Halo is a modern CMS that handles blogs, knowledge bases, corporate sites, and full e-commerce storefronts from a single installation, distinguished by a polyglot plugin architecture that runs both Java and JavaScript extensions on a GraalVM runtime. Built on Spring Boot 3 with a Vue.js admin console, the platform delivers a clean content management experience with Markdown and rich-text editing, live preview, scheduled publishing, draft management, media uploads, and granular multi-user role-based access controls. Plugins can be enabled or disabled at runtime without restarting the server, and the official marketplace offers over 100 free themes plus a growing library of extensions covering SEO optimization, search integration, paid content access, AI writing assistance, and Q&A chatbots. Storage backends are configurable through plugins, supporting local disk, S3-compatible object storage, and other providers. The fully documented RESTful API enables headless CMS usage for decoupled frontend architectures. Database support includes embedded H2 for quick starts, with production deployments on PostgreSQL or MySQL. Nearly 40,000 GitHub stars and over 2.5 million Docker pulls reflect the project's maturity and active development pace. A single Docker command gets a functional instance running on port 8090. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Gately keeps your domain names current, forwards ports, terminates HTTPS, and blocks hostile traffic from one admin console, so a server or home network needs no pile of separate gateway tools. Dynamic DNS updates records at Cloudflare, Alibaba Cloud, Tencent Cloud, DNSPod, Huawei Cloud, Route 53, OVHcloud, Gandi, Namecheap, DuckDNS, and other providers, finding the public address over IPv4 or IPv6 by URL, network interface, or command. Port forwarding relays TCP and UDP with port ranges, failover targets, connection limits, traffic statistics, and PROXY protocol, while SNI routing lets several services share port 443. Certificates are issued and renewed through ACME with DNS-01 wildcards or HTTP-01, then pushed to other hosts over SSH. Web services add per-domain reverse proxies, redirects, and static sites with HTTP/3, WebSocket, load balancing, health checks, rate limiting, caching, and sign-in through OIDC, GitHub, Google, or TOTP-protected shared users. A WAF running the OWASP Core Rule Set and fail2ban-style jails with trap ports and nftables bans guard the edge. Manage Docker containers and Compose projects with one-click upgrades and rollback, open SSH sessions with an SFTP file manager, run ping, traceroute, and speed tests, and receive alerts in Telegram, Discord, Slack, ntfy, or email. An audit log, config history with diff and rollback, encrypted backups, scoped API tokens, and Prometheus metrics round it out. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

GoatCounter delivers meaningful web traffic insights — pageviews, referrers, browsers, screen sizes, country-level geolocation — without setting a single cookie, without collecting personal data, and without forcing GDPR consent banners on your visitors. Written entirely in Go and distributed as a single compiled binary consuming roughly 25MB of RAM, it adds just 3.5KB to your pages via the tracking script, with a JavaScript-free tracking pixel alternative for sites that avoid scripts entirely, plus backend middleware integration and log file import for server-side collection. The dashboard displays pageview counts per path with hourly resolution, referrer sources grouped by domain with full URL on hover, browser and OS version breakdowns, screen size distributions, and country-level location data derived from IP addresses that are immediately discarded after geolocation. Campaign tracking supports UTM parameters and custom data attributes. A public stats option exposes your dashboard at a shareable URL for build-in-public transparency. SQLite serves as the default database requiring zero administration, while PostgreSQL handles higher-traffic deployments with multi-site setups. Built-in ACME and TLS certificate management eliminates reverse proxy requirements for HTTPS — no Nginx or Caddy needed. The REST API provides programmatic access to all analytics data. Deploy as a single binary, via Docker with the official arp242/goatcounter image, or through native packages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EUPL-1.2 licensed.

Used daily by millions of educators and learners in over 65 languages and embedded as the default virtual classroom in Moodle Cloud, Canvas, Sakai, D2L, Jenzabar, and Schoology — together comprising more than 75% of the worldwide learning management system market — BigBlueButton has been the leading open-source web conferencing platform for education since its creation at Carleton University in 2007. The platform delivers WebRTC-based real-time audio, video, and screen sharing with a tldraw v2-powered multi-user whiteboard featuring infinite canvas support, allowing multiple participants to annotate slides and draw simultaneously. Breakout rooms support up to eight concurrent groups with collaborative whiteboards enabled by default, and polling with customizable response types lets instructors assess understanding in real time. The built-in Learning Analytics Dashboard answers three questions at a glance: who is attending, who is participating, and who is learning based on poll responses, providing actionable engagement metrics without requiring webcam surveillance. Session recording captures audio, video, slides, chat, and whiteboard annotations for asynchronous playback on any device. The plugin architecture introduced in version 3.0 enables custom extensions, while IMS LTI 1.0 compliance allows integration with Blackboard, Desire2Learn, Pearson Learning Studio, and any conformant platform without custom code. The REST API enables programmatic session management, user authentication, and recording access for custom frontends like the included Greenlight application. Version 4.0 introduces LiveKit-based media and a redesigned interface. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. LGPL-3.0 licensed.

CRW gives your apps and AI agents a private web data API that scrapes pages, crawls sites, maps links, and searches the web without sending every request to a hosted scraping service. Post a URL to the scrape endpoint and receive clean Markdown, HTML, screenshots, links, or structured JSON shaped by a schema you supply. Start a crawl when a whole section matters, then poll for progress while CRW walks pages asynchronously and returns the collected content in one job. Use map first to discover the URLs on a site before spending effort extracting pages you do not need. Connect agent tools through the MCP endpoint so assistants can search, scrape, and crawl from the same self-hosted service your applications call. Add browser rendering when JavaScript-heavy pages hide content from a plain HTTP fetch, and keep simpler pages on the fast lightweight path. Protect a public deployment with Bearer token authentication, your own reverse proxy, logging, and rate limits, or keep the service inside a private network for internal tools. Run one Docker container for the core API, or use the Compose stack when you want bundled search and rendering sidecars beside it. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Waiting for the right moment to buy usually means refreshing product pages for weeks, so PriceBuddy does the refreshing for you and speaks up when the price is right. Paste a product URL and it fetches the details and price, then rechecks on a global schedule or a per-product interval from every 5 minutes to every 24 hours. Stores are scraped with CSS selectors, regular expressions, or JSONPath, a headless browser covers JavaScript-heavy shops, and an optional AI provider (OpenAI, Anthropic, Gemini, or local Ollama) can recover missing prices or repair broken selectors. Attach several URLs to one product to compare retailers or marketplace listings, with in-stock, pre-order, and discontinued states shown beside each source. Unit pricing reveals the real cost per tablet or bag when multi-packs distort shelf prices, while history charts show minimum, maximum, and average over time. Alerts fire on a target price, a drop threshold, or a back-in-stock event and arrive by in-app notice, email, Pushover, Gotify, Apprise, Telegram, Discord webhook, or ntfy. Tags sort products into draggable dashboard groups, with optional smart sections for what to buy now, recent drops, and failed checks. Each user keeps separate products and settings, a REST API with scoped tokens serves your scripts, and a Chrome and Edge extension tracks items from the page you are viewing. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

If editors should publish without waiting on developers, and developers should keep full control of the design, Umbraco is the free content management system built around that split. A page begins in the Block Grid editor, where reusable blocks nest inside Areas and each block is sized on a column and row grid. Live preview shows the result before anything goes out. Publish and unpublish times can be scheduled in the editor's own time zone, and any page can roll back to an earlier version from its Info tab. One content node can exist in several languages, and split view puts two of them side by side. The Media section holds images, video, and other files. Visitors can register and log in as members, new members can be placed in member groups, and pages can be hidden from anyone not logged in. On the code side, templates and partial views shape the front end, while the opt-in Content Delivery API returns content items as JSON for mobile apps and any other front end. Webhooks notify outside services when content is published, unpublished, or deleted. Custom dashboards and property editors extend the backoffice, and the Marketplace lists open-source and commercial packages for the rest. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 77,000 GitHub stars, Crawl4AI is the most-starred open-source web crawler on GitHub and the go-to tool for converting the web into AI-ready data. Built on Python and Playwright, it transforms any website into clean Markdown with headings, tables, code blocks, and citation hints optimized for LLM ingestion, or extracts structured JSON via CSS selectors, XPath expressions, or direct LLM-based schema extraction through OpenAI, Anthropic, and Ollama providers. The self-hosted Docker server exposes a REST API on port 11235 with endpoints for crawling, streaming results, screenshots, PDF generation, JavaScript execution, and LLM-powered extraction. Version 0.9.x introduced secure-by-default operation with mandatory JWT authentication, strict request validation, declarative hooks replacing inline code, and bounded job queues. Adaptive crawling uses information foraging algorithms to determine when sufficient data has been gathered, while deep crawl mode traverses link graphs intelligently. The async browser pool manages concurrent sessions with stealth plugins, proxy rotation, custom headers, and session persistence for authenticated scraping. A built-in MCP server enables direct integration with Claude, ChatGPT, and Cursor for AI-driven web research workflows. Content filtering applies BM25 and TF-IDF relevance scoring to extract only pertinent sections from noisy pages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Artalk embeds a full commenting system into any webpage with three lines of JavaScript, packing multi-site management, social login, spam filtering, and Markdown rendering into a client that weighs roughly 40KB. One server instance manages comments for unlimited websites with complete data isolation between sites, eliminating the need for separate deployments per project. The framework-agnostic Vanilla JS client renders a complete comment interface with Markdown support, LaTeX mathematical formula rendering, image uploads, emoji packs compatible with OwO format, and automatic dark mode detection. An integrated admin dashboard accessible through the comment box provides comment moderation queues, IP banning, comment pinning, page-level statistics, and content management without direct database access. Social login authenticates commenters through GitHub, Google, Twitter, Discord, and additional OAuth providers, while captcha protection spans four backends: image captcha, Cloudflare Turnstile, Google reCAPTCHA, and hCaptcha. Spam filtering layers include Akismet integration, keyword block lists, and cloud moderation services that catch unwanted content before publication. Email notifications support SMTP, Aliyun DM, and Sendmail transports with customizable templates, and multi-channel push notifications extend to Telegram, Bark, and other messaging platforms. The OpenAPI-documented HTTP API enables programmatic comment management. Database flexibility covers SQLite, MySQL, PostgreSQL, and SQL Server. A plugin marketplace offers community extensions for custom behavior. Continuously maintained for over 8 years. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Hosting companies that sell VPS plans, game servers, or dedicated machines get a branded storefront, recurring billing, and a ticket desk from Paymenter, running on their own server. A customer browses a category, picks a free, one-time, or recurring plan billed every few days, weeks, months, or years, and shapes the order with select, radio, checkbox, text, number, or textarea options, some of which carry their own price. Prices can differ per currency, and a setup fee is optional. Payment runs through Stripe, PayPal, or Mollie, with tax rates and coupons set from the admin panel. Once it clears, a server extension for Pterodactyl, Virtualizor, VirtFusion, Convoy, cPanel, Plesk, DirectAdmin, or Enhance creates the service. A daily job issues renewal invoices, suspends overdue accounts, and terminates long-overdue ones. The customer portal covers services, invoices, and tickets in 24 languages, and tickets accept replies by IMAP email piping. Staff work with roles, audit logs, email logs, and notification templates, while API keys and OAuth clients connect outside tools. Optional extensions add an affiliate program, announcements, and Discord alerts. Moving over from WHMCS takes one built-in command that imports clients, products, services, tickets, and invoices from a copy of your database. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

The CAPTCHA bargain - annoy your users and feed their behavior to Google - gets replaced with economics by mCaptcha. Instead of image puzzles, it uses SHA256 proof-of-work: every visitor's browser silently solves a small computational challenge (via a WebAssembly library) before submitting a form. Humans never notice the milliseconds; bots hammering your site must burn more compute sending requests than your server spends answering them, which makes attacks more expensive than defense - the property that also makes mCaptcha genuine DoS protection, not just bot filtering. Written in Rust, the system is fully automated: difficulty scales with traffic, so challenges stay trivial in normal conditions and harden under attack. The privacy and accessibility wins are structural rather than promised: no tracking, no profiling, no user-pattern data collection, and no visual puzzles that exclude users with visual or cognitive impairments - the design was published in Communications of the ACM. Rate limiting is IP-independent, so users behind NATs, VPNs, or Tor get the same experience instead of endless challenge loops, and proofs resist replay attacks, neutering captcha farms. Migration is deliberately easy: the API is compatible with reCAPTCHA and hCaptcha, making it a drop-in replacement. AGPL-licensed core with proprietary-friendly client libraries.

Backed by 27,700+ GitHub stars and actively developed with the v0.9.x architectural overhaul introducing an event-driven plugin ecosystem, ArchiveBox delivers the open-source self-hosted web archiving platform that preserves websites, bookmarks, social posts, media, source code, and research material in durable formats before link rot, platform shutdowns, and censorship erase them permanently. Feed it URLs one at a time or schedule automated imports from browser history, RSS feeds, Pocket, Pinboard, Instapaper, Wallabag, Shaarli, JSON, CSV, HTML bookmark exports, and browser extension captures. Each snapshot stores redundant copies as original HTML, rendered single-file HTML via SingleFile, full-page PDF, screenshot PNG, WARC archive, article text via Readability, favicons, HTTP headers, media files via yt-dlp, git repository clones, and structured metadata in SQLite. The Docker Compose deployment bundles Chrome, wget, curl, yt-dlp, SingleFile, and Readability parsers with automatic dependency management and isolation. Interact through the self-hosted web UI with search, tagging, and admin controls, the comprehensive CLI for batch operations, the REST API for programmatic access, or the Python API for custom integrations. The new abx-plugins system enables community extractors with per-plugin configuration, while the append-only-log architecture provides resumable crawls and audit trails. S3, B2, and Google Cloud storage backends sync archives to remote storage via rclone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Built as a direct rejection of the adtech model, Plausible is the best-known privacy-first web analytics tool - lightweight, cookie-free, and open-source. It sets no cookies and stores no personal data: unique visitors are counted via a hash of IP plus User-Agent that rotates every 24 hours and is never stored raw, so no consent banner is required and GDPR compliance is structural rather than contractual. The tracking script is under 1 KB - orders of magnitude lighter than GA - and the dashboard is a deliberate contrast to GA4's sprawl: one fast-loading page with visitors, sources, top pages, countries, devices, and UTM breakdowns, filterable by any dimension. Custom events and goals track signups and clicks, Google Search Console integration pulls in search queries, scheduled email reports keep stakeholders updated, and the Stats API (v2) plus CSV export feed data anywhere. This is the AGPL-licensed Community Edition, the same Elixir codebase that powers Plausible's cloud service, running as three containers: the web app, PostgreSQL for accounts, and ClickHouse for event storage - which means self-hosters get direct SQL access to raw analytics data the cloud version never exposes. Traffic data stays entirely on your server, with no visitor caps or per-pageview pricing.

Vvveb, an open-source CMS with a drag-and-drop page builder and a built-in store, runs a blog, a portfolio, and a webshop from one dashboard, with every page edited visually on a true WYSIWYG canvas. Reusable blocks, page revisions, a code editor, and an optional AI assistant plugin sit alongside media management, custom fields, custom posts, and custom products that shape content well beyond plain pages. The store handles one-page checkout, subscriptions, digital downloads, vouchers, coupons, product options, attributes, variants, reviews, and Q&A across multiple payment methods and currencies. Content can be published in several languages, the admin interface switches with language packs, many sites or subdomains share one installation, and action-level permissions are assigned to each user role. A bundled SEO plugin generates sitemaps, robots.txt, Open Graph tags, hreflang links, and schema markup, and hybrid headless mode serves the same content to any frontend through GraphQL and REST endpoints. A randomized admin login URL, two-factor authentication, brute-force defenses, and a built-in integrity check guard the dashboard, and manual or automatic backups plus import and export tools cover recovery and migration. Any HTML template converts into a theme in minutes, a demo importer loads sample content for a fast start, and plugins and themes install with one click from the admin dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

RSS-Bridge gives a feed to every website that never offered one, so social profiles, video channels, and news pages become subscriptions for any feed reader. Pick a bridge, enter a username or search term, and the generated URL returns Atom, JSON, HTML, MRSS, plaintext, or Sfeed output. Dedicated bridges cover YouTube channels and playlists, public Telegram channels, Reddit users and subreddits, Mastodon instances, Twitch channels, TikTok accounts, SoundCloud users, and Rumble channels. When a site has no bridge, CssSelectorBridge and XPathBridge scrape its pages into a feed from the CSS selectors or XPath expressions you provide. FilterBridge keeps or drops items by keyword, FeedMergeBridge folds several feeds into one stream, and FeedReducerBridge thins out noisy sources. Caching keeps upstream services from banning your server for repeated updates, and a token or HTTP basic authentication keeps a private instance closed to strangers. The enabled_bridges setting limits which bridges appear in the menu, and a failing bridge reports its error as a feed item, so your reader notifies you the moment one breaks. A new bridge is one small class file dropped into the bridges folder, and a mounted config folder carries your custom settings across container restarts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Unlicense licensed.

JobNavigator runs your whole job hunt as an automated pipeline, scraping career pages and job boards, scoring every posting against your résumés, and tracking each application to its outcome. Discovery fans out across company career pages through twelve ATS handlers, aggregators like LinkedIn, Indeed, and ZipRecruiter, and a Chrome extension that saves any posting you stumble on. Each new job is scored against your base résumés, lightly for a quick number or in full, with keyword coverage and requirement mapping that show exactly where you match and where you do not. Strong matches get a tailored résumé from eight PDF templates and a cover letter written from your persona, ready for your review before anything is sent. The extension then auto-fills application forms and drafts answers to free-text questions from your stored Q&A bank. Every application moves through stages and interviews in one tracker, while Gmail polling spots replies and updates the status for you, and Telegram delivers new-job alerts and a daily digest. A household can share one install with up to five accounts, each keeping its own jobs, résumés, and PIN, while scraping runs once for everyone. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenList gathers every place your files live, local disks, S3 buckets, OneDrive, Google Drive, Dropbox, NAS shares, and forty-odd other services, into one browsable file list behind a single login. Mount each storage at its own path and the whole collection behaves like one tidy drive: documents open in the browser, whether PDF, Markdown, source code, or Office files, images get a gallery mode, and videos and audio play in place with subtitle and lyric support. Everyday file work happens in the same window: upload, delete, rename, move, and copy, including copying directly between two storages when you are migrating off a cloud plan. Offline download tasks let the server fetch links for you in the background, and multi-threaded acceleration squeezes speed out of sluggish single connections. Every folder can also be mounted as a real drive on your computer through the built-in WebDAV and FTP servers, with per-user permissions deciding who may read, upload, rename, or delete. Protected routes add passwords in front of sensitive shares, permalinks hand out direct download links, and granular user rules can hide files or open archive contents without extracting them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Price drops, restocks, job postings, government announcements, competitor edits - changedetection.io watches web pages and alerts you the moment anything changes, down to PDF text and checksums. Point it at a URL, set a check interval, and precise filters decide what counts as a change: a Visual Selector targets page elements by pointing and clicking, CSS selectors and XPath narrow scope, trigger-text and ignore-text rules (with regex support) cut noise, and JSONPath or jq handles API responses. A dedicated re-stock and price detection mode extracts product metadata and fires on thresholds - alert only when the price drops below your target or the percentage change exceeds a limit. JavaScript-heavy sites render through a real Chrome browser via Playwright, with the ability to execute JS steps first (log in, click, scroll) before extracting text. Notifications reach 85+ services through Apprise - Discord, Slack, Telegram, email, webhooks - optionally with a screenshot of the changed page, and AI-powered summaries (any OpenAI-compatible endpoint, including local Ollama) describe what changed. Per-watch proxies, custom headers, and POST/GET control cover hostile targets. Apache-2.0 licensed with local file-based storage: the URLs you monitor and why stay entirely your business.