Open Source App Cloud Marketplace

HitKeep is a sovereign web analytics platform that consolidates cookieless visitor telemetry, conversion funnels, e-commerce revenue reports, and AI engine visibility into a privacy-respecting dashboard that replaces Google Analytics and complex tracking clouds. Marketing teams can monitor inbound visitor journeys without installing intrusive consent banners or violating regional GDPR regulations. Custom conversion funnels and goal milestones track user registrations, checkout transactions, newsletter subscriptions, and software downloads with exact revenue attribution. Integrated Google Search Console synchronization brings organic search queries, keyword impression rankings, and click-through metrics directly alongside real-time pageview logs. A dedicated artificial intelligence visibility dashboard monitors crawling bots, retrieval citations, and direct referral visits originating from ChatGPT, Claude, Perplexity, and other generative search agents. Growth analysts can pose natural language questions to an embedded AI reporting assistant, generating instant cohort breakdowns and engagement trends without assembling complex manual filters. Site operators can configure custom tracking domains, whitelist reverse proxy networks, filter out referrer spam, and schedule automated database backups across persistent storage volumes. Complete data sovereignty controls allow teams to export raw event telemetry into open Parquet and CSV archives or stream metrics into external business intelligence warehouses via webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Tell an AI agent to deploy your app and watch it actually happen. Nixopus connects to your GitHub repo, analyzes the codebase to detect your framework, generates the right Docker configuration, resolves dependency conflicts, and ships the whole thing to your server with HTTPS enabled. When something breaks, the agent reads the logs, creates a pull request with a fix, and redeploys without waking you up. The chat interface lets you deploy, add custom domains, check logs, roll back, and troubleshoot in plain English from the web dashboard or directly from your VS Code or Cursor editor. Extensions bring one-click installs for 100+ self-hostable apps like Appwrite, Excalidraw, and Ollama, each showing you exactly what it runs on your server before installation. Connect multiple servers and monitor CPU, memory, disk, and running containers across your entire fleet from a single dashboard with draggable widget layouts. The built-in terminal opens SSH sessions right in the browser with split-pane support, so you can watch logs in one pane while running commands in another. Framework detection covers Next.js, Django, Rails, Go, FastAPI, and anything else that fits a container image. Every deployment gets automatic TLS via Caddy with Let's Encrypt certificates provisioned and renewed silently. Previous container images are retained so rollbacks skip the rebuild step entirely. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Retrieval-augmented chatbots on your own knowledge base - that is the whole mission of Dialoqbase, an open-source bot-building platform. Feed it content through a broad set of data loaders - web pages and full crawls, sitemaps, PDFs, DOCX, CSV, plain text, GitHub repositories, YouTube videos, and MP3/MP4 audio - and it handles the whole RAG pipeline in one self-contained app: chunking, embedding, vector storage, and LLM querying. The distinguishing architecture choice is PostgreSQL with pgvector for embedding storage and similarity search, which removes the separate vector-database dependency, and Redis-backed Bull queues for ingesting large documents without blocking the API. Model choice is wide open: OpenAI, Anthropic Claude, Google Gemini, Cohere, Fireworks, Hugging Face, local models via Ollama, and any OpenAI-compatible endpoint, with an equally broad list of embedding providers. Finished bots embed on any website with customizable styling or deploy to Telegram, Discord, and WhatsApp, and an API creates and manages bots programmatically. Multi-user support adds registration limits and per-user bot quotas. MIT-licensed and free for commercial use.

A looping agent burns money quietly until someone can see where it drifted, and PandaProbe is an observability and evaluation platform for AI agents that makes that drift visible step by step. Capture complete executions as sessions, traces, and spans spanning model calls, tool calls, multi-agent handoffs, and custom logic, then follow a looping or failing run back to the decision where it drifted. Score traces and sessions with agent-specific metrics, run asynchronous and sampled evaluations so judge models do not cost more than inference, and use lightweight trajectory signals to catch stalls, bad tool use, and regressions over time. Bring agents built with LangGraph, CrewAI, the Claude Agent SDK, the OpenAI Agents SDK, and other integrations, with MCP tool calls captured automatically where supported. Organize work by user, organization, and project, send data through an SDK or HTTP API with project keys, and query filtered, paginated traces when you need the raw record. Keep sensitive workflows local when that matters: prompts, traces, and evaluation results stay inside the deployment you run, instead of leaving for a hosted console. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Issued is a self-hosted comic library server: point it at the folder of CBZ, CBR, CB7, and PDF comics already sitting on your server and the whole collection becomes browsable and readable from any device. Point it at your existing folders and it keeps your folder structure exactly as it is, scanning automatically when new issues appear and generating cover thumbnails so you can see what a file is before opening it. Read in the browser with the built-in web reader on desktop or mobile, with light and dark themes, or connect reader apps such as Panels, Chunky, KyBook, and Moon+ Reader through the standard OPDS catalog at /opds/. OPDS-PSE 1.2 page streaming lets compatible apps read individual pages as JPEGs without downloading whole archives, and OpenSearch discovery lets clients find library search automatically. Edit metadata in place using ComicInfo.xml data, mark series as ongoing to spot new issues, totals, and possible gaps, and use Continue Reading and Last Added views to resume the latest issue in progress or start the next unread one. An optional reader password protects browser access, and one Docker command on port 8181, with unrar included for CBR files, gets the whole library online. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every screen in the house (browser, TV, game console, or phone) can open the same library of videos, music, and photos once Universal Media Server shares it, with transcoding handled automatically for whichever device asks. A file the device can already play passes through untouched. Anything else is converted on the fly to suit the network, the device, and the preferred language. Folders open at once, with no wait for library scans, and disc drives and disc images play directly. In the web interface, every title gets a page with cover art, cast, and genre details from TMDB, Discogs, and MusicBrainz, and filters narrow the library by actor, director, genre, year, or artist. YouTube channels, online radio, podcasts, and RSS feeds appear beside local files on every connected device. Users and groups, with optional avatars and four-digit PINs, decide which shared folders each person sees; content for children stays apart from the library for adults. A list of detected renderers shows every connected device, and the configuration file of each device can be edited to fix browsing, playback, or transcoding on an unsupported TV. Builds exist for Windows, Linux, and macOS, with AppImage and Docker options for servers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Scoold brings Stack Overflow-style Q&A to a server you control, so answers get voted, accepted, and found again instead of scrolling away in chat. Askers get a Markdown editor with live preview, tags, and emojis, and the form suggests similar questions and flags likely duplicates before anything is posted. Answerers collect upvotes, accepted answers, reputation points, and badges, including custom ones with your own text, icon, and color. Authors and moderators can restore any earlier revision, because every edit is kept. Searchers can use Lucene syntax such as exact phrases, wildcards, and boolean operators. Admins split one site into private spaces, up to ten in the free edition, and choose how people sign in: email and password, LDAP, or social providers such as Google and GitHub. They can also back up and restore data, import a Stack Overflow for Teams export, and follow a dashboard of questions, answers, traffic, and active members. Builders get a REST API with OpenAPI docs, signed webhooks, Zapier and n8n connectors, and an optional MCP server for AI assistants. Color themes include a dark mode, Mermaid diagrams and KaTeX formulas can be switched on, and right-to-left languages are supported. SAML, SCIM, file uploads, and chat integrations are Pro-edition features. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

pRESTd points at your PostgreSQL or MySQL database and instantly serves every table as a REST API, so the CRUD backend you were about to spend a week writing already exists. Every table answers at its own address with filtering, ordering, pagination, and column selection in the query string, and batch endpoints group several operations into one call. When a table endpoint is not enough, drop a SQL file into the queries folder and it becomes a named route with bound parameters, or store the scripts in the database and manage them through the admin API. Turn on the auth module and the server issues JWTs from your own users table, checks them on every route, and enforces table-level permissions so public tables stay open while payroll stays shut. The same database also appears as a read-only MCP endpoint, which lets Claude, Cursor, and other AI clients discover your tables and query them with your permissions instead of a copied export. One process can front several databases at once, Postgres and MySQL side by side, each under its own alias for tenants or reporting replicas. An embedded Studio in the same binary browses the catalog and rows, builds GET requests, and invokes MCP tools, so you can inspect everything from the browser before writing a line of client code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Track website traffic and conversion funnels with sub-second precision while guaranteeing visitors total anonymity with Medama, a privacy-first web analytics platform operating without cookies, IP storage, or consent banners. Site owners embed a sub-kilobyte tracking script into web headers to record page views, session duration, referrers, screen resolutions, browser user agents, and geographic countries anonymously. Built-in caching header mechanisms determine unique daily visitors without generating persistent hashes or storing cross-site identifiers that violate privacy regulations. The web dashboard visualizes hourly traffic trends with interactive area charts and provides multi-dimensional data tables breaking down top-performing pages, search engine referrers, operating systems, and campaign UTM parameters. Developers can instrument custom click events and page attributes using simple HTML data attributes to measure conversions, document downloads, button interactions, and user subscription states. Administrators manage multiple websites from a single interface, configure curated anti-spam blocklists using Firehol and Tor exit node feeds, and monitor server CPU, memory, and disk usage in real time. Full OpenAPI specification endpoints allow teams to export analytics data directly into internal business intelligence pipelines and custom executive dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

AnsibleForms turns Ansible playbooks into self-service web forms that colleagues can run safely, with the right variables, without filing a ticket or touching a terminal. A colleague picks the form, fills in fields that validate as they type, and the job launches with exactly the variables the playbook expects. Dropdowns can cascade from a database query, a REST call, or a small expression, so the environment list is never typed from memory and the wrong region is never an option. Forms feed playbooks running in runtime containers or templates on the AWX, Semaphore, Rundeck, or Jenkins servers you already have, and workflows chain them with conditions, success and failure paths, and an approval step when a person should look first. Runs can be scheduled, stored, aborted, and relaunched, with live output while they work and a full history afterward. Designers edit forms in the browser and keep everything in Git, sign-in stretches from local accounts to LDAP and OIDC, and credentials travel encrypted or straight from Vault. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Deploying container updates without blind surprises is what Drydock delivers through a monitor-first inspection plane that evaluates image registries, scans CVE vulnerabilities, and automates rollbacks across distributed Docker infrastructure. Systems engineers track container fleets across twenty-three public and private registries including Docker Hub, GitHub Container Registry, Harbor, and Quay using cursor-based pagination and semver classification. The integrated Update Bouncer runs Trivy and Grype static scanners against incoming candidate layers, blocking deployments that fail configurable CVE severity policies while verifying cryptographic signatures through cosign. Operators configure declarative update schedules with stabilization countdown gates that hold back brand-new releases until defined burn-in periods elapse. When updates execute, Drydock creates pre-upgrade container snapshots and evaluates post-launch container health checks, instantly restoring previous image digests and network configs if failures occur. Distributed Portwing edge agents stream live container output and system logs over encrypted WebSockets, allowing central consoles to coordinate remote daemon updates without opening inbound host firewall ports. Automated event triggers dispatch granular notifications and update payloads across seventeen communication channels including Slack, Discord, Telegram, and Home Assistant MQTT brokers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every email your app sends while you build and test it lands in OwlMail's browser inbox instead of a customer's mailbox. Point any application's SMTP settings at OwlMail and every message is ready to open as rendered HTML, plain text, headers, or raw source. Attachments and inline images sit beside the body, and seven preset preview widths show how the message lays out on phones, tablets, and desktops before anyone real sees it. A Verify panel checks subject, body, and link hosts against expectations, while CI pipelines use the REST API with delivery cursors to wait for exactly the messages their test run produced, assert on them, and clean up afterwards. Coding agents get the same inbox read-only over MCP, so an assistant can confirm a signup email arrived without touching your mail server. When a message proves itself, relay it onwards to a real SMTP server, by hand or automatically under filtering rules, or fire webhooks with HMAC signatures and retry queues into the rest of your automation. Everything stores as plain .eml files on disk, with optional SQLite indexing, S3 attachment storage, and ZIP exports for archiving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Enterprise security stacks assume an enterprise budget; Wildbox assumes a server you already own. It runs your whole security operation as a set of cooperating services behind a single HTTPS gateway: threat intelligence collectors pull indicators from seven public feeds on a schedule, starting with abuse.ch's Feodo Tracker, and every indicator is searchable in one place. Fifty-two security tools sit behind one API, covering DNS, TLS, email security, headers, and port analysis. The cloud posture service runs 22 configuration checks against your live AWS accounts and keeps each scan's report, while the vulnerability service inventories your assets, prioritizes findings by risk, and tracks them through remediation with SLA checks and alert rules. When something needs doing, YAML playbooks execute response workflows as background jobs, and the agents service writes Claude-generated threat-enrichment reports for suspicious indicators when you give it an API key. An osquery-based sensor streams endpoint telemetry from your hosts into the platform, kept separate per team. Users, teams, roles, and scoped API keys live in the identity service, and the backends accept nothing that did not arrive through the gateway, so your security data never leaves hardware you control. Optional Compose profiles add n8n automation and Prometheus monitoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Five monitoring systems should not mean five places to look when something breaks at 3 a.m. Alerta is an open-source alert management server that consolidates alerts from many sources into a single stream, de-duplicates repeats, correlates severity changes, and shows only the current state of each problem in a web console built for fast scanning. Prometheus, Zabbix, Nagios, InfluxDB Kapacitor, cloud watch alarms, and your own scripts all post into the same HTTP API, which accepts a flexible alert format carrying environment, resource, event, severity, and custom attributes, so no tool has to contort itself into someone else's schema first. Repeats of a known fault raise a duplicate count instead of generating another page, and a severity change updates the existing alert rather than birthing a twin. Operators acknowledge problems, assign them, silence expected fire during blackout periods set for maintenance windows, and partition visibility by customer for teams that monitor other people's infrastructure. A command-line client, query language, webhooks, and plugin hooks carry alerts onward into tickets, chat, and paging workflows, and everything persists in MongoDB or PostgreSQL with API keys and OAuth protecting access. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Own every visitor metric without cookies, consent banners, or external database clusters through Vince, a self-hosted web analytics platform engineered for fast multi-site traffic intelligence. Zero cookies. Sub-kilobyte tracking script. Unlimited domains and events. You can point existing Plausible Analytics tracker snippets directly at your instance and immediately begin recording unique visitors, total sessions, pageviews, views per visit, bounce rates, and visit durations across all of your properties. Interactive dashboards break down incoming traffic by referral sources, UTM campaign parameters, entry and exit pages, countries, regions, cities, device categories, browsers, and operating systems. Behavior analytics go beyond simple pageviews by capturing outbound link clicks, file downloads, 404 error pages, pageview goals, and custom event conversions with custom properties. Period-over-period comparisons let you benchmark current traffic and conversion rates against previous date ranges or custom calendar intervals with a single click. Dashboards stay private by default, but you can open public stats views or generate unique, optionally password-protected shared links for clients and stakeholders, as well as query metrics programmatically over the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Traffic Source answers the three questions every site owner actually asks: who showed up, where did they come from, and did they pay. The live dashboard counts visitors in real time alongside pageviews, sessions, bounce rate, and session duration, with no cookie banner required because tracking uses no cookies at all. Referrer and UTM breakdowns show exactly which campaigns, newsletters, and posts earn their traffic, while country and city data arrives through proxy headers. Visitor journeys replay every page a person viewed before converting, so you can see the path from first click to checkout instead of guessing. Connect Stripe once and payments are matched to the sessions that produced them automatically, with no webhook plumbing to maintain. The affiliate system lets you create partners with custom commission rates and shareable referral links, and each affiliate gets a public dashboard showing their own clicks and earnings. Search Console data is pulled into the same screen, where a keyword explorer shows the pages, countries, and devices behind any query. One tiny tracking script covers all your sites, including single-page apps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Vigil monitors your entire distributed infrastructure and generates a public status page from a single Rust binary small enough to run on a Raspberry Pi, consuming minimal CPU and memory while providing crash-free reliability. Four distinct monitoring modes cover every topology: poll probes check HTTP, TCP, SSH, and ICMP endpoints for reachability with configurable intervals and thresholds; push probes receive health reports from Vigil Reporter libraries embedded in your application code across Node.js, Python, Golang, Rust, TypeScript, Dart, and C#; local probes delegate monitoring to Vigil Local slave daemons running behind firewalls on separate LANs; and script probes execute custom shell commands for specialized health checks. Each monitored service transitions through healthy, sick, and dead states based on consecutive probe failures, with configurable thresholds controlling state transition sensitivity. When services change state, Vigil dispatches notifications through twelve alert channels including Slack, Email, Twilio SMS, Telegram, Pushover, Gotify, XMPP, Matrix, Zulip, Cisco Webex, and generic webhooks. The generated status page displays service groups organized by category with real-time replica status, system load metrics from reporter probes, and a maintenance announcement system for communicating planned downtime through the Manager HTTP API. Configuration uses a single TOML file defining all probes, services, and notification channels with no database dependency. Docker deployment pulls the official image with volume-mounted configuration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Visual drag-and-drop assembly replaces manual text editing in Dock-Dploy, a Docker Compose builder and configuration management suite that turns complex multi-service container topologies into validated YAML manifests. DevOps engineers and self-hosters can visually assemble application stacks by selecting container base images, defining healthcheck probes, mapping bridge networks, and assigning persistent volume mounts through a reactive web interface. An integrated marketplace catalog allows teams to search, preview, and import battle-tested templates for services like PostgreSQL, Redis, and Nginx with one click. Real-time Zod schema validation inspects every service parameter as you type, flagging port collisions, missing environment variables, and malformed volume syntax before deployment. A split-screen CodeMirror editor provides continuous synchronization between graphic form fields and generated YAML definitions with automatic code sanitization and clipboard exports. Beyond Compose stacks, operators can design blueprint templates, generate reverse proxy routing profiles, and assemble recurring cron schedules for automated backup and maintenance routines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.