Keep every VPS, home-lab box, NAS, and router you run on one self-hosted dashboard, with a small agent on each machine reporting whether it is up and how hard it is working. Nezha tracks CPU, memory, swap, disk, load, traffic, process counts, and TCP and UDP connections on Linux, Windows, macOS, OpenWRT, and Synology machines, plus GPU and temperature where supported. Servers sort into groups and appear as cards, a list, or a world map, with live charts and, when the optional time-series database is on, 1, 7, and 30 days of history. HTTP GET, ICMP Ping, and TCPing monitors run from the servers you choose, chart latency and packet loss, and warn about HTTPS certificate changes and upcoming expiry. Alert rules watch offline servers, resource use, bandwidth, and cycle traffic limits, then message Telegram, Slack, Matrix, Feishu, DingTalk, or any webhook. A browser terminal and file manager handle quick fixes, while scheduled or alert-triggered tasks run backups, restarts, and scripts across many servers. DDNS updates Cloudflare, Tencent Cloud, or Hurricane Electric records when an agent's IP changes, and NAT traversal publishes a home router or NAS page on your own domain. Admin and user roles, scoped API tokens, and an optional MCP endpoint let people and AI tools list servers and run commands within their permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

CrowdSec Web UI provides a centralized web console for monitoring intrusion detection telemetry, managing firewall remediation decisions, and auditing security events across multiple CrowdSec security engines. Administrators can connect several CrowdSec Local API endpoints simultaneously, aggregating threat intelligence and active bans into a unified visual interface. The dashboard displays geographic origins of attacking IP addresses, active remediation durations, and specific scenario triggers such as brute-force authentication attacks or web vulnerability probes. Operators can search through historical alert logs, inspect raw HTTP request details, and drill down into individual IP behaviors to differentiate authentic threats from false positives. Manual intervention tools let security teams enforce custom IP bans, adjust expiration timers, or immediately revoke erroneous bans across all connected bouncers with a single click. Integrated notification pipelines dispatch real-time security alerts to external destinations including ntfy, Gotify, and MQTT message brokers whenever critical thresholds are breached. Built-in Prometheus metrics dashboards visualize processing latencies, parser throughput, and decision counts over customizable time windows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Used by over 100,000 organizations and ranked first in the Gartner Magic Quadrant for DevOps Platforms, GitLab is the open-core DevSecOps platform that delivers the complete software development lifecycle — from planning and source code management through CI/CD, security scanning, and monitoring — in a single self-managed application. The built-in CI/CD engine executes pipelines defined in YAML with parallel jobs, directed acyclic graph scheduling, multi-project pipelines, and auto-scaling runners on Docker, Kubernetes, or bare metal. Merge requests provide inline code review with approval rules, code owners, merge trains for serialized merging, and five merge strategies including fast-forward and semi-linear history. The integrated container registry stores Docker images alongside code, while the package registry supports npm, Maven, NuGet, PyPI, Conan, Go, and generic packages. Issue boards with epics, milestones, and labels enable agile planning, while the built-in wiki and GitLab Pages provide documentation hosting and static site publishing. Security scanning in the Community Edition includes basic SAST, secret detection, and container scanning running as pipeline jobs. The Omnibus installer bundles Rails, Puma, Gitaly, Workhorse, Nginx, PostgreSQL, Redis, Sidekiq, and Prometheus into a single package installable in minutes, while Docker and Helm chart options support containerized and Kubernetes deployments. GitLab Duo AI assists with code suggestions, merge request summaries, and vulnerability resolution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Dockhand is a Docker management platforms, offering a modern alternative to Portainer with free OIDC SSO and vulnerability scanning that competitors gate behind paid tiers. Real-time container management provides start, stop, restart, and remove operations with live resource monitoring across CPU, memory, and network usage on a dashboard with real-time metrics. The visual Docker Compose editor enables stack creation and modification with syntax highlighting, while Git integration deploys stacks directly from repositories with webhooks and auto-sync for GitOps workflows. Vulnerability scanning powered by Grype and Trivy analyzes container images against CVE databases, with configurable auto-update scheduling that can trigger updates based on vulnerability severity criteria. The Hawser Go agent enables management of remote Docker hosts in Standard mode for LAN environments or Edge mode using outbound WebSocket connections for hosts behind NAT, firewalls, or dynamic IPs without exposing inbound ports. Interactive terminal sessions provide shell access into running containers, while the file browser enables uploading, downloading, and editing files directly within containers. Image management includes registry browsing, pull operations, and layer inspection alongside network and volume administration. The security-focused architecture builds its own OS layer from scratch using Wolfi packages via apko with every package explicitly declared. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed, converting to Apache 2.0 in 2029.

Skip the shell and the configuration file: Webmin handles user accounts, disk quotas, services, and server software on Linux and Unix machines from a browser tab. More than 100 standard modules sit under seven menus: Webmin, System, Servers, Tools, Networking, Hardware, and Cluster. System covers Users and Groups, Scheduled Cron Jobs, Running Processes, System Logs, Log File Rotation, Disk Quotas, Filesystem Backup, and systemd Bootup and Shutdown, plus Software Package Updates, which can hold selected packages on APT and DNF systems. Servers edits Apache, Nginx, BIND DNS, Postfix, Dovecot, MySQL and MariaDB, and PostgreSQL through forms. Networking brings an nftables firewall editor, Fail2Ban jails, and IPsec VPN settings. Tools adds File Manager, Custom Commands, and a Terminal that opens right in the browser. Hardware lists firmware, PCI, USB, storage, and sensor details. The dashboard keeps live CPU, memory, and disk gauges, stats history graphs, and a pending updates alert in view. Webmin Users limits each account to the modules it needs, while two-factor authentication, IP access control, and SSL settings guard the panel itself. Cluster modules reach other hosts registered in the Webmin Servers Index and run cron jobs, shell commands, and package installs on many servers at once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Artifact Keeper serves as a self-hosted universal software artifact repository that consolidates container images, application libraries, and infrastructure bundles under a unified management control plane. Software development teams can publish and resolve dependencies using their existing build tools, including Docker, Helm, npm, PyPI, Maven, Cargo, NuGet, and Terraform without installing proprietary client plugins. Remote repositories act as transparent pull-through caching proxies for public upstreams like Docker Hub and PyPI, accelerating internal CI/CD build speeds while insulating production pipelines from external registry outages. Virtual repositories combine multiple local, remote, and third-party endpoints into single URLs, resolving packages across prioritized internal teams and public registries automatically. Automated security scanners evaluate incoming packages for Common Vulnerabilities and Exposures using Trivy and Grype engines, assigning letter grades and enforcing quarantine policies to block vulnerable binaries before production release. Administrators can sign package metadata with cryptographic GPG keys, configure peer mesh replication across geographic regions, and manage team permissions using OpenID Connect, SAML, and granular access tokens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by over 36,000 GitHub stars and 120 contributors with 123 releases since 2022, 1Panel has rapidly become the go-to open-source alternative to cPanel and Plesk for modern Linux server management. The platform delivers a clean Vue.js dashboard powered by a Go backend using the Gin framework, providing visual management of Docker containers, images, networks, and volumes without touching the command line. Its curated app marketplace offers one-click installation of 165+ trusted open-source applications including Nextcloud, Bitwarden, Umami analytics, WordPress, and NocoBase, each running in isolated containers for maximum security. Native AI capabilities set 1Panel apart from every competing panel: deploy Ollama LLMs directly from the dashboard, spin up OpenClaw personal agents, monitor GPU utilization, and manage AI models through a unified interface. Website management includes automatic domain binding, Let's Encrypt SSL certificate provisioning, and Nginx configuration with zero manual setup. Security runs deep with built-in firewall rules, fail2ban integration, container isolation, WAF protection, and comprehensive audit logging enabled from day one. Automated backups support AWS S3, Cloudflare R2, and local storage with one-click restore from any snapshot. The panel supports Debian, Ubuntu, CentOS, and Rocky Linux across x86_64, aarch64, armv7l, ppc64le, and s390x architectures. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Trusted by over 60,000 organizations worldwide with more than 8,100 GitHub stars since 2010, Graylog has established itself as one of the fastest paths from raw log data to operational visibility, delivering centralized log management, security analytics, and compliance auditing through a purpose-built web interface with sub-second search at scale. The platform ingests logs from virtually any source via syslog, GELF, Beats, raw TCP/UDP, HTTP, CEF, IPFIX, and Netflow protocols, processing each message through configurable pipelines that parse fields, apply transformations, enrich events with GeoIP data from MaxMind or IPinfo lookup tables, and route messages to appropriate streams based on content rules. OpenSearch handles full-text indexing and storage with dynamic shard sizing that automatically calculates appropriate sizes from available node memory, while MongoDB stores configuration metadata including user accounts, roles, dashboards, alert rules, and pipeline definitions. The alerting system integrates with Slack, PagerDuty, and email with customizable notification templates and Replay Search links for immediate investigation context. Version 7.0 introduced MCP server integration for connecting preferred LLMs to perform AI-assisted log analysis and automation, while version 7.1 added Sigma detection rule import from private GitHub, GitLab, and Bitbucket repositories for detection-as-code workflows. The Sidecar agent management system centrally configures and deploys Filebeat, Winlogbeat, and nxlog collectors across infrastructure from the Graylog web interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. SSPL licensed.

Cron ran the job, or maybe it did not; Runwisp makes the answer impossible to miss. One small binary replaces both crond and your process supervisor: list scheduled jobs and long-running services in a single runwisp.toml, and it runs the jobs on time, restarts services when they crash, and keeps every line they print. Every run leaves evidence: exit code, duration, timestamps and full stdout and stderr, searchable across a task's whole history, with CPU and memory shown next to what that task usually uses. When a run fails, the dashboard shows why, with stderr and the end reason beside the retry button, and alerts head to Slack, Discord, Telegram, ntfy, Gotify, Pushover, email or a webhook before you find out the hard way. Missed runs catch up after downtime, overlapping runs queue, skip or kill by policy, and services get restart backoff and graceful shutdown. Manual runs take typed parameters, so the dashboard generates a form with choices and defaults from your config. Long output streams live with progress bars redrawing in place, and the same history opens in a terminal UI over SSH. The config file stays the source of truth: interfaces trigger and inspect, they never edit your TOML. No database to run, no runtime to install, just the binary and its embedded storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

When a ClickHouse cluster slows down, the answers are buried in system tables nobody wants to query by hand; CHMonitor turns those tables into an operations dashboard that explains what the cluster is doing and what to fix next. Live views cover running queries with elapsed time, memory, and a kill action, while history, failed, slowest, and most-expensive pages rank finished work by CPU, duration, and rows read, each with the full statement and one-click EXPLAIN. Thread-level analysis shows how a single query parallelized, and per-user summaries reveal which analyst or service is eating the cluster. Beyond queries, you get a merge and part-lifecycle timeline, replication queue and Keeper health, a live topology map of shards and replicas, storage breakdowns by database, table, and part, and a query activity heatmap spanning a year. An AI advisor reviews the workload and recommends skip indexes, projections, PREWHERE clauses, and TTL changes ranked by impact, with an MCP interface and built-in agent for asking questions in plain English; it recommends only and never applies DDL. Threshold-based health checks alert to Slack, Discord, PagerDuty, or Opsgenie, multiple ClickHouse hosts are watched from one dashboard, and a companion terminal UI covers quick checks from the shell. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Managing Kubernetes shouldn't require every developer to become a Kubernetes expert — KubeSphere wraps cluster operations, CI/CD, service mesh, and observability into guided web workflows that operations teams configure once and developers consume without kubectl. The LuBan extensible architecture treats each capability as an independently installable extension plugging into a lightweight microkernel: enable DevOps without service mesh, add monitoring without the app store, compose exactly what your organization needs. Multi-cluster management provides a centralized control plane for provisioning and operating clusters across cloud providers, data centers, and edge locations with unified identity and resource quotas. The DevOps extension integrates Jenkins for graphical pipeline creation with S2I and B2I workflows, while Argo CD powers GitOps continuous deployment with real-time sync status. Istio-based service mesh provides traffic management, canary deployments, circuit breaking, and distributed tracing through the console without CLI knowledge. Prometheus monitoring with custom dashboards, Fluentd log collection with multi-tenant search, and alerting via Slack and email complete the observability stack. Multi-tenant workspace hierarchy enforces resource quotas and fine-grained RBAC roles across teams. A built-in Helm-based app store handles lifecycle management across clusters. KubeKey deploys production-grade clusters on bare metal or VMs with air-gapped support. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Reaching 45,000 GitHub stars within seven months of launch, Multica is the fastest-growing open-source platform for managing AI coding agents as first-class teammates — assign an issue to Claude Code, Codex, Cursor, Copilot, Kimi, or any of 21 supported agent CLIs and it picks up the work, comments progress in real time via WebSocket, raises blockers, and hands the result back for human review before anything merges. The Go backend (Chi router, sqlc-generated type-safe queries, gorilla/websocket) connects to PostgreSQL 17 with pgvector for semantic search across workspace history, while the Next.js 16 App Router frontend delivers workspace dashboards showing per-agent token spend, execution time, daily cost charts, and runtime status across unlimited connected machines. Agent Skills provide reusable methods, reference material, and supporting files that compound across runs — a persistent knowledge layer that makes each subsequent task faster and more accurate. Squads let a leader agent select the right specialist for subtasks, creating multi-agent workflows without manual orchestration. Review gates ensure no AI-generated code ships to main without explicit human approval. Self-host via Docker Compose or Kubernetes with full Git integration across GitHub, GitLab, Gitea, and Forgejo including self-hosted instances. The CLI and REST API make every surface scriptable, and Autopilot automations trigger agent runs from events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed with additional conditions.

Every microservice has to find the others and learn its own settings, and Nacos is the discovery and configuration platform that answers both needs from a single server. Producers register instances with names, addresses, weights, and metadata, and consumers look services up or subscribe to changes, so a fresh instance receives traffic without hand-edited load balancer rules. Health checks drop dead instances from discovery results, while weight controls in the console shift traffic gradually during a rollout or drain a node before maintenance. Configuration lives apart from code: publish properties and YAML under a Data ID and Group, split environments with namespaces, and subscribed clients apply changes within seconds. History keeps every published version, so a typo is recoverable: rollback republishes an earlier value, and listener queries show which clients picked the change up. Gray releases push a new value to a chosen slice of instances first, so a risky flag reaches a fraction of the fleet before the rest. The registry covers AI building blocks too: MCP servers register their tools, prompts and skills carry versions and visibility, and agents publish discovery cards that gateways look up like any service. Spring Cloud, Dubbo, and Kubernetes workloads plug in through SDKs for Java, Go, Python, and other languages; run one standalone node for development or a Raft-backed cluster for production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 15,100 GitHub stars and seven years of battle-tested production use, OneDev replaces entire DevOps toolchains — GitLab, Jenkins, Jira, Artifactory — with a single Java application that runs comfortably on a 1-core 2GB server for medium-sized projects. The platform unifies Git hosting with ANTLR-powered language-aware code search and symbol navigation, pull request workflows with configurable branch protection rules and required reviewers, and customizable issue tracking with scripted state transitions that automatically advance issues when code is committed, builds pass, or deployments complete. The GUI-based CI/CD editor creates pipelines without writing YAML, supporting typed parameters, matrix builds, job templates, cache management, and artifact publishing in a single visual interface. Jobs execute via Docker containers, bare metal shell, Kubernetes pods, or distributed agent pools, with web terminal access for live debugging and the ability to pause running jobs for inspection. Built-in package registries handle Docker images, npm packages, Maven artifacts, NuGet libraries, PyPI wheels, and RubyGems without external infrastructure. AI users can be assigned to issues and pull requests to autonomously implement features, review code, fix CI/CD failures, and resolve merge conflicts. The automated Kanban board supports rule-based card movement, time tracking, timesheets, and service desk ticket creation via email. Cluster deployment enables project replication across servers for high availability and horizontal distribution for scalability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Type one command on the Salt master and ten thousand machines answer, because Salt publishes jobs to minions that subscribe, check whether the job targets them, and execute it in parallel before reporting results back. Configuration management describes the desired end state in YAML state files: which packages, files, services, and users should exist, and highstate runs converge every targeted minion toward that description with dependency ordering. Targeting goes far beyond hostnames, since grains describe each minion's operating system, hardware, and roles, and Pillar delivers per-minion secrets and settings rendered only for the machines that should receive them. Beacons watch services, load, disks, logins, and file changes on minions and emit events onto the bus, while reactors bind those events to prepared responses, so a failed service can restart itself and an administrator gets notified with the evidence attached. Orchestration runners coordinate multi-machine procedures in sequence, such as draining a load balancer pool, patching it, and returning it to service, and the master exposes HTTP APIs and pluggable returners that stream job results into your databases and dashboards. Machines that cannot run an agent are reached through Salt SSH, and Salt Resources target appliances and API endpoints that should be managed without a minion at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

OpenRun replaces the patchwork of CI/CD pipelines, reverse proxies, and identity providers that teams typically assemble when deploying internal tools, offering declarative GitOps-based deployment of web applications to Docker, Podman, or Kubernetes from a single self-hosted Go binary. Point it at a Git repository and it builds containers from AppSpec templates, routes requests by domain or URL path, provisions TLS certificates automatically, and scales idle applications to zero when unused. Blue-green staged deployments promote new versions through development, staging, and production environments with atomic rollback across multiple apps simultaneously. Every deployed application inherits SSO authentication through OAuth, OpenID Connect, or SAML providers alongside role-based access control, all configured once at the platform level rather than per app. Service bindings provision isolated PostgreSQL, MySQL, SQLite, or Redis credentials for each application, while Litestream integration replicates SQLite databases to S3 for automatic disaster recovery. The management console provides a web interface for monitoring containers, reviewing audit logs, configuring syncs, and managing server operations. AppSpec templates handle Streamlit, Gradio, FastAPI, Flask, and FastHTML projects out of the box, deploying existing Python applications without requiring custom Dockerfiles. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

AgentDock turns the computers and servers you already run into machines an AI assistant can operate for you through one secure MCP endpoint. Connect ChatGPT, Claude, Codex, or any other MCP client and the agent works in the real environment: reading and writing files, searching code, running shell commands, and driving Git where the project actually lives. Long jobs survive interruptions because task state and checkpoints persist on the node, ready to resume where they stopped. Browser work is covered as well, with web pages driven through a native Chrome DevTools connection that reuses your logged-in sessions, captures screenshots, and can even operate macOS desktop applications. Capabilities grow through installable Skills and dynamic MCP servers, so a node picks up new tools without a rebuild. Run a single node on a laptop, or spread nodes across VPS hosts and containers and pair them with the optional NexusDock console for one fleet view, shared Recall memory, reusable workflow templates, and a single MCP address for every machine. Access stays locked down with Bearer tokens or OAuth sign-in, loopback-only defaults, and optional Cloudflare Tunnel or HTTPS exposure when a remote client needs a way in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A single GPU can only hold so many models at once, and when a chat server, an image pipeline, and a voice engine all grab VRAM together, somebody runs out of memory and crashes. Berth fixes the scramble by making every engine lease the card: wrap a launch in berth run and the daemon grants memory in turn, queues the rest with an honest place in line and a start estimate, and drains a holder cleanly before the next load begins. The broker learns each engine's real footprint from its runs, so grants are sized by measured peaks instead of guesses, and processes that grab memory without a lease are reported as stowaways, never killed, with contested grants flagged in plain sight. A collisions board counts what the scheduling prevented: avoided collisions, VRAM handed off, drains, stuck releases, and refusals, and every count links back to a gap free event log you can follow live. The Harbor web UI turns that into a departures board of leases, a six hour tide of memory by holder, engine cards with decode throughput and a token ledger, plus a per model leaderboard and thirty days of stored history. Alerts reach your desktop or a webhook, Prometheus scrapes the metrics endpoint, and multi GPU machines can even pass one card through to a VM while the others keep serving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.