Convoy is an enterprise-grade webhooks gateway that manages both incoming and outgoing webhook traffic to guarantee reliable event delivery without exposing internal microservices to the public internet. Organizations deploy the platform at the edge to ingest events from message brokers such as Apache Kafka, RabbitMQ, and Google Cloud PubSub, or receive HTTP webhooks from third-party services directly. The gateway enforces delivery policies through configurable rate limiting per endpoint, circuit breaking during downstream outages, and automated retries using constant or exponential backoff with jitter. Developers can generate customer-facing webhook portals embedded via iframes, allowing end users to inspect delivery attempts, verify HMAC-SHA256 signatures, and manually replay failed events. Comprehensive security controls include static egress IP proxying to prevent server-side request forgery, automated rolling secret keys, and instant alerting via Slack or email when endpoints fail consecutively. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Elastic License 2.0 licensed.

Point your routers at Akvorado and every NetFlow, IPFIX, and sFlow record crossing your network becomes a chart you can interrogate. The web console opens on a live summary of flows per second, exporter count, and traffic split by autonomous system, port, protocol, country, and address family. From there, the visualize page turns stored flows into stacked, line, grid, and heatmap time series, plus Sankey diagrams that show how traffic moves between networks, interfaces, and countries. Filters use a simple SQL-like syntax, so a question like which customers pulled traffic over a transit link last night becomes a query, not a support ticket to your future self. Because the outlet polls each exporter with SNMP or gNMI, flows arrive wearing real interface names, descriptions, and speeds instead of raw ifIndex numbers nobody can read. GeoIP lookups attach country and city to addresses, classification rules tag providers, peers, and connectivity types, and optional BMP sessions add AS paths and BGP communities to every flow. Retention is tiered: raw flows keep full detail for recent days while one-minute, five-minute, and hourly rollups stretch summaries across a year of history. A Grafana plugin is available too, so the same flow data can sit on the dashboards your team already watches. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

No middleman, no custody, no private keys to hand over: Bitcart is a self-hosted crypto payment processor that settles every payment straight into your own wallet. Connect wallets with just a public key or address; receiving payments never needs a private key. Accept Bitcoin, Litecoin, Bitcoin Cash, Ethereum, Monero, Tron, stablecoin tokens, and Lightning payments, with each store mixing as many wallets as it needs for multi-currency checkout. Issue invoices with custom expiration, promo codes, and per-invoice payment methods, then get status updates through webhooks, Telegram, or email. A ready-made storefront with categories, price filters, discounts, and a cart sells products or digital downloads, while a keypad point-of-sale view with amount, discount, and tip modes covers in-person sales. Approve payouts, issue refunds, export invoices as CSV or JSON, and add extensions from the plugin marketplace in one click. Bring crypto checkout to WooCommerce, Shopify, WHMCS, FOSSBilling, or Odoo, or script your own flow through the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Convert paper archives, email attachments, and PDF records into an organized digital repository with Docspell, an open-source document management system that automates optical character recognition, metadata extraction, and full-text search. Users can ingest receipts and invoices through network scanners, monitored IMAP email mailboxes, mobile uploads, or drag-and-drop browser tools. The background processing pipeline executes optical character recognition via Tesseract, enhances image contrast with unpaper, and extracts text from Word documents and PDFs. Machine learning algorithms analyze document syntax to predict correspondents, suggest relevant organization tags, and identify due dates automatically. Team members can search their entire filing cabinet using complex Boolean queries and full-text indexing powered by Apache Solr or PostgreSQL. Administrators can configure multi-user collectives with isolated permissions, define custom metadata attributes, set up webhooks, and share time-limited document download links. Users can also merge multi-page scans, track processing job queues, and export curated document collections for tax filings or legal audits. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GNU AGPL v3.0 licensed.

Picture your object storage scattered across a home server, a friend's rack, and a cheap VPS in another country, still answering S3 requests like nothing happened: that is exactly the deployment Garage was built for. Every object is replicated to three zones, so losing a node, a disk, or an entire site degrades the cluster instead of destroying your data. Applications talk to it with the standard S3 API: create buckets, upload objects in multiple parts, list and copy them, and hand out access keys that are scoped per bucket. A separate web endpoint serves static websites straight from buckets with CORS support, which covers personal sites, documentation, and release downloads without another server in the chain. The whole system ships as one dependency-free binary that asks for about a gigabyte of RAM and any x86-64 or ARM CPU from the last decade, second-hand hardware very much included. There is deliberately no consensus protocol to babysit: nodes gossip their cluster layout, tolerate 200-millisecond links, and keep serving reads while parts of the fleet are unreachable. Deuxfleurs runs it in production for their own hosting, and common pairings include restic or rclone backup targets, Matrix media storage, and Nix binary caches. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Paca is a self-hosted project management platform and Scrumban workspace where autonomous artificial intelligence agents collaborate with human software engineers as first-class Scrum teammates instead of external chat assistants. Engineering teams manage sprints, backlogs, and task lifecycles through a shared real-time board powered by Socket.IO where both humans and agents pick up assignments and post progress updates. A native Model Context Protocol server connects external coding assistants such as Claude Desktop and Claude Code directly into projects, tasks, and sprint data without custom scraping scripts. Distributed agents execute in isolated runtime sandboxes powered by the OpenHands software development kit, co-authoring behavior-driven development Gherkin scenarios with product owners and maintaining living system design documents. Visual event-driven automation builders compose multi-branch trigger, condition, and action pipelines that evaluate task dependency gates and cron schedules. A sandboxed WebAssembly plugin runtime allows developers to write custom backend logic and custom board views using Go or Rust. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Private text, encrypted before it leaves the browser: Enclosed turns passwords, keys, and other secrets into a link that only its holder can open, with no third-party service in between. Can the server read the note? No. It stores only ciphertext and settings, because the decryption key rides in the part of the link after the # sign, which browsers never send. Want a second lock? Add a password, or generate a random one with a click, and share it by another route. Worried about links lingering in chat history? Pick one hour, one day, one week, or one month, and tick Delete after reading so the first view removes the note, with a warning shown to the recipient beforehand. Need more than text? Attach files by button or drag and drop, and recipients download them one by one or all at once. Sending to a phone? Every finished note offers a QR code, downloadable as SVG or PNG. Setting it up for a team? Restrict note creation to signed-in users, create notes from the command line, and let people read the interface in 17 languages with light, dark, or system themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

tirreno watches what accounts actually do inside your product, then surfaces the ones that look like account takeover, credential stuffing, fake signups, or insider abuse. Your backend reports events such as logins, registrations, page views, searches, email changes, and field edits through an SDK or one HTTP call, and a scheduled job turns them into per-user context: devices, IP addresses, sessions, and connected identities. Preset rules cover account takeover, credential stuffing, content spam, bot detection, multi-accounting, promo abuse, dormant accounts, API protection, and high-risk regions, and you can add rules of your own. Each rule adds to a risk score, and thresholds decide whether a user is flagged for manual review or suspended automatically. The review queue lists who needs a look, and the single user view shows behaviour patterns, risk scores, connected identities, and an activity timeline. A field audit trail records what changed and when, which supports compliance reviews, while the logbook lists every API request the instance received. Your application can ask a blacklist endpoint whether a user or IP should be blocked before it responds. An optional IP enrichment pack adds geolocation, ISP, and VPN or proxy detection. All event data stays on your own server. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Scatter a few cheap VPS boxes, a home server, and one bare metal machine across three different providers, and Uncloud still treats them as a single place to run your applications. You describe services in ordinary Docker Compose files, deploy them with the uc command line tool, and publish any container port as a public HTTPS endpoint in a single command. Every machine joins an encrypted WireGuard mesh with its own container IP addresses, so services on different continents reach each other directly without VPN configuration or exposed ports. A built-in DNS server resolves service names to container IPs, and the integrated Caddy reverse proxy provisions and renews Let's Encrypt certificates automatically, sharing them across the cluster. Rolling updates replace containers with zero downtime, persistent Docker volumes keep stateful services safe, and the Unregistry integration pushes image layers straight to your machines when no registry is available. There is no control plane to babysit: each machine keeps a synchronised copy of the cluster state, and SSH access to any single node is enough to manage the whole fleet. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Parseable replaces expensive Elasticsearch clusters and fragmented monitoring stacks with a single Rust binary that ingests, queries, and stores logs, metrics, and traces on commodity object storage at a fraction of the cost. The data lake architecture decouples stateless compute from S3-compatible storage, enabling independent scaling of ingestion throughput and query capacity while cutting storage costs by up to 90% compared to indexed alternatives. OpenTelemetry-native OTLP ingestion accepts telemetry from existing OTel collector pipelines, Prometheus Remote Write endpoints, Kafka consumers, eBPF probes, and popular logging agents including Fluentd, Fluent Bit, and Vector without proprietary format conversions. The SQL-first query interface enables cross-signal analysis across all telemetry types, while native PromQL support with 50+ functions and 12 aggregation operators provides Prometheus-compatible metrics querying that works directly with Grafana dashboards. Built-in features include customizable dashboards, real-time alerting with Webhook, Slack, and Alertmanager targets, role-based access control, OpenID single sign-on integration, LogIQ automatic unstructured-to-structured log transformation, smart caching for frequently accessed data, and retention policies for lifecycle management. AI-powered Keystone Q&A provides natural language to SQL conversion and dataset summarization. All data stored as standard Apache Parquet on object storage remains accessible to any Parquet-compatible engine (DuckDB, Spark, Trino), ensuring zero vendor lock-in. Deploys on AWS S3, Azure Blob, Google Cloud Storage, MinIO, Wasabi, and DigitalOcean Spaces. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

ServerKit delivers a server control panel that fits on a small VPS while managing everything from Docker containers to mail servers. The Python/Flask backend exposes 1,519 REST endpoints across 107 blueprints with full OpenAPI documentation at /api/v1/docs, while the React frontend spans 65 screens in a 1.75MB gzipped bundle served entirely from your own infrastructure. Docker management includes full container lifecycle control, Docker Compose project orchestration, real-time log streaming, and terminal access. Database panels cover MySQL/MariaDB and PostgreSQL with user management, browser-based query consoles, and automated backups to S3, Backblaze B2, or local storage. Nginx virtual host management automates Let's Encrypt certificate provisioning with hardened TLS 1.2+ configurations and Cloudflare-aware setups. The Go-based cross-platform agent enables multi-server fleet management with HMAC-SHA256 authentication over a WebSocket gateway, supporting Linux, Windows, and macOS across amd64 and ARM64 architectures. Fleet monitoring provides cross-server heatmaps, metric comparison charts, alert thresholds, anomaly detection, and capacity forecasting. A built-in marketplace distributes 106 one-click application templates using a declarative YAML schema with Docker Compose stacks. The extension system allows community plugins for Kubernetes management, Redis browsers, and WordPress site orchestration. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

ExcaliDash adds persistent storage, access control, version history, and real-time collaboration to Excalidraw, transforming ephemeral whiteboarding sessions into a managed drawing library your team can rely on. The Node.js/Express backend with React/TypeScript frontend deploys via Docker Compose on port 6767, using Prisma ORM on SQLite for all drawings, users, and metadata. WebSocket-powered collaboration lets multiple users edit the same canvas simultaneously with live cursor presence. Drawing snapshots preserve every revision with visual preview and one-click restore to any previous state. Three authentication modes handle different deployment needs: local email/password for personal use, hybrid mode mixing native credentials with OIDC for gradual enterprise adoption, and enforced OIDC-only for organizations requiring SSO through providers like Authentik or Keycloak. Scoped sharing controls determine whether drawings stay private, shared internally with team members, or accessible via external links without authentication. Collections organize drawings through drag-and-drop grouping, full-text search locates any diagram instantly, and exports use the non-proprietary .excalidraw format ensuring complete data portability. 1,350+ stars since November 2025. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Codync turns the coding agents already installed on your computer into named bots you can message from your phone, so the Claude Code or Codex session on your desk keeps working while you are away. Each bot wraps one agent in one project folder, with its own standing instructions, memory, and approval rules, and several bots run side by side on one machine. Message any bot from the iPhone app, the desktop app, or a terminal; group rooms put bots in one thread, and an @name mention routes a question to exactly one of them. Bots ask each other for reviews inside the room and quote-reply to specific messages. File changes arrive as approval cards naming the file and computer, with Allow once, Always allow, or Deny; finished and blocked work both ping you as push notifications. The connection between phone and computer is end-to-end encrypted through a free relay, your own relay, or directly over the same Wi-Fi or Tailscale. Watch the computer's screen from your phone, hand a bot a computer-use tool, or talk to it in a voice call, and approve every new device per computer with a six-digit code. Your existing agent subscription does the work; Codync never calls a provider API with your login, and there is no paid tier. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Draw it, write it as code, or hand it to your AI agent: OpenFlowKit is an open-source diagram canvas where the picture and the text behind it are always the same diagram. Drag shapes on the canvas or type a few forgiving lines, and each side regenerates the other as a single undo step. Ten diagram types share that one language: architecture with C4 views and cloud icons, sequence, flowchart, entity-relationship, state, class, mind maps, git graphs, charts, and wireframes. Paste Mermaid, Structurizr, or D2 and it converts into editable shapes, and Copy as Mermaid sends a flowchart or sequence back out for your README. Paste a GitHub repository instead and Map mode draws its architecture for you, with every arrow citing the exact file and line behind it, and a CLI that maps a local checkout for private repos. Connect Claude Code, Cursor, or any MCP client and the agent draws on your live canvas, restyles what is there, and screenshots its own work to check it. A built-in assistant works with your own key from Claude, OpenAI, Gemini, Groq, Mistral, OpenRouter, or a local Ollama, and exports cover PNG, SVG, PDF, JSON, and animated SVG, GIF, MP4, or WebM you can drop into documentation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Replace fragile cron scripts and complex terminal commands with Zerobyte, a self-hosted web control center that schedules, monitors, and restores encrypted backups across any cloud or local storage infrastructure. System administrators can connect local drives, NFS shares, SMB exports, WebDAV mounts, and SFTP endpoints as backup sources with custom inclusion and exclusion rules. The visual interface lets you dispatch incremental, client-side encrypted snapshots to local directories, Amazon S3, Google Cloud Storage, Azure Blob, and forty cloud storage providers supported via rclone. You can schedule automated jobs using cron expressions, configure custom retention windows to automatically prune obsolete archives, and run repository health checks directly from the browser. Interactive file trees allow operators to inspect historical snapshot contents, download specific documents, or restore entire directory structures to their original locations in a single click. Configurable pre-backup and post-backup HTTP webhooks help pause databases before snapshots, execute dump commands, and alert teams through Discord, Slack, Telegram, or ntfy notifications. Multi-repository mirroring duplicates critical backups to secondary cloud providers for disaster recovery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Before any AI model reads a single customer message, Obsei has already stripped out the names, email addresses, card numbers, and ID numbers hiding inside it. Obsei pulls in what customers are saying from App Store and Google Play reviews, Zendesk, Freshdesk, and Intercom tickets, GitHub issues, surveys, YouTube comments, Bluesky, RSS feeds, SQL databases, and even Gong call transcripts. Every record is pseudonymised on the way in and stored in an encrypted database that never phones home. Then the labelling starts: sentiment, intent, language, and your own custom questions, each answered with a confidence score by a zero-shot classifier running locally on your machine, or by an LLM you choose through your own keys. Answers the model is unsure about are escalated to a stronger model or queued for a human instead of being silently wrong. Related complaints roll up into stable themes with week-by-week trends, and anything mentioned by fewer than five people stays hidden, so individuals cannot be picked out of a chart. When a theme spikes, alerts and digests land in Slack, and individual findings can be routed straight into Jira, Linear, or GitHub issues. Your analysts browse it all in the built-in Studio, and your AI agents can ask questions over MCP and get cited, redacted evidence back, with any action they propose waiting for your approval. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Written in optimized C++ where competitors use Python or Java, NZBGet saturates fast connections while idling on CPU and RAM - which is why the performance-obsessed Usenet downloader has long been the client of choice for NAS boxes, Raspberry Pis, and routers as much as full servers. The engineering shows in the recovery pipeline. Instead of shelling out to par2cmdline, NZBGet integrates the par2 source directly and exploits its knowledge of exactly which articles failed - quick par-verification checks only what needs checking, and its own multicore repair implementation runs 2-3x faster than the external tool on the same hardware. Fast par-rename deobfuscates scrambled filenames in seconds without a full verification pass, and rar-rename recovers names for multivolume archives even when no par2 files exist. DirectWrite assembles articles straight into sparse destination files, skipping temporary-file churn entirely, with an article cache and queue-pausing options to eliminate disk contention. Automation is complete: a remote web interface, full JSON-RPC API, RSS feeds with duplicate detection, scheduling and prioritization, and an extension manager for Python and Bash scripts triggered by download events. Sonarr, Radarr, and every major indexer integrate natively.

walgit is a self-hosted Git server that keeps every repository inside one S3 or GCS bucket, so the machine serving your code is disposable while your history stays durable. Point the binary at a bucket, start it, and pushing to a new repository name creates that repository on the spot, with no admin console or provisioning step in between. Developers clone, fetch, and push over smart HTTP with Git LFS support for large files, and big clones are delivered as static bundle files so multi-gigabyte repositories never bottleneck the server process. The built-in web interface lets you browse file trees, read files, review commit history, and inspect diffs directly in the browser. Per-repository policy files control protected branches, fast-forward-only references, and bypass lists, so release branches stay guarded without a separate compliance tool. A JSON API and the dependency-free repos.js SDK let scripts, internal dashboards, and automation agents read repository data programmatically, with long operations streaming progress as server-sent events. Webhooks deliver exactly-once reference events to CI systems, chat tools, and deployment pipelines whenever branches or tags move. Background checkpoints and compaction keep storage tidy on their own, while token or OpenID Connect sign-in decides who may read and who may push. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.