When a regulatory audit, legal discovery request, or employee offboarding requires years of verifiable email records, Open Archiver provides a tamper-evident, self-hosted vault for every message across your organization. Connect Google Workspace domains, Microsoft 365 tenants, personal Outlook OAuth accounts, or standard IMAP servers for continuous background synchronization, or upload historical PST, MBOX, and zipped EML archives in bulk. Every ingested message is deduplicated, compressed, and stored in standard EML format on local disks or S3-compatible object storage while SHA-256 cryptographic hashes verify file authenticity on demand through built-in Integrity Reports. Instant full-text search scans both message bodies and attached PDF or DOCX documents, letting compliance teams reconstruct complete conversation threads and enforce automated retention policies. Granular access control backed by an AWS IAM style policy engine, TOTP two-factor authentication, and an immutable audit trail keeps sensitive correspondence locked down. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Publish high-resolution photography without social media compression using ChronoFrame, a self-hosted portfolio and gallery platform built around EXIF camera telemetry, live motion media, and interactive map exploration. Drop JPEG, PNG, WebP, TIFF, or HEIC images alongside paired MOV clips into the browser uploader, and the background task queue automatically extracts camera bodies, lenses, focal lengths, shutter speeds, and RGB histograms while pairing Apple Live Photos and Motion Photos for hover playback. Visitors browse your work through a responsive masonry grid with instant ThumbHash placeholders, inspect fine details inside a hardware-accelerated WebGL tiled viewer, or explore shooting locations on an interactive MapLibre or Mapbox globe powered by reverse geocoding. Curators can group shots into reordered albums, protect private collections with passwords, edit ratings and metadata in bulk, and generate custom share preview cards. Storage scales across local disks, S3-compatible buckets, and OpenList backends with configurable CDN delivery. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Log a date, amount, and category; get a clean monthly pie chart and a cashflow strip showing income, expenses, and net balance - ExpenseOwl is expense tracking stripped to what actually matters. The MIT-licensed Go application deliberately is not a budgeting system - no envelopes, no accounts, no double-entry, no bank sync - because its author found tools like Firefly III and Actual too heavy for the simple question "where did this month's money go?" The dashboard makes that question fast: click a pie slice to exclude fixed costs like rent and see discretionary spending clearly, then drill into a chronological table view to inspect or delete individual transactions. Recurring transactions handle salaries and subscriptions automatically, optional tags add a second classification axis, and settings cover custom categories, currency symbol, and a configurable month start date for non-calendar pay cycles. CSV import migrates data from virtually any other tool, and CSV export keeps your data portable. It ships as a self-contained binary and multi-architecture Docker image with zero internet interaction, stores data in flat JSON files by default (PostgreSQL optional), and installs as a PWA on phones. Single-user by design; pair it with an authenticating reverse proxy if exposed publicly.

Define a service level objective in a few lines of YAML and Pyrra writes the Prometheus recording rules and multi-window burn rate alerts for it, then tracks the remaining error budget in a web interface. An objective can be an error ratio or a latency target, declared as a Kubernetes custom resource or as a plain file read from disk when running under Docker or as binaries. Grouping labels fan one definition out into an objective per route or handler. The objectives page lists each SLO with its window, target, availability, and remaining budget, sorted so the worst offenders sit on top; columns can be sorted or hidden, and a search box or a click on any label filters the list. Opening an objective highlights availability and error budget, plots the budget over time, and charts requests, errors, and duration with a time range picker and absolute or relative scales. Below the charts, a table shows the four generated alerts with their severities. Generated alerts carry a link back to the objective's page, and severities can be overridden in the spec. Queries go to Prometheus, Thanos, or Mimir, with basic auth, bearer tokens, or tenant IDs, and ready-made Grafana dashboards chart the same objectives. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Holding internet service providers accountable for promised bandwidth requires continuous, automated measurement, and MySpeed turns any server into an always-on connection performance analyzer that tracks download speeds, upload throughput, ping latency, and jitter around the clock. Instead of running manual browser tests only when video calls stutter, you can schedule recurring speed checks using custom Cron expressions and switch freely between Ookla, LibreSpeed, and Cloudflare testing servers to verify routing performance across different upstream networks. Interactive statistics views render gradient speed timelines, ping and jitter graphs, hourly performance breakdowns that expose peak-hour congestion, and standard deviation consistency charts, using smart 300-bucket downsampling so multi-month histories load instantaneously. Failed tests are flagged with visual markers on the timeline, while built-in health checks dispatch instant alerts to Discord, Telegram, Signal, WhatsApp, Gotify, email, or custom webhooks whenever bandwidth drops below your target thresholds or outages occur. Administrators can link multiple remote MySpeed instances into a single dashboard to compare bandwidth across branch offices, pause scheduled runs during heavy file transfers, export historical logs, and scrape real-time telemetry into Prometheus and Grafana. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Created in March 2026 and rapidly gaining traction in self-hosting communities, DockPanel delivers the most feature-dense free server panel available — 811 API endpoints, 153 one-click Docker app templates across 14 categories, and full multi-server management, all running on three Rust binaries consuming under 50MB of combined RAM. The panel handles the complete server lifecycle: sites with automatic SSL via Let's Encrypt, MySQL and PostgreSQL databases in Docker containers, Git push-to-deploy using Nixpacks for automatic language detection without Dockerfiles, blue-green zero-downtime deployments with automatic rollback on failed health checks, DNS management, mail servers, monitoring dashboards, and encrypted backups to S3, SFTP, Backblaze B2, or Google Cloud Storage. Security receives production-grade attention with per-image CVE scanning that gates deployments, a built-in WAF, passkey authentication alongside Argon2 password hashing, HttpOnly JWT sessions with blacklist-on-logout, rate limiting on auth endpoints, and fail2ban integration — all verified through an 18-vulnerability pentest with zero remaining issues. Infrastructure as Code support exports your entire server configuration to YAML, and the developer CLI provides status, diagnose, and export commands for automation. GPU passthrough enables AI workload hosting, reseller accounts support white-label branding for agencies, and ARM64 compatibility covers Raspberry Pi and Oracle Cloud free-tier deployments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

With over 2,200 GitHub stars and a philosophy that your notes should be files you own rather than rows in a database, ZenNotes is the keyboard-first Markdown editor that runs as a self-hosted web app backed by a Go server accessible from any browser on your network. Every note is a plain .md file in a vault directory you mount, with zero proprietary lock-in. Modal editing with real Vim motions, leader-key flows, and a command palette keeps your hands on the keyboard through edit, split, and preview modes. The rendering engine handles KaTeX math, Mermaid diagrams, TikZ graphics, and JSXGraph plots directly from Markdown syntax alongside wiki links and callout blocks. A first-party MCP server ships in the box with one-click integration for Claude Desktop and Cursor, letting AI assistants read and write the same Markdown files on disk without sync layers or duplicate copies. The bundled zen CLI provides note creation, search, tagging, task toggling, and piped capture with JSON output for shell scripting. Board views render plain CSV files as Kanban columns. Daily notes, quick capture, archive, and trash round out the vault workflow. The Go backend serves the browser frontend on port 7878 with token-based authentication, configurable browse roots, TLS proxy support, and file permission hardening at 0600/0700 defaults. Deploy via the multi-arch Docker image for linux/amd64 and linux/arm64. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your scanner still emails PDFs, your backup scripts still send nightly reports, and none of them will ever learn OAuth 2.0: Email OAuth 2.0 Proxy learns it on their behalf. It listens on local IMAP, POP, and SMTP ports on your server, and when a client logs in the old-fashioned way with a username and password, the proxy swaps that exchange for a modern SASL XOAUTH2 token before the connection ever reaches the provider. The client never knows anything changed, so ancient mail apps, embedded devices, monitoring tools, and hand-rolled scripts keep sending and fetching mail through Outlook, Office 365, Gmail, Google Workspace, Fastmail, Yahoo, AOL, and any other provider that demands OAuth 2.0. The hop from your client to the proxy stays simple, while the proxy opens a fully encrypted TLS connection upstream, including STARTTLS negotiation for SMTP relays that require it. One proxy instance serves many accounts at once, with each mailbox mapped to its own local port and its tokens cached under a password you control. Optional plugins can even rewrite traffic in flight: strip Microsoft Defender Safe Links back to their real URLs, stop duplicate sent messages, or swallow test mail into a black hole. Setup is a single configuration file covering server ports, per-account scopes, and token endpoints, and the proxy then runs quietly as a headless service. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Garden birdsong as a framed collage: Fugleramme draws the species heard right now as hand-cut illustrations from 1800s natural-history plates, for an e-ink panel, a TV, or any browser. The birds come from BirdNET-Go, which can listen on the same machine or elsewhere on the network, so the microphone can stay near the birds while the frame hangs in the living room. Nearly 1200 cut-outs cover over 650 species, none of them AI-generated, and each bird is sized by its real body mass, larger ones toward the centre. The page redraws only when the birds change. Heard nothing in the lookback window? A bare perch appears. Collage mode shows everything heard within a window from 15 minutes to all time, latest-bird mode changes only when a different species calls, and newest-arrival mode holds until a new species turns up. An optional spotlight puts the latest bird in the middle. Spiral or voids layouts rearrange the sheet, and a species limit keeps the most heard or the rarest. Names sit beside the birds or in a poster-style numbered key, in two languages at once from over 40, and a star flags a bird the station has never heard before for its first 24 hours. A web admin page covers display, detector address, and optional password sign-in. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

On game night Sharkord carries voice, webcams, and screen sharing, and on Monday morning it carries the team's threaded chat, all from one server you control. For the gaming crowd, voice rooms offer noise suppression, echo cancellation, webcams up to 2160p, and screen sharing in VP8, VP9, H264, or AV1, with optional simulcast layers for slow viewers. An experimental Bridge app keeps push-to-talk and mute hotkeys working with a game in focus, and plugins add a music bot or a soundboard. For a family group, invite links can carry a role, a use limit, and an expiry, and replies, reactions, custom emoji, pins, and direct messages keep conversation casual, with uploads up to 2 GB each. For a small team, text channels sit in categories with threads, mentions, and search, roles stack with per-channel permissions for private rooms, and OpenID Connect sign-in works with Authentik, Keycloak, Zitadel, Entra ID, or Google Workspace. Admins cap storage per user or role and can sign upload URLs. There is no premium tier, no member cap, no ads, and no tracking, and a built-in marketplace installs plugins in one click. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Automating PostgreSQL backup lifecycles across local volumes and S3-compatible object storage, PG Back Web gives database administrators and developers a self-hosted web console to schedule, encrypt, monitor, download, and restore database dumps without writing manual shell scripts. Instead of maintaining fragile crontab entries across individual database servers, you register PostgreSQL 13, 14, 15, 16, 17, or 18 instances in one dashboard and define recurring backup schedules with custom retention policies and timezone-aware timestamps. Each backup execution can target local directories or multiple S3 buckets across providers like AWS S3, MinIO, Backblaze B2, and Cloudflare R2, with built-in connection testing and presigned download links for rapid archive retrieval. To protect sensitive production records at rest and in transit, the platform applies PGP encryption to dump files while encrypting stored database connection strings and bucket credentials. Real-time execution logs record exact archive sizes, durations, and output streams, and the web interface lets operators trigger on-demand dumps, duplicate existing backup jobs, or run direct browser-based restorations when disaster recovery is required. Automated background health checks continuously verify connectivity to every registered PostgreSQL database and storage destination, firing configurable HTTP webhooks to Slack, Discord, or incident pipelines whenever a backup completes, fails, or changes health status. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

OpeniLink Hub turns a personal WeChat account into a programmable bot platform, with a web console, multi-bot management, and a one-click app marketplace that wires WeChat to Lark, Slack, GitHub, Notion, and twenty other services. Bind accounts by scanning a QR code, then watch every bot's status, expiry window, and message flow from one dashboard. Install marketplace apps without writing code: Lark gains 34 AI-callable tools across calendars, docs, tasks, and meetings, while GitHub brings 36 tools for issues, pull requests, and Actions. Every incoming message fans out in parallel over WebSocket for millisecond pushes, Webhook callbacks to your own servers, and an AI channel that answers through any OpenAI-compatible API. Message tracing follows each message from receipt to delivery, showing exactly which hop stalled when something breaks. Passkey sign-in with fingerprint or hardware keys keeps the console protected, with GitHub and LinuxDo OAuth as alternatives. Reminders, expense tracking, currency conversion, RSS digests, and cron-scheduled pushes run as installable apps, and expiry reminders warn you before the 24-hour reply window closes. Build your own integrations with official SDKs for Go, Node.js, Python, PHP, Java, C#, and Lua, or expose local CLI commands as chat-callable tools with the Runner app. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

A personal Strava on your own server: Endurain is a self-hosted fitness platform that keeps your complete workout history, GPS routes, and health data out of a vendor's cloud. It ingests the standard device formats (.gpx, .tcx, and preferred .fit with full sensor data) via manual or bulk upload, and syncs directly with Strava and Garmin Connect so migrating years of history is straightforward - Garmin sync covers activities, gear, and body composition. The dashboard shows activity feeds with weekly and monthly statistics, routes on maps, and distance, speed, and training-volume trends over time, with definable goals that update automatically. Gear tracking is notably deep: log wetsuits, bicycles, shoes, racquets, skis, and snowboards, assign default gear per activity type, and track individual components like bike chains against replacement mileage. Multi-user support with admin and user roles, follower features, per-activity privacy settings, and configurable sign-up (email verification, admin approval) make it usable for clubs and coaches as well as individuals. Auth is serious for a fitness app: MFA TOTP, OIDC/SAML SSO, and email-based password resets via Apprise. The stack is Vue.js over a Python FastAPI backend with PostgreSQL, plus weight, steps, and sleep logging, imperial/metric units, multi-language support, and third-party app integration.

Engineering and product teams ship code to production daily with FeatBit, an enterprise feature flag and experimentation platform that controls exactly which user segments, regions, or percentage rollouts see each new capability. When a regression appears in production, operators toggle an instant kill switch, dial back canary weights from full traffic to one percent, or restrict access to internal QA accounts without redeploying containers. Reusable user segments group customers by subscription tier, device property, or custom attributes for consistent targeting across environments. Server-side and client-side SDKs for .NET, Java, Go, Python, Node.js, React, React Native, JavaScript, and OpenFeature synchronize flag states over WebSockets in under 100 milliseconds and evaluate rules locally in memory. Built-in A/B/n experimentation links flag variations to custom conversion events, click tracking, and pageview metrics so teams can validate product hypotheses with live telemetry. Scheduled rollouts, multi-step approval workflows, flag triggers, and webhook integrations with Slack, Datadog, Grafana, New Relic, and OpenTelemetry keep release operations auditable. Role-based access control and single sign-on govern every flag change. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Every ride, run, hike, and swim you have ever recorded finds a home in Dreeve, a private fitness dashboard that lives on your own server rather than in a social feed. Import FIT, TCX, or GPX files from a watch folder, sync Strava, or add connectors for Garmin Connect, Wahoo, Polar Flow, Hammerhead, and Zepp/Amazfit. Weekly charts follow distance, time, and elevation beside training goals, heart rate zones, and training load analysis, and monthly stats pair per-sport totals with an interactive calendar. A heatmap paints every kilometer you have covered. Best efforts rank your fastest 5k, 10k, 50k, and 100k across every sport, while Eddington numbers, a milestones timeline, and a yearly Rewind mark the long game. Strava sync also brings segments, segment efforts, and challenges. Gear pages total the distance on each bike and shoe, and maintenance tasks send alerts through ntfy, Gotify, Discord, Telegram, Slack, or email when an interval comes due. Automation rules assign gear, flag commutes, and set sport types by device, distance, weekday, time of day, or location, so new imports arrive organized. Ask the AI workout assistant about your training, using cloud models, OpenRouter, or a local Ollama model. An installable mobile app and embeddable badges carry your stats to phones and blogs, and a password-protected admin panel keeps the settings. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Create an invoice, share a secure link, get paid — that's the entire workflow, no client portals or account registrations required. Invio distills billing into its absolute minimum viable surface while still producing legally compliant EU electronic invoices in Factur-X/ZUGFeRD 2.2 BASIC, UBL 2.1, and Italian FatturaPA formats, all embedded as XML attachments inside WeasyPrint-rendered PDFs. The Deno 2 backend uses Hono v4 for HTTP routing with SQLite persistence, while the SvelteKit 2 frontend styled with Tailwind CSS v4 and DaisyUI v5 delivers a responsive interface that stays out of your way. The team access system includes a permission matrix, TOTP-based two-factor authentication, and OIDC integration with configurable auto-provisioning — drop it into existing identity infrastructure without manual user management. Preset products let you build invoices from reusable catalog items. A change history log tracks every modification for audit purposes. Rate limiting protects the API behind reverse proxies. The entire stack ships as a single multi-stage Docker image containing Deno, Bun, Node, WeasyPrint, and all required font packages — zero external service dependencies beyond the container itself. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Unlicense licensed.

Eclipse Hono is an IoT connectivity platform that sits between device fleets and business applications, accepting connections over MQTT, HTTP, AMQP 1.0, and CoAP adapters and normalizing everything into uniform telemetry and event streams. Devices authenticate against a central registry of tenants and credentials, with X.509 client certificates, pre-shared keys, or automatic provisioning for zero-touch onboarding. Applications consume normalized data from Apache Kafka or an AMQP 1.0 messaging network, choosing per tenant which backbone carries its traffic, and send commands back down to devices through the same platform with delivery feedback. Resource limits cap how much data each tenant's devices may move, keeping one noisy fleet from crowding out the rest, while metrics and tracing follow every message hop. The 2.7 release adds preliminary MQTT 5 support with corrected connect reason codes, message tracing logs, and a hardened JDBC device registry backed by PostgreSQL for production tenant and credential management. Protocol adapters scale horizontally as stateless services, so capacity grows by adding instances behind a load balancer. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EPL-2.0 licensed.

Support teams handling website live chat, email queues, and social messaging channels gain a unified, AI-assisted helpdesk in Bytedesk. Incoming conversations from web widgets, mobile SDKs, WhatsApp, WeChat, and email flow into a single agent workbench equipped with skill-group routing, VIP priority rules, and automatic human handoff. Customer-facing AI agents connect to Ollama, DeepSeek, OpenAI, Qwen, and Zhipu models to answer recurring inquiries using retrieval-augmented generation (RAG) over internal knowledge bases and FAQ libraries, complete with function calling and Model Context Protocol (MCP) tool execution. Complex escalations convert into SLA-tracked tickets with custom approval workflows, or transition directly into browser-based WebRTC video calls, screen sharing sessions, and FreeSwitch voice call center queues. Supervisors track real-time queue depth, bot resolution rates, token usage, automated AI quality scores, and customer satisfaction surveys from the analytics dashboard. Native client SDKs for Web, iOS, Android, Flutter, UniApp, WordPress, and WooCommerce make embedding customizable chat widgets straightforward across any storefront. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.