FileBrowser Quantum is an open-source, self-hosted web file manager that transforms any directory tree or mounted storage volume into a fast, searchable cloud drive accessible from any browser. You can mount multiple independent filesystem sources at once and apply custom include or exclude rules to keep sensitive system folders hidden from everyday browsing. A background indexing engine powers instant as-you-type search across millions of files, letting you filter results by file size, folder size, media type, or modification date in milliseconds. Rich media thumbnails render automatically for videos, office documents, audio album artwork, and interactive 3D models, while integrated OnlyOffice support lets you edit spreadsheets and word processing documents directly inside your browser tab. Built-in WebDAV server support allows desktop operating systems and mobile file apps to mount your remote directories as native network drives. Sharing files with external collaborators takes seconds through customizable public or private links with expiration timers, download limits, password protection, anonymous upload permissions, and custom branding themes. Administrators can authenticate users via OpenID Connect, LDAP, JSON Web Tokens, proxy headers, or local passwords with two-factor authentication, then enforce path-level read, write, and delete rules per user or group. Developers and automation engineers can generate long-lived API tokens and explore the interactive Swagger endpoint to script file transfers and directory provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Enterprises requiring production-grade governance for long-running autonomous AI operations can rely on OpenGeni, a self-hosted orchestration platform with human-in-the-loop approvals, Connected Machine execution, and comprehensive audit replays. Operators can configure durable multi-turn workflows that execute continuously toward specified goals without premature termination, automatically pausing when human verification, structured multiple-choice decisions, or critical credential approvals are required. Teams can assign execution workloads across ephemeral cloud sandboxes or route them straight to enrolled Connected Machines to run commands directly against local code repositories without exposing inbound network ports. The integrated web console lets developers inspect live Server-Sent Event activity streams, replay complete turn histories from audit logs, inspect generated artifacts, and cancel or steer in-flight agent tasks on demand. Platform administrators can enforce fine-grained access policies through GitHub App repository bindings, broker temporary role-scoped secrets, and maintain a shared organizational knowledge base where agents propose findings for human review before vector indexing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 24,000 GitHub stars and a rapidly growing community of self-hosters, authentik delivers enterprise-grade identity management that replaces commercial solutions like Okta and Auth0 with a fully self-hosted platform requiring no per-user licensing fees. The platform serves as a unified identity provider supporting SAML 2.0, OAuth 2.0 and OpenID Connect, LDAP for legacy application compatibility, SCIM 2.0 for automated user provisioning, and RADIUS for network device authentication. The visual flow designer enables administrators to create custom authentication workflows combining password verification, multi-factor authentication with TOTP, WebAuthn, and SMS codes, email verification, captcha challenges, and conditional logic based on user attributes or device context. The forward-auth and reverse proxy integration works seamlessly with Traefik, Nginx, Caddy, and Envoy to protect applications that lack built-in authentication. User enrollment flows support self-registration with configurable approval workflows, invitation links, and automatic group assignment. The LDAP outpost exposes user and group data to legacy applications requiring LDAP bind authentication, while the SCIM provider automates user lifecycle management with downstream applications. Multi-tenancy support through brands allows a single authentik instance to serve multiple organizations with independent domains, branding, and authentication policies. The admin interface provides comprehensive user management, group hierarchy, application catalog, event logging with GeoIP enrichment, and system health monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Licensed under a source-available license with an open-source community edition.

AWX transforms Ansible from a command-line tool into a centralized automation hub with a web UI, REST API, and distributed task engine for managing playbooks, inventories, and credentials at enterprise scale. The React-based dashboard provides real-time visibility into job status, inventory health, and execution history while Django REST Framework powers programmatic control over every automation resource. Job templates combine Ansible playbooks, inventories, and credentials into reusable units that chain together in workflow templates using directed acyclic graph orchestration with conditional branching on success, failure, or always-run logic and configurable convergence gates. The RBAC system built on django-ansible-base provides granular permission control over organizations, teams, projects, inventories, and credentials at object-level granularity. Dynamic inventory sources pull host data from AWS EC2, Google Cloud, Microsoft Azure, VMware vCenter, and Red Hat Satellite, while credential management securely stores SSH keys, cloud tokens, and vault passwords with HashiCorp Vault and CyberArk integration for external secret retrieval. Notifications deliver alerts via Slack, email, PagerDuty, Mattermost, IRC, and webhooks, while activity streams log every action for compliance auditing. The Receptor mesh network distributes job execution across isolated container-based execution environments with capacity-aware scheduling and hop-node routing for network-segmented infrastructures. Upstream of Red Hat Ansible Automation Platform. Deploys via Docker Compose with PostgreSQL and Redis or via the AWX Operator on Kubernetes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

No spreadsheet has to track which service owns which port, because portracker discovers every service and port on your servers and keeps the list current from a self-hosted dashboard. Begin with a single port, shown with its owning service, its source (Docker or the host system), and its address, with internal container ports told apart from ports published to the host. Step back and ports gather into services: expandable cards carrying an icon, a health dot, and a port count, in list, grid, or table layouts, where a Why this status popover names the failing component and the rule that fired. Step back again and each server gets its own panel with hostname, OS, CPU, memory, and uptime, plus TrueNAS apps, VMs, and LXC containers once an API key is added. Step back once more and the whole fleet appears, because other portracker instances can be linked as peers, a VM's instance can be nested under its host, and every server can be searched at once. Along the way, rename services, hide the noisy ones, attach notes, act on a selection in bulk, or press Generate port for an unused number before deploying something new. Optional sign-in with a first-run setup wizard, an autoxpose link that shows public URLs and SSL status, light and dark themes, and keyboard shortcuts finish the picture. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Termix delivers a unified, self-hosted infrastructure control center that consolidates SSH terminals, remote desktop streaming, and fleet automation into an intuitive browser workspace that replaces proprietary tools like Termius. Administrators connect to Linux servers and desktop environments using embedded RDP, VNC, and Telnet protocols powered by Apache Guacamole without requiring local client installations. The multi-panel terminal interface supports four-way split screens, allowing operators to broadcast keystrokes simultaneously across multiple production hosts or execute saved reusable script snippets with dynamic parameters. Real-time multiplayer session sharing lets engineers invite teammates via secure, time-limited links with configurable read-only or collaborative write permissions for troubleshooting incidents. Advanced networking layers handle SSH jump hosts, SOCKS5 proxy chains, Warpgate relays, and port knocking sequences to access segmented private networks securely. Integrated SFTP file managers provide drag-and-drop file transfers with editable path bars, inline text editing, and folder synchronization across remote machines. Background telemetry monitors CPU loads, memory utilization, disk IOPS, and container statuses, while built-in session recording captures complete terminal sessions for compliance auditing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With 6,800 GitHub stars and over a decade of development since its 2014 release, ONLYOFFICE Docs delivers a self-hosted Microsoft Office replacement with pixel-perfect OOXML rendering and real-time collaborative editing supporting both Fast (character-by-character) and Strict (manual save) co-authoring modes. The suite encompasses five full-featured editors — Document Editor for DOCX/ODT/EPUB/HTML, Spreadsheet Editor with 500+ functions and pivot tables, Presentation Editor with animations and transitions, Form Creator for fillable PDF forms with field validation, and PDF Editor for annotation and conversion — all operating within a unified web interface. Format support spans 50+ types including DOCX, XLSX, PPTX, ODT, ODS, ODP, PDF, CSV, RTF, TXT, and Markdown with server-side conversion between any supported pair. The JavaScript plugin API enables extending editor functionality through a marketplace of ready-made plugins for ChatGPT integration, speech-to-text, OCR, Zotero citations, and Thesaurus. Ready-to-use connectors integrate with Nextcloud, ownCloud, Seafile, Moodle, Odoo, Confluence, SharePoint, Alfresco, Liferay, and Chamilo, while WOPI protocol compliance enables integration with any WOPI-compatible platform. JWT authentication secures all API communications between host applications and the document server. Deploy via Docker with a single command or DEB/RPM packages on Ubuntu, Debian, CentOS, or RHEL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3 licensed.

Tools and applications that already speak S3 can use RustFS as their storage backend, so backup jobs, data pipelines, and services keep working while the data stays on infrastructure you control. A built-in web console on port 9001 manages buckets, object uploads and downloads, access keys, users, groups, and IAM policies, with a status page for cluster health, capacity, and scanner activity. Versioning, Object Lock retention, bucket quotas, and server-side encryption with Vault or AWS KMS backends protect objects once they land. Lifecycle rules expire or transition data, and tiering moves cold objects to remote targets such as Amazon S3 or Wasabi. Bucket replication and site replication keep clusters in sync, and event notifications call webhooks when objects change. Single-node mode suits a lab or small server, while distributed mode adds erasure coding, bitrot protection, background healing, and pool expansion or decommissioning as capacity grows. Sign-in works with local users, OIDC single sign-on, or OpenStack Keystone, and FTPS and WebDAV are available by default, with SFTP and the Swift API as opt-in builds. A preview of S3 Tables exposes an Iceberg REST catalog for tools such as DuckDB and PyIceberg, and a documented migration path moves existing MinIO deployments across. Typical uses include backups, container registries, logs and traces, data lakes, and AI training sets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 77,000 GitHub stars accumulated in under five months since its March 2026 launch, Paperclip has become the default control plane for teams running multiple AI agents in production. Rather than juggling dozens of terminal tabs with Claude Code sessions, Codex instances, and Gemini CLI workers, Paperclip organizes all agents into a company structure with org charts, reporting lines, role-based permissions, and per-agent monthly budgets that trigger hard-stops when exceeded. The platform supports any runtime through its adapter system — Process adapters manage local CLI agents like Claude Code, Codex, Cursor, Pi, and OpenCode as child processes, while HTTP adapters trigger remote agents via webhooks to OpenClaw, serverless platforms, or custom endpoints. Heartbeat-based execution wakes agents on configurable schedules, injecting goal context, budget state, and workspace paths directly into the invocation payload. The Work and Task System provides atomic checkout with execution locks, first-class blocker dependencies, and structured work products to eliminate duplicate effort. Governance features include approval workflows, decision tracking, emergency stops, and full audit trails tracing every mutation to an actor. Deployment runs as a single Node.js process with embedded PostgreSQL locally or scales to external Postgres for production, installable in one command via npx paperclipai onboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 77,000 GitHub stars, Crawl4AI is the most-starred open-source web crawler on GitHub and the go-to tool for converting the web into AI-ready data. Built on Python and Playwright, it transforms any website into clean Markdown with headings, tables, code blocks, and citation hints optimized for LLM ingestion, or extracts structured JSON via CSS selectors, XPath expressions, or direct LLM-based schema extraction through OpenAI, Anthropic, and Ollama providers. The self-hosted Docker server exposes a REST API on port 11235 with endpoints for crawling, streaming results, screenshots, PDF generation, JavaScript execution, and LLM-powered extraction. Version 0.9.x introduced secure-by-default operation with mandatory JWT authentication, strict request validation, declarative hooks replacing inline code, and bounded job queues. Adaptive crawling uses information foraging algorithms to determine when sufficient data has been gathered, while deep crawl mode traverses link graphs intelligently. The async browser pool manages concurrent sessions with stealth plugins, proxy rotation, custom headers, and session persistence for authenticated scraping. A built-in MCP server enables direct integration with Claude, ChatGPT, and Cursor for AI-driven web research workflows. Content filtering applies BM25 and TF-IDF relevance scoring to extract only pertinent sections from noisy pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Backed by 56,000+ GitHub stars and over 240 million Docker pulls, LiteLLM delivers the open-source AI gateway trusted by Netflix, Lemonade, Rocket Money, and thousands of engineering teams to route every LLM request through one unified API. The Rust-core gateway adds sub-millisecond overhead per request with 8ms P95 latency at 1,000 RPS, 15x throughput improvement and 11x lower memory footprint compared to Python-only proxies. A single OpenAI-compatible endpoint connects to 100+ providers and 1,800+ models spanning OpenAI, Anthropic, Google Gemini, AWS Bedrock, Azure OpenAI, Vertex AI, Hugging Face, vLLM, Nvidia NIM, Ollama, and Mistral with day-zero support for new model releases. The Auto Router V2 classifies request complexity across four tiers using rule-based scoring, semantic keyword matching, and adaptive Thompson sampling to route each request to the most cost-effective model without API calls or training data. Virtual API keys enable multi-tenant governance with per-team, per-user, and per-project cost tracking, budget caps with automatic fallback rerouting, and role-based access control. Built-in guardrails provide PII masking, prompt injection detection, and model-graded evaluation before requests reach providers. The Agent Gateway extends routing from model calls to agent workflows with MCP server integration. Observability integrates with Langfuse, Arize Phoenix, OpenTelemetry, and MLflow for complete request tracing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

CubeSandbox gives every AI agent its own hardware-isolated MicroVM with a dedicated Linux kernel — not a shared-kernel container but a true KVM virtual machine — booting in under 60ms with less than 5MB of memory overhead per instance, enabling thousands of concurrent sandboxes on a single server via kernel sharing and Copy-on-Write memory. The Rust-built CubeProxy exposes an E2B SDK-compatible REST API on Axum, so existing E2B Cloud applications switch by changing one environment variable with zero client code changes. CubeMaster orchestrates cluster-level scheduling in Go while Cubelet manages node-local sandbox lifecycles including create, run, pause, resume, snapshot, and destroy operations. CubeVS, the eBPF-powered network layer, enforces per-sandbox isolation with LPM trie-based egress policies entirely in kernel space — no userspace context switches — while CubeEgress provides an L7 security proxy with per-domain, per-path, and per-method allowlists plus automatic credential injection that keeps secrets invisible to sandbox code. Hundred-millisecond-granularity snapshots enable checkpoint, rollback, and parallel fork from any saved state. The volume framework supports E2B-compatible pluggable storage with independent lifecycle and cross-sandbox sharing. Production deployment uses Terraform on Tencent Cloud or Helm charts on Kubernetes, K3s, or TKE, with full ARM64 support alongside x86_64 and AutoPause/AutoResume for cost optimization. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Kokoro-FastAPI turns text into natural-sounding speech across eight languages by serving the 82-million-parameter Kokoro-82M model through an OpenAI-compatible REST API, so any existing OpenAI SDK client can generate audio by just changing the base URL. With over 5,300 GitHub stars since December 2024, the fully Dockerized FastAPI server covers American English, British English, Spanish, French, Hindi, Italian, Japanese, Brazilian Portuguese, and Mandarin Chinese with language-specific phoneme processing. Inline voice mixing blends multiple profiles using weighted ratios like af_bella(2)+af_heart(1), automatically normalizing weights and caching combined voicepacks as PyTorch tensor files for reuse. Audio streams in real time over HTTP with configurable chunk sizes, or generates complete files in MP3, WAV, OPUS, FLAC, AAC, or PCM formats with speed control from 0.25x to 4.0x. Per-word timestamped captions with speaker-tagged voice labels enable subtitle generation for podcasts, audiobooks, and accessibility workflows. Pre-built Docker images support NVIDIA GPU acceleration via CUDA, experimental AMD GPU inference via ROCm, and CPU-only deployment on linux/amd64 and linux/arm64 architectures, with Apple Silicon MPS support available through direct UV execution. The integrated web interface at port 8880 provides browser-based speech generation, while the Swagger UI at /docs exposes the full API reference. Debug endpoints report system statistics for monitoring inference load. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With 22,700 GitHub stars, 4,100+ forks, and proven scale powering dev.to — one of the largest developer communities serving millions of monthly users — Forem provides a complete community platform for building engaged audiences around shared interests, whether for developer documentation, customer communities, fan bases, or professional networks. The Rails backend with Preact frontend delivers article publishing with a rich Markdown editor, threaded discussions, user profiles with portfolio links, tag-based content organization, podcast hosting, classified listings for jobs and events, and social interactions including reactions, bookmarks, and following. AI-powered semantic search using PostgreSQL pgvector embeddings surfaces relevant content across articles and concepts, while scheduled automations enable community bots to create automated roundups, republish curated content, and trigger time-based moderation actions. Score-based content ranking replaces simple reaction counts with nuanced algorithms that resist gaming. The admin dashboard provides user management, content moderation, community settings, analytics, and organization controls. OAuth integration supports GitHub, Twitter, Apple, and configurable OIDC providers for frictionless sign-up. Dynamic open-graph image generation creates branded social cards automatically. Deploy with Kamal 2 to any cloud provider or bare metal server with PostgreSQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

With over 7,000 GitHub stars and continuous development since 2017 by former Intel engineer Ylian Saint-Hilaire, MeshCentral has become the go-to self-hosted alternative to ConnectWise Control and Splashtop for managing devices remotely without per-seat licensing fees. The Node.js server installs via a single npm command and manages Windows, macOS, Linux, and FreeBSD endpoints through lightweight agents that maintain persistent WebSocket connections for real-time remote desktop, terminal access, and file transfer directly in the browser. Intel AMT integration provides out-of-band hardware management including power control and BIOS access even when the operating system is unresponsive. Device groups organize endpoints by location, customer, or function with granular role-based access control for multi-technician environments. Session recording captures remote desktop interactions for compliance auditing, while Wake-on-LAN powers on machines remotely across subnets. The server supports MongoDB for production deployments handling thousands of agents or the embedded NeDB for smaller setups under 200 devices, with a single 8GB VPS comfortably managing 1,500 concurrent agents. Security features include mandatory TLS with automatic Let's Encrypt certificate provisioning, multi-factor authentication via TOTP and FIDO2, SAML-based single sign-on, IP filtering, and HashiCorp Vault integration for secrets management. The web console provides real-time device monitoring with hardware and software inventory, network topology visualization, and customizable branding. TacticalRMM uses MeshCentral as its remote access layer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

openGym is a self-hosted gym and body-weight tracker that plans your weekly routines, guides every set with pre-filled weights and rest timers, and keeps your training data on a server you control instead of inside a subscription app. Over 5,600 exercises come with animated demos, searchable by body part and the equipment you own, and you can add custom ones with your own photo or video. Progression follows a rule you pick per routine (linear, Greyskull LP, double, triple, or added time), and each target explains where it came from. Supersets, warm-ups, drop sets, rest-pause, timed planks, and cardio by time and speed all log properly, and plate math shows what goes on each side of the bar. A muscle map shows where your volume went, what is still recovering, and what went untrained, beside estimated one-rep maxes, a year-long heatmap, and body weight charted against your goal. Imports from FitNotes, Strong, and Hevy carry your history over. Several people can share one server, each with a private passkey profile, and an optional admin dashboard handles invite-only signup. An optional AI coach, off by default, drafts routines and suggests changes through your own Anthropic, OpenAI, Gemini, or Ollama endpoint, and nothing applies without your approval. The interface speaks 19 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 14,000 GitHub stars and a mission to become the world's most trusted document-signing tool, Documenso delivers a beautifully designed electronic signature platform that organizations can self-host for complete data sovereignty. The signing workflow handles everything from simple one-party signatures to complex multi-recipient documents with configurable roles including signers, approvers, viewers, and CC recipients, each with distinct permissions and notification flows. Document templates enable reusable signing packages with pre-configured fields and recipient patterns, eliminating repetitive setup for contracts, NDAs, and onboarding documents that teams process regularly. The PAdES-standard implementation ensures digital signatures are legally compliant and cryptographically verifiable, with complete audit trails documenting every action from document creation through final signature. Direct link signing allows recipients to access documents without email, enabling embedded signing experiences within existing applications and websites. The REST API provides programmatic document creation, recipient management, and webhook notifications for integrating signature workflows into CRM systems, HR platforms, and custom business applications. Team management features organize users into groups with role-based permissions, custom branding per team, and centralized billing for organizations with multiple signing workflows. SSO integration supports standard authentication providers for enterprise identity management. The TypeScript codebase built on Next.js and Prisma with PostgreSQL makes customization and contribution accessible to modern web developers. Zapier integration connects Documenso to thousands of third-party applications for automated document routing. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When the connection drops, Project NOMAD keeps serving offline Wikipedia, Khan Academy courses, maps, and an optional private AI assistant from a single Debian-based Linux server. The core needs only about 5 GB of disk and under 1 GB of RAM. Content is what fills the drive, and a setup wizard sorts it into Essential, Standard, and Comprehensive tiers while a storage bar tracks the running total. Wikipedia runs from a quick-reference set of the top 100,000 articles to the complete English edition with images at about 121 GB, and Kiwix also serves medical references, survival and repair guides, and Project Gutenberg ebooks. Kolibri adds Khan Academy courses with multi-user progress tracking, and any browser on the network can study. Offline maps cover the whole globe, single countries, or regions, with markers you can search, color, and navigate to by coordinate. The AI assistant is the heavy part, bringing the install to roughly 25 GB. It chats through Ollama or any OpenAI-compatible server such as LM Studio, searches uploaded documents, lists sources with dates when known, and lets vision models read attached images. CyberChef handles encoding and hashing, and FlatNotes keeps Markdown notes. The Supply Depot adds one-click apps or your own Docker containers. Opt-in auto-updates for the Command Center, installed apps, and downloaded content run inside a window you set. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.