Up to 280 search services - Google, Bing, DuckDuckGo, Brave, Qwant, Startpage - aggregated without tracking or profiling: SearXNG is a privacy-respecting metasearch engine (AGPL-3.0, successor to Searx). Your instance queries the upstream engines on your behalf: your IP address, cookies, and search history never reach them, tracker parameters are stripped from result URLs, and an optional image proxy fetches thumbnails server-side so result pages leak nothing. It can even route outbound queries through Tor for full anonymity. Search is organized into categories - general, images, videos, news, maps, music, IT, science, files - with bang shortcuts for targeting specific engines, and every source can be enabled, disabled, or weighted per category in settings.yml. A plugin system adds calculators, hash tools, tracker removal, and unit conversions inline, and preferences (themes, safe search, languages, engine selection) persist in cookies rather than server-side accounts. The real argument for running your own instance rather than trusting a public one is control: you decide the logging policy (none), the engine mix, rate limiting, and who gets access - making it the default search backend for browsers, families, and teams that want Google-quality results without the profile.

A campaign engine wrapped around a contact database: Mautic, the largest open-source marketing automation platform, replaces HubSpot or Marketo without per-contact pricing. Contacts arrive through forms, landing pages, imports, or the REST API and flow into segments: dynamic filters that update automatically from behavior, custom profile fields, or point scores. Segments decide who qualifies; campaigns decide what happens. The drag-and-drop Campaign Builder composes multi-step workflows from actions, positive/negative decision trees, and conditions (field values, tags, device type, segment membership, point thresholds), with static or relative delays, a Jump-to-Step action for moving contacts between branches, and handoffs that push contacts into CRMs or entirely different campaigns. Messaging covers email, SMS, and web/app push out of the box, with A/B testing and a drag-and-drop email builder; dynamic website content swaps page sections per known contact. Lead scoring assigns points for clicks and visits with decay for inactivity, while stages track funnel position. Native integrations cover Salesforce, HubSpot, Zoho, and Dynamics, plus a full REST API for custom sync. It runs on PHP and MySQL with cron jobs processing campaigns and segment rebuilds - self-hosting keeps your entire contact database and behavioral history under your control.

Stop hoping your AI coding assistant remembers to plan before it codes, test after it implements, and review before it ships. Archon wraps Claude Code, OpenAI Codex, and other AI agents inside structured YAML workflows that enforce the same development process every single time. Define your pipeline as a directed acyclic graph of nodes (AI tasks, shell scripts, approval gates, loops) and Archon handles the orchestration: resolving dependencies, running independent nodes in parallel, passing artifacts between steps, and isolating every run in its own git worktree so five bug fixes can proceed simultaneously without conflicts. Ship with 17 pre-built workflows covering everything from "idea to merged PR" to automated conflict resolution, or author your own by committing YAML files to your repository's .archon/workflows/ directory. The web dashboard, launched with archon serve, provides a conversation interface with real-time streaming, a visual drag-and-drop workflow builder for creating DAG pipelines, step-by-step progress monitoring for every run, and a unified sidebar aggregating conversations from CLI, Slack, Telegram, and GitHub into one view. An NLP router parses natural language requests and automatically selects the right workflow. Structured JSON output schemas let you enforce typed responses from AI nodes, with validation and auto-repair for providers that lack native schema support. Every workflow file is version-controlled, portable, and reviewable in pull requests, so your entire team runs identical processes from day one. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With over 27,000 GitHub stars and an ecosystem of 1,900+ plugins covering every major cloud provider, database, and SaaS platform, Kestra is the orchestration engine that brings Infrastructure as Code principles to workflow automation — defining complex multi-step pipelines in readable YAML that execute across any language, runtime, or infrastructure boundary. The built-in VS Code-style editor provides syntax highlighting, auto-completion, real-time validation, and an AI Copilot that generates workflow YAML from natural language descriptions. Tasks execute in Python, Node.js, Go, R, Shell, SQL, or any Docker container, with event-driven triggers listening for file arrivals on SFTP and cloud storage, messages from Kafka, Redis, Pulsar, AMQP, MQTT, NATS, AWS SQS, Google Pub/Sub, and Azure Event Hubs in real time. The topology view visualizes workflow DAGs with execution state, duration, and output artifacts for each task node. Namespaces organize workflows into isolated environments with configurable secrets, while subflows enable modular composition with inputs, outputs, and conditional branching. Retry policies, timeouts, error handlers, and automatic backfills for missed schedules ensure reliability across production workloads. Git integration pushes workflows directly to branches from the UI with CI/CD pipeline support for automated deployment. The REST API enables programmatic workflow management, execution triggering, and resource provisioning. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Whether it is a delivery van, a trailer in a storage yard, or a dog on a hike, Traccar is the GPS tracking server that puts it on one live map you host and control. Every position and event lands in your own SQL database. Over 200 protocols covering 2000+ tracker models decode out of the box, so a Teltonika fleet unit and a budget dongle share one device list. Pick a device to see speed, address, ignition, and total distance. Routes replay on a timeline slider, and a ruler tool measures distances. Geofences can be polygons, polylines, or circles, linked to devices or groups, colored as you like, and limited by calendar schedules. Alerts for overspeed, fuel drops, offline devices, alarms, and maintenance arrive by web, email, push, SMS, Telegram, or WhatsApp. Reports cover trips, stops, summaries, charts, events, and positions, with Excel export and scheduled email delivery. Commands go out over the tracker's own connection or by SMS, queued for offline devices. Computed attributes derive ignition or fuel values from raw inputs using expressions. Resellers get admin, manager, user, and read-only roles with device limits, plus white-label branding. Traccar Client lets a smartphone report as a tracker, and Traccar Manager monitors devices from mobile. Teams who want AI assistants to query their devices can add the MCP endpoint, which is optional. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Cognee gives AI agents persistent long-term memory that survives across sessions, replacing the traditional stack of separate graph, vector, and session databases with a unified engine running on a single PostgreSQL instance. The memory-native API exposes four verbs (remember, recall, forget, and improve) enabling agents to persist context, retrieve cited answers, prune outdated knowledge, and self-improve from feedback. Under the hood, Cognee combines pgvector embeddings with a PostgreSQL-native graph store and cognitive-science-grounded ontology generation, delivering hybrid retrieval that fuses semantic similarity, structural graph traversal, and lexical search in a single query. Integrations span Claude Code, Cursor, LangGraph, OpenAI Agents, and any MCP-compatible client through a dedicated MCP server on port 8001, while the Python and TypeScript SDKs provide direct programmatic access. The platform supports swappable backends including Neo4j, FalkorDB, Qdrant, ChromaDB, Weaviate, Milvus, and LanceDB for teams with existing infrastructure. Built-in OpenTelemetry tracing, an experimental dashboard with knowledge graph visualization, multi-tenant user isolation, and audit trails ensure production readiness. Deploy via Docker Compose with optional profiles for PostgreSQL, Neo4j, Redis, and the web frontend. Reached v1.0 in April 2026 with 30,000+ stars. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

With 37,400+ GitHub stars and active daily development by the Harness engineering team, Gitness is the open-source developer platform that ships Git hosting, container-native CI/CD pipelines, a Docker-compatible artifact registry, and cloud developer environments in a single Go binary consuming approximately 100 MB of RAM — compared to GitLab's 4+ GB minimum footprint. Born as the next generation of Drone CI, Gitness inherits Drone's battle-tested pipeline engine while adding complete source code management with pull requests featuring threaded code review comments, suggested changes, required reviewer approvals, and merge strategies including squash and rebase. Branch protection rules enforce mandatory pull requests, minimum peer reviews, passing status checks, and force-push blocking. Pipelines use Drone-compatible YAML syntax with stages, steps, and service containers, triggered automatically on code changes with results displayed directly in pull request checks. The built-in container registry eliminates the need for separate Harbor or Docker Registry deployments, supporting Docker image push and pull plus Helm chart storage. Gitspaces provide on-demand remote development environments configured via industry-standard devcontainer.json files. Encrypted secrets management with Gitleaks-powered secret scanning blocks commits containing hardcoded credentials. One-click migration imports existing GitHub Organizations and GitLab Groups, automatically converting GitHub Actions and GitLab CI pipelines to Gitness YAML. The REST API with OpenAPI specification enables programmatic management of all resources. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Kortix Suna is an AI management system where autonomous agents run on isolated Linux sandbox computers, producing finished deliverables that humans review through a change request workflow before anything merges. With 20,000+ stars, it positions itself against Claude Cowork and ChatGPT Work by storing every agent persona, skill, memory artifact, and connector in a git repository: versioned, diffable, and shared across an organization. Each session launches a dedicated sandbox with full terminal access, Playwright-controlled Chromium, writable filesystem, and internet connectivity. Over 3,000 app connectors are available through MCP, OpenAPI, GraphQL, and raw HTTP, with credentials brokered server-side so tokens never enter the sandbox. Skills (reusable markdown-plus-script packages encoding company workflows) load automatically into every session, compounding institutional knowledge over time. Bring-your-own-key model routing through LiteLLM connects to OpenAI, Anthropic, Google, Mistral, or local models without vendor lock-in. The deployment runs as a single Docker Compose stack bundling the Next.js frontend, FastAPI backend, Supabase, Redis, and Caddy with automatic TLS certificates. Enterprise features include SAML/OIDC SSO, SCIM provisioning, RBAC, and audit logging. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0.

With over 14,000 GitHub stars and a mission to become the world's most trusted document-signing tool, Documenso delivers a beautifully designed electronic signature platform that organizations can self-host for complete data sovereignty. The signing workflow handles everything from simple one-party signatures to complex multi-recipient documents with configurable roles including signers, approvers, viewers, and CC recipients, each with distinct permissions and notification flows. Document templates enable reusable signing packages with pre-configured fields and recipient patterns, eliminating repetitive setup for contracts, NDAs, and onboarding documents that teams process regularly. The PAdES-standard implementation ensures digital signatures are legally compliant and cryptographically verifiable, with complete audit trails documenting every action from document creation through final signature. Direct link signing allows recipients to access documents without email, enabling embedded signing experiences within existing applications and websites. The REST API provides programmatic document creation, recipient management, and webhook notifications for integrating signature workflows into CRM systems, HR platforms, and custom business applications. Team management features organize users into groups with role-based permissions, custom branding per team, and centralized billing for organizations with multiple signing workflows. SSO integration supports standard authentication providers for enterprise identity management. The TypeScript codebase built on Next.js and Prisma with PostgreSQL makes customization and contribution accessible to modern web developers. Zapier integration connects Documenso to thousands of third-party applications for automated document routing. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 34,000 GitHub stars and backing from a well-funded engineering team, Tailscale has fundamentally simplified how developers and system administrators think about secure networking. The client daemon establishes WireGuard tunnels directly between devices using sophisticated NAT traversal techniques, achieving direct peer-to-peer connections in the vast majority of network configurations without requiring port forwarding, firewall rules, or VPN concentrators. When direct connections prove impossible due to restrictive network environments, DERP relay servers provide encrypted fallback paths. MagicDNS assigns human-readable hostnames to every device on the network, eliminating the need to remember IP addresses across a tailnet. Subnet routing allows nodes to advertise access to entire local networks, enabling remote access to office resources, home labs, or cloud VPCs through a single gateway node. Exit node functionality routes all internet traffic through a designated device for privacy protection or geographic flexibility. Access control lists define granular policies for which devices and users can communicate with which services, enforced cryptographically at the network layer. The authentication layer integrates with identity providers including Google, Microsoft, GitHub, Apple, and OIDC-compliant systems for single sign-on access. Taildrop enables direct encrypted file transfers between devices without cloud intermediaries. The tailscale CLI provides complete network management from the terminal including status monitoring, route advertisement, and node configuration. Running Tailscale on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console provides a permanent, always-on node in your mesh network. BSD-3-Clause licensed with an active open-source community.

The Bitwarden server, reimplemented in Rust: Vaultwarden (formerly bitwarden_rs) is the unofficial lightweight edition. It speaks the same wire protocol as the official server, so every official Bitwarden client - browser extensions, iOS, Android, desktop, and the bw CLI - connects without modification, while the server itself runs as a single container against SQLite (or MySQL/MariaDB/PostgreSQL) instead of the official multi-container stack that wants gigabytes of RAM. Features Bitwarden gates behind paid tiers ship free: organizations with collections, groups, member roles, and policies; TOTP code storage; file attachments; Bitwarden Send; Emergency Access; event logs; and admin password reset. Two-factor options cover authenticator apps, email, FIDO2 WebAuthn, YubiKey, and Duo, and OIDC-based SSO landed natively in v1.35.0. Zero-knowledge encryption is unchanged - vault data is encrypted client-side and the master password never reaches the server. Attachments and Sends store on local disk or S3-compatible backends, an admin panel manages users and server settings, and backup is copying one data directory. Suited to individuals and teams up to roughly 50 users.

Backed by over 36,000 GitHub stars and 120 contributors with 123 releases since 2022, 1Panel has rapidly become the go-to open-source alternative to cPanel and Plesk for modern Linux server management. The platform delivers a clean Vue.js dashboard powered by a Go backend using the Gin framework, providing visual management of Docker containers, images, networks, and volumes without touching the command line. Its curated app marketplace offers one-click installation of 165+ trusted open-source applications including Nextcloud, Bitwarden, Umami analytics, WordPress, and NocoBase, each running in isolated containers for maximum security. Native AI capabilities set 1Panel apart from every competing panel: deploy Ollama LLMs directly from the dashboard, spin up OpenClaw personal agents, monitor GPU utilization, and manage AI models through a unified interface. Website management includes automatic domain binding, Let's Encrypt SSL certificate provisioning, and Nginx configuration with zero manual setup. Security runs deep with built-in firewall rules, fail2ban integration, container isolation, WAF protection, and comprehensive audit logging enabled from day one. Automated backups support AWS S3, Cloudflare R2, and local storage with one-click restore from any snapshot. The panel supports Debian, Ubuntu, CentOS, and Rocky Linux across x86_64, aarch64, armv7l, ppc64le, and s390x architectures. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

With 24,000 GitHub stars and infrastructure processing over 100 million clicks and 2 million links monthly for marketing teams at Twilio, Buffer, Framer, Perplexity, and Vercel, Dub is the most widely adopted open-source link attribution platform — unifying branded short links, real-time conversion analytics, and affiliate programs in a single self-hostable tool. Create short links on custom domains with built-in QR code generation, device and geographic targeting rules, A/B testing for destination URLs, deferred deep linking for mobile apps, and custom social media preview cards. The attribution engine tracks the complete customer journey from first click through lead capture to final sale, calculating lifetime value, retention rates, and multi-touch attribution across campaigns. Real-time analytics visualize clicks, leads, and revenue with filtering by geography, device, browser, referrer, operating system, and UTM parameters — plus an "Ask AI" feature that generates personalized reports from natural language queries. The partner program module enables embedded referral and affiliate programs with custom reward structures, automated payouts, and partner dashboards for product-led growth. Programmatic link creation via native SDKs for TypeScript, Python, Go, PHP, and Ruby supports enterprise-scale campaigns with real-time webhook notifications on link events. Migration assistants import existing links from Bitly, Rebrandly, and Short.io with redirects preserved. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPLv3 licensed.

Bagisto is an eCommerce framework for businesses demanding full ownership and zero recurring platform fees. Built on Laravel 12 and Vue.js, version 2.4 supports seven product types — simple, configurable, virtual, downloadable, grouped, bundle, and booking — with multi-channel inventory management across unlimited warehouses and sales channels. The multi-vendor marketplace module transforms a single store into a full marketplace with vendor dashboards, commission management, automated approval workflows, and seller-managed product catalogs supporting 10M+ SKUs through Elasticsearch and OpenSearch indexing. Payment processing handles Stripe, Razorpay, PayU, PhonePe, and PayPal v2 with secure checkout sessions and IPN processing. The headless commerce architecture exposes a GraphQL API via Laravel Lighthouse, enabling decoupled storefronts built with Next.js or any frontend framework, while the PWA module delivers mobile-optimized shopping experiences. AI integration through the Laravel AI SDK connects GPT-5, Gemini, Mistral, and other LLMs for automated product descriptions, chatbot support, and AI-powered image search with TensorFlow.js fallback. Enterprise security features include admin two-factor authentication, Google reCAPTCHA Enterprise, and EU-compliant online contract withdrawal per Directive 2023/673. Built-in SEO tools handle meta titles, descriptions, keywords, and channel-wise sitemap generation. Redis caching, Laravel queues for async operations, and horizontal scaling support containerized deployments across multiple application and database servers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenViking is a self-hosted context database that gives AI agents persistent, structured memory by organizing knowledge, skills, and session history into a hierarchical virtual filesystem accessible through the viking:// URI protocol. Instead of dumping everything into a flat vector store and hoping semantic search finds the right chunks, agents navigate their context with familiar commands like ls, tree, and find, locating exactly the information they need through deterministic paths combined with semantic search. Every resource is automatically processed into three layers: a 100-token L0 abstract for quick filtering, a 2,000-token L1 overview for content navigation, and the full L2 detail loaded only when confirmed necessary. This tiered approach cuts token consumption by 83 to 96 percent compared to conventional RAG while improving task completion rates by 15 to 49 percent on benchmark tests. The built-in memory self-iteration loop automatically analyzes task execution and user feedback, updating agent memory directories so the system continuously learns and improves. You can connect to any LLM provider, including Ollama for fully local inference, OpenAI, or compatible gateways. The Web Studio UI at the /studio endpoint provides visual browsing of the entire context filesystem, and the REST API on port 1933 supports programmatic access. Deploy via Docker, Kubernetes with the included Helm chart, or as a standalone service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Getting a language model into the chat apps people already use takes a single self-hosted server running AstrBot, which answers in QQ, Telegram, Discord, Slack, Lark, DingTalk, LINE, and WeCom. The model itself is a setting. OpenAI-compatible endpoints, Anthropic, Google Gemini, DeepSeek, Ollama, and LM Studio all work, with fallback models and retry limits for failed requests, and Dify, Coze, or Alibaba Cloud Bailian can take over a conversation too. A bare model cannot act, so the built-in agent calls MCP servers and Skills, delegates to SubAgents, runs scheduled tasks, and executes code in an isolated sandbox. It cannot read your files either, so a knowledge base takes PDF, Word, Markdown, and EPUB uploads and searches them with hybrid dense and BM25 retrieval. Personas shape each bot's personality, and Whisper or Edge TTS adds speech. When an answer looks wrong, the ChatUI shows thinking, tool calls, token counts, and latency, and a per-message trace timeline shows how the bot got there. Because the panel steers the bot, administrator IDs, session whitelists, optional TOTP login, and HTTPS protect it. Backups live under System Settings, and the plugin market installs any of more than 1,000 extensions in one click. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Schema design with no account and a few clicks: drawDB is the browser-based entity-relationship diagram editor and SQL generator - an AGPL-3.0 React project with over 37,000 GitHub stars. Draw tables with columns, data types, defaults, and constraints; connect fields to create foreign-key relationships; group tables into labeled subject areas; and annotate with notes. When the design is ready, one export produces CREATE TABLE DDL - with constraints, indexes, and foreign keys - targeted at MySQL, PostgreSQL, SQLite, MariaDB, SQL Server, or Oracle. Diagrams can be database-specific, unlocking every native type plus dialect features like PostgreSQL enums and composite custom types, or generic for portability across all supported flavors. The reverse direction works too: paste existing DDL into the import dialog and drawDB renders your live schema as a navigable diagram - the fastest way to document an inherited database. Versioning and migration-script generation track schema evolution, full editor ergonomics (undo/redo, copy/paste, duplicate, themes) keep iteration fast, and diagrams export as PNG, SVG, or shareable JSON. Everything runs client-side against browser storage - no backend database connection needed - so the self-hosted Docker deployment is a featherweight static app that keeps proprietary schema designs entirely on your infrastructure.

Team and product documentation on a fast Vue frontend with PostgreSQL storage: Wiki.js is a Node.js wiki engine. Its distinguishing trait is per-page editor choice: authors pick Markdown with live preview, a WYSIWYG visual builder for non-technical writers, or raw HTML, page by page. Native Git synchronization commits every page change to GitHub, GitLab, Bitbucket, Azure DevOps, or any Git remote - bi-directionally, so edits made in the repository flow back into the wiki - giving documentation version-controlled backup for free. Authentication coverage is among the broadest of any self-hosted wiki: local accounts with self-registration, social login via Google, GitHub, Discord, and Slack, and enterprise SSO through LDAP/Active Directory, SAML, CAS, Auth0, Okta, Azure AD, Keycloak, and generic OAuth2/OIDC, with optional MFA. Built-in full-text search runs on PostgreSQL with zero setup, and external engines like Algolia or Solr can substitute. Page history with visual version comparison, granular group-based permissions per path, nested navigation menus, 50+ integration modules, and full localization round it out. AGPLv3-licensed with a 28k-star community.