Schema design with no account and a few clicks: drawDB is the browser-based entity-relationship diagram editor and SQL generator - an AGPL-3.0 React project with over 37,000 GitHub stars. Draw tables with columns, data types, defaults, and constraints; connect fields to create foreign-key relationships; group tables into labeled subject areas; and annotate with notes. When the design is ready, one export produces CREATE TABLE DDL - with constraints, indexes, and foreign keys - targeted at MySQL, PostgreSQL, SQLite, MariaDB, SQL Server, or Oracle. Diagrams can be database-specific, unlocking every native type plus dialect features like PostgreSQL enums and composite custom types, or generic for portability across all supported flavors. The reverse direction works too: paste existing DDL into the import dialog and drawDB renders your live schema as a navigable diagram - the fastest way to document an inherited database. Versioning and migration-script generation track schema evolution, full editor ergonomics (undo/redo, copy/paste, duplicate, themes) keep iteration fast, and diagrams export as PNG, SVG, or shareable JSON. Everything runs client-side against browser storage - no backend database connection needed - so the self-hosted Docker deployment is a featherweight static app that keeps proprietary schema designs entirely on your infrastructure.

Point a browser at your server's folders and skip the FTP clients, the SSH tunnels, and the heavyweight cloud clones: Mikochi turns any directory on your machine into a clean web file browser you can open from anywhere. You browse nested folders in a fast list view, jump to files with fuzzy search, upload new material, create folders, rename items, and delete what is no longer needed. Whole directories come down as a single tar.gz archive, which makes backups and bulk transfers painless. Media files get a smarter treatment: Mikochi generates streaming links that open directly in VLC or mpv, so a film or album stored on the server plays on your screen without downloading gigabytes first. Access stays protected behind a username and password login with JWT sessions, and you can serve everything over TLS with your own certificates or disable authentication entirely on a trusted private network. Deployment takes one Docker command with a mounted data directory, and Kubernetes users get an official Helm chart. Homelab owners point it at a NAS share, developers drop it on a build box, and anyone tired of scp commands gets a permanent window into their files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Admidio is membership management software for clubs, associations, and groups, built so that every permission follows from the roles a person holds. Organizers define roles such as board, youth team, or trainers, decide who may email or see each one, and grant module rights like managing events, editing contacts, or uploading photos with simple switches. Contact records use customizable profile fields, record relationships such as parent and child, and can be imported in bulk or exported as vCards. New members register online and administrators review each request. Events carry dates, venues, calendars, and participant lists with sign-up, and the schedule downloads as iCal. Messages go as HTML email to individuals, roles, or groups, and members also find announcements, a categorized forum, document folders with role-based access, and photo albums with e-cards. The inventory manager tracks equipment, who holds it, and its borrowing history. Optional two-factor login protects accounts, a change history can be switched on for every module, and single sign-on lets other applications authenticate against the member database. Twenty-five languages are included, the interface installs as a progressive web app, and sub-organizations can be managed from the same installation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

A folder of loose audiobook chapters goes in; a single, perfectly tagged m4b library comes out. Bragibooks is the operations board for that transformation: you select a batch of audiobook folders from your server, and it searches AudiobookDB to match each one with the right title, author, narrator, and release, with a custom search on hand when the first match is wrong. Confirmed books enter a processing queue where m4b-merge merges split mp3, m4a, and m4b parts, converts formats, strips stale metadata, and writes clean, consistently tagged files while you watch the live job output in your browser. Saved output profiles let you route different batches to different directories or path formats, and the books library keeps every finished title with its metadata, files, and processing history a click away. The whole thing runs as one container with the interface built in, a SQLite database on a mounted config volume, and access restricted to your local network by default, with an optional API key for external tools. Audiobook collectors use it to tame download folders before importing into their player of choice, and hoarders of split-chapter rips finally get uniform Chapter 01 style files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Private npm packages without shipping code to the public registry or paying for npm Enterprise: Verdaccio is the standard lightweight, zero-config private registry and caching proxy. It runs as a single Node.js process with its own tiny embedded database; no external database is required to start. Point npm, yarn, or pnpm at it and everything behaves as expected: install, publish, unpublish, dist-tags, and deprecation all work against the standard npm endpoints. The uplink system is where it earns its keep: packages not found locally are fetched from configured upstreams (npmjs.org, yarn, JFrog, Nexus, or another Verdaccio), cached as tarballs, and served locally thereafter - cutting CI latency and surviving registry outages. Multiple uplinks chain for failover, and per-package glob patterns in config.yaml route scopes to specific upstreams while controlling access, publish, and unpublish rights per group. You can even override a public package by publishing a patched version under the same name locally. A plugin architecture swaps in auth backends (htpasswd default, LDAP and others available), storage drivers (S3, Google Cloud Storage), middleware routes, and metadata filters. With official Docker images and a Kubernetes Helm chart, it slots into any pipeline in minutes.

With nearly 9,000 GitHub stars and adoption by over 60,000 companies across 100 countries, Papermark is the open-source DocSend alternative that turns document sharing into a data-rich conversation between you and your viewers. Every shared document generates page-by-page analytics showing exactly which pages capture attention, how long viewers spend on each section, where they drop off, and whether they return for a second look, with real-time notifications the moment a document is opened. Virtual data rooms support unlimited folders with drag-and-drop organization, bulk uploads, granular per-viewer permissions, dynamic watermarking that stamps each page with the viewer's identity, and NDA gating that requires agreement before access. Custom branding applies your logo, colors, and custom domain to every shared link and download page, while email verification and password protection add authentication layers. The AI Data Room Copilot lets viewers chat with uploaded documents, ask questions, and receive contextual summaries directly within the data room interface. The developer platform exposes 43 REST API operations covering data rooms, documents, folders, links, visitors, and analytics, with an MCP server for AI agent integration and a CLI for automation. Built on Next.js with TypeScript, Prisma ORM, PostgreSQL, NextAuth.js authentication, and shadcn/ui components. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

Somewhere in your house, a presenter is introducing the next record, and that presenter is a language model running on your own server. Deadair builds you a real radio station rather than another playlist: it picks records from your Navidrome, Jellyfin, Emby, or Plex library, or from Spotify, YouTube Music, Pandora, and Apple Music, writes what the host says between songs, speaks it in that host's own voice, and broadcasts the result as one shared live stream over Icecast, with no skip button and the same show for every listener. From the console you steer it in plain sentences: tell it "rap like Snoop Dogg" and the next hours programme themselves to that brief, or ask why the record on air was chosen and get an answer. The forward lineup runs several hours deep, visible and editable, and nothing reaches air until its audio is already on the machine, so the stream never stutters waiting on a download. Words and voice are separate choices, swapped live in Settings: break-writing can run on a hosted model while a local Kokoro or Chatterbox voice reads it, and a station with no model at all still talks. Twenty-seven bundled plugins cover music sources, metadata, news, weather, and speech, and third-party plugins install from the console. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Links rot - the hard truth Linkwarden is built around, as a collaborative bookmark manager that preserves what it saves. Every page you save is fully preserved - a screenshot, a PDF, a self-contained single-file HTML archive (generated by the Monolith Rust binary), and a clean reader view - so the content survives even after the original site disappears. Think of it as a private Wayback Machine you own, with an optional one-click snapshot to archive.org on top. The reading experience matches the archival rigor: a distraction- free reader view supports text highlighting and annotation, and full-text search across everything you have saved is powered by Meilisearch. Optional AI tagging analyzes page content and auto-assigns tags - generate new ones, pick from your existing set, or constrain to predefined tags - with providers ranging from local Ollama models (fully private) to OpenAI, Anthropic, and OpenRouter. Organization is collections, sub-collections, and multiple tags per link; teams collaborate on shared collections with per-member permissions, and public collections share curated link sets (with preserved copies) to anyone. The stack is Next.js/React on TypeScript with PostgreSQL via Prisma, NextAuth supporting credentials, OAuth2, and SAML SSO, and a Playwright-driven headless Chromium worker doing the capture. Native iOS and Android apps and browser extensions feed it from anywhere.

Write one post and Shoutrrr publishes it across X, Bluesky, LinkedIn, Facebook, Instagram, Threads, and Discord at the same moment, or holds it in a queue until the slot you picked. The composer counts characters against each network's limits as you type, attaches media with alt text, adjusts wording per platform when a message needs a local tweak, and splits long posts into threads where the network supports them. Recurring posting slots follow your workspace timezone, drafts drop into those slots from a month calendar, and anything can still go out instantly when news breaks. Every target publishes independently and retries on its own when a network hiccups, leaving a per-attempt trail you can inspect instead of a silent failure. Analytics chart follower and post-count trends for each account and report likes, reposts, replies, and impressions per post wherever the network's API allows. Teams share workspaces with role-based memberships and email invitations, keep clients in separate workspaces, and get in-app alerts the moment a post lands, fails, or needs an account reconnected. Account tokens sit encrypted at rest and refresh themselves, sign-in supports two-factor codes and passkeys, and the built-in MCP server hands AI assistants 22 tools to draft and schedule while publishing, retrying, and deleting refuse to run without your explicit confirmation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Eliminate scattered configuration files and leaked credentials across development teams with Shelve, an open-source secrets management platform that secures environment variables across development, staging, and production tiers. Engineering teams can organize sensitive database passwords and third-party API credentials within a centralized vault protected by AES-256 encryption and SHA-256 integrity verification. The platform synchronizes configurations directly to GitHub Actions and repository secret stores through an official GitHub App integration. Developers can inject encrypted variables directly into local processes using the dedicated CLI without saving plain-text secrets to disk. The built-in sharing vault creates self-destructing, password-protected links to exchange sensitive credentials securely with external contractors. Administrators can define custom workspace teams with granular role-based access controls, track change audit logs across configuration histories, and navigate management views using a keyboard-driven command palette. Automated schema validation engines detect missing parameters and enforce uniform uppercase naming standards across application tiers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Universal database administration across modern enterprise infrastructure is simplified through dbx, a lightweight web client and SQL studio supporting over ninety database engines. Database administrators connect to MySQL, PostgreSQL, SQLite, Redis, MongoDB, ClickHouse, DuckDB, Oracle, and Microsoft SQL Server through authenticated network connections and encrypted SSH tunnels. The interactive query editor provides real-time multi-schema autocomplete, syntax linting, execution plan analysis, and natural language SQL query synthesis powered by configurable large language model backends. Teams visualize complex relational database architectures using interactive entity-relationship diagrams that map table foreign key constraints, primary indexes, and table partition layouts automatically. Operators inspect live Redis memory usage breakdowns, monitor real-time server command throughput, and manage key expirations without opening raw terminal sessions. The editable data grid supports multi-row modifications, foreign key reference lookups, CSV and JSON exports, and binary blob data inspection directly inside the browser viewport. Software developers expose connected databases directly to external AI coding assistants through native Model Context Protocol server endpoints. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Excaliself turns the Excalidraw canvas into your team's own whiteboard server, where every sketch, diagram, and flowchart lives in your database instead of a vendor's cloud. The home screen works like a file cabinet for drawings: nest them in folders, star the keepers, drag files between spaces, and find anything again by title or by the text inside the drawing. Share a link and teammates edit together in real time with live cursors and follow mode; links can stay members-only or open to guests who have no account at all. A shared Team space sits next to everyone's private space, and one team library holds the shapes and icons the whole group reuses. AI clients can join with a personal access token: Claude Code or Claude Desktop can search your drawings, read what a diagram says, and create new ones from shapes or a Mermaid flowchart. Accounts are invite-only, single sign-on covers Google, Microsoft, and any OIDC provider, and admins manage members, roles, and password resets from Settings. Deleted drawings rest in a trash folder for thirty days before they are purged, and everything auto-saves as you draw. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 6,500 GitHub stars, HolaOS bills itself as an "open agent computer" that reimagines the traditional operating system as a shared workspace where humans and AI agents collaborate across files, browsers, and 100+ integrated tools simultaneously. Unlike chat-only interfaces, HolaOS places live application UIs—Notion-style editors, browsers, custom workspace apps—side by side with the agent conversation, so operators always see what agents are doing and can intervene at any moment. The persistent memory system stores workspace knowledge locally as Markdown files and embedded vectors via SQLite vec, enabling RAG-powered recall that survives session boundaries without the typical context window bloat. Safe Session Compaction reserves roughly 70% of the model context window for fresh reasoning while folding older history into structured checkpoints that retain goals, constraints, progress, and decisions. Agents connect to Linear, GitHub, Slack, Jira, HubSpot, Gmail, and dozens more through one-click OAuth, automatically fetching relevant signals and converting scattered app data into working memory. BYOK support for Claude, GPT, and Gemini models lets operators use their own API keys at zero markup, while built-in Kimi K3 and GLM-5.2 models provide ready-to-use alternatives. Skills package reusable workflows that any agent can invoke on demand, and scheduled triggers enable autonomous digests, monitors, and reports. The runtime supports independent server deployment alongside the desktop client. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Modified Apache 2.0 licensed.

Zigbee2MQTT bridges a Zigbee smart home network to MQTT so bulbs, switches, sensors, and locks from hundreds of vendors work with your own automation server instead of each manufacturer's cloud bridge. It supports 5,798 devices from 608 vendors, so a Philips Hue bulb, an IKEA TRÅDFRI switch, an Aqara sensor, and a Tuya plug can all join one coordinator and speak one protocol. The built-in frontend on port 8080 shows every paired device with its link quality, battery level, and live state, and lets you rename, reconfigure, bind, or remove devices without editing YAML. A network map view charts which routers carry traffic for which end devices, making weak spots and dead zones visible before automations start failing. Groups collect devices that should act together, scenes capture lighting states for a room, and bindings let a switch talk directly to a bulb even when the server is briefly offline. Firmware stays current through over the air updates you can trigger or schedule per device from MQTT topics or the frontend, including downgrades when a new release misbehaves. Home Assistant picks everything up automatically through MQTT discovery, while openHAB, Domoticz, and Node-RED flows subscribe to the same plain JSON topics. The coordinator plugs into the host by USB or joins over the local network, while the bridge, frontend, and broker traffic run headlessly beside Mosquitto or EMQX. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

A campaign engine wrapped around a contact database: Mautic, the largest open-source marketing automation platform, replaces HubSpot or Marketo without per-contact pricing. Contacts arrive through forms, landing pages, imports, or the REST API and flow into segments: dynamic filters that update automatically from behavior, custom profile fields, or point scores. Segments decide who qualifies; campaigns decide what happens. The drag-and-drop Campaign Builder composes multi-step workflows from actions, positive/negative decision trees, and conditions (field values, tags, device type, segment membership, point thresholds), with static or relative delays, a Jump-to-Step action for moving contacts between branches, and handoffs that push contacts into CRMs or entirely different campaigns. Messaging covers email, SMS, and web/app push out of the box, with A/B testing and a drag-and-drop email builder; dynamic website content swaps page sections per known contact. Lead scoring assigns points for clicks and visits with decay for inactivity, while stages track funnel position. Native integrations cover Salesforce, HubSpot, Zoho, and Dynamics, plus a full REST API for custom sync. It runs on PHP and MySQL with cron jobs processing campaigns and segment rebuilds - self-hosting keeps your entire contact database and behavioral history under your control.

After the bills are covered, how much is actually safe to spend? monetr organizes an entire budgeting application around that one question. Inspired by the defunct Simple bank, it budgets paycheck by paycheck rather than month by month. Funding schedules encode when you get paid - including multiple schedules per account and a weekend-exclusion option for deposits that land early - and every expense or savings goal is tied to one. monetr then calculates how much of each recurring obligation (rent, car payment, subscriptions, on any repeat interval) to set aside from each paycheck, so a large bill never has to come out of a single check. What remains after allocations is surfaced as Free-To-Use, and a forecasting timeline projects contributions, due dates, and leftover funds forward so low-balance periods are visible before they happen. Transactions arrive either as OFX uploads from your bank or automatically through a Plaid connection using your own API credentials, keeping balances and transactions synced without manual entry. The app is mobile-friendly and installable as a PWA on desktop or phone. Self-hosting via Docker Compose is completely free, with all source code public and your financial data on your own hardware.

Fail2Ban quietly bans thousands of bots on a typical VPS and just as quietly keeps the whole story buried in a log file nobody reads, and Fail2Ban Report digs that story out into a dashboard you will actually open. Shell scripts convert each day of fail2ban.log into JSON, and the web interface lays every ban and unban on a searchable, filterable timeline you can slice by jail, server, or time window. Aggregated statistics for today, yesterday, seven days, and thirty days show which jails absorb the most attacks, while markers flag repeat offenders and escalating ban counts so persistent scanners stand out from one-time noise. Blocklists live per jail and per server as plain JSON, and ban or unban actions execute through UFW, giving you permanent bans that survive independently of jail restarts. Bulk actions handle whole ranges at once, with a pending state until the next sync applies them. Multiple servers feed one console through a pull-based HTTPS endpoint, so a fleet of small machines reports to a single pane without exposing SSH. Optional AbuseIPDB and IP-Info lookups add reputation and region context to any address. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Peach is a self-hosted video library manager that scrapes rich metadata for your own collection and serves it through a polished web player you can open on any device. Point it at local drives, SMB shares, mounted cloud storage, or a PikPak library and it scans everything into one browsable catalog without moving or modifying your files. The scraper recognizes video codes, reads existing NFO files, and fills in titles, performers, studios, and cover art from multiple sources while always preserving corrections you make by hand. Playback happens right in the browser with subtitle support, variable speed, rotation, resume points, and timeline previews you can scrub through before committing to a scene. A follow system tracks performers and creators so new releases surface automatically, and the discovery views plus a want list help you decide what to add next. When something is missing, search by video code or drop in a magnet link and completed downloads are filed into the library on their own. Tagging, duplicate detection, and multi-version grouping keep large collections tidy, while the task center lets you pause, resume, or cancel scans and downloads and watch their resource use as they run. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0-or-later licensed.