With 6,800 GitHub stars and over a decade of development since its 2014 release, ONLYOFFICE Docs delivers a self-hosted Microsoft Office replacement with pixel-perfect OOXML rendering and real-time collaborative editing supporting both Fast (character-by-character) and Strict (manual save) co-authoring modes. The suite encompasses five full-featured editors — Document Editor for DOCX/ODT/EPUB/HTML, Spreadsheet Editor with 500+ functions and pivot tables, Presentation Editor with animations and transitions, Form Creator for fillable PDF forms with field validation, and PDF Editor for annotation and conversion — all operating within a unified web interface. Format support spans 50+ types including DOCX, XLSX, PPTX, ODT, ODS, ODP, PDF, CSV, RTF, TXT, and Markdown with server-side conversion between any supported pair. The JavaScript plugin API enables extending editor functionality through a marketplace of ready-made plugins for ChatGPT integration, speech-to-text, OCR, Zotero citations, and Thesaurus. Ready-to-use connectors integrate with Nextcloud, ownCloud, Seafile, Moodle, Odoo, Confluence, SharePoint, Alfresco, Liferay, and Chamilo, while WOPI protocol compliance enables integration with any WOPI-compatible platform. JWT authentication secures all API communications between host applications and the document server. Deploy via Docker with a single command or DEB/RPM packages on Ubuntu, Debian, CentOS, or RHEL. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3 licensed.

When dashboards must answer in under a second over billions of streaming events, Apache Druid is the real-time analytics database built for the job. Point a supervisor at an Apache Kafka topic or Amazon Kinesis stream and events are queryable on arrival, late data included, with exactly-once guarantees. Batch loads run as SQL: INSERT and REPLACE statements ingest files, and EXTERN reads external sources. Schema auto-discovery adds new columns and types as data lands. Joins run at ingestion or at query time. A web console gathers the daily work in one place: a tabbed Query view with EXPLAIN PLAN and query history, a Connect external data wizard, and pages for datasources, segments, retention rules, supervisors, tasks, services, and lookups. Configurable tiers place hot and cold data on different hardware. Quality-of-service settings shield priority workloads from heavy ones. Clickstream analytics, ad campaign reporting, network telemetry, application performance tracking, and IoT metrics all fit. Applications connect over the HTTP SQL API or the Avatica JDBC driver, and native JSON queries remain available for advanced needs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Some questions are really about how things connect, and Neo4j is the graph database that stores your data as nodes and relationships so those connections become the thing you query. Model people, products, accounts, devices, or transactions as labeled nodes with properties, then draw typed, directed relationships between them and traverse multi-hop paths in a single Cypher query instead of stacking SQL joins. The built-in Neo4j Browser renders query results as interactive node diagrams, so you can expand a fraud ring, a dependency chain, or a recommendation neighborhood visually and share the picture with your team. Cypher reads like the picture it queries: MATCH patterns describe shapes in the graph, filters narrow them, and aggregations roll up counts, sums, and shortest paths. Store embeddings as node properties and build vector indexes over them, then combine similarity search with graph traversal so matches can be filtered by owner, connections, or freshness. Full-text indexes search names, descriptions, and documents, while uniqueness constraints keep identifiers honest at write time. Bulk-load millions of nodes from CSV files with the offline import tool, then keep data flowing in through official drivers for Python, JavaScript, Java, Go, and .NET applications. Fraud teams trace shared phones and cards between accounts, platform teams map microservice dependencies before a migration, and security analysts hunt lateral movement through identity graphs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Securing a SaaS product, running B2B onboarding, or replacing Auth0 and Keycloak with a stack they own - teams needing more than basic auth reach for ZITADEL, an open-source identity and access management platform built in Go. Its multi-tenancy model is the differentiator: a strict Instance, Organization, Project hierarchy isolates data and scopes policy at each level, with identity brokering (pre-built templates for Google, GitHub, Microsoft, Apple, plus generic OIDC, OAuth, SAML, and LDAP), domain discovery that routes users to the right organization by email domain, and delegated management so customers administer their own users and roles. Authentication covers OpenID Connect (certified, including device authorization and token exchange), SAML 2.0 as both IdP and SP, SCIM, FIDO2 passkeys for phishing-resistant passwordless login, and MFA via OTP, email, SMS, and U2F; machine-to-machine flows support JWT profile, PATs, and client credentials. The architecture is event-sourced - every mutation is an immutable event, yielding a complete audit trail - with relational projections for queries and no external session store, so it scales horizontally. API-first with gRPC and REST, extensible via Actions webhooks, and the same codebase self-hosted (Docker Compose or Helm on PostgreSQL) as in the cloud.

When warehouse data never reaches the CRM, ad platform, or help desk that needs it, Multiwoven is the open-source reverse ETL platform that syncs it there on a schedule. Sources include Snowflake, BigQuery, Redshift, Databricks, PostgreSQL, ClickHouse, MariaDB, Oracle, Amazon S3, and SFTP. Models define what to move: write SQL with a 100-row preview, pick tables in a visual selector, or reuse existing dbt models. Destinations span Salesforce, HubSpot, Klaviyo, Mailchimp, Zendesk, Slack, Airtable, Google Sheets, Stripe, Facebook Custom Audiences, HTTP endpoints, and vector stores such as Pinecone, Qdrant, and Weaviate. Each sync maps model columns onto destination objects like Salesforce Account, Contact, or Opportunity, then runs as a full refresh or as an incremental sync that moves only new or changed rows, optionally tracked by a cursor field. Schedules can be manual, an interval from minutes to weeks, or a cron expression. A dashboard reports sync activity, each run records its status with successful and failed row counts, and failed runs can trigger status emails. Workspaces keep sources, models, syncs, and destinations separate for each team, while Admin, Member, and Viewer roles and email invitations control access. A connector framework lets teams add sources or destinations that are not yet supported. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

No cookies, no fingerprinting, no cross-site tracking, no personal data collection - Umami's privacy contract is the foundation of the open-source web analytics platform. IP addresses are hashed rather than stored, which makes it GDPR, CCPA, and PECR compliant by default - the consent banner can come off the site entirely. The tracking script is under 2 KB, roughly 20x smaller than Google Analytics, so measurement stops being a page-weight tax. The dashboard covers the core metrics - pageviews, visitors, bounce rate, visit duration, referrers, browsers, devices, and countries - with any date range and filtering by country or device. Beyond pageviews, custom events track clicks, form submissions, and signups via a data attribute or one JavaScript call, and advanced reports add funnels, user journeys, retention and cohort analysis, goals, and automatic UTM campaign tracking. Anonymous session views show individual visitor activity without identifying anyone. Teams share websites with role-based access, one instance manages unlimited sites, and a full REST API exposes every metric programmatically. MIT-licensed and self-hosted on PostgreSQL or MySQL via Docker, your analytics data never leaves your infrastructure.

GroupOffice checks your whole company in at one address: mail, meetings, projects, invoices, and files behind a single login on your own server. The built-in mail client saves messages straight onto projects or contacts, signs and encrypts with S/MIME, and shares folders and accounts across the team. Shared calendars offer team views, bookable resources, and video meetings, while address books carry custom fields and comments so customer knowledge survives staff changes. Projects gather their tasks, files, and discussions in one place, track hours as work happens, and turn those hours and costs into invoices and reports. Support tickets arrive from your website or by email and stay organized by team, and newsletters compose campaigns from templates filled with your own data. Files co-edit in the browser through OnlyOffice or Collabora, connect to desktops over WebDAV, and sync to native phone and computer apps over open protocols. Two-factor authentication, encryption, and a module system you can extend with your own tools keep the office private and shaped to how you actually work. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

jshERP lets a small or midsize business, from a shop to a wholesaler, run purchasing, stock, sales, and money from one place instead of scattered spreadsheets. A purchase requisition becomes a purchase order, then a receipt that raises stock. A sales order becomes an outbound delivery that lowers it, or a purchase order when more must be bought in. Retail sales, returns, and serial-number scanning run through the same stock. Products sit in a category tree up to three levels deep, with barcodes, images, multiple attributes, customer-specific prices, and a base unit plus up to three secondary units. Transfers move goods between warehouses, assembly and disassembly merge and split products, and shelf locations record where each item sits. Other receipts and issues cover opening stock, stocktake corrections, and scrapped goods, while moving-average cost keeps valuation current. Finance logs income, expenses, receipts, payments, transfers, and prepayments against settlement accounts, and customer and supplier reconciliation reports export to Excel. Reports track stock levels, low-stock alerts, in-out statistics, and purchase and sales summaries, and the home page totals yesterday's and retail sales. Roles limit access down to single menus and buttons and can mask prices. A tenant model runs several businesses on one installation, and the interface switches among 73 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your net worth is scattered across banks, brokers, a pension, and a mortgage, and no single screen shows all of it at once. Aurelio Finance gathers those pieces on your own server: record each institution's cash and holdings as dated situations, then let later transactions roll them forward so today's balance always traces back to a photograph of what you held and the events after it. Every position is priced from the market with its cost basis, gain, and dividends, while the look through view opens your ETFs and funds to show real exposure by country, sector, company, and currency, so overlapping funds stop hiding concentration. Recurring investment plans, homes and other real assets, and the loans against them sit beside income, expenses, and your savings rate, and each financial goal shows the return it needs to be reached. When you want a second opinion, Ask Aurelio reads your own records, can search the web, and proposes changes as cards you confirm or reject, never silently editing your data. Its analysis mode goes further, letting an analyst and a confidant argue over your portfolio before a synthesis tells you what to look at first, and surviving ideas land on a watchlist that your totals never count. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Alexandrie provides a structured knowledge base with an extended Markdown editor, granular per-document permissions, and offline editing through its progressive web app. The CodeMirror 6 editor goes well beyond standard Markdown with colored containers, academic callout blocks, KaTeX math expressions, syntax-highlighted code blocks, footnotes, interactive checkboxes, cards, panels, and a custom snippet system with import and export. Full-text search via the Ctrl+K command center returns instant results with content snippets and relevance ranking across all workspaces. Five permission levels covering None, Read, Write, Admin, and Owner apply per document and per user, while OIDC single sign-on integrates with Google, GitHub, Microsoft, Discord, and any OpenID Connect provider. Documents organize into a hierarchical tree of workspaces, categories, and nested entries with tags, bookmarks, pinned notes, and custom icons. Integrated Kanban boards handle task management within each workspace without switching applications. The PWA installs on any device for full offline editing with seamless sync when connectivity returns. Voice-to-text dictation captures notes hands-free, and one-click ZIP backup exports all documents, files, and settings as a portable archive. Over 2,000 GitHub stars and 41 releases back the project. The Docker Compose stack orchestrates the Nuxt 4 frontend, Go Gin backend, MySQL 8 database, and S3-compatible RustFS object storage. Running on a VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A secure drop box for tips and misconduct reports, GlobaLeaks lets organizations, newsrooms, and public institutions receive anonymous submissions and reply to the people behind them. Whistleblowers answer a questionnaire, attach files, and leave with a unique 16-digit receipt that reopens their report later for replies, comments, and the choice of whether and when to reveal their identity. Administrators build the intake form with a questionnaire builder, route reports through channels by topic or department, and host several branded whistleblowing sites from one installation in more than 90 languages. Recipients triage in a searchable inbox with labels, reminders, and customizable case statuses. Analysts, custodians, and administrators get separate roles, and the custodian role can gate access to a reporter's identity. Reports and messages are encrypted, an automatic Tor onion service gives whistleblowers an anonymous way in, two-factor authentication protects staff logins, and PGP secures email notifications. Audit logs track staff actions, and retention rules expire old reports to support GDPR duties and EU Directive 2019/1937 workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

InvenTree is an inventory management system for electronics manufacturers, makerspaces, and small-to-medium businesses. The hierarchical part categorization system organizes components into unlimited nested categories, while stock items tracked across cascading locations and sub-locations provide instant visibility into current inventory levels, with optional serial number tracking for individual item traceability and acceptance testing. Intelligent BOM management calculates sub-part requirements, validates availability against current stock, supports multi-format BOM upload including KiCad integration, and generates detailed bills of materials with full database enrichment. Build orders consume BOM-allocated stock to produce assembled parts with step-by-step work order tracking, while purchase orders manage supplier relationships with pricing history, lead times, and automatic stock receipt processing. The modern React frontend built with Mantine, TanStack Query, and Zustand provides responsive data tables, tree-select navigation, a preview drawer, and a snippet editor. The extensible plugin system supports 19 mixin types including BarcodeMixin for scanner integration, LabelPrintingMixin for Zebra and Brother printers, AppMixin for custom database tables, and ScheduleMixin for periodic background tasks. Companion mobile apps on Android and iOS provide barcode scanning and stock operations in the warehouse. Docker Compose deploys with PostgreSQL, MySQL, or MariaDB backends behind any reverse proxy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MikoPBX gives a small business a complete phone system on a server it controls, with extensions, call queues, IVR menus, and call recording instead of per-seat hosted PBX fees. Follow a call through it: incoming rules per provider match exact numbers or patterns, fall through by priority when nobody answers, and end at a default route. Each employee gets an extension with SIP credentials, forwarding for no-answer, busy, and unavailable states, and an optional recording switch. Queues offer seven distribution strategies, including Ring All, Least Recent, Fewest Calls, and Memory Hunt, and can announce each caller's position and estimated wait. IVR menus play a recorded greeting, route keypad choices to departments or extensions, and fall back to a default number after a set number of retries. Call history filters by caller, destination, or DID, flags missed calls in red, and plays or downloads recordings as WebM, MP3, WAV, or OGG. Voicemail, call transfer, call pickup, and a holiday and night-time switcher serve daily needs, while free and paid marketplace modules, among them a softphone, auto dialer, and LDAP/AD sync, handle the rest. A firewall, Fail2Ban, passkey sign-in, and CrowdSec integration protect the system, and a REST API with more than 250 endpoints lets other tools manage it. The interface speaks 26 languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Ditch the spreadsheet for good: Whisper Money is a privacy-first personal finance app you host yourself to see exactly where your money goes, without your data being sold or profiled for ads. Connect multiple bank accounts in one place, fill them by hand or CSV import, and watch transactions categorize themselves automatically. Automation rules handle the repetitive sorting: rent, subscriptions, and transfers land in the right buckets every time. Brokers and exchanges including Indexa Capital, Coinbase, Binance, Bitpanda, Wise, and Interactive Brokers connect with your own API keys, so investments sit beside everyday spending. Optional open banking through EnableBanking can pull a year of movements and keep them current, and it stays switched off until you configure it. AI features suggest categories and rules and summarize your stats reports, and you choose the provider: Gemini by default, or OpenAI, Anthropic, Groq, DeepSeek, Mistral, any OpenAI-compatible endpoint, or a local Ollama server so nothing leaves your infrastructure. Spending pattern insights turn raw transactions into an honest picture of your habits, month after month. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. CC BY-NC 4.0 licensed.

Your closet already knows what you own; Wardrowbe is the part that remembers it for you and decides what goes together tomorrow morning. Photograph garments one at a time or several in a single shot, and a vision model tags each piece with its type, color, pattern, fabric, style, and formality, with a confidence score you can correct. From that catalog the app builds complete outfits out of clothes you already have, weighing your local weather, the occasion, notes you attached to individual pieces, and the aesthetic you described. A daily suggestion can arrive on a schedule through ntfy, Mattermost, or email, so the outfit is waiting before you are. Accept, reject, and rate what you wear, and the history calendar keeps every past recommendation while the feedback sharpens the next ones. Pairings work the other way around too: pick one item and get outfits built around it, each with a plain-language explanation of why the combination works. Analytics show what you actually wear, what never leaves the rail, and how your colors distribute, and the wardrobe view flags pieces that need washing. Households manage several members' wardrobes with personalized suggestions for each person. Everything runs against any OpenAI-compatible endpoint, so Ollama with a local multimodal model keeps the whole pipeline offline and free. The interface speaks eight languages and follows your browser by default. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Spreadsheets and old Access databases give way to custom business apps that a team builds itself in a browser with Saltcorn, a no-code database application builder. Tables hold related records with typed and calculated fields, and CSV files import straight into them. Views start from patterns such as list, show, edit, filter, kanban, calendar, gantt, map, and chart, then take shape on a drag-and-drop canvas with a layers tree and desktop, tablet, and mobile previews. A view can embed another view, so clicking a row narrows the others and builds a cross-filtering dashboard with no glue code. Triggers react to row changes, schedules, logins, and API calls, while visual workflows branch, loop, and pause for a person's form before resuming days later. An AI copilot drafts tables, pages, and workflows from a plain-language prompt. The same views also become native Android and iOS apps with offline mode, PDF or image documents, and responsive emails. Every table, view, and page carries a minimum user role, and an auto-generated REST API exposes the data. Packs such as project management and an address book start an app from a ready template. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pageviews tell you someone arrived; Pug is an open-source product analytics platform that shows what people actually did next, across events, funnels, retention, and user flows. Capture events from browser, Android, Flutter, Node, Go, or Ruby SDKs into an ingestion pipeline that enriches each hit with geography, user agent, bot detection, and web attribution automatically. Identify and alias the users behind events, then open a profile to see traits, sessions, and the full activity history of a person. Build insights as trends, funnels, retention cohorts, segmentation, Sankey user flows, and top-K breakdowns, with filters and period-over-period comparison on every chart. A web analytics overview is generated from your events with visitors, sessions, pageviews, bounce rate, and traffic sources, requiring no tile wiring. The live view plots every current visitor on a real-time world map, down to the person and the event they just fired. Compose dashboards from insight and markdown tiles on a time-windowed grid that analysts rearrange without touching ingestion. Erase a person's events and profile on request to satisfy GDPR and DPDP data-subject obligations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Mail for your own domain stays on your own server with mailez, a self-hosted stack that delivers over SMTP, IMAP, and POP3 and adds a webmail, calendar, contacts, file storage, and an admin console, all started with a single command. Readers get a draggable three-pane webmail that updates itself over a push channel, merges replies into conversations, folds quoted history, and searches with from:, to:, has:attachment, and date terms. Keyboard shortcuts, a command palette, snooze, scheduled send, undo for bulk moves, and quick reply keep daily mail fast, and the interface installs as an offline-capable app with light and dark themes. Privacy-minded users add PGP signing and encryption, two-factor login, and remote-image blocking, and write server-side rules in a Sieve editor. Calendar, contacts, and Drive sit beside mail, with ICS subscriptions, vCard import, CardDAV and CalDAV sync, and share links. Phones and desktop clients configure themselves through autoconfig. Administrators manage domains, mailboxes, aliases, relays, and external mailbox fetching in one console, generate DKIM keys with a click, and follow a DNS wizard and a health page that verify MX, SPF, DMARC, DKIM, blocklists, and MTA-STS. Audit logs and role-based access keep shared servers accountable. The free community edition runs on a single node, while archiving, DLP, LDAP, ActiveSync, and AI features belong to the paid enterprise edition. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.