Open Source App Cloud Marketplace

With over 430 GitHub stars and designed for DevOps engineers, platform teams, and homelab operators, Sencho is the self-hosted Docker Compose control plane that gives you a real operational cockpit without abandoning file-on-disk compose workflows. The web dashboard provides live CPU, memory, and disk sparklines per container, one-click start/stop/restart controls, and a Monaco-powered YAML editor with syntax highlighting, inline diff, and one-click rollback. Compose files remain the source of truth on the host filesystem. Multi-node management connects remote Sencho instances via authenticated HTTP and WebSocket proxy using long-lived API tokens, with no SSH access or exposed Docker sockets required. The Pilot Agent establishes an outbound-only WebSocket tunnel for nodes behind NAT, CGNAT, or strict firewalls. Blueprints define compose intent once and deploy it across label-targeted nodes, with drift detection keeping the fleet aligned. Fleet Federation provides cordon and pin controls for maintenance windows, while Fleet Actions execute bulk deploy, stop, and restart operations by stack label across the entire infrastructure. The security suite includes Trivy vulnerability scanning, deploy enforcement policies, SARIF and SBOM export, and Fleet Sync to replicate scan policies across replicas. Additional capabilities include 199+ one-click app templates, Git source integration, atomic deploys with auto-rollback, auto-heal, scheduled operations, webhooks, and custom S3 off-site backups to MinIO, R2, B2, or AWS. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

To give Docker administrators and home lab operators a fast, modern workspace for server-side storage, NextExplorer delivers a browser-based file manager with instant ripgrep search, inline editing, and multi-volume navigation. Any directory mounted under your container volume root appears immediately in the sidebar with capacity usage indicators, favorite pins, and switchable grid, list, and column browsing layouts. You can preview images, stream videos and audio with FFmpeg-generated thumbnails, read PDFs, edit source code and configuration files in the syntax-highlighted editor, or collaborate on office documents through an integrated ONLYOFFICE Document Server. Deep content search powered by ripgrep scans filenames and file contents across terabytes of storage in seconds, while bundled 7-Zip support inspects and extracts password-protected ZIP, 7z, RAR, TAR, and ISO archives with built-in zip-bomb protection. Teams can share folders via read-only or read-write links, isolate personal user directories, enforce path-level read-only or hidden access rules, and authenticate through local accounts or OpenID Connect identity providers such as Authentik and Authelia. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With 10,100+ GitHub stars and 75 releases over a decade of continuous development, Healthchecks is the open-source cron job monitoring service that catches failures your other monitoring tools miss — the jobs that silently stop running, the backups that never completed, the nightly reports that disappeared without error. The dead man's switch architecture requires zero agent installation: your cron jobs, scripts, and services ping a unique URL via HTTP request or email, and Healthchecks alerts you only when a ping does not arrive within the configured Period and Grace Time window. Each check supports cron expression scheduling, optional start, success, and failure signals for measuring execution time, and HTTP body keyword filtering for intelligent alert routing. Twenty-five notification integrations cover every channel teams actually use: Slack, Discord, Microsoft Teams, PagerDuty, Opsgenie, Splunk On-Call, Telegram, Signal, WhatsApp, SMS, email, webhooks, GitHub Issues, Pushover, ntfy, Gotify, Matrix, Mattermost, Zulip, Pushbullet, PagerTree, Spike.sh, and Trello. The web dashboard provides a visual grid showing real-time status with color-coded badges and per-check integration toggles. Monthly, weekly, and daily email reports summarize uptime trends with checks sorted by downtime duration. Team management supports projects with member roles and read-only access. Prometheus metrics expose check health and grace state for Grafana dashboards. WebAuthn and TOTP two-factor authentication secure accounts. Deploy via Docker images available for amd64, arm/v7, and arm64 architectures. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 3-Clause licensed.

With over 14,000 GitHub stars and a mission to become the world's most trusted document-signing tool, Documenso delivers a beautifully designed electronic signature platform that organizations can self-host for complete data sovereignty. The signing workflow handles everything from simple one-party signatures to complex multi-recipient documents with configurable roles including signers, approvers, viewers, and CC recipients, each with distinct permissions and notification flows. Document templates enable reusable signing packages with pre-configured fields and recipient patterns, eliminating repetitive setup for contracts, NDAs, and onboarding documents that teams process regularly. The PAdES-standard implementation ensures digital signatures are legally compliant and cryptographically verifiable, with complete audit trails documenting every action from document creation through final signature. Direct link signing allows recipients to access documents without email, enabling embedded signing experiences within existing applications and websites. The REST API provides programmatic document creation, recipient management, and webhook notifications for integrating signature workflows into CRM systems, HR platforms, and custom business applications. Team management features organize users into groups with role-based permissions, custom branding per team, and centralized billing for organizations with multiple signing workflows. SSO integration supports standard authentication providers for enterprise identity management. The TypeScript codebase built on Next.js and Prisma with PostgreSQL makes customization and contribution accessible to modern web developers. Zapier integration connects Documenso to thousands of third-party applications for automated document routing. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every physical device on your network gets a living digital counterpart in Eclipse Ditto: a Thing whose Features hold its current state, desired state, and properties, readable and writable through APIs even while the device itself is offline. Your application talks to the twin over a REST-like HTTP API for CRUD and search, over WebSocket for real-time bidirectional streams, or over Server-Sent Events for change notifications, and Ditto routes commands down the live channel to the actual device when it is connected. Devices and backends connect through managed Connections to MQTT, AMQP 1.0 and 0.9.1, Apache Kafka, and HTTP endpoints, with payload mapping that translates between device formats and Ditto Protocol JSON. Fine-grained Policies decide per subject and resource who may read a temperature, change a setpoint, or receive an event, including namespace-scoped entries and partial change notifications that only reveal fields a subscriber may see. Search across millions of twins uses an RQL query language with custom MongoDB indexes, and Web of Things integration generates Thing Descriptions scoped to each requester's permissions. The bundled Explorer UI lets operators browse Things, inspect Features, and time-travel a twin's state to any past revision or timestamp to see exactly what changed and when. OpenID Connect and basic authentication protect the gateway, and Prometheus metrics expose live entity counts per namespace. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EPL-2.0 licensed.

Hister is a private search engine for everything you have read or saved, indexing the full text of visited pages, local files, and imported browser history so one query finds the page you only half remember. Firefox and Chrome extensions capture each page as you browse, while a crawler and importers for browser history and bookmarks backfill earlier reading. Watched directories add local files to the same collection. Queries accept field filters, quoted phrases, wildcards, negation, date ranges, and aliases, with a readable stored preview beside each result. Opt-in semantic search matches documents by meaning through an Ollama, llama.cpp, or OpenAI-compatible embeddings endpoint. The same index answers in the browser, a terminal interface, the command line, an HTTP API, and an MCP server for AI assistants. Multi-user mode gives each person separate documents, rules, and access tokens, with password or OAuth sign-in, and public mode lets anonymous visitors search a curated index. Rebuild a research trail, recover a half-remembered article, or share one searchable knowledge base, with no telemetry. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With 26,600 GitHub stars, 50 contributing companies including AWS, Google Cloud, Oracle, and Ericsson, and governance under the Linux Foundation ensuring the BSD 3-Clause license can never be revoked by a single entity, Valkey delivers a truly open-source Redis-compatible key-value datastore that reached 1.19 million requests per second in version 8.0 through redesigned asynchronous I/O threading across CPU cores while maintaining single-threaded data structure operations for predictability. Native data structures include strings, hashes, lists, sets, sorted sets, bitmaps, HyperLogLogs, streams, and geo-spatial indices with JSON support through modules. Valkey 9.0 shipped full-text search and aggregation via Valkey Search, enabling tag queries, numeric filtering, and text matching directly within the datastore without external search engines. Cluster mode provides horizontal scaling with automatic sharding, replication for high availability, and per-slot metrics for granular monitoring. Lua scripting enables complex atomic operations, while the module plugin system extends the server with custom commands and data types including probabilistic Bloom filters. Client libraries for Python, Java, Go, Node.js, and PHP maintain full Redis OSS protocol compatibility — existing Redis applications work without code changes. Deploy as a standalone daemon or in clustered mode with Docker, supporting persistent and ephemeral workloads on any Linux host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 3-Clause licensed.

Radarr, Sonarr, and their sibling apps watch RSS feeds for new releases but never go back for what your library is still missing, and Houndarr fills that gap by asking them to search in small, polite batches. It reads the wanted lists of every connected Radarr, Sonarr, Lidarr, Readarr, and Whisparr instance and sends a few search commands per cycle, so a big backlog drains over days instead of arriving as one Search All Missing burst. Each instance has its own batch size, sleep interval, hourly cap, per-item cooldown, and post-release grace period, plus an optional download-queue limit, allowed search windows such as 09:00-23:00, and tag filters that include or exclude items. Three independent passes run per instance: missing items, cutoff-unmet items below your quality profile, and upgrades for files that already meet cutoff, with the last two off until you enable them. Sonarr, Lidarr, and Readarr can search by season, artist, or author, and search order is random or oldest-first. The dashboard shows library health, recent hunts, hourly budgets, and a cooldown schedule per instance, with Run Now buttons for on-demand cycles. The Logs page records every search and skip with its reason in a filterable audit trail that copies as TSV. A key-gated widget endpoint feeds Homepage dashboards, and built-in login or reverse-proxy authentication protects the interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

AgenTerm lets your AI agent work inside a remote computer's terminal with the owner's permission, through a relay server you host yourself. Your agent connects to the server over MCP and creates an invitation, single-use and expiring in fifteen minutes by default, or reusable across several devices; you privately share the generated connection command with the person who needs help. That person runs a small client on macOS, Linux, or Windows, reads what access means, and authorizes it; the client then dials out to your server, so the target computer needs no SSH service and no open inbound port. The agent can then run one-off commands with a chosen working directory, environment overrides, and timeouts, receiving stdout, stderr, and exit status, or hold an interactive session open, reading output as it arrives and typing answers to prompts. The person at the keyboard watches every command and its output in the client and can disconnect at any moment, and the client reconnects by itself after a network drop. Use it to troubleshoot a colleague's machine without swapping logs, help family through a terminal problem, or drive a development box with no agent or model account of its own. The relay itself is a single Go binary guarded by a management key, deployed with Docker Compose or systemd, with in-memory sessions and a health endpoint. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Organizations deploying multiple large language models across departments use DEEIX Chat as their centralized AI workspace for model routing, multimodal conversations, document retrieval, MCP tool execution, and usage governance. Administrators connect upstream channels across OpenAI, Anthropic, Google Gemini, xAI, and OpenRouter protocols while configuring route priorities, traffic weights, and automatic circuit breaking from a unified control plane. Team members switch models mid-conversation, branch message threads, adjust reasoning effort, and generate images or video without managing individual API keys, or optionally bring their own provider keys under admin policy rules. Uploaded PDFs, spreadsheets, and images undergo OCR and semantic chunking so users can attach personal or shared knowledge bases directly to chat sessions with traceable retrieval evidence. Interactive responses render live HTML, SVG, Mermaid diagrams, KaTeX math, and stateful parameter sliders inside a sandboxed preview pane alongside the conversation. Built-in support for Streamable HTTP Model Context Protocol servers lets users discover and invoke external tools with per-message execution limits and full call inspection. Integrated permission groups, OIDC single sign-on, TOTP two-factor authentication, token and per-call billing ledgers, and audit logs give operators complete visibility over usage and spend. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Describe an app in one sentence and sandboxd, a self-hosted AI app builder, has a coding agent build it in an isolated sandbox and hand back a live preview URL. Start from a blank prompt, a React, Next.js, Express, or FastAPI starter, or an imported public Git repo. Refine it in one persistent chat beside Preview, Code, Terminal, and Git tabs. Pick OpenCode, Pi, or Claude Code. Point OpenCode or Pi at local or remote OpenAI-compatible and Anthropic-compatible endpoints, LiteLLM gateways included. A proxy injects provider keys on the wire, so nothing secret lands in a sandbox. Did the agent get it wrong? Every task is checkpointed first, so one click reverts the turn. Snapshots, forks, and named versions keep known-good points to branch from. Edit files in the browser, review file-by-file diffs, commit, and push. Secrets are write-only and encrypted per app. Idle sandboxes sleep and wake on the next request. One modest server can host per-user previews, coding playgrounds, or an agent platform. The app library installs 80+ curated open-source apps, such as Ghost, n8n, Gitea, and Grafana, each in its own sandbox. Every console action is also a /v1 HTTP call with an OpenAPI spec. Upgrades back up the database, health-check the new version, and roll back on failure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 15,100 GitHub stars and seven years of battle-tested production use, OneDev replaces entire DevOps toolchains — GitLab, Jenkins, Jira, Artifactory — with a single Java application that runs comfortably on a 1-core 2GB server for medium-sized projects. The platform unifies Git hosting with ANTLR-powered language-aware code search and symbol navigation, pull request workflows with configurable branch protection rules and required reviewers, and customizable issue tracking with scripted state transitions that automatically advance issues when code is committed, builds pass, or deployments complete. The GUI-based CI/CD editor creates pipelines without writing YAML, supporting typed parameters, matrix builds, job templates, cache management, and artifact publishing in a single visual interface. Jobs execute via Docker containers, bare metal shell, Kubernetes pods, or distributed agent pools, with web terminal access for live debugging and the ability to pause running jobs for inspection. Built-in package registries handle Docker images, npm packages, Maven artifacts, NuGet libraries, PyPI wheels, and RubyGems without external infrastructure. AI users can be assigned to issues and pull requests to autonomously implement features, review code, fix CI/CD failures, and resolve merge conflicts. The automated Kanban board supports rule-based card movement, time tracking, timesheets, and service desk ticket creation via email. Cluster deployment enables project replication across servers for high availability and horizontal distribution for scalability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a query crosses its threshold, Nightingale, a self-hosted alerting engine, decides who hears about it and how, without moving data out of the stores you already run. Rules use PromQL, log queries, or SQL against Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse, MySQL, or PostgreSQL, graded S1, S2, or S3 with a for-duration that absorbs brief spikes. Existing Prometheus alert rules import from YAML. Business groups give each team its own rules and dashboards, and sign-in works through OIDC, OAuth2, LDAP, or CAS. Once a rule fires, mute rules silence the noise, subscriptions add recipients, and event pipelines rewrite labels or route conditionally. Delivery reaches Slack, PagerDuty, Discord, Telegram, Jira, email, DingTalk, Feishu, WeCom, SMS, and voice calls, plus HTTP webhooks and scripts for anything else. Evaluation records, active and historical events, and notification results show what happened at each step. If an alert misbehaves, the built-in AI agent explains why it fired or never arrived, and it drafts rules, dashboards, and mutes from plain-language requests. Claude Code, Cursor, and other MCP clients can query alerts and manage alerting through /mcp, read-only by default and bound by the caller's own permissions. At remote sites, n9e-edge keeps evaluating and notifying when the link to the center drops. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Spreadsheets and old Access databases give way to custom business apps that a team builds itself in a browser with Saltcorn, a no-code database application builder. Tables hold related records with typed and calculated fields, and CSV files import straight into them. Views start from patterns such as list, show, edit, filter, kanban, calendar, gantt, map, and chart, then take shape on a drag-and-drop canvas with a layers tree and desktop, tablet, and mobile previews. A view can embed another view, so clicking a row narrows the others and builds a cross-filtering dashboard with no glue code. Triggers react to row changes, schedules, logins, and API calls, while visual workflows branch, loop, and pause for a person's form before resuming days later. An AI copilot drafts tables, pages, and workflows from a plain-language prompt. The same views also become native Android and iOS apps with offline mode, PDF or image documents, and responsive emails. Every table, view, and page carries a minimum user role, and an auto-generated REST API exposes the data. Packs such as project management and an address book start an app from a ready template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Instead of a separate chatbot for each channel, Synaplan runs one self-hosted AI assistant for your team, website visitors, WhatsApp line, and inbox, and shows what every reply cost. In the web app, connect OpenAI, Anthropic, Gemini, Groq, Mistral, xAI, Hugging Face, or local Ollama. Each kind of work gets its own model, from chat and image to video and audio, and every answer carries a Free, Low, Mid, or High cost badge. A planner splits a big request into a task graph and sends each step to the model that fits. On your website, one script tag adds a chat widget, and a human operator can take over any conversation live. On WhatsApp Business and email, the assistant replies on the channel where the question arrived. Behind every channel sits one knowledge base: upload PDFs, Word and Excel files, or images with OCR, and semantic search feeds them into answers. Saved tasks run on demand or on a schedule, approvals pause any action that writes, and watched pages mail you a diff when a URL changes. Connections reach Microsoft 365, Dropbox, Nextcloud, ownCloud, WebDAV, CalDAV, Jira, and Confluence. An MCP server and an Anthropic-compatible endpoint let Claude, Cursor, and Claude Code use your instance. Users and groups share folders and assistants, and admins see usage and health. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Find a title tonight and wake up to it named, filed, and ready to play: Mediarium is a self-hosted media manager that finds, downloads, repairs, and organizes movies, TV, music, ebooks, and audiobooks from one web page on your own server. Search once and it queries your Usenet and torrent indexers together, grabs the best release, unpacks it, applies your naming rules, and places it where Plex, Jellyfin, or Emby expects it. Quality profiles with upgrades and fallbacks keep hunting better copies automatically, while delay profiles, a blocklist with retries, and tags such as Kids or 4K keep the wrong releases out and collections tidy. Subtitles are matched to your exact file, with a timing fix when one runs out of sync. Family accounts carry permissions of their own: relatives who cannot add titles send requests you approve, and watch history read from your media server drives statistics and optional cleanup rules. The built-in Books app reads ebooks, plays audiobooks chapter by chapter, remembers your place everywhere, and even opens Kindle books. Torrents can run behind a built-in WireGuard VPN with a kill switch, downloads repair and unpack themselves, and notifications, backups, and a post-import script keep the routine invisible. Moving over reads your Radarr, Sonarr, Prowlarr, SABnzbd, and other existing setups without changing them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Codync turns the coding agents already installed on your computer into named bots you can message from your phone, so the Claude Code or Codex session on your desk keeps working while you are away. Each bot wraps one agent in one project folder, with its own standing instructions, memory, and approval rules, and several bots run side by side on one machine. Message any bot from the iPhone app, the desktop app, or a terminal; group rooms put bots in one thread, and an @name mention routes a question to exactly one of them. Bots ask each other for reviews inside the room and quote-reply to specific messages. File changes arrive as approval cards naming the file and computer, with Allow once, Always allow, or Deny; finished and blocked work both ping you as push notifications. The connection between phone and computer is end-to-end encrypted through a free relay, your own relay, or directly over the same Wi-Fi or Tailscale. Watch the computer's screen from your phone, hand a bot a computer-use tool, or talk to it in a voice call, and approve every new device per computer with a six-digit code. Your existing agent subscription does the work; Codync never calls a provider API with your login, and there is no paid tier. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Cognee gives AI agents persistent long-term memory that survives across sessions, replacing the traditional stack of separate graph, vector, and session databases with a unified engine running on a single PostgreSQL instance. The memory-native API exposes four verbs (remember, recall, forget, and improve) enabling agents to persist context, retrieve cited answers, prune outdated knowledge, and self-improve from feedback. Under the hood, Cognee combines pgvector embeddings with a PostgreSQL-native graph store and cognitive-science-grounded ontology generation, delivering hybrid retrieval that fuses semantic similarity, structural graph traversal, and lexical search in a single query. Integrations span Claude Code, Cursor, LangGraph, OpenAI Agents, and any MCP-compatible client through a dedicated MCP server on port 8001, while the Python and TypeScript SDKs provide direct programmatic access. The platform supports swappable backends including Neo4j, FalkorDB, Qdrant, ChromaDB, Weaviate, Milvus, and LanceDB for teams with existing infrastructure. Built-in OpenTelemetry tracing, an experimental dashboard with knowledge graph visualization, multi-tenant user isolation, and audit trails ensure production readiness. Deploy via Docker Compose with optional profiles for PostgreSQL, Neo4j, Redis, and the web frontend. Reached v1.0 in April 2026 with 30,000+ stars. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.