GoatCounter delivers meaningful web traffic insights — pageviews, referrers, browsers, screen sizes, country-level geolocation — without setting a single cookie, without collecting personal data, and without forcing GDPR consent banners on your visitors. Written entirely in Go and distributed as a single compiled binary consuming roughly 25MB of RAM, it adds just 3.5KB to your pages via the tracking script, with a JavaScript-free tracking pixel alternative for sites that avoid scripts entirely, plus backend middleware integration and log file import for server-side collection. The dashboard displays pageview counts per path with hourly resolution, referrer sources grouped by domain with full URL on hover, browser and OS version breakdowns, screen size distributions, and country-level location data derived from IP addresses that are immediately discarded after geolocation. Campaign tracking supports UTM parameters and custom data attributes. A public stats option exposes your dashboard at a shareable URL for build-in-public transparency. SQLite serves as the default database requiring zero administration, while PostgreSQL handles higher-traffic deployments with multi-site setups. Built-in ACME and TLS certificate management eliminates reverse proxy requirements for HTTPS — no Nginx or Caddy needed. The REST API provides programmatic access to all analytics data. Deploy as a single binary, via Docker with the official arp242/goatcounter image, or through native packages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EUPL-1.2 licensed.

Arcane gives you a single polished dashboard to manage Docker containers, images, volumes, networks, and Compose projects across unlimited remote hosts. The SvelteKit frontend paired with a Go backend delivers real-time resource monitoring with historical graphs, container lifecycle controls including shell exec and live log streaming, and one-click Docker Compose deployment with Git repository synchronization for version-controlled stack definitions. The manager-agent architecture connects remote environments via Direct TCP on port 3553 or Edge mode where agents initiate outbound gRPC/WebSocket connections through NAT and firewalls without requiring inbound ports, all secured with mTLS certificates. Vulnerability scanning identifies security issues in running container images directly from the interface. The backup system enables scheduled container snapshots with configurable retention for disaster recovery. Network and volume administration includes visual relationship mapping between services, and the responsive interface supports dark/light themes with full mobile optimization and community-driven internationalization via Crowdin. 6,500+ stars and 89 releases since April 2025 reflect a rapid development cadence. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

With over 75,000 GitHub stars and native apps across macOS, Windows, Linux, iOS, and Android, AppFlowy is the most widely adopted open-source alternative to Notion — delivering the same block-based workspace model with full data sovereignty. The Flutter frontend renders natively on every platform while a Rust backend powered by Actix-web and Tokio handles CRDT-based real-time collaboration, ensuring sub-second sync across devices with conflict-free concurrent editing. Relational databases support grid, board, kanban, calendar, and gallery views over the same dataset, with two-way relations, rollups, advanced filters, sorts, and formula calculations that cover the majority of Notion's database workflows. The block editor supports 40+ content types including nested pages, toggles, callouts, code blocks with syntax highlighting, embeds, and slash-command insertion. AI integration connects to OpenAI, Anthropic, or local models via Ollama for writing assistance, summarization, and translation — all without sending data off-premises when using on-prem LLMs. Team spaces with workspace-level and per-page permissions, OAuth and SSO authentication through GoTrue, and S3-compatible object storage via MinIO provide enterprise-grade access control and file management. The self-hosted stack deploys through Docker Compose with PostgreSQL for metadata, Redis for caching and pub/sub, and a dedicated background worker for imports and email notifications. Offline-first architecture ensures the desktop app functions without connectivity, syncing changes when the connection resumes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 14,000 GitHub stars and a mission to become the world's most trusted document-signing tool, Documenso delivers a beautifully designed electronic signature platform that organizations can self-host for complete data sovereignty. The signing workflow handles everything from simple one-party signatures to complex multi-recipient documents with configurable roles including signers, approvers, viewers, and CC recipients, each with distinct permissions and notification flows. Document templates enable reusable signing packages with pre-configured fields and recipient patterns, eliminating repetitive setup for contracts, NDAs, and onboarding documents that teams process regularly. The PAdES-standard implementation ensures digital signatures are legally compliant and cryptographically verifiable, with complete audit trails documenting every action from document creation through final signature. Direct link signing allows recipients to access documents without email, enabling embedded signing experiences within existing applications and websites. The REST API provides programmatic document creation, recipient management, and webhook notifications for integrating signature workflows into CRM systems, HR platforms, and custom business applications. Team management features organize users into groups with role-based permissions, custom branding per team, and centralized billing for organizations with multiple signing workflows. SSO integration supports standard authentication providers for enterprise identity management. The TypeScript codebase built on Next.js and Prisma with PostgreSQL makes customization and contribution accessible to modern web developers. Zapier integration connects Documenso to thousands of third-party applications for automated document routing. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PandaDOS is a self-hosted control plane that turns Claude Code and Codex into long-running coding agents you direct through an issue queue from any browser, instead of babysitting a terminal. You file an issue with the outcome and acceptance criteria, and PandaDOS clarifies missing requirements, plans the work, picks the agent, and drives implementation, verification, and delivery in stages. Three approval levels, cautious, balanced, and automatic, decide which actions proceed alone; safe reversible steps continue automatically while destructive, irreversible, production, or secret-related decisions always come back to you. The browser workspace shows the real agent conversation, a native terminal, project files, Git history and diffs, and an execution summary, so you can inspect or intervene at any moment from a phone or laptop. Agents run on local or SSH-connected executor machines inside tmux sessions, and work sharing one repository is serialized while independent projects proceed in parallel without conflicting edits. Modules keep one assigned agent and durable project knowledge, so context from finished issues carries into the next task instead of evaporating when a chat ends. Teams can sign in through Feishu, ask the project manager questions in chat, and receive subscription notifications and approval cards on their phones. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Send a document, receive a PDF: Gotenberg is a Docker-based, stateless HTTP conversion API trusted in production by thousands of companies and adopted by notable open-source projects. Send files as multipart/form-data, get a PDF back; Chromium, LibreOffice, and fonts are the container's problem, not yours. Headless Chromium handles URLs, HTML templates, and Markdown with pixel-perfect browser rendering: it executes JavaScript, loads web fonts, waits for network idle, a JS expression, or a DOM selector before rendering SPAs, and accepts injected cookies and HTTP headers for authenticated pages. LibreOffice converts 100+ office formats - .docx, .xlsx, .pptx, and legacy formats - with page-range extraction and PDF/A archival conformance. Built-in PDF engines round out the pipeline in every image variant: merge, split, rotate, flatten, encrypt, watermark, stamp, read/write metadata and bookmarks, plus Factur-X/ZUGFeRD e-invoicing and PDF/UA accessibility compliance. Screenshots of URLs and HTML come from the same endpoints. Zero-transfer pipelines stream files directly between S3, MinIO, or GCS presigned URLs and Gotenberg, bypassing your application entirely, and webhooks enable async processing. Statelessness means horizontal scaling is trivial - run as many replicas as your conversion volume demands. Three image variants (full, Chromium-only, LibreOffice-only) trim the footprint to what you actually use.

Ollaya serves decision models that answer typed questions about a message, ticket, or document with calibrated probabilities, through a self-hosted API shaped like the hosted service it can replace. Send a state, which can be an email, a support ticket, or any JSON, plus typed choice, score, and yes or no questions, and the model answers in one forward pass in milliseconds without generating text. Pull models by name the way Ollama users already know, with run, list, ps, show, copy, and remove commands managing the local store. Downloads verify every layer against its sha256 digest, resume when interrupted, and share blobs between models so storage stays lean. Existing TypeSafe code keeps working by changing one environment variable, because the /v1/systemone and /v1/decisions endpoints are wire-identical and the official SDK sends its key the same way. The native /api adds routing information and timings, model loading and unloading, and streamed pull progress for your own tooling. Put it to work triaging inboxes, routing requests to the right model or team, screening prompts for injection and jailbreak attempts, or replacing per-token LLM classification calls with a local answer. Agents reach the same engine through the bundled MCP server, and LiteLLM, LangChain, DSPy, LlamaIndex, n8n, and Dify connect through their existing integrations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Waiting for the right moment to buy usually means refreshing product pages for weeks, so PriceBuddy does the refreshing for you and speaks up when the price is right. Paste a product URL and it fetches the details and price, then rechecks on a global schedule or a per-product interval from every 5 minutes to every 24 hours. Stores are scraped with CSS selectors, regular expressions, or JSONPath, a headless browser covers JavaScript-heavy shops, and an optional AI provider (OpenAI, Anthropic, Gemini, or local Ollama) can recover missing prices or repair broken selectors. Attach several URLs to one product to compare retailers or marketplace listings, with in-stock, pre-order, and discontinued states shown beside each source. Unit pricing reveals the real cost per tablet or bag when multi-packs distort shelf prices, while history charts show minimum, maximum, and average over time. Alerts fire on a target price, a drop threshold, or a back-in-stock event and arrive by in-app notice, email, Pushover, Gotify, Apprise, Telegram, Discord webhook, or ntfy. Tags sort products into draggable dashboard groups, with optional smart sections for what to buy now, recent drops, and failed checks. Each user keeps separate products and settings, a REST API with scoped tokens serves your scripts, and a Chrome and Edge extension tracks items from the page you are viewing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With 15,500 GitHub stars and over 1,100 forks, Plandex delivers a terminal-based AI coding agent purpose-built for the complex, multi-file tasks that overwhelm single-file AI assistants. The Go-powered server maintains a cumulative diff review sandbox that quarantines all AI-generated changes from your project files until you explicitly approve them — enabling 20-file refactors where you cherry-pick good changes and reject bad ones without touching git. A 2M token effective context window loads only what each step requires, while tree-sitter project maps index repositories exceeding 20M tokens across 30+ programming languages, providing structural awareness of class hierarchies, function signatures, and import graphs without burning tokens on full file content. The configurable model pack system assigns different models to different roles — Claude for planning, GPT for coding, Gemini for summarization — supporting Anthropic, OpenAI, Google, OpenRouter, Azure OpenAI, AWS Bedrock, DeepSeek, Perplexity, and Ollama for local models. Full auto mode handles end-to-end autonomous workflows including high-level planning, context loading, implementation, terminal command execution, and automated debugging of both terminal and browser applications. The interactive REPL provides fuzzy auto-complete, version-controlled sandbox branching, rewind to any previous point, and Git integration for commit message generation. The Plandex Server exposes 60+ REST API endpoints for programmatic orchestration across organizations, projects, plans, and branches. Deploy via Docker Compose for self-hosted operation with your own API keys. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Gaining over 71,000 GitHub stars as one of the fastest-rising knowledge management platforms, AFFiNE merges the document editing capabilities of Notion, the infinite canvas of Miro, and the structured data of Airtable into a single cohesive workspace. The block-based editor built on the custom BlockSuite framework supports rich text, code blocks, embeds, tables, kanban boards, and database views with drag-and-drop composition. The whiteboard mode provides an infinite canvas where users can freely mix documents, sticky notes, shapes, connectors, and hand-drawn elements, enabling visual thinking alongside structured note-taking. Real-time collaboration allows multiple users to edit documents and whiteboards simultaneously with cursor presence, comment threads, and version history. The local-first architecture stores all data on your device by default using CRDT-based synchronization, ensuring offline access and data sovereignty, with optional cloud sync for cross-device availability. Workspaces organize content into hierarchical page trees with full-text search, favorites, tags, and trash management. The platform supports Markdown import and export, PDF export, and HTML export for interoperability. AI features powered by configurable LLM providers enable writing assistance, summarization, translation, and content generation directly within documents. The theming system supports light and dark modes with customizable accent colors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Licensed under MIT with an open-source self-hosted edition.

Running a VPN for family, friends, or a small team usually means babysitting servers one SSH session at a time, and Mistgate replaces that with one panel that keeps the whole fleet configured. Add a server from the browser by typing its address and root password: the panel pins the host key, checks the host, opens the ports, and installs the signed node agent for you. Each person gets one subscription link that their app turns into the server list, or a personal AmneziaVPN key per device, so a lost phone can be revoked without touching anyone else. Groups decide which protocol profiles a person receives, while per-user traffic quotas, expiry dates, device limits, and per-device speed limits keep sharing fair. Hysteria2 brings QUIC-based speed with port hopping, obfuscation, and certificate options; VLESS REALITY and AmneziaWG 2.0 and 3.1 cover networks where one protocol gets blocked, and Cloudflare WARP can serve as the exit for all three. Every five minutes the panel connects to each server the way a real client app would, a doctor on every node runs host checks with safe fixes, and alerts reach you on Telegram before your users notice. The public address shows strangers a decoy site while the admin hides behind a secret path, and encrypted backups go to your Cloudflare R2 bucket on a schedule. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 34,000 GitHub stars and backing from a well-funded engineering team, Tailscale has fundamentally simplified how developers and system administrators think about secure networking. The client daemon establishes WireGuard tunnels directly between devices using sophisticated NAT traversal techniques, achieving direct peer-to-peer connections in the vast majority of network configurations without requiring port forwarding, firewall rules, or VPN concentrators. When direct connections prove impossible due to restrictive network environments, DERP relay servers provide encrypted fallback paths. MagicDNS assigns human-readable hostnames to every device on the network, eliminating the need to remember IP addresses across a tailnet. Subnet routing allows nodes to advertise access to entire local networks, enabling remote access to office resources, home labs, or cloud VPCs through a single gateway node. Exit node functionality routes all internet traffic through a designated device for privacy protection or geographic flexibility. Access control lists define granular policies for which devices and users can communicate with which services, enforced cryptographically at the network layer. The authentication layer integrates with identity providers including Google, Microsoft, GitHub, Apple, and OIDC-compliant systems for single sign-on access. Taildrop enables direct encrypted file transfers between devices without cloud intermediaries. The tailscale CLI provides complete network management from the terminal including status monitoring, route advertisement, and node configuration. Running Tailscale on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console provides a permanent, always-on node in your mesh network. BSD-3-Clause licensed with an active open-source community.

Used by millions of users at thousands of organizations worldwide and holding 29,000+ GitHub stars, Redash is the most established open-source SQL-first business intelligence tool — enabling anyone from analysts to executives to query databases, visualize results, and share dashboards without writing a single line of application code. The browser-based query editor supports SQL and NoSQL with schema browsing, auto-complete, query snippets, and parameterized queries that turn static reports into interactive data applications. Native connectors span 35+ data sources including PostgreSQL, MySQL, Amazon Redshift, Google BigQuery, Snowflake, ClickHouse, MongoDB, Elasticsearch, Databricks, Apache Presto, Microsoft SQL Server, and REST APIs — with an extensible data source API for custom integrations. Visualization types cover line, bar, area, pie, scatter, box plot, funnel, cohort, sankey, sunburst, choropleth map, and pivot tables, all draggable onto shared dashboards with cross-filtering parameters. Scheduled refreshes automatically update query results at configurable intervals, while threshold-based alerts notify teams via email, Slack, or webhook when metrics cross defined boundaries. SAML and Google OAuth SSO integration, role-based access control, API key management, and query-level permissions ensure enterprise-grade security for sensitive datasets. The self-hosted stack deploys via Docker Compose with PostgreSQL for metadata storage, Redis for job queuing, and Celery workers for background task execution. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

Your team's group chat could have a colleague who has read every email, ticket, and document, remembers all of it, and answers in seconds; MindRoom puts AI agents like that into your chat rooms as full participants. Each agent is a real user on the open Matrix protocol, so you talk to it in MindRoom Chat on web or mobile, in any other Matrix client, or through bridges in Slack, Telegram, WhatsApp, and Discord. Give every agent its own model: a local model for private rooms, a frontier model for hard coding problems, and switch per room or thread whenever the work changes. Agents connect to more than 100 tools, including Gmail, calendars, GitHub, Google Drive, Home Assistant, and any MCP server, and they search your own documents and knowledge bases for answers with sources. Memory persists across conversations and platforms, so an agent remembers people, preferences, and project context months later and can turn repeated work into reusable skills. Before an agent sends an email or runs a command, an approval card shows exactly what will happen; you tap once to allow it, and sandboxed workers keep executed code away from your credentials. Schedule morning briefings, silent inbox checks, and recurring digests in plain language, or wake an agent from any other system with a single HTTP request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

The utilities engineers otherwise scatter across a dozen ad-laden websites - 80+ of them - live together in IT-Tools, one fast, polished web app. Crypto covers JWT decoding, MD5 through SHA-512 hashing, HMAC and bcrypt generation, RSA key pairs, and password strength analysis. Converters handle JSON to CSV, YAML, and TOML, Base64 files, URL encoding, HTML entities, color formats, and Docker run commands to Compose files. Generators produce UUIDv4, ULID, BIP39 mnemonics, QR codes (including Wi-Fi QR), and tokens; text tools include a regex tester, diff viewer, slug and case converters; web utilities parse URLs and user agents, look up HTTP status codes and MIME types, and inspect Open Graph metadata; plus a cron parser, chmod calculator, and more. The privacy argument is the point: JWTs contain user IDs, hashes derive from passwords, JSON dumps hold PII - exactly the inputs you least want a third-party utility site to log. IT-Tools is a frontend-only static bundle (Vue/TypeScript, GPL-3.0, 39k+ GitHub stars) served by Nginx in one container, so everything runs client-side on your infrastructure with nothing transmitted anywhere. New tools ship roughly monthly, and a scaffolding script makes adding custom ones straightforward.

If editors should publish without waiting on developers, and developers should keep full control of the design, Umbraco is the free content management system built around that split. A page begins in the Block Grid editor, where reusable blocks nest inside Areas and each block is sized on a column and row grid. Live preview shows the result before anything goes out. Publish and unpublish times can be scheduled in the editor's own time zone, and any page can roll back to an earlier version from its Info tab. One content node can exist in several languages, and split view puts two of them side by side. The Media section holds images, video, and other files. Visitors can register and log in as members, new members can be placed in member groups, and pages can be hidden from anyone not logged in. On the code side, templates and partial views shape the front end, while the opt-in Content Delivery API returns content items as JSON for mobile apps and any other front end. Webhooks notify outside services when content is published, unpublished, or deleted. Custom dashboards and property editors extend the backoffice, and the Marketplace lists open-source and commercial packages for the rest. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most design tools stop at prototyping; Quant-UX also measures how real users actually perform with the prototype. The visual editor creates prototypes that behave like real apps - functional input widgets, animations, form validation, data binding across screens, and business logic modeled with REST requests and decision elements. Design systems are first-class, with components, design tokens, and master screens; if you design elsewhere, drop in image files or import from Figma. Testing is a shared link or QR code - no installs on the tester's side. Define user tasks up front, and Quant-UX records every session: click heatmaps show where users found (or missed) actionable elements, user journey graphs expose lost users, drop-off charts reveal where tasks stall, and success rates and task KPIs are extracted automatically into a dashboard. An A/B test operator wires two design variants into one prototype and compares task duration, success rate, and interaction counts. In-prototype surveys collect qualitative feedback alongside the numbers, and an AI assistant generates prototype fragments like styled forms on request. The RepoCloud deployment runs the full stack - frontend, backend, and WebSocket server containers over MongoDB - so all test recordings and research data stay on your infrastructure.

TREK coordinates group expeditions and vacations through a collaborative travel planning workspace that unifies daily itineraries, interactive route maps, shared expense budgets, and packing lists. Travel groups can build day-by-day timelines by dragging activities between dates, attaching transit bookings with flight numbers, and estimating driving intervals directly on OpenStreetMap and Mapbox canvases. Instant WebSocket synchronization mirrors itinerary edits, group chat messages, and decision poll votes across all traveling companions simultaneously without page refreshes. The integrated multi-currency expense manager tracks shared expenditures across lodging, dining, and transit categories, automatically calculating per-person debts and generating simplified debt settlement summaries. An interactive world atlas highlights visited nations and tracks lifetime travel statistics, enabling globe-trotters to manage personal bucket lists and review past journeys. Travelers can organize shared packing checklists from reusable equipment templates, monitor real-time weather forecasts powered by Open-Meteo, and export comprehensive travel schedules to printable PDF guides and calendar feeds. Role-based permission controls safeguard sensitive travel documents and boarding pass uploads while allowing guests to contribute notes and vote on activities. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.