Backed by over 45,000 GitHub stars and described as the tool that replaces Notion, Evernote, and Anki in a single Docker container, SiYuan is the privacy-first knowledge management system where every paragraph, heading, and list item is a uniquely addressable content block. The block-level architecture enables bidirectional links, transclusion embeds, and SQL query blocks that dynamically aggregate content across your entire workspace, while the knowledge graph visualization maps relationship networks between documents and blocks. Built-in databases support table views with relation and rollup columns, filter composition, sorting, and template-based calculations for structured data management alongside freeform notes. The FSRS spaced repetition engine turns any content block into a flashcard with scientifically calibrated review scheduling, eliminating the need for separate memorization tools. AI integration connects to OpenAI-compatible APIs for writing assistance, translation, summarization, and Q&A chat, with semantic search using embeddings and reranking for intelligent content retrieval. The Bazaar community marketplace delivers plugins, themes, templates, and widgets through a managed extension system with TypeScript plugin APIs. End-to-end encrypted synchronization works across S3-compatible storage, WebDAV servers, or SiYuan's own cloud service, while Tesseract OCR extracts searchable text from images and the web clipper captures pages from Chrome, Edge, and Firefox. Export targets include Markdown with assets, PDF, Word, and HTML. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 34,000+ GitHub stars and a v1.5 release driven by 36 merged community pull requests, DeepTutor from Hong Kong University's Data Science Lab delivers a full agent-native learning workspace that goes far beyond chatbot wrappers. Eight integrated surfaces — Chat, Deep Solve, Quiz Generation, Deep Research, Math Animator, Co-Writer, Book generation, and Mastery Practice — share a unified context so the objective follows the learner, not the tool. The platform's three-layer memory architecture (L1 working, L2 session, L3 long-term) makes personalization inspectable rather than opaque, letting users see exactly what the system remembers and why. Knowledge retrieval operates across five pluggable engines — LlamaIndex with FAISS vectors, PageIndex for page-level citations, GraphRAG for knowledge-graph traversal, LightRAG for local or server-offloaded retrieval, and linked Obsidian vaults — with document parsing via MinerU, Docling, markitdown, or PyMuPDF4LLM. Partners extend the tutoring brain to 15+ messaging platforms including Slack, Discord, Telegram, Matrix with E2EE, and Mattermost, each carrying private memory with branch, resume, and replay capabilities. Subagent integration brings Claude Code, Codex, Gemini, and Kimi directly into learning sessions. The system supports 30+ LLM providers from OpenAI and Anthropic to Ollama for fully local operation, with multi-user isolation, admin controls, and a full CLI interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

GroupOffice checks your whole company in at one address: mail, meetings, projects, invoices, and files behind a single login on your own server. The built-in mail client saves messages straight onto projects or contacts, signs and encrypts with S/MIME, and shares folders and accounts across the team. Shared calendars offer team views, bookable resources, and video meetings, while address books carry custom fields and comments so customer knowledge survives staff changes. Projects gather their tasks, files, and discussions in one place, track hours as work happens, and turn those hours and costs into invoices and reports. Support tickets arrive from your website or by email and stay organized by team, and newsletters compose campaigns from templates filled with your own data. Files co-edit in the browser through OnlyOffice or Collabora, connect to desktops over WebDAV, and sync to native phone and computer apps over open protocols. Two-factor authentication, encryption, and a module system you can extend with your own tools keep the office private and shaped to how you actually work. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

What Gmail did for email, Octobox does for GitHub notifications: an ephemeral, unmanageable stream becomes an inbox you can actually triage. GitHub marks notifications read the moment you glance at them and lets old ones vanish days later; heavy maintainers end up building elaborate Gmail filter systems just to cope. Octobox - a Ruby on Rails app over PostgreSQL - syncs your notifications into a persistent inbox with an explicit archived state: mark a thread done, and if the issue or PR sees new activity, it pops back automatically, so nothing silently falls through. Triage is keyboard-driven with Gmail-style shortcuts (j/k to navigate, e to archive, m to mute, s to star), and multi-select clears noisy repositories in bulk. Filtering is where it earns its keep: slice by repository, organization, type, action, state, reason, CI status, labels, author, assignee, or bot origin, combine prefix search filters, and pin favorite searches to the sidebar. The optional GitHub App enriches entries with live PR/CI status and labels so you can decide without clicking through. Auto-archive rules clear merged PRs and closed issues; muting and snoozing silence the rest. A REST API supports integrations. Self-hosting keeps your notification metadata - a map of everything you work on - on your own server.

Stalwart replaces the traditional Postfix + Dovecot + SpamAssassin + calendar-server stack with one Rust binary that speaks every standard mail and collaboration protocol natively. JMAP, IMAP4rev2, POP3, SMTP, CalDAV, CardDAV, and WebDAV all run inside the same process — no glue scripts, no sidecar daemons, no version conflicts between components. The pluggable storage architecture lets operators choose RocksDB for single-node deployments, FoundationDB for distributed clusters, PostgreSQL, MySQL/MariaDB, or SQLite for the data store, S3/MinIO/Azure Blob for message blobs, and Elasticsearch or Meilisearch for full-text search, with Redis or the internal engine backing rate limiters and session state. Security features include S/MIME and OpenPGP encryption at rest, automated DKIM key generation with DNS publication, DANE and MTA-STS transport security, automatic ACME TLS provisioning, granular ACLs, rate limiting, and IP banning. The browser-based admin console manages accounts, domains, groups, mailing lists, SMTP queues, DMARC/TLS-RPT/ARF reports, and every configuration object without touching a config file, while the self-service portal at /account gives end users password reset and encryption key management. Multi-tenant support with per-tenant quotas enables hosting-platform deployments, and coordinator-less clustering via Zenoh or NATS scales horizontally by adding nodes. Deploy via Docker or the standalone binary. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3 licensed.

When nightly SQL, Spark, and Python jobs outgrow cron, Apache DolphinScheduler replaces the tangle with a visual workflow orchestrator where every dependency is a line on a drag-and-drop canvas. More than 30 built-in task types cover Shell, SQL, Python, HTTP, Spark, Flink, Kubernetes, SeaTunnel, and Jupyter, while logic nodes add sub-workflows, conditions, switches, and dependencies across projects. Workflows can also be written as code through a Python SDK, YAML, or the Open API and run on timezone-aware cron schedules. Backfill reruns a workflow across a date range or a hand-picked list of dates, in serial or parallel, and any instance can be modified, rolled back, and rerun without touching the saved template. Kill, pause, and resume running tasks, and choose whether a failure ends the run or lets parallel branches continue. Alert groups route results to Email, Slack, Telegram, PagerDuty, Feishu, DingTalk, webhooks, or custom scripts. Tenants, worker groups, and environments isolate teams on shared infrastructure, with project and data source permissions. A Resource Center stores scripts and task files locally or on HDFS, MinIO, and cloud object storage, and the monitor page shows master, worker, and database health at a glance. Standalone, Cluster, Docker, and Kubernetes deployments scale from one node to many masters and workers that can join or leave a running cluster. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With 5,600+ GitHub stars and deep dbt integration, Lightdash is the open-source Agentic BI platform that treats analytics like software — defining metrics, dimensions, joins, permissions, and caching in a governed context layer that powers dashboards, AI agents, data apps, embedded analytics, and MCP server endpoints simultaneously. The dbt Write-Back feature lets business users create custom metrics and models in the UI, then automatically generates pull requests in GitHub or GitLab so every change flows through code review and CI validation before reaching production. Context-specific AI analysts automatically select relevant models and metrics, build queries, and present insights in plain English, while row-level security, user attributes, and customer-facing permissions ensure data governance at every layer. The platform connects to BigQuery, Snowflake, Redshift, Databricks, PostgreSQL, Trino, and ClickHouse through warehouse adapters, with the TypeScript monorepo built on React, Mantine, Vite, and TanStack Query on the frontend plus Node.js, Express, Knex, and PostgreSQL on the backend. Data teams build analytics with coding agents, preview changes from the CLI, validate in CI pipelines, and review charts and dashboards in pull requests — making the entire analytics lifecycle version-controlled and reproducible. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Manga collections tend to get trapped on a single phone; Suwayomi moves the library, downloads, and reading progress onto a server you run, so every browser and device sees the same shelf. In the browser, a built-in reader handles single page, double page, continuous vertical, continuous horizontal, and webtoon layouts, adding image filters, custom keybinds, auto scrolling, and separate desktop and mobile views. Content comes from Mihon (Tachiyomi) extensions, which can be searched, browsed, and sorted into categories, with custom extension stores loaded from JSON or Protobuf indexes. Downloads save chapters as CBZ archives for offline reading, and the server checks the library for new chapters every 12 hours by default, fetching them automatically if you allow it. Progress follows you through MyAnimeList, AniList, and MangaUpdates, a Suwayomi extension and tracker for Mihon, SyncYomi servers, and KOReader. E-reader apps connect over OPDS feeds, scheduled Mihon-compatible backups protect the library, and FlareSolverr or Byparr support handles Cloudflare-protected sources. Public instances can be locked down with basic authentication, a simple login page, or JWT-based UI login, and a PostgreSQL backend, still in beta, can replace the default file store. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Pi Pocket puts the Pi coding agent in your phone browser, so you can start, steer, and review real coding sessions from anywhere while the work stays on your own server. Open a folder, a fresh Git worktree, or a GitHub repository, pick a model per session, and watch streamed replies with tool calls, queued follow ups, and a stop button when a run wanders. Sessions survive crashes and restarts because every model call, tool call, and subagent step is stored as it happens, and forks let you retry any reply with a different model on another branch. Invite teammates into a live session with presence, roles, and a side chat the agent never sees, or let PiP, the built in assistant, follow your other sessions and report back. GitHub watches and webhooks wake the agent when pull requests, issues, or workflows change, while scheduled messages and cron style goals keep routine work moving overnight. Spend views show cost per person and per session, and owner set limits pause new work instead of quietly burning budget. On a phone you get push notifications, dictation, share sheet intake, and a home screen app, and live reloadable extensions add routes, modules, and commands without a build step. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Turn any chaotic digital book archive into an autonomous, self-organizing reading portal using Calibre-Web Automated, a digital library manager featuring hands-free format conversions, metadata fetching, and e-reader synchronization. Readers can drop raw ebook files into the automated intake directory and watch the system instantly convert between twenty-eight distinct file types, repair malformed EPUB internal markup, and fetch enriched metadata from Hardcover, Kobo, and ISBN databases. The responsive web reader lets you browse collections, read directly in any desktop or mobile browser, and organize titles into dynamic rules-based Magic Shelves that update automatically. Built-in KOReader sync harmonizes reading progress and bookmarks across mobile devices and e-ink readers, while native OPDS feeds connect seamlessly to your favorite external reader applications. Administrative tools empower you to run hybrid SQL and fuzzy duplicate detection scans, perform batch metadata editing across entire series, enforce cover art changes directly into source files, and auto-dispatch newly ingested books to Kindle or Kobo devices via scheduled email delivery. Granular multi-user controls allow administrators to assign folder permissions, restrict downloads, enforce dark mode themes, and authenticate readers securely through OAuth and OpenID Connect identity providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU General Public License v3.0 licensed.

Backed by Alibaba's AIDC team and carrying over 27,700 GitHub stars, Pixelle-Video turns a single text prompt into a publish-ready short video in approximately three minutes — handling scriptwriting, image generation, voice narration, music selection, subtitle overlay, and final MP4 export in one automated pipeline. The engine supports multiple LLM backends for script generation including GPT-4, Qwen, DeepSeek, and local Ollama deployments, while image and video creation routes through either self-hosted ComfyUI workflows, cloud-based RunningHub pipelines, or direct API connections to DashScope Wan, OpenAI, Seedream, Seedance, and Kling AI. Text-to-speech synthesis uses Edge-TTS, Index-TTS, and other mainstream engines with multi-language voice profiles. Five distinct pipelines cover Quick Create, Standard, Digital Human Avatar broadcasting, Image-to-Video transformation, and Motion Transfer from reference video. The Streamlit web UI on port 8501 provides a visual workflow builder with template selection across portrait (1080x1920), landscape (1920x1080), and square formats, while the FastAPI server on port 8000 exposes a REST API with endpoints for async video generation, task polling, content scripting, TTS and image generation, template listing, and health checks. History persistence tracks all completed generations. HTML-based visual templates support static, image-overlay, and AI-video styles with customizable prompt prefixes. The modular architecture lets operators swap any atomic capability — image model, video model, TTS engine, or VLM — by editing a workflow JSON file without touching Python code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With 37,400+ GitHub stars and active daily development by the Harness engineering team, Gitness is the open-source developer platform that ships Git hosting, container-native CI/CD pipelines, a Docker-compatible artifact registry, and cloud developer environments in a single Go binary consuming approximately 100 MB of RAM — compared to GitLab's 4+ GB minimum footprint. Born as the next generation of Drone CI, Gitness inherits Drone's battle-tested pipeline engine while adding complete source code management with pull requests featuring threaded code review comments, suggested changes, required reviewer approvals, and merge strategies including squash and rebase. Branch protection rules enforce mandatory pull requests, minimum peer reviews, passing status checks, and force-push blocking. Pipelines use Drone-compatible YAML syntax with stages, steps, and service containers, triggered automatically on code changes with results displayed directly in pull request checks. The built-in container registry eliminates the need for separate Harbor or Docker Registry deployments, supporting Docker image push and pull plus Helm chart storage. Gitspaces provide on-demand remote development environments configured via industry-standard devcontainer.json files. Encrypted secrets management with Gitleaks-powered secret scanning blocks commits containing hardcoded credentials. One-click migration imports existing GitHub Organizations and GitLab Groups, automatically converting GitHub Actions and GitLab CI pipelines to Gitness YAML. The REST API with OpenAPI specification enables programmatic management of all resources. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Cerbos decouples authorization logic from application code entirely, evaluating human-readable YAML policies in under one millisecond through a stateless Policy Decision Point that requires no application state synchronization or cross-network fan-out. Its custom decision engine benchmarks up to 17x faster than OPA-based alternatives. Access control policies use conditions expressed in Google's Common Expression Language, supporting role-based, attribute-based, and policy-based access control patterns including derived roles, scoped policies, and permissions-aware data filtering that pushes authorization predicates directly into database queries. The PDP exposes both gRPC and HTTP APIs with SDKs for JavaScript, Python, Go, Java, .NET, Rust, PHP, and Ruby, making integration a single function call regardless of tech stack. GitOps-native workflows treat policies as code with Git versioning, CI validation through GitHub Actions, coverage reports, breaking-change detection, and audit logs of every authorization decision for ISO27001, SOC2, and HIPAA compliance. Deployment flexibility spans Kubernetes sidecars, standalone services, systemd daemons, AWS Lambda functions, and WebAssembly-embedded PDPs that run authorization logic directly in browsers, serverless architectures, and edge devices. The Admin API manages policy lifecycle operations programmatically, while the built-in Playground and REPL provide interactive testing environments for policy authoring and debugging. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Vocero CRM turns WhatsApp into your sales floor, with a shared team inbox, a visual pipeline, and an AI agent that answers customers using only what your business taught it. Incoming messages land in a three-column inbox within two seconds, showing sent, delivered, and read states, enforcing the official 24-hour window, and offering approved templates when it closes. Every person who writes becomes a contact automatically and enters a Kanban pipeline you can rename, where dragging a card, adding notes, or archiving a lead takes seconds. The AI agent learns from question-and-answer pairs and free-text knowledge blocks, and answers only from what it knows. It bundles message bursts into one reply and hands the conversation to a human whenever the customer asks or the rules say so. Before the agent ever meets a real customer, the Laboratory sends six simulated customers at it, from the decided buyer to the angry one, and an independent judge scores each conversation from 0 to 100 with findings and one-click fixes you can re-test after every change. Owners create team accounts, message templates sync their approval status from Meta, and WhatsApp tokens sit encrypted at rest while every customer record stays on hardware you own. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A trading journal you host yourself, Trade Journal rebuilds broker fills and statement exports into round-trip trades, a profit and loss calendar, and daily notes that show what actually works. Read-only sync covers more than twenty brokers and exchanges, including Alpaca, Binance, Coinbase, Kraken, and IBKR Flex. Statement import auto-detects TradingView, MetaTrader, NinjaTrader, Tradovate, and thinkorswim files, handles TradeZella and Tradervue CSV migrations, and maps columns for anything else. Trades can be matched first-in-first-out, last-in-first-out, or by weighted average, with partial fills, scale-ins, and futures multipliers handled. The dashboard offers gauges, cumulative and daily P&L, an Edge Score radar, and cards you can rearrange into named layouts, while Reports break results down by symbol, tag, mistake, playbook, weekday, and time of day. Each trade page charts entries and exits and can replay candles you load, with estimated MAE and MFE. Daily journal pages hold Markdown notes, templates, attachments, and voice dictation, and optional AI recaps use your own Anthropic or OpenAI key or a local Ollama model. Playbook checklists score rule adherence, a prop firm ledger tracks costs and payouts, and privacy mode masks every amount. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

37Studio is a self-hosted AI video studio and social media desk that turns a short brief into on-brand videos, posts them to nine social platforms, and drafts replies to the messages that come back. Paste a company website and it builds a brand library of logos, photos, fonts, and colours, plus a knowledge base every later video and reply draws on. An editor agent builds each video as an animated composition, checks its own rendered frames, and takes revision requests in plain words. The same workflow yields hook reels, captioned clips, explainers, podcast clips, promo ads, and thumbnails, and any finished video can become a template. A two-hour recording becomes a shelf of short clips: transcription runs locally in about 100 languages at no cost, and YouTube or Drive links import directly. Publishing reaches Facebook Pages, Instagram, YouTube, TikTok, LinkedIn, X, Pinterest, Bluesky, and Mastodon in one action, now or scheduled, each with its own caption. Autopilot goes further: state a content plan in one sentence and a fresh video is made before every slot, waiting for one-click approval. Messenger, Instagram, and WhatsApp messages and social comments land in one inbox, with replies drafted in the customer's language under rules each brand sets. Exact AI spend shows on every project, and an MCP server lets your own AI tools run the studio. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Meridian puts all of your Emby reverse proxy sites, playback routes, and day to day operations into one clean management panel instead of a pile of hand-written proxy configs. Each Emby site gets its own entry through a path, a dedicated port, or a subdomain, with primary and backup routes that switch automatically when one goes down. Three playback modes let video stream directly to clients while logins, posters, and API calls continue through the proxy, so bandwidth lands where it should. Accounts for each site are stored with passwords and expiry dates, renewal reminders arrive ahead of time, and account details can be imported or exported as JSON and CSV. Traffic trends, per-site quotas, rate limits, and static resource caching keep busy sites under control, while log filtering and connection diagnostics show exactly where a request went wrong. Certificates are handled through Cloudflare wildcard issuance and renewal, or by uploading your own, and encrypted backups protect the whole configuration. Routine administration can even happen from Telegram, checking daily reports, adding or pausing sites, and renewing accounts from chat. The whole panel runs as one small program with a built-in database and works comfortably from a phone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Split Pro settles the question that ruins group dinners, who owes whom, with a private expense ledger that runs on your own server instead of an ad-supported app. Create a group for the apartment, the trip, or the team lunch rotation, then log each shared cost with its category, currency, date, and a photo of the receipt. Every expense splits your way: equally, by percentage, by shares, by exact amounts, or with manual adjustments when someone covered the tip. Rent, utilities, and subscriptions can repeat on a schedule so recurring bills enter the ledger on their own. The balances view shows exactly who is ahead and who owes, and debt simplification collapses a web of small obligations into the fewest possible payments. Negative expenses record refunds and corrections without breaking the math, and the activity feed keeps a visible history of every edit and deletion. Coming from Splitwise, you can import your friends and groups to pick up where you left off, and bank transactions from supported providers convert straight into expenses. On phones it installs as a progressive web app with push notifications whenever a new expense lands. Logins use email magic links, Google, or your own OIDC provider, and signups can be closed so the instance stays limited to your circle. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.