Google's search results without Google's surveillance: Whoogle is a self-hosted proxy that strips the tracking and keeps the results. Your query goes from browser to your Whoogle instance, which fetches results from Google with a randomly generated User Agent and strips everything hostile before returning them: no ads or sponsored content, no third-party JavaScript or cookies, no AMP links, no URL tracking tags like utm_source, no referrer header - and Google sees your server's IP, never yours. Unlike metasearch engines that blend sources, Whoogle proxies Google exclusively, so result quality is exactly what you'd get logged out and incognito, minus the noise. A lightweight Flask app configured entirely through environment variables, it supports DuckDuckGo-style bang shortcuts, autocomplete suggestions, safe search, per-country and per-language filtering, site blocklists, and automatic rewriting of social links to privacy front-ends like Nitter and Invidious. Privacy hardening goes further: built-in Tor routing makes Google see an exit node instead of your server, HTTP/SOCKS proxy support covers other setups, and POST-based queries keep search terms out of logs. Light, dark, and fully custom CSS themes plus browser search-engine registration make it a drop-in default on desktop and mobile. Stateless, tiny, and trivial to run.

Upload a report, ask a "what if" question in plain language, and MiroFish builds a small simulated society that plays out the answer before you commit to a decision. It reads your seed documents, whether news, policy drafts, financial signals, or a novel, and extracts entities and relationships into a GraphRAG knowledge graph. Entities from the graph become agents with a profession, a biography, and interest tags, and the app estimates simulation rounds from the simulated time span, with a custom mode for shorter runs. Agents post and react on two simulated platforms at once, a feed-style plaza and a topic community, while a live monitor tracks rounds, elapsed simulated time, and actions. A ReportAgent then plans an outline and writes the prediction report section by section with the InsightForge, PanoramaSearch, QuickSearch, and InterviewSubAgent tools. Afterward you can keep questioning the ReportAgent, chat with any individual agent, or send a survey question to a selected group and read their answers. Typical uses include rehearsing public relations responses, testing policy drafts against likely reactions, and exploring alternate endings for a story. The interface switches between English and Chinese, and you bring your own model: any OpenAI SDK compatible LLM endpoint works, Zep Cloud stores agent memory, and the project suggests starting under 40 rounds because runs consume many tokens. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The inverter app tells you the sun shone; SOLECTRUS tells you what that sunshine was worth. It is a dashboard for your whole photovoltaic system that balances every watt: what the panels produced, what the house consumed, what the battery stored, and what crossed the grid meter in either direction, for any period you care to name. Up to five generators, from the main roof array to a balcony power plant, appear individually or summed, and up to twenty custom consumers, wallbox included, get their own accounting. The Power-Splitter shows how much green electricity actually landed in the car, the heat pump, or the washing machine, and what each load truly cost once lost feed-in revenue counts. Enter your electricity prices and feed-in tariff, including their changes over the years, and it computes savings, self-consumption costs, return, and the day the system has paid for itself from measured data rather than the sales brochure. Forecasts from pvnode, Solcast, or Forecast.Solar look up to seven days ahead using your location, orientation, tilt, and peak capacity. Heat pump owners see generated heat and coefficient of performance beside the power draw. Everything lands in InfluxDB and stays there, with daily aggregation keeping multi-year views fast, trends against last month or last year, and a Top-10 of your best and worst days. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Pingvin Share X is your own WeTransfer, running on your server, with none of the transfer limits or expiring-link anxiety of the free tiers. Drop in a file of any size, get a link, and decide exactly how it behaves: an expiration date after which it vanishes, a password gate, a cap on how many visitors may open it, or all three. Email the link straight to recipients from the share dialog, and get notified when they download. Reverse shares flip the flow around: send someone a link and they upload files to you through it, which is perfect for collecting client deliverables, application documents, or the family photo archive without a single email attachment thread. Attachments can be scanned with ClamAV before anyone touches them, and storage lives on your disks or in S3-compatible buckets. Accounts connect through OIDC or LDAP single sign-on for teams, and an extensive admin panel tunes everything from password policy to upload chunk sizes. Registration rules decide whether your instance is a private family tool or an open drop point for your whole crew. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-2-Clause licensed.

Terrapod gives you the Terraform Enterprise control plane on your own Kubernetes cluster, with remote state, run approvals, and policy checks, and no per-resource bill at the end of the month. Point your existing cloud block at it and terraform or tofu keep working unchanged, because Terrapod answers the same backend protocol the CLI already speaks. Workspaces isolate state, variables, and runs per team or environment, with versioned state you can lock, inspect, and roll back. Server-side agent pools execute plans and applies on ephemeral Kubernetes jobs, while CLI-driven runs stay available for local workflows. Approvals gate every apply, and conditional auto-apply only proceeds when a plan adds or updates resources without destroying anything. Label-based RBAC decides who may read, plan, write, or administer each workspace, with OIDC and SAML single sign-on on top. A private registry hosts your own modules and providers with GPG signing, and OPA Rego policy sets enforce rules as mandatory or advisory checks before apply. Drift detection flags infrastructure that wandered from its state, run triggers chain dependent workspaces, and an interactive impact graph shows a plan's blast radius before you approve it. Optional AI review summarizes each plan's changes and risks, and an MCP server lets AI assistants inspect workspaces and runs under the same permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Dgraph is a distributed graph database that answers connected-data questions, such as who follows whom or which parts depend on which suppliers, in a single query instead of a pile of joins. Describe your data in a GraphQL schema and Dgraph generates a GraphQL API with its graph backend, or write DQL, the native query language, for deeper traversals. Indexes handle full-text search, regular expressions, and geo queries, and vector indexes add similarity search over embeddings. Transactions stay ACID across the cluster, replication is consistent, and data shards rebalance themselves as the dataset grows. Ratel, the companion web IDE, runs queries and mutations, draws results as a graph, edits the schema, lists cluster nodes, and manages backups. Bulk Loader fills a new cluster with large datasets, while Live Loader adds or upserts records into a running one. Access control lists and namespaces keep tenants apart within one cluster. It suits data spread across more than ten tables linked by foreign keys, sparse records that fit poorly in SQL, and schemas that must stay simple to read and change. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

WebCodex gives ChatGPT, Claude, and other MCP clients a real development environment on machines you own, so an AI assistant can edit your actual repositories instead of a pasted snapshot. A self-hosted Server authenticates every request and routes it to a Runner sitting next to your code, where file edits, Git operations, test runs, shell commands, and long jobs execute with your real toolchain. Your projects never move into a hosted workspace; only the tool results you authorize travel back to the model. The browser Runtime Console shows project readiness, the work queue, session activity, and connected Runners, and it is where you decide pending approvals or accept and reject finished work, because the model cannot approve its own changes. Runners join with a short-lived pairing code and stay connected over QUIC, WebSocket, or polling, so machines behind NAT still work. One-command sharing opens a temporary session for a single repository, while durable setups run the Server and Runner as system services behind your own HTTPS domain. Workflow Sessions keep evidence and context across conversations, so long tasks survive closed browser tabs and threads you pick up days later. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Point your RustDesk clients at CortenDesk and the bare open-source server turns into a managed fleet console with a real address book, real access control, and a remote client that lives in the browser. One container runs the ID server, the relay, and the console together, and existing key pairs and device IDs move in unchanged, so migration is a hostname change rather than a rebuild. The fleet view shows live presence, platform, aliases, owners, and last-seen for every machine, organized into folders that double as the unit of access control. People see only their own devices plus the groups granted to them, and the same scoping is enforced in the RustDesk client API, not just the web pages. Policies push client settings over the heartbeat, covering permissions, password rules, and capture behavior, and enforced policies revert local changes automatically. Five audit logs record connections, file transfers, sign-ins, security alarms, and console actions, all filterable and exportable to CSV. When a browser is all you have, the built-in web client views and controls machines with file transfer, clipboard, audio, and multi-monitor switching, no installer required. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Garage UI is the web dashboard that Garage object storage never shipped, turning an admin API that speaks JSON over HTTP into screens your whole team can use. Create and configure buckets, browse objects with drag-and-drop uploads, and preview images, video, PDFs, and text inline instead of downloading files just to check what they are. A recursive search finds objects across a whole bucket, and bucket settings carry size and object-count quotas so one tenant cannot quietly eat the cluster. Access keys are created in the UI and assigned per-bucket permissions, replacing error-prone command-line key surgery. The cluster overview watches node status, layout configuration, and storage usage, so a degrading node shows up in the dashboard before it shows up as an outage. Sign-in flexes to your setup: no auth on a trusted network, basic admin credentials, the Garage admin token, or OIDC single sign-on through providers like Keycloak and Authentik. With OIDC teams enabled, access control maps token claims to bucket prefixes with named permission presets, and unmatched users are denied by default rather than promoted. Zero-config startup reads your existing garage.toml, so the first login takes minutes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your calendars and contacts do not need a cloud account, and Baikal is the small PHP server that keeps them on hardware you control while still syncing to every phone and laptop you own. The web admin panel is where you add users, create their calendars and address books, and reset passwords, no database editing or config files required. Each person signs in with their own username and password, so an iPhone, an Android phone running DAVx5, and a Thunderbird desktop can all stay in sync without sharing one master credential. Standard well-known redirects mean most clients configure themselves when you type the server address, and the combined dav.php endpoint serves calendars and contacts from a single URL. Events carry the full CalDAV feature set your clients expect (recurring appointments, reminders, attendees, and free-busy lookups), while CardDAV address books keep names, phone numbers, and photos in one place. Because storage is a plain database file or table set, backups are a copy you can make in seconds, and moving to a bigger host is a file transfer rather than a migration project. The same server happily runs for one person tracking a family calendar or for a small office sharing team schedules and a company address book. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

SOGo adds shared calendars, address books, and a modern webmail interface to your existing Dovecot, Postfix, or Cyrus mail setup, turning familiar infrastructure into a full Exchange competitor. Rather than replacing your IMAP and SMTP servers, SOGo layers collaboration on top of them, becoming the missing link between raw mail delivery and what users actually expect from a workplace communication platform. The ActiveSync implementation synchronizes email, contacts, calendars, and tasks natively with iPhones, Android devices, and Windows without requiring users to manually configure CalDAV endpoints. CalDAV and CardDAV compliance ensures Apple Calendar, Thunderbird (via the official SOGo Connector extension), GNOME Evolution, and Android via DAVx5 all connect without plugins or workarounds. The web interface uses AngularJS Material design with responsive layouts, offering folder management, drag-and-drop calendar scheduling, contact groups, resource booking, and delegation. Shared calendars support free-busy lookups, iMIP event invitations, and per-user ACL permissions for fine-grained access across organizational units. Built on Objective-C with the GNUstep foundation, SOGo delivers exceptional performance: hundreds of concurrent ActiveSync connections from mobile devices alongside webmail and calendar traffic with sub-second response times. With 2,095+ stars and 116 releases, the project has proven its stability in production environments supporting thousands of users. The Docker deployment runs alongside PostgreSQL and memcached.

Transform complex code repositories into searchable, interactive wikis with DeepWiki, an automated documentation platform that maps architectural relationships and provides instant answers to technical questions about any codebase. Software engineers can submit public or private repositories from GitHub, GitLab, or Bitbucket to generate comprehensive project overviews, component breakdowns, and interactive Mermaid diagrams illustrating data pipelines and class hierarchies. The built-in Ask interface allows developers to query system logic using retrieval-augmented answers grounded directly in repository source files. Teams can trigger iterative deep research sessions that perform multi-step codebase investigations to explain intricate execution paths, uncover hidden dependencies, and summarize complex algorithms across hundreds of files. Interactive Codemap tours provide guided walkthroughs of critical entry points, letting reviewers inspect synchronized code viewer panels with exact line references while onboarding to unfamiliar services. Developers can export complete wiki structures for offline sharing, customize documentation depth from high-level summaries to granular module analyses, and connect local or cloud model endpoints to process sensitive internal code securely. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Initiative is a self-hosted, multi-tenant project management platform that organizes projects, tasks, collaborative documents, and schedules into strictly isolated community workspaces without enterprise complexity. Users create distinct communities where data remains strictly partitioned across separate database schemas, allowing agencies, volunteer groups, and gaming guilds to manage multiple client environments from a single deployment. Within each community, initiatives group related projects and documents while interactive drag-and-drop Kanban boards track task progression across custom columns, priorities, and deadlines. Integrated collaborative documents enable team members to co-author notes, project briefs, and meeting minutes in real time with threaded inline discussions and user mentions. Granular role-based permissions let administrators specify exact view and edit privileges down to individual items, while a recoverable trash system prevents accidental deletions from interrupting live operations. Curated marketplace apps supply customizable analytics dashboards, and optional bring-your-own-key artificial intelligence integrations generate task suggestions and summarize lengthy discussion threads. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

PicPeak is a self-hosted gallery platform where photographers deliver event photos to clients through private, branded links that expire on their own schedule. Every gallery gets a share link, an optional password, and a QR code that exports as PNG, SVG, an A6 table card, or an A4 poster, so a reception can put the gallery on every table. Guests browse in one of seven layouts, from grid and masonry to carousel and timeline, and react with likes, favorites, star ratings, comments, emoji reactions, or color labels. For a party, open the gallery to guest uploads, hold the finished edit back with Reveal Mode until a scheduled moment, and put the optional Live Slideshow link on a projector so new photos appear as they arrive. Theme presets, custom colors, logos, fonts, CSS, and CMS pages keep the studio's brand in front, while bulk ZIP downloads, capped download sizes, watermarking, and right-click blocking control what guests take home. An analytics dashboard tracks views, unique visitors, and downloads. Beta modules add face grouping that runs in a separate container on your own server, plus quotes, contracts, invoices, and customer accounts for studios. Media sits on local disk or any S3-compatible bucket, OIDC single sign-on lets a team log in through an identity provider, and API tokens and webhooks connect PicPeak to automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Backed by 9,200 GitHub stars and venture funding led by Nauta Capital, Nhost is the open-source Firebase alternative that replaces Google's proprietary document store with a relational PostgreSQL foundation from day one. The Hasura integration auto-generates a real-time GraphQL API with subscriptions, role-based permissions, and remote schemas from your PostgreSQL tables, while event triggers and cron triggers automate backend workflows without custom infrastructure. Authentication supports email and password, magic links, phone OTP via SMS, social OAuth providers including Google and GitHub, WebAuthn for passwordless login with Face ID, fingerprints, and YubiKeys, plus two-factor authentication. Since the Q1 2026 release, Nhost Auth also functions as a full OAuth2 and OpenID Connect provider, allowing your Nhost project to issue tokens to third-party applications the same way GitHub or Google do. The S3-compatible storage service handles file uploads with automatic image optimization, virus scanning, and presigned URLs for secure direct downloads. Node.js serverless functions deploy JavaScript and TypeScript backend logic without managing servers, while the Nhost CLI spins up the complete local stack via Docker for development with automatic database migration tracking and Hasura metadata management. The MCP server integration exposes project documentation and data schemas to AI assistants for intelligent query building. SDKs cover JavaScript, TypeScript, React, Vue, Next.js, and Dart for Flutter. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Why split your entertainment life across half a dozen siloed apps when Floppy tracks every movie, television episode, anime season, book, comic, video game, board game, album, and podcast in one unified self-hosted library? A configurable home dashboard shows exactly how much runtime remains in your current shows alongside personalized recommendation rows driven by your genre, studio, cast, and tag history. Music and podcasts are first-class citizens backed by MusicBrainz discography metadata, track-level scoring, Last.fm scrobble polling, and live Pocket Casts episode synchronization. Collectors can catalog physical and digital media ownership down to the exact disc format, video resolution, HDR standard, audio codec, and bitrate, complete with automated Plex collection syncing. Live webhooks and scheduled jobs connect directly to Plex, Jellyfin, Emby, Audiobookshelf, Sonarr, Radarr, and Seerr so watches, listens, and library additions log themselves automatically. You can curate public or private lists with programmable smart-list rules, RSS and JSON feeds, Trakt watchlist imports, and barcode ISBN scanning for physical books. Recap-style statistics let you compare custom date ranges across reading streaks, pages read, listening hours, and top actors or authors, while a REST API and built-in Model Context Protocol server power custom automations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One endpoint, every model you run, and a government-grade paper trail for each request. OpenGateLLM sits in front of your AI infrastructure as the single door: applications call one OpenAI-compatible API, and the gateway decides which backend answers, a self-hosted vLLM cluster, an Ollama box in the corner, a Hugging Face TEI embeddings service, or a hosted provider when you allow one. You publish friendly model names as routers and attach real provider APIs behind them, then load-balance across those backends by shuffle or least-busy so a second GPU node starts earning its keep the moment you register it. Chat completions, embeddings, reranking, OCR, and audio transcription each get their standard endpoint, so existing OpenAI SDK code, LangChain, and LlamaIndex projects point at a new base URL and keep working. Governance is built in rather than bolted on: organizations, users, and roles control who may call which model, API keys authenticate every request, and rate limiting keeps one enthusiastic team from eating the whole cluster. Usage monitoring follows every inference, and carbon footprint estimates attach to models through their hosting zone and parameter counts. Retrieval-augmented generation against Elasticsearch or Qdrant plugs into the same surface. No chat history is stored, which is rather the point when the data is yours. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

3X-UI is the most popular open-source Xray management panel, providing a full-featured web interface for deploying and monitoring proxy and VPN protocols on Linux servers. The Go backend manages Xray-core instances supporting VLESS, VMess, Trojan, Shadowsocks, WireGuard, Hysteria2, HTTP, SOCKS, Dokodemo-door, and TUN inbounds across TCP, mKCP, WebSocket, gRPC, HTTPUpgrade, and XHTTP transports secured with TLS, XTLS Vision, and REALITY. The Clients page tracks each user with individual traffic quotas, expiration dates, concurrent connection limits, and live online status indicators, while one-click share links, QR codes, and a built-in subscription server distribute configurations in multiple output formats. The multi-node architecture manages and scales deployments across multiple servers from a single panel instance. The Panel Settings page configures listen address, port, URI path, session duration, trusted proxy CIDRs, authentication, and Telegram bot integration for remote monitoring and management alerts. Outbound routing supports WARP, NordVPN, custom rules, load balancers, and proxy chaining. Xray Configs provides template-level control over the core configuration, while the API Docs page exposes a complete RESTful API with in-panel Swagger documentation. Data persists in SQLite by default or PostgreSQL for larger deployments, with database export and import from the panel. Fail2ban integration enforces per-client IP limits. On RepoCloud, deploy 3X-UI on a dedicated VPS with Docker, root SSH access, and complete control over your proxy infrastructure, all under the GPL-3.0 license.