AI and API products live or die by usage, and OpenMeter is the open-source stack that measures it, rations it, and bills for it. Your application emits CloudEvents for every billable action; OpenMeter validates and deduplicates them, then aggregates usage in real time so dashboards and enforcement checks never wait for a nightly batch. Meters slice that usage by customer, time window, or any dimension you attach, which turns raw events into answers like tokens per workspace this month. Entitlements decide who gets what: metered allowances with balances and overage, boolean switches for features like SSO, and static JSON configuration for per-customer model access. Grants top allowances up once or on a schedule, resets roll balances over each usage period, and one API call tells your app whether a customer still has access right now. On the money side, plans carry flat, per-unit, tiered, package, or dynamic prices; subscriptions, credit balances, and the invoice lifecycle run alongside, with webhooks announcing everything to your other systems. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Tau delivers a complete self-hosted cloud platform where Git is the control plane and WebAssembly is the runtime. The Go binary deploys as interconnected nodes that form a P2P network using libp2p for automatic service discovery, eliminating Kubernetes entirely. Serverless functions compile to WebAssembly for secure multi-tenant execution with automatic horizontal scaling — write in Go, Rust, AssemblyScript, or C and deploy by pushing to Git. Branch-based environments map Git branches to isolated deployments, so staging and production run identical infrastructure from different refs. Static website hosting serves frontends with global distribution and automatic content-addressed deduplication via IPFS-derived storage. The built-in K/V database provides distributed storage with automatic replication across nodes, while object storage handles file management with content addressing. Pub/Sub messaging enables real-time communication between functions and external services including WebSocket support. Spore Drive automates multi-host deployment and rolling updates from a single command across bare metal or VMs running Ubuntu. The Dream CLI provides a complete local development environment that mirrors production exactly — same services, same routing, same deployment flow. Zero-configuration HTTPS provisions TLS certificates automatically for custom domains. The web console at console.taubyte.com provides visual project management, or use the tau CLI for Git-native workflows. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. BSD-3-Clause licensed.

Replicate PostgreSQL to data warehouses 10x faster than conventional CDC tools, proven across 400+ companies including AutoNation and LC Waikiki collectively moving 200 TB monthly. The architecture pairs a Rust-based Nexus query layer implementing the PGWire protocol with Go-based Flow workers orchestrated by Temporal. Because Nexus speaks native Postgres wire protocol, any client tool (pgAdmin, psql, Grafana, Tableau, Flyway) can manage replication through standard SQL commands like CREATE MIRROR. Three streaming modes serve different needs: log-based CDC via logical replication slots, cursor-based streaming through timestamp or integer columns, and XMIN-based capture for tables lacking logical replication. Parallel initial load achieves consistent snapshots through transaction snapshotting and CTID range scans, reducing 100+ GB migrations from days to minutes. Native TOAST column handling processes large JSONB payloads and IoT data efficiently without row expansion penalties. Destinations include ClickHouse, Snowflake, BigQuery, Kafka, Azure Event Hubs, Google PubSub, S3, and PostgreSQL with in-flight SQL transformations. Schema change propagation, partitioned table support, and slot growth alerts ensure production reliability. Docker Compose bundles Temporal, catalog Postgres, Flow API, workers, and the Next.js monitoring UI. Deployable on RepoCloud with dedicated VPS resources under AGPL-3.0.

Subnet math, DNS lookups, DHCP options, and certificate checks share one browser tab in Networking Toolbox, a free toolkit for sysadmins and network engineers. Need to carve a /24 into departments? The VLSM planner fits named subnet requirements into a parent block, reports each subnet's efficiency and the leftover space, and exports the plan as CSV or JSON. Merging address lists? CIDR utilities summarize, split, compare, and deaggregate prefixes, with set operations for difference, overlap, and containment. Writing configs? Generators build DHCPv4 and DHCPv6 options, PXE profiles, Kea or ISC snippets, and SPF, DKIM, DMARC, CAA, TLSA, and SRV records, and DNSSEC helpers calculate key tags and DS records. Something broken? Diagnostics query DNS through Cloudflare, Google, Quad9, OpenDNS, or a resolver of your choice, read TLS certificate chains, grade HTTP security headers, trace redirects, check TCP ports, look up BGP routes and RDAP records, and test mail servers. Need a refresher? Reference guides explain private ranges, CGNAT, IPv6 address types, and common ports. A keyboard search palette puts any tool a few keystrokes away, and bookmarked tools stay available offline. Eighteen themes, four languages, custom branding, and accessibility switches make it feel like your own, and a keyless JSON API serves the subnet, CIDR, IP, and DNS utilities to scripts. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Relaticle delivers the first CRM built from the ground up for both human operators and AI agents — a self-hosted platform where Claude, GPT, Gemini, or any custom model connects through a production-grade MCP server exposing 30 tools for full CRUD operations across companies, people, opportunities, tasks, and notes without a single line of integration code. The 22 custom field types include text, email, phone, currency, date, select, multiselect, entity relationships, conditional visibility rules, and per-field encryption — all configurable through the UI without database migrations or code changes. Multi-team isolation enforces data boundaries through a 5-layer authorization system with team-scoped workspaces, API tokens, and granular permissions. The JSON:API REST surface provides Spatie QueryBuilder filtering, sorting, and pagination with schema discovery endpoints that let agents introspect your data model at runtime. A built-in AI chat connects directly to CRM data for natural language queries, while the external MCP server gives any compatible agent the same 30-tool access. Docker Compose deployment runs five containers — app (nginx + PHP-FPM), Horizon queue worker, scheduler, PostgreSQL 17, and Redis 7 — with automatic migrations on startup and demo data seeding for new teams. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

The drawing surface inside WebRTC conference tools like Meetzi and the LAMS online-learning platform is Whiteboard (by cracker0dks) - a lightweight Node.js collaborative sketchboard built to be embedded and customized, which also slots into Nextcloud via the External Sites app. Everyone opening the same whiteboardid URL parameter draws on the same board, with remote user cursors visible live, per-user undo/redo, and an indicator showing the smallest participating screen so nobody draws outside a colleague's view. Content handling goes beyond pen strokes: drag-and-drop or paste images and PDFs from any PC or browser, then resize, rotate, and draw over them on canvas or background; add text and sticky notes; hold Shift for angle-snapped lines and perfect squares. Every function has a keybinding - deliberately friendly to pen displays like Wacom and XP-Pen whose hardware buttons map to shortcuts. Boards save to image or JSON (with reload), export directly to Nextcloud via WebDAV, and persist across restarts with the file-database option. A REST API with bundled interactive docs allows full programmatic control, an optional access token locks down uploads, and YAML configuration tunes behavior and performance. MIT-licensed and reverse-proxy friendly.

zrok puts services that live behind NAT and firewalls onto the public internet with a shareable URL, without opening a single inbound port. The machine being shared dials out to an OpenZiti overlay network, so a web app on your desk, a Raspberry Pi at home, or a staging box inside a corporate network becomes reachable through your instance while its firewall stays closed. One command shares an HTTP service publicly; add a name from one of your namespaces and the URL stays stable even when you move the backend to a different machine, and an ephemeral name can be promoted to a reserved one when a quick demo turns into a keeper. Private shares skip the public internet entirely and reach only the users you grant, including raw TCP and UDP services, while web and drive backend modes publish static sites or whole folders, with OAuth, password auth, and an interstitial warning page available on public shares. The long-running agent keeps every share and access under one process, restarts the named ones after a reboot, and offers a localhost console for point-and-click sharing; the account-wide web console maps your environments, shares, and accesses as a navigable graph or a sortable table with live activity. Operators get invite-based accounts, InfluxDB-backed usage metrics, and configurable limits that warn or cut off accounts that exceed their quotas. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Scoold brings Stack Overflow-style Q&A to a server you control, so answers get voted, accepted, and found again instead of scrolling away in chat. Askers get a Markdown editor with live preview, tags, and emojis, and the form suggests similar questions and flags likely duplicates before anything is posted. Answerers collect upvotes, accepted answers, reputation points, and badges, including custom ones with your own text, icon, and color. Authors and moderators can restore any earlier revision, because every edit is kept. Searchers can use Lucene syntax such as exact phrases, wildcards, and boolean operators. Admins split one site into private spaces, up to ten in the free edition, and choose how people sign in: email and password, LDAP, or social providers such as Google and GitHub. They can also back up and restore data, import a Stack Overflow for Teams export, and follow a dashboard of questions, answers, traffic, and active members. Builders get a REST API with OpenAPI docs, signed webhooks, Zapier and n8n connectors, and an optional MCP server for AI assistants. Color themes include a dark mode, Mermaid diagrams and KaTeX formulas can be switched on, and right-to-left languages are supported. SAML, SCIM, file uploads, and chat integrations are Pro-edition features. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

With 4,300+ GitHub stars and native mobile apps on three platforms, Black Candy transforms any VPS into a private Spotify-style streaming service for your personal music collection. The Ruby on Rails 7 backend with Hotwire Turbo and Stimulus delivers a responsive single-page-feeling web player supporting album browsing, artist views, playlists, favorites, and queue management without full page reloads. Point it at a media directory containing MP3, FLAC, OGG, AAC, or WAV files and Black Candy indexes metadata, fetches album artwork from Discogs API, and begins streaming immediately with on-the-fly transcoding that adapts bitrate to client bandwidth. Multi-user support gives each account independent playlists, favorites, and listening history while sharing the same music library — ideal for families or shared households. Native iOS, Android, and F-Droid apps maintained as separate repositories provide offline caching, background playback, and server discovery for mobile listening. The admin panel manages user accounts, configures media paths, and sets Discogs API tokens for automatic cover art retrieval. Deployment requires one Docker command — `docker run -p 80:80 ghcr.io/blackcandy-org/blackcandy:latest` — with persistent storage volumes for the SQLite database and media directory. For larger deployments, switch to PostgreSQL via environment variables with dedicated database URLs for ActionCable, SolidQueue, and SolidCache. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A budget model, the launch document that explains it, and the slides that present it can live side by side in one self-hosted office workspace that people and AI agents edit together. Personal and Team Spaces organize Sheets, Docs, Slides, relational Bases, and Boards, with Recent, Trash, file import, and export views keeping everyday housekeeping close at hand. Sharing follows role and node aware access control, including anonymous viewing, so a single table or document can be opened to a reader without exposing the whole space. Data and references stay connected across artifacts as the workspace changes, which keeps a figure corrected in a sheet consistent with the document that quotes it. The Workspace Agent drafts and revises content in isolated Worktrees, verifies its own changes, and hands the result to a person for review before anything reaches the trunk. Several review rounds can happen while humans keep editing in the Browser, and nothing merges until someone approves it. The Workspace CLI connects existing agents to your deployment, so automation can create content, inspect data, render screenshots and PDFs, and run layout checks before review. Sign-in accepts passwords, GitHub, Discord, or application OAuth, and files move in and out as XLSX, DOCX, PPTX, and CSV without a separate conversion project. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your users belong in your own database - Authorizer, an open-source authentication and authorization server shipping as a single Go binary, keeps them there. It connects to 13+ backends - PostgreSQL, MySQL, SQLite, SQL Server, MariaDB, MongoDB, Cassandra, ScyllaDB, ArangoDB, DynamoDB, Couchbase, YugabyteDB, PlanetScale, and CockroachDB - so identity data lives beside the application it protects instead of in an auth vendor's cloud. The server is fully OAuth 2.0 and OpenID Connect compliant, including authorization code flow with PKCE, a JWKS endpoint, token revocation, and nine JWT signing algorithms. Login options cover email/password, magic links, TOTP multi-factor, SMS OTP via Twilio, and social providers including Google, GitHub, Apple, Microsoft, and Discord. Authorization goes beyond roles: an embedded OpenFGA engine provides Zanzibar-style relationship-based permission checks in process. APIs are exposed over GraphQL, REST, and gRPC, with SDKs for JavaScript, React, Go, and Python, plus themeable built-in login pages and an admin dashboard. Apache 2.0 licensed.

Recurring household chores and shared team checklists stay on schedule when Donetick coordinates assignments, reminders, and completion tracking from one self-hosted hub. Type a phrase like "change water filter every 6 months" and the natural-language parser extracts the due date and cadence automatically. Adaptive scheduling even adjusts future intervals from your actual completion history. Rotation rules distribute tasks fairly across family members or roommates via round-robin, random, or least-completed logic. Nested subtasks reset themselves each cycle. Finished chores earn points in the built-in gamification engine that members redeem in an admin-approved reward store. Stateful "Things" track numerical, boolean, or text metrics to trigger tasks automatically when values change. Tap physical NFC tags to check off chores on the spot, or mount a dedicated kiosk dashboard on a wall tablet for one-tap account switching. Real-time updates sync across devices alongside iCal calendar feeds, Home Assistant cards, OIDC single sign-on, and Pushover or Telegram notifications. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Pinpoint distributed system bottlenecks across polyglot microservices using Uptrace, an open telemetry monitoring platform that correlates traces, metrics, and logs inside a unified diagnostic dashboard. Engineers can track end-to-end request flows across polyglot microservices, inspecting database queries, third-party API calls, and internal function calls with sub-millisecond precision. The platform automatically aggregates spans into high-level latency percentiles, highlighting p50, p90, and p99 bottlenecks while calculating baseline error rates across production deployments. Integrated log correlation links log entries directly to parent trace spans, eliminating the friction of manual search across separate monitoring tools during active outages. You can construct custom dashboard views using a visual query builder, monitor cluster nodes, and map out upstream and downstream service dependencies with interactive topological graphs. Automated alerting channels notify on-call teams via Slack, Telegram, webhooks, or email whenever error budgets or metric thresholds trigger an incident. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Agentic SOC Platform compresses hours of manual security analysis into seconds by deploying specialized AI agents that autonomously triage, investigate, and enrich security alerts. The Python/Django backend processes SIEM webhooks through Redis Streams into a modular pipeline where LangGraph-orchestrated agents extract IOCs, correlate signals, and generate Cases with severity, confidence, impact, priority, and structured verdicts. The built-in SIRP provides full case management with Alerts, Artifacts, Enrichments, Tickets, and a Knowledge base that accumulates institutional memory for both human analysts and LLM agents. Native Splunk and Elasticsearch/Kibana integrations deliver unified log search through a standardized interface so agents and analysts share identical security context. The playbook engine combines traditional SOAR automation with AI-powered investigation — launching threat hunting agents, knowledge extraction, threat intelligence enrichment, and CMDB lookups from a single orchestration layer. MCP Plugin support exposes ASP capabilities to Claude Code, Codex, and OpenCode, enabling external AI agents to operate cases, search logs, query threat intelligence, and write custom modules directly. Python Modules adapt new alert sources while Playbooks orchestrate LLM analysis and automated response actions, scaling the platform with your security scenarios. Deploy via Docker Compose with all data staying inside your network. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Teams that ship one app in many languages keep every string, translator, and reviewer in a single workspace by hosting their own Traduora translation management platform. Developers import the files they already have: JSON, YAML, PO, XLIFF, CSV, Android XML, iOS Strings, Java properties, PHP array, or RESX. Each string becomes a term that can carry a context note and colored labels. A search bar and a label filter narrow long lists in seconds. Translators open a locale and type inline beside a reference language, with per-locale progress showing how much is finished and a toggle that hides what is already done. Colleagues join by email invitation as admins, editors, or viewers, with optional Google sign-in. Build pipelines get their own API clients, each with a role, to fetch and push translations over a REST API. Exports go back out in whichever format each platform wants, with fallback-locale and untranslated-key options. Mobile and web teams can keep iOS, Android, and website copy in sync from a single source of truth. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Vvveb, an open-source CMS with a drag-and-drop page builder and a built-in store, runs a blog, a portfolio, and a webshop from one dashboard, with every page edited visually on a true WYSIWYG canvas. Reusable blocks, page revisions, a code editor, and an optional AI assistant plugin sit alongside media management, custom fields, custom posts, and custom products that shape content well beyond plain pages. The store handles one-page checkout, subscriptions, digital downloads, vouchers, coupons, product options, attributes, variants, reviews, and Q&A across multiple payment methods and currencies. Content can be published in several languages, the admin interface switches with language packs, many sites or subdomains share one installation, and action-level permissions are assigned to each user role. A bundled SEO plugin generates sitemaps, robots.txt, Open Graph tags, hreflang links, and schema markup, and hybrid headless mode serves the same content to any frontend through GraphQL and REST endpoints. A randomized admin login URL, two-factor authentication, brute-force defenses, and a built-in integrity check guard the dashboard, and manual or automatic backups plus import and export tools cover recovery and migration. Any HTML template converts into a theme in minutes, a demo importer loads sample content for a fast start, and plugins and themes install with one click from the admin dashboard. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

A web interface for a folder of Markdown files - Flatnotes is exactly that, and the discipline of that design is why people love it. Every note is a plain .md file in a single flat directory: no database, no proprietary format, no hierarchy to maintain, no export step if you ever leave. Edit notes in the browser or open the same files in VS Code or Obsidian, sync them with Syncthing or rsync while the app is running - the Whoosh-powered search index synchronizes incrementally, so external edits just show up. The interface is a clean Vue.js app with both WYSIWYG and raw Markdown editing modes (TOAST UI Editor), instant full-text search behind the "/" shortcut with partial-match support, wikilinks for cross-note references, and automatic tag extraction from #hashtags in note bodies. Light and dark themes and a mobile-responsive layout make it pleasant everywhere. Authentication is flexible for a personal tool: none, read-only, username/password, or TOTP two-factor. A documented REST API covers create/read/update/delete for automation. The operational story is the quiet selling point - the only state is the notes folder and a rebuildable index, so backup is copying a directory. For a personal notepad that respects your data, Flatnotes nails minimal.

Homelable turns your entire homelab into a live, interactive network canvas where every device, link, and service shows its real-time status at a glance. Run an nmap-powered network scan against your subnets and the tool fingerprints services, queues unknown devices for review, and drops approved hosts onto a drag-and-drop canvas with 15 native node types covering routers, switches, hypervisors, NAS boxes, IoT sensors, and more. Import your full Zigbee2MQTT mesh (controllers, routers, end devices with link quality indicators) and Z-Wave JS device trees in one click, preserving the actual RF topology without manual wiring. Proxmox integration pulls in hosts, VMs, and LXC containers so you can nest virtual machines inside their parent hypervisor node on the canvas. The Rack Canvas mode documents the physical side of your lab: create racks with configurable U-height, mount gear into slots, and patch ports across devices to track your cabling. Health checks run every 60 seconds using ping, HTTP, HTTPS, TCP, SSH, or Prometheus scrape endpoints, with WebSocket push delivering green, red, or pending status pulses directly to the canvas. Split your infrastructure across multiple canvases organized by site, rack, or purpose, and share a read-only Live View URL with anyone on your network. A built-in Model Context Protocol server lets AI assistants like Claude query and modify your topology through natural language. Deploy on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.