libSQL bridges the gap between SQLite's legendary simplicity and the server-accessible database model developers expect from PostgreSQL and MySQL, adding network access, replication, and vector search while maintaining full file format and API compatibility. The sqld (SQL daemon) component transforms SQLite into a network-accessible database server accepting queries via HTTP with JSON payloads, WebSocket connections, and a Hrana protocol optimized for low-latency edge access. Client libraries for TypeScript, JavaScript, Rust, Go, and Python connect to sqld identically to any traditional client-server database, while the LD_PRELOAD compatibility layer enables switching existing SQLite applications from local to remote mode without code changes. Embedded replicas synchronize a local SQLite copy inside your application process with the primary server, delivering sub-millisecond read latency while maintaining consistency through streaming replication. Bottomless replication continuously backs up database state to S3-compatible object storage with generation-based snapshots and WAL page shipping, providing point-in-time recovery without manual backup scheduling. Native vector search enables semantic similarity queries directly within SQL using cosine distance functions, eliminating the need for external vector database infrastructure. Read replica support distributes query load across multiple sqld instances, and integration with mvSQLite adds multi-version concurrency for high-availability deployments. Created by Turso with 17,100+ stars and active production deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Draw it, write it as code, or hand it to your AI agent: OpenFlowKit is an open-source diagram canvas where the picture and the text behind it are always the same diagram. Drag shapes on the canvas or type a few forgiving lines, and each side regenerates the other as a single undo step. Ten diagram types share that one language: architecture with C4 views and cloud icons, sequence, flowchart, entity-relationship, state, class, mind maps, git graphs, charts, and wireframes. Paste Mermaid, Structurizr, or D2 and it converts into editable shapes, and Copy as Mermaid sends a flowchart or sequence back out for your README. Paste a GitHub repository instead and Map mode draws its architecture for you, with every arrow citing the exact file and line behind it, and a CLI that maps a local checkout for private repos. Connect Claude Code, Cursor, or any MCP client and the agent draws on your live canvas, restyles what is there, and screenshots its own work to check it. A built-in assistant works with your own key from Claude, OpenAI, Gemini, Groq, Mistral, OpenRouter, or a local Ollama, and exports cover PNG, SVG, PDF, JSON, and animated SVG, GIF, MP4, or WebM you can drop into documentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A recipe manager that feels like a consumer product rather than a homelab experiment: Mealie pairs a FastAPI backend with a reactive Vue frontend for the most polished self-hosted meal planning around. The killer feature is the recipe scraper: paste a URL from hundreds of supported cooking sites and Mealie imports the ingredients, steps, times, and photos automatically. Structured HTML/JSON paste, a Markdown-capable manual editor, and imports from other recipe apps (like Tandoor) cover everything else. Meal planning uses a drag-and-drop calendar with breakfast, lunch, dinner, and snack slots, plus rule-based random recipe insertion - constrain the pool by tags or categories per meal type or weekday. Shopping lists link recipes so all ingredients land in one place, organized into supermarket sections, and update in real time for everyone in the household. The multi-tenancy model is genuinely thought through: isolated Groups can host multiple tenants, and Households within a group share recipes and organizers while keeping meal plans and shopping lists private. Cookbooks group recipes by your own criteria, a cooking mode stays readable on a phone propped against the backsplash, and 35+ language translations ship built-in. A fully documented REST API and scheduled webhooks (e.g., today's meal plan to Home Assistant) make it automatable, with SQLite or PostgreSQL storage and automatic backups.

Rakazo lets you hire AI bots the way you would onboard teammates: each gets a job, persistent memory, its own sandboxed computer, and a schedule, and it reports back in chat while you check in from any device. Start from templates such as Sales Outbound, Inbox Manager, Talent Scout, Expense Manager, Coding Agent, or Chief of Staff, then tune the instructions, tools, and limits until the bot works the way your team works. Every bot can run on a different model, so research uses one provider while coding uses another, and a local model served by Ollama or LM Studio keeps sensitive work off third-party servers. Bots work on real computers with a browser, terminal, file system, and graphical desktop you can watch or take over, choosing shared team computers or isolated private ones. When a task outgrows one bot, it delegates pieces to peer bots or short-lived subagents and folds their results back into its own thread. Voice mode lets you dictate messages and hear spoken replies, while routines run on schedules so follow-ups, reports, and inbox sweeps happen while you are away. You decide which actions need your approval before a bot takes them, and integrations via Composio, Pipedream Connect, MCP servers, and OpenAPI documents connect bots to tools you already use. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

One calendar answers who is away next week: Urlaubsverwaltung is a self-hosted leave and absence manager where employees request vacation, managers approve it, and sick notes and overtime balances live beside the requests. A request moves through waiting, provisionally approved, finally approved, rejected, or cancelled states, so employees and approvers always see where a decision stands. Department heads decide for their own teams, a second stage authority can add the final approval, the boss sees every request company wide, and office staff manage people, settings, and sick notes for others. Administrators configure which absence types exist, from annual and special leave to parental leave, sabbatical, training, and working from home, each with its own color and rules. Sick notes are recorded as full day, morning, or afternoon, including child sick notes, and a note can later be converted into vacation when plans change. Overtime gets the same care: staff log hours and minutes for any period, choose to add or reduce their balance, and attach a comment for the record. Personal, department, and company calendars collect every absence, secret iCal links feed external calendar apps, and optional Google Calendar synchronization pushes new and changed entries. Email notifications for submissions, upcoming absences, substitute duties, and overtime entries can be switched on per person, and a token protected REST API exposes persons, absences, sick notes, and workdays. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Dockhand is a Docker management platforms, offering a modern alternative to Portainer with free OIDC SSO and vulnerability scanning that competitors gate behind paid tiers. Real-time container management provides start, stop, restart, and remove operations with live resource monitoring across CPU, memory, and network usage on a dashboard with real-time metrics. The visual Docker Compose editor enables stack creation and modification with syntax highlighting, while Git integration deploys stacks directly from repositories with webhooks and auto-sync for GitOps workflows. Vulnerability scanning powered by Grype and Trivy analyzes container images against CVE databases, with configurable auto-update scheduling that can trigger updates based on vulnerability severity criteria. The Hawser Go agent enables management of remote Docker hosts in Standard mode for LAN environments or Edge mode using outbound WebSocket connections for hosts behind NAT, firewalls, or dynamic IPs without exposing inbound ports. Interactive terminal sessions provide shell access into running containers, while the file browser enables uploading, downloading, and editing files directly within containers. Image management includes registry browsing, pull operations, and layer inspection alongside network and volume administration. The security-focused architecture builds its own OS layer from scratch using Wolfi packages via apko with every package explicitly declared. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed, converting to Apache 2.0 in 2029.

With over 35,000 GitHub stars in just two years, Glance has become the most popular self-hosted dashboard project on GitHub, outpacing established alternatives like Homarr and Homepage. Built as a single Go binary under 20MB with minimal JavaScript and zero external dependencies, Glance delivers a blazing-fast personal information dashboard that consolidates your entire digital morning routine into one beautiful page. Configure everything through clean YAML files that support modular includes and environment variable interpolation, with automatic hot-reload that applies changes without restarting the server. The widget ecosystem covers RSS and Atom feeds, Reddit and Hacker News frontpages, YouTube channel subscriptions, GitHub release timelines, weather forecasts from Open-Meteo, stock market quotes, Docker container status, Twitch live streams, calendar events via iCal, site monitor uptime checks, and custom HTML or iframe embeds. A community widgets repository extends functionality even further with user-contributed integrations. The theming system provides light, dark, and custom color schemes with multiple layout options including slim and wide column configurations. Authentication support added in 2025 secures access with username and password protection. Preconfigured page templates let you get started in seconds with curated layouts for development, homelab monitoring, news reading, and entertainment tracking. Deploy via Docker Compose or as a standalone binary on Linux, macOS, or Windows across AMD64 and ARM64 architectures. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Contracts signed on your own server: DocuSeal is the most feature-complete open-source, self-hosted alternative to DocuSign. A WYSIWYG builder turns any PDF into a fillable form with 14 field types: signature, initials, date, file upload, checkbox, dropdown, radio, stamp, and more. Documents route to multiple submitters in sequence or parallel, with automated SMTP email notifications, reminders, and a mobile-optimized signing experience that works on any device without an account. Every completed document carries an automatic PDF eSignature with verification and an audit trail. Templates are reusable and can also be generated programmatically - from HTML via API or from PDFs and DOCX files with embedded field tags - and the REST API plus webhooks drive full workflow automation, with embedded signing forms and form builders for React, Vue, Angular, and plain JavaScript. Files store on disk or in S3, Google Cloud Storage, or Azure. The UI ships in 7 languages with signing in 14. Runs on SQLite, PostgreSQL, or MySQL; AGPL-3.0 licensed with unlimited documents and no per-signature fees.

Build a voice AI agent that answers calls, qualifies leads, books appointments, and transfers to a human when needed, all from a drag-and-drop workflow builder in your browser. Dograh ships as a Docker Compose stack (API, web UI, Postgres, Redis, MinIO) that you self-host on any Linux server with automatic HTTPS provisioning via Let's Encrypt. The visual workflow builder lets you design multi-turn conversation flows by connecting nodes for greetings, intent classification, tool calls, and handoffs; describe your use case in plain English and the platform generates the LLM prompt and node graph for you. Connect your own speech-to-text, LLM, and text-to-speech providers (OpenAI, Anthropic, Gemini, ElevenLabs, Deepgram, local Whisper, Kokoro, or any OpenAI-compatible endpoint) or use the built-in Speech-to-Speech mode with Gemini Flash Live and GPT-Realtime-2 for sub-200ms latency. Telephony plugs in through Twilio, Vonage, Vobiz, or Cloudonix for inbound and outbound calling, with live agent transfer when the conversation needs a human. Webhook tool calls connect to Salesforce, HubSpot, Google Calendar, Cal.com, or any REST API without writing orchestration code. The ClonedVoice feature mixes real human voice recordings for high-frequency phrases with neural TTS fallback for dynamic content, cutting costs while improving caller trust. A built-in MCP server lets AI coding agents like Claude Code or Cursor design, test, and edit workflows through natural language. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD 2-Clause licensed.

Skip the shell and the configuration file: Webmin handles user accounts, disk quotas, services, and server software on Linux and Unix machines from a browser tab. More than 100 standard modules sit under seven menus: Webmin, System, Servers, Tools, Networking, Hardware, and Cluster. System covers Users and Groups, Scheduled Cron Jobs, Running Processes, System Logs, Log File Rotation, Disk Quotas, Filesystem Backup, and systemd Bootup and Shutdown, plus Software Package Updates, which can hold selected packages on APT and DNF systems. Servers edits Apache, Nginx, BIND DNS, Postfix, Dovecot, MySQL and MariaDB, and PostgreSQL through forms. Networking brings an nftables firewall editor, Fail2Ban jails, and IPsec VPN settings. Tools adds File Manager, Custom Commands, and a Terminal that opens right in the browser. Hardware lists firmware, PCI, USB, storage, and sensor details. The dashboard keeps live CPU, memory, and disk gauges, stats history graphs, and a pending updates alert in view. Webmin Users limits each account to the modules it needs, while two-factor authentication, IP access control, and SSL settings guard the panel itself. Cluster modules reach other hosts registered in the Webmin Servers Index and run cron jobs, shell commands, and package installs on many servers at once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Self-hosted music requests, no Lidarr install needed: DroppedNeedle searches MusicBrainz, drives your own slskd or Usenet setup, and files only verified, tagged tracks in your library. Request a whole album or a single track, then retry or cancel from a dedicated requests page. The engine queries slskd, or SABnzbd with Newznab indexers or Prowlarr, and scores every candidate before anything downloads. Files must pass checks for readable tags, a sane duration, and an optional AcoustID fingerprint match. Close calls park for admin review. Failed requests are searched again until a verified copy arrives. Quality floors per format and storage caps keep the library tidy, and better copies replace old ones. The built-in player queues Jellyfin, Navidrome, Plex, local files, and YouTube previews with shuffle, a 10-band equalizer, and embedded lyrics. Prefer your own app? Symfonium, Finamp, Feishin, and other Subsonic or Jellyfin clients connect with revocable app passwords. Discovery rows draw on ListenBrainz and Last.fm history and global charts, and a weekly mix can queue up to five missing albums. Follow artists for new-release alerts, or add Ticketmaster or Skiddle keys for gig listings in cities you choose. Import Spotify playlists, or drag in a zip of music you bought. Admin, Trusted, and User roles decide whether a request starts at once or waits for approval. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Hunting for a suspicious file, process, or registry key across every endpoint becomes a single hunt in Velociraptor, an endpoint visibility and digital forensics platform. A web console sends tasks to clients on Windows, Linux, and macOS machines, which hold a persistent connection and run each task as soon as it is issued. A hunt runs a VQL artifact, one of more than 400 built in, across selected endpoints, picks up machines that reconnect later, and tracks which hosts have answered. Each hunt and collection opens into a notebook where markdown and live VQL cells group, filter, and timeline the results. A virtual file system browses a client's directories and fetches files through file, NTFS, and registry accessors, with hex and text viewers. Offline collectors bundle chosen artifacts into one binary that writes an optionally encrypted container for later import, suiting machines that never reach the server. Client event queries stream telemetry such as DNS lookups to the server, and server event queries can alert Slack, email, Elastic, or Splunk. Quarantine confines a host's network traffic to the Velociraptor server, and the Shell page runs commands on it. Sign-in works through Google, Azure, GitHub, OIDC, or SAML, with reader, analyst, investigator, and administrator roles. Responders reach for it during threat hunts, compromised host triage with KapeFiles targets, and dead disk image analysis. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Every line an indentable bullet, every bullet a first-class block that can be referenced, embedded, and queried anywhere: Logseq is a privacy-first, local-first knowledge platform built around the block outliner. The daily journal is the system's beating heart - each day opens a fresh date-stamped page where tasks, meeting notes, and fleeting ideas land as blocks without filing decisions, then connect later through [[wikilinks]] with automatic bidirectional backlinks and ((block references)) that transclude any bullet into any page. Everything persists as plain Markdown or Org-mode files on disk - git-friendly, greppable, and owned forever, with sync via iCloud, Dropbox, Syncthing, Git, or an optional end-to-end encrypted service. Built-in tooling goes beyond notes: TODO/DOING task states with scheduling, native PDF annotation with area highlights, spaced-repetition flashcards, whiteboards for visual thinking, Zotero integration for researchers, and Datalog-powered queries that build dynamic views across the entire graph. A marketplace of hundreds of community plugins and themes adds AI chat, Ollama local-model integration, and custom workflows. Written in Clojure/ClojureScript, AGPL-3.0 licensed with 320+ contributors, and completely free - the local-first Roam for people who refuse subscriptions and lock-in.

Share a game, a film, or your holiday photos with up to 20 friends, and let them watch from a browser tab with nothing to install. The host picks a screen, window, browser tab, or camera, then sends an invite link or a four-digit room code, with an optional room password. Friends open it on a desktop or phone, press Play, and chat or react while it runs, with optional on-screen chat. A microphone switch adds spoken commentary, with a choice of input device and voice volume. Video travels directly between participants where possible, and a self-hosted server can add automatic forwarding for networks that block direct links. Sharing settings cap resolution from 480p to 1440p, frame rate up to 60 fps, and audio at 64, 128, or 192 kbps, with Clarity, Balanced, and Fluency presets and a choice of VP8, H264, or automatic codecs. Viewers get playback controls, picture-in-picture, fullscreen, light and dark themes, and a connection topology view. The interface follows the system language in Chinese or English, with a visual-only mode for a text-free look. Piik App adds native capture on Windows, macOS, and Linux, while a hosted site works from any desktop browser. A self-hosted site can set a site passphrase, a viewer limit per room, and automatic cleanup of empty rooms. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Adobe Acrobat and Smallpdf, answered by a self-hosted Java web application: Stirling PDF processes every file with its 60+ tools on your own server and deletes it after the task completes. Nothing is uploaded to a third party, which is the whole point for contracts, invoices, and medical records. The toolbox covers page operations (merge, split at page numbers or scanned dividers, rotate, reorder, crop, extract), conversion in both directions between PDF and Word, Excel, PowerPoint, images, HTML, and Markdown, OCR that turns scans into searchable PDFs via Tesseract/OCRmyPDF (including PDF/A archival conversion), and security tools for passwords, permissions, watermarks, signatures, and true UI-driven text redaction. A built-in viewer handles annotation, drawing, and text or image insertion, and V2 added stateful processing - upload once, chain multiple tools - plus undo/redo history. For automation, nearly every tool has a REST API endpoint, no-code pipelines combine operations into custom logic chains, and watched folders process files automatically. Enterprise deployments get SSO, user management, and audit logging; the interface ships in 40+ languages. With 84K+ GitHub stars it is the most popular PDF tool in self-hosting, replacing $20/month Acrobat subscriptions with flat infrastructure cost.

With over 164,000 GitHub stars and one of the fastest-growing open-source projects in the AI tooling ecosystem, Firecrawl is the web context API that turns any website into clean markdown, structured JSON, or screenshots optimized for large language models. The Scrape endpoint converts a single URL into LLM-ready output with approximately 67% fewer tokens than raw HTML, handling JavaScript rendering, rotating proxies, anti-bot bypasses, and dynamic content extraction with zero configuration. The Crawl endpoint recursively scrapes entire websites from a single request with configurable depth, URL filters, and concurrent page limits. The Map endpoint discovers all URLs on a domain instantly for sitemap generation. The Search endpoint performs web searches and returns full page content from results. The Interact endpoint scrapes a page then continues working with it — clicking buttons, filling forms, and extracting dynamic content using AI prompts or code. The Agent endpoint provides autonomous web data gathering where users describe what they need in plain English. SDKs are available for Python, Node.js, Go, Rust, Ruby, PHP, Java, C#/.NET, and Elixir, with an MCP server for connecting to any AI agent or MCP client. Self-hosting deploys via Docker Compose and requires Redis and a Playwright-based browser service for JavaScript rendering. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With nearly 5,000 GitHub stars earned in under two years, WhoDB has rapidly emerged as the lightweight alternative to heavyweight database clients like DBeaver and DataGrip by delivering a sub-50MB binary that starts in under a second and connects to 18+ database systems from a single interface. The Go backend serves the React and TypeScript frontend with table virtualization for efficient rendering of large result sets, lazy loading, and query result streaming that keeps the interface responsive even when browsing tables with millions of rows. The Community Edition connects to PostgreSQL, CockroachDB, YugabyteDB, MySQL, MariaDB, TiDB, SQLite, DuckDB, MongoDB, FerretDB, Redis, Valkey, Dragonfly, Elasticsearch, OpenSearch, ClickHouse, QuestDB, and Memcached through a unified credential selector that switches between databases with minimal configuration. Interactive schema diagrams render entity-relationship graphs showing table structures, foreign keys, and column types for visual database exploration. The Jupyter-style query scratchpad provides SQL autocomplete, syntax highlighting, and multi-statement execution with paginated results. AI integration optionally connects to Ollama, OpenAI, Anthropic, LM Studio, or any OpenAI-compatible provider for natural language database queries — ask questions in plain English and receive generated SQL. Data management includes inline row editing, CSV export, and filtered data views. Docker deployment runs a single container exposing port 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

LibreDesk unifies live chat, email, and future channel integrations into a single agent inbox where every customer conversation converges regardless of origin, replacing per-seat-priced tools like Zendesk, Intercom, and Freshdesk with a zero-cost alternative that has surpassed 2,000 GitHub stars. Built on a Go backend with a Vue.js 3 and ShadcN UI frontend, it ships as a single binary requiring only PostgreSQL and Redis. The embeddable live chat widget drops onto any website with a snippet, while the AI assistant handles initial customer queries using answers grounded in your knowledge base before escalating to human agents when needed. Agent copilot drafts replies, summarizes conversation threads, and rewrites messages for tone adjustment directly within the inbox interface. Automation rules trigger on conversation events to tag, assign, and route tickets based on configurable conditions, while auto-assignment distributes workload by agent capacity or custom criteria. SLA management tracks response and resolution time targets with breach notifications, and automated CSAT surveys measure satisfaction after conversation closure. Macros save frequently sent responses as reusable templates that simultaneously set tags and assign conversations. Role-based access control provides granular per-action permissions for teams and individual agents, and SSO supports Google, Microsoft, and any OIDC provider. The HTTP/JSON API and webhook system enable custom integrations with external tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.