PipesHub
Unify fragmented corporate knowledge across chat channels, documents, and cloud drives with PipesHub, an open-source workplace context platform providing permission-aware search and verifiable answers for teams and autonomous agents. Employees can query enterprise knowledge bases through a conversational interface that retrieves relevant information across Google Workspace, Microsoft 365, Slack, Confluence, Jira, and GitHub while strictly respecting individual user access permissions. Knowledge workers can verify every answer through clickable citation blocks that trace claims directly back to source documents, spreadsheet rows, or chat messages. Teams can assemble custom AI agents visually using a drag-and-drop builder, combining retrieval collections with interactive toolsets to automate multi-step operations like drafting customer responses or creating issue tickets. Autonomous agents connect via Model Context Protocol to inspect shared company knowledge and perform external actions across connected SaaS tools. Organizations can index scanned PDFs, slide decks, markdown pages, and spreadsheets with OCR and document parsing, maintaining synchronized records through automated schedules. Administrators can inspect synchronized records, monitor query history, and manage connector credentials across all integrated business applications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.
OxiCloud
OxiCloud is a self-hosted cloud for files, photos, calendars, contacts, and office documents. Drives can be personal or shared, with configurable storage quotas. Multi-gigabyte uploads travel as parallel, resumable chunks with integrity verification. Images, PDFs, audio tracks, and video streams preview right in the browser, and photos show EXIF details and map locations. Files sync over WebDAV. Calendars sync over CalDAV. Contacts sync over CardDAV. Desktop file managers, Thunderbird, Apple Calendar, and mobile DAVx5 clients connect without proprietary software. Collabora Online or OnlyOffice plug in through WOPI for real-time co-editing of spreadsheets, presentations, and text documents. Administrators enforce role-based access controls. Sign-in runs through OpenID Connect providers such as Keycloak, Authentik, or Azure AD. Public share links can carry a password and an expiration. Identical files are stored once, and adaptive compression keeps footprints compact. Local disks, Amazon S3, and Azure Blob can be mounted at the same time, with live background migration and automated consistency checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
Languagetool
Grammar, punctuation, and style errors a dictionary lookup can't see: LanguageTool is open-source proofreading powered by a Java rule engine covering English, German, Spanish, French, Portuguese, Dutch, and 25+ other languages. Self-hosting the HTTP server is how you get Grammarly-class checking without sending every sentence you write to a third party - a real concern when the text being proofread is confidential email, legal drafts, or unreleased documentation. Your instance exposes the standard /v2/check API, so the official ecosystem plugs straight in: browser extensions for Chrome and Firefox accept a custom server URL, and integrations exist for VS Code, LibreOffice, Obsidian, Vim, Emacs, and many editors. Notably, self-hosting restores free browser-extension checking that the hosted service moved behind a premium subscription - your server, no character limits, no paywall. Detection quality is tunable: optional n-gram datasets (multi-gigabyte language models for en, de, es, fr, nl) teach the engine word-order and confusion-pair errors like there/their and brakes/breaks, and a fastText model improves automatic language identification. Everything runs offline once models are downloaded. The core is LGPL, the API is documented with Swagger, and rules are community- maintained and constantly expanding.
AliasVault
Sign up for a new service and you face a familiar choice: hand over your real email and get spam-listed forever, or generate a throwaway alias that dies when you close the tab. AliasVault eliminates that trade-off by combining a password manager with a built-in email server, so every website gets a unique identity (random email, generated name, strong password) and incoming emails land directly in your encrypted vault rather than your primary inbox. Creating a new alias takes one click: the system generates a random address on your configured domain, a fake identity with name and birthdate, and a cryptographically strong password, all stored in a zero-knowledge encrypted vault that even the server administrator cannot read. Browser extensions for Chrome, Firefox, Edge, Safari, and Brave detect login forms and autofill credentials or prompt you to create a new alias on the spot. Native iOS and Android apps with biometric unlock provide mobile access to your vault and integrate with the operating system's autofill framework. The built-in TOTP authenticator generates time-based one-time codes without needing a separate app. Import existing credentials from other password managers through standard export formats, and export your vault data at any time for full portability. Self-hosting via Docker with your own email domain gives you complete control over where alias mail is received and stored, with no third-party dependencies. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Percona PMM
Backed by 1,080+ GitHub stars and maintained by Percona with the latest release v3.8.1 in June 2026, Percona Monitoring and Management delivers the open-source database observability platform that provides a single pane of glass across MySQL, PostgreSQL, MongoDB, Valkey, and Redis databases deployed on-premises, cloud, or hybrid environments. The Go-powered PMM Server collects metrics from lightweight PMM Client agents with minimal performance impact, storing time-series data in ClickHouse for fast querying across configurable retention periods. Query Analytics ranks every query by load across all database engines from one unified dashboard, drilling from fleet-level performance down to individual problematic queries with explain plans, per-query metrics, and anomaly detection. Real-time Query Analytics streams live MongoDB operations updated every 1-5 seconds for immediate troubleshooting of lock contention and long-running queries. Built-in Percona Advisors continuously scan connected databases for security gaps, misconfigurations, and performance problems, distilling decades of DBA expertise into automated actionable recommendations. Percona Alerting integrates with 15+ notification channels including Slack, PagerDuty, email, and webhooks to trigger on custom metric thresholds. Database-specific dashboards visualize InnoDB storage engine details, WiredTiger cache metrics, PostgreSQL tuple activity, replication lag, and cluster health with annotations for root-cause correlation. Deployment options include Docker single-container setup, Podman rootless execution, and Helm charts for Kubernetes with Ingress controller support and ConfigMap management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
DbGate
One browser tab can hold every database you manage, from MySQL and PostgreSQL to MongoDB and Redis, so there is no separate client to install for each engine. Connections are unlimited, and each can use its own SSH tunnel or SSL certificates. Tables open in an Excel-like grid where you edit cells inline, filter rows with expressions, and sort by any column. The SQL editor offers schema-aware code completion, a formatter, a join helper that builds clauses from foreign keys, query parameters, and a history of past runs, while result sets appear in separate tabs that you can filter, sort, and export. ER diagrams chart tables and their relations. The table editor creates columns, keys, and indexes and previews the SQL before anything is applied. Import and export move data between databases and files as SQL, CSV, JSON, XML, NDJSON, Excel, DBF, or YAML. Administrators can preconfigure connections through environment variables, mark them read-only, and protect the interface with logins that carry per-user permissions. Light and dark themes, customizable keyboard shortcuts, and translations into many languages keep daily work comfortable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
ReadMeABook
Instead of manually hunting through indexers and stitching chapter files together, ReadMeABook automates the entire audiobook request, download, and M4B library organization pipeline for Audiobookshelf and Plex. Users search an Audible-backed catalog by title, author, narrator, or series, inspect full book summaries with runtime and publisher metadata, and submit one-click requests from a clean browser portal. Once approved, the engine queries Prowlarr across torrent and Usenet indexers, dispatches releases to qBittorrent or SABnzbd, and monitors download progress until completion. Multi-file MP3 downloads merge automatically into a single chapterized M4B audiobook via FFmpeg, complete with embedded cover art, narrator tags, and series ordering metadata before triggering a media server library scan. Not sure what to listen to next? BookDate pairs OpenAI, Anthropic Claude, or local LLM endpoints with a swipeable card deck that learns your reading tastes and queues new titles with a single swipe right. Optional e-book sidecar fetching grabs companion EPUB or PDF files alongside audio releases, while multi-user approval queues, OIDC single sign-on, Goodreads shelf syncing, and Discord, Pushover, Apprise, or ntfy notifications keep household libraries running smoothly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
CommaFeed
CommaFeed delivers the Google Reader experience on your own infrastructure with modern performance characteristics. The Quarkus-based Java backend compiles to native code via GraalVM, achieving sub-second cold starts and 50MB memory footprint — a fraction of traditional JVM RSS readers. Four distinct layouts (title-only, expanded, magazine, and card) with light and dark themes adapt to any reading style, while comprehensive keyboard shortcuts cover navigation, marking, starring, and feed management without touching a mouse. The Fever-compatible API and newly added Google Reader API connect native iOS and Android apps (Reeder, Unread, FeedMe, ReadKit) directly to your instance. Per-feed push notifications through ntfy, Gotify, or Pushover alert you to new articles instantly. The visual query builder for automatic read-marking rules replaces raw expression syntax with an intuitive condition editor supporting title, content, author, and URL matching. OPML import and export enable seamless migration from any RSS service. Custom CSS and JavaScript injection let power users completely restyle the interface, while the browser extension adds one-click subscription from any website. Docker images for linux/amd64 and linux/arm64 with H2 embedded database require zero configuration to start. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
freehire
A job search engine you host yourself, freehire collects postings from employer career pages, so results link back to the original listing instead of a recruiter repost. Adapters for Greenhouse, Lever, Workday, Ashby, iCIMS, and dozens more normalize every posting into one schema and collapse cross-board duplicates into one entry. Full-text search narrows results by region, work mode, seniority, skills, and salary using curated dictionaries instead of model guesses, so filters return what they promise. Saved searches send email or Telegram digests of new matches, shared boards travel as unindexed links, and insights and trends show which skills are gaining postings and what roles pay by region. A ghost-job signal flags repost patterns and stale listings and shows its evidence, so you can spot roles that never actually close. The CV builder renders PDFs from templates marked ATS-safe or not, a deterministic score compares CVs with vacancies, and a connected LLM tailors CVs using only facts you assert, then rehearses the interview. An application board tracks every stage, a mail inbox links recruiter replies to the application they answer, and reminders flag silent leads. Self-hosters choose their own sources: one catalog row adds a company, and cron-driven workers crawl and index it. A keyless public API, a CLI, and an autofill Chrome extension extend it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.
FileBrowser Quantum
FileBrowser Quantum is an open-source, self-hosted web file manager that transforms any directory tree or mounted storage volume into a fast, searchable cloud drive accessible from any browser. You can mount multiple independent filesystem sources at once and apply custom include or exclude rules to keep sensitive system folders hidden from everyday browsing. A background indexing engine powers instant as-you-type search across millions of files, letting you filter results by file size, folder size, media type, or modification date in milliseconds. Rich media thumbnails render automatically for videos, office documents, audio album artwork, and interactive 3D models, while integrated OnlyOffice support lets you edit spreadsheets and word processing documents directly inside your browser tab. Built-in WebDAV server support allows desktop operating systems and mobile file apps to mount your remote directories as native network drives. Sharing files with external collaborators takes seconds through customizable public or private links with expiration timers, download limits, password protection, anonymous upload permissions, and custom branding themes. Administrators can authenticate users via OpenID Connect, LDAP, JSON Web Tokens, proxy headers, or local passwords with two-factor authentication, then enforce path-level read, write, and delete rules per user or group. Developers and automation engineers can generate long-lived API tokens and explore the interactive Swagger endpoint to script file transfers and directory provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Rallly
What Doodle did before ads and paywalls took over: Rallly (three L's) lets you propose a few dates, share a link, and watch an availability grid fill in - no email threads, no forced accounts, no "$6.95/month to remove ads." The availability grid makes the winning slot obvious at a glance, comments on each poll keep the "I can do Tuesday if we start late" discussion attached to the decision instead of buried in chat, and email notifications fire as votes and comments arrive. When consensus lands, finalize the winning option and everyone gets notified. The stack is modern TypeScript - Next.js, tRPC, Prisma over PostgreSQL, Tailwind - with a clean, genuinely mobile-friendly UI, dark mode, and community translations in 10+ languages. Self-hosting means unlimited polls and unlimited participants with meeting data on your server rather than a scheduling SaaS. It pairs naturally with Cal.com: Rallly answers "which time works for everyone?", Cal.com handles "book a slot on my calendar." AGPL-licensed.
Vaultwarden
The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.
Jotty
No external database cluster to babysit, no proprietary cloud lock-in, and no bloated workspace hierarchy: Jotty stores every note, checklist, and Kanban board as plain Markdown and JSON files inside a single folder on your server. Need a quick grocery list with nested categories, progress bars, and drag-and-drop reordering? Spin one up in seconds, or flip any list into a multi-column Kanban project board with custom statuses, due-date calendar views, and a built-in time tracker. Write technical documentation in a TipTap-powered WYSIWYG and Markdown editor featuring syntax-highlighted code blocks, GitHub-flavored callouts, embedded Draw.io and Excalidraw diagrams, and OpenPGP client-side encryption for sensitive records. Connect ideas across your workspace using Obsidian-compatible wikilinks, inline mention suggestions, backlinks, and an interactive 2D and 3D knowledge graph that maps relationships between tasks and notes. Share individual notes or live Kanban boards publicly via customizable read-only links, or start the optional Model Context Protocol (MCP) companion container so AI assistants like Claude and Cursor can query your notes and check off items through your scoped REST API key. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Bazarr
Subtitles are the one chore Sonarr and Radarr leave behind - Bazarr finishes the *arr media stack by automating them. It connects to both via their APIs and mirrors their libraries - it doesn't scan disk itself, it manages exactly what your *arr apps index. For every monitored episode and movie it checks existing internal and external subtitles against your language profiles, then hunts missing ones across dozens of providers - OpenSubtitles.com, Podnapisi, Addic7ed, Subscene, and many regional sources - covering 184 subtitle languages including forced/foreign-dialogue tracks. Matching is smarter than filename guessing: releases are compared by release group and source, some providers support exact file-hash matching, and every downloaded subtitle gets a percentage score. Set a minimum score per Sonarr/Radarr connection and Bazarr rejects weak matches; enable upgrades and it replaces previously downloaded subtitles when better ones surface. Out-of-sync files get fixed too - automatic subtitle synchronization realigns timing after download, triggered only below a configurable score threshold so good subs aren't touched. Per-show and per-movie language configuration, download history, manual on-demand search, and adaptive searching that throttles provider API calls round it out, all behind a clean Sonarr-style web UI written in Python. If your library serves multilingual viewers, this removes the last manual step.
Fluxer
Fluxer gives friends, gaming groups, and private communities their own self-hosted instant messaging and VoIP platform that replaces Discord with private text channels, voice rooms, video calls, and screen sharing. Members can chat one-on-one in direct messages, form multi-person group conversations, or organize large community servers into categorized text and voice channels with threaded replies, reactions, and typing indicators. When a conversation moves to voice, participants can join low-latency audio and video rooms from multiple devices simultaneously, share application windows or full screens, and rely on built-in noise suppression and echo cancellation for clear calls. Rich media support allows users to share file attachments, preview embedded links, search animated GIFs through KLIPY, and upload custom community emojis and stickers. Server administrators control access through role-based permission hierarchies, member timeouts, kicks, bans, and detailed moderation audit logs that track every configuration change across the community. Integrated full-text search lets members quickly locate historical messages, code snippets, and shared files across every channel they can access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.
Quickwit
With over 11,000 GitHub stars and now backed by Datadog while remaining fully Apache 2.0 licensed, Quickwit delivers the search performance Elasticsearch users expect at a fraction of the infrastructure cost by moving the index to object storage instead of expensive local SSDs. The Rust-based engine, built on the Tantivy search library with SIMD-accelerated vectorized processing and zero garbage collection overhead, achieves sub-second search latency directly against Amazon S3, Azure Blob Storage, Google Cloud Storage, or any S3-compatible backend like MinIO and Ceph. The Elasticsearch-compatible REST API covers ingest, search, query DSL, and aggregations, enabling existing log shippers including Vector, Fluent Bit, and Syslog to migrate without rewriting configurations. Native OpenTelemetry Protocol endpoints accept logs and traces via gRPC, while Jaeger integration provides a drop-in distributed tracing backend. Ingestion from Apache Kafka, Amazon Kinesis, and Apache Pulsar supports streaming pipelines with multi-index partitioning, and the schemaless JSON indexing mode eliminates the need for upfront schema definitions. Stateless searchers and indexers scale horizontally on Kubernetes or bare metal, with a control plane that distributes indexing tasks and a janitor that manages retention policies and GDPR-compliant deletions. The built-in web UI displays search results and cluster state, while the official Grafana data source enables log exploration dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.
Distr
Shipping commercial software to customer-managed infrastructure demands a reliable distribution hub, and Distr provides that control plane for vendors who sell into VPCs, on-prem data centers, and air-gapped networks. Vendors define Docker Compose, Docker Swarm, or Helm applications with versions and configuration templates, then roll releases out to every customer deployment from a single vendor portal. Prebuilt deployment controllers installed in customer environments apply updates and report status, container logs, live host metrics, and alerts back, so support teams can diagnose problems without touching anyone's infrastructure. Customers get a white-labeled portal with your branding, install instructions, registry credentials, version management, and customer-initiated support bundles. A built-in OCI registry distributes Docker images, Helm charts, Zarf packages, and other artifacts with per-customer tag access, pull-through caching, and download analytics showing which customer pulls which version. Entitlements control which application versions each customer may deploy, and Ed25519-signed JWT license keys let your own software verify usage limits offline, which keeps licensing working in air-gapped sites. An OpenTofu controller provisions and reconciles BYOC cloud infrastructure, while a REST API and SDK automate onboarding, releases, and entitlements from CI pipelines. Role-based access control manages permissions across vendor and customer organizations, while the Kubernetes compatibility matrix and vulnerability scanning help validate releases before they ship. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.
Cryptpad
End-to-end encrypted by design, CryptPad is a real-time office suite where teams write documents, plan on kanban boards, collect answers with forms, and draw diagrams without the hosting server ever seeing their content. Rich text pages come with comments, replies, @mentions, and a document outline, while the Markdown editor adds a live preview, Mermaid diagrams, mind maps, and math. Kanban columns hold colored, tagged cards with Markdown bodies, and the diagram editor exports PNG, JPG, SVG, or PDF. Optional ONLYOFFICE editors add spreadsheets, word-processing documents, and presentations that several people can edit together. The form builder offers text, choice, grid, date, ranking, and poll questions, conditional sections, and separate author, auditor, and participant roles. Documents can be shared with contacts or teams, by link, or as embed code, with view, edit, present, or view-once access. Passwords, expiry dates, owner lists, and access lists limit who gets in, and every edit lands in a history you can step through, restore, or pin as a named snapshot. CryptDrive keeps files in folders, tags, templates, and a trash bin, while teams get their own drive, chat, and member roles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.