The functions, config files, and one-liners you keep re-deriving finally get a searchable home: ByteStash is a self-hosted code snippet manager - a private Gist. Each snippet holds multiple code fragments, so a Docker Compose file, its .env template, and a plaintext usage note live together under one titled, categorized entry. Monaco-based syntax highlighting covers dozens of languages, from Python, TypeScript, Go, and Rust to YAML, Dockerfiles, Terraform, and Markdown. Retrieval is the point: filter by language or category, search titles and descriptions, and optionally include snippet contents in full-text search. Snippets can be pinned for quick access and shared via public links that recipients open without an account. Multi-user support runs on JWT authentication with optional OIDC single sign-on for teams on centralized identity, and a full CRUD REST API with Swagger documentation wires snippet retrieval into editors, scripts, and CI pipelines. Storage is a single SQLite database with optional encryption, and collections export as JSON or Markdown. A React frontend on a Node.js backend, deployed as one lightweight container.

Automating media server storage reclamation, Maintainerr is an open-source library maintenance platform that identifies unwatched, abandoned, or stale movies and shows across Plex, Jellyfin, and Emby and clears them on a schedule. Storage drives fill up rapidly when household members request four-season series or high-bitrate films, watch a single episode, and abandon the rest indefinitely. Instead of forcing administrators to audit disks by hand, the rule engine evaluates metadata from your media server alongside Tautulli watch histories, Seerr and Ombi request records, and Radarr, Sonarr, or Sportarr profiles every eight hours. Matching items enter a staging collection that syncs back to your media server home screen as a Leaving Soon row, complete with dynamic poster overlays displaying the exact removal date so viewers have a grace period to finish watching. Before enabling any destructive workflow, you can run the Test Media inspector against any movie or episode to preview rule evaluations and protect favorites with global or per-collection exclusions. Once the countdown expires, the collection handler deletes or unmonitors files, updates import-list exclusions so automated lists never re-download removed titles, clears orphaned requests in Seerr and Ombi, removes leftover sidecar folders, and dispatches alerts through Discord, Slack, Telegram, Pushover, Gotify, Email, or webhooks. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Domain Locker provides an all-in-one domain portfolio dashboard that consolidates expiration tracking, DNS records, and infrastructure health across every registrar you use. Add your domains to automatically harvest registration dates, name servers, SSL validity windows, IP allocations, and subdomains without manual data entry. Customizable notification rules broadcast renewal warnings and configuration change alerts through webhooks, email, Telegram, Slack, or WhatsApp before services experience unintended downtime. Interactive timeline views map renewal deadlines and calculate historical acquisition costs against annual operating expenses to clarify portfolio valuations. Built-in monitoring tools ping endpoints to record response latencies, HTTP status codes, and server availability metrics for every registered address. Audit logs preserve historical snapshots of DNS modifications, WHOIS adjustments, and registrar migrations to simplify infrastructure troubleshooting across teams. Integrated tags and resource associations organize personal blogs, client projects, and staging environments into isolated workspaces with role-based permissions and two-factor authentication. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Talkyard combines five discussion formats in one platform: StackOverflow-style Q&A with accepted answers, Reddit-like upvote sorting for ideas, threaded forums, real-time chat channels, and embeddable blog comments. Running separate tools for each conversation type fragments community knowledge across disconnected systems, but Talkyard keeps it all searchable in one place. Question askers mark accepted answers, and community voting surfaces the best solutions for future visitors. Idea topics sort by upvotes for crowdsourced feedback prioritization and product decisions. Chat channels handle real-time day-to-day conversation, while forum threads preserve important discussions that need to remain findable months later. The embedding capability goes beyond blog comments: entire Talkyard forums can live inside iframes on your existing website with automatic deep-linking and iframe auto-resizing, adding community discussion to any page without rebuilding your site. Docker Compose containers run with dropped capabilities, no-new-privileges enforcement, non-root processes, health checks, and automatic log rotation. Multi-site hosting serves multiple communities from one installation with isolated databases and separate domains. Automated upgrades pull new images and restart services without intervention. ElasticSearch indexes every discussion format for instant full-text search. The Scala backend with TypeScript frontend stores data in PostgreSQL with automatic Let's Encrypt HTTPS. Runs on a RepoCloud VPS with guaranteed CPU, RAM, SSD, root SSH, and browser console. AGPL licensed.

Instead of scattering provider credentials and vendor-specific SDK logic across dozens of microservices, engineering teams route every LLM call through GoModel, an open-source AI gateway that unifies 34 model providers behind OpenAI-compatible and Anthropic-compatible endpoints. Pointing existing OpenAI or Anthropic SDKs at the gateway unlocks chat completions, the Responses API, Anthropic Messages, embeddings, batch jobs, and realtime audio across OpenAI, Anthropic, Gemini, Bedrock, Azure, Groq, DeepSeek, Ollama, and vLLM. Platform operators publish virtual model aliases that distribute traffic via weighted round-robin or lowest-cost routing while rotating multiple API keys per provider and failing over through circuit breakers during upstream outages. Sticky session routing keeps multi-turn agent conversations on the same target to preserve warm prompt caches, while exact-match and vector semantic caching via Qdrant, pgvector, Pinecone, or Weaviate cut duplicate token costs. Versioned workflows and pre-dispatch guardrails enforce prompt injection rules, rate limits, and hard USD spend budgets across hierarchical tenant user paths before requests are dispatched. The built-in admin dashboard offers live audit logs, per-tenant cost analytics, LiteLLM key migration, an interactive request playground, Model Context Protocol tool aggregation, and OpenTelemetry and Prometheus metrics. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Plan multi-day expeditions, map custom waypoints, and coordinate shared group travel itineraries with TRIP, a private self-hosted journey management platform free from commercial tracking. Travelers can drop custom pins across global topographic or satellite maps, tagging locations with categories, visit durations, cost estimates, accessibility notes, and pet-friendly attributes. The visual trip builder organizes individual stops into ordered daily schedules, helping you calculate travel intervals and rearrange destination sequences using intuitive drag-and-drop tools. You can attach reference photos, booking confirmations, external links, and packing checklists directly to each itinerary milestone. Shared workspace controls enable travel companions to collaborate on upcoming road trips, leave comments on specific attractions, and coordinate shared responsibilities in real time. Dynamic filtering lets you isolate culinary destinations, outdoor hikes, or cultural landmarks by budget and travel style. Offline caching ensures your navigational routes and saved coordinates remain accessible in remote backcountry areas with spotty cellular coverage. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

OpenCode Manager is a mobile-first command center for AI coding agents. Install the PWA on your phone or tablet and you get real-time streaming chat, multi-repository Git operations, and scheduled automation right in your pocket. Git integration handles SSH-authenticated repo cloning, worktree management, unified diffs, and branch operations across all your projects in one dashboard. Chat with coding agents through Server-Sent Events streaming that supports slash commands, @-mentions for files, Plan and Build modes, and Mermaid diagram rendering for architecture discussions. Schedule reusable prompts to run against any repository on intervals or cron expressions, with each run tracking history and linking to sessions so you can pick up exactly where automation left off. MCP server configuration adds local and remote HTTP servers with OAuth support, plugging into the broader Model Context Protocol ecosystem. A dedicated assistant workspace provides an isolated AI environment with auto-provisioned skills for managing schedules, notifications, and settings. Multiple AI providers are supported including Anthropic, GitHub Copilot, and OpenAI-compatible services, each configurable with custom system prompts and granular tool permissions. Push notifications alert you to session events, agent questions, errors, and task completions across all managed repositories.

Type a sentence like 'draw a seaside lighthouse under moonlight, with a small sailboat and stars' and Draw Agent Studio sketches it on a live canvas you can then keep editing by chat. Follow-up messages move objects, change colors, delete elements, and undo or redo steps, so refining a diagram becomes a conversation instead of a wrestling match with shape handles. The same canvas accepts direct manual work: select and drag shapes, draw freehand with the pen, or drop text onto the page to finish details the model missed. Researchers and writers use it to build flowcharts from a paragraph of method notes, grouping stages, adding quality checks and feedback loops, and restructuring sections on request. Canvases save automatically as you work, and finished pieces export as PNG, JPG, WebP, or SVG images, or as editable Excalidraw files for further hand editing elsewhere. You bring your own model connection, choosing OpenAI, Claude, Gemini, Azure OpenAI, Ark, DeepSeek, Kimi, Groq, OpenRouter, Bedrock, Vertex AI, or a local Ollama or OpenAI-compatible endpoint. A built-in connection test sends a real image and verifies recognition and tool calling before you save, and your API keys stay encrypted on the server rather than in the browser. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

MyCompany runs the whole back office of a small business, sales, stock, production, invoices, projects, payroll, and the shop till, as one application sharing one database. A lead arrives and moves across a kanban board with calls and emails logged on its card, then becomes a sales order and an invoice without retyping a single field. Purchasing raises supplier orders, receives goods into the right warehouse, and watches stock move between locations with full movement history, reservations, lots, and serial numbers. Manufacturing plans production orders from bills of materials with operations and work centers, tracking the materials actually consumed and what each finished batch cost. Projects track tasks and time with supervisor timesheets, HR keeps employee records, hourly rates, and payslips, and the retail point of sale handles barcodes, payments, register sessions, and discounts. Because every module reads and writes the same records, the invoice knows what the warehouse shipped and the project knows what the customer was billed. When your business outgrows a standard screen, customizations live in separate extension modules, so vendor updates never collide with the workflows you adapted. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Plain-text recipes in, a phone-friendly recipe site out: CookCLI reads Cooklang files and serves them with scaling, search, shopping lists, meal plans, and pantry tracking. Write ingredients, cookware, and timers inline. Open any recipe from a phone or laptop on your network. Change the serving count and the quantities recalculate. Search by ingredient or by text. Plan a week in a .menu file and get one shopping list, merged across recipes, grouped by store aisle from your own aisle configuration, with pantry items already subtracted. The pantry file holds quantities, expiry dates, and low-stock thresholds. Ask which items are depleted or expiring, or which dishes you can cook right now, near matches included. In the terminal, print any recipe as Cooklang, JSON, or Markdown, run template-driven reports, and let a doctor command check your files. Import a recipe from a web page with an OpenAI API key. Switch on sign-in so everyone can browse but only signed-in users can edit recipes, the pantry, or the shopping list. A documented HTTP API feeds other tools. The whole collection also builds into a static website. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Behind one admin panel, DefGuard runs a WireGuard VPN, an identity provider, and multi-factor authentication, so every person and device proves who they are before reaching your private network. Administrators define VPN locations, assign which users and groups may enter each one, and enforce firewall rules that allow or deny traffic per location, with changes applied to gateways in real time. People enroll remotely through a guided self-service flow, register their own laptops and phones, and connect with desktop and mobile clients that show live connection statistics. Sign-in goes well beyond passwords, because the built-in OpenID Connect provider gives internal tools single sign-on, while TOTP codes, WebAuthn and FIDO2 keys, email tokens, and mobile biometrics gate each connection. Directory teams sync accounts from LDAP and Active Directory, or federate sign-in through Google, Microsoft, and custom OpenID providers, instead of maintaining a separate user list. Every authentication, enrollment, and policy change lands in a searchable activity log, and webhooks plus a REST API let surrounding systems react to access events automatically. Gateways keep enforcing access from a local cache when the control plane is unreachable, and several gateways can front the same location for failover. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Overleaf locks its best collaboration tools behind a paid server license, and AyakaLeaf Pro is the open-source edition that hands them to your own server instead. You get the familiar online LaTeX editor, with several people typing in the same document at once, but compilation runs in an isolated Docker sandbox with a full TeX Live image, so a runaway document cannot take the service down and compile times are yours to set. Reviewers work the way they do in a word processor: track changes, comment in the review panel, and roll back through full project history with restore and download. Projects stay connected to the rest of your workflow through two-way sync with GitHub, GitLab, Gitea, and Dropbox, a git-bridge for clone, pull, and push, and reference managers through Zotero and Mendeley with searchable bibliography entries. A template gallery lets you publish house styles for your lab or department, the symbol palette inserts math notation in one click, and an AI chat assistant plus a compile-error assistant help inside the editor, while an MCP server lets external AI agents edit and compile too. Administrators get SSO through LDAP, SAML, or OAuth, domain-limited self-registration, and a panel for users and projects. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Certificate lifetimes are collapsing toward 47 days, which turns TLS from a yearly chore into a weekly one, and CertMate is the control plane that makes that schedule boring. It issues and renews certificates from Let's Encrypt, ZeroSSL, Google Trust Services, Actalis, DigiCert, SSL.com, Sectigo, or your own private CA, validating by DNS-01 through 29 DNS providers, HTTP-01, or a CSR whose private key never leaves the device. Renewals run automatically, earlier when a certificate's life is short or the CA moves the date through ARI, and deploy hooks push each renewed certificate where it is actually served, then probe the live endpoint to prove the new certificate answers. Discovery watches hosts and certificate transparency logs for certificates you did not issue, folding them into one inventory of what is served where and when it expires. Certificates rest on local disk or in Azure Key Vault, AWS Secrets Manager, HashiCorp Vault, Infisical, or S3 storage, with encrypted backups copied off-site. Its built-in CA issues client certificates for mTLS with OCSP and CRL, and can serve ACME itself, so certbot, lego, acme.sh, and cert-manager get internal certificates under EAB rules you define. Every action lands in a tamper-evident, hash-chained audit trail you can export and verify independently. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

No external database cluster to babysit, no proprietary cloud lock-in, and no bloated workspace hierarchy: Jotty stores every note, checklist, and Kanban board as plain Markdown and JSON files inside a single folder on your server. Need a quick grocery list with nested categories, progress bars, and drag-and-drop reordering? Spin one up in seconds, or flip any list into a multi-column Kanban project board with custom statuses, due-date calendar views, and a built-in time tracker. Write technical documentation in a TipTap-powered WYSIWYG and Markdown editor featuring syntax-highlighted code blocks, GitHub-flavored callouts, embedded Draw.io and Excalidraw diagrams, and OpenPGP client-side encryption for sensitive records. Connect ideas across your workspace using Obsidian-compatible wikilinks, inline mention suggestions, backlinks, and an interactive 2D and 3D knowledge graph that maps relationships between tasks and notes. Share individual notes or live Kanban boards publicly via customizable read-only links, or start the optional Model Context Protocol (MCP) companion container so AI assistants like Claude and Cursor can query your notes and check off items through your scoped REST API key. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Duckle compiles visual data integration pipelines into vectorized analytical SQL executed on an embedded columnar engine, eliminating the overhead and cloud egress costs of traditional ETL infrastructure. Engineers can construct data pipelines on a drag-and-drop canvas, connecting hundreds of data sources spanning relational databases, cloud object storage, streaming event buses, vector databases, and SaaS application programming interfaces. An interactive mapping editor enables complex joins between primary data inputs and lookup streams with typed transform expressions and live sample inspections. Built-in transformation blocks execute change data capture, slowly changing dimensions, aggregation rollups, and integrated dbt models with zero row-based metering or cloud egress fees. Teams schedule headless production executions through a dedicated web console equipped with role-based access management, execution audit trails, and automated failure alerts dispatched to webhook endpoints. Embedded Model Context Protocol capabilities allow AI coding assistants to validate schema configurations, inspect execution logs, and trigger batch workflows directly through conversational commands. Workspaces store entire pipeline definitions as individual files in version control, ensuring reproducible deployments across staging and production environments. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your net worth is scattered across banks, brokers, a pension, and a mortgage, and no single screen shows all of it at once. Aurelio Finance gathers those pieces on your own server: record each institution's cash and holdings as dated situations, then let later transactions roll them forward so today's balance always traces back to a photograph of what you held and the events after it. Every position is priced from the market with its cost basis, gain, and dividends, while the look through view opens your ETFs and funds to show real exposure by country, sector, company, and currency, so overlapping funds stop hiding concentration. Recurring investment plans, homes and other real assets, and the loans against them sit beside income, expenses, and your savings rate, and each financial goal shows the return it needs to be reached. When you want a second opinion, Ask Aurelio reads your own records, can search the web, and proposes changes as cards you confirm or reject, never silently editing your data. Its analysis mode goes further, letting an analyst and a confidant argue over your portfolio before a synthesis tells you what to look at first, and surviving ideas land on a watchlist that your totals never count. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

PdfDing turns a scattered folder of PDFs into a proper library you can read, annotate, sign, and share from any browser. The viewer remembers exactly where you stopped in every document, so a manual opened on your desktop resumes mid-page on your phone, and progress bars in the library show how far you have read at a glance. Workspaces and collections group related documents, multi-level tags classify them, and starring, archiving, and bulk actions keep even a large archive tidy. Inside the viewer you can add text, highlights, and freehand drawings, then review and export your highlights and comments from dedicated sections and attach Markdown notes to a document. A signature you create once is stored on your server and waits for you on every device, ready to drop onto contracts and forms. Sharing a collection or a single PDF takes a link or a QR code, with optional access control over who can open it and for how long. Accounts are protected by OIDC single sign-on and two-factor authentication with TOTP or WebAuthn, and dark mode, an inverted color mode, and multiple layouts keep long reading sessions comfortable. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PRISM consolidates passive reconnaissance, credential leak detection, and network asset mapping into a unified operational dashboard to replace fragmented command-line security tools. Analysts can launch simultaneous multi-source investigations against domains, internet protocol addresses, email mailboxes, phone numbers, and online handles to uncover domain registrations, open network ports, cryptographic certificates, and historical web archives. The platform interrogates threat feeds and leak repositories to expose credential leaks, dark web mirrors, and email routing anomalies with automated SMTP mailbox verification. Cross-platform identity engines crawl thousands of social networks and public registries to correlate aliases, discover leaked commit identities, and trace digital footprints across the web. Discovered assets render into interactive entity relationship graphs alongside geographic internet protocol maps to help investigators visualize infrastructure clusters and ownership links. An automated operational security calculator evaluates exposure vulnerabilities across identity, web, and infrastructure vectors, producing an aggregated risk score with granular hardening recommendations. Scheduled watchlists continually monitor target infrastructure, dispatching webhook notifications to chat channels whenever new subdomains, ports, or credential leaks appear. Investigators can export comprehensive audit dossiers as self-contained HTML files, styled PDF documents, or structured spreadsheets. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.