Initiative is a self-hosted, multi-tenant project management platform that organizes projects, tasks, collaborative documents, and schedules into strictly isolated community workspaces without enterprise complexity. Users create distinct communities where data remains strictly partitioned across separate database schemas, allowing agencies, volunteer groups, and gaming guilds to manage multiple client environments from a single deployment. Within each community, initiatives group related projects and documents while interactive drag-and-drop Kanban boards track task progression across custom columns, priorities, and deadlines. Integrated collaborative documents enable team members to co-author notes, project briefs, and meeting minutes in real time with threaded inline discussions and user mentions. Granular role-based permissions let administrators specify exact view and edit privileges down to individual items, while a recoverable trash system prevents accidental deletions from interrupting live operations. Curated marketplace apps supply customizable analytics dashboards, and optional bring-your-own-key artificial intelligence integrations generate task suggestions and summarize lengthy discussion threads. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPLv3 licensed.

Nodyx puts forum threads, real-time chat channels, peer-to-peer voice calls, collaborative whiteboards, and a drag-and-drop homepage builder behind one installation script on hardware you control. Create categories and threaded discussions that search engines index, then switch to Socket.IO-powered chat rooms where replies, pins, link previews, and @mentions update instantly. Voice channels connect participants through WebRTC mesh networking, keeping audio between peers without routing through third-party servers; a Rust-based STUN/TURN relay handles restrictive NATs so home-server deployments work without port forwarding. The NodyxCanvas layer adds CRDT-synchronized collaborative drawing with 11 tools, voice-aware cursors, and board-scoped chat, all persisted to PostgreSQL snapshots. Build your community's landing page with a visual editor that places widgets across 11 layout zones, then extend functionality by dropping third-party widget archives into the admin panel or authoring your own with the plain-JavaScript Widget SDK. Private conversations stay end-to-end encrypted with ECDH P-256 key exchange and AES-256-GCM ciphers where the private key never leaves the browser, and the OctoGuard module automates moderation with five matcher types plus configurable actions from muting to banning. For streamers, a native Streamer Hub bridges Twitch chat bidirectionally, provides a drag-and-drop soundboard, generates OBS browser-source overlays, and offers a mobile Stream Deck. Instances discover each other through a gossip protocol, forming a decentralized network without central coordination. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Deploying container updates without blind surprises is what Drydock delivers through a monitor-first inspection plane that evaluates image registries, scans CVE vulnerabilities, and automates rollbacks across distributed Docker infrastructure. Systems engineers track container fleets across twenty-three public and private registries including Docker Hub, GitHub Container Registry, Harbor, and Quay using cursor-based pagination and semver classification. The integrated Update Bouncer runs Trivy and Grype static scanners against incoming candidate layers, blocking deployments that fail configurable CVE severity policies while verifying cryptographic signatures through cosign. Operators configure declarative update schedules with stabilization countdown gates that hold back brand-new releases until defined burn-in periods elapse. When updates execute, Drydock creates pre-upgrade container snapshots and evaluates post-launch container health checks, instantly restoring previous image digests and network configs if failures occur. Distributed Portwing edge agents stream live container output and system logs over encrypted WebSockets, allowing central consoles to coordinate remote daemon updates without opening inbound host firewall ports. Automated event triggers dispatch granular notifications and update payloads across seventeen communication channels including Slack, Discord, Telegram, and Home Assistant MQTT brokers. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Visual drag-and-drop assembly replaces manual text editing in Dock-Dploy, a Docker Compose builder and configuration management suite that turns complex multi-service container topologies into validated YAML manifests. DevOps engineers and self-hosters can visually assemble application stacks by selecting container base images, defining healthcheck probes, mapping bridge networks, and assigning persistent volume mounts through a reactive web interface. An integrated marketplace catalog allows teams to search, preview, and import battle-tested templates for services like PostgreSQL, Redis, and Nginx with one click. Real-time Zod schema validation inspects every service parameter as you type, flagging port collisions, missing environment variables, and malformed volume syntax before deployment. A split-screen CodeMirror editor provides continuous synchronization between graphic form fields and generated YAML definitions with automatic code sanitization and clipboard exports. Beyond Compose stacks, operators can design blueprint templates, generate reverse proxy routing profiles, and assemble recurring cron schedules for automated backup and maintenance routines. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Achieving 98.4% Recall@5 on LongMemEval-S without a reranker, AKB is the agent-native knowledge infrastructure giving Claude Code, Cursor, Windsurf, and any MCP-aware agent persistent organizational memory — a drop-in replacement for Confluence or Notion where AI agents read and write directly rather than scraping human-formatted pages. Documents are stored as Markdown with YAML frontmatter in Git bare repositories (full version history, branching, diff), while PostgreSQL 16 serves as source of truth for chunk text, metadata, and BM25 vocabulary, with dense embeddings handled by a pluggable vector store (pgvector default, Qdrant optional, or managed Seahorse). Agents interact through 20+ MCP tools — akb_put, akb_search, akb_browse, akb_relations, akb_sql, akb_edit, akb_history — performing hybrid dense plus BM25 search fused via Reciprocal Rank Fusion in one call. The URI graph (depends_on, related_to, implements relations) lets agents traverse knowledge connections without external graph databases. Multi-tenant vault isolation is enforced at the PostgreSQL ACL level with per-user roles and SET LOCAL ROLE for SQL sandboxing. Event fanout streams structured events to Redis Streams for external consumers (synthesis bots, digest agents, audit trails), and a hash-chained append-only audit log integrates with enterprise SIEMs. Ships with agent plugins for Claude Code and Codex (session capture, wiki ingest, lifecycle hooks), Kubernetes kustomize manifests, and Open Knowledge Format export. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSL 1.1 licensed (free under 100 seats, auto-converts to Apache 2.0 after four years).

Started as an ExpenseOwl-inspired project, Wally grew into a lightweight, self-hosted expense tracker more capable in every direction its author touched. The backend is Python FastAPI over SQLite, which means every deployment ships a full REST API with interactive documentation at /api/docs - automating imports or wiring in external tools requires no reverse engineering, and when the optional login page is enabled you can mint scoped API keys from the Settings page for token-based integrations. The transactions view is built on AG Grid, bringing real search, column sorting, and per-column filtering to your ledger, with a footer totaling rows, income, and expenses for whatever slice you have filtered. Dashboards go beyond the usual monthly doughnut: a Change button swaps in year-scale line graphs so you can track a single category - restaurants, say - across time. Recurring transactions edit intelligently, letting you apply changes to all instances or only future ones. CSV import and export use a simple six-column format handled from Settings, the refined dark theme is genuinely easy on the eyes, and the interface is translated into more than ten languages. The whole thing runs from one small container with a single data volume.

HitKeep is a sovereign web analytics platform that consolidates cookieless visitor telemetry, conversion funnels, e-commerce revenue reports, and AI engine visibility into a privacy-respecting dashboard that replaces Google Analytics and complex tracking clouds. Marketing teams can monitor inbound visitor journeys without installing intrusive consent banners or violating regional GDPR regulations. Custom conversion funnels and goal milestones track user registrations, checkout transactions, newsletter subscriptions, and software downloads with exact revenue attribution. Integrated Google Search Console synchronization brings organic search queries, keyword impression rankings, and click-through metrics directly alongside real-time pageview logs. A dedicated artificial intelligence visibility dashboard monitors crawling bots, retrieval citations, and direct referral visits originating from ChatGPT, Claude, Perplexity, and other generative search agents. Growth analysts can pose natural language questions to an embedded AI reporting assistant, generating instant cohort breakdowns and engagement trends without assembling complex manual filters. Site operators can configure custom tracking domains, whitelist reverse proxy networks, filter out referrer spam, and schedule automated database backups across persistent storage volumes. Complete data sovereignty controls allow teams to export raw event telemetry into open Parquet and CSV archives or stream metrics into external business intelligence warehouses via webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Managing multi-server container fleets often deteriorates into fragmented SSH sessions, mismatched compose files, and conflicting port allocations. Composr consolidates multiple Docker host daemons into a unified web dashboard that controls running containers, stack definitions, and system metrics from a single interface. Operators can connect remote Docker daemons through encrypted TCP sockets, inspect container health, and stream live execution logs with sub-second responsiveness. A built-in project creation wizard guides administrators through drafting new Compose topologies across local directories or remote server nodes. In-browser CodeMirror editors deliver live syntax highlighting for YAML files, configuration dotfiles, and reverse proxy definitions without detaching containers from disk. The platform tracks service properties directly, letting you toggle Compose profiles, relocate services between YAML manifests with pre-flight risk checks, and detect target port collisions before redeployment. Integrated backup managers bundle container metadata, compose files, and environment definitions into downloadable archive packages for automated disaster recovery. System operators can open interactive browser terminals into any active container, execute batch maintenance tasks, and configure scheduled image update checks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Usulnet packs container management, Trivy security scanning, Nginx reverse proxy, scheduled backups, WireGuard VPN, firewall rules, and multi-node orchestration into a single 70MB Go binary with zero external runtime dependencies. Every module ships in one download with no paid tiers, no telemetry, and no edition gating. Container lifecycle management covers creation, start, stop, restart, pause, kill, and removal with bulk operations, real-time resource statistics, filesystem browsing, and settings editing. Trivy integration scans images and running containers for CVEs with severity scoring, generates SBOMs, and validates CIS benchmarks. The multi-node architecture supports standalone, master, or agent modes where agents connect over NATS JetStream with mTLS encryption, enabling remote Docker host management from a central dashboard. Reverse proxy configuration handles Nginx with automatic Let's Encrypt certificates, TCP/UDP stream proxying, access lists, and dead host detection. Backup operations capture container volumes and Compose stacks on configurable schedules with retention policies and full restore capabilities. A built-in application catalog provides 60+ one-click templates for common services. JWT license validation uses an RSA-4096 public key embedded in the binary, requiring no call-home and working entirely offline. For teams tired of maintaining separate tools for each infrastructure concern, Usulnet collapses the entire stack into a single point of management with Docker Compose deployment alongside PostgreSQL, Redis, and NATS.

That yogurt hiding behind the ketchup expired three weeks ago, and the flour you bought "just in case" has been sitting in the pantry since last winter. EverShelf replaces mental guesswork with a structured inventory system that tracks every item across pantry, fridge, freezer, and custom locations with precise quantities, expiry dates, and consumption patterns. Scan barcodes with your phone camera to add products instantly, or let the Gemini AI identify items from a photo and estimate shelf life based on storage location. The dashboard surfaces expired items and upcoming expirations with color-coded urgency badges, while anomaly detection flags suspicious quantities and consumption predictions that deviate from your history. Opened products get reduced shelf-life calculations; vacuum-sealed items get extended dates automatically. The recipe engine generates context-aware meal suggestions from your current inventory, prioritizing ingredients approaching expiry so nothing goes to waste; each recipe includes step-by-step cooking mode with text-to-speech narration and timer integration. A smart shopping list auto-populates when stock hits zero and syncs bidirectionally with the Bring! app, with AI-estimated prices per item and consumption forecasts showing when you will need to restock. For Home Assistant users, a native HACS integration provides 22 sensors, expiry calendars, bidirectional todo-list sync, and voice assistant support for adding items hands-free. A dedicated Kiosk mode optimizes the interface for wall-mounted tablets with BLE scale integration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Loomfeed gives you a Reddit-style community platform where AI agents post, comment, vote, and debate alongside human users, with every piece of agent-generated content carrying verifiable provenance metadata that traces back to its sources, model, and confidence score. Create communities and set per-community quality gates that determine how much research depth or source checking a post needs before publication. Eight specialized post types (Text, Link, Question, Task, Synthesis, Debate, Code Review, Alert) structure conversations for different purposes, and typed citation graphs let any claim link to supporting, contradicting, or extending evidence. Epistemic status labels (Hypothesis, Supported, Contested, Refuted, Consensus) give communities a shared vocabulary for reliability, while only human accounts can grant the Seal of Approval on agent-generated posts. The Agent Arena hosts structured head-to-head debates between AI agents, presenting arguments side by side so the community can vote on the strongest reasoning. Reputation and trust scores rise and fall with community feedback, applying equally to human and agent accounts. Hybrid search combines full-text indexing with trigram similarity via Reciprocal Rank Fusion across PostgreSQL. Integration options include 90+ REST endpoints, 59 MCP tools, and A2A protocol support, with Python and TypeScript SDKs for building against the API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

100% portability is Nanote's one non-negotiable principle as a self-hosted note-taking app. There is no database - notebooks are plain folders and notes are plain Markdown files on your filesystem, so the same notes remain fully manageable from a terminal, Notepad, or any other editor, and walking away from Nanote costs nothing because your data was never in a proprietary format to begin with. Built with Nuxt and TypeScript around the Milkdown editor, it layers modern conveniences on that plain-file foundation: fast content search across all notes using OS-optimized tooling (ugrep), native Markdown rendering, image and file attachments, and a mobile-friendly layout for reading and editing on a phone. Clever remark directives make plain text interactive - typing ::file inserts an inline upload picker, while ::today, ::now, and ::tomorrow expand to live dates and times. A fully typed REST API with validation covers automation, and access is protected by a configurable secret key. Deployment is one container with three env vars: paths for notes, uploads, and config, all bind-mountable so your Markdown lives wherever you want it - including inside an existing sync setup. AGPL-licensed and actively daily-driven by its author.

Built atop the TauricResearch TradingAgents framework with nearly 100,000 GitHub stars, TradingAgents GUI transforms a CLI-only multi-agent LLM stock analysis pipeline into a polished web application accessible at localhost:5000. The system deploys twelve specialized AI agents — fundamental analysts, sentiment experts, technical analysts, bull and bear researchers, a trader, risk management team, and portfolio manager — who collaboratively debate market conditions through structured LangGraph workflows before producing a final BUY, SELL, or HOLD recommendation. The interface supports ten LLM providers including OpenAI, Anthropic, Google, OpenRouter, DeepSeek, Ollama, xAI, Qwen, GLM, and MiniMax, with a first-run wizard that auto-detects configured API keys and tests connections. A live pipeline visualization shows each agent's status with real-time progress bars, while the tabbed output area separates Live Feed, Reports preview, and Tool calls into dedicated panes. The three-pane Reports tab provides searchable indexing, table-of-contents navigation, and export to Markdown, HTML, or PDF formats. Report length control across Concise, Standard, and Comprehensive modes saves up to 50% on token costs. Multi-session chat allows pinning past reports as grounding context with live token counting and context-window warnings. Three built-in themes — Terminal, Modern, and Bloomberg — persist per browser. Docker Compose deployment maps port 5000 with persistent report storage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

RocketplaneIO is a self-hosted AI SRE platform that gives Kubernetes clusters zero-instrumentation eBPF observability plus a copilot capable of safely diagnosing and fixing issues without your telemetry ever leaving your infrastructure. Point it at any cluster, and an eBPF DaemonSet starts capturing HTTP, gRPC, SQL, Redis, and Kafka spans across every service, including compiled binaries, with cross-service context propagation and no code changes required. The live service map draws itself from actual network traffic, matching technology logos from container images and coloring each node's health from RED metrics. Every log line sits two clicks from its parent distributed trace, and a PromQL query engine, embedded from the real Prometheus evaluator, runs over ClickHouse for long-term metric retention. The complete Kubernetes inventory (Services, Ingress, ConfigMaps, network policies, persistent volumes, CRDs) syncs continuously and is searchable alongside traces and logs. When the copilot identifies a problem, it picks from a catalog of roughly 30 risk-classified safe actions; each action verifies its preconditions, captures a before-state snapshot, executes, checks the result, and rolls back automatically on failure. Disruptive operations pause for explicit human approval before proceeding. An MCP endpoint exposes the identical guardrailed toolbox to external AI agents, so Claude Code or Cursor can operate the cluster through the same safety boundary the browser copilot uses. Complex remediations compose as searchable, forkable Starlark workflows that compile deterministically at save. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

A federated bookmark manager written in Rust: Ties (formerly linkblocks) is your own small corner of the web for saving, organizing, and sharing good pages, connected to the fediverse over ActivityPub. Instead of rigid folders, bookmarks live in arbitrarily nested lists that link together into a knowledge graph. Saved pages are fetched, converted to a readable archived version, and stored in the database, so full-text search covers titles, URLs, and the actual page text - and the content survives if the original disappears. The federation model is deliberately anti-viral: there is no global timeline and no algorithmic feed. You publish public lists for anyone, follow users whose taste you trust, and mark trusted users whose bookmarks become part of your search range - extendable to trusted-users-of-trusted-users for a wider net. Public bookmarks post to Mastodon timelines, and WebFinger lookup makes your handle discoverable across fediverse platforms. Operationally it is about as light as web software gets: a single binary with all assets baked in, integrated TLS so it can run without a reverse proxy, PostgreSQL as the only dependency, OIDC single sign-on, and a bookmarklet for one-click saves. Note the project is alpha: single-user instances only, and all data should be considered public. AGPL-3.0 licensed, built with Rust and htmx.

"Somewhat lightweight, low-friction" is how Silicon Notes' author describes the personal knowledge base - written after DokuWiki's editor "drove me mad" and no existing wiki quite fit. The philosophy is that small frequent annoyances compound into cognitive load with no return, so everything here is optimized for frictionless daily use. Notes are written in plaintext Markdown and rendered as clean HTML with Pygments syntax highlighting for code blocks; pages get bi-directional relationships (backlinks), so the knowledge base becomes a connected web rather than a folder tree; and full-text plus title search retrieves anything fast. A table of contents lives in the left sidebar - "where it belongs" - editable while you read without scrolling away. Page history tracks revisions for auditing and rollback, JSON export/import keeps everything portable, and the mobile layout is genuinely usable. The stack is deliberately minimal: Python and Flask with Mistune for Markdown and SQLite for storage - no big frameworks, just a few small dependencies. One honest caveat: there is no built-in authentication, so deploy it behind a VPN, private network, or reverse-proxy auth layer. For a solo engineer's brain, it is exactly enough.

Nimbus is a self-hosted homelab dashboard that turns your scattered pile of services into a polished, organized command center with real-time health monitoring for every endpoint you care about. The dashboard displays live status cards for each registered service, tracking response times down to the millisecond and graphing uptime history so you can spot degradation before it becomes an outage. Health checks run on configurable intervals with smart self-signed certificate handling, meaning your internal services with self-issued TLS do not trigger false alarms. Multi-user support comes standard: local accounts authenticate via JWT, while OAuth2 integration with Google, GitHub, and Discord lets team members sign in with existing credentials. Role-based access control and a built-in admin panel give you granular authority over who sees what. Each user personalizes their view with custom backgrounds, light or dark mode, accent color themes, and drag-and-drop service tile arrangement. Services group into named categories and cards resize to fit your preferred layout, with both grid and list view modes available. Prometheus metrics export feeds your existing Grafana stack, and webhook notifications alert you instantly when a service goes offline. Custom service icons upload directly or auto-fetch from the Dashboard Icons collection. Zero-config Docker deployment gets you running in under 30 seconds with a single docker-compose command. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Monitoring and safeguarding Docker infrastructure without heavy enterprise software overhead is the primary mission of Statainer, an open-source management control center for container hosts. System operators inspect live CPU loads, memory consumption, network throughput, and disk I/O metrics across individual containers or comparative top-ranking charts. The interface groups containers by Compose projects, enabling administrators to start, stop, or restart entire application stacks and inspect real-time log streams without opening SSH sessions. The built-in Update Manager detects available image tags, executes single-click container updates, and maintains persistent deployment history with automated rollback capabilities for failed recreations. Custom alert configurations trigger instant notifications to Telegram, Discord, Slack, Pushover, or generic webhook endpoints whenever resource thresholds are breached or container health states change. Developers can provision scoped API keys with token authentication to automate container state transitions and export performance telemetry into custom monitoring workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.