Butterbase gives AI applications a complete backend they can run themselves, from a dedicated PostgreSQL database for every app to an MCP server that lets agents operate that backend directly. Define schemas declaratively, apply migrations, protect rows with Row-Level Security policies, and call the generated REST endpoints without building a separate data API. Add email and OAuth sign-in with Google, GitHub, Apple, X, and other providers, then tune JWT behavior, post-login hooks, service keys, and API keys for each application. Store files in S3 or R2 compatible object storage with presigned URLs and access controls, and keep regional key-value data with TTLs and an audit trail. Run TypeScript functions on Deno, coordinate chat rooms or rate limiters as durable per-key objects, and stream table changes to live interfaces over WebSocket subscriptions. Route chat and embedding calls through one AI gateway, ingest documents into RAG collections, and build checkpointed agent workflows that can pause for human approval before continuing. Host static frontends and edge handlers, expose webhooks for application events, and manage schemas, storage, functions, realtime channels, and integrations through more than forty MCP tools. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Every screen in the house (browser, TV, game console, or phone) can open the same library of videos, music, and photos once Universal Media Server shares it, with transcoding handled automatically for whichever device asks. A file the device can already play passes through untouched. Anything else is converted on the fly to suit the network, the device, and the preferred language. Folders open at once, with no wait for library scans, and disc drives and disc images play directly. In the web interface, every title gets a page with cover art, cast, and genre details from TMDB, Discogs, and MusicBrainz, and filters narrow the library by actor, director, genre, year, or artist. YouTube channels, online radio, podcasts, and RSS feeds appear beside local files on every connected device. Users and groups, with optional avatars and four-digit PINs, decide which shared folders each person sees; content for children stays apart from the library for adults. A list of detected renderers shows every connected device, and the configuration file of each device can be edited to fix browsing, playback, or transcoding on an unsupported TV. Builds exist for Windows, Linux, and macOS, with AppImage and Docker options for servers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Hatchdoor gives your Markdown notes two front doors at once: a fast web interface for you, and an MCP endpoint where AI agents read and edit the very same vault. Point it at any folder of Markdown files, an existing Obsidian vault included, and it indexes everything into a disposable SQLite read model that rebuilds itself from your files if deleted. In the browser you browse folders, follow wikilinks that survive renames, explore backlinks and graph views, and search by keyword or meaning across every vault you mount. The live editor shows Markdown syntax only on the line you are editing and saves automatically, while concurrency checks refuse a save when the note changed underneath you. Agents connect with their own token and start read-only; turn writes on and Claude Code, Codex, Cursor, or Hermes can create, edit, move, and link notes through the same checked operations the interface uses. Saved queries in Obsidian's Bases syntax render as live tables, attachments preview inline, and optional git integration commits and pushes every change back to your vault's repository. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Configure each indexer once, not five times: Prowlarr is the indexer hub of the *arr stack, removing the most tedious duplication in a media automation setup. Instead of configuring the same torrent trackers and Usenet indexers separately in Sonarr, Radarr, Lidarr, Readarr, and Mylar3, you add each one once in Prowlarr and it syncs them to every connected app automatically, complete with category mappings; with Full Sync enabled, adding or removing an indexer propagates everywhere, and a tracker URL change is a one-place fix. Coverage is the deepest available: 500+ torrent trackers with definitions added constantly, 24 native Usenet indexers, generic Newznab and Torznab support for anything else, and custom Cardigann YML definitions with JSON and XML parsing for obscure sources. Built on the same .NET/React base as its siblings, it also earns a place as a search tool in its own right: unified manual search queries every indexer simultaneously at a category level, and you can push multiple releases straight to your download clients without touching Sonarr or Radarr. Health checks and status notifications flag failing indexers, per-indexer statistics track success rates and response times so you can cull unreliable sources, and per-indexer proxy support (SOCKS4/5, HTTP, FlareSolverr) handles trackers behind Cloudflare.

pRESTd points at your PostgreSQL or MySQL database and instantly serves every table as a REST API, so the CRUD backend you were about to spend a week writing already exists. Every table answers at its own address with filtering, ordering, pagination, and column selection in the query string, and batch endpoints group several operations into one call. When a table endpoint is not enough, drop a SQL file into the queries folder and it becomes a named route with bound parameters, or store the scripts in the database and manage them through the admin API. Turn on the auth module and the server issues JWTs from your own users table, checks them on every route, and enforces table-level permissions so public tables stay open while payroll stays shut. The same database also appears as a read-only MCP endpoint, which lets Claude, Cursor, and other AI clients discover your tables and query them with your permissions instead of a copied export. One process can front several databases at once, Postgres and MySQL side by side, each under its own alias for tenants or reporting replicas. An embedded Studio in the same binary browses the catalog and rows, builds GET requests, and invokes MCP tools, so you can inspect everything from the browser before writing a line of client code. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Streaming personal music collections with neural discovery and intelligent playlist curation is what Kima accomplishes as a modern self-hosted audio server that replaces Spotify and Apple Music. Listeners organize their FLAC, MP3, and AAC audio files into responsive grid layouts that scale up to eight columns on ultra-wide displays while automatically fetching album covers, artist biographies, and synchronized line-by-line lyrics. The built-in Vibe System utilizes CLAP neural network audio embeddings to map an entire music collection across two-dimensional clusters and three-dimensional interactive galaxy views, enabling users to explore acoustic relationships or queue smooth sonic paths between distant tracks. Music fans can import playlists directly from Spotify, Deezer, and YouTube using deterministic ISRC matching, while automated Made For You mixes generate era-specific playlists, workout stations, and discovery queues based on individual listening habits. Integrated podcast search pulls subscriptions from iTunes with automatic episode tracking across devices, while native Audiobookshelf connectors synchronize spoken-word chapter positions and playback progress directly into the unified web player. OpenSubsonic API endpoints allow mobile users to stream libraries through native clients like Symfonium and DSub using scoped authentication tokens, while administrators manage multi-user accounts with time-based two-factor authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Every email your app sends while you build and test it lands in OwlMail's browser inbox instead of a customer's mailbox. Point any application's SMTP settings at OwlMail and every message is ready to open as rendered HTML, plain text, headers, or raw source. Attachments and inline images sit beside the body, and seven preset preview widths show how the message lays out on phones, tablets, and desktops before anyone real sees it. A Verify panel checks subject, body, and link hosts against expectations, while CI pipelines use the REST API with delivery cursors to wait for exactly the messages their test run produced, assert on them, and clean up afterwards. Coding agents get the same inbox read-only over MCP, so an assistant can confirm a signup email arrived without touching your mail server. When a message proves itself, relay it onwards to a real SMTP server, by hand or automatically under filtering rules, or fire webhooks with HMAC signatures and retry queues into the rest of your automation. Everything stores as plain .eml files on disk, with optional SQLite indexing, S3 attachment storage, and ZIP exports for archiving. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Fail2Ban quietly bans thousands of bots on a typical VPS and just as quietly keeps the whole story buried in a log file nobody reads, and Fail2Ban Report digs that story out into a dashboard you will actually open. Shell scripts convert each day of fail2ban.log into JSON, and the web interface lays every ban and unban on a searchable, filterable timeline you can slice by jail, server, or time window. Aggregated statistics for today, yesterday, seven days, and thirty days show which jails absorb the most attacks, while markers flag repeat offenders and escalating ban counts so persistent scanners stand out from one-time noise. Blocklists live per jail and per server as plain JSON, and ban or unban actions execute through UFW, giving you permanent bans that survive independently of jail restarts. Bulk actions handle whole ranges at once, with a pending state until the next sync applies them. Multiple servers feed one console through a pull-based HTTPS endpoint, so a fleet of small machines reports to a single pane without exposing SSH. Optional AbuseIPDB and IP-Info lookups add reputation and region context to any address. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Runtipi makes any Linux server a personal app platform where installing services like Plex, Nextcloud, or Home Assistant takes a single click from a curated store of 265+ applications. With 9,500+ GitHub stars and 50 contributors, the React frontend backed by NestJS orchestrates Docker Compose projects for each installed app, automatically generating environment files, compose configurations, and Traefik reverse proxy labels for domain routing and SSL certificate provisioning via Let's Encrypt. The integrated Traefik reverse proxy handles all incoming traffic routing, HTTPS termination, and forward-auth protection for securing applications behind Runtipi's authentication layer without manual configuration. One-click updates notify administrators of new app versions and apply container image upgrades with automatic pre-update backup creation, while the restore feature rolls back application data to any saved snapshot. Custom app stores extend the ecosystem through Git repositories following the Runtipi app definition format, enabling organizations and communities to maintain private catalogs alongside the official store. The Docker Compose override system preserves user customizations across updates, allowing advanced modifications without losing changes. Architecture-aware filtering detects ARM64 or x86 platforms and displays only compatible applications. All apps deploy as standard Docker containers, and compose files can be exported for independent operation without lock-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

One 18 MB Go binary does the job of Apache, Nginx, Varnish, Caddy, and cPanel combined. Point UWAS at your /var/www directory and it auto-detects sites, provisions Let's Encrypt certificates, enables HTTP/3 via QUIC, and activates a two-tier caching engine with L1 memory shards and L2 disk storage, all before you write a single line of configuration. The React 19 admin dashboard provides 42 management pages for domains, PHP versions, databases, cron jobs, DNS records, file management, backup and restore, SFTP users, and uptime monitoring with real-time SSE updates. PHP sites run through FastCGI with connection pooling and full .htaccess compatibility, so WordPress, Laravel, and legacy applications work without migration effort. The built-in WAF catches SQL injection, XSS, path traversal, and shell exploits, while per-domain rate limiting and bandwidth caps protect against abuse. Reverse proxy mode supports five load balancing algorithms, circuit breakers, canary deployments, and mirroring for blue-green rollouts. Git deploy clones your repository, runs the build, checks health, and restarts the service with rollback on failure. An MCP server lets AI agents manage domains, cache, and deployments through natural language. The Nginx and Apache migration CLI converts existing configurations to UWAS format automatically. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Movie night should not depend on everyone pressing play at the same second; SyncWatch runs your own watch-party server so friends in different places watch the same frame together. The host controls play, pause, seeking, and playback speed for the whole room, and late joiners or drifting clients are corrected back to the shared position automatically. You build the program from uploads or direct HTTPS media links, with subtitles, audio, images, and documents handled in the same library. Rooms can be permanent or temporary, protected by passwords and member limits, with host, admin, and permission-group control over who may operate playback. Between scenes, people talk through public and private chat, on-screen danmaku comments, emoji, voice messages, or full-room voice. Anyone can share a browser tab, window, desktop, or phone screen into the room, so a clip, a game, or a presentation becomes the shared screen. The server also keeps friends, notifications, online presence, bans, registration approvals, and an operations log, so a private community can run itself without a platform account. Uploaded media is analyzed and thumbnailed automatically, with browser-compatible versions generated for awkward formats. Backups, data export, a recycle bin, mail verification, and network diagnostics round out the admin side. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Backed by 9,200 GitHub stars and venture funding led by Nauta Capital, Nhost is the open-source Firebase alternative that replaces Google's proprietary document store with a relational PostgreSQL foundation from day one. The Hasura integration auto-generates a real-time GraphQL API with subscriptions, role-based permissions, and remote schemas from your PostgreSQL tables, while event triggers and cron triggers automate backend workflows without custom infrastructure. Authentication supports email and password, magic links, phone OTP via SMS, social OAuth providers including Google and GitHub, WebAuthn for passwordless login with Face ID, fingerprints, and YubiKeys, plus two-factor authentication. Since the Q1 2026 release, Nhost Auth also functions as a full OAuth2 and OpenID Connect provider, allowing your Nhost project to issue tokens to third-party applications the same way GitHub or Google do. The S3-compatible storage service handles file uploads with automatic image optimization, virus scanning, and presigned URLs for secure direct downloads. Node.js serverless functions deploy JavaScript and TypeScript backend logic without managing servers, while the Nhost CLI spins up the complete local stack via Docker for development with automatic database migration tracking and Hasura metadata management. The MCP server integration exposes project documentation and data schemas to AI assistants for intelligent query building. SDKs cover JavaScript, TypeScript, React, Vue, Next.js, and Dart for Flutter. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ServerBee delivers complete fleet monitoring from a single Rust binary that embeds both the server and web UI, requiring no external database or heavy runtime. Lightweight agents installed on each node stream CPU, memory, disk, network, load, temperature, GPU, and disk I/O metrics over persistent WebSocket connections to a central server backed by embedded SQLite. The real-time React dashboard presents 17 drag-and-drop widget types across custom layouts, with historical charts spanning one hour to 30 days and monthly traffic statistics with billing-cycle prediction and cost insights including burn rate and per-resource unit cost scoring. Network monitoring covers ICMP, TCP, and HTTP ping probes, service monitors for SSL certificates, DNS records, HTTP keyword matching, TCP ports, and WHOIS expiration, plus network-quality probing across 96 China 3-ISP and international presets with IP-quality and streaming-unlock detection. Remote management features include a web terminal with sandboxed file manager, Docker container stats with logs and events, firewall configuration, and agent auto-update capabilities. Public status pages display 90-day uptime timelines, while alerting supports email and webhook notifications with flexible trigger expressions. A native iOS companion app provides mobile monitoring access. Deploy via Docker or download the single binary for Linux, macOS, or Windows, running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

One Janus installation can host a video meeting in one session, stream a camera feed in another, and bridge a browser call into a telephone network in a third, because Janus is a general-purpose WebRTC server whose work is done by interchangeable plugins. The VideoRoom plugin publishes each participant's streams to everyone else in the room with simulcast and viewport selection, so a class or team call adapts quality per viewer instead of forcing one bitrate on all. Streaming mounts live or prerecorded sources, including RTSP cameras and RTP feeds, and hands them to any number of WebRTC viewers, while AudioBridge mixes voices into conference rooms with recording and signed-token access. SIP and NoSIP plugins register with existing VoIP infrastructure and place or receive calls, translating between WebRTC media and telephone audio so a web page can ring a desk phone. Record&Play captures publisher streams to files you can replay through the same server, TextRoom adds data-channel chat rooms, and Lua or JavaScript plugins let you script custom media logic without recompiling the core. Applications talk to Janus over HTTP or WebSocket APIs, with RabbitMQ, MQTT, and NATS transports for bus-driven deployments, and event handlers report session activity to your monitoring stack. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Mail for your own domain stays on your own server with mailez, a self-hosted stack that delivers over SMTP, IMAP, and POP3 and adds a webmail, calendar, contacts, file storage, and an admin console, all started with a single command. Readers get a draggable three-pane webmail that updates itself over a push channel, merges replies into conversations, folds quoted history, and searches with from:, to:, has:attachment, and date terms. Keyboard shortcuts, a command palette, snooze, scheduled send, undo for bulk moves, and quick reply keep daily mail fast, and the interface installs as an offline-capable app with light and dark themes. Privacy-minded users add PGP signing and encryption, two-factor login, and remote-image blocking, and write server-side rules in a Sieve editor. Calendar, contacts, and Drive sit beside mail, with ICS subscriptions, vCard import, CardDAV and CalDAV sync, and share links. Phones and desktop clients configure themselves through autoconfig. Administrators manage domains, mailboxes, aliases, relays, and external mailbox fetching in one console, generate DKIM keys with a click, and follow a DNS wizard and a health page that verify MX, SPF, DMARC, DKIM, blocklists, and MTA-STS. Audit logs and role-based access keep shared servers accountable. The free community edition runs on a single node, while archiving, DLP, LDAP, ActiveSync, and AI features belong to the paid enterprise edition. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 3,800 GitHub stars and continuous development since 2002 spanning 24 years of active maintenance through version 16.4.0 released in May 2026, Piwigo has proven itself as one of the most battle-tested self-hosted photo gallery platforms available, trusted by professional photographers managing 150,000+ high-resolution images alongside small teams sharing event photos. The PHP backend with MySQL or MariaDB storage serves a responsive web interface that organizes photos into hierarchical albums with nested sub-albums, tag-based categorization, and smart albums generated dynamically from search criteria. Batch management tools handle bulk uploads, metadata editing, tag assignment, and album moves across thousands of images simultaneously. User permission controls define access at the album level with configurable public, private, and group-restricted visibility, while guest access allows public galleries without authentication. Image processing via ImageMagick or PHP GD generates multiple thumbnail sizes, watermarks, and responsive derivatives automatically. The plugin ecosystem with over 200 community-built extensions adds functionality from EXIF metadata display and GPS mapping to social sharing, download controls, and Lightroom synchronization for desktop workflow integration. The REST Web API with personal API key authentication enables programmatic album creation, photo uploads, and metadata queries from external applications. Mobile apps for iOS and Android provide on-the-go upload and browsing capability. Docker deployment via the official container or traditional LAMP installation on any hosting provider. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-2.0 licensed.

Tela keeps a team's documentation as canonical markdown in a self-hosted wiki that AI agents read, search, and write alongside humans through a built-in MCP server. People edit together with live multi-cursor collaboration, threaded comments, backlinks, and full revision history, so every page shows who changed what and why. PostgreSQL full-text search works immediately, and adding an embedder unlocks semantic retrieval and grounded ask-your-docs answers that cite their sources. Connect Claude, Cursor, or another MCP client with a personal access token and the agent can search the wiki, draft and patch pages, answer comment threads, build spreadsheets with real formulas, and assemble presentation decks exportable to PDF and PPTX. Atlas, the built-in documentation engine, points at a git repository or Jira project and drafts cited wiki pages, then keeps them fresh as the sources change. Teams organize work into spaces, invite members by email, and flip any space public to publish a login-free blog with per-author home pages. Content syncs over WebDAV and exports to zip or PDF, and optional AI features run against your own endpoint or a bundled local Ollama profile, so nothing leaves your server unless you wire it up. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Applications publish an event once and stop caring who needs it next: Apache EventMesh receives CloudEvents over plain HTTP, stores them durably, and delivers each one to every subscription that matches. Producers call publish, consumers call subscribe or unsubscribe, and the runtime owns the registry, offsets, acknowledgements, and redelivery that messaging clients usually force you to build yourself. Subscribers choose load-balanced delivery for competing workers, broadcast delivery for every listener, or multicast for selected groups, and they receive events by HTTP long polling, Server-Sent Events, or WebSocket push. Filters drop irrelevant events before they leave the mesh, while transformers reshape payloads so a producer and consumer can disagree about format without either one changing code. Kafka and RocketMQ act as pluggable write-ahead storage, with an in-memory backend for development, and stateless runtime instances scale horizontally without consumer-group rebalancing. Twenty-three connectors move events into and out of RabbitMQ, Pulsar, MongoDB, MySQL change data capture, Redis, S3, Prometheus, Slack, DingTalk, Lark, WeChat, and AI services, each checkpointing offsets so failures replay instead of silently losing data. Agent-to-Agent protocol support and MCP connectors let AI agents exchange asynchronous events alongside synchronous tool calls, and event-triggered agents can publish decisions back into the mesh for downstream delivery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.