Your scanner still emails PDFs, your backup scripts still send nightly reports, and none of them will ever learn OAuth 2.0: Email OAuth 2.0 Proxy learns it on their behalf. It listens on local IMAP, POP, and SMTP ports on your server, and when a client logs in the old-fashioned way with a username and password, the proxy swaps that exchange for a modern SASL XOAUTH2 token before the connection ever reaches the provider. The client never knows anything changed, so ancient mail apps, embedded devices, monitoring tools, and hand-rolled scripts keep sending and fetching mail through Outlook, Office 365, Gmail, Google Workspace, Fastmail, Yahoo, AOL, and any other provider that demands OAuth 2.0. The hop from your client to the proxy stays simple, while the proxy opens a fully encrypted TLS connection upstream, including STARTTLS negotiation for SMTP relays that require it. One proxy instance serves many accounts at once, with each mailbox mapped to its own local port and its tokens cached under a password you control. Optional plugins can even rewrite traffic in flight: strip Microsoft Defender Safe Links back to their real URLs, stop duplicate sent messages, or swallow test mail into a black hole. Setup is a single configuration file covering server ports, per-account scopes, and token endpoints, and the proxy then runs quietly as a headless service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

VitoDeploy replaces a pile of SSH sessions and shell scripts with one browser tab for provisioning servers and deploying websites, on a control panel you host yourself. Spin up a server on AWS, Akamai (Linode), DigitalOcean, Vultr, Hetzner, or Proxmox in a few clicks. Attach any Ubuntu machine you already own as a custom server. Add sites built with PHP, Laravel, or WordPress, or run Node.js and Bun apps behind a reverse proxy. Pull code from GitHub, GitLab, Gitea, or Bitbucket. Set environment variables and HTTP basic authentication. Issue Let's Encrypt, wildcard, or custom SSL certificates. Create MySQL, MariaDB, or PostgreSQL databases, manage their users, and send backups to Amazon S3, Wasabi, FTP, SFTP, Dropbox, or local disk. Manage firewall rules, cron jobs, Supervisor workers, Redis, and multiple PHP versions from the same screens. Watch CPU, memory, and disk use for each server, then open a live SSH shell without leaving the page. Agencies split clients into projects, invite teammates as Admins or Users, and send alerts to Slack, Discord, Telegram, or email. Workflows automate deployments, backups, and maintenance. Plugins, DNS record management, export and import of your setup, and a REST API round out the toolkit. The panel itself needs only 1 GB of RAM and 1 CPU core, then manages your other machines over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Three lab PDFs, a phone photo of a printed slip, and a spreadsheet become one cholesterol trend in Mirobody, a health data engine you host yourself, with the source file behind every number. Upload reports in 23 file types, import an Apple Health export, or connect Garmin, Oura, and Whoop, and every reading keeps a link to the page it was read from. Test names in English, Chinese, Japanese, and other languages resolve offline to LOINC codes and UCUM units, so HbA1c and Glycated Hemoglobin land on one series, and a name it cannot place stays unresolved instead of guessed. Ask questions in plain language and the agent shows each step as it works, charts the trend, and opens the reading and file behind every figure. A health journal turns one typed sentence into coded symptoms, blood pressure readings, and a medication entry, and a denied symptom like no fever is never logged. Genetic exports from 23andMe, AncestryDNA, and WeGene, or a VCF, can be queried by rsID, gene, or region. A care circle lets relatives share their own records on their own terms, and Claude Code, Codex, and Cursor can read your record through the built-in MCP endpoint. Choose OpenRouter, OpenAI, Gemini, Anthropic, or DeepSeek for answers, or keep every model on your own machine. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

HFS turns any folder on a server into a file-sharing site that visitors open in a browser, with no upload step and no space or bandwidth cap beyond your own disk. Visitors browse, search, and download single files or whole folders as ZIP archives that start streaming immediately, and interrupted uploads or downloads can resume. A virtual file system lets you arrange and rename what is shared without touching the files on disk, while accounts and per-folder permissions decide who can see, download, upload, or delete. The admin web panel covers HTTPS with built-in certificate generation, bandwidth limits globally or per IP address, geographic blocking by country, and live connection monitoring with disconnect and IP ban. Plugins add thumbnails, share links, LDAP, two-factor sign-in, download quotas, and notifications, and a few lines of JavaScript in the admin panel can change the look or the backend behavior without a restart. The front end speaks 27+ languages, works on phones, and includes a media player for audio and video. Typical uses include sending large files to friends without uploading them first, publishing a download area, and collecting uploads from visitors. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Every AI agent session starts from zero, and Busabase fixes that: it is an open-source workspace where agents and people share records, docs, skills, and apps, and every agent write arrives as a reviewable change. Bases hold typed records with relations, views, and forms, while Docs, Files, Whiteboards, and Workflows live in the same tree, so a project's data and context stay together. Skills are SKILL.md playbooks that any connected agent can look up before it acts. Each write becomes a Change Request carrying a message, a field-level diff, an author, and history; your permissions decide whether it merges at once or waits in the Inbox for approval, and any change can be reversed. Ask an agent to turn a Base into a dashboard, CRM, or content desk and it runs as an AirApp on live workspace data. Claude Code, Codex, Cursor, Gemini CLI, n8n, or your own process can connect through MCP, OpenAPI, the CLI, TypeScript and Python SDKs, or an in-app chat session. Templates install a complete setup, with sample data and an agent manual, in one command. Start it with one command and no accounts, because the open-source edition is a single-user workspace with no sign-in screen. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stateful serverless actors that run indefinitely, sleep when idle, and persist state across restarts without external database round trips. Rivet provides a vendor-neutral alternative to Cloudflare Durable Objects, delivering long-running processes with co-located in-memory state and per-actor SQLite databases on any infrastructure you choose. The Rust engine comprises four packages: Pegboard for actor orchestration, Gasoline for durable execution, Guard for traffic routing via Envoy, and Epoxy implementing multi-region KV storage through EPaxos consensus. Each actor maintains instant-access in-memory state plus a dedicated SQLite database for relational queries, backed by RocksDB on single nodes or PostgreSQL with NATS pub/sub for multi-node clusters. RivetKit SDKs in TypeScript, Rust, and Python support built-in WebSocket connections, task queues, scheduling, and CRDT-based real-time collaboration. The v2.3 rewrite moved the core runtime from JavaScript to native Rust via WebAssembly, eliminating main-thread blocking across Node.js, Bun, Deno, and Cloudflare Workers. A built-in dashboard provides actor inspection with real-time Prometheus metrics. Deploys as a single Docker container on port 6420 with optional PostgreSQL for persistence. Available on RepoCloud with a dedicated VPS under the Apache 2.0 license.

Small server, small monitoring. Statlite watches your applications and their host with a single binary that idles at about 15 MiB, so the observer never becomes the heaviest thing on the box. Point it at a Spring Boot Actuator endpoint and it polls health plus a fixed, curated set of Micrometer metrics: request traffic, latency, CPU, and runtime memory, all drawn as clean charts. Quarkus, Micronaut, and anything else that can answer a fixed JSON metrics profile can join the same dashboard. History lives in one local SQLite file, raw samples only, kept for 90 days by default, so yesterday's latency spike is still there when you go looking. The dashboard also watches the host itself: processor load, memory pressure, and filesystem capacity, including a warning before the metrics database fills its own disk. Restart detection tells you when an application bounced, and per-target Basic Auth support lets you poll protected Actuator endpoints safely. Configuration is one YAML file listing your targets and polling interval, friendly to systemd and Docker alike. Everything is deliberately scoped: no alert manager, no external service, no observability platform to operate. Just open the page and see whether your apps are healthy. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Webtor turns any magnet link or .torrent file into instant in-browser streaming and direct downloads on your own server, with no desktop torrent client and nothing to install for viewers. Drop in a magnet, an infohash, or a torrent file and the file list appears in seconds; pick a video and it plays in the built-in player while the pieces are still arriving, or take a plain HTTP download link for any single file instead. Whole torrents come down as ZIP or TAR archives generated on the fly with the folder structure preserved, and formats from MKV and MP4 to FLAC and MP3 stream without a separate transcoding step in most cases. Torrents you keep go into a personal library that recognizes movies and series automatically and enriches them with posters and descriptions, and the same library can mount as a network drive over WebDAV or S3 and play on a TV through the Stremio addon. Subtitles are matched from OpenSubtitles inside the player, uploaded tracks are supported, and optional AI translation renders them in your language; a master password locks the instance, the player embeds into other sites through the JavaScript SDK, and a REST API drives everything from your own code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

AliangBoard puts every Kubernetes cluster you run behind one web panel, where you manage resources yourself or ask an AI agent to do it with your approval. Connect each cluster with a bearer token or basic auth and the panel persists the connection, so switching clusters, namespaces, and workloads takes one click instead of another kubeconfig. More than thirty resource types stay in sync: create workloads, services, ingress, config, storage, and RBAC through structured forms, edit anything as YAML, apply multi-document manifests at once, and delete optimistically with automatic rollback when the API refuses. Pod work goes deep: a tmux-backed exec terminal survives browser refreshes, port-forwards resolve services to their backend pods, files move up and down with progress, and debug containers inject into running pods without restarting them. Day-two operations are buttons, not flag memorization: scale, rolling restart, rollout undo, manual CronJob triggers, and node cordon or drain. Global search, a layered namespace topology, live event streams, and CPU and memory metrics keep orientation effortless. Then there is the operator: an Agent workbench and MCP server let your LLM read logs, debug containers, and propose changes in natural language, while every write waits for a human click and lands in an audit log that names who did what. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every homelab deserves a control center that looks as good as the services it manages. Lab Dash gives you a customizable, drag-and-drop dashboard where every tile earns its spot. Add shortcut widgets linking to your Plex, Grafana, Nextcloud, or any service with automatic health check indicators showing green or red status at a glance. The system monitoring widget displays real-time CPU usage, memory consumption, network throughput, disk utilization, and temperature readings by mounting the host /sys directory as a read-only volume. Integrate Pi-hole stats, qBittorrent download progress, and media server widgets for Jellyfin, Plex, or Emby directly on your grid. Multiple pages let you organize services by category, and the search bar finds any tile instantly. Customize the background image from a local upload or URL, set a custom title and tab name, and choose your preferred search provider including self-hosted options like SearXNG. All sensitive configuration data is encrypted locally with AES-256-CBC, and only administrator accounts can modify the layout. Install Lab Dash as a Progressive Web App on desktop, phone, or tablet for a native app experience with offline capability. Configurations export as backup files for easy migration between instances. On RepoCloud, deploy Lab Dash on a dedicated VPS with root SSH access and Docker socket connectivity under the GPL-3.0 license.

Tau delivers a complete self-hosted cloud platform where Git is the control plane and WebAssembly is the runtime. The Go binary deploys as interconnected nodes that form a P2P network using libp2p for automatic service discovery, eliminating Kubernetes entirely. Serverless functions compile to WebAssembly for secure multi-tenant execution with automatic horizontal scaling — write in Go, Rust, AssemblyScript, or C and deploy by pushing to Git. Branch-based environments map Git branches to isolated deployments, so staging and production run identical infrastructure from different refs. Static website hosting serves frontends with global distribution and automatic content-addressed deduplication via IPFS-derived storage. The built-in K/V database provides distributed storage with automatic replication across nodes, while object storage handles file management with content addressing. Pub/Sub messaging enables real-time communication between functions and external services including WebSocket support. Spore Drive automates multi-host deployment and rolling updates from a single command across bare metal or VMs running Ubuntu. The Dream CLI provides a complete local development environment that mirrors production exactly — same services, same routing, same deployment flow. Zero-configuration HTTPS provisions TLS certificates automatically for custom domains. The web console at console.taubyte.com provides visual project management, or use the tau CLI for Git-native workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

With over 5,000 GitHub stars since its June 2026 launch, OOMOL OpenConnector bridges the gap between AI agents and the real world by handling the authentication nightmare that stops LLMs from calling external APIs safely. The runtime connects to more than 1,000 SaaS providers — GitHub, Gmail, Notion, Slack, Microsoft, HubSpot, Google Workspace, and hundreds more — through 10,000+ prebuilt typed Actions that agents can discover and execute without ever touching raw credentials. OAuth2 flows, API key rotation, custom credentials, and no-auth providers are all managed centrally with AES-encrypted storage, scoped runtime tokens, and configurable action allowlists and blocklists that enforce least-privilege access. Agents interact through five access surfaces: the Model Context Protocol endpoint at /mcp for Claude and other MCP-capable hosts, a full REST API at /v1 for programmatic control, an auto-generated OpenAPI specification for code generation, a TypeScript SDK for application integration, and the oo CLI for local agent relay. The built-in Web Console provides browser-based administration for configuring OAuth apps, managing connections, inspecting action schemas, and reviewing execution logs with redacted inputs. Deploy via Docker Compose with SQLite for single-server setups, run from source on Node.js 22+, or push to Cloudflare Workers with D1 and R2 for edge deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Add a series once, set a quality profile, and everything downstream is automated: Sonarr is the smart PVR for Usenet and BitTorrent users. It monitors RSS feeds from your indexers, detects new episodes the moment they release, sends matching grabs to SABnzbd, NZBGet, qBittorrent, Deluge, or another download client, then renames files with fully configurable templates, sorts them into consistent folder structures, and notifies Plex, Kodi, or Jellyfin to update the library. Quality profiles define what's acceptable (HDTV, WEB-DL, Blu-ray, up to 4K) and an upgrade cutoff - when a better release appears, Sonarr replaces the existing file automatically, stepping from HDTV to WEB-DL to Blu-ray until the cutoff is met. Custom formats add weighted scoring for finer-grained release selection, with community-maintained TRaSH Guides presets as the widely accepted defaults. Failed downloads are handled without intervention: Sonarr retries with another release, and manual search shows every candidate with the reasons any was rejected. It scans existing libraries for missing episodes, fully supports specials, multi-episode files, and daily and anime series types, and a calendar view shows upcoming episodes across every tracked show. Runs on Linux, Windows, macOS, and Raspberry Pi, and pairs naturally with Prowlarr for centralized indexer management.

OpenPencil is the open-source design editor that reads and writes native Figma .fig files using the same Kiwi binary format — enabling bidirectional copy-paste between Figma and OpenPencil without data loss. The built-in AI assistant provides 90+ design tools through a chat interface, creating and modifying shapes, fills, strokes, auto-layout, components, variables, and boolean operations from natural language prompts, with BYOK support for Anthropic, OpenAI, Google AI, OpenRouter, Z.ai, MiniMax, and compatible endpoints. A Skia CanvasKit WASM renderer paired with Yoga WASM layout engine delivers Figma-parity rendering with flex and CSS Grid support including gap, padding, and alignment. The headless CLI inspects node trees via XPath queries, lints naming and accessibility, converts between document formats, analyzes color and typography patterns, extracts design tokens, and exports to PNG, SVG, JSX/Tailwind, and HTML. An MCP server exposes all design operations over stdio and HTTP, connecting Claude Code, Cursor, Windsurf, and Gemini CLI for AI-assisted design automation. Real-time P2P collaboration via WebRTC with Yjs CRDT synchronization requires no server and no account. The Vue SDK provides headless components for embedding the editor into custom applications. Ships as a 7 MB Tauri v2 desktop app for macOS, Windows, and Linux, or runs in any browser as a PWA. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Consolidate your entire digital library into a self-hosted reading sanctuary with BookOrbit, an open-source media platform that organizes ebooks, audiobooks, comic archives, and research PDFs within a personal private cloud. Readers can enjoy multi-format media directly through responsive browser readers that support EPUB, CBZ, and M4B formats without external browser extensions. The platform synchronizes reading bookmarks, highlights, and completion statuses across web interfaces, Kobo ereaders, and KOReader devices. An automated metadata enrichment engine queries fourteen upstream bibliographic indexes, downloading cover artwork, chapter breakdowns, author biographies, and series taxonomies. The staging workspace allows librarians to inspect incoming files, review suggested metadata revisions, and embed updated tags directly into physical storage archives before shelving. Custom reading dashboards track annual book goals, calculate daily streaks, and plot reading habit radar charts. Multi-user configurations support distinct per-user collections, granular content permissions, and single sign-on authentication through OpenID Connect providers. Power users can export private OPDS feeds to external mobile reading applications or push books directly to connected Kindle hardware. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

Spotify economics without the subscription or catalog gaps: Navidrome, the reference self-hosted music server, streams your own FLAC, MP3, and ALAC collection from a single Go binary with a React/Material UI web player. Its Subsonic/OpenSubsonic API compatibility is the superpower: 50+ existing clients work out of the box, from Symfonium and DSub on Android to Feishin and Sonixd on desktop, plus Android Auto, CarPlay, and Android TV apps. Transcoding is server-managed and FFmpeg-backed - FLAC direct-plays at home and downsamples to MP3, AAC, or Opus over mobile bandwidth, with the OpenSubsonic transcoding extension letting clients declare capabilities and receive per-track direct-play or transcode decisions automatically. Multi-user support gives every account its own play counts, favorites, ratings, and playlists, and multi-library support scopes different collections to different users. The feature list covers serious listening: Last.fm and ListenBrainz scrobbling, artist bios and images, embedded and external lyrics, audiobook bookmarks, saved play queues that resume on another device, internet radio, jukebox mode, and M3U playlist auto-import kept in sync with your folder. Resource usage is famously low - it runs happily on a Raspberry Pi and scales to six-figure track counts.

Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

IVFi-PHP turns folders on your server into browsable media galleries: drop one PHP file into a web root and every directory of photos, videos, and audio becomes a polished, searchable index page. Hovering a filename previews the image or video inline, and clicking opens the gallery view where you can move through a whole directory's media, download originals, or reverse-search an image. Audio files play in place with a live visualiser, seeking, and their own volume control. Finding things is instant: filter filenames or file types with plain text, wildcards, or full regular expressions, sort by name, date, or size with settings that persist between visits, and dates automatically match the visitor's timezone. Select any set of files and download them as a single ZIP archive, or share direct download links file by file. Directories can render their README files as documentation pages, listings can hide sensitive entries through server-side filters, and optional Digest authentication keeps a listing private without any account database. Themes and per-visitor display preferences restyle the index, basic listings work even with JavaScript disabled, and the whole application also ships as a Docker image for a one-container deployment. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.