Point your RustDesk clients at CortenDesk and the bare open-source server turns into a managed fleet console with a real address book, real access control, and a remote client that lives in the browser. One container runs the ID server, the relay, and the console together, and existing key pairs and device IDs move in unchanged, so migration is a hostname change rather than a rebuild. The fleet view shows live presence, platform, aliases, owners, and last-seen for every machine, organized into folders that double as the unit of access control. People see only their own devices plus the groups granted to them, and the same scoping is enforced in the RustDesk client API, not just the web pages. Policies push client settings over the heartbeat, covering permissions, password rules, and capture behavior, and enforced policies revert local changes automatically. Five audit logs record connections, file transfers, sign-ins, security alarms, and console actions, all filterable and exportable to CSV. When a browser is all you have, the built-in web client views and controls machines with file transfer, clipboard, audio, and multi-monitor switching, no installer required. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Where Miniflux strips reading down, FreshRSS gives you knobs - the feature-rich pole of self-hosted RSS, comfortable with thousands of feeds. It's a multi-user PHP aggregator (host family and friends on one instance, with an anonymous reading mode) with the reading workflow refined over a decade: favorites, custom tags, powerful filter and search queries, three reading views, and statistics that reveal each site's publishing frequency - useful for pruning subscriptions. Two properties make it the standard choice. First, the Google Reader-compatible API (plus a Fever API) syncs with virtually every serious RSS client - Reeder, NetNewsWire, ReadYou, FeedMe, Fluent Reader - so your phone reads from your server. Second, native WebSub support means compatible sources (WordPress, Blogger, Medium, Friendica) push new articles instantly instead of waiting for polling. A 50+ extension ecosystem adds what truncated feeds omit - full-text content fetching, reading-time estimates, trending views, auto-unsubscribe for dead feeds - alongside community themes and custom CSS. OPML import/export keeps subscriptions portable, a CLI handles administration, and article sharing posts to many services. AGPL-licensed, running on SQLite, MySQL, or PostgreSQL. Feedly Pro's feature set, minus Feedly's subscription and its algorithms.

ScribeCrate is a self-hosted speech-to-text API that turns recordings into transcripts, subtitles, and English translations on your own server. It speaks the OpenAI Whisper API fluently: point any compatible client at your server's address, swap in your API key, and uploads come back as text. Ask for plain text, JSON with timestamps, or ready-to-publish SRT and WebVTT subtitle files, and for long recordings the segments can stream back over SSE as they are decoded. Turn on speaker diarization and every segment is labeled with who is speaking, which makes interview and meeting transcripts readable at a glance. Choose the model that fits the job, from tiny for quick drafts to large-v3 for maximum accuracy, and run it on a modest CPU, a Raspberry Pi class ARM board, or an NVIDIA GPU. Almost any recording works: MP3, M4A, WAV, WebM, OGG, and FLAC are all accepted, and with models cached in advance the server keeps transcribing with no internet connection at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Only the person holding the link can open what you share with SkySend, a self-hosted file and note sharing service that encrypts everything in the browser before it leaves your device. Sending a contract? Drop in the file, several files, or a whole folder, and share the link. Need documents from a client? Send an upload link instead, and whatever comes back is encrypted for you alone. Handing over a password or an SSH key? Write it into a note that burns after reading. Notes can mix text, Markdown, generated passwords, and highlighted code in a single page. Every share can expire by time, stop after a set number of downloads or views, and carry an optional password as a second lock. The command-line client uploads, downloads, and reads notes with the same encryption, and its full-screen mode shows each link as a QR code. No accounts are needed: My Links keeps your shares in the browser, and optional OIDC sign-in limits who may create them. Encrypted uploads sit on local disk or any S3-compatible bucket, and the interface offers 13 languages and three themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

For self-hosters who want Git-driven container deployments without surrendering control of their existing reverse proxy or host networking, Dockerizalo provides a lightweight web platform that clones repositories, builds Docker images, and manages running services from a single dashboard. Point an application entry at any Git-compatible repository or public container registry image, configure custom build paths, and let the platform build and launch the container directly on your host Docker engine. A built-in template library accelerates database provisioning with pre-configured variables, networks, and persistent storage mounts. Through the web interface, operators manage environment secrets, bind-mounted volumes, custom Docker labels, and published TCP or UDP ports while coexisting peacefully alongside Caddy, Nginx, or Traefik setups. Per-application HTTP webhook triggers let teams automate continuous delivery from GitHub, GitLab, Gitea, or custom CI pipelines on every push event. Real-time paginated build and runtime container log streams prevent memory exhaustion on chatty APIs while keeping every deployment event visible. Configurable image retention policies automatically prune older tags and remove dangling images after each rollout so disk space stays clean. Multi-user account management allows homelab administrators to invite collaborators to the dashboard without sharing a single root credential. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Your coding agents finish a session, close the laptop, and forget everything; Pad is where the project remembers. It holds the tasks, plans, bugs, ideas, and decisions in one workspace that you drive from a browser while your agents drive it from the terminal, so the next session, human or machine, picks up exactly where the last one stopped. You plan on boards, lists, and tables with drag-and-drop status columns, rich item pages, comment threads, and a dashboard that answers what needs attention and what to do next. Your agents read the queue, claim items, leave checkpoints, link their pull requests, and mark work fixed with the fixing PR attached. Conventions teach them the house rules once, like running tests before calling a task done, and playbooks hand them repeatable multi-step workflows they can invoke by name. Every change is versioned with its author, a person or a named agent, and new items appear in the browser the moment an agent creates them in the terminal. The same workspace is reachable three ways: the web interface, the pad CLI, and a bundled MCP server with a natural-language skill that plugs into Claude Code, Cursor, Codex, Windsurf, OpenCode, Copilot, Amazon Q, and Junie. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Database administrators and backend engineers managing production PostgreSQL, MySQL, MariaDB, MongoDB, and Redis instances use Velld to centralize scheduled backups, storage retention, and disaster recovery in a single self-hosted control plane. You can register multiple database connections across staging and production environments, test connectivity with one click, and route traffic through encrypted SSH bastion tunnels using password or private-key authentication to reach isolated private subnets. Flexible cron schedules and preset hourly, daily, weekly, or monthly intervals automate snapshot creation, while configurable retention policies purge expired archives from local volumes or S3-compatible object storage buckets after seven, fourteen, thirty, or ninety days. An integrated backup comparison tool renders split or unified line-by-line diffs between any two snapshots so you can inspect schema changes or data drift before triggering a guided database restore or downloading compressed dump files. The real-time monitoring dashboard tracks backup completion rates, total storage consumption, and execution histories alongside automated email and webhook alerts that notify your team immediately if a scheduled job fails. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Notes, tasks, and habits in one app, synced only to a server you run yourself. Notes are written in Markdown and render right in the list, so reading one costs no clicks. Tasks get a planned date and time, a duration, a checklist, and a timer. Weekly statistics show what got done and how long it took. Habits are measured by how overdue they are, not by an unbroken streak. A habit on a ten day interval that is two days late reads 120 percent. Charts track progress toward the target for today, this week, this month, this quarter, and this year. They also list the ten longest streaks and what you finish on each weekday. Categories and priorities span all three item types. Search reads note text and checklist items, not only titles. Filter by date, status, or how overdue a habit is, then sort with eleven keys. Pick from 26 themes in dark and light mode and 20 languages, with full keyboard and screen reader support. Import and export JSON, YAML, TSV, or Markdown, or bring in a Google Keep Takeout ZIP. Native apps for Windows, Linux, macOS, iOS, and Android sync with your server. The single-user Docker server also serves an OpenAPI spec, a Scalar UI, and a log page behind the same login. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

LinkBreeze is a self-hosted link-in-bio platform that lets you publish unlimited, fully themed link pages from your own server instead of renting one by the month. A guided setup wizard covers the admin credentials, profile, and theme, then a floating phone-frame preview refreshes as you edit while autosave stores your changes. Each page gets its own slug, theme, SEO tags, QR code, and analytics, so one install can serve a personal profile, a band, and a shop. Eleven built-in themes cover Aurora, Glassmorphism, Neon Cyberpunk, and Terminal Mono, backed by a token customizer for fonts, backgrounds, card styles, and raw CSS. Links pull in favicons automatically, accept thumbnails, and can be scheduled to appear and vanish on set dates, while embed widgets drop in YouTube, Spotify, SoundCloud, Vimeo, and Bandcamp players. A migration wizard imports profiles from Linktree, Bento, Hopp.bio, LittleLink, or an HTML or JSON export. Visitors can subscribe with an email address that you export to CSV, save your page as a vCard contact, or scan a QR code that downloads as SVG or PNG. Cookieless analytics track views, clicks, referrers, devices, and countries with hashed visitor IPs, and Plausible, Umami, Matomo, or Google Analytics can be added with one paste. The admin panel supports TOTP two-factor authentication, a UTM builder, JSON backup and restore, and seven interface languages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Your team's group chat could have a colleague who has read every email, ticket, and document, remembers all of it, and answers in seconds; MindRoom puts AI agents like that into your chat rooms as full participants. Each agent is a real user on the open Matrix protocol, so you talk to it in MindRoom Chat on web or mobile, in any other Matrix client, or through bridges in Slack, Telegram, WhatsApp, and Discord. Give every agent its own model: a local model for private rooms, a frontier model for hard coding problems, and switch per room or thread whenever the work changes. Agents connect to more than 100 tools, including Gmail, calendars, GitHub, Google Drive, Home Assistant, and any MCP server, and they search your own documents and knowledge bases for answers with sources. Memory persists across conversations and platforms, so an agent remembers people, preferences, and project context months later and can turn repeated work into reusable skills. Before an agent sends an email or runs a command, an approval card shows exactly what will happen; you tap once to allow it, and sandboxed workers keep executed code away from your credentials. Schedule morning briefings, silent inbox checks, and recurring digests in plain language, or wake an agent from any other system with a single HTTP request. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Your team chat can be one executable on your own server: Campfire Rust runs rooms, direct messages, attachments, and search as a single binary that replaces the whole Ruby, Puma, Redis, Resque, and Thruster stack. Create rooms with access controls for projects, departments, or a private board discussion, and keep direct messages beside them for quick questions. File attachments arrive with previews, mentions pull the right person into a thread, and search finds the decision someone made months ago. Web Push notifications reach browsers and phones, so a quiet room still finds its people when it matters. Chatbots connect through a simple HTTP API for sending and receiving messages and attachments, which makes Campfire a home for build alerts, deploy notices, and support pings. Existing Campfire installs upgrade in place because the Rust binary reads the same SQLite database, storage layout, and signed cookies, with no data migration and no mass sign-out. Automatic TLS with Let's Encrypt certificates, HTTP/2, and Action Cable-compatible WebSockets are built in, and the whole system works on air-gapped networks that never touch the internet. Run it as your primary chat, as a backup for the day a hosted service goes down, or as a walled garden for executives and events. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Mail for your own domain stays on your own server with mailez, a self-hosted stack that delivers over SMTP, IMAP, and POP3 and adds a webmail, calendar, contacts, file storage, and an admin console, all started with a single command. Readers get a draggable three-pane webmail that updates itself over a push channel, merges replies into conversations, folds quoted history, and searches with from:, to:, has:attachment, and date terms. Keyboard shortcuts, a command palette, snooze, scheduled send, undo for bulk moves, and quick reply keep daily mail fast, and the interface installs as an offline-capable app with light and dark themes. Privacy-minded users add PGP signing and encryption, two-factor login, and remote-image blocking, and write server-side rules in a Sieve editor. Calendar, contacts, and Drive sit beside mail, with ICS subscriptions, vCard import, CardDAV and CalDAV sync, and share links. Phones and desktop clients configure themselves through autoconfig. Administrators manage domains, mailboxes, aliases, relays, and external mailbox fetching in one console, generate DKIM keys with a click, and follow a DNS wizard and a health page that verify MX, SPF, DMARC, DKIM, blocklists, and MTA-STS. Audit logs and role-based access keep shared servers accountable. The free community edition runs on a single node, while archiving, DLP, LDAP, ActiveSync, and AI features belong to the paid enterprise edition. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Maintenant replaces three to five separate monitoring tools with a single Go binary that consolidates container discovery, endpoint monitoring, SSL tracking, resource metrics, and public status pages without requiring any external database. The embedded Vue 3 frontend serves on port 8080 immediately after deployment, auto-discovering Docker containers and Kubernetes pods through direct socket and API access without configuration. HTTP and TCP endpoint monitoring validates availability with configurable intervals, while TLS certificate tracking alerts before expiration across all monitored domains. Resource metrics collect CPU, RAM, network throughput, and disk usage per container with real-time Server-Sent Events streaming to the dashboard. Heartbeat and cron monitoring accepts pings from external scheduled jobs, triggering alerts on missed check-ins via webhook callbacks and Discord notifications. The built-in alert engine supports escalation rules and notification batching. Public status pages expose component health to end users without authentication, customizable per monitored service. Network security insights analyze exposed ports, container privilege levels, and host configuration to produce a posture score. Update intelligence scans OCI registries to detect available container image updates with digest comparison. The REST API with SSE broker enables automation, and the integrated MCP server provides tooling for AI assistant integration. SQLite in WAL mode stores all data with zero operational overhead. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

This is a marketing operations control center that replaces fragmented CRM, outreach, content, and analytics tools with a unified self-hosted interface designed for AI agent-assisted go-to-market teams. The CRM module manages leads through a configurable pipeline funnel with stages from New through Sequenced, Replied, Interested, and Booked, tracking source attribution, industry segments, company size, lead quality scores, and LinkedIn URLs per contact. Outreach sequencing supports email campaigns with pause controls, audit endpoints, suppression workflows, and engagement tracking. The content operations surface provides calendar views, content item management, performance metrics, and approval queues for editorial control. Analytics and KPI dashboards show impressions, engagement, and send volumes over configurable time periods, with optional connectors to Plausible, Google Analytics 4, X, and LinkedIn for cross-platform reporting. The OpenClaw-native agent runtime enables dynamic agent and squad discovery, workspace management, session monitoring, and communications surfaces. Automation scheduling uses cron job templates with OpenClaw-compatible schedule variants including cron expressions, every intervals, and at timestamps. The tech stack combines Next.js 16 App Router with React 19, Tailwind CSS 4, Recharts, and Zustand for state management. Authentication supports session cookies, API keys, and optional Google OAuth with role-based access controls. All state persists locally in SQLite via better-sqlite3 with no required external infrastructure. On RepoCloud, deploy Marketing Dashboard on a dedicated VPS with persistent SQLite storage, root SSH access, and complete control over your marketing operations data, all under the MIT license.

Plan the day in the morning, capture tasks in your own words as they appear, and let every device settle on the same list by evening: that rhythm is what OpenTodo is built around. The Today view opens with a briefing, a daily limit, and morning, afternoon, and evening sections, with time blocking and meetings counted against the day's real capacity. Quick add understands natural language in six languages, a pasted list becomes tasks in one step, and the command bar, inbox processing, email-to-task, and dictation keep capture fast. Projects organize work with sections, boards whose cards carry notes, timelines, sub-projects, and areas, while recurring tasks and sequential projects handle routines and ordered work. Lists can be shared with the people you live and work with, invited by link once the owner account exists. Every device keeps a full copy and works offline; changes are stamped per field and merge cleanly through your server when you reconnect, with history and undo preserving earlier values. CalDAV and calendar feeds connect your calendars, GitHub and GitLab issues flow in, and webhooks plus ntfy, Pushover, and Gotify send notifications out. Scheduled backups go to a folder, S3-compatible storage, or WebDAV, and the whole server is one container around one SQLite file. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Terrapod gives you the Terraform Enterprise control plane on your own Kubernetes cluster, with remote state, run approvals, and policy checks, and no per-resource bill at the end of the month. Point your existing cloud block at it and terraform or tofu keep working unchanged, because Terrapod answers the same backend protocol the CLI already speaks. Workspaces isolate state, variables, and runs per team or environment, with versioned state you can lock, inspect, and roll back. Server-side agent pools execute plans and applies on ephemeral Kubernetes jobs, while CLI-driven runs stay available for local workflows. Approvals gate every apply, and conditional auto-apply only proceeds when a plan adds or updates resources without destroying anything. Label-based RBAC decides who may read, plan, write, or administer each workspace, with OIDC and SAML single sign-on on top. A private registry hosts your own modules and providers with GPG signing, and OPA Rego policy sets enforce rules as mandatory or advisory checks before apply. Drift detection flags infrastructure that wandered from its state, run triggers chain dependent workspaces, and an interactive impact graph shows a plan's blast radius before you approve it. Optional AI review summarizes each plan's changes and risks, and an MCP server lets AI assistants inspect workspaces and runs under the same permissions. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MPL-2.0 licensed.

Created to eliminate the configuration fragmentation plaguing multi-device Homelab setups and small-team infrastructures, NetsGo merges what typically requires three separate tools — a tunnel daemon, a management panel, and a monitoring stack — into a single Go binary that starts with one command and listens on one port. The server exposes HTTP, TCP, and UDP tunnels, a built-in Web console for node management, a REST API for automation, and real-time traffic statistics with per-client bandwidth limiting, all sharing default port 9527 so firewalls and reverse proxies need only a single rule. Version 0.1.11 introduced Client-to-Client P2P tunnels via WebRTC DataChannel with three selectable transport strategies — Server relay, Prefer P2P with automatic fallback, and P2P only — reducing latency for direct connections while maintaining the centralized control plane. The management console displays every connected client's online status, authentication tokens, tunnel configuration, active transport mode, P2P candidate gathering progress, and cumulative byte-level traffic counters updated every second. Unlike frp or rathole which delegate management to external plugins or configuration files, NetsGo provides built-in client key generation, tunnel target migration between nodes, SOCKS5 proxying, IP-whitelist console access, and one-command server upgrades. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache 2.0 licensed.

Oh My CPA gives a CLIProxyAPI gateway a proper control room, where providers, OAuth credentials, client keys, model routing, and the cost of every request are managed and watched from one self-hosted console. You add providers such as Codex, Claude, Gemini, xAI, DeepSeek, Vertex AI, and OpenAI-compatible services, each with credentials, retry and error policies, priority, weight, and an enable switch the gateway actually enforces. OAuth accounts are signed in from the console, with quota window readings, refresh schedules, and per-credential model aliases kept next to the keys they belong to. Client keys can be created, named, and revoked, and those names follow the traffic into request records and filters so you always know which key spent what. The dashboard follows request volume, token throughput, cache hit rate, and cost from the last fifteen minutes out to ninety days, with a year-long token heatmap for the long view. Insights compare keys, models, providers, and credentials against the previous period, while the live routing view shows which credential each request travelled to and whether it was rerouted. Every request stays searchable, with duration, time to first token, token breakdown, and the raw log in a detail drawer. A playground tests any routed model with text and images before your users do. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.