With 4,300+ GitHub stars and native mobile apps on three platforms, Black Candy transforms any VPS into a private Spotify-style streaming service for your personal music collection. The Ruby on Rails 7 backend with Hotwire Turbo and Stimulus delivers a responsive single-page-feeling web player supporting album browsing, artist views, playlists, favorites, and queue management without full page reloads. Point it at a media directory containing MP3, FLAC, OGG, AAC, or WAV files and Black Candy indexes metadata, fetches album artwork from Discogs API, and begins streaming immediately with on-the-fly transcoding that adapts bitrate to client bandwidth. Multi-user support gives each account independent playlists, favorites, and listening history while sharing the same music library — ideal for families or shared households. Native iOS, Android, and F-Droid apps maintained as separate repositories provide offline caching, background playback, and server discovery for mobile listening. The admin panel manages user accounts, configures media paths, and sets Discogs API tokens for automatic cover art retrieval. Deployment requires one Docker command — `docker run -p 80:80 ghcr.io/blackcandy-org/blackcandy:latest` — with persistent storage volumes for the SQLite database and media directory. For larger deployments, switch to PostgreSQL via environment variables with dedicated database URLs for ActionCable, SolidQueue, and SolidCache. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your users belong in your own database - Authorizer, an open-source authentication and authorization server shipping as a single Go binary, keeps them there. It connects to 13+ backends - PostgreSQL, MySQL, SQLite, SQL Server, MariaDB, MongoDB, Cassandra, ScyllaDB, ArangoDB, DynamoDB, Couchbase, YugabyteDB, PlanetScale, and CockroachDB - so identity data lives beside the application it protects instead of in an auth vendor's cloud. The server is fully OAuth 2.0 and OpenID Connect compliant, including authorization code flow with PKCE, a JWKS endpoint, token revocation, and nine JWT signing algorithms. Login options cover email/password, magic links, TOTP multi-factor, SMS OTP via Twilio, and social providers including Google, GitHub, Apple, Microsoft, and Discord. Authorization goes beyond roles: an embedded OpenFGA engine provides Zanzibar-style relationship-based permission checks in process. APIs are exposed over GraphQL, REST, and gRPC, with SDKs for JavaScript, React, Go, and Python, plus themeable built-in login pages and an admin dashboard. Apache 2.0 licensed.

SendPortal is a self-hosted email marketing platform for building subscriber lists, sending campaigns, and tracking exactly what happens to every message after it leaves your server. Grow the list three ways: add contacts one by one, import them in bulk from CSV, or push them through the API, which creates or updates subscribers by email address and attaches tags. Tags and custom segments organize audiences, sending product updates to power users and sale announcements to everyone else. A campaign pairs a subject line, which can insert first name, last name, and email placeholders, with an optional HTML template holding content, unsubscribe, and browser view placeholders. Automatic CSS inlining at dispatch keeps designed emails rendering properly in inboxes that ignore style sheets. Send a test email to yourself before anything goes out, then choose immediate delivery or schedule the campaign for later. Pick Queue Draft to review messages before they leave, or Send Automatically when the audience and content are already right. Open and click tracking, bounce records, and unsubscribe events then flow back through provider webhooks into per campaign reports and a searchable message log. Run several brands or clients side by side in separate workspaces inside one interface. Delivery runs through Amazon SES, Postmark, SendGrid, Mailgun, Mailjet, or your own SMTP server, so deliverability stays with providers built for it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

II-Agent is an autonomous AI agent platform that ranked first on the GAIA benchmark by combining multi-step task planning with a full-stack execution environment spanning research, coding, browsing, and content creation. The platform runs a React frontend on port 1420 backed by FastAPI on port 8000, with PostgreSQL for persistence, Redis for task queuing, and MinIO for S3-compatible file storage, all deployable via Docker Compose. Users switch between Anthropic Claude, OpenAI GPT, and Google Gemini mid-conversation using bring-your-own-key authentication. Task domains include deep research with source triangulation, website and mobile app generation from prompts, storybook creation with illustrations, video and image generation via Google Veo and Imagen, presentation building with live collaborative editing, and document manipulation covering PDF extraction, Excel formulas, Word editing, and PowerPoint creation. Built-in connectors integrate Gmail, Slack, GitHub, Notion, Google Calendar, Discord, Dropbox, and Canva for workflow automation. A sandboxed code interpreter runs Python while browser automation with vision capabilities handles web interactions. Custom skills let teams package and reuse workflows. Context management handles up to 120,000 tokens with intelligent window sizing. 3,400+ GitHub stars. Apache-2.0 licensed.

Add a live support desk to any website with Live Helper Chat, where visitors talk to operators or bots and you own every transcript. Site owners paste a generated embed snippet into any page, and the start-chat fields are customizable. Chats are routed by department, language, location, or custom attributes, wait in a priority queue, and move between agents. Operators, departments, and simultaneous chats are unlimited. Agents watch a visitor type before the message is sent, read pages visited and time on site in the online visitors list, and send proactive invitations to people who linger. Voice, video, and screen sharing run through Jitsi or Agora, and a screenshot shows what the visitor sees. Bot designers chain triggers and actions in a visual builder, call ChatGPT, Gemini, Ollama, Rasa, or any REST API, and hand the conversation to a person when needed. Incoming email becomes tickets beside chats, and extensions connect Telegram, WhatsApp, Facebook Messenger, and Twilio SMS. Staff answer from the browser, a desktop app, a Chrome extension, or iOS and Android apps. Management tools include roles, groups, statistics, transcripts, and an archive, and extensions add two-factor login, LDAP, and single sign-on. It suits banks, healthcare teams, universities, and game studios that must keep chat data in house. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Upload files, get a share link, let it expire: PsiTransfer is a self-hosted WeTransfer with no accounts, no logins, and no third-party cloud with size caps and metadata harvesting. The engineering focus is large files over imperfect networks. Uploads use the tus.io resumable protocol, so a dropped connection on a multi-gigabyte video resumes exactly where it stopped once you're back online; downloads support HTTP range headers for the same resilience, and everything streams, so file size is bounded by your disk rather than memory. Files organize into upload buckets with retention you control: expire after a set time (up to weeks) or after a one-time download, with automatic cleanup when links lapse. Recipients need nothing installed - they open the link, preview files in modal views, and grab everything as a zip or tar.gz archive with one click. Buckets can be password-protected (AES-encrypted download lists), and security-through-obscurity is done properly: bucket URLs use hashed UUID tokens and stored filenames are replaced with UUIDs. An optional admin page (enabled by setting an admin password) lists bucket information and storage. The Vue.js frontend ships under 100 KB gzipped and is fully responsive. Honest caveat from the author: no end-to-end payload encryption yet. BSD-licensed, Docker-ready.

Freelancers, consultants, and solo workers get an accurate record of their hours from TimeTagger, a time tracker that logs tagged tasks on an interactive timeline and summarizes them as billable reports. Press S, type a description, and hit Enter to start the clock without the mouse, or drag across the timeline to log finished work. Hashtags in a description become autocompleting tags, with no projects to set up. Renaming a tag updates every record that uses it. Drag a record's edges to fix its times, then zoom the timeline out to a week or month with mouse, touch, or arrow keys. An overview panel totals time per tag combination for the selected range, and the Report button saves it as a client-ready PDF or a CSV with decimal hours. Daily, weekly, and monthly targets track progress toward your goals, and an optional Pomodoro timer alternates work and break periods with an alarm and a notification. Settings add a dark theme, local date notations, a Monday-to-Friday week, and a day offset for night shifts. The interface adapts from desktop to phone, installs as a progressive web app, works offline, and syncs records across devices once the connection returns. A web API and a command-line client let you query, create, and update records from scripts or the terminal. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Try an idea in React, Svelte, Python, or SQL without installing anything: LiveCodes is a browser-based playground where code compiles, runs, and previews the moment you type it. Starter templates open ready-made projects for most of the 90+ supported technologies. The desktop editor brings completion, multi-cursor editing, Emmet, and Vim or Emacs bindings, while a lighter touch-friendly editor takes over on phones and tablets. Packages from npm, deno.land/x, jsr, and GitHub import straight into your code, and a console, compiled-code viewer, and test runner show what happens behind the preview. Bring projects in from GitHub gists, GitLab snippets, JS Bin, or zip files, then share them as links or QR codes, export them as HTML, JSON, or zip archives, or send them to CodePen and JSFiddle. Deploy a project to a public URL on GitHub Pages, sync your work across devices, or broadcast your editor and result live to a classroom. An embed builder and SDKs for JavaScript, React, Vue, Svelte, Solid, Preact, and web components place playgrounds inside documentation pages, and prefilled code makes every example editable. Projects stay private by default. Local assets, snippets, themes, and dark or light modes tailor the workspace to each person. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

"A highly-opinionated midwestern self-hosted Discord music bot that doesn't suck," per its own README - Muse is built for servers the size of you, your friends, and your friends' friends. It exists because the big public music bots kept getting shut down or paywalled, and self-hosting yours means nobody can take it away. Written in TypeScript on discord.js, it joins voice channels and plays audio resolved from YouTube via yt-dlp, and given optional Spotify API credentials it auto-converts Spotify tracks, albums, artists, and entire playlists to playable equivalents. The playback details show real care: seeking within songs and videos, livestream support, local caching so repeated plays start instantly, volume normalization across tracks, and configurable volume controls including optional ducking that lowers music when people speak. SponsorBlock integration can skip non-music segments automatically. Users save favorite queries as reusable shortcuts, and one Muse instance serves multiple guilds simultaneously - one deployment for all your communities. Configuration is three environment variables (Discord token, YouTube API key, optional Spotify pair) and the personality is free: there is no vote-to-skip, because "this is anarchy, not a democracy," and the bot remains a loyal Green Bay Packers fan. MIT-licensed and easily extendable.

Large link collections stay fast and organized in Faved, a private, self-hosted bookmark manager built for exactly that job. Its core is a nested tagging system that outgrows flat folders: place Go and Python under Programming Languages, color-code tags, add descriptions, pin frequent ones to the top of the sidebar, and optionally roll up child-tag items into parent views. Saving is frictionless - a lightweight bookmarklet works in any desktop or mobile browser without extensions, and Apple devices can send links through the native Share menu. Faved fetches titles, descriptions, and preview images automatically, keeps that metadata fresh over time, and flags duplicates as you save. Instant as-you-type search, flexible sorting, and bulk actions (retag, delete, refetch) keep collections of any size manageable, while customizable layouts - card, list, or table - plus a system-synced dark mode adapt the interface to your workflow. Migration is first-class: import from Chrome, Safari, Firefox, or Edge with folder structure preserved, or move from Pocket and Raindrop.io keeping tags and collections. The stack is deliberately light - PHP 8 with SQLite behind a React/Tailwind frontend - deploying via Docker with no external dependencies. All data stays local: no ads, no tracking, and no risk of your library vanishing with a discontinued service.

One server, treated properly: Nanocl runs your containers and full virtual machines from a single declarative Statefile, reconciling what is running against what the file says, so a lone host gets cluster discipline without cluster ceremony. Containers group into Cargoes with replica counts, ordered init containers, and health-aware restarts; finite jobs run to completion and stop. When a workload needs a real kernel or a custom disk image, it boots as a QEMU virtual machine beside the containers instead of forcing a second platform. Publishing is built in: the proxy controller terminates TLS and routes HTTP and TCP traffic, and the DNS controller keeps service names resolving while workloads come and go. Secrets for registries, certificates, and environment variables attach where they are used, never inside the file itself. The daily loop is a CLI and an API: list processes, follow logs, exec into a container, watch events, and back up the entire deployment state before you change it. Namespaces keep projects apart on the same host, and Statefile arguments, templates, and sub-states carry one definition from staging to production. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT or Apache-2.0 licensed.

NZBfast is a drop-in SABnzbd and NZBGet replacement that downloads from Usenet at line rate and hands you finished jobs verified and extracted. Point Sonarr, Radarr, LunaSea, or nzb360 at it and they keep working untouched, because the APIs they already speak are the ones it answers. The dashboard charts live throughput and resource use beside a drag-to-reorder queue with per-job detail, a provider leaderboard, and data-usage history. Fetching, PAR2 verification, and unpacking overlap in a single pass, so archives open in the stream and a job needs about its own size in free disk. RAR, 7z, and zip sets, encrypted archives, password chains, and nested archives all go through that pipeline, with automatic PAR2 repair when articles arrive damaged. The poster wall turns your newsgroups into a browsable media library with cover art and metadata, and videos preview with real seeking mid-download. Switch on the optional built-in indexer and it scans your groups into a local index behind a Newznab endpoint your other tools can query. Watchlists grab new postings and chase quality upgrades, while RSS automation, Smart Folders, and a weekly scheduler keep recurring downloads hands-off. Every setting is editable in the browser, the log streams into the UI, and a crash-safe journal resumes an interrupted job article by article. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Create an invoice, share a secure link, get paid — that's the entire workflow, no client portals or account registrations required. Invio distills billing into its absolute minimum viable surface while still producing legally compliant EU electronic invoices in Factur-X/ZUGFeRD 2.2 BASIC, UBL 2.1, and Italian FatturaPA formats, all embedded as XML attachments inside WeasyPrint-rendered PDFs. The Deno 2 backend uses Hono v4 for HTTP routing with SQLite persistence, while the SvelteKit 2 frontend styled with Tailwind CSS v4 and DaisyUI v5 delivers a responsive interface that stays out of your way. The team access system includes a permission matrix, TOTP-based two-factor authentication, and OIDC integration with configurable auto-provisioning — drop it into existing identity infrastructure without manual user management. Preset products let you build invoices from reusable catalog items. A change history log tracks every modification for audit purposes. Rate limiting protects the API behind reverse proxies. The entire stack ships as a single multi-stage Docker image containing Deno, Bun, Node, WeasyPrint, and all required font packages — zero external service dependencies beyond the container itself. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Unlicense licensed.

Radarr, Sonarr, and their sibling apps watch RSS feeds for new releases but never go back for what your library is still missing, and Houndarr fills that gap by asking them to search in small, polite batches. It reads the wanted lists of every connected Radarr, Sonarr, Lidarr, Readarr, and Whisparr instance and sends a few search commands per cycle, so a big backlog drains over days instead of arriving as one Search All Missing burst. Each instance has its own batch size, sleep interval, hourly cap, per-item cooldown, and post-release grace period, plus an optional download-queue limit, allowed search windows such as 09:00-23:00, and tag filters that include or exclude items. Three independent passes run per instance: missing items, cutoff-unmet items below your quality profile, and upgrades for files that already meet cutoff, with the last two off until you enable them. Sonarr, Lidarr, and Readarr can search by season, artist, or author, and search order is random or oldest-first. The dashboard shows library health, recent hunts, hourly budgets, and a cooldown schedule per instance, with Run Now buttons for on-demand cycles. The Logs page records every search and skip with its reason in a filterable audit trail that copies as TSV. A key-gated widget endpoint feeds Homepage dashboards, and built-in login or reverse-proxy authentication protects the interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

LMS is a self-hosted music server that streams your own library to any web browser or Subsonic-compatible player. Point it at a folder of tagged files and it builds a library that understands multi-valued genres and moods, composer, conductor, and producer credits, release types, and release groups that keep remasters beside the original. MusicBrainz identifiers settle duplicate artist and album names, and an artist information folder in Kodi NFO format adds biographies and portraits. Browse with filters like Electronic plus Relaxed, then switch on radio mode and the queue refills itself with similar tracks, chosen by audio similarity or by tags. Plays can be scrobbled to ListenBrainz and Last.fm, and loved tracks synchronize with ListenBrainz. Phone apps connect through the Subsonic and OpenSubsonic API with a personal API key, and transcoding trims bandwidth on slow connections. ReplayGain evens out loudness, podcasts and lyrics sit in the same interface, and an admin-only jukebox mode plays through the server's own audio output. Several libraries can live side by side, a .lmsignore file keeps unwanted folders out of scans, and logins can use the internal user database, PAM, or reverse-proxy SSO headers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Tag a Docker container with two labels, and AutoXpose turns it into a published service with a DNS record, a reverse proxy route, and HTTPS, without you opening a single provider dashboard. From the web dashboard you connect one of six DNS providers, Cloudflare, Netlify, DigitalOcean, Porkbun, Aliyun, or Tencent DNSPod, and point it at the Nginx Proxy Manager or Caddy instance you already run. It watches your containers continuously after that: a new label creates the record, propagation is verified before the service shows as live, and removing the container removes its public entries too. Auto-expose mode publishes containers the moment they appear, while manual mode stages them in the dashboard for approval first. Color-coded service tags sort what you run into web, database, and media groups at a glance, and dashboard warnings flag misconfigurations before they become broken links. Nginx Proxy Manager access lists attach by label, so an admin panel stays reachable only from the networks you trust. When containers vanish, orphaned cleanup hunts down the stale DNS records and proxy hosts they left behind. Settings and state live inside the same single container, so the publishing pipeline for a homelab or a small fleet stays one compose service you can back up as a unit. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Point OBS or a hardware encoder at Restreamer's built-in RTMP or SRT ingest and it serves your website while rebroadcasting to YouTube Live, Twitch, Facebook, Vimeo, TikTok, LinkedIn, PeerTube, and anything else that accepts RTMP, SRT, or HLS - a complete self-hosted live-streaming server from datarhei. That multistreaming normally costs a monthly Restream.io subscription; here it's one FFmpeg process per destination on your own hardware. The web UI is genuinely approachable, with a wizard that walks beginners through camera setup, while professionals get the full surface: multiple audio/video inputs (USB, RTSP network cameras, virtual devices), codec and processing settings, separate audio muxing, and hardware acceleration via Nvidia CUDA, Intel VAAPI, or Raspberry Pi. Serving your own audience is first-class - a built-in Video.js player embeds in your site, a ready-made publication website streams without any embedding work, HLS chunk sizes are tunable, and automatic Let's Encrypt handles HTTPS. Viewer and bandwidth monitoring with limits keeps traffic costs predictable, and it's GDPR-friendly: no third-party provider, no audience data stored. A fully Swagger-documented REST API drives automation. SRT support keeps latency under a second.

Undb turns a browser tab into a full-featured database with spreadsheet-style editing, auto-generated REST APIs, and five configurable views for every table. The platform organizes data through Spaces, Bases, and Tables, offering grid view for traditional editing, Kanban boards for workflow tracking, calendar for date-based planning, gallery for image-rich records, and pivot tables for analytical summaries, each with independent filtering, sorting, color coding, and field selection. An ANTLR4-powered formula engine provides Airtable-style calculated fields with proper syntax validation, variadic argument handling, and type-checked function signatures that go beyond simple string interpolation. Every table automatically generates a fully documented OpenAPI REST endpoint with Swagger UI, letting developers integrate Undb data into external applications through standard HTTP methods without additional configuration. The Drizzle ORM abstraction layer supports four database backends (SQLite, PostgreSQL, MySQL, and Turso edge-distributed SQLite) with separate migration configurations for each adapter. Authentication uses Lucia with OAuth2 via Arctic for GitHub login and Oslo for TOTP two-factor authentication. The SvelteKit 5 frontend renders through Houdini's compile-time GraphQL client and TanStack Svelte Query, while the Elysia.js backend compiles into a single executable via Bun's --compile flag, embedding all assets into one portable binary. File attachments store in any S3-compatible backend including MinIO. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.