and downloads. Beta modules add face grouping that runs in a separate container on your own server, plus quotes, contracts, invoices, and customer accounts for studios. Media sits on local disk or any S3-compatible bucket, OIDC single sign-on lets a team log in through an identity provider, and API tokens and webhooks connect PicPeak to automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Koillection is a self-hosted physical collection and inventory manager that organizes books, vinyl records, video games, stamps, trading cards, and any custom hobby catalog using hierarchical folders, reusable metadata templates, wishlists, and loan tracking. Collectors can structure nested sub-collections like a file system and attach tailored attributes to each item, ranging from star ratings, purchase dates, and country flags to autographs, PDF manuals, and video clips. Reusable item templates and choice lists standardize data entry across uniform categories so adding a new comic issue or board game takes seconds rather than repetitive typing. Custom HTML and JSON scrapers let you pull item titles, cover art, and structured fields directly from external catalog websites into your forms using XPath or JMESPath selectors. Cross-collection tags link related pieces across separate folders, while dedicated photo albums store supplementary event galleries or condition photographs alongside your main inventory. Built-in wishlists track desired acquisitions with target prices and currencies, and a loan manager records which friend borrowed an item and when it was returned. Granular visibility settings let households run independent multi-user accounts or share read-only collection pages with guests, and a REST API exposes every catalog entity for external automation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Merge, split, compress, convert, edit, annotate, redact, OCR, and sign PDFs - BentoPDF packs over 130 tools into a privacy-first toolkit that runs entirely in the browser through WebAssembly. Files are never uploaded - processing happens in browser memory on the user's machine and disappears when the tab closes, which makes the tool GDPR-clean by architecture and safe for financial, legal, and internal documents. The engine combines WASM builds of PyMuPDF, Ghostscript, and CoherentPDF; Tesseract handles OCR with searchable text-layer output; Office conversions cover Word, Excel, and PowerPoint; and digital signatures use X.509 certificates (PFX/PEM) with the private key staying on the client. Because there is no server-side processing, deployment is a static-file exercise: a single Docker container, or any static host. A dedicated self-hosted build strips the marketing pages while keeping every tool, and air-gapped deployments are first-class - an automated script bundles the WASM modules, OCR language data, and fonts for fully offline networks. No accounts, no limits, no watermarks; TypeScript and Vite under the hood.

Backed by Y Combinator and trusted by over 2,300 companies processing billions of observations monthly, Langfuse is the most widely adopted open-source platform for building, monitoring, evaluating, and debugging LLM applications. The hierarchical tracing engine captures every LLM call, tool invocation, retrieval step, and agent action as nested spans based on OpenTelemetry, with automatic cost calculation, latency tracking, and token usage attribution across sessions and users. Prompt Management separates prompts from code with versioned artifacts, label-based deployments, one-click rollbacks, and runtime SDK fetching with server-side caching, while linking every generation back to its exact prompt version for attribution analytics. The evaluation system supports LLM-as-a-judge scoring, heuristic code evaluators, user feedback collection, and manual annotation workflows that run automatically on production traces or against curated datasets. The Playground enables interactive prompt testing on real production inputs with side-by-side model comparison across providers. Datasets and Experiments define test cases for systematic benchmarking with comparative result visualization. Native SDKs for Python and TypeScript provide decorator-based instrumentation, while 100+ integrations cover LangChain, LlamaIndex, OpenAI SDK, LiteLLM, Vercel AI SDK, and any OpenTelemetry-instrumented framework. The analytics dashboard surfaces cost breakdowns, quality scores, latency percentiles, and usage trends across models and prompt versions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Created to eliminate the configuration fragmentation plaguing multi-device Homelab setups and small-team infrastructures, NetsGo merges what typically requires three separate tools — a tunnel daemon, a management panel, and a monitoring stack — into a single Go binary that starts with one command and listens on one port. The server exposes HTTP, TCP, and UDP tunnels, a built-in Web console for node management, a REST API for automation, and real-time traffic statistics with per-client bandwidth limiting, all sharing default port 9527 so firewalls and reverse proxies need only a single rule. Version 0.1.11 introduced Client-to-Client P2P tunnels via WebRTC DataChannel with three selectable transport strategies — Server relay, Prefer P2P with automatic fallback, and P2P only — reducing latency for direct connections while maintaining the centralized control plane. The management console displays every connected client's online status, authentication tokens, tunnel configuration, active transport mode, P2P candidate gathering progress, and cumulative byte-level traffic counters updated every second. Unlike frp or rathole which delegate management to external plugins or configuration files, NetsGo provides built-in client key generation, tunnel target migration between nodes, SOCKS5 proxying, IP-whitelist console access, and one-command server upgrades. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Consolidate daily to-do lists, encrypted passwords, household spending, contacts, and family photo galleries into Personal Management System, a self-hosted private command center for everyday life. Individuals can organize recurring schedules and calendar milestones with proactive notification alerts so important appointments, vehicle servicing dates, and recurring bill renewals are never overlooked. Users can balance household budgets and track expenditure across custom spending categories, calculating monthly cash flow balances while monitoring debts owed to friends or family members. Privacy-conscious users can safeguard account credentials inside an encrypted password vault featuring quick-copy buttons and secondary lock protection for sensitive personal entries. Goal setters can track multi-step personal targets and link financial milestones directly to dedicated savings pools. Home organizers can catalog contacts, log travel destinations with mapped imagery, and maintain categorized notes containing voice memos, bookmarks, and reference materials. Collectors can sort family photos and video recordings into interactive masonry galleries with built-in lightbox previews and file download tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Engineering and product teams ship code to production daily with FeatBit, an enterprise feature flag and experimentation platform that controls exactly which user segments, regions, or percentage rollouts see each new capability. When a regression appears in production, operators toggle an instant kill switch, dial back canary weights from full traffic to one percent, or restrict access to internal QA accounts without redeploying containers. Reusable user segments group customers by subscription tier, device property, or custom attributes for consistent targeting across environments. Server-side and client-side SDKs for .NET, Java, Go, Python, Node.js, React, React Native, JavaScript, and OpenFeature synchronize flag states over WebSockets in under 100 milliseconds and evaluate rules locally in memory. Built-in A/B/n experimentation links flag variations to custom conversion events, click tracking, and pageview metrics so teams can validate product hypotheses with live telemetry. Scheduled rollouts, multi-step approval workflows, flag triggers, and webhook integrations with Slack, Datadog, Grafana, New Relic, and OpenTelemetry keep release operations auditable. Role-based access control and single sign-on govern every flag change. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Transform complex code repositories into searchable, interactive wikis with DeepWiki, an automated documentation platform that maps architectural relationships and provides instant answers to technical questions about any codebase. Software engineers can submit public or private repositories from GitHub, GitLab, or Bitbucket to generate comprehensive project overviews, component breakdowns, and interactive Mermaid diagrams illustrating data pipelines and class hierarchies. The built-in Ask interface allows developers to query system logic using retrieval-augmented answers grounded directly in repository source files. Teams can trigger iterative deep research sessions that perform multi-step codebase investigations to explain intricate execution paths, uncover hidden dependencies, and summarize complex algorithms across hundreds of files. Interactive Codemap tours provide guided walkthroughs of critical entry points, letting reviewers inspect synchronized code viewer panels with exact line references while onboarding to unfamiliar services. Developers can export complete wiki structures for offline sharing, customize documentation depth from high-level summaries to granular module analyses, and connect local or cloud model endpoints to process sensitive internal code securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Thirteen-plus LLM providers, one unified client: NextChat (formerly ChatGPT-Next-Web) is an open-source AI chat interface built on Next.js that spans OpenAI GPT-4, Anthropic Claude, Google Gemini, DeepSeek, Groq, Azure endpoints, and self-hosted backends like Ollama, LocalAI, and RWKV-Runner. Its defining trait is minimalism - the first screen loads in about 100 KB, the desktop client is roughly 5 MB, and there is no database or user system to operate; chat history lives locally in the browser with optional WebDAV or UpStash Redis sync. The Mask system saves reusable prompt-template personas you can share and debug, long conversations auto-compress to fit context windows, and Markdown rendering covers LaTeX, Mermaid diagrams, and code highlighting with streaming responses. Plugins add web search and calculators, MCP support enables external tool calling, and Artifacts previews generated content in a separate pane. Ships as a web app, Docker image, and Tauri desktop builds for Windows, macOS, and Linux, translated into 20+ languages. MIT-licensed.

Pictaria Server sits beside your Immich instance and makes a photo library of thirty thousand images legible again, surfacing the trips, people, and best shots buried under duplicate bursts and forgotten folders. It starts with Insights: a clickable timeline of your years, detected trips, a people constellation linked by who appears together, place and camera rankings, and records like your busiest day. Click any number and you land on the actual photos, ready to open in Immich, turn into an album, or send onward. Enrich puts an AI to work describing what it sees, writing captions, menu-driven tags, and quality scores for every photo using a local model through Ollama or LM Studio, or a cloud provider with your own key, on a scheduled daily budget. Those tags can sync back into Immich, so searching improves everywhere, not just here. Curate then collapses bursts and near-duplicates into stacks with a suggested keeper, and one keystroke keeps the best and skips the rest. Smart Albums compose rules from people, places, dates, cameras, and tags, preview the result count, and maintain real Immich albums on a schedule. Frame owners get remote control, display metrics, and voice photo questions, while the Activity feed and runtime-editable Settings keep the whole box manageable from the browser. It connects with a limited-permissions API key and cannot delete a single photo. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Haven gives your community a private chat server with voice calls, screen sharing, and end-to-end encrypted direct messages where friends join via invite link in their browser without installing apps or creating third-party accounts. Real-time messaging supports image uploads via paste and drag-drop, emoji reactions, replies, threads, typing indicators, @mentions with autocomplete, and inline GIF search through Tenor or GIPHY. Peer-to-peer WebRTC voice chat includes per-user volume sliders, mute and deafen controls, talking indicators, and screen sharing with picture-in-picture mode. Direct messages use ECDH P-256 key exchange with AES-256-GCM symmetric encryption where private keys never leave the browser, ensuring not even the server operator can read them. Twenty-plus visual themes with stackable effects including CRT scanlines, Matrix Rain, Cyberpunk Text Scramble, Snowfall, and Campfire Embers let users personalize the experience with configurable intensity sliders. Rich Presence integration shows what members are playing or listening to via Last.fm, Steam, and Spotify. A built-in bot API supports webhooks and custom slash commands, while Discord history import preserves channels, threads, forums, reactions, pins, and avatars. The Node.js server deploys via Docker Compose or a single batch file that auto-handles dependencies, SSL certificates, and configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your next product listing does not need a photo studio, because EcomGen turns the product facts and photos you already have into a complete image suite you approve shot by shot. Each product becomes a project that remembers its verified facts, banned claims, brand rules, target market, and platform requirements, so generation starts from what is true about the item rather than a fresh guess every time. An agent reads the template library and drafts a storyboard with a role for every image: hero, pain point, comparison, scene, detail, trust, variant, and conversion, and you edit and confirm each final prompt before anything renders. Twenty-five built-in templates and more than 1,100 reusable suites across 24 top-level categories keep a catalog visually consistent, and the Suite Forge can reverse-engineer a winning competitor set into a reusable template of your own. Product-truth pixel protection keeps the real item intact instead of letting the model improvise a different product. Finished shots can be masked, repainted, outpainted, and split into editable PNG and PSD layers, reviewed one by one, then exported as a ZIP with a manifest, while the model library keeps virtual models consistent across poses and scenes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 9,000 GitHub stars and a focus on developer experience over legacy monitoring complexity, Highlight.io delivers a unified observability platform that correlates frontend user behavior with backend performance data in a single interface. The session replay engine captures high-fidelity DOM recordings showing exactly what users experienced, including console logs, network requests, page transitions, and user interactions, with configurable privacy redaction for sensitive content. Error monitoring automatically groups and deduplicates errors, surfaces affected user sessions, and provides full stack traces with source map support for minified production code. The logging pipeline ingests structured and unstructured logs from any backend service with automatic property extraction, full-text search, and configurable alerting thresholds. Distributed tracing tracks request flows across microservices with embedded links to associated sessions, errors, and logs for complete request lifecycle visibility. The metrics system collects custom application metrics alongside built-in web vitals and performance data for trend analysis and anomaly detection. Search across all telemetry types uses a unified query language with automatic attribute discovery and saved views for recurring investigations. Integrations connect with Slack, Discord, Linear, Jira, Vercel, and dozens of other developer tools for notification routing and workflow automation. SDKs cover React, Next.js, Vue, Angular, Python, Go, Ruby, Java, PHP, and Elixir with framework-specific instrumentation. Self-hosted deployment runs via Docker Compose with ClickHouse for analytics storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 5,000 GitHub stars since its June 2026 launch, OOMOL OpenConnector bridges the gap between AI agents and the real world by handling the authentication nightmare that stops LLMs from calling external APIs safely. The runtime connects to more than 1,000 SaaS providers — GitHub, Gmail, Notion, Slack, Microsoft, HubSpot, Google Workspace, and hundreds more — through 10,000+ prebuilt typed Actions that agents can discover and execute without ever touching raw credentials. OAuth2 flows, API key rotation, custom credentials, and no-auth providers are all managed centrally with AES-encrypted storage, scoped runtime tokens, and configurable action allowlists and blocklists that enforce least-privilege access. Agents interact through five access surfaces: the Model Context Protocol endpoint at /mcp for Claude and other MCP-capable hosts, a full REST API at /v1 for programmatic control, an auto-generated OpenAPI specification for code generation, a TypeScript SDK for application integration, and the oo CLI for local agent relay. The built-in Web Console provides browser-based administration for configuring OAuth apps, managing connections, inspecting action schemas, and reviewing execution logs with redacted inputs. Deploy via Docker Compose with SQLite for single-server setups, run from source on Node.js 22+, or push to Cloudflare Workers with D1 and R2 for edge deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Notes on Windows, macOS, Linux, Android, iOS, and the terminal, synced through your own server: Joplin pairs its open-source clients with Joplin Server, the official self-hosted backend that replaces Dropbox, OneDrive, or Nextcloud as the synchronization target. Notes are Markdown with inline attachments (images, PDFs, audio), organized into hierarchical notebooks and sub-notebooks with cross-cutting tags, alongside to-do lists with reminders and alarms. End-to-end encryption is the headline feature: enabled in the clients, it encrypts sync payloads on-device before upload, so the server stores blobs it cannot read - genuine protection even if the host is compromised. The desktop app offers both Rich Text and Markdown editors, extended by a plugin ecosystem, custom themes, and an Extension API for writing your own scripts; a Web Clipper for Chrome and Firefox captures full pages or screenshots straight into notebooks. Joplin Server ships as a Docker image with SQLite for evaluation and PostgreSQL for production, offers a filesystem storage driver for large content, and includes multi-user support and note sharing - all free under AGPL-3.0 when self-hosted. Notes stay in an open format, so the exit path always exists.