For teams that answer customers by email, UVdesk is a free, self-hosted helpdesk that keeps every conversation in one shared queue. Customers have three ways in: a connected mailbox, the support portal, or a public ticket link that opens a conversation without a login. Gmail, Yahoo, Outlook, or any IMAP mailbox can feed the queue, with no limit on how many. Agents work in a threaded ticket view, where they reply, forward to a colleague, leave private notes, add collaborators, and pin important messages. Saved replies answer repeat questions, and prepared responses set a status, tag, priority, or assignment from the ticket footer. Administrators route work through groups and teams, and agent privileges decide which tickets each person may see. Workflows run events, conditions, and actions in the background, while spam settings reject senders by address, domain, or IP. A knowledge base of folders, categories, and articles, with revision history and related articles, lets customers find answers without writing in. Customers can rate the support they received, and the Kudos report lists those ratings by agent, group, team, type, priority, customer, or source. Portal branding covers a logo, brand colors, a tag line, and custom CSS and JavaScript. The community edition places no cap on agents, groups, teams, customers, or tickets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. OSL-3.0 licensed.

What Jellyfin is for video, Komga is for comics, manga, BDs, magazines, and eBooks: point it at folders of CBZ, CBR, CBT, PDF, and EPUB files and it becomes a proper library with cover art, embedded metadata import, and per-user reading progress. The responsive web reader handles multiple reading modes - left-to-right for western comics, right-to-left for manga, webtoon scrolling - while collections and read lists organize crossovers and story arcs, with ComicRack .cbl read list import for existing curation. Its openness is the real differentiator: OPDS v1.2 and v2.0 feeds serve virtually every reader app (Panels, Moon+ Reader, Mihon/Tachiyomi, KyBook), with OpenSearch and page-streaming extensions so mobile apps fetch pages on demand instead of whole archives. E-ink support is built in, not bolted on - Kobo devices sync directly against Komga instead of Kobo's servers, with two-way read progress, on-the-fly KEPUB conversion via Kepubify, and optional proxying so official Kobo purchases still work; KOReader sync covers everything else. Multi-user management brings per-library access control, age restrictions, and label restrictions for family setups. Housekeeping tools detect duplicate files and duplicate pages, and a REST API feeds a healthy ecosystem of community scripts. Runs from a single Docker container with embedded SQLite.

A federated bookmark manager written in Rust: Ties (formerly linkblocks) is your own small corner of the web for saving, organizing, and sharing good pages, connected to the fediverse over ActivityPub. Instead of rigid folders, bookmarks live in arbitrarily nested lists that link together into a knowledge graph. Saved pages are fetched, converted to a readable archived version, and stored in the database, so full-text search covers titles, URLs, and the actual page text - and the content survives if the original disappears. The federation model is deliberately anti-viral: there is no global timeline and no algorithmic feed. You publish public lists for anyone, follow users whose taste you trust, and mark trusted users whose bookmarks become part of your search range - extendable to trusted-users-of-trusted-users for a wider net. Public bookmarks post to Mastodon timelines, and WebFinger lookup makes your handle discoverable across fediverse platforms. Operationally it is about as light as web software gets: a single binary with all assets baked in, integrated TLS so it can run without a reverse proxy, PostgreSQL as the only dependency, OIDC single sign-on, and a bookmarklet for one-click saves. Note the project is alpha: single-user instances only, and all data should be considered public. AGPL-3.0 licensed, built with Rust and htmx.

Gitea Mirror is an automated Git repository synchronization platform that mirrors your personal, starred, and organizational GitHub repositories directly to a self-hosted Gitea or Forgejo server. Through the web dashboard, you can connect standard GitHub accounts or GitHub Enterprise environments, discover newly created repositories automatically, and schedule recurring background sync intervals so your self-hosted forge always holds an up-to-date backup. Beyond raw Git commits and branches, the application transfers full repository metadata including issues, pull requests, labels, milestones, releases with attached assets, and project wikis. Teams managing large binary assets such as machine learning weights, media files, or game textures can enable Git LFS mirroring to replicate large objects alongside source code. Organization administrators can map entire GitHub organizations to custom destination namespaces, apply configurable fork handling strategies, preserve source visibility settings, and mark specific repositories to ignore. Built-in force-push protection detects destructive upstream history rewrites and offers backup-on-demand or block-and-approve workflows, while automatic cleanup rules prune deleted upstream repositories and expired activity logs. Access to the management console is secured with local accounts, reverse-proxy header authentication, or external SAML 2.0 and OpenID Connect identity providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Sending a client a big file should not mean renting seats on someone else's cloud, and PlikShare turns your own server into a file sharing platform with unlimited users, unlimited workspaces, and no per-seat pricing. Its central idea is the box: a controlled gateway between your folders and the outside world, where you invite collaborators, mint anonymous links, and decide who may upload, download, preview, or drop files into an upload-only inbox. Quick share links carry custom slugs, expiry dates, passwords, and download caps, and every box can embed into another website as a live widget whose permissions update the moment you change them. Storage is your choice per workspace, from the server's own disk to S3, Cloudflare R2, Backblaze B2, Azure Blob, Google Cloud Storage, or any S3-compatible server, and each storage picks one of three encryption modes, including full encryption where names and contents are sealed with keys derived from each user's password. Bulk uploads arrive as a single zip that rebuilds its folder structure on landing, bulk downloads assemble from an explorer tree, and previews cover video, audio, PDFs, Markdown with diagrams, and even the inside of zip archives. Single sign-on through multiple OIDC providers, granular admin roles, an optional MCP server for scoped AI agents, and OCR or chat integrations round out a platform that stays lean on a small server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Draw a pipeline, push code, and watch it build, deploy, and roll back on its own: Pipewright is a self-hosted CI/CD platform delivered as one static binary. Pipelines are drawn on a two-level canvas of stages and jobs, then run with matrix builds, sidecar databases for tests, manual approval gates, and typed parameters validated at trigger time. The pipeline can also live in the repository as a per-branch .pipewright.yml file, and triggers cover webhooks, schedules, branch to environment mapping, and chained pipelines. Builds run isolated inside containers with cached dependencies and a content-addressed artifact store, and JUnit and Cobertura reports feed quality gates that stop bad code before deployment. Deployment is agentless over SSH: health checks gate a zero-downtime cutover, failures roll back on their own, and environments track their active version with one-click rollback and promotion toward production. Deployed services receive HTTPS domains through a managed Caddy proxy with automatic certificates, path routing, and load balancing, and each pull request gets a throwaway preview address with its own certificate. The operations side watches host CPU, memory, and disk, manages containers and networks across servers, and opens terminals in the browser. Notifications route by event to Slack, email, WeCom, DingTalk, Lark, or a webhook, approvals arrive as signed links, and the four DORA metrics are computed out of the box. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Trusted by thousands of organizations with over 30 million monthly downloads and 20,000+ GitHub stars, MLflow is the largest open-source AI engineering platform providing end-to-end lifecycle management for traditional ML models, LLMs, and AI agents. The OpenTelemetry-based tracing system captures complete request flows through any LLM provider or agent framework — including OpenAI, LangChain, DSPy, Vercel AI, PydanticAI, and smolagents — with one-line auto-instrumentation that tracks inputs, outputs, token usage, and costs at every intermediate step. MLflow's evaluation engine offers 50+ built-in metrics and LLM judges for systematic quality assessment, detecting issues across correctness, latency, adherence, relevance, and safety dimensions before code reaches production. The Prompt Registry versions, tests, and deploys prompts with full lineage tracking while automated optimization algorithms improve prompt performance using evaluation feedback. The AI Gateway provides a unified API endpoint for all LLM providers, enforcing rate limits, cost controls, and access policies across the organization. MLflow 3.0 introduces the LoggedModel abstraction linking traces, metrics, and prompts to specific model versions across Python, TypeScript, Java, and R SDKs. The model registry manages deployment workflows with automated quality gates, while experiment tracking records parameters, metrics, and artifacts across training runs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache License 2.0 licensed.

One browser tab can run your whole server, and FileCat is the tab: a self-hosted web file manager that also serves as a lightweight server operations console. Browse, upload, download, and edit files with inline previews for images, video, and Markdown, then keep writing in a Typora-style WYSIWYG Markdown editor or sketch on the built-in Excalidraw whiteboard. Remote storage stops being remote: SFTP, S3, WebDAV, SMB shares, and Baidu Netdisk mount as ordinary local folders under the same operations, and your own directories publish back out over SMB, WebDAV, and SFTP for Windows Explorer and other clients. A web SSH terminal and in-browser RDP sessions reach servers and Windows desktops without separate tools, and the system dashboard watches CPU, memory, disk, and network in real time. Oversized log files open instantly, deep search digs through names and file contents with regex and filters, and custom command pipelines cover CI/CD routines across machines linked by the built-in network tunneling. An optional AI agent, connected to your own model API and reachable through chat platform bots, assists with operations and file tasks, and multi-user permissions with shareable download links decide who touches what. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Bludit is a flat-file content management system that runs your website or blog from plain JSON files, giving you a complete admin panel and publishing workflow with no database anywhere in the stack. Writing feels familiar whichever way you work: draft posts and pages in the Markdown editor, switch to the WYSIWYG editor when you want to see the page as you build it, or drop into HTML for exact control. Cover images, galleries, and uploads live in the media manager, and categories and tags keep a growing archive browsable. Built-in SEO tools handle titles, meta descriptions, and friendly URLs, so pages come out ready for search engines and social previews without another plugin hunt. When the look needs to change, the official theme directory restyles the whole site from the admin area, and the plugin directory adds galleries, contact forms, and analytics the same way. Moving day is a copy command: the entire site, content and settings included, is a folder of files you can duplicate, back up, or carry to another server. Because every page renders from files with no database round trips, modest hardware serves pages quickly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 600 GitHub stars and a featured Show HN launch, Mission Control is the agent-first command center that replaces the chaos of manually shepherding AI agents with structured delegation, approval workflows, and autonomous execution. The Next.js 15 web UI delivers an Eisenhower priority matrix with drag-and-drop quadrants, a Kanban board tracking tasks through Not Started, In Progress, and Done columns, and a goal hierarchy with milestone progress bars — powered by shadcn/ui, Radix UI, and @dnd-kit. Six built-in agent roles — Researcher, Developer, Marketer, Business Analyst, Tester, and You — receive tasks through a token-optimized API compressing context by 92 percent to approximately 50 tokens versus 5,400 unfiltered. The autonomous daemon polls task queues on cron schedules, spawns Claude Code sessions via the official CLI, enforces concurrency limits, and auto-retries with loop detection that escalates to human decisions after three failures. Field Ops extends execution to 64 external services across 16 categories with working X, Ethereum with MetaMask signing, and Reddit adapters, protected by AES-256-GCM encrypted vault with scrypt key derivation, per-service and global spend limits, a circuit breaker, and three autonomy levels. All data lives in local JSON files with Zod validation and async-mutex locking ensuring safe concurrent writes, backed by 193 automated Vitest tests. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Canvix is a self-hosted design studio that lets anyone create social posts, presentations, posters, logos, and thumbnails in the browser with a drag-and-drop editor, 110 ready-made templates, and exports with no watermarks. You start from a template sized for the platform you are publishing to, then drag in shapes, lines, stickers, and your own images, moving, resizing, and rotating everything directly on the canvas. Text gets proper typography controls, with bundled fonts, styles, spacing, alignment, and curved text that arcs across the design. Layers can be reordered and locked while smart guides snap elements into alignment, and a full undo history plus autosave means a closed tab never costs you the work. Finished designs export as PNG, JPG, SVG, PDF, or video at up to three times resolution, ready to publish anywhere. Free accounts keep each person's designs private to them, while share links open a design for anyone to view or continue editing. Version snapshots let you roll a design back when an experiment goes wrong. The AI tools, magic edit, magic write, background removal, and translation, run against your own API keys, so nothing is metered. An optional MCP endpoint even lets AI assistants create and edit designs for you. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Real-time alerts from your own infrastructure to your phone, with no Firebase, Pushover, or third-party push service in the path: Gotify is a simple, self-hosted notification server written in Go. The model is deliberately minimal: senders push messages with a single HTTP POST to the REST API, receivers subscribe over a WebSocket stream, and a clean React web UI manages the pieces. Senders are namespaced as "applications," each with its own token, so your backup script, Uptime Kuma, CI pipeline, and cron jobs each get an identity, an icon, and independently revocable credentials - centralized alerting from many services with per-source management. Messages carry a title, body, and priority level that maps to notification importance on the client. The official Android app (on both F-Droid and Google Play, notable for working entirely without Google Play Services) shows push notifications for new messages; the web UI itself supports Web Push in the browser; and gotify/cli pushes messages from shell scripts with one command. A server-side plugin system adds custom behavior, and the whole thing runs as a single small binary with SQLite by default - near-zero resource footprint. Because dozens of tools (and Apprise) speak Gotify natively, it slots in as the notification hub for an entire homelab or ops stack.

AzuraCast is a solution for running internet radio stations, packaging the entire broadcast stack into a single Docker installation that gets you on air in minutes. Built on PHP with a Vue.js frontend, it uses Liquidsoap as the AutoDJ engine to compile media from playlists, live DJ inputs, and scheduled programming into composited output streams, then broadcasts via Icecast-KH, SHOUTcast 2 DNAS, or Rocket Streaming Audio Server to thousands of concurrent listeners. The media library supports drag-and-drop uploads with automatic metadata extraction, while playlist management handles sequential, random, weighted, and time-scheduled rotations. Live DJ accounts let remote broadcasters connect via BUTT, Mixxx, or any Icecast-compatible software, with automatic crossfade transitions between AutoDJ and live input. The built-in Web DJ tool enables broadcasting directly from the browser without additional software. Each station includes public-facing player pages with now-playing metadata, album art, song history, and embeddable widgets for external websites. The listener request system lets audiences queue songs through the public interface. Multi-station administration hosts unlimited stations on a single server with individual user accounts and granular role-based permissions. Comprehensive analytics track listener counts, geographic distribution, unique listeners, and listening duration with exportable reports. HLS streaming delivers adaptive bitrate broadcasts for mobile compatibility. LADSPA audio plugins enable professional equalization and processing in the stream pipeline. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Give your team a shared chat workspace where AI bots sit next to people, answer questions, and pick up recurring work. Organize conversations into pods with channels and threads, and keep a private personal pod for each member. Mention a bot with @ to hand it a task, mention several and each one replies, or let a bot ask another bot for help. Every bot gets its own name, avatar, instructions, and model, picked from OpenRouter, Anthropic, OpenAI, Google Gemini, or any OpenAI-compatible endpoint you add. Connections link a pod to GitHub, Linear, Stripe, Notion, Sentry, Jira, any MCP server, or any HTTP API, and bots act through them with approvals where you want a human check. Routines run a bot on a schedule, a webhook, or a GitHub event, then post the result to the pod channel. Computers give bots an isolated machine for heavier jobs, and web search lets them look things up and cite pages. A Usage page breaks down what bots cost by bot, model, and pod. Use it for a support desk, an engineering ops room, a morning briefing, or a shared research assistant. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With 2,600+ GitHub stars since its May 2026 open-source launch, Knowhere solves the last-mile problem of document intelligence for AI systems — transforming complex unstructured PDFs, reports, and multi-page documents into structured JSON chunks that LLMs can consume without hallucination. The platform processes documents through an AI-native parsing pipeline that handles 20+ page documents with deep hierarchies, intricate tables, and multimodal content including images with OCR, achieving 95% precision in information extraction while reducing token costs by 50% compared to raw document ingestion. The knowledge tree architecture maintains historical context across multiple documents, enabling cross-document graph navigation for agentic retrieval that goes beyond simple chunk-based RAG. Built on Python 3.11+ with MinerU as the default PDF parser, the backend API runs alongside async workers that process document ingestion, graph construction, and embedding generation. The self-hosted Docker Compose stack packages the API server, processing workers, and Next.js dashboard for managing API keys, webhooks, and document-processing jobs, backed by PostgreSQL and Redis. Both Python and Node.js SDKs provide programmatic access for integration into existing AI pipelines and agent frameworks. LLM providers include DeepSeek and Alibaba Cloud DashScope with configurable key rotation for rate-limit management. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Backrest turns the command-line restic backup engine into a visual, browser-managed disaster recovery platform that schedules encrypted snapshots, orchestrates repository maintenance, and restores individual files from a unified web dashboard. Import existing restic repositories or initialize new encrypted backup stores across Amazon S3, Backblaze B2, Google Cloud Storage, Azure Blob Storage, SFTP servers, local directories, and any storage provider supported by rclone. Define granular backup plans with directory inclusion lists, glob exclusion rules, and flexible schedules driven by cron expressions, hourly intervals, or last-run-time clocks that prevent missed backups after server downtime. Automated retention policies handle snapshot forgetting, repository pruning, and cryptographic integrity checks in the background without manual intervention. When a file is accidentally deleted or corrupted, open the interactive snapshot tree browser to inspect historical directory structures and download or restore specific files directly to disk. Pre-backup and post-backup shell command hooks let administrators dump databases or pause containers before snapshots start, while configurable alerts dispatch status reports to Discord, Slack, Gotify, Healthchecks, and Shoutrrr endpoints whenever an operation succeeds or fails. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Up to 280 search services - Google, Bing, DuckDuckGo, Brave, Qwant, Startpage - aggregated without tracking or profiling: SearXNG is a privacy-respecting metasearch engine (AGPL-3.0, successor to Searx). Your instance queries the upstream engines on your behalf: your IP address, cookies, and search history never reach them, tracker parameters are stripped from result URLs, and an optional image proxy fetches thumbnails server-side so result pages leak nothing. It can even route outbound queries through Tor for full anonymity. Search is organized into categories - general, images, videos, news, maps, music, IT, science, files - with bang shortcuts for targeting specific engines, and every source can be enabled, disabled, or weighted per category in settings.yml. A plugin system adds calculators, hash tools, tracker removal, and unit conversions inline, and preferences (themes, safe search, languages, engine selection) persist in cookies rather than server-side accounts. The real argument for running your own instance rather than trusting a public one is control: you decide the logging policy (none), the engine mix, rate limiting, and who gets access - making it the default search backend for browsers, families, and teams that want Google-quality results without the profile.

Production debugging slows to a crawl when logs, distributed traces, metrics, and session replays live in four disconnected dashboards, which is why Traceway consolidates every OpenTelemetry signal into a single self-hosted observability platform. Point any standard OTLP exporter directly at the ingestion endpoints without maintaining an intermediary collector or installing proprietary vendor SDKs. When an unhandled exception fires in production, automatic SHA-256 stack trace fingerprinting groups duplicates into prioritized issues complete with source-mapped frames and attached browser or Flutter session replays showing exact user clicks before the crash. Clicking any structured log entry jumps straight to its corresponding distributed span waterfall so engineers can trace slow database queries or failing downstream HTTP calls across microservices. Route performance bottlenecks surface immediately through per-endpoint P50, P95, and P99 latency percentiles ranked by Apdex and a five-factor impact score. Teams shipping AI features can also inspect LLM token consumption, model costs, tool calls, and multi-turn conversations grouped by customer identifier. Built-in on-call rotation schedules, escalation policies, and multi-channel alerts via Slack, Telegram, Pushover, email, and webhooks ensure incidents reach the right responder with one-click acknowledgment links. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.