Open Source App Cloud Marketplace

Circulation desk, cataloging workbench, acquisitions office, serials room, and public catalog all share one roof in Koha, an open-source library system that scales across school libraries, branch networks, and consortia. Staff search the catalog with facets for availability, authors, holding libraries, and item types, then open a record to see its cover, subjects, classification numbers, and every copy with its call number, status, and barcode. Catalogers edit MARC 21 or UNIMARC records field by field, copy records in via Z39.50 and SRU searches, and link authorities automatically. At the desk, staff check out, check in, and renew items, work with holds, bookings, and claims, and see overdue warnings and outstanding charges beside each patron. Circulation and fine rules vary by library, patron category, and item type. Acquisitions handles vendors, baskets, budgets, and funds. Serials track subscriptions and issue receiving. A guided report wizard, SQL reports, and statistics wizards summarize circulation and collections. Patrons search the public catalog, place holds, save lists, tag and rate titles, and suggest purchases. Staff tools design notices and slips, print patron cards, set holiday calendars, and import or batch-edit patrons. SIP2 serves self-checkout kiosks, OAI-PMH sets share records, and a REST API exposes patrons, holds, checkouts, and biblios. Lending continues during outages with offline circulation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Running your own mail server usually means assembling five services and praying over DNS records; LanQin Email ships the whole stack in one container. Readers switch between mailboxes, search, label, star, and file messages into folders, then compose with a rich-text editor that handles fonts, colors, code blocks, attachments, emoji, and scheduled sending. Contacts, signatures, inbox rules with automatic forwarding, sender blacklists, and mail statistics make it a daily client rather than a demo. Administrators run the postal side from the same panel: add domains and generate DKIM keys, follow the DNS record checklist the system verifies for you, create mailboxes, set delivery aliases and catch-all addresses, and audit every message on the server. Accounts sign in with passwords or OAuth single sign-on, protected by TOTP two-factor codes and bot checks, while permission groups cap attachment size, sending rate, and mailbox count per user. Users can even request their own mailbox and wait for approval instead of filing a ticket. For programs, an Open API with bearer tokens sends mail idempotently and reports delivered, bounced, complained, rejected, and deferred events back through webhooks. External Gmail and Outlook accounts can be aggregated over IMAP, and a client-configuration page shows every IMAP, POP3, and SMTP setting in one place. A multi-container layout remains for debugging the stack piece by piece. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Used by over 30,000 teams and 650+ enterprise customers managing more than 5.2 million containers, Rancher has earned recognition as a Leader in the Gartner Magic Quadrant for Container Management and the Forrester Wave for Multicloud Container Platforms. The platform provides a single pane of glass for provisioning, upgrading, and securing Kubernetes clusters across Amazon EKS, Google GKE, Microsoft AKS, RKE2, K3s, and any CNCF-conformant distribution. Multi-Cluster Management enables centralized authentication via Active Directory, LDAP, SAML, GitHub, and OpenID Connect with granular role-based access control at the cluster, project, and namespace levels. Fleet, the built-in GitOps engine, delivers continuous deployment across hundreds of clusters simultaneously using Helm charts, Kustomize, or raw YAML manifests from any Git repository. The integrated app catalog provides one-click deployment of Prometheus monitoring, Grafana dashboards, Longhorn persistent storage, Istio service mesh, and hundreds of community Helm charts. Rancher supports air-gapped installations for disconnected environments, CIS benchmark scanning for security compliance, and automated backup and restoration of cluster configurations. The dashboard offers real-time workload monitoring, log aggregation, pod shell access, and namespace-scoped resource quotas. Cluster templates enforce organizational standards through Helm-based provisioning policies that ensure consistent configurations across environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With over 6,500 GitHub stars, HolaOS bills itself as an "open agent computer" that reimagines the traditional operating system as a shared workspace where humans and AI agents collaborate across files, browsers, and 100+ integrated tools simultaneously. Unlike chat-only interfaces, HolaOS places live application UIs—Notion-style editors, browsers, custom workspace apps—side by side with the agent conversation, so operators always see what agents are doing and can intervene at any moment. The persistent memory system stores workspace knowledge locally as Markdown files and embedded vectors via SQLite vec, enabling RAG-powered recall that survives session boundaries without the typical context window bloat. Safe Session Compaction reserves roughly 70% of the model context window for fresh reasoning while folding older history into structured checkpoints that retain goals, constraints, progress, and decisions. Agents connect to Linear, GitHub, Slack, Jira, HubSpot, Gmail, and dozens more through one-click OAuth, automatically fetching relevant signals and converting scattered app data into working memory. BYOK support for Claude, GPT, and Gemini models lets operators use their own API keys at zero markup, while built-in Kimi K3 and GLM-5.2 models provide ready-to-use alternatives. Skills package reusable workflows that any agent can invoke on demand, and scheduled triggers enable autonomous digests, monitors, and reports. The runtime supports independent server deployment alongside the desktop client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Modified Apache 2.0 licensed.

Autonomous AI coding agents work side-by-side with software engineers inside Its a Plan, a keyboard-driven project tracking and sprint planning workspace designed for rapid software delivery. Product teams organize development cycles through customizable Kanban boards, prioritized backlogs, nested sub-issues, and interactive roadmap timelines designed for rapid keyboard navigation. Engineers can assign work directly to AI agents or mention them inside discussion threads to trigger automated code fixes, documentation updates, and test suite generation. Integrated runners connect to popular coding models via standard protocol interfaces, executing assigned tasks in isolated environments before reporting pull requests and results back to the issue thread. Administrators manage team permissions through role-based access controls, authenticate users with passwordless passkeys or identity providers, and broadcast instant notifications via Telegram and transactional email. The platform dispatches configurable webhooks across development tools, enabling seamless bi-directional status synchronization with external version control platforms and continuous integration pipelines. Custom labels, milestone estimates, and progress metrics provide engineering managers with immediate visibility into sprint velocity and delivery bottlenecks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

asciinema server gives terminal recordings and live streams a home on your own domain, stored as lightweight, searchable text instead of heavy video files. Demos, tutorials, and incident replays recorded with the asciinema CLI upload in the asciicast format and play back in an integrated web player with configurable terminal themes and font families. Live streams broadcast a running session to viewers in their browsers, which suits workshops, pair debugging, and open office hours. Search spans titles, descriptions, and the terminal output itself, so a command typed months ago is easy to find. Every recording or stream is private, unlisted, or public, secret links make sharing simple, and titles and Markdown descriptions stay editable after upload. Players embed in documentation pages, an SVG preview image links back to the recording, and transcripts download as plain .txt files. No tracking, no advertising. Sign-in uses emailed login links, which a single-user instance can read straight from the server log. An HTTP API creates, updates, and deletes recordings and streams, and an optional audio track can accompany either one. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

For research teams that need to show what was recorded and when, eLabFTW® is an electronic lab notebook that keeps experiments, lab inventory, and equipment bookings in one shared, searchable system. Each experiment holds rich-text notes, tables, images, checkable steps, custom metadata fields, tags, statuses, and attached files. Templates turn a protocol you repeat into a one-click starting point. A separate resource database catalogs antibodies, plasmids, cell lines, chemicals, and instruments, and typing # in an experiment links straight to any of them. Compounds import from PubChem by CID or CAS number, arriving with formulas, identifiers, and hazard data. The inventory tree maps buildings and their sub-locations, records where each container is stored, and tracks quantity and unit. Book a microscope by dragging a slot on the scheduler, and permissions decide who may reserve what. Entries can be signed with Ed25519 keys and timestamped through RFC 3161 authorities such as DFN, Digicert, and GlobalSign, or anchored on the Bloxberg blockchain; a timestamp archive can never be edited or deleted. Export to PDF, ZIP, CSV, JSON, or .eln archives, and import .eln or CSV files when moving from spreadsheets or another notebook. Users sign in locally or through SAML2 or LDAP, and an API with per-user keys lets instruments and scripts read and write entries. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

'Can Maria edit this document?' is a simple question with a hard implementation, and SpiceDB is the open-source, Zanzibar-inspired database built to answer it and millions like it correctly. You model your product once in its schema language, defining object types like documents and organizations, relations like owner and member, and computed permissions built from unions, intersections, exclusions, and arrows through other objects. Your application then writes relationships as users join groups, create folders, and share files, and SpiceDB evaluates checks against that live graph in milliseconds. Check a single permission before rendering a button, check hundreds at once to filter a dashboard, look up every resource a user can open for search prefiltering, or list every subject who can access a file for an admin screen. Per-request consistency options, anchored by revision tokens, protect you from the classic race where a revoked user briefly keeps access, and caveats add conditional rules based on context like IP address or time. Relationships persist in PostgreSQL for simple deployments or CockroachDB and Spanner when you need multi-region scale, and the same schema files validate in CI with the command-line tool before they ever reach production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Name the route and the fare you will pay, and Ticket Monitoring keeps watch over five booking channels, alerting you the moment a real fare drops to your price. It collects actual flight details, not headline prices: flight numbers, times, transfers, cabins, aircraft, and baggage allowances from Qunar, Fliggy, Ctrip, Tongcheng, and Tuniu, with five optional app channels feeding the same tables. Every watched route carries its own rules: separate target lines for nonstop and connecting flights, airline whitelists, baggage and departure-time gates, a maximum trip duration, and pause switches that shelve a route without deleting it. Each scan writes every flight into a local price history, so the console draws candlestick trends, 14-day departure price bands, and low-fare calendars from your own collected data. When a fare crosses your line, a rich DingTalk post leads with the deal, its 7-day trend, and a buy-or-wait suggestion, and escalation layers add an @mention, an ntfy alert that rings through silent mode, or a voice call. ServerChan WeChat, Bark, and email reports with embedded charts run alongside, governed by quiet hours and a full send history. Routes, thresholds, scan intervals, channels, and notifications are all configured in the browser console, changes apply live without a restart, and all prices and credentials stay in local files on your server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Locust is a load-testing tool that turns plain Python scripts into swarms of simulated users, so you can find out exactly how much traffic your service survives before it falls over. You model real behavior with ordinary Python: classes describe user types, tasks carry weights, and waits plus conditional logic mimic how people actually browse, log in, and check out. The web interface starts the swarm, charts requests per second, response times, and failures as they happen, and lets you raise or lower the load mid-run the moment a bottleneck appears. One machine is rarely the limit: a master process coordinates worker processes across as many machines as you can give it, and every worker runs thousands of greenlet users without thread overhead. HTTP is the home turf, but custom clients let the same scripts load-test WebSockets, gRPC, databases, message queues, or any protocol you can call from Python. Custom load shapes bend the user curve into steps, waves, or double peaks that mirror launches and flash sales instead of a flat ramp. Results export as CSV data and standalone HTML reports for the team, stats can stream into TimescaleDB and Grafana during long runs, and headless mode drops the whole test into CI pipelines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Watchtower puts AI-driven security assessments into one web console, where sessions probe your attack surface while every request, finding, and piece of evidence is captured as it happens. The AI session console follows the attack surface, session progress, tool calls, and findings as an assessment runs, so you can watch an engagement unfold instead of reading a log afterwards. A built-in proxy workflow records HTTP and HTTPS traffic history with highlighted patterns, and any captured request can be sent to the Repeater for editing, replay, and response comparison. Mobile work is covered too: connect phones over USB or wireless, capture app traffic separately from accessibility control, and import WeChat mini-program packages to configure an assessment session. A public vulnerability intelligence library can be searched by component, severity, and source and kept synchronized locally, giving assessments current context without sending your targets anywhere. Findings are managed by source, severity, and status, each linked back to its supporting evidence, and the report editor assembles them with a live preview, impact notes, and remediation guidance. The dashboard tracks assets, tasks, AI sessions, token usage, and runtime resources, and task admission is budgeted against physical memory so heavy scans do not starve the host. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Instead of trusting one search company with every query, degoog is a self-hosted search aggregator that fans each one out to the engines you choose, from your own server, and merges the answers into one deduplicated, ranked list. It installs with no engines at all; a first-run tour then walks you through picking Google, Bing, DuckDuckGo, Brave, Startpage, Reddit, or Wikipedia from the built-in Store. Pages found by several engines collapse into a single row that lists every source, while a sidebar times each engine, explains failures like rate limits or CAPTCHAs, and retries only the one that failed. Tabs appear for each search type your engines serve, and the Images tab adds size, color, layout, and safe-mode filters beside a zoomable preview panel. Bangs target one engine or run commands (!w for Wikipedia, !ip, !speedtest, !uuid), and Store plugins add weather, definitions, QR codes, and search across your own Jellyfin or Meilisearch libraries. Owners can block, rewrite, or score domains, serve a script-free page to text browsers, and turn on an indexer that remembers seen results for later recall. A JSON search API, a SearXNG-compatible response mode for Open WebUI, and an MCP companion feed the same results to scripts and LLM clients. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Stoat delivers a complete Discord-like community chat experience that organizations can self-host on their own infrastructure with full data ownership. The platform provides text channels organized in categories, real-time voice calls powered by LiveKit, file sharing with automatic media proxying, custom emoji support, bot framework, GIF search, server invites, and granular role-based permissions — all wrapped in a polished web UI that feels immediately familiar to Discord users. The architecture separates concerns across dedicated Rust binaries handling the REST API, WebSocket real-time events, file storage with S3-compatible backends, push notifications, and media proxying, backed by MongoDB for persistence and Redis for caching. Web, desktop, and mobile clients connect through the same API, ensuring consistent experience across platforms. Unlike federated alternatives such as Matrix, Stoat provides a single-server deployment model focused on the Discord-style community experience: server invites, channel categories, member management, and an invite-first onboarding flow that communities expect. The Docker Compose deployment stack handles all microservices with Caddy providing automatic TLS via Let's Encrypt. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With nearly 3,000 GitHub stars and 14 releases since its June 2025 launch, Kite delivers a lightweight Kubernetes dashboard that replaces the fragmented workflow of switching between kubectl, Lens, and separate monitoring tools with a unified multi-cluster management platform. The dashboard automatically discovers clusters from kubeconfig files and supports independent Prometheus configurations per cluster, providing real-time CPU, memory, and network charts alongside live pod log streaming with filtering and search. A built-in web terminal opens shells directly into pods and nodes without kubectl port-forward, while the Monaco-based YAML editor offers syntax highlighting and validation for in-place resource editing. The integrated AI agent, powered by OpenAI or Anthropic models via native Go SDK integrations, translates natural language into precise client-go API calls — querying cluster health, analyzing pod logs, scaling deployments, patching resources, and cleaning up failed jobs — all operating strictly within the logged-in user's RBAC permissions. Enterprise governance includes OAuth 2.0 single sign-on, multi-factor authentication, FIDO2 passkeys, granular role-based access control with per-namespace permissions, and comprehensive audit logging. Helm chart management enables browsing, installing, and upgrading releases directly from the UI, while the Docker registry integration provides quick image tag selection. Deploy via a single Docker container with SQLite or use the official OCI Helm chart with PostgreSQL or MySQL for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Write one post and Shoutrrr publishes it across X, Bluesky, LinkedIn, Facebook, Instagram, Threads, and Discord at the same moment, or holds it in a queue until the slot you picked. The composer counts characters against each network's limits as you type, attaches media with alt text, adjusts wording per platform when a message needs a local tweak, and splits long posts into threads where the network supports them. Recurring posting slots follow your workspace timezone, drafts drop into those slots from a month calendar, and anything can still go out instantly when news breaks. Every target publishes independently and retries on its own when a network hiccups, leaving a per-attempt trail you can inspect instead of a silent failure. Analytics chart follower and post-count trends for each account and report likes, reposts, replies, and impressions per post wherever the network's API allows. Teams share workspaces with role-based memberships and email invitations, keep clients in separate workspaces, and get in-app alerts the moment a post lands, fails, or needs an account reconnected. Account tokens sit encrypted at rest and refresh themselves, sign-in supports two-factor codes and passkeys, and the built-in MCP server hands AI assistants 22 tools to draft and schedule while publishing, retrying, and deleting refuse to run without your explicit confirmation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Only the person holding the link can open what you share with SkySend, a self-hosted file and note sharing service that encrypts everything in the browser before it leaves your device. Sending a contract? Drop in the file, several files, or a whole folder, and share the link. Need documents from a client? Send an upload link instead, and whatever comes back is encrypted for you alone. Handing over a password or an SSH key? Write it into a note that burns after reading. Notes can mix text, Markdown, generated passwords, and highlighted code in a single page. Every share can expire by time, stop after a set number of downloads or views, and carry an optional password as a second lock. The command-line client uploads, downloads, and reads notes with the same encryption, and its full-screen mode shows each link as a QR code. No accounts are needed: My Links keeps your shares in the browser, and optional OIDC sign-in limits who may create them. Encrypted uploads sit on local disk or any S3-compatible bucket, and the interface offers 13 languages and three themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every ride, run, hike, and swim you have ever recorded finds a home in Dreeve, a private fitness dashboard that lives on your own server rather than in a social feed. Import FIT, TCX, or GPX files from a watch folder, sync Strava, or add connectors for Garmin Connect, Wahoo, Polar Flow, Hammerhead, and Zepp/Amazfit. Weekly charts follow distance, time, and elevation beside training goals, heart rate zones, and training load analysis, and monthly stats pair per-sport totals with an interactive calendar. A heatmap paints every kilometer you have covered. Best efforts rank your fastest 5k, 10k, 50k, and 100k across every sport, while Eddington numbers, a milestones timeline, and a yearly Rewind mark the long game. Strava sync also brings segments, segment efforts, and challenges. Gear pages total the distance on each bike and shoe, and maintenance tasks send alerts through ntfy, Gotify, Discord, Telegram, Slack, or email when an interval comes due. Automation rules assign gear, flag commutes, and set sport types by device, distance, weekday, time of day, or location, so new imports arrive organized. Ask the AI workout assistant about your training, using cloud models, OpenRouter, or a local Ollama model. An installable mobile app and embeddable badges carry your stats to phones and blogs, and a password-protected admin panel keeps the settings. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

LiftTrace is a self-hosted weightlifting tracker that keeps your entire training history, programs, personal records, and progress photos on your own server in a single Docker container. Log every set with weight, reps, RPE, warm-up markers, and supersets, or type a line like bench 3x5 at 225 and let the Smart Log parser turn plain text or a voice note into structured sets. Follow multi-week programs where each week prescribes its own sets, reps, tempo, rest, and load, and watch the diary prefill today's session from the active template. Browse an exercise library merged from wger, Free Exercise DB, and ExerciseDB, add custom movements, or bulk import your own catalog from a spreadsheet. Automatic PR detection, estimated one-rep maxes, volume and frequency charts, and dated progress photos with a drag-to-compare view show how training is trending. The built-in Trace AI coach reads your workouts, programs, records, and body stats to answer questions, log sessions, and adjust plans through Claude, OpenAI, Gemini, or a local Ollama model. Coaches can prescribe workouts, leave notes on individual sets, and review filmed set videos with comments stamped at the moment that matters, all with explicit consent from the athlete. Import years of history from Strong, Hevy, FitNotes, Jefit, or Garmin FIT files, keep logging offline in the gym, and sign in with OIDC through Authentik, Keycloak, or Authelia. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.