Up to 280 search services - Google, Bing, DuckDuckGo, Brave, Qwant, Startpage - aggregated without tracking or profiling: SearXNG is a privacy-respecting metasearch engine (AGPL-3.0, successor to Searx). Your instance queries the upstream engines on your behalf: your IP address, cookies, and search history never reach them, tracker parameters are stripped from result URLs, and an optional image proxy fetches thumbnails server-side so result pages leak nothing. It can even route outbound queries through Tor for full anonymity. Search is organized into categories - general, images, videos, news, maps, music, IT, science, files - with bang shortcuts for targeting specific engines, and every source can be enabled, disabled, or weighted per category in settings.yml. A plugin system adds calculators, hash tools, tracker removal, and unit conversions inline, and preferences (themes, safe search, languages, engine selection) persist in cookies rather than server-side accounts. The real argument for running your own instance rather than trusting a public one is control: you decide the logging policy (none), the engine mix, rate limiting, and who gets access - making it the default search backend for browsers, families, and teams that want Google-quality results without the profile.

The ad-riddled "free online tools" sites people paste sensitive text into and upload confidential PDFs to - OmniTools replaces that whole ecosystem with one self-hosted app. It bundles 50+ utilities behind one clean React/TypeScript interface: image tools (resize, convert, crop, edit), video and audio tools (trim, reverse, convert), PDF tools (split, merge, edit), text and list utilities (case converters, formatters, shufflers), plus date/time, math, and data-format helpers for JSON, CSV, and XML. The architectural decision that makes it trustworthy is that all file processing happens entirely client-side in the browser - the server only serves static assets, and nothing you process ever leaves your device. That design has a pleasant side effect: the host needs almost no resources (people run it on a Raspberry Pi Zero), because your browser does the work while the server just delivers files. The Docker image is a remarkable 28 MB, making it one of the fastest apps to deploy and cheapest to keep running. There are no ads, no tracking, no accounts, and no upload limits. With multi-language support and an MIT license, it works equally well as a personal toolbox or a team-wide internal utility portal - one URL that replaces a bookmark folder full of questionable converters. Actively developed with 50 contributors and 9,500+ GitHub stars.

With over 140,000 code commits, 1,200+ GitHub stars, and continuous development since 2004 spanning more than two decades of active maintenance through version 18.6.0 released in July 2026, XWiki operates as a second-generation wiki platform that goes beyond static pages by enabling teams to build custom collaborative applications directly inside wiki pages using structured data forms and in-page scripting. The Java backend runs on Apache Tomcat with PostgreSQL, MySQL, or Oracle database storage, serving a responsive web interface with a WYSIWYG editor featuring real-time collaborative editing, link and macro editors, user mentions, inline comments, annotations, and complete version history with diff comparison. The App Within Minutes extension lets non-developers create custom data-driven applications using drag-and-drop form builders that generate filterable live tables for structured data browsing without writing code. Over 900 extensions from the built-in Extension Manager add functionality including blogs, task trackers, forums, diagram editors, and Confluence migration tools. Enterprise integration features include LDAP and Active Directory authentication, SAML and OIDC single sign-on, fine-grained per-page and per-space permissions with nested page hierarchies, and multi-wiki support for hosting multiple independent wikis from a single installation. The RESTful API provides programmatic access to pages, spaces, objects, attachments, and properties with XML and JSON representations. Office document import converts Word and Excel files directly into wiki pages while PDF export generates formatted documents from wiki content. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-2.1 licensed.

With over 7,400 GitHub stars and benchmarked at 0.89 seconds average session lifecycle — 1.7x to 9x faster than competing browser automation platforms — Steel Browser delivers production-grade headless Chrome infrastructure purpose-built for AI agents that need to interact with the modern web. The TypeScript-based server exposes a REST API providing on-demand browser sessions with full CDP (Chrome DevTools Protocol) access, allowing connections from Puppeteer, Playwright, or Selenium through standard WebSocket endpoints without framework lock-in. Each session maintains persistent state including cookies, localStorage, IndexedDB, and authentication credentials across requests, enabling stateful multi-step agent workflows that survive session restarts. Built-in anti-detection includes stealth plugins, browser fingerprint randomization, and configurable user-agent rotation, while the proxy chain manager handles IP rotation through residential, datacenter, or custom proxy pools. CAPTCHA solving integrates natively so agents encounter fewer blocking interrupts during autonomous navigation. The Session Viewer provides real-time WebRTC-streamed visual debugging of live sessions and playback of recorded sessions with full network request logging. Browser Tools APIs convert any page to clean Markdown, readability-optimized text, PDF documents, or high-resolution screenshots with a single API call. The MCP Server integration exposes Steel sessions as tools accessible to Claude, Cursor, and other Model Context Protocol-compatible AI agents. Deploy via Docker with a single container or use Docker Compose for production configurations with automatic resource cleanup and session lifecycle management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 37,000 GitHub stars and used by teams at Y Combinator, Airbus, and Phantom, PostHog replaces an entire stack of paid analytics tools — Mixpanel, Amplitude, Heap, LaunchDarkly, Hotjar, and Google Analytics — with a single open-source platform where every tool shares a common event layer and user context. Product analytics captures events automatically or via manual instrumentation with HogQL (SQL) access for custom queries, while web analytics provides GA-like dashboards for traffic, conversions, and Core Web Vitals. Session replay records user interactions with DOM snapshots and network waterfall analysis, linking directly to errors and feature flag exposures. Feature flags safely roll out changes to specific cohorts with multivariate support and instant rollback, while experiments run A/B tests with automatic Bayesian significance calculations and revenue attribution. Error tracking captures stack traces linked to session replays and user properties for immediate reproduction context. AI observability monitors LLM generations, traces, token usage, latency, and costs across model versions. The managed data warehouse syncs 120+ external sources including Stripe, Postgres, Salesforce, and HubSpot alongside product events, queryable through a unified SQL editor. An MCP server enables AI agents in Cursor, Claude Code, or VS Code to query analytics and execute SQL directly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

GoatCounter delivers meaningful web traffic insights — pageviews, referrers, browsers, screen sizes, country-level geolocation — without setting a single cookie, without collecting personal data, and without forcing GDPR consent banners on your visitors. Written entirely in Go and distributed as a single compiled binary consuming roughly 25MB of RAM, it adds just 3.5KB to your pages via the tracking script, with a JavaScript-free tracking pixel alternative for sites that avoid scripts entirely, plus backend middleware integration and log file import for server-side collection. The dashboard displays pageview counts per path with hourly resolution, referrer sources grouped by domain with full URL on hover, browser and OS version breakdowns, screen size distributions, and country-level location data derived from IP addresses that are immediately discarded after geolocation. Campaign tracking supports UTM parameters and custom data attributes. A public stats option exposes your dashboard at a shareable URL for build-in-public transparency. SQLite serves as the default database requiring zero administration, while PostgreSQL handles higher-traffic deployments with multi-site setups. Built-in ACME and TLS certificate management eliminates reverse proxy requirements for HTTPS — no Nginx or Caddy needed. The REST API provides programmatic access to all analytics data. Deploy as a single binary, via Docker with the official arp242/goatcounter image, or through native packages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EUPL-1.2 licensed.

Managing Kubernetes shouldn't require every developer to become a Kubernetes expert — KubeSphere wraps cluster operations, CI/CD, service mesh, and observability into guided web workflows that operations teams configure once and developers consume without kubectl. The LuBan extensible architecture treats each capability as an independently installable extension plugging into a lightweight microkernel: enable DevOps without service mesh, add monitoring without the app store, compose exactly what your organization needs. Multi-cluster management provides a centralized control plane for provisioning and operating clusters across cloud providers, data centers, and edge locations with unified identity and resource quotas. The DevOps extension integrates Jenkins for graphical pipeline creation with S2I and B2I workflows, while Argo CD powers GitOps continuous deployment with real-time sync status. Istio-based service mesh provides traffic management, canary deployments, circuit breaking, and distributed tracing through the console without CLI knowledge. Prometheus monitoring with custom dashboards, Fluentd log collection with multi-tenant search, and alerting via Slack and email complete the observability stack. Multi-tenant workspace hierarchy enforces resource quotas and fine-grained RBAC roles across teams. A built-in Helm-based app store handles lifecycle management across clusters. KubeKey deploys production-grade clusters on bare metal or VMs with air-gapped support. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Spree Commerce provides a complete headless ecommerce backend where products, orders, payments, and promotions are managed through typed REST APIs with OpenAPI 3.0 specs and TypeScript SDKs providing autocomplete and type safety. Fifteen years of production history and 15,600+ GitHub stars back a mature ecosystem that ships a production-ready Next.js 16 storefront built with React 19 and Tailwind CSS 4, including multi-region URL routing and Stripe payments supporting Apple Pay, Google Pay, Klarna, and Affirm. Sales Channels model distinct contexts from a single instance: DTC storefronts, wholesale portals, mobile apps, and point-of-sale terminals, each with its own catalog, pricing, and checkout flow. The rules-based promotion engine supports coupon codes, multi-condition discounts, gift cards, and digital product fulfillment. Multi-warehouse inventory tracks stock across locations in real time with reservations and advanced order routing that splits shipments across fulfillment centers. B2B capabilities include customer-specific price lists, storefront access gating, wholesale portals with approval workflows, and quick order forms. The admin dashboard built with Tailwind CSS provides role-based permissions, product management, order processing with refunds, and scaffold generators for custom pages. BSD 3-Clause licensed with zero platform or transaction fees. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console.

With over 27,500 GitHub stars, 350 contributors, and 220 releases since 2022, InvokeAI delivers an industry-leading creative engine that serves as the foundation for multiple commercial AI art products. The web-based UI supports an extensive model ecosystem including Stable Diffusion 1.5 through 3.5, SDXL, Flux.1 Dev, Flux.1 Schnell, Flux.1 Kontext, Flux.2 Klein 4B and 9B, CogView 4, Z-Image, Anima, and Qwen Image — plus externally-hosted models from OpenAI GPT Image, Google Gemini, BytePlus, and Alibaba Cloud via API key integration. The Unified Canvas provides a fully integrated workspace with in-painting, out-painting, brush tools, layer management, and regional guidance for compositing AI-generated content with existing artwork. The node-based Workflow Editor enables building complex generation pipelines with branching logic, connecting text encoders, VAEs, ControlNets, IP-Adapters, and LoRA weights into reusable graphs. Model management handles automatic downloading from HuggingFace and Civitai with conversion between safetensors, diffusers, and checkpoint formats. The backend runs on Python with CUDA, ROCm, and MPS acceleration supporting NVIDIA, AMD, and Apple Silicon GPUs. Multi-user accounts allow shared access to a single InvokeAI server with per-user galleries and settings. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect provider that plugs into any existing user database or authentication system through a headless consent and login bridge, letting you own your authorization infrastructure without rebuilding identity management from scratch. The Go binary ships at under 15MB with zero system dependencies and exposes two distinct API surfaces: a public endpoint on port 4444 handling authorization code flows, token exchanges, PKCE challenges, device authorization grants per RFC 8628, and OpenID Connect discovery, plus an admin endpoint on port 4445 managing client registration, token introspection, consent session lifecycle, and JWKS rotation. Access tokens can be issued as opaque reference tokens or signed JWTs for stateless validation at resource servers, while refresh token rotation, token revocation per RFC 7009, and pairwise subject identifiers provide granular security controls. Persistent storage spans PostgreSQL, MySQL, and CockroachDB with automatic schema migrations, and the architecture supports horizontal scaling behind load balancers with shared database state. Dynamic client registration per RFC 7591 enables automated provisioning, and the OAuth 2.0 Threat Model security considerations are implemented as default behaviors rather than optional add-ons. Trusted by OpenAI and other internet-scale platforms. Helm charts and Docker Compose quickstarts provide production-ready deployment paths alongside the broader Ory ecosystem including Kratos for identity management, Oathkeeper for zero-trust API proxying, and Keto for fine-grained permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

LibreDesk unifies live chat, email, and future channel integrations into a single agent inbox where every customer conversation converges regardless of origin, replacing per-seat-priced tools like Zendesk, Intercom, and Freshdesk with a zero-cost alternative that has surpassed 2,000 GitHub stars. Built on a Go backend with a Vue.js 3 and ShadcN UI frontend, it ships as a single binary requiring only PostgreSQL and Redis. The embeddable live chat widget drops onto any website with a snippet, while the AI assistant handles initial customer queries using answers grounded in your knowledge base before escalating to human agents when needed. Agent copilot drafts replies, summarizes conversation threads, and rewrites messages for tone adjustment directly within the inbox interface. Automation rules trigger on conversation events to tag, assign, and route tickets based on configurable conditions, while auto-assignment distributes workload by agent capacity or custom criteria. SLA management tracks response and resolution time targets with breach notifications, and automated CSAT surveys measure satisfaction after conversation closure. Macros save frequently sent responses as reusable templates that simultaneously set tags and assign conversations. Role-based access control provides granular per-action permissions for teams and individual agents, and SSO supports Google, Microsoft, and any OIDC provider. The HTTP/JSON API and webhook system enable custom integrations with external tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Krayin CRM gives sales teams a visual Kanban pipeline where leads flow through configurable stages — new, contacted, qualified, proposal, won, lost — with deal values tracked per stage, drag-and-drop transitions, and AI-powered document import that extracts contact details from uploaded PDFs, DOCs, and images without manual data entry. Built on Laravel 12 with a Vue.js frontend and MySQL database, the platform delivers complete customer lifecycle management through a two-stage contact model separating unqualified Leads from qualified Persons linked to Organizations, with a unified timeline displaying associated activities, notes, emails, and deals. The activity module schedules calls, meetings, and tasks on a drag-and-drop calendar with reminders and team assignment. A built-in product catalog supports line-item quoting with pricing and quantities. Email integration connects via SMTP, IMAP, and SendGrid parsing, linked to leads and contacts automatically. Workflow automation triggers actions on conditions and pushes events to external systems via webhooks. The dashboard visualizes pipeline performance, top customers, top products, and email engagement with pie charts and trend widgets. Custom attributes add text, number, date, boolean, and dropdown fields to any entity. Role-based ACLs manage team permissions per module. Extensions add multi-tenant SaaS, WhatsApp lead generation, and VoIP calling. Deploy via Docker Compose. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Project AIRI is the most popular open-source AI companion platform — a self-hosted recreation of Neuro-sama that brings AI-powered virtual characters into your world across web, desktop, and mobile. The system renders Live2D, Spine, and VRM 3D character models with auto-blink, eye tracking, and lip-sync driven by real-time voice synthesis, while the xsAI abstraction layer connects to 40+ LLM providers including OpenAI GPT-4, Anthropic Claude, Google Gemini, DeepSeek, and local models via Ollama and OpenRouter. Built from day one on WebGPU, WebAudio, Web Workers, WebAssembly, and WebSocket technologies, the browser version runs entirely client-side with PWA offline support while the server runtime enables persistent memory via PostgreSQL with pgvector embeddings and DuckDB WASM for client-side storage. The Minecraft agent plays autonomously using mineflayer with pathfinding, and a Factorio integration provides cooperative gameplay. Social integrations deploy your companion as a Discord bot joining voice channels, a Telegram bot, and a Twitter/X agent posting and replying autonomously. The desktop Stage Tamagotchi app provides an always-on-screen companion for Windows and macOS, while Stage Pocket brings the experience to mobile. Voice features include client-side speech recognition via VAD, multiple TTS providers including ElevenLabs, and screen vision capabilities. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 78,000 GitHub stars, 270 contributors, and seven years of continuous development tracking upstream VS Code releases within days, code-server has become the definitive way to run a full Visual Studio Code IDE on any remote machine and access it from any browser on any device. The project applies a curated set of patches to Microsoft's VS Code codebase that add password authentication, sub-path hosting behind reverse proxies, self-contained web views that never call out to Microsoft servers, a built-in proxy for accessing ports on the remote machine directly through the VS Code ports panel, and on-disk settings persistence instead of browser storage. The extension ecosystem works with the Open VSX marketplace by default, giving access to thousands of extensions for Python, JavaScript, Go, Rust, Java, and every other language, along with themes, linters, formatters, and debuggers. The integrated terminal provides direct shell access to the server, Git integration handles version control without leaving the editor, and the debugger supports breakpoints, variable inspection, and step-through execution for Node.js, Python, Go, and other runtimes. DevContainer support enables reproducible development environments defined in JSON configuration files. Installation options include a one-line install script, manual package installation, Docker via the official codercom/code-server image, and DevContainer features. Minimum requirements are a Linux machine with 1GB RAM, 2 vCPUs, and WebSocket support. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stocks, ETFs, crypto, bonds, precious metals, and cash across every account and currency, in one privacy-first dashboard: Ghostfolio is open-source wealth management software. The deliberate design decision is no brokerage linking: positions enter by manual entry, CSV import, or the REST API, so your holdings never pass through a data aggregator. Performance is measured as return on average investment across Today, WTD, MTD, YTD, 1Y, 5Y, and Max timeframes, with benchmark comparison against indices like the S&P 500, dividend tracking, and allocation breakdowns by asset class, region, and sector. A static X-ray analysis flags concentration and other portfolio risks, and a FIRE calculator projects progress toward financial independence. Multi-currency support converts holdings using historical exchange rates, market data comes from Yahoo Finance and CoinGecko among other pluggable providers, and everything exports back out as CSV or JSON. Built with Angular and NestJS on PostgreSQL and Redis, shipped as Docker images for amd64 and ARM, with a mobile-first PWA interface, dark mode, and a distraction-free Zen mode. AGPL-licensed.

Memos, the lightweight open-source note service from the usememos project, packaged as a containerized deployment for multi-architecture Docker hosts (x86-64 and arm64): that is Usermemos. The model is frictionless capture: no folders or titles, just a chronological stream of Markdown notes with code blocks, task lists, tables, and file attachments, organized by #hashtags pulled automatically from the text. Per-memo visibility - private, protected for logged-in users, or public - lets a single instance serve as a personal journal, a shared team log, or a public microblog simultaneously. Multi-user support with authentication makes it workable for small teams, and full REST and gRPC APIs open capture and retrieval to CLIs, bots, and automation tools. The runtime is a single Go binary with a React frontend that idles around 50 MB of memory and stores content as plain Markdown in SQLite by default, with MySQL and PostgreSQL available for heavier deployments. Configuration happens through environment variables, access works over HTTP or HTTPS behind a reverse proxy, and there is no telemetry - notes stay on your server in a portable format.

Authelia is the leading open-source SSO and multi-factor authentication server for self-hosted infrastructure. The Go backend compiles to a single binary or Docker container image, serving a TypeScript React web portal that handles first-factor username and password login, second-factor authentication via TOTP, WebAuthn FIDO2 security keys, passwordless passkeys, and Duo mobile push notifications, and an OpenID Connect 1.0 and OAuth 2.0 identity provider with device code flow, JWE encrypted ID tokens, custom claims policies, and network-scoped authorization criteria. The forward authentication model integrates with Nginx auth_request, Traefik ForwardAuth, HAProxy, Caddy, Envoy, SWAG, and Skipper reverse proxies, injecting Remote-User, Remote-Groups, and Remote-Email headers into authorized requests. Granular access control rules match subject, groups, request URI, HTTP method, and network to enforce one-factor and two-factor policies per route. The user backend supports LDAP with attribute mapping, connection pooling, and bind mode, or YAML file-based authentication with Argon2id hashed passwords. Session state stores in Redis for high availability across clustered deployments, while persistent data lives in SQLite, MySQL and MariaDB, or PostgreSQL. Brute force protection locks accounts after configurable failed attempts, and email-based identity verification handles password resets and device registration. Dark, light, and OLED themes with i18n localization customize the portal appearance. On RepoCloud, deploy Authelia on a dedicated VPS with Docker, root SSH access, and complete control over your authentication infrastructure, all under the Apache-2.0 license.

FalkorDB is the first queryable property graph database to leverage sparse adjacency matrices and linear algebra for graph traversal, replacing traditional pointer-chasing with GraphBLAS-accelerated computation. Originally the RedisGraph engine, it was relaunched as FalkorDB in 2023 and rewritten from C to Rust in 2026 for improved memory safety and performance. The database supports the OpenCypher query language with proprietary extensions, translating queries into linear algebra expressions that exploit AVX hardware acceleration. Indexing options include full-text search, vector similarity for embedding-based retrieval, and range indexing, while connectivity supports both the RESP protocol for Redis clients and the Bolt protocol for Neo4j-compatible tooling. The GraphRAG SDK enables ingestion of documents in text, PDF, and Markdown formats into knowledge graphs, with schema-guided entity extraction, hybrid retrieval combining vector and graph traversal, relationship expansion, and cited answers for LLM applications. Official client libraries cover Python, Node.js, Java, Rust, Go, PHP, and C#. Multi-tenant support handles over 10,000 concurrent graphs with zero overhead and full isolation. Docker deployment runs the falkordb/falkordb image on ports 6379 for the database server and 3000 for the built-in browser UI, with persistent volume storage and optional authentication. A production falkordb-server image excludes the browser for lighter deployments. On RepoCloud, deploy FalkorDB on a dedicated VPS with root SSH access, persistent storage for your graph data, and complete control over authentication, thread count, and memory configuration, all under the SSPLv1 license.