Open Source App Cloud Marketplace

With over 14,000 GitHub stars and a growing global network of security deployments, CrowdSec turns every attack on any participating server into protection for the entire community. The security engine operates as a combined IDS/IPS and WAF, analyzing log sources from Nginx, Apache, SSH, WordPress, and over 50 other services to detect brute force attacks, port scans, web vulnerability exploitation, and credential stuffing in real time. When one server detects a new threat, the attacker's IP is shared through the community blocklist, proactively protecting thousands of other installations before the attacker can reach them. The built-in WAF powered by Coraza v3 inspects HTTP requests at the application layer, validates against OpenAPI schemas, and applies custom rules with flexible AND/OR condition mixing for precise threat detection. Bot detection serves challenge pages with client fingerprinting to distinguish legitimate traffic from automated scrapers and scanners. Remediation components block malicious IPs at multiple infrastructure layers including iptables, nftables, Nginx, HAProxy, Cloudflare, and AWS Security Groups through the detect-here-remedy-there architecture. The scenario-based detection system ships with default rules for common attack patterns and supports custom scenarios written in YAML with an expressive filter language. A centralized console provides real-time visualization of alerts, threat intelligence analysis, and management of multiple distributed security engines. GDPR compliant by design, all log analysis happens locally and raw logs never leave your infrastructure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Automating media server storage reclamation, Maintainerr is an open-source library maintenance platform that identifies unwatched, abandoned, or stale movies and shows across Plex, Jellyfin, and Emby and clears them on a schedule. Storage drives fill up rapidly when household members request four-season series or high-bitrate films, watch a single episode, and abandon the rest indefinitely. Instead of forcing administrators to audit disks by hand, the rule engine evaluates metadata from your media server alongside Tautulli watch histories, Seerr and Ombi request records, and Radarr, Sonarr, or Sportarr profiles every eight hours. Matching items enter a staging collection that syncs back to your media server home screen as a Leaving Soon row, complete with dynamic poster overlays displaying the exact removal date so viewers have a grace period to finish watching. Before enabling any destructive workflow, you can run the Test Media inspector against any movie or episode to preview rule evaluations and protect favorites with global or per-collection exclusions. Once the countdown expires, the collection handler deletes or unmonitors files, updates import-list exclusions so automated lists never re-download removed titles, clears orphaned requests in Seerr and Ombi, removes leftover sidecar folders, and dispatches alerts through Discord, Slack, Telegram, Pushover, Gotify, Email, or webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your bank balance is only part of what you own, and MoneyMatter adds the rest: cash accounts, brokerage portfolios, cars, loans, and private deals roll into one net worth figure in your base currency. Add transactions by hand, import CSV, OFX, QFX, YNAB, Wallet, or Microsoft Money files, or let an AI model you provide parse a statement, while Monobank, SimpleFIN, Lunch Flow, and Walutomat connections sync accounts automatically. Each transaction can carry categories, tags, payees, notes, attachments, and splits, transfers and refunds link to their counterparts, and automation rules tidy new entries. Envelope-style budgets assign money to lines with Assigned, Activity, and Available columns and rollover rules, savings goals read progress from account balances, subscriptions and bills send reminders, and loans show payoff projections. Stocks, ETFs, and crypto are priced daily, vehicles depreciate along a curve, and a FIRE planner estimates years to Lean, Regular, Fat, Barista, and Coast FIRE. A customizable dashboard, cash flow, money flow, net worth history, trends comparison, and pivot table chart the results. Share accounts with a household member, export JSON, CSV, or XLSX, back up everything, or connect Claude, ChatGPT, or Claude Code through the built-in MCP server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Five teammates sharing three AI subscriptions usually means a password in a group chat; SubLane replaces that with a gateway you host, where accounts are pooled and every person gets a managed key. Connect Codex, Claude, Antigravity, and Grok Build subscriptions once, by browser OAuth or credential import, and the gateway snapshots each account's quota windows and allowances so routing knows who still has room. Add API channels for OpenAI-compatible services alongside the subscriptions, then group everything into resource pools with model allowlists, conversation affinity, concurrency controls, and cooldown recovery for accounts that hit a limit. Each member receives a personal key scoped to one group, with its own expiry, rate and concurrency limits, and an allowance measured in tokens, internal dollars, or estimated quota share; keys can be paused or revoked without touching anyone else. Whatever the client speaks, the gateway answers: OpenAI Responses and Chat Completions, Claude Messages, and Gemini formats flow over HTTP, SSE, or WebSocket, independent of which subscription actually serves the request. Administrators watch per-member and per-model usage charts, activity heatmaps, and request diagnostics, bind a fixed outbound proxy to any account, and apply workspace content rules before dispatch. It all runs as one Go process with SQLite and an embedded dashboard, backed up and restored from the interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Evolution API gives your applications a production-ready REST interface to WhatsApp, supporting both free Baileys-based Web connections and Meta's official Business Cloud API from the same server. With 9,200+ stars and 7,100+ forks, it is the most widely deployed WhatsApp integration layer available. Each installation handles unlimited isolated instances (one per phone number) with independent auth, webhooks, and database separation via Prisma ORM against PostgreSQL or MySQL, cached through Redis. Message types include text, images, audio, video, documents, contacts, locations, interactive buttons, list messages, carousel cards, and PIX payment links through unified endpoints. Native integrations connect to Typebot for chatbot flows, Chatwoot for multi-agent support, Dify and OpenAI for AI conversations, N8N and Flowise for workflow automation, and RabbitMQ, Kafka, or SQS for enterprise event streaming. Socket.io delivers real-time message and connection events. Amazon S3 or MinIO handles media offloading. The Evolution Manager v2 dashboard provides visual instance creation, QR code scanning, connection monitoring, and integration configuration without touching the API directly. Docker Compose bundles the server, PostgreSQL, and Redis with environment-variable-driven setup. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Bisibility puts your Google rankings, keyword research, and backlink profile in one application that runs on your server instead of behind a per-seat subscription. Track every keyword by market and device, watch positions move over time, and open the stored snapshot of the actual results page behind any check to see exactly what Google showed. Alerts flag the movements that matter, while competitor share of voice shows whose visibility is growing at your expense. The keyword explorer surfaces suggestions with search volume, trends, cost per click, difficulty, and intent, and shows the estimated price before a lookup runs, so research never surprises your wallet. Backlink and domain views break down referring domains, anchors, and new and lost links next to estimated traffic and top pages for any site you type in. Search Console clicks, impressions, and queries are kept beyond the usual retention window, and a recurring prompt tracker follows how AI answer engines cite your brand over time. Results flow outward through a versioned API, MCP access, signed webhooks, and CSV exports. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Claiming 60-80% token cost reduction compared to flat single-model deployments and backed by 6,500+ GitHub stars, OpenSquilla delivers an intelligent AI agent runtime where a local ML classifier evaluates every turn on message length, code blocks, keyword patterns, and semantic embeddings before routing it to the optimal model tier from C0 through C3. The pluggable provider layer connects natively to TokenRhythm, OpenRouter, OpenAI, Anthropic, Ollama, DeepSeek, Gemini, DashScope, Moonshot, Mistral, Groq, Zhipu, SiliconFlow, vLLM, LM Studio, and additional compatible backends with primary-plus-fallback selection. The four-tier cognitive memory architecture spans working, episodic, semantic, and raw layers with vector-semantic and BM25 retrieval powered by on-device ONNX embeddings that never leave your infrastructure. Security isolation operates at the syscall level via Bubblewrap on Linux and Seatbelt on macOS, complemented by policy-based execution controls and prompt injection protections. The unified TurnRunner executes identically across the Vue-based control console Web UI, terminal CLI, and chat channel integrations including Slack and Discord, ensuring consistent tool dispatch, retry logic, and decision logging regardless of entry point. Built-in skills cover deep research, multi-search-engine queries, document generation for DOCX, PPTX, XLSX, and PDF formats, GitHub integration, cron scheduling, and bounded subagent delegation. Per-agent workspaces with durable session storage provide transcript replay, context state management, and per-call cost tracking with automatic quota enforcement. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

WA-AKG turns ordinary WhatsApp numbers into a programmable messaging API, so your apps, CRMs, and automations can send and receive WhatsApp messages through a dashboard and REST endpoints instead of a phone. Connect several numbers at once by scanning QR codes, and each session stays visible with its connection state, ready for messages, media, documents, and stickers. The scheduler queues text and media for exact delivery times, and broadcasts go out in batches with randomized delays that keep sending patterns human. Keyword auto-replies answer common questions around the clock in private chats, groups, or both, with whitelists and blacklists deciding who the bot engages. Webhooks forward incoming messages, connection changes, and group events to your own systems in real time, and an n8n node plugs the gateway straight into workflow automations. Contacts sync with verified names and profile pictures, a sticker maker with background removal handles media chores, and the full API is documented in Swagger for client generation. The dashboard speaks English, Bahasa Indonesia, and Brazilian Portuguese, so support teams can run campaigns and customer conversations from the browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

The Kubernetes project's own answer to cluster management UIs: maintained under SIG UI governance, Headlamp's roadmap tracks Kubernetes releases and its design philosophy reflects community needs rather than a vendor's product strategy. The React interface provides full read-write capabilities adapted to each user's RBAC permissions — delete, scale, edit, and restart buttons appear only when the authenticated user holds the corresponding cluster role, preventing accidental unauthorized actions. Multi-cluster support surfaces workloads across development, staging, and production from a single view without context switching. The plugin architecture drives extensibility through a curated catalog: an AI Assistant plugin answers natural-language cluster queries and performs operations via configurable LLM keys, Flux handles GitOps, Karpenter manages nodes. Integrated terminals provide browser-based exec access to running pods, live log streaming follows container output with filtering, and the YAML editor displays inline Kubernetes API documentation alongside resource definitions. Deployment creation forms let you configure containers, environment variables, volumes, and replicas without writing manifests. Side-by-side cluster comparison views surface differences in workload distribution. Works with any distribution: EKS, GKE, AKS, Minikube, Docker Desktop. Helm chart installation via the Headlamp repository with images on GitHub Container Registry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 35,000 GitHub stars in just two years, Glance has become the most popular self-hosted dashboard project on GitHub, outpacing established alternatives like Homarr and Homepage. Built as a single Go binary under 20MB with minimal JavaScript and zero external dependencies, Glance delivers a blazing-fast personal information dashboard that consolidates your entire digital morning routine into one beautiful page. Configure everything through clean YAML files that support modular includes and environment variable interpolation, with automatic hot-reload that applies changes without restarting the server. The widget ecosystem covers RSS and Atom feeds, Reddit and Hacker News frontpages, YouTube channel subscriptions, GitHub release timelines, weather forecasts from Open-Meteo, stock market quotes, Docker container status, Twitch live streams, calendar events via iCal, site monitor uptime checks, and custom HTML or iframe embeds. A community widgets repository extends functionality even further with user-contributed integrations. The theming system provides light, dark, and custom color schemes with multiple layout options including slim and wide column configurations. Authentication support added in 2025 secures access with username and password protection. Preconfigured page templates let you get started in seconds with curated layouts for development, homelab monitoring, news reading, and entertainment tracking. Deploy via Docker Compose or as a standalone binary on Linux, macOS, or Windows across AMD64 and ARM64 architectures. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Creative teams use Shumai to review video, images, 3D models, and documents with feedback pinned to the exact frame, on a server they control instead of a rented review cloud. Pause on any frame, draw on the picture, and leave a timecoded comment with the markup attached, then let threaded replies, mentions, and resolve states carry it to a decision. Every cut stacks into a version stack, and any two versions open side by side to compare changes. Layered PSDs and camera RAW review at full resolution, 3D models spin with comments pinned to the viewing angle, and documents page through as converted PDFs. Clients open a share link with a password and expiry date, downloads switchable, and can comment as guests with no account. Watermarks render into the media on your server rather than layering in the browser, so they stay put wherever the file travels. Comments export as Premiere Pro XML, DaVinci Resolve EDL, Final Cut Pro, or Avid files with correct drop-frame timecode for the editor. Mention the AI agent in a comment and it examines the same frame under discussion, or chat privately about a folder using your own OpenAI, Anthropic, or Gemini key. Originals live on local disk or any S3-compatible bucket, with GPU transcoding and workers that scale up for a delivery and back to zero. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Organizers running sports leagues, gaming tournaments, and community athletics can deploy Bracket as an open-source competition control hub that coordinates multi-stage events without recurring SaaS subscription fees. Competition directors can configure multi-tier tournament topologies combining single elimination, double elimination, round-robin pools, and dynamic Swiss format brackets within a unified event schedule. An interactive calendar grid enables operators to drag and drop fixtures between designated courts, assign start times, and balance player recovery intervals across multiple playing areas. Public dashboard displays generate real-time match outcomes, court assignments, and standings boards that spectators can monitor on mobile devices or overhead venue monitors with customized team logos. Club administrators can manage multiple regional athletic organizations, register rosters through bulk CSV spreadsheet imports, and coordinate simultaneous divisions spanning amateur and championship flights. Integrated OpenAPI REST endpoints allow external scoring overlays, live stream graphic generators, and automated result bots to query match statuses or submit verified referee scorecards programmatically. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Build a voice AI agent that answers calls, qualifies leads, books appointments, and transfers to a human when needed, all from a drag-and-drop workflow builder in your browser. Dograh ships as a Docker Compose stack (API, web UI, Postgres, Redis, MinIO) that you self-host on any Linux server with automatic HTTPS provisioning via Let's Encrypt. The visual workflow builder lets you design multi-turn conversation flows by connecting nodes for greetings, intent classification, tool calls, and handoffs; describe your use case in plain English and the platform generates the LLM prompt and node graph for you. Connect your own speech-to-text, LLM, and text-to-speech providers (OpenAI, Anthropic, Gemini, ElevenLabs, Deepgram, local Whisper, Kokoro, or any OpenAI-compatible endpoint) or use the built-in Speech-to-Speech mode with Gemini Flash Live and GPT-Realtime-2 for sub-200ms latency. Telephony plugs in through Twilio, Vonage, Vobiz, or Cloudonix for inbound and outbound calling, with live agent transfer when the conversation needs a human. Webhook tool calls connect to Salesforce, HubSpot, Google Calendar, Cal.com, or any REST API without writing orchestration code. The ClonedVoice feature mixes real human voice recordings for high-frequency phrases with neural TTS fallback for dynamic content, cutting costs while improving caller trust. A built-in MCP server lets AI coding agents like Claude Code or Cursor design, test, and edit workflows through natural language. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

End-to-end encrypted by design, CryptPad is a real-time office suite where teams write documents, plan on kanban boards, collect answers with forms, and draw diagrams without the hosting server ever seeing their content. Rich text pages come with comments, replies, @mentions, and a document outline, while the Markdown editor adds a live preview, Mermaid diagrams, mind maps, and math. Kanban columns hold colored, tagged cards with Markdown bodies, and the diagram editor exports PNG, JPG, SVG, or PDF. Optional ONLYOFFICE editors add spreadsheets, word-processing documents, and presentations that several people can edit together. The form builder offers text, choice, grid, date, ranking, and poll questions, conditional sections, and separate author, auditor, and participant roles. Documents can be shared with contacts or teams, by link, or as embed code, with view, edit, present, or view-once access. Passwords, expiry dates, owner lists, and access lists limit who gets in, and every edit lands in a history you can step through, restore, or pin as a named snapshot. CryptDrive keeps files in folders, tags, templates, and a trash bin, while teams get their own drive, chat, and member roles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every server, embedded board, and edge gateway you manage becomes reachable through one SSH address in ShellHub, even when it sits behind NAT with no public IP and no open inbound port. A small agent on each device dials out to your server, so a box on a customer LAN or a cellular link needs nothing beyond outbound web access. Connect with the stock ssh client by typing [email protected]@server, or open a terminal in the browser, and scp, sftp, rsync, and port forwarding work unchanged. SSH identities tie every key to a named team member, so removing someone ends their access on every device at once. Default-deny access policies grant or block members, roles, users, or API keys by device tag, Linux login, and source address, and can require a fresh browser confirmation before a session opens. Provisioning keys enroll whole fleets through automatic, manual, webhook, or allowlist acceptance, with usage limits, expiry dates, and tags. The Sessions page records who connected to which device, as which login, and from where, and browser terminals can be recorded and replayed. A Docker connector turns containers into devices that policies can grant one by one. Four member roles shape what each person can change, and the HTTP API, API keys, and an MCP server let scripts and AI assistants list devices and review sessions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Google Analytics without the cookie banner or the maze of menus: Rybbit puts web and product analytics for every site you run on one readable dashboard, hosted on your own server. Pageviews, sessions, unique users, bounce rate, session duration, traffic sources, campaigns, devices, and countries update in real time beside a live visitor count. Session replay lets you watch the visits behind the numbers, and user profiles tie identified visitors to their sessions and events. Funnels pinpoint where conversions leak, journeys chart the paths people take through a site, retention reports show who comes back, and goals track conversions from page visits, custom events, and autocaptured clicks. Custom events carry JSON properties, filters slice every report across more than 15 dimensions, saved segments reapply them in one click, and location tracking drills from country to region to city on interactive maps, with optional 3D globe views through a Mapbox token. Error tracking connects JavaScript failures to the affected sessions, so a spike in errors leads straight to the visits that explain it. One install serves unlimited sites and organizations with role-based access, public dashboards share a site's stats through a link, and a tracking script of about 11 KB compressed collects data with no cookies and no consent banner. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One library for the books you read and the books you listen to: Chaptarr manages audiobooks and eBooks side by side, so the same title can live on your server as a chaptered M4B and an EPUB without two separate apps fighting over it. It knows the difference between editions and narrators, which means a dramatized production, an unabridged reading, and the print text can coexist as first-class versions of one work. Multi-part releases and multi-file recordings are handled as single books, and MP3 audiobooks can be converted into one chaptered M4B with chapters preserved or inserted where they are missing. Separate root folders keep audiobooks and eBooks apart, or place eBooks alongside their audio twins; either way, matching uses file tags, folder names, and release metadata to attach files to the right book automatically. Series are organized for you, metadata profiles control which languages belong in your library, and flexible renaming tokens produce filenames that read the same way a human would shelve them. Custom quality profiles per library drive automatic upgrades when a better release appears, and the standard download clients and indexer integrations from the *arr family plug straight in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Garlic Hub runs your digital signage network from one self-hosted console, managing the players, the media library, and the playlists behind every screen without per-device fees. Build presentations as SMIL playlists: full-screen master playlists for a single message, reusable internal playlists for shared blocks like opening hours, and multizone layouts that split one display into independent areas. The visual zone editor arranges those areas by percentage or pixels, even overlapping, while the template editor produces image content without leaving the browser. Media arrives from local uploads, external links, screencasts, cameras, or stock platforms, organized in hierarchical folders with bulk actions. Date and time conditions, recurrence, and triggers from touch, key presses, or network messages decide what plays when, and nested playlists can take over by priority. Players fetch updates by polling or receive an immediate push when reachable, and the fleet view shows status at a glance with remote publish, refresh, and screenshot actions. Roles per module, OAuth2 tokens, a REST API, and webhooks let larger operations automate publishing and guard who changes what, in six interface languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.