Backed by Alibaba's AIDC team and carrying over 27,700 GitHub stars, Pixelle-Video turns a single text prompt into a publish-ready short video in approximately three minutes — handling scriptwriting, image generation, voice narration, music selection, subtitle overlay, and final MP4 export in one automated pipeline. The engine supports multiple LLM backends for script generation including GPT-4, Qwen, DeepSeek, and local Ollama deployments, while image and video creation routes through either self-hosted ComfyUI workflows, cloud-based RunningHub pipelines, or direct API connections to DashScope Wan, OpenAI, Seedream, Seedance, and Kling AI. Text-to-speech synthesis uses Edge-TTS, Index-TTS, and other mainstream engines with multi-language voice profiles. Five distinct pipelines cover Quick Create, Standard, Digital Human Avatar broadcasting, Image-to-Video transformation, and Motion Transfer from reference video. The Streamlit web UI on port 8501 provides a visual workflow builder with template selection across portrait (1080x1920), landscape (1920x1080), and square formats, while the FastAPI server on port 8000 exposes a REST API with endpoints for async video generation, task polling, content scripting, TTS and image generation, template listing, and health checks. History persistence tracks all completed generations. HTML-based visual templates support static, image-overlay, and AI-video styles with customizable prompt prefixes. The modular architecture lets operators swap any atomic capability — image model, video model, TTS engine, or VLM — by editing a workflow JSON file without touching Python code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Questarr keeps a game backlog, wishlist, and release calendar in one dark web app, then goes looking for releases and hands them to a download client. Browse popular games and recent releases from IGDB, RSS feeds, and xREL.to, add titles to the library or a Steam-synced wishlist, and give each one a status. Library views filter by results, downloads, and available updates, and a backlog roulette picks the next game to play. Manual and smart collections group titles, for example every owned game above an IGDB rating threshold. A month-by-month calendar tracks upcoming launches. Indexers synced from Prowlarr over Torznab or Newznab feed automatic searches for wanted games, and qBittorrent, Transmission, rTorrent, Deluge, SABnzbd, NZBGet, or Synology Download Station receive the grabs. Release scoring, a blacklist, and a local classifier separate the game from patches, DLC, and demos. A system tasks page lists every background job with its interval, last run, and a Run now button. Alerts arrive in the app or through Apprise, and game pages pull in metadata from IGDB, Steam, PCGamingWiki, ProtonDB, and NexusMods. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.

With over 14,000 GitHub stars and a growing global network of security deployments, CrowdSec turns every attack on any participating server into protection for the entire community. The security engine operates as a combined IDS/IPS and WAF, analyzing log sources from Nginx, Apache, SSH, WordPress, and over 50 other services to detect brute force attacks, port scans, web vulnerability exploitation, and credential stuffing in real time. When one server detects a new threat, the attacker's IP is shared through the community blocklist, proactively protecting thousands of other installations before the attacker can reach them. The built-in WAF powered by Coraza v3 inspects HTTP requests at the application layer, validates against OpenAPI schemas, and applies custom rules with flexible AND/OR condition mixing for precise threat detection. Bot detection serves challenge pages with client fingerprinting to distinguish legitimate traffic from automated scrapers and scanners. Remediation components block malicious IPs at multiple infrastructure layers including iptables, nftables, Nginx, HAProxy, Cloudflare, and AWS Security Groups through the detect-here-remedy-there architecture. The scenario-based detection system ships with default rules for common attack patterns and supports custom scenarios written in YAML with an expressive filter language. A centralized console provides real-time visualization of alerts, threat intelligence analysis, and management of multiple distributed security engines. GDPR compliant by design, all log analysis happens locally and raw logs never leave your infrastructure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Lyftr delivers a self-hosted workout and nutrition tracker that runs on a small VPS — no subscriptions, no vendor lock-in, no "export is a Pro feature" paywalls. The Go backend with Gin framework provides JWT authentication and a REST API while storing everything in a single SQLite database file you can back up with one copy command. The exercise library ships with 800+ movements auto-seeded on first run, letting you build reusable workout programs with target sets, reps, and weights from day one. Active workout mode provides a guided set-by-set flow through your session while Gym Mode offers a full-screen card layout showing one exercise at a time with an integrated rest timer for focused training. The React frontend built with TypeScript and Tailwind delivers a mobile-first interface featuring a dashboard with weekly session KPIs, daily calorie and protein tracking, 12-week consistency heatmap, volume trend charts, and muscle balance visualization with sparklines. Nutrition tracking connects to Open Food Facts for food search with camera-based barcode scanning, logging calories and macros across customizable meal sections. Bodyweight logging with trend graphs supports both lbs and kg units across all data. An Android APK connects to your self-hosted instance for native mobile access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Running local models usually means choosing between a polished app that hides the engine and a terminal full of flags you half remember. LlamaForge refuses the trade: it installs and drives the official llama.cpp release itself, then puts a browser panel over all of it, every one of the 200-plus llama-server flags your build supports, grouped, searchable and editable per model. Before you load anything, each model is drawn into your GPUs at its real footprint, so the out-of-memory surprise happens on screen instead of in a crashed server; before you download anything, every quant on Hugging Face gets a fit rating for your VRAM, FITS, TIGHT or CPU OFFLOAD. Auto-Forge then measures placements, KV cache types and speculative drafters on your own hardware and keeps the fastest configuration, checking that a drafter still produces identical tokens before applying it with one click, and undoing it with one click. Keep several models loaded at once and a planner places each on the GPUs that fit it; when a game launches, Game Mode unloads your models and brings them back when you quit. Chat in llama.cpp's own interface, join from your phone by QR code, duel two models blind in the Arena under an Elo board, and let Embers, small local agents, keep a wiki and write scheduled briefs counting only facts they can quote verbatim. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Poznote serves as an all-in-one personal knowledge base and digital workspace designed to bridge unstructured thinking and structured documentation. The platform pairs a responsive Markdown editor with live side-by-side rendering, KaTeX mathematical notation, and interactive Mermaid diagram compilation. Creative thinkers can switch instantly to an embedded Excalidraw infinite canvas to sketch system architectures, design mind maps, and create interface wireframes alongside their written notes. Every directory within the workspace can be toggled into an agile Kanban board where nested folders become customizable workflow columns and notes transform into draggable task cards. Task management views aggregate checklists across documents into unified priority queues with due date reminders and completion filters. An integrated bi-directional Git synchronization engine connects user workspaces directly to personal GitHub or Forgejo repositories, versioning edits automatically on save. The software also provides an integrated Model Context Protocol server that enables AI coding assistants to search notes, create documents, and query knowledge repositories securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 31,000 GitHub stars and 430 contributors, Homepage has become the definitive self-hosted dashboard for homelab enthusiasts and server administrators who want a single, elegant landing page for all their services. The dashboard renders as a fully static site at build time for instant page loads, while a Node.js backend securely proxies all API requests to prevent exposing service credentials to the browser. Docker integration automatically discovers running containers through label-based configuration, populating the dashboard with service status indicators, health checks, and real-time statistics without manual URL entry. Over 100 native service widgets display live data from popular applications including Plex, Jellyfin, Radarr, Sonarr, Home Assistant, Pi-hole, Portainer, Proxmox, Nextcloud, Gitea, and dozens more, each showing relevant metrics like active streams, download queues, or system health directly on the dashboard. Information widgets provide weather forecasts, system resource utilization, search bars, and date/time displays. The layout system supports multiple columns, tabs, and custom CSS for pixel-perfect arrangement of service groups and bookmarks. Built-in authentication options include OIDC integration and password protection. Quick search functionality enables instant access to bookmarks and services with keyboard shortcuts. Internationalization covers 40+ languages with community-maintained translations. Configuration lives entirely in YAML files for version-controlled, reproducible dashboard setups. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console for complete control. GPL-3.0 licensed with an active community and bi-weekly releases.

Keep is an open-source AIOps and alert management platform built with Python FastAPI and Next.js. It provides a single pane of glass for monitoring alerts from 110+ integrations, alert deduplication, correlation, enrichment, and filtering, YAML-based workflow automation similar to GitHub Actions, AI-powered correlation and summarization, and customizable dashboards for incident management. With 12,100+ GitHub stars, Y Combinator backing, and an Elastic partnership, Keep is the open-source AIOps platform that centralizes alert management across your entire monitoring stack into a single customizable dashboard. Alert deduplication identifies duplicate notifications across providers, correlation groups related alerts into incidents based on rules or AI-powered semantic analysis using pluggable LLM backends supporting OpenAI, Anthropic, and local models via Ollama, and enrichment adds context from external sources like CMDBs and databases. Workflow automation follows a GitHub Actions paradigm with declarative YAML files defining triggers, conditions, and actions that can query MySQL, update Jira tickets, send Slack messages, execute Python scripts, or call REST APIs. Authentication supports no-auth, database, Auth0, Keycloak, OAuth2 Proxy, Okta, and OneLogin. The Common Expression Language enables advanced alert querying, slicing, and rule-based grouping to reduce noise. On RepoCloud, deploy Keep on a dedicated VPS with Docker Compose, root SSH access, and complete control over your alert infrastructure, all under the MIT license.

Radar is an open-source Kubernetes management dashboard and Model Context Protocol server that gives engineering teams complete cluster visibility, automated issue diagnosis, and GitOps controls through a unified web interface. Operators explore live interactive cluster topology maps rendered with automated layout engines, grouping workloads by namespace or custom application labels to trace network communication pathways. The unified event timeline retains Kubernetes activity and state change diffs well beyond default one-hour limits, allowing site reliability engineers to diagnose historical CrashLoopBackOff states and investigate failed deployment rollouts. Teams manage Helm releases by inspecting deployed values, comparing manifest revisions side by side, and initiating rollbacks or upgrades with a single click. The built-in GitOps workspace correlates ArgoCD and Flux applications, surfacing synchronization health, field-level configuration drifts, and automated remediation suggestions. Developers inspect container image filesystems directly from pod detail panels without pulling images locally or establishing interactive terminal sessions, browsing permissions and downloading specific files. Native Model Context Protocol endpoints expose cluster telemetry and operational tools to artificial intelligence coding assistants, enabling external agents to diagnose failing pods and inspect access controls securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 24,000 GitHub stars and a rapidly growing community of self-hosters, authentik delivers enterprise-grade identity management that replaces commercial solutions like Okta and Auth0 with a fully self-hosted platform requiring no per-user licensing fees. The platform serves as a unified identity provider supporting SAML 2.0, OAuth 2.0 and OpenID Connect, LDAP for legacy application compatibility, SCIM 2.0 for automated user provisioning, and RADIUS for network device authentication. The visual flow designer enables administrators to create custom authentication workflows combining password verification, multi-factor authentication with TOTP, WebAuthn, and SMS codes, email verification, captcha challenges, and conditional logic based on user attributes or device context. The forward-auth and reverse proxy integration works seamlessly with Traefik, Nginx, Caddy, and Envoy to protect applications that lack built-in authentication. User enrollment flows support self-registration with configurable approval workflows, invitation links, and automatic group assignment. The LDAP outpost exposes user and group data to legacy applications requiring LDAP bind authentication, while the SCIM provider automates user lifecycle management with downstream applications. Multi-tenancy support through brands allows a single authentik instance to serve multiple organizations with independent domains, branding, and authentication policies. The admin interface provides comprehensive user management, group hierarchy, application catalog, event logging with GeoIP enrichment, and system health monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Licensed under a source-available license with an open-source community edition.

Hyperswitch from Juspay delivers the most comprehensive open-source payment orchestration stack available — a Rust-built platform that connects to Stripe, Adyen, Braintree, Worldpay, Checkout.com, Cybersource, and 120+ payment processors through a single API integration. Intelligent routing drives each transaction to the processor with the highest predicted authorization rate using rule-based, volume-based, and machine learning algorithms, while seamless failover and automatic retries recover revenue from declined transactions using 30+ parameters including decline codes, card BIN, transaction size, and region. The PCI-compliant card vault stores payment methods securely in a dedicated service separate from the main application server, and the reconciliation engine automates 2-way and 3-way matching with backdated support, staggered scheduling, and customizable audit-ready outputs. The Control Center dashboard provides visual workflow builders for routing rules, payment analytics, and operations management. Cost observability tools drill into scheme, interchange, and acquirer fees to detect anomalies and optimize processing costs. The modular architecture allows deploying individual components — routing, retries, vaulting, observability, or the full suite — without vendor lock-in. The web client SDK collects payment information with prebuilt UI components and supports WooCommerce integration. Deploy via Docker Compose with the app server, control center, card vault, and PostgreSQL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Teams that cannot send messages through someone else's cloud run Mattermost - the open-core, self-hosted alternative to Slack. It provides public and private channels, threaded discussions, unlimited search history, file sharing with previews, one-to-one audio calls, and screen sharing, with desktop clients for Windows, macOS, and Linux plus iOS and Android apps. Messages support full Markdown, which suits engineering conversations with code blocks and logs. Playbooks turn repeatable processes such as incident response and release management into checklist-driven workflows with automated triggers and retrospectives. Integration is a core strength: prebuilt connectors for GitHub, GitLab, Jira, ServiceNow, and PagerDuty, plus webhooks, slash commands, bots, a REST API, and a plugin marketplace with 700+ entries - together making it a working surface for ChatOps rather than just a chat room. Playbooks add keyword and event triggers, task assignment, status broadcasting, and post-incident retrospectives, so operational knowledge is not trapped in individuals' heads. The server is a single Go binary backed by PostgreSQL, with React clients, released monthly under MIT license and deployable fully air-gapped - which is why governments and defense organizations run it inside closed networks, and why the same control applies to any team with confidentiality requirements. The compiled Team Edition is free for unlimited users with no message history cutoff, so costs stay flat as the team grows.

Running AI agents in production takes more than a model call: Omnara supplies the durable runtime, tools, approvals, and complete event history around any model, on your own machines. You define an agent once in a small YAML file: instructions, a model from OpenAI, Anthropic, OpenRouter, Bedrock, LiteLLM, Ollama, or your own endpoint, and the machines it may use. Launch agents from the REST API, the TypeScript SDK, the command line, or the dashboard, then stream every event live or receive it as a webhook while the agent works. Agents run shell commands and edit files on sandboxes from twelve providers, or on your own laptops, VMs, and containers through a daemon that connects outward, so no inbound ports or SSH keys are exposed. Every step is written to Postgres as an event log, which means an agent survives crashes, restarts, and disconnected machines and resumes exactly where it stopped. Tool permissions can run immediately, ask a person first, or block outright, and agents can start subagents, follow cron schedules, and keep shared memory files between conversations. Teams meet the agents where they already talk: mention the bot in Slack or Discord, or let a GitHub pull request trigger a review, with questions and approvals handled in the thread. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Canvix is a self-hosted design studio that lets anyone create social posts, presentations, posters, logos, and thumbnails in the browser with a drag-and-drop editor, 110 ready-made templates, and exports with no watermarks. You start from a template sized for the platform you are publishing to, then drag in shapes, lines, stickers, and your own images, moving, resizing, and rotating everything directly on the canvas. Text gets proper typography controls, with bundled fonts, styles, spacing, alignment, and curved text that arcs across the design. Layers can be reordered and locked while smart guides snap elements into alignment, and a full undo history plus autosave means a closed tab never costs you the work. Finished designs export as PNG, JPG, SVG, PDF, or video at up to three times resolution, ready to publish anywhere. Free accounts keep each person's designs private to them, while share links open a design for anyone to view or continue editing. Version snapshots let you roll a design back when an experiment goes wrong. The AI tools, magic edit, magic write, background removal, and translation, run against your own API keys, so nothing is metered. An optional MCP endpoint even lets AI assistants create and edit designs for you. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Doccano is a text annotation platforms for building machine learning training datasets. The web-based interface supports text classification for sentiment analysis and document categorization, sequence labeling for named entity recognition with overlapping entity support and relation extraction between labeled spans, and sequence-to-sequence annotation for text summarization and machine translation pairs. Collaborative annotation enables multiple annotators to work on the same project simultaneously with per-user progress tracking, annotation guidelines, example assignment to specific members, and filtering by assignee. Auto-labeling integrates with external machine learning model APIs through configurable request and response mapping templates, allowing pre-annotation that annotators can review and correct. Data import accepts plain text, JSONL, CoNLL, and Excel formats, while export produces JSONL and CoNLL datasets compatible with spaCy, Hugging Face Transformers, PaddleNLP, and other training frameworks through the doccano-transformer library. The Django backend with Django REST Framework exposes a complete RESTful API for programmatic project creation, dataset management, and annotation retrieval via the official doccano-client Python library. Celery handles background tasks including dataset import and export processing with Flower providing task monitoring. One-click deployment supports AWS CloudFormation and Heroku alongside Docker Compose for self-hosted environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

God's Eye View turns your browser into a real-time spatial intelligence command center, rendering thousands of live aircraft, ships, satellites, earthquakes, traffic flows, and public cameras on a photorealistic 3D Earth powered by CesiumJS and Google Photorealistic 3D Tiles. Click any aircraft to see its transponder telemetry from OpenSky and adsb.lol, including route history, altitude, speed, and callsign; track live vessel positions worldwide through AIS beacon data from AISStream; or follow roughly 840 satellites color-coded by class using orbital elements from CelesTrak. A hands-free voice agent powered by the OpenAI Realtime API lets you ask the planet questions in natural language, and the globe annotates your answer directly in 3D space. Toggle FLIR mode for a thermal camera aesthetic, layer in NASA FIRMS wildfire data, switch between Google 3D, Bing aerial, and OpenStreetMap base layers, or tune into a geolocated world radio dial. Public CCTV cameras are projected into 3D city geometry with viewshed cones and direct-manipulation calibration. The cockpit mode provides a pilot-style briefing surface with mission-specific overlays. Entity inspection panels show detailed metadata for every tracked object, and shareable links let you send any scene configuration to a colleague. Ten of the thirteen live data layers work with zero API keys, while the required Google Maps key offers 1,000 free 3D tile sessions per month. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Apple Music, NetEase Cloud, and QQ Music stop being separate apps with MHub: one self-hosted player searches all three and lines their songs up in a single queue. Search any platform, import its playlists, and MHub matches tracks across services, then keeps imported lists following the originals with a daily sync. The queue takes appends, play-next picks, drag reordering, shuffle, and loop, and an AutoPlay radio built from your recent songs keeps playing when it runs dry. ALAC tracks decode losslessly right in the browser with sample-accurate scheduling, and everything else plays natively, with quality chosen at play time. Lyrics land character by character over a background tinted by the cover art, and they convert between Simplified and Traditional Chinese on request. Lock the phone or switch apps and playback rolls on with system media controls, the next track preloaded for a seamless handoff. Songs and lyrics cache on the device for offline listening, and the player installs as a PWA that behaves like a native app. Add a passkey account and your library syncs live between devices, so the playlist you built at your desk is waiting on your phone with your place kept. One Docker container runs it, bound to localhost by default behind your reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.