With nearly 3,000 GitHub stars and active development since 2014 through version 14.2.0, Yopass eliminates the universal bad habit of sharing passwords and API keys through Slack messages, email threads, and ticket systems by encrypting secrets entirely in the browser using OpenPGP before anything reaches the server. The Go backend stores only ciphertext — it never sees plaintext — while the React frontend handles all encryption and decryption client-side, generating one-time URLs that self-destruct after a single viewing or when the configured expiration of one hour, one day, or one week passes. File upload support streams encrypted files with configurable size limits, and optional custom password protection adds a second encryption layer beyond the URL-embedded key. The server supports Redis or Memcached as storage backends with automatic key expiration, deploying via Docker Compose in under five minutes or as Kubernetes manifests for production environments. Built-in TLS support works alongside reverse proxy configurations for Nginx, Caddy, and Traefik with automatic Let's Encrypt certificate provisioning. Prometheus metrics expose HTTP request counts, latency histograms, and secret lifecycle counters for Grafana dashboard integration and alerting. Read-only mode enables split-instance deployments separating secret creation from retrieval across different network zones. Multi-language support localizes the interface for international teams. The open-source core under Apache 2.0 provides full self-hosted functionality with no account management required. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With over 3,600 GitHub stars and a philosophy of deliberate simplicity, OliveTin eliminates the need for SSH sessions, admin panels, and complex automation platforms by letting you define shell commands in a YAML config file and access them as clickable buttons through a clean browser interface. The Go binary consumes only a few megabytes of RAM, running on everything from tiny ARM and RISC-V devices through Linux VMs, containers, macOS, and Windows. Each button executes a predefined shell command with optional typed arguments that render as dropdowns, text fields, and validated inputs, preventing free-form command entry while giving users controlled access to server operations. Access control lists define exactly who can view or run each action — guests, family members, or junior administrators see only the buttons they are permitted to use. Entity templates generate actions dynamically from lists of hosts, containers, or other resources, creating one template that produces many buttons without manual duplication. Flexible triggers extend beyond browser clicks: cron schedules, webhooks, calendar file events, and filesystem watchers run actions automatically when conditions are met. Authentication supports OAuth2, JWT, and header-based methods for integration with reverse proxies and identity providers. Dashboards organize actions into folders and fieldsets for clear navigation across dozens of commands. No plugin system, no extension marketplace, no premium tiers — every feature ships in the single open-source release. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

MailCheap is a newsletter app you host yourself that writes, sends, and publishes your issues while charging you only for the emails you actually send, not for subscribers who never open anything. Write in an editor with slash commands, images, and content boxes, or send Markdown and HTML emails through the API, then work through a pre-send review that flags subject, preview text, unsubscribe link, and sender problems first. Bring your audience with you: CSV exports from beehiiv, Substack, Mailchimp, Kit, MailerLite, Buttondown, Ghost, and EmailOctopus import with each reader's status and signup date intact. Imports clean themselves, dropping invalid, misspelled, duplicate, throwaway, and spam-trap addresses, and a server-wide never-email list keeps known bad addresses out of every future import, signup, and send. Sending protects your domain: new contacts receive issues in paced steps, sends pause when bounce or complaint rates climb, and Gmail spam rates are watched daily. Every issue becomes a page on your newsletter's website, with a signup form, author page, share images, and a sitemap. Run up to three newsletters per account, each with separate contacts and campaigns, and follow subscribers over time with open and click reports by inbox provider. AI agents can do anything the dashboard can through the MCP server, and scripts get the same reach through the REST API, with sending marked irreversible so agents ask first. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

ParadeDB turns the Postgres you already run into a full search and analytics engine, so your application data, full-text search, vector retrieval, and aggregations all live in one database. Create one ParadeDB index over a table and you can run relevance-ranked BM25 queries with tokenizers, phrase matching, highlighting, and Top-K retrieval using plain SQL. The same index stores pgvector embeddings, so similarity search composes with text predicates and filters, and hybrid queries fuse both rankings when a question needs keywords and meaning at once. Aggregations push into the index too: ordinary GROUP BY queries accelerate, and Elasticsearch-style JSON aggregations return facets, histograms, percentiles, and cardinality for filterable search interfaces. Because the index updates in the same transaction as your writes, search results are never stale and there is no ETL pipeline, sync job, or second system to babysit. JOINs against the rest of your schema keep working, since search is just another index inside your system of record. Teams typically retire a separate search cluster while keeping sub-second relevance search, semantic retrieval for AI features, and faceted analytics on the data they already store. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OpenDeepWiki transforms code repositories from GitHub, GitLab, Gitee, Gitea, and AtomGit into structured, searchable knowledge bases by leveraging Microsoft's Semantic Kernel for AI orchestration across OpenAI, Azure OpenAI, Anthropic, and DeepSeek providers. The three-phase Gather-Think-Write pipeline analyzes repository tree structures, generates README summaries, project overviews, wiki catalogs, and document content while producing Mermaid mind maps and optional Graphify visualization artifacts. Repository-scoped MCP endpoints at /api/mcp/{owner}/{repo} expose indexed knowledge to external AI tools, while the built-in chat assistant, embedded chat APIs, and share links provide conversational access to repository understanding. The Next.js 16 frontend serves public documentation on SEO-friendly routes with multi-language translation support, and the admin console manages repositories, users, roles, API keys, AI provider and model configuration, skills, and GitHub App imports. Background workers handle incremental updates using LibGit2Sharp to keep documentation synchronized with evolving codebases, while Polly integration provides transient failure retry handling for LLM requests. The platform supports SQLite, PostgreSQL, and MySQL database backends with Entity Framework Core providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Shelf answers the three questions every equipment manager dreads — who has it, where is it, and when is it coming back — using QR-code-first tracking where every asset gets a unique scannable label, every handover is logged with timestamps and e-signed custody agreements, and every scan captures GPS coordinates displayed on a map. Built on React Router 7 with React 19, TypeScript 5, Prisma 6 ORM, and Tailwind CSS 3 with Radix UI components, the platform generates QR codes and barcodes (Code128, Code39, Datamatrix) printable on DYMO, Brother, and Zebra label printers. The custody system records every handover with user details and generates PDF custody agreements with e-signatures for high-value items, while a complete audit trail tracks responsibility from check-out to return. The visual booking calendar prevents double-bookings automatically, supports partial check-outs and returns with segmented lifecycle bars, and handles quantity-tracked consumables alongside individually serialized equipment. Asset Models enable bulk creation of identical items with shared defaults while maintaining individual QR codes and custody histories. Location tracking displays last-scanned GPS coordinates on MapTiler maps. Supabase Auth provides email and SSO authentication, pg-boss handles background job queuing, and Nodemailer delivers SMTP email. The Shelf Companion app on iOS and Android enables field scanning and bookings. Export Asset Inventory, Asset Distribution, and Custody Snapshot reports for compliance. Deploy via Docker with PostgreSQL and Supabase. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL v3.0 licensed.

Founders do not need another chart of pageviews; they need to know which visit became money, and Talivia is a self-hosted, revenue-first analytics platform that fuses website traffic with payment data so every metric answers in dollars. Connect Stripe, LemonSqueezy, Polar, Dodo, or Yolfi, and the dashboard pairs visitor counts with revenue, conversion rate, revenue per visitor, refunds, and disputes, so a traffic spike that never buys anything stops masquerading as success. Referrers, campaigns, keywords, and countries are ranked by the money they produce, which reduces budget decisions to one question: which channel brought customers who actually paid? When a page underperforms, session replay shows what visitors actually did there and the moment they gave up, so you debug journeys instead of guessing from aggregates. Events and multi-step funnels trace the path from landing page to checkout, while bot traffic detection stops crawlers from inflating your conversion statistics. The live visitor feed shows who is browsing right now, with country, device, browser, acquisition source, events, and spend for each session as it unfolds. Public links publish any dashboard as a read-only page for investors or clients, and teammates join the workspace with their own accounts when they need to dig deeper. Visitors, replays, and payment records all stay in your own PostgreSQL database, so customer journeys never pass through a third-party analytics cloud. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 7,500 GitHub stars and 1 million Docker pulls — making it the most popular open-source database backup tool on GitHub ahead of pgBackRest and WAL-G — Databasus delivers production-grade backup management through a designer-polished web interface that replaces complex configuration files and CLI-only workflows. The platform supports PostgreSQL 14-18, MySQL 5.7-8, MariaDB 10-12, and MongoDB 4.2-8 with logical backups via pg_dump and mysqldump, while PostgreSQL 17+ enables physical backups using the native pg_basebackup engine with block-level incremental support via pg_basebackup --incremental and continuous WAL streaming via pg_receivewal for Point-in-Time Recovery to any second between backups. Storage destinations include local disk, AWS S3, CloudFlare R2, Google Drive, Azure Blob Storage, SFTP, NAS, and rclone-backed targets, while built-in AES-256-GCM encryption secures both backup files and stored credentials. Restore verification runs automated recovery into throwaway Docker containers, validating backups by comparing schema counts, table structure, and row counts against the source database — proving recoverability rather than merely checking checksums. The notification system integrates with Slack, Discord, Telegram, email, and webhooks for real-time backup status alerts. Deployment options span a single Docker container, Docker Compose with Caddy for automatic HTTPS, Helm charts for Kubernetes clusters, or a one-line install script. SSH tunnel support reaches databases in closed networks through bastion hosts without public exposure. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

CloudBeaver puts a full-featured database management environment in your browser, connecting to PostgreSQL, MySQL, SQL Server, Oracle, ClickHouse, and over 100 additional engines through one unified interface that requires no desktop client installation. The Java server exposes a TypeScript/React frontend through a GraphQL API where teams can browse schemas, edit data, visualize relationships, and execute queries across all connected databases in a single workspace. The SQL Editor provides syntax highlighting, auto-completion with fuzzy search, AI-assisted SQL generation from natural language prompts, script management with save/download/upload capabilities, execution plan visualization, and multi-tab result display. The Data Editor enables direct cell editing, filtering, sorting, and bulk data modification with support for spatial GIS data rendering. Database administrators access a Navigator panel for browsing schemas, tables, views, foreign tables, triggers, dependencies, and stored procedures across all connected databases. ER Diagrams visualize table relationships and schema structure, while the Visual Query Builder constructs queries without hand-writing SQL. Multi-user administration provides role-based access control, connection sharing with configurable permissions, and session management. SSH tunneling secures remote database connections, and data can be exported or imported in multiple formats. Query History tracks all executed statements with timestamps and execution statistics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Plain-text recipes in, a phone-friendly recipe site out: CookCLI reads Cooklang files and serves them with scaling, search, shopping lists, meal plans, and pantry tracking. Write ingredients, cookware, and timers inline. Open any recipe from a phone or laptop on your network. Change the serving count and the quantities recalculate. Search by ingredient or by text. Plan a week in a .menu file and get one shopping list, merged across recipes, grouped by store aisle from your own aisle configuration, with pantry items already subtracted. The pantry file holds quantities, expiry dates, and low-stock thresholds. Ask which items are depleted or expiring, or which dishes you can cook right now, near matches included. In the terminal, print any recipe as Cooklang, JSON, or Markdown, run template-driven reports, and let a doctor command check your files. Import a recipe from a web page with an OpenAI API key. Switch on sign-in so everyone can browse but only signed-in users can edit recipes, the pantry, or the shopping list. A documented HTTP API feeds other tools. The whole collection also builds into a static website. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pulse monitors your entire heterogeneous infrastructure from one screen: Proxmox VE, Proxmox Backup Server, Proxmox Mail Gateway, Docker, Podman, Docker Swarm, Kubernetes, TrueNAS SCALE/CORE, VMware vSphere, and standalone Linux/Windows/macOS machines. The Go binary embeds a SolidJS/TypeScript frontend, delivering WebSocket-driven dashboards with sub-second metric updates on port 7655. A unified agent auto-detects Docker, Podman, Kubernetes, and Proxmox on each host without manual configuration and self-updates silently, while Proxmox nodes need only API credentials with zero agent installation. Smart alerts use adaptive hysteresis-based thresholds to prevent notification floods, pushing to Discord, Slack, Telegram, Teams, email, ntfy.sh, Gotify, and generic webhooks with per-resource overrides. The standout feature is Pulse Patrol: scheduled AI health checks running every ten minutes to seven days using OpenAI, Anthropic, Gemini, or local Ollama models. Patrol catches silent backup failures, capacity creep, restart loops, unhealthy containers, and clock drift that dashboards miss when nobody is watching. Platform-specific views render Proxmox nodes, Ceph clusters, Docker Compose projects, Kubernetes workloads, TrueNAS pools, and vSphere VMs in familiar layouts. OIDC, SSO, and SAML authentication with credential encryption at rest secures access. 6,500+ stars and 441 releases since February 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 35,000 GitHub stars and 460 contributors, Medusa is the headless commerce framework that gives development teams full ownership of their e-commerce backend without license fees, per-transaction charges, or revenue sharing. The modular architecture ships over 18 domain modules covering products, collections, categories, inventory, pricing, carts, orders, payments, fulfillment, promotions, customers, users, API keys, and stock locations, each independently usable and replaceable. REST and GraphQL APIs expose every commerce operation to any frontend framework — official starters exist for Next.js with community options for Nuxt, Remix, and Gatsby. The React-based admin dashboard provides out-of-the-box order management, product maintenance, promotions configuration, B2B accounts, and multi-warehouse inventory, extensible via the Admin SDK for custom views and workflows. The workflow engine orchestrates long-running commerce processes like checkout, fulfillment, and returns with compensating transactions for reliability. Over 200 official and community plugins integrate Stripe, PayPal, Klarna, Algolia, Meilisearch, SendGrid, Mailchimp, Contentful, Sanity, and Klaviyo. Native multi-region and multi-currency support handles tax-inclusive pricing, region-specific payment and fulfillment providers, and localized storefronts from a single backend. Enterprises including Viessmann, Makro PRO, and INSPIRED Pet Nutrition run Medusa in production. Self-hosting deploys via Docker or directly on Node.js with PostgreSQL and Redis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Bots that knock on your server's login ports are always turned away by Knock-Knock, a multi-protocol honeypot that shows every attempt on a live dashboard. Honeypots answer on the standard ports for SSH, Telnet, FTP, RDP, SMB, SIP, HTTP, and SMTP, with MQTT, Node-RED, Modbus, S7, and SNMP as optional extras. Authentication is always rejected, so no bot ever gets a shell. Who is knocking? The live feed shows each attempt's country, username, password, ISP, IP, and protocol. From where? A 3D globe marks the origin in one of six styles, including an extruded country heat map. Trying what? Leaderboards rank countries, usernames, passwords, ISPs, and IP addresses, and a trivia panel explains why bots favor certain credentials. A protocol filter re-slices the feed, globe, and leaderboards together; SIP shows dialed numbers and toll-call destinations, and RDP shows hostnames and accounts. Too fast? Press the space bar to pause, right-click any knock for details, or switch on a virtual Geiger counter that clicks as attacks arrive. Want to fight back? Download hourly 30-day and 365-day blocklists with recipes for CSF, CrowdSec, ipset, nftables, and pfSense, or query the optional API for any IP, CIDR range, or ASN. Several honeypot servers can stream into one aggregated dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Run Claude Code, Codex, Gemini CLI, OpenCode, and sixteen other AI coding agents from one workspace instead of juggling twenty terminals. Every agent connects through the Agent Client Protocol, so conversations render as structured chats with tool cards, live diffs, and interactive replies rather than raw terminal scrollback. Codeg imports the session history each agent already keeps on disk, making every past conversation searchable and resumable, even when you hand the thread to a different agent. Mention one agent with an @ to delegate work to another, or run several side by side and watch their progress stream into the same conversation. Queued to-dos execute unattended in isolated git worktrees, leaving finished changes ready for your review and approval instead of touching your working tree. An infinite canvas arranges chats, files, terminals, and notes on one board, while git tooling, token usage tracking, and MCP server support stay one panel away. Deployed as a headless server, Codeg answers in any browser and through Telegram, Lark, and WeChat channels, so agent work continues while you are away from your desk. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

PayMe is a privacy-first personal finance dashboard that runs entirely on your own hardware with zero third-party service dependencies. The Rust backend compiled to a single binary serves a React 19 frontend built with Vite, TypeScript, and Tailwind CSS 4, storing all financial data in a local SQLite database that auto-migrates on startup. Monthly dashboards track income entries, fixed expenses like mortgage and utilities, and budget categories with real-time progress bars showing spending against configurable limits. The savings module includes goal tracking with percentage-based progress indicators, custom savings goals for targeted objectives, retirement savings projections with breakdown analysis, and projected savings calculations. Variance analysis compares actual spending against budgets across categories. Drag-and-drop reordering powered by dnd-kit lets you arrange income sources, expenses, and budget items to match your workflow. The interactive charts rendered by Recharts visualize spending trends, income patterns, and savings trajectories. Month-by-month navigation tracks financial history over time, while the Summary and Stats views aggregate data across periods. JWT-based authentication secures access, and the full OpenAPI Swagger documentation at the /swagger-ui endpoint exposes every API route for automation and integration. Docker Compose deployment creates a minimal image with the compiled Rust binary and static frontend assets, running on port 3001 behind nginx, Caddy, or Traefik reverse proxy with HTTPS. On RepoCloud, deploy PayMe on a dedicated VPS with persistent SQLite storage, root SSH access, and complete privacy over your household financial data, all under the MIT license.

Backed by over 20,000 GitHub stars, 800 contributors, and organizations like Google, NASA, and the NHS, Wagtail is the Django-powered content management system that gives editors creative freedom through StreamField while keeping developers in full control of data structure and front-end rendering. StreamField lets editors compose pages from a custom library of content blocks — rich text, images, embedded videos, tables, code snippets, and developer-defined custom types — without compromising the underlying data model or breaking responsive layouts. The built-in JSON API supports headless deployments with versioned endpoints for pages, images, and documents, enabling decoupled front-ends in Next.js, Nuxt.js, or any framework that consumes REST. Editorial workflows provide configurable approval chains where content moves through draft, review, and publish states with commenting, task assignment, and email notifications built into the admin interface. Integrated search connects to Elasticsearch for full-text indexing with faceted filtering, or falls back to PostgreSQL and SQLite backends with fuzzy matching support added in v7.4. Multi-site management serves multiple domains from a single Wagtail installation with independent page trees, while the internationalization framework handles content translation with locale-aware URL routing. Image management includes focal point detection, responsive renditions, and automatic format conversion. The platform supports Django 5.2 and 6.0 with Python 3.10 through 3.14 and PostgreSQL, MySQL, MariaDB, or SQLite databases. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Wire nodes together in a browser, deploy in one click, and real-time data flows from sources through transformations to outputs: Node-RED is the OpenJS Foundation's flow-based programming tool for event-driven applications. Born at IBM as a proof-of-concept for manipulating MQTT topic mappings, it has become the lingua franca of IoT and automation glue - home automation, industrial control, edge data collection - with a community library of over 5,000 contributed nodes and flows covering protocols, devices, and services. Where visual wiring runs out, JavaScript function nodes written in a rich in-editor code editor take over, and every flow serializes to importable, exportable JSON that shares cleanly and version-controls sensibly. Version 5.0 (2026) delivered the largest editor overhaul in the project's history: a rethought layout with Explorer and Information panels in a split sidebar, a native dark theme with theme variants, improved accessibility, and refreshed node appearance. The runtime is lightweight Node.js, exploiting the event-driven non-blocking model so the same flows run on a Raspberry Pi at the network edge or a cloud VM. Apache-2.0 licensed with 240+ contributors, it pairs naturally with dashboard nodes for live charts and controls.

With over 6,400 GitHub stars, 130 contributors, and 512 releases, Flagsmith is the open-source feature flag and remote configuration platform that gives development teams granular control over feature releases, remote configuration values, user segmentation, and A/B testing from a single self-hosted dashboard. Feature flags support boolean toggles and remote config values simultaneously — every flag carries both an enabled state and a configurable value, letting teams deploy functional and visual changes without code modifications or app store approvals. User segments target audiences by attributes, percentage rollouts, and custom rules, enabling beta testing, canary releases, and gradual feature rollouts with real-time toggle control. Multivariate flags split traffic across multiple variations with configurable percentage weights for A/B and multivariate testing with analytics integration. The flag evaluation engine runs server-side with local evaluation mode in SDKs for sub-millisecond performance without network calls, supporting 15+ languages including TypeScript, Python, Java, C#/.NET, Go, Ruby, PHP, Swift, Kotlin, Flutter, React, and Next.js. The REST API and webhooks enable integration with CI/CD pipelines, and pre-built connectors exist for Datadog, New Relic, Amplitude, Mixpanel, Segment, Heap, Rudderstack, and Slack. Built on Django with a React frontend, self-hosting deploys via Docker Compose with PostgreSQL, or via Helm charts and the OpenShift Operator for Kubernetes environments. Change history provides a complete audit trail of flag modifications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.