By routing file transfers directly between client browsers and S3-compatible object storage through time-limited presigned URLs, Safebucket enables organizations to share large files and folders without bottlenecking their application server. Teams organize documents into logical buckets with nested folder hierarchies, preview images, videos, audio tracks, and PDFs inside a sandboxed browser viewer, or bundle up to one hundred selected items into a single client-side ZIP download. Public Quick Share links let external recipients download files or entire folders from a browser or via command-line curl redirects, while Reverse Share turns any shared folder into a secure dropbox where guests can upload files back under size and count quotas. Every shared link supports optional password protection, expiration dates, and maximum view limits, complemented by per-file expiration timers and a soft-delete trash bin with configurable retention. Two-tier role-based access control pairs platform roles (Admin, User, and Guest) with bucket-level permissions (Owner, Contributor, and Viewer), allowing teams to invite external collaborators via challenge-verified email links. Authentication integrates with OpenID Connect identity providers and LDAP or Active Directory servers alongside TOTP multi-factor authentication. Administrators gain a four-view governance console covering platform storage metrics, user and bucket inventories, and searchable audit trails filtered by action, user, and date range. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Capture every article you read, RSS feed you follow, X/Twitter thread you scroll past, and GitHub repository you star into one searchable, AI-enhanced personal knowledge base with Huntly. Auto-save visited web pages through the companion browser extension, extract distraction-free article text using Mozilla Readability and Defuddle, and highlight passages with inline notes that remain anchored in your library. Reconstruct multi-post X/Twitter threads automatically with embedded media preserved intact. Subscribe to RSS and Atom feeds via OPML import, organize subscriptions into custom folders, and triage unread stories alongside your read-it-later queue and hierarchical collections. Synchronize starred GitHub repositories with their README documentation and repository tags so you can filter tools by topic without leaving your dashboard. Run custom AI shortcuts to summarize long-form essays, translate foreign articles, or query your entire archive from external AI coding agents through the built-in MCP server and Agent Skills integration. Execute boolean, phrase, and bilingual fuzzy queries across every saved document or export your entire library to portable Markdown files. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

When an alert fires on any of your Prometheus Alertmanagers, Karma shows it once, on one filterable dashboard, and lets you acknowledge or silence it from there. Identical alerts from different servers merge into one entry tagged with every server that saw it, HA pairs included. Groups follow the group_by settings of your Alertmanager routes, and shared labels and annotations collapse into a footer. Multi-grid mode gives each value of a label, or each Alertmanager, cluster, or receiver, its own grid, keeping production and staging apart. Configurable label colors make hosts and severities easy to spot. Optional history draws 24 hourly blocks per group from the Prometheus servers that fired it, and an inhibited alert's muted button lists whatever is suppressing it. One click acknowledges an alert with a short-lived silence, and the separate kthxbye daemon can keep extending it until the alert resolves. The silence modal creates, edits, and expires silences, and ticket IDs in comments can become links. A Dead Man's Switch check raises a visible error when the alerting pipeline goes quiet. Basic auth or a proxy's header identifies each user, silence ACLs stop one team from silencing another's alerts, and read-only mode disables silence management. Default filters open the view your team triages first, and light and dark themes follow the browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Point Sirius Scan at a network range and it finds live hosts, fingerprints their services, and lists every matching CVE with its CVSS score in a live web dashboard. The Vulnerability Navigator groups findings by severity, filters on CVSS, and exports results for remediation tracking. Scans run on Nmap with NSE scripts kept in sync with upstream, alongside Naabu port scanning. Lightweight remote agents connect back over gRPC from other networks, so segments the central scanner cannot reach still get assessed, and the same agents can run YAML detection templates locally in CLI mode with no server connection at all. An operator console runs PowerShell commands against connected agents and keeps command history beside the scan results. Real-time progress, severity trend charts, host detail pages, and an environment overview show what changed between scans. A REST API on port 9001 with API key authentication feeds results into existing security workflows, while service health monitoring and centralized logging confirm the platform itself is behaving. An installer generates fresh secrets and an initial admin password, and production overlays tighten the deployment further. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Pastefy gives developers a self-hosted pastebin and GitHub Gist workspace where multi-file code snippets, Mermaid architecture diagrams, and terminal recordings can be shared in a single click or cURL command. Its multi-tab editor highlights syntax across more than 200 programming languages so you can bundle scripts, configuration files, and documentation inside one URL. Markdown notes render cleanly. SVG graphics, CSV tables, GeoJSON maps, unified diffs, calendar events, regex testers, and Asciinema `.cast` terminal sessions all preview interactively in the browser. Sensitive snippets stay locked behind client-side AES password encryption, automatic expiration timers, and public, unlisted, or private visibility controls. Authenticated users organize pastes into nested folders, fork community snippets, generate QR codes or styled code screenshots, and embed interactive viewers into external docs. Command-line users pipe output directly via `curl -F [email protected]`, manage pastes from VS Code or Raycast extensions, and automate workflows through the REST API v2 with official JavaScript, Java, and Go SDKs. Single sign-on supports GitHub, Google, Discord, Twitch, and custom OpenID Connect providers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When cybersecurity instructors and competition organizers host Capture The Flag tournaments, GZCTF orchestrates isolated per-team challenge containers, dynamic anti-cheat flags, and live exponential scoreboards from a single web platform. Event administrators can configure four distinct challenge modes covering static attachments, team-specific dynamic attachments, shared static containers, and isolated dynamic containers where unique flags are injected into each team's environment at launch. A customizable exponential scoring engine adjusts point values automatically as more teams solve a problem while awarding first, second, and third blood bonuses to top contenders. Built-in flag-sharing detection monitors every submission in real time, flagging suspicious cross-team flag reuse alongside live event streams and container logs. Participants can group into divisions, track their ranking trajectory on interactive score timelines, and upload post-game writeups directly into the portal for organizer review and batch archiving. Built-in network proxying forwards challenge traffic over WebSocket tunnels with optional packet capture so referees can audit exploit payloads during active matches. Multi-language localization, customizable branding, invitation gates, and email domain restrictions adapt the portal to university courses, corporate security drills, or international tournaments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your team's knowledge already lives in a folder of Markdown files, and CollabMD turns that exact folder into a shared workspace everyone can edit together in the browser, with nothing to migrate and no database swallowing your notes. Point it at an Obsidian vault, a plain docs directory, or a git-backed repository and the filesystem stays the source of truth: files are never moved, renamed, or deleted unless someone does it deliberately in the app. Several people can type in the same document at once with live cursors and presence indicators, follow a collaborator's view while they present, and drop comments anchored to a specific line or text selection instead of scattering feedback across chat threads. Edits made outside the browser, in Obsidian or any text editor, sync back into open documents automatically, so local and remote work never fork. Diagrams are first-class citizens: Mermaid, PlantUML, Structurizr C4 models, Excalidraw canvases, and draw.io files all open and render beside your prose, and a git panel lets you review changes and commit with a message without leaving the tab. Global full-text search, wiki-links with backlinks, team chat, file uploads, and optional password or Google sign-in round out a workspace that respects how your files already live. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Own every visitor metric without cookies, consent banners, or external database clusters through Vince, a self-hosted web analytics platform engineered for fast multi-site traffic intelligence. Zero cookies. Sub-kilobyte tracking script. Unlimited domains and events. You can point existing Plausible Analytics tracker snippets directly at your instance and immediately begin recording unique visitors, total sessions, pageviews, views per visit, bounce rates, and visit durations across all of your properties. Interactive dashboards break down incoming traffic by referral sources, UTM campaign parameters, entry and exit pages, countries, regions, cities, device categories, browsers, and operating systems. Behavior analytics go beyond simple pageviews by capturing outbound link clicks, file downloads, 404 error pages, pageview goals, and custom event conversions with custom properties. Period-over-period comparisons let you benchmark current traffic and conversion rates against previous date ranges or custom calendar intervals with a single click. Dashboards stay private by default, but you can open public stats views or generate unique, optionally password-protected shared links for clients and stakeholders, as well as query metrics programmatically over the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

For teams that need ISO 27001, NIS2, and GDPR evidence without handing compliance data to a SaaS vendor, ISMS Builder is a self-hosted information security management system for policies, risks, assets, audits, and incidents. Compliance managers move policies from draft through review to approved and archived, and recipients confirm each one through a token link that needs no login. Security officers close gaps in a Statement of Applicability that cross-maps BSI IT-Grundschutz, NIS2, EUCS, the EU AI Act, and the Cyber Resilience Act, with ISO 27001 controls imported from their own licensed copy. Risk owners keep treatment plans, turn Greenbone and OpenVAS reports into risk drafts, and score assets for confidentiality, integrity, availability, and authenticity. Data protection officers run records of processing, processor agreements, impact assessments, data subject requests, a 72-hour timer, and a deletion log with email alerts. The CISO inbox collects incidents, including reports from a public form that needs no login, beside a 30-item NIS2 Article 21 checklist and Article 23 deadline alerts. Auditors work from a findings register, a compliance matrix, and an exportable audit log of every create, update, delete, and login. Administrators enforce TOTP two-factor sign-in, choose among German, English, French, and Dutch, run semantic search locally through Ollama, and publish approved policies to Nextcloud or ownCloud as PDFs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Stop losing money to forgotten paper gift cards and expired retail coupons by centralizing every voucher, loyalty barcode, and store credit inside VoucherVault, a self-hosted digital wallet accessible from any browser or mobile device. Point your phone camera at physical cards during item creation to scan 1D barcodes and 2D QR codes with automatic format detection, or upload original PDF receipts and image attachments directly to each entry. At the checkout register, pull up high-contrast QR codes and scannable barcodes instantly, even inside underground stores without cellular reception thanks to the manual 48-hour offline caching mode. Gift card balances update automatically as you log individual partial redemptions in the per-item transaction ledger. Configurable Apprise notification rules alert you 30 days and 7 days before any voucher expires across Telegram, Discord, Gotify, Ntfy, or email. Households and teams can share specific cards between accounts while keeping personal items private, and administrators can enable OpenID Connect single sign-on for frictionless login. Multi-currency conversion automatically calculates portfolio totals across international vouchers. A built-in REST API endpoint even exposes live portfolio counts and value statistics directly to Home Assistant dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

For avid readers who want to catalog their home bookshelves and track annual reading progress without handing personal habits to commercial social networks, BookLogr delivers a self-hosted personal library and reading tracker that replaces Goodreads and The StoryGraph. Searching by title, ISBN-10, or ISBN-13 pulls book covers, author names, page counts, and descriptions directly from OpenLibrary, while manual entry and user-defined custom fields let you record text, numbers, dates, selections, or boolean attributes for rare and indie editions. Configurable library tabs organize titles across Reading, To Be Read, Already Read, Did Not Finish, and All views with instant author filtering. As you read, you can update your current page number or completion percentage, log start and finish dates across multiple re-reads, and rate completed books on a granular 0.5 to 5.0 star scale. Readers can capture page-linked notes and favorite quotes, keeping reflections private or publishing them to a dedicated Notes and Quotes feed on a shareable public profile. Automated Mastodon integration posts reading milestones to the fediverse, while OpenID Connect single sign-on and single-user mode adapt the workspace for households or solo collectors. Built-in Goodreads CSV import and one-click exports to CSV, JSON, and HTML guarantee complete data portability. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Passive slide decks put audiences to sleep, which is why Claper turns any presentation into a two-way live session where every attendee can vote in polls, submit questions, and react in real time from their phone. Speakers upload existing PDF or PowerPoint decks directly into the web studio and interleave interactive poll, quiz, form, and web embed slides between their static pages without rebuilding presentations from scratch. Conference organizers and educators share a short join code or QR link so hundreds of participants can enter the attendee room instantly from any mobile browser without installing an app or creating an account. During the talk, the presenter console displays incoming audience questions sorted by upvote popularity, alongside moderation controls to approve, pin, hide, or mark inquiries as answered on the main screen. Live polling supports multiple-choice, rating scale, and open-text prompts that animate into real-time bar charts and percentage breakdowns as votes arrive, while timed quizzes grade participant responses automatically. Integrated real-time speech transcription generates live captions and searchable session transcripts so international and hearing-impaired attendees can follow every spoken word. Universities and corporate training teams connect Claper directly to Moodle or OpenID Connect identity providers via LTI 1.3 to synchronize student rosters, push quiz scores to gradebooks, and export complete CSV engagement reports after every session. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Shipping a Git repository to a live HTTPS URL takes one dashboard and one server with ZaneOps, an open-source alternative to Heroku, Railway, and Render. Linked GitHub or GitLab repositories build with a Dockerfile, Nixpacks, Railpack, or a static directory builder. Deploys start by hand, on git push, or from a CI webhook. Blue/green releases keep the previous version serving traffic while the new one starts. Each pull request or merge request can open its own preview environment, and the API can create one on demand. Configuration edits queue up as changes that you review before a new version deploys. A pasted docker-compose.yml or a ready-made template (Postgres, Redis, WordPress) deploys a whole stack with blue/green rollouts. Every domain gets a free SSL certificate that renews itself. Wildcard hosts, permanent or temporary redirects, and several services under one domain all work. Runtime logs, request logs, metrics, and health checks gather in the dashboard. Services get CPU and memory limits and volumes, and environment variables import or export as .env files. Viewer, Member, Admin, and Owner roles decide who can see and change what; the free tier allows one workspace and three users. A web terminal opens a shell inside any running deployment, and a second one reaches the server itself over SSH. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

When a family vacation or group expedition spans multiple airlines, hotels, rental cars, and currencies, Surmai brings every reservation and shared cost into one collaborative travel planner. Each trip breaks down into dedicated sections for transportation legs, lodging stays, daily activities, and travel notes. Confirmation codes, terminal numbers, departure times, and street addresses stay right where everyone in your party can find them. Built-in airport, city, and airline directories auto-complete flight routes in seconds, or you can forward booking confirmation emails directly into an active trip for automatic parsing. The chronological itinerary view then weaves flights, hotel check-ins, and excursions into a clean day-by-day timeline so your group can spot layover gaps immediately. Boarding passes, train tickets, and PDF vouchers live inside a central attachment vault. Installing the Progressive Web App caches your entire itinerary and travel documents on your phone for offline viewing at airport gates or remote trailheads. A built-in expense ledger logs shared purchases across multiple currencies so nobody has to guess who paid for dinner. Administrators can invite fellow travelers over SMTP email, enable OAuth2 or OpenID Connect login with Authentik, Keycloak, Google, or Microsoft, and replicate backups continuously to S3-compatible object storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Keeping users informed about software releases while gathering community feedback on upcoming roadmap items becomes effortless with ShipShipShip, a self-hosted changelog, release notes, and feature voting platform. Product managers can draft rich release announcements using a formatting editor that supports Markdown, embedded media uploads, color-coded category tags, and exact publication timestamps. Instead of juggling disconnected feedback spreadsheets, teams organize backlog proposals, active development tasks, and shipped updates across a drag-and-drop Kanban board or a filterable list view. Visitors browsing the public roadmap can upvote proposed features to help prioritize the next sprint and react to announcements using eight expressive emoji reactions. When an item moves into a shipped status, the built-in newsletter engine automatically dispatches formatted release emails over SMTP to subscribers using customizable per-event templates and one-click unsubscribe links. Design-conscious organizations can install manifest-driven public themes, map internal workflow statuses to public roadmap columns, and tailor brand colors and logos. International audiences can navigate the interface in seven languages, including full right-to-left layout support, while engineering teams automate event creation through the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

To eliminate YAML indentation errors and cryptic container misconfigurations before running docker compose up, ComposeToolbox pairs a full-featured code editor with a live configuration analyzer in a single self-hostable web workspace. Paste or write any docker-compose.yml file in the left pane to see immediate syntax validation alongside actionable best-practice warnings, such as unpinned latest image tags, missing healthchecks, or deprecated version declarations. On the right side, an interactive Configuration Overview breaks down every defined service, exposed port mapping, persistent volume mount, environment variable, and custom network into structured tabs. Built-in Quick Insert buttons let operators drop new service blocks, volume definitions, or network stanzas into the editor with one click. By mounting the persistent /app/data directory, administrators can define custom quick-insert YAML snippets with selectable hardware and networking icons in custom-templates.yml. Teams can also customize startup-template.yml so the editor opens with their organization's standard homelab or production boilerplate every time the page loads. Keyboard shortcuts, light and dark themes, and one-click YAML formatting or file export streamline daily container authoring. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

neTV turns any Xtream Codes or M3U IPTV subscription into a clean, fast player that you host yourself and open from a browser, iPhone, iPad, Apple TV, Mac, or Chromecast. The EPG grid guide shows what is on now and next, and catchup lets you browse earlier listings, replay a program from the beginning, or start over a show already airing, with timeline seeking whenever your provider keeps an archive. Intelligent Handoff lets you switch off the living room TV mid-match and resume on your phone from the exact moment you stopped, because the server keeps the stream going until the program ends. Movies and series arrive with metadata, seasons, episodes, and resume points, while search accepts regular expressions and favorites support drag-and-drop ordering alongside playlists that you build on the web and see in every app. Smart passthrough remuxes h264 and AAC streams without re-encoding, and NVENC or VAAPI hardware transcoding serves low-latency HLS to clients that need it. Owners of an NVIDIA GPU can switch on real-time 4K AI upscaling that lifts 1080p channels above 70 frames per second on an RTX 5090. A separate gateway port exposes your live sources as an Xtream-compatible endpoint for other native players, with per-user source access and stream limits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Bridging local hardware and cloud intelligence, OwnPilot orchestrates autonomous multi-channel agent swarms and visual workflow pipelines while keeping sensitive personal records strictly on private infrastructure. Users can trigger autonomous task runs that browse websites using headless browser automation, extract data tables, and summarize research directly into encrypted markdown notebooks. The built-in workflow canvas allows individuals to construct branching automation sequences combining large language models, conditional logic gates, iterative data loops, and human-in-the-loop approvals. Users delegate calendar scheduling, task tracking, expense budgeting, and contact lookups through conversational chats conducted over web portals, Telegram bots, or WhatsApp numbers. Operators can dispatch coding agents to inspect local repositories, execute shell commands in sandboxed environments, and stream live terminal logs as automated patches develop. The platform also enables home automation enthusiasts to monitor MQTT telemetric feeds from microcontrollers, queue device commands, and receive instant alert notifications when sensor thresholds trigger. Advanced security layers inspect all incoming prompts for personal data patterns, enforce strict permission boundaries across file directories, and generate tamper-evident audit logs for every autonomous tool call. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.