End-to-end encrypted by design, CryptPad is a real-time office suite where teams write documents, plan on kanban boards, collect answers with forms, and draw diagrams without the hosting server ever seeing their content. Rich text pages come with comments, replies, @mentions, and a document outline, while the Markdown editor adds a live preview, Mermaid diagrams, mind maps, and math. Kanban columns hold colored, tagged cards with Markdown bodies, and the diagram editor exports PNG, JPG, SVG, or PDF. Optional ONLYOFFICE editors add spreadsheets, word-processing documents, and presentations that several people can edit together. The form builder offers text, choice, grid, date, ranking, and poll questions, conditional sections, and separate author, auditor, and participant roles. Documents can be shared with contacts or teams, by link, or as embed code, with view, edit, present, or view-once access. Passwords, expiry dates, owner lists, and access lists limit who gets in, and every edit lands in a history you can step through, restore, or pin as a named snapshot. CryptDrive keeps files in folders, tags, templates, and a trash bin, while teams get their own drive, chat, and member roles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Hosting a Minecraft survival world, a Terraria server, and a Palworld host no longer means juggling SSH sessions and screen windows, because MCSManager puts every instance behind one web panel. A built-in marketplace installs game servers from ready-made templates, filtered by operating system and tagged with the Java version each one needs, while any Docker Hub image, uploaded ZIP archive, or plain process can run as an instance with its own start command, stop command, and live terminal. Docker instances get memory, CPU, port mapping, and volume settings, and each instance can auto start, auto restart, and run scheduled tasks. For Minecraft servers, the plugin and mod manager (Beta) searches Modrinth and CurseForge, and the file manager handles maps, configs, and uploads. Administrators create user accounts and assign instances to them, so friends or paying customers only see their own servers, which suits small hosting businesses that sell game servers. Extra machines join as nodes and connect to the same panel, and the drag-and-drop dashboard can be rearranged to taste. The interface supports many languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every batch a craft business ships carries a recipe version, a cost, and a trail of ingredient lots, and Craftplan, an open-source ERP, keeps all three connected. Receiving stock against a purchase order records each supplier lot code and optional expiry date, and partial deliveries keep the order open. Customer orders appear on a delivery calendar and can generate invoices. Scheduled items wait on the production board as unbatched cards until Batch All creates one batch with a frozen copy of the recipe. Capacity warnings flag products over their daily limit, and a forecast highlights materials that will run short. Finishing a batch consumes ingredient lots earliest-expiry first, skips any lot on hold or rejected, and snapshots material, labor, and overhead costs. Recipes are versioned, so past costs never change. A blend made in-house can be stocked as its own material, with its actual yield, lot costs, and source lots intact. Allergens and nutrition facts roll up from each material through every recipe, and completed batches print A5 or compact labels with a scannable barcode. The Trace Center follows a supplier lot forward to every customer who received it, or a finished batch back to its sources. Recall mode can place the lot on hold, and the trace exports as CSV or prints for the recall file. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Instead of scattering provider credentials and vendor-specific SDK logic across dozens of microservices, engineering teams route every LLM call through GoModel, an open-source AI gateway that unifies 34 model providers behind OpenAI-compatible and Anthropic-compatible endpoints. Pointing existing OpenAI or Anthropic SDKs at the gateway unlocks chat completions, the Responses API, Anthropic Messages, embeddings, batch jobs, and realtime audio across OpenAI, Anthropic, Gemini, Bedrock, Azure, Groq, DeepSeek, Ollama, and vLLM. Platform operators publish virtual model aliases that distribute traffic via weighted round-robin or lowest-cost routing while rotating multiple API keys per provider and failing over through circuit breakers during upstream outages. Sticky session routing keeps multi-turn agent conversations on the same target to preserve warm prompt caches, while exact-match and vector semantic caching via Qdrant, pgvector, Pinecone, or Weaviate cut duplicate token costs. Versioned workflows and pre-dispatch guardrails enforce prompt injection rules, rate limits, and hard USD spend budgets across hierarchical tenant user paths before requests are dispatched. The built-in admin dashboard offers live audit logs, per-tenant cost analytics, LiteLLM key migration, an interactive request playground, Model Context Protocol tool aggregation, and OpenTelemetry and Prometheus metrics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

One 18 MB Go binary does the job of Apache, Nginx, Varnish, Caddy, and cPanel combined. Point UWAS at your /var/www directory and it auto-detects sites, provisions Let's Encrypt certificates, enables HTTP/3 via QUIC, and activates a two-tier caching engine with L1 memory shards and L2 disk storage, all before you write a single line of configuration. The React 19 admin dashboard provides 42 management pages for domains, PHP versions, databases, cron jobs, DNS records, file management, backup and restore, SFTP users, and uptime monitoring with real-time SSE updates. PHP sites run through FastCGI with connection pooling and full .htaccess compatibility, so WordPress, Laravel, and legacy applications work without migration effort. The built-in WAF catches SQL injection, XSS, path traversal, and shell exploits, while per-domain rate limiting and bandwidth caps protect against abuse. Reverse proxy mode supports five load balancing algorithms, circuit breakers, canary deployments, and mirroring for blue-green rollouts. Git deploy clones your repository, runs the build, checks health, and restarts the service with rollback on failure. An MCP server lets AI agents manage domains, cache, and deployments through natural language. The Nginx and Apache migration CLI converts existing configurations to UWAS format automatically. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One statically-compiled Go binary over PostgreSQL, no ORM, no framework, static assets embedded in the executable: Miniflux is the minimalist, opinionated feed reader. The opinions are the feature: page layout, fonts, and colors are tuned for reading, and everything else is treated as noise. It consumes Atom, RSS, and JSON Feed formats with OPML import/export, organizes articles with categories and bookmarks, fetches original full-text content for summary-only feeds, and provides Postgres-powered full-text search. Privacy work happens automatically: pixel trackers are stripped, tracking parameters removed from URLs, a media proxy blocks third-party tracking, referrers are never forwarded, and there is zero telemetry. Navigation is keyboard-first - j/k through items, o to open, f to star - with touch gestures on mobile. Podcast, video, and music enclosures are supported, and YouTube videos play inline. Over 25 integrations save articles onward to Wallabag, Readwise Reader, Pinboard, Linkding, Instapaper, Notion, Telegram, Matrix, Ntfy, and more, plus webhooks and a REST API with Go and Python clients; the Google Reader API endpoint supports existing mobile reader apps. Authentication spans local passwords, passkeys (WebAuthn), Google OAuth2, OpenID Connect, and reverse-proxy headers. It is Apache 2.0 licensed, translated into 20 languages, and updates feeds on an internal scheduler.

The ad-riddled "free online tools" sites people paste sensitive text into and upload confidential PDFs to - OmniTools replaces that whole ecosystem with one self-hosted app. It bundles 50+ utilities behind one clean React/TypeScript interface: image tools (resize, convert, crop, edit), video and audio tools (trim, reverse, convert), PDF tools (split, merge, edit), text and list utilities (case converters, formatters, shufflers), plus date/time, math, and data-format helpers for JSON, CSV, and XML. The architectural decision that makes it trustworthy is that all file processing happens entirely client-side in the browser - the server only serves static assets, and nothing you process ever leaves your device. That design has a pleasant side effect: the host needs almost no resources (people run it on a Raspberry Pi Zero), because your browser does the work while the server just delivers files. The Docker image is a remarkable 28 MB, making it one of the fastest apps to deploy and cheapest to keep running. There are no ads, no tracking, no accounts, and no upload limits. With multi-language support and an MIT license, it works equally well as a personal toolbox or a team-wide internal utility portal - one URL that replaces a bookmark folder full of questionable converters. Actively developed with 50 contributors and 9,500+ GitHub stars.

With over 15,100 GitHub stars and seven years of battle-tested production use, OneDev replaces entire DevOps toolchains — GitLab, Jenkins, Jira, Artifactory — with a single Java application that runs comfortably on a 1-core 2GB server for medium-sized projects. The platform unifies Git hosting with ANTLR-powered language-aware code search and symbol navigation, pull request workflows with configurable branch protection rules and required reviewers, and customizable issue tracking with scripted state transitions that automatically advance issues when code is committed, builds pass, or deployments complete. The GUI-based CI/CD editor creates pipelines without writing YAML, supporting typed parameters, matrix builds, job templates, cache management, and artifact publishing in a single visual interface. Jobs execute via Docker containers, bare metal shell, Kubernetes pods, or distributed agent pools, with web terminal access for live debugging and the ability to pause running jobs for inspection. Built-in package registries handle Docker images, npm packages, Maven artifacts, NuGet libraries, PyPI wheels, and RubyGems without external infrastructure. AI users can be assigned to issues and pull requests to autonomously implement features, review code, fix CI/CD failures, and resolve merge conflicts. The automated Kanban board supports rule-based card movement, time tracking, timesheets, and service desk ticket creation via email. Cluster deployment enables project replication across servers for high availability and horizontal distribution for scalability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Powering trading floors at firms processing millions of market data events per second and trusted by organizations including Airbus, Yahoo, and Copenhagen Atomics, QuestDB has earned over 17,000 GitHub stars as the time-series database that refuses to make you choose between ingestion speed and query latency. The column-oriented, time-partitioned storage engine processes millions of rows per second on ingest through write-ahead logging with instant durability, while SIMD-accelerated parallel execution returns analytical queries over billions of rows in milliseconds. Time-series SQL extensions add ASOF JOIN for point-in-time lookups across tables with misaligned timestamps, SAMPLE BY for downsampling at arbitrary time intervals, LATEST ON for last-value queries, and WINDOW JOIN for sliding window aggregations — all through standard SQL syntax accessible via the PostgreSQL wire protocol, REST API, or the QuestDB Wire Protocol (QWP) that streams Apache Arrow at 220 million rows per second. Multi-tier storage automatically moves data from the WAL through native columnar format to Parquet files on S3-compatible object storage, keeping hot data fast and cold data portable without manual tiering. The built-in web console provides an interactive SQL editor with syntax highlighting, autocomplete, and charting for quick data exploration. Views, materialized views, and n-dimensional arrays support real-time analytics, while native Parquet export enables direct integration with Python, DuckDB, and AI/ML frameworks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

WebCodex gives ChatGPT, Claude, and other MCP clients a real development environment on machines you own, so an AI assistant can edit your actual repositories instead of a pasted snapshot. A self-hosted Server authenticates every request and routes it to a Runner sitting next to your code, where file edits, Git operations, test runs, shell commands, and long jobs execute with your real toolchain. Your projects never move into a hosted workspace; only the tool results you authorize travel back to the model. The browser Runtime Console shows project readiness, the work queue, session activity, and connected Runners, and it is where you decide pending approvals or accept and reject finished work, because the model cannot approve its own changes. Runners join with a short-lived pairing code and stay connected over QUIC, WebSocket, or polling, so machines behind NAT still work. One-command sharing opens a temporary session for a single repository, while durable setups run the Server and Runner as system services behind your own HTTPS domain. Workflow Sessions keep evidence and context across conversations, so long tasks survive closed browser tabs and threads you pick up days later. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

GEOInflow is a self-hosted analytics platform that shows website owners which AI crawlers visit their pages, what those crawlers read, and how much traffic and revenue AI search actually sends back. Import a sitemap, CSV, or JSON inventory and the coverage report compares it against observed crawl logs, flagging important pages that no AI crawler has ever requested and directories where coverage keeps dropping. The built-in catalog recognizes 61 AI crawler identities, including crawlers from OpenAI, Anthropic, Perplexity, Google, Microsoft, ByteDance, Baidu, Kimi, and Tencent Hunyuan, and separates training, AI search, and user-triggered visits. Verification combines declared user agents with official IP ranges and DNS evidence, so a spoofed crawler name never counts as a confirmed visit. Browser tracking connects AI search referrals to landing pages, custom events, goals, funnels, and conversions, letting teams measure whether visibility in AI answers turns into signups and sales. Alongside the GEO reports, teams get pageviews, unique visitors, referrers, geography, devices, heatmaps, retention, and visitor paths, with CSV, JSON, and ZIP exports for any selected scope. Workspaces, team permissions, and public sharing links let agencies and publishers give each client or department its own dashboards without exposing raw data or other sites. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Contracts signed on your own server: DocuSeal is the most feature-complete open-source, self-hosted alternative to DocuSign. A WYSIWYG builder turns any PDF into a fillable form with 14 field types: signature, initials, date, file upload, checkbox, dropdown, radio, stamp, and more. Documents route to multiple submitters in sequence or parallel, with automated SMTP email notifications, reminders, and a mobile-optimized signing experience that works on any device without an account. Every completed document carries an automatic PDF eSignature with verification and an audit trail. Templates are reusable and can also be generated programmatically - from HTML via API or from PDFs and DOCX files with embedded field tags - and the REST API plus webhooks drive full workflow automation, with embedded signing forms and form builders for React, Vue, Angular, and plain JavaScript. Files store on disk or in S3, Google Cloud Storage, or Azure. The UI ships in 7 languages with signing in 14. Runs on SQLite, PostgreSQL, or MySQL; AGPL-3.0 licensed with unlimited documents and no per-signature fees.

Trusted by Mistral AI, PayPal, Groq, and Synthesia with over 10,300 GitHub stars and Y Combinator backing, Lago is the open-source billing engine that handles usage-based, subscription-based, and hybrid pricing models through a single API-first platform — replacing the need to build custom billing logic or depend on opaque SaaS pricing infrastructure. Real-time event ingestion via ClickHouse processes billable events with deduplication and multiple aggregation methods including count, sum, unique count, max, and weighted sum, while graduated pricing tiers, package-based billing, and percentage-based fees model any pricing strategy from simple subscriptions to complex marketplace commission structures. Automated invoice generation calculates charges according to configurable billing cycles with grace periods, proration for mid-cycle changes, and credit note issuance for refunds and adjustments. Prepaid credits enable pay-in-advance models where customers purchase credit blocks and draw down as usage accumulates, while entitlements tie feature access directly to billing plans for automated provisioning and de-provisioning. Payment orchestration integrates natively with Stripe, Adyen, and GoCardless with automatic retry logic, dunning workflows for failed payments, and multi-gateway routing. Revenue analytics provide cross-stream visibility into MRR, usage trends, churn, and revenue drivers through dedicated API endpoints. The customer portal embeds into your application for self-service invoice access and usage monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 8,000 GitHub stars and continuous development since 2020, LibrePhotos delivers the core intelligence of Google Photos — face recognition, object detection, semantic search, and automatic album generation — entirely on your own hardware without sending a single photo to a third-party server. The Django 5 backend processes uploaded media through a machine learning pipeline that runs face detection via the face_recognition library, clusters identified faces using scikit-learn and HDBSCAN, generates image captions through BLIP and Moondream 2, and classifies scenes using Places365 or Google's SigLIP 2 vision-language model with zero-shot classification against 900+ real-world tags. Semantic search lets you find photos by natural language queries like "sunset at the beach" without manual tagging, while metadata search filters by person, camera, lens, file type, and filesystem path. The React 18 frontend built with Vite presents a timeline view, fullscreen lightbox with slideshow mode, photo detail sidebar showing location and people, and a folder navigation view with breadcrumb paths. RAW files from any camera are converted via ImageMagick, videos processed through FFmpeg, and Live Photos paired with their RAW+JPEG counterparts as unified entries. Public album sharing via link provides fine-grained privacy controls, and duplicate detection uses perceptual hashing to identify near-identical images. Deployment runs as a single unified Docker container or via Docker Compose with Kubernetes manifests also available. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ManageIQ gives operators one console for every cloud and hypervisor the organization runs, connecting to VMware, OpenStack, AWS, Azure, Google Cloud, Kubernetes, OpenShift, and Nutanix to continuously discover inventory, map relationships, and listen for changes without installing agents. Discovered estates become manageable: operators publish bundles of resources into a self-service catalog that end users order like apps, then govern the full life cycle through policy, compliance, delegated operations, and retirement. SmartState analysis scans the contents of VMs, hosts, and containers agentlessly, even foreign or uncooperative ones, feeding security and compliance policies that flag drift automatically. Utilization metrics reveal idle systems and right-sizing opportunities, with capacity planning and what-if scenarios before hardware purchases. Chargeback and showback assign rates to tenants, group VMs by tag or container images by label, and generate reports in multiple currencies. Embedded Ansible automation executes playbooks for provisioning and remediation, and the Spassky release adds Nutanix and Terraform Enterprise providers on a Rails 7.2 core. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Folivox turns an ebook sitting on your server into a finished audiobook read aloud in a voice you choose, cloned from a short sample, or performed by a whole cast of characters. Drop in an FB2, EPUB, DOCX, PDF, or TXT file and the studio detects the book language, restores chapters, poems, and epigraphs, cleans page furniture away, and spells numbers, dates, money, and abbreviations out in full for nine fully supported languages. Narration runs locally through CosyVoice 3 or the multi-speaker Fish Audio Drama 3, which can give each character their own voice like a radio play, or through ElevenLabs, OpenAI, Gemini, or Cartesia with your own key after a cost estimate you approve. A markup editor finds the dialogue, assigns lines to speakers, and lets you fix mistakes and listen before committing to a ten-hour render. Every fragment is listened back to with Whisper and re-read until the best take survives, while a crash-safe journal means a stopped render resumes where it left off and edited chapters redo only what changed. The finished book arrives as one chaptered M4B with cover and metadata, or one MP3 per chapter, loudness-normalised and ready for any player. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Enterprises requiring production-grade governance for long-running autonomous AI operations can rely on OpenGeni, a self-hosted orchestration platform with human-in-the-loop approvals, Connected Machine execution, and comprehensive audit replays. Operators can configure durable multi-turn workflows that execute continuously toward specified goals without premature termination, automatically pausing when human verification, structured multiple-choice decisions, or critical credential approvals are required. Teams can assign execution workloads across ephemeral cloud sandboxes or route them straight to enrolled Connected Machines to run commands directly against local code repositories without exposing inbound network ports. The integrated web console lets developers inspect live Server-Sent Event activity streams, replay complete turn histories from audit logs, inspect generated artifacts, and cancel or steer in-flight agent tasks on demand. Platform administrators can enforce fine-grained access policies through GitHub App repository bindings, broker temporary role-scoped secrets, and maintain a shared organizational knowledge base where agents propose findings for human review before vector indexing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Engineers who have outgrown Duplicati or rsync scripts tend to appreciate Kopia's design: encrypted, compressed, content-deduplicated snapshots in Go, stored in a repository on any storage you control - S3, Google Cloud Storage, Azure Blob, Backblaze B2, SFTP, WebDAV, or a plain filesystem. Encryption is mandatory and end-to-end: every block is encrypted client-side with AES-256-GCM or ChaCha20-Poly1305 using keys derived from your repository password, and even file names never leave the machine in plaintext. Blocks are packed into 20-40 MB blobs with random names, so the storage provider learns nothing about content or structure. Deduplication is automatic and content-based - identical data across files, snapshots, and even multiple machines backing up to the same repository is stored once. Policies govern everything per-directory: compression choice, retention (hourly through annual), scheduling, and ignore rules. Incremental snapshots are point-in-time records you can mount and browse like a filesystem. This deployment runs the Kopia repository server with its web UI, centralizing backups from multiple client machines over an authenticated API - each client connects with the server URL and certificate fingerprint, and users only see their own snapshots. Error correction, high-latency-tolerant caching, and both CLI and GUI round it out.