Plain chunk retrieval hands an LLM disconnected excerpts; LightRAG builds a knowledge graph from your documents so answers can join facts spread across many files. Ask about one named person, product, or clause and local mode pulls its details. Ask for themes across the whole library and global mode follows the links between entities. Hybrid blends the two, naive falls back to plain chunk search, and mix combines all three. Mix is the default. Upload text, Markdown, PDF, Word, PowerPoint, and Excel files; MinerU, Docling, or the native parser can extract images, tables, and formulas. The admin console manages documents, explores the graph visually, and debugs queries, while a query-only workspace page gives everyday colleagues a clean chat screen that works on phones. A REST API covers indexing and queries, and an Ollama-compatible endpoint lets chat front ends such as Open WebUI use the knowledge base as a model. New files merge into the existing graph without a full reindex, and deleting a document rebuilds only the entities and relationships it touched from cached results. Separate model roles let an inexpensive model extract entities while a stronger one writes answers. An API key or accounts protect the server, and named workspaces keep several knowledge bases apart. Pair it with local Ollama models and no document text leaves the server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ZincSearch runs full-text search as a single Go binary that consumes a fraction of the memory and CPU that Elasticsearch demands while staying API-compatible, earning 17,800+ GitHub stars as a lightweight alternative. The bluge-powered indexing library processes documents through analyzers, tokenizers, and token filters while maintaining Elasticsearch-compatible ingestion APIs for single-record and bulk operations, letting existing pipelines connect with minimal configuration changes. Schema-less document ingestion accepts JSON payloads without predefined mappings, allowing different documents within the same index to carry different field structures while the engine automatically detects and indexes field types. An embedded Vue.js web console provides a browser-based interface for creating indexes, querying with full-text syntax, browsing results with hit highlighting, managing users, and monitoring system status. A dual API architecture exposes native ZincSearch endpoints under /api alongside Elasticsearch-compatible endpoints under /es, supporting boolean operators, wildcards, phrase matching, fuzzy search, date ranges, and aggregation pipelines including terms, histogram, date histogram, and range aggregations. Multi-tenancy with user-level access control isolates data across teams. Official SDKs for Go, Python, and Node.js provide typed client libraries for programmatic integration. Deploys via Docker or direct binary download with no external dependencies beyond disk storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Retrospectives, sprint poker, check-ins, and standups all get a home in Parabol, a meeting workspace that walks agile teams through each ritual one stage at a time and keeps every outcome in one place. A retrospective flows from icebreaker to reflect, group, vote, and discuss, with anonymous reflection cards that stay hidden until everyone is done writing, then cluster into themes before dot voting decides what deserves airtime; Start/Stop/Continue, 4Ls, and Mad/Sad/Glad templates are ready to use or customize. Sprint Poker estimates stories on Fibonacci, T-shirt, or custom scales, pulling backlog items from Jira Cloud, GitHub, GitLab, or Linear and pushing the agreed estimate back. Check-ins work through agenda items and task updates, while standups gather written answers on a recurring schedule so distributed teams stay current across time zones. A facilitator timer sets deadlines for asynchronous contributions, with optional Slack or Mattermost notifications to the team. Action items land on a shared task board with active, stuck, done, and future columns, and Pages hold real-time collaborative notes next to the meetings that produced them. Every meeting closes with a summary of attendees, discussion, and next steps that can be emailed to the team. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Network traffic stops being a mystery once ntopng names the hosts, applications, and protocols behind every flow, live in your browser. To find the host saturating an uplink, open the dashboard, which ranks top talkers, countries, autonomous systems, and protocols beside historical charts. To see what a suspicious host is contacting, open its page for traffic, ports, DNS queries, TLS details, and visited sites, plus a map of its conversations. Deep packet inspection recognizes applications such as Facebook, YouTube, and BitTorrent, so charts name the app behind the bytes instead of relying on port numbers alone. The console reads packets from a SPAN port or TAP and NetFlow, sFlow, or IPFIX records from routers and switches through nProbe, so it can cover a single switch or many remote sites. Behavioural checks raise alerts for flows, hosts, and interfaces and send them to email, Discord, Telegram, or webhooks. Active monitoring probes remote hosts over ICMP and HTTP/S, and network discovery lists the devices on your local network. A REST API and Lua scripting pull statistics into your own tools and add custom checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Fleet lets IT and security teams query every device in their organization like a SQL database, using osquery to surface installed software, running processes, configurations, and vulnerabilities within seconds across macOS, Windows, Linux, iOS, Android, and ChromeOS. The Go-based server exposes a web console and REST API for centralized device management, with MDM capabilities built on nanoMDM for Apple device enrollment, configuration profiles, and remote lock or wipe. Vulnerability management cross-references installed software inventories against NVD and OVAL CVE databases, automatically flagging known vulnerabilities with severity scores and remediation guidance. Software deployment handles OS updates using Apple Declarative Device Management, Windows Update, and custom installer packages distributed through S3-compatible storage. A GitOps workflow enables infrastructure-as-code management where device policies, osquery queries, and configuration profiles live as YAML files in Git repositories, with CI/CD pipelines pushing changes through the fleetctl CLI. The fleetd agent bundle includes osquery for telemetry, Orbit for version management, and Fleet Desktop providing end users a menu bar status indicator. Integrations connect to Snowflake, Splunk, Elastic, Jira, Zendesk, Vanta, and GitHub Actions for automated compliance reporting. CIS benchmark policies verify security baselines across operating systems. Deployment requires MySQL for persistence and Redis for caching, running as Docker containers or on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Spotify gets a Wrapped; your media server deserves one too. Rewindarr is an open-source companion for Plex and Jellyfin that turns play history into a story your users step through, card by card: total watch time, how it split across movies, shows, and music, how they rank against the average viewer, and the viewing personality their habits earn them, ending in a summary they can save as an image and share. The same deployment doubles as an everyday dashboard for the whole server, with watch time, requests, library size, and per-library leaderboards for movies, shows, music, and users across a week, a month, a year, or all time. Live activity shows what is streaming right now, and searchable history groups binges together so a weekend disappears into one tidy entry. Ratings from TMDB, IMDb, and Rotten Tomatoes sit beside every title, request buttons reconnect viewers with deleted favourites through Seerr, and anonymisation trims user details when you share the dashboard wider. Statistics flow in from Tautulli or Tracearr for Plex and from Tracearr for Jellyfin, everyone signs in with the Plex or Jellyfin account they already have, and the installable app works on the TV-side phone as happily as on a desktop. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With over 34,000 GitHub stars and backing from a well-funded engineering team, Tailscale has fundamentally simplified how developers and system administrators think about secure networking. The client daemon establishes WireGuard tunnels directly between devices using sophisticated NAT traversal techniques, achieving direct peer-to-peer connections in the vast majority of network configurations without requiring port forwarding, firewall rules, or VPN concentrators. When direct connections prove impossible due to restrictive network environments, DERP relay servers provide encrypted fallback paths. MagicDNS assigns human-readable hostnames to every device on the network, eliminating the need to remember IP addresses across a tailnet. Subnet routing allows nodes to advertise access to entire local networks, enabling remote access to office resources, home labs, or cloud VPCs through a single gateway node. Exit node functionality routes all internet traffic through a designated device for privacy protection or geographic flexibility. Access control lists define granular policies for which devices and users can communicate with which services, enforced cryptographically at the network layer. The authentication layer integrates with identity providers including Google, Microsoft, GitHub, Apple, and OIDC-compliant systems for single sign-on access. Taildrop enables direct encrypted file transfers between devices without cloud intermediaries. The tailscale CLI provides complete network management from the terminal including status monitoring, route advertisement, and node configuration. Running Tailscale on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console provides a permanent, always-on node in your mesh network. BSD-3-Clause licensed with an active open-source community.

A notes app that is deliberately not a second brain: notesd keeps your grocery lists, journals, and work notes on a server you run, and syncs them to your phone for fully offline use. The web app and the native Android and iPhone apps each keep a complete local copy, so you can write on a subway and watch everything merge when a connection returns; conflicting edits are combined, or preserved as a linked conflicted copy instead of silently overwriting. Notes are stored as Markdown, so exporting your data or mirroring it to a folder of .md files is always one command away. Tags typed anywhere in a note, including nested ones like #home/garden, collect automatically in the sidebar, and Spaces keep work, personal, journal, and recipes in separate contexts. Full-text search runs across titles and bodies, indexed and ranked both on the server and on your phone. Individual notes can be locked with AES-256-GCM encryption performed on your device, unlocked by password, passkey, or biometrics, while the server only ever stores ciphertext. A few accounts per server, each with its own database, make it easy to host notes for family or friends. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"As simple as Trello but as feature-rich as Jira" is how the Leantime team frames its goals-focused project management system for non-project managers - built from the ground up with ADHD, autism, and dyslexia in mind, with behavioral science shaping customizable dashboards, time blocking, low-cognitive-load prioritization, and Kanban, list, table, Gantt, and calendar views so each person works the way their brain does. The PHP application (AGPL, Laravel Blade frontend) connects strategy to execution: tasks with unlimited subtasks and dependencies roll up into milestones on a timeline, sprints and retrospectives handle iteration, and strategy-level blueprint boards - Lean Canvas, SWOT, risk analysis, goal and metric tracking - keep the "why" attached to the work. Knowledge lives alongside: wikis and docs, idea boards, comments on everything, file storage on S3 or local disk, even screen and webcam recording. Time tracking with timesheets supports estimation and client billing. Admin features are serious for an OSS tool: per-project permissions, two-factor auth, LDAP and OIDC single sign-on, Slack, Mattermost, and Discord integrations, a plugin system, and an expanding API that now powers a mobile app. Recent releases added multi-collaborator task assignment and low-vision accessibility improvements. Available in 20+ languages.

Self-hosted and built around long reading, Omnivore saves articles, newsletters, and PDFs, renders web pages as clean text, remembers your place, and keeps every highlight searchable. Pages arrive from the web app's Add button or from Chrome and Firefox extensions that authenticate with an API key. Newsletters arrive through generated email addresses once an IMAP watcher or another mail bridge is set up. PDFs open in the same reader and accept highlights and notes just like articles. Labels, saved searches, and filters such as subscription:"Name" make a big library easy to slice. The RSS section follows your feeds, lets you add a story to the library or hide it, and can sort stories into topics when an OpenAI key is configured. Custom extractors scroll lazy-loaded pages, follow paginated articles, and strip pop-ups before saving. Rules trigger webhooks when pages are created or updated, which suits automatic labelling and other custom workflows. E-ink reading settings add double-tap page turns and volume-button scrolling, and Android and iOS apps sync the same library. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GoAccess processes millions of web log entries in seconds and renders the results as interactive dashboards that update every 200 milliseconds in the terminal or every second via WebSocket-connected HTML reports. Written entirely in C with only ncurses as a dependency, it achieves exceptional performance even on resource-constrained servers, reducing memory usage by approximately 20% and parsing time by 35% in recent releases through optimized in-memory hash tables with on-disk persistence support. The analyzer parses virtually every web log format out of the box (Apache Combined and Common, Nginx, Amazon CloudFront, Amazon S3, AWS Elastic Load Balancing, Google Cloud Storage, Squid, W3C IIS, Caddy JSON, and Traefik) while supporting fully custom log format strings for non-standard configurations. The self-contained HTML dashboard displays 15+ interactive panels covering unique visitors, requested files, static files, 404 errors, referring sites, search keyphrases, geographic location with city-level GeoIP resolution, operating systems, browsers, HTTP status codes, time distribution, and virtual host metrics. WebSocket authentication via JWT provides secure remote access, and incremental log processing ensures data continuity across daemon restarts. Docker deployment requires a single command with volume-mapped access logs. Over 20,800 stars with active development since 2010. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

To give engineering teams a Render-style workflow of connecting a repository and getting a live HTTPS URL on infrastructure they control, Bex builds and runs web services, private services, background workers, cron jobs, and static sites from Git or container images. Dockerfiles and native builds for Node.js, Python, Go, Ruby, Rust, and Elixir deploy from public or private GitHub repositories with push-to-deploy, health checks, pre-deploy commands, and manual or policy-driven autoscaling. Blueprints in render.yaml format describe multi-resource environments in one file, and a Render-compatible CLI and API let existing tooling carry over where supported. Deploy history with cancel and rollback, live log tailing with search and filters, CPU and memory charts marked with deploy events, and suspend, resume, restart, native SSH, and browser shell controls cover daily operations. Custom domains receive automatic TLS certificates, and environment variables and secret files save and deploy in one step. Managed PostgreSQL provides backups with point-in-time recovery, high availability, and read replicas, and managed Valkey-compatible Key Value adds persistence and backups. Workspaces, projects, and environments come with OpenFGA roles, OAuth 2.1, API keys, audit logs, and signed outbound webhooks. Coding agents operate the same control plane through a remote or stdio MCP server with OAuth consent, deploy-from-chat, managed sandboxes, and structured machine-readable status, since no action is dashboard-only. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Execute comprehensive multi-angle investigations across scientific journals and web repositories using Local Deep Research, an autonomous intelligence engine designed for researchers, analysts, and knowledge workers. Users can submit complex analytical questions through a self-hosted web console to initiate agentic research cycles powered by LangGraph workflows. The application dynamically queries search providers including SearXNG, arXiv, PubMed, Wikipedia, and Google, iteratively evaluating discovered content to formulate targeted follow-up queries. Discovered academic papers and web sources can be indexed into an encrypted personal library to combine internal documentation with external search intelligence. Reports are synthesized with structured outlines, section headings, and verifiable academic citations that link directly to source references. Individual research sessions, system logs, and user credentials remain isolated in per-user SQLCipher databases protected by AES-256 encryption. Automated subscriptions deliver scheduled news digests and topic monitoring summaries directly to connected notification channels. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Kandev provides a command center for orchestrating AI coding agents across parallel workstreams. The Go backend paired with a Next.js frontend delivers kanban boards with drag-and-drop columns, pipeline workflow definitions with per-step agent handoffs, and an IDE-like review workspace combining file editor, file tree, terminal, browser preview, and unified git diffs. Multi-provider support connects Claude Code, GitHub Copilot, Codex, Qoder, Grok, and custom agents through configurable profiles with per-agent prompts, runtimes, and review gates. Tasks execute in isolated git worktrees with multi-repository support, letting agents work on separate branches simultaneously while changes surface in a consolidated review interface. Native integrations with GitHub, GitLab, Jira, Linear, Sentry, and Slack pull external issues into the kanban and link tasks to pull requests. Kandev exposes streamable HTTP and SSE MCP endpoints, enabling external clients — Cursor, Claude Desktop, Augment — to create tasks and read workspace context programmatically. Workflow definitions export as portable YAML for sharing across installations. Agentic workflows chain multi-step pipelines mixing different models per step — Opus for architecture, Sonnet for implementation, with human review gates between stages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Incident response moves into the chat tool your team already lives in, with every alert landing as a Slack, Mattermost, or Telegram thread that carries a Take It button and a running escalation clock. IMPulse gives each incident a lifecycle that prevents duplicates and reduces noise. Responders take an incident, assign it, or freeze it until tomorrow, next Monday, or later, from the thread or from the web table. Escalation chains, nested as deeply as needed, wait and then notify the next person, and schedules can be edited in the UI or read from Google Calendar. Inhibition rules suppress child incidents when a parent is active, and maintenance windows mute matching alerts during planned work. The web table offers multi-column sorting, Alertmanager-style filters with regex, custom colors, an archive of closed incidents, and a light or dark theme. Sign-in goes through your chat platform, so nobody needs a separate account. Jinja2 templates reshape incident messages, thread replies, and Jira tasks, and webhooks reach Twilio, Zvonok, Instatus, and other outside services. Several instances can run together for high availability, and a REST API with Swagger documentation exposes incidents to scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Shelf answers the three questions every equipment manager dreads — who has it, where is it, and when is it coming back — using QR-code-first tracking where every asset gets a unique scannable label, every handover is logged with timestamps and e-signed custody agreements, and every scan captures GPS coordinates displayed on a map. Built on React Router 7 with React 19, TypeScript 5, Prisma 6 ORM, and Tailwind CSS 3 with Radix UI components, the platform generates QR codes and barcodes (Code128, Code39, Datamatrix) printable on DYMO, Brother, and Zebra label printers. The custody system records every handover with user details and generates PDF custody agreements with e-signatures for high-value items, while a complete audit trail tracks responsibility from check-out to return. The visual booking calendar prevents double-bookings automatically, supports partial check-outs and returns with segmented lifecycle bars, and handles quantity-tracked consumables alongside individually serialized equipment. Asset Models enable bulk creation of identical items with shared defaults while maintaining individual QR codes and custody histories. Location tracking displays last-scanned GPS coordinates on MapTiler maps. Supabase Auth provides email and SSO authentication, pg-boss handles background job queuing, and Nodemailer delivers SMTP email. The Shelf Companion app on iOS and Android enables field scanning and bookings. Export Asset Inventory, Asset Distribution, and Custody Snapshot reports for compliance. Deploy via Docker with PostgreSQL and Supabase. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3.0 licensed.

Created by the developer behind Uptime Kuma and carrying over 23,000 GitHub stars, Dockge brings the same clean, reactive design philosophy to Docker Compose stack management with a web interface that makes Portainer's compose handling feel like editing YAML in a terminal over SSH. The interactive editor provides syntax highlighting, inline validation, and a live preview of your compose.yaml files while keeping every stack stored as a standard file on disk in /opt/stacks by default, meaning you can seamlessly switch between the web UI and the docker compose CLI without lock-in or proprietary database formats. Real-time WebSocket updates stream pull progress, container start/stop transitions, and build output directly to the browser with no polling delays. The built-in web terminal opens a shell session inside any running container for quick debugging, while the docker-run-to-compose converter transforms single-container run commands into proper compose.yaml definitions with one click. Multi-agent support introduced in version 1.4.0 connects multiple Docker hosts to a single Dockge dashboard, enabling centralized management of stacks distributed across different servers. Image update detection shows which stacks have newer versions available, and one-click updates pull the latest images and recreate containers without manual intervention. The stack is a single Docker container running on Node.js with Socket.IO for reactivity and stores no external database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"Run the migration and call me if anything fails" is an instruction your agent can finally obey, because Agentring is the self-hosted bridge that lets AI agents ring your phone and talk it through with you. When an agent needs a decision, hits a wall, or finishes a long job, your phone rings even locked and in Doze; a realtime voice AI explains why it is calling, answers your questions, and hands the transcript back so the agent carries on with your decision. You can also call your agents back from the Android app and ask what CI said while driving; the voice AI can consult your other agents mid-call, and a slow answer arrives when ready, or as a message if you have hung up. A missed call turns into a message you can answer from the notification. Anything that speaks MCP can reach you, including Claude Code, Codex, opencode, OpenClaw, and Hermes, and scripts or n8n reach you through the REST API and CLI. Pick your voice: Gemini Live by default, OpenAI Realtime, Grok Voice, Phonic, or your own local speech server with no key at all. The relay and LiveKit run in one Docker Compose behind Caddy, the daemon sits beside your agents and connects outbound only, and FCM push wakes the locked phone. No phone numbers, no Twilio, no per-minute fees. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.